aquaman-proxy 0.14.0 → 0.15.0

package/README.md

@@ -17,7 +17,7 @@ Agent / OpenClaw / Coding Agent              Aquaman Proxy
 │                      │  ~/.aquaman/        │    basic / oauth     │
 │  No credentials.     │  proxy.sock         │                      │
 │  No open ports.      │  (chmod 0o600)      │                      │
-│  Nothing to steal.   │                     │                      │
+│  No keys to read.    │                     │                      │
 └──────────────────────┘                     └──┬──────────┬────────┘
                                                 │          │
                                                 │          ▼
@@ -57,29 +57,52 @@ aquaman daemon &        # start the proxy on ~/.aquaman/proxy.sock
 
 Four layers of protection:
 
-- **Process isolation**: credentials in a separate address space, connected via UDS (`chmod 0o600`)
+- **Process isolation**: credentials live in a separate address space, reached over a Unix socket (`chmod 0o600`) or a token-gated loopback listener (see below)
 - **Service allowlisting**: `proxiedServices` controls which APIs the agent can reach
 - **Request policies**: method + path rules per service, checked *before* credential injection ([details in the root README](https://github.com/tech4242/aquaman#request-policies))
+- **Broker scope** (v0.15.0+): the one endpoint that returns a credential *value* serves only refs you declared, and never runs on an OpenClaw-hosted proxy
 - **Audit trail**: SHA-256 hash-chained logs of every credential use
 
+### Transports and access control
+
+| Path | Transport | Access control |
+|---|---|---|
+| Coding agents, any client that can dial a socket | Unix socket `~/.aquaman/proxy.sock` | File permissions (`0600`): only processes running as you |
+| Hermes (v0.13.0+), OpenClaw model and Telegram traffic (v0.15.0+) | Loopback TCP `127.0.0.1:<port>` | Per-install token, constant-time check, loopback bind |
+
+Hermes and OpenClaw each build their own HTTP client and can't dial a socket, so they use the listener. Everything else uses the socket.
+
+The token is a capability to reach the local proxy, not a credential. Generated per install, stored in `~/.aquaman/config.yaml` (`0600`), sent by the host as its provider api key. The proxy checks it, strips it, injects your real key.
+
+The Telegram Bot API has no auth header, so there the token travels in the `/bot<TOKEN>` path segment instead. The proxy accepts it there, strips it before the policy check and the request log, and puts the real bot token back at the same position, which is what keeps `/file/bot<TOKEN>/<path>` downloads working.
+
+Trade-off: any local process can reach a loopback port, including other users, where the socket's `0600` shuts them out. The token is the gate there, so the listener stays off until `aquaman hermes setup` or `aquaman openclaw setup` turns it on.
+
 **Bring your own vault.** Aquaman has no house vault. It injects credentials from the secret store you already run: Keychain, 1Password, HashiCorp Vault, Bitwarden, KeePassXC, systemd-creds, or encrypted-file. No new store to adopt, no migration.
 
 ## Broker endpoint (v0.12.0+)
 
-`POST /broker/resolve` over the UDS - used by `aquaman-coder` to materialize credentials per tool call. Body:
+`POST /broker/resolve` is the one endpoint that returns a credential *value*. `aquaman-coder` uses it to materialize credentials per tool call, as does the Hermes secret source. Body:
 
 ```json
 {"service":"anthropic","key":"api_key","ttl_seconds":60}
 ```
 
-Response: `{"value":"...","expires_at":"2026-05-20T12:34:56Z"}`. Validates service/key names against safe regexes; 4 KB body cap; policy is applied before resolution.
+Response: `{"value":"...","expires_at":"2026-05-20T12:34:56Z"}`. Validates service/key names against safe regexes; 4 KB body cap.
+
+Scoped since v0.15.0, because it hands out values rather than injecting them:
+
+- Served by `aquaman daemon` only. A proxy started by the OpenClaw plugin answers `404 broker_disabled`: that path never materializes a credential.
+- Only refs you declared resolve: the `env` refs in `~/.aquaman/projects.yaml`, plus anything added with `aquaman broker allow`. Everything else is `404 broker_ref_not_declared`, decided before the vault is consulted, so a refusal reveals nothing about what you store.
+- Over the loopback listener the LLM provider keys are never materialized, declared or not (`404 broker_ref_isolated`). They stay on the proxy path.
+- Declaring a ref is an explicit opt-in to handing that value to processes running as you. Refusals and resolves are both audited.
 
