codefree-proxy 0.1.3 → 0.1.4

package/dist/proxy/upstream-client.js

@@ -1,17 +1,184 @@
+import { createHmac, randomUUID } from 'node:crypto';
+import { mkdir, writeFile } from 'node:fs/promises';
+/* codefree-token-sync-patch */
+import { saveCodeFreeORefreshToken } from '../auth/codefree-o.js';
+/**
+ * Mirror a rotated refresh token into the native CodeFree-O store.
+ *
+ * The upstream rotates x_cf_refresh_token on every refresh, so whichever client
+ * refreshes must publish the new value or the other client is left holding a
+ * consumed token. Best-effort: a failure here must not fail the completion.
+ */
+async function mirrorRefreshTokenToNative(credentials) {
+    if (!credentials?.refreshCfToken)
+        return;
+    if (process.env.CODEFREE_PROXY_NO_MIRROR === '1')
+        return;
+    try {
+        await saveCodeFreeORefreshToken(credentials.refreshCfToken, credentials.refreshCfTokenExpiresAt);
+    }
+    catch (error) {
+        console.log(`[debug] native refresh-token mirror failed: ${error?.message ?? error}`);
+    }
+}
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+
 export const UPSTREAM_URL = 'https://www.srdcloud.cn/api/acbackend/codechat/v1/completions';
 export const CLIENT_VERSION = '0.3.6';
+const CF_APP_ID = '2542334461226y3rzqmr';
+const CF_CLIENT_SECRET = '254233446135xuMOKaXTmgNMby4f42Ae7DRhEBAe';
+const CF_SIGNING_SECRET_B64 = 'HJhzHSFDctmDwSiXLdiidecX8p1uBmG2HHbTf5rD9n4=';
+const CF_USER_URL = 'https://www.srdcloud.cn/api/usercenterbackend/user';
+const OAUTH_TOKEN_URL = 'https://www.srdcloud.cn/api/usercenterbackend/oauth/access_token';
+const CONFIG_PATH = join(homedir(), '.codefree-proxy', 'config.json');
+let refreshPromise = null;
+
+function buildCfTokenHeaders(credentials, method = 'POST') {
+    if (!credentials?.cfToken)
+        return {};
+    const timestamp = Math.floor(Date.now() / 1000).toString();
+    const nonce = `remote-cf-token-hmac-manual-${Date.now()}-${randomUUID()}`;
+    const signaturePayload = `${method.toUpperCase()}\n${CF_APP_ID}\n${timestamp}\n${nonce}`;
+    const signature = createHmac('sha256', Buffer.from(CF_SIGNING_SECRET_B64, 'base64'))
+        .update(signaturePayload)
+        .digest('base64');
+    const headers = {
+        'X-Cf-AppId': CF_APP_ID,
+        'X-Cf-Timestamp': timestamp,
+        'X-Cf-Nonce': nonce,
+        'X-Cf-Signature': signature,
+        'X-Cf-Token': credentials.cfToken,
+        projectId: '0'
+    };
+    if (credentials.gitUrls)
+        headers.gitUrls = String(credentials.gitUrls);
+    return headers;
+}
+
+async function responseJson(response) {
+    const text = await response.text();
+    if (!text)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return Object.fromEntries(new URLSearchParams(text).entries());
+    }
+}
+
+async function saveModernCredentials(credentials) {
+    await mkdir(dirname(CONFIG_PATH), { recursive: true });
+    await writeFile(CONFIG_PATH, `${JSON.stringify(credentials, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+}
+
+async function exchangeRefreshToken(credentials, fetchImpl) {
+    if (credentials.refreshCfToken) {
+        const response = await fetchImpl(OAUTH_TOKEN_URL, {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                'content-type': 'application/x-www-form-urlencoded'
+            },
+            body: new URLSearchParams({
+                grant_type: 'refresh_x_cf_token',
+                client_id: CF_APP_ID,
+                client_secret: CF_CLIENT_SECRET,
+                x_cf_refresh_token: credentials.refreshCfToken
+            })
+        });
+        const data = await responseJson(response);
+        if (!response.ok || !data.x_cf_token)
+            return false;
+        credentials.cfToken = data.x_cf_token;
+        const cfTtl = Number(data.x_cf_token_expires_in);
+        credentials.cfTokenExpiresAt = Date.now() + (Number.isFinite(cfTtl) && cfTtl > 0 ? cfTtl * 1000 : 7_200_000);
+        if (data.x_cf_refresh_token)
+            credentials.refreshCfToken = data.x_cf_refresh_token;
+        const refreshTtl = Number(data.x_cf_refresh_token_expires_in);
+        if (Number.isFinite(refreshTtl) && refreshTtl > 0)
+            credentials.refreshCfTokenExpiresAt = Date.now() + refreshTtl * 1000;
+        if (data.uid !== undefined && String(data.uid).length > 0)
+            credentials.userId = String(data.uid);
+        credentials.modernAuthAppId = CF_APP_ID;
+        credentials.modernAuthUpdatedAt = Date.now();
+        await saveModernCredentials(credentials);
+        await mirrorRefreshTokenToNative(credentials);
+        return true;
+    }
+    return false;
+}
+
+async function fetchCfToken(credentials, fetchImpl) {
+    if (!credentials.accessToken)
+        return false;
+    const response = await fetchImpl(CF_USER_URL, {
+        headers: {
+            authorization: `Bearer ${credentials.accessToken}`,
+            accept: 'application/json',
+        },
+    });
+    const data = await responseJson(response);
+    if (!response.ok || !data.x_cf_token)
+        return false;
+    credentials.cfToken = data.x_cf_token;
+    const ttl = Number(data.x_cf_token_expires_in);
+    credentials.cfTokenExpiresAt = Date.now() + (Number.isFinite(ttl) && ttl > 0 ? ttl * 1000 : 1_800_000);
+    if (data.id !== undefined)
+        credentials.userId = String(data.id);
+    credentials.modernAuthUpdatedAt = Date.now();
+    await saveModernCredentials(credentials);
+    return true;
+}
+
+async function ensureModernCredentials(credentials, fetchImpl) {
+    if (!credentials)
+        return;
+    const expiresAt = Number(credentials.cfTokenExpiresAt || 0);
+    if (expiresAt > Date.now() + 30_000)
+        return;
+    if (refreshPromise)
+        return refreshPromise;
+    refreshPromise = (async () => {
+        if (await fetchCfToken(credentials, fetchImpl))
+            return;
+        if (await exchangeRefreshToken(credentials, fetchImpl)) {
+            if (credentials.cfToken && Number(credentials.cfTokenExpiresAt) > Date.now() + 30_000)
+                return;
+            if (await fetchCfToken(credentials, fetchImpl))
+                return;
+        }
+        const error = new Error('CodeFree 登录态已失效，无法续期访问令牌。请重新运行 codefree-o login，然后重启 codefree