 ## Documentation
 
 - **[Root README](https://github.com/tech4242/aquaman#readme)**: value prop, three-path Quick Start, security model
 - **[`docs/PACKAGES.md`](../../docs/PACKAGES.md)**: package boundary policy
 - **[`docs/compliance/`](../../docs/compliance/)**: MITRE ATLAS + NIST SP 800-53 mappings
-- **[`CLAUDE.md`](../../CLAUDE.md)**: architecture notes
+- **[`AGENTS.md`](../../AGENTS.md)**: architecture notes
 
 ## License
 

package/dist/broker-scope.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Credential-broker scoping (v0.15.0).
+ *
+ * `POST /broker/resolve` is the one endpoint where the proxy hands a
+ * credential VALUE to its caller instead of injecting it on egress. Through
+ * v0.14.x it served any service/key in the vault, in every mode, to any
+ * process that could reach the socket — including an OpenClaw agent's exec
+ * tool (`curl --unix-socket ~/.aquaman/proxy.sock ...`), which is the ClawScan
+ * finding against aquaman-plugin 0.14.x. The rules now:
+ *
+ *   1. OpenClaw-hosted proxies (`openclaw plugin-mode`, `openclaw start`) are
+ *      built without a scope, so the broker is off: the OpenClaw path never
+ *      materializes a credential.
+ *   2. `aquaman daemon` materializes only refs the user DECLARED for
+ *      materialization: the env refs in projects.yaml (coding agents) plus
+ *      `broker.allowedRefs` in config.yaml (e.g. Hermes secret-source
+ *      bindings). Everything else is refused.
+ *   3. Over the loopback listener, the LLM-provider services Hermes reaches
+ *      through the proxy are never materialized, declared or not. They stay
+ *      on the proxy path. This is the same two-tier rule the Hermes client
+ *      enforces, but checked server-side.
+ *
+ * The scope is checked before any vault lookup, so a refusal says nothing
+ * about what the vault holds. Declared refs are re-read when projects.yaml or
+ * config.yaml changes (mtime-cached), so `aquaman coder project add` and
+ * `aquaman broker allow` take effect without restarting the daemon.
+ *
+ * Threat model, honestly stated: every process running as the same user can
+ * reach the socket and can edit ~/.aquaman/*. Declaring a ref is an explicit
+ * opt-in to handing that credential to same-user processes. The broker scope
+ * keeps undeclared credentials, and the ones the proxy isolates for agent
+ * hosts, out of reach. It is not a boundary between processes of one user.
+ */
+export declare function parseAquamanRef(ref: string): {
+    service: string;
+    key: string;
+} | null;
+export declare function formatAquamanRef(service: string, key: string): string;
+/** Default location of the coding-agent project map (honors AQUAMAN_CONFIG_DIR). */
+export declare function defaultProjectsPath(): string;
+export interface DeclaredRefsResult {
+    /** Set of `aquaman://service/key` strings. */
+    refs: Set<string>;
+    /** Parse problem, if the file exists but can't be read as a project map. Fails closed. */
+    error?: string;
+}
+/**
+ * Collect every `aquaman://` ref declared in a projects.yaml env map. A
+ * missing file declares nothing. A malformed file declares nothing and
+ * reports why, so the broker fails closed instead of guessing.
+ */
+export declare function loadProjectRefs(projectsPath?: string): DeclaredRefsResult;
+/**
+ * Read `broker.allowedRefs` straight from a config.yaml file (not via
+ * loadConfig, which would also apply env overrides and defaults). Missing
+ * file or key declares nothing. A malformed file declares nothing and says why.
+ */
+export declare function loadConfigAllowedRefs(configPath: string): DeclaredRefsResult;
+export type BrokerCaller = 'uds' | 'loopback';
+export type BrokerDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    code: 'broker_ref_not_declared' | 'broker_ref_isolated';
+    reason: string;
+    fix: string;
+};
+export interface BrokerScopeOptions {
+    /** projects.yaml to read declared refs from. Default: `<configDir>/projects.yaml`. */
+    projectsPath?: string;
+    /** config.yaml whose `broker.allowedRefs` are declared refs (re-read on change). */
+    configPath?: string;
+    /** Additional static declared refs. Invalid entries are ignored. */
+    allowedRefs?: readonly string[];
+    /** Services never materialized over the loopback listener (the Hermes LLM-provider tier). */
+    loopbackDeniedServices?: readonly string[];
+}
+export interface BrokerScope {
+    check(service: string, key: string, caller: BrokerCaller): BrokerDecision;
+    /** Every currently declared ref, with where it came from. For `aquaman broker list` and startup logs. */
+    declared(): {
+        ref: string;
+        source: 'projects.yaml' | 'config.yaml';
+    }[];
+    /** Parse problems with the declaring files, if any (the broker fails closed for their refs). */
+    declarationError(): string | undefined;
+}
+export declare function createBrokerScope(opts?: BrokerScopeOptions): BrokerScope;
+//# sourceMappingURL=broker-scope.d.ts.map

package/dist/broker-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-scope.d.ts","sourceRoot":"","sources":["../src/broker-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAUH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGpF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,MAAM,WAAW,kBAAkB;IACjC,8CAA8C;IAC9C,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,YAAY,GAAE,MAA8B,GAAG,kBAAkB,CA4BhG;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAoB5E;AAqBD,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC;AAE9C,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,yBAAyB,GAAG,qBAAqB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7G,MAAM,WAAW,kBAAkB;IACjC,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,6FAA6F;IAC7F,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,cAAc,CAAC;IAC1E,yGAAyG;IACzG,QAAQ,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAAA;KAAE,EAAE,CAAC;IACvE,gGAAgG;IAChG,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,kBAAuB,GAAG,WAAW,CAmD5E"}

package/dist/broker-scope.js

@@ -0,0 +1,186 @@
+/**
+ * Credential-broker scoping (v0.15.0).
+ *
+ * `POST /broker/resolve` is the one endpoint where the proxy hands a
+ * credential VALUE to its caller instead of injecting it on egress. Through
+ * v0.14.x it served any service/key in the vault, in every mode, to any
+ * process that could reach the socket — including an OpenClaw agent's exec
+ * tool (`curl --unix-socket ~/.aquaman/proxy.sock ...`), which is the ClawScan
+ * finding against aquaman-plugin 0.14.x. The rules now:
+ *
+ *   1. OpenClaw-hosted proxies (`openclaw plugin-mode`, `openclaw start`) are
+ *      built without a scope, so the broker is off: the OpenClaw path never
+ *      materializes a credential.
+ *   2. `aquaman daemon` materializes only refs the user DECLARED for
+ *      materialization: the env refs in projects.yaml (coding agents) plus
+ *      `broker.allowedRefs` in config.yaml (e.g. Hermes secret-source
+ *      bindings). Everything else is refused.
+ *   3. Over the loopback listener, the LLM-provider services Hermes reaches
+ *      through the proxy are never materialized, declared or not. They stay
+ *      on the proxy path. This is the same two-tier rule the Hermes client
+ *      enforces, but checked server-side.
+ *
+ * The scope is checked before any vault lookup, so a refusal says nothing
+ * about what the vault holds. Declared refs are re-read when projects.yaml or
+ * config.yaml changes (mtime-cached), so `aquaman coder project add` and
+ * `aquaman broker allow` take effect without restarting the daemon.
+ *
+ * Threat model, honestly stated: every process running as the same user can
+ * reach the socket and can edit ~/.aquaman/*. Declaring a ref is an explicit
+ * opt-in to handing that credential to same-user processes. The broker scope
+ * keeps undeclared credentials, and the ones the proxy isolates for agent
+ * hosts, out of reach. It is not a boundary between processes of one user.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { getConfigDir } from './core/utils/config.js';
+/** `aquaman://service/key` — same grammar as the daemon's service/key validation. */
+const AQUAMAN_REF = /^aquaman:\/\/([a-z0-9][a-z0-9._-]*)\/([a-zA-Z0-9][a-zA-Z0-9._-]*)$/;
+export function parseAquamanRef(ref) {
+    const m = AQUAMAN_REF.exec(ref);
+    return m ? { service: m[1], key: m[2] } : null;
+}
+export function formatAquamanRef(service, key) {
+    return `aquaman://${service}/${key}`;
+}
+/** Default location of the coding-agent project map (honors AQUAMAN_CONFIG_DIR). */
+export function defaultProjectsPath() {
+    return path.join(getConfigDir(), 'projects.yaml');
+}
+/**
+ * Collect every `aquaman://` ref declared in a projects.yaml env map. A
+ * missing file declares nothing. A malformed file declares nothing and
+ * reports why, so the broker fails closed instead of guessing.
+ */
+export function loadProjectRefs(projectsPath = defaultProjectsPath()) {
+    let raw;
+    try {
+        raw = fs.readFileSync(projectsPath, 'utf-8');
+    }
+    catch (err) {
+        if (err?.code === 'ENOENT')
+            return { refs: new Set() };
+        return { refs: new Set(), error: `cannot read ${projectsPath}: ${err?.message ?? err}` };
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(raw);
+    }
+    catch (err) {
+        return { refs: new Set(), error: `cannot parse ${projectsPath}: ${err?.message ?? err}` };
+    }
+    const refs = new Set();
+    const projects = parsed && typeof parsed === 'object' ? parsed.projects : undefined;
+    if (!projects || typeof projects !== 'object')
+        return { refs };
+    for (const cfg of Object.values(projects)) {
+        const env = cfg && typeof cfg === 'object' ? cfg.env : undefined;
+        if (!env || typeof env !== 'object')
+            continue;
+        for (const ref of Object.values(env)) {
+            if (typeof ref === 'string' && parseAquamanRef(ref))
+                refs.add(ref);
+        }
+    }
+    return { refs };
+}
+/**
+ * Read `broker.allowedRefs` straight from a config.yaml file (not via
+ * loadConfig, which would also apply env overrides and defaults). Missing
+ * file or key declares nothing. A malformed file declares nothing and says why.
+ */
+export function loadConfigAllowedRefs(configPath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(configPath, 'utf-8');
+    }
+    catch (err) {
+        if (err?.code === 'ENOENT')
+            return { refs: new Set() };
+        return { refs: new Set(), error: `cannot read ${configPath}: ${err?.message ?? err}` };
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(raw);
+    }
+    catch (err) {
+        return { refs: new Set(), error: `cannot parse ${configPath}: ${err?.message ?? err}` };
+    }
+    const list = parsed?.broker?.allowedRefs;
+    const refs = new Set();
+    if (Array.isArray(list)) {
+        for (const ref of list)
+            if (typeof ref === 'string' && parseAquamanRef(ref))
+                refs.add(ref);
+    }
+    return { refs };
+}
+/** Re-load a declared-refs file only when its mtime changes. */
+function mtimeCached(file, load) {
+    let cachedMtimeMs; // undefined = never loaded; null = file absent
+    let cached = { refs: new Set() };
+    return () => {
+        let mtimeMs;
+        try {
+            mtimeMs = fs.statSync(file).mtimeMs;
+        }
+        catch {
+            mtimeMs = null;
+        }
+        if (mtimeMs !== cachedMtimeMs) {
+            cached = mtimeMs === null ? { refs: new Set() } : load(file);
+            cachedMtimeMs = mtimeMs;
+        }
+        return cached;
+    };
+}
+export function createBrokerScope(opts = {}) {
+    const projectRefs = mtimeCached(opts.projectsPath ?? defaultProjectsPath(), loadProjectRefs);
+    const configFileRefs = opts.configPath ? mtimeCached(opts.configPath, loadConfigAllowedRefs) : () => ({ refs: new Set() });
+    const staticRefs = new Set((opts.allowedRefs ?? []).filter(r => typeof r === 'string' && parseAquamanRef(r)));
+    const loopbackDenied = new Set(opts.loopbackDeniedServices ?? []);
+    const configRefs = () => {
+        const fromFile = configFileRefs();
+        return { refs: new Set([...staticRefs, ...fromFile.refs]), error: fromFile.error };
+    };
+    const errors = () => {
+        const e = [projectRefs().error, configRefs().error].filter(Boolean);
+        return e.length ? e.join('; ') : undefined;
+    };
+    return {
+        check(service, key, caller) {
+            const ref = formatAquamanRef(service, key);
+            if (caller === 'loopback' && loopbackDenied.has(service)) {
+                return {
+                    allowed: false,
+                    code: 'broker_ref_isolated',
+                    reason: `${ref} is not materialized over the loopback listener: ${service} keys stay process-isolated on the proxy path`,
+                    fix: `Keep ${service} on the proxy path (base URL + placeholder key in ~/.hermes/.env) and remove the binding from your Hermes secrets config`,
+                };
+            }
+            if (projectRefs().refs.has(ref) || configRefs().refs.has(ref))
+                return { allowed: true };
+            const err = errors();
+            const parseNote = err ? ` (${err} — fix it to restore its refs)` : '';
+            return {
+                allowed: false,
+                code: 'broker_ref_not_declared',
+                reason: `${ref} is not declared for materialization${parseNote}`,
+                fix: `Declare it for a coding-agent project (aquaman coder project add <name> --path <dir> --env VAR=${ref}) or allow it explicitly (aquaman broker allow ${ref})`,
+            };
+        },
+        declared() {
+            const out = [];
+            for (const ref of [...projectRefs().refs].sort())
+                out.push({ ref, source: 'projects.yaml' });
+            for (const ref of [...configRefs().refs].sort())
+                out.push({ ref, source: 'config.yaml' });
+            return out;
+        },
+        declarationError() {
+            return errors();
+        },
+    };
+}
+//# sourceMappingURL=broker-scope.js.map

package/dist/broker-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-scope.js","sourceRoot":"","sources":["../src/broker-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,qFAAqF;AACrF,MAAM,WAAW,GAAG,oEAAoE,CAAC;AAEzF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,GAAW;IAC3D,OAAO,aAAa,OAAO,IAAI,GAAG,EAAE,CAAC;AACvC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,eAAuB,mBAAmB,EAAE;IAC1E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,YAAY,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,YAAY,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE/D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAU,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,UAAU,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,UAAU,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,gEAAgE;AAChE,SAAS,WAAW,CAAC,IAAY,EAAE,IAA0C;IAC3E,IAAI,aAAwC,CAAC,CAAC,+CAA+C;IAC7F,IAAI,MAAM,GAAuB,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACrD,OAAO,GAAG,EAAE;QACV,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9B,MAAM,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,aAAa,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AA2BD,MAAM,UAAU,iBAAiB,CAAC,OAA2B,EAAE;IAC7D,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,EAAE,eAAe,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAU,EAAE,CAAuB,CAAC;IACzJ,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAElE,MAAM,UAAU,GAAG,GAAuB,EAAE;QAC1C,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACrF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAuB,EAAE;QACtC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YACxB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE3C,IAAI,MAAM,KAAK,UAAU,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,GAAG,GAAG,oDAAoD,OAAO,+CAA+C;oBACxH,GAAG,EAAE,QAAQ,OAAO,0HAA0H;iBAC/I,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAExF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,gCAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,yBAAyB;gBAC/B,MAAM,EAAE,GAAG,GAAG,uCAAuC,SAAS,EAAE;gBAChE,GAAG,EAAE,kGAAkG,GAAG,kDAAkD,GAAG,GAAG;aACnK,CAAC;QACJ,CAAC;QAED,QAAQ;YACN,MAAM,GAAG,GAA+D,EAAE,CAAC;YAC3E,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAC7F,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC1F,OAAO,GAAG,CAAC;QACb,CAAC;QAED,gBAAgB;YACd,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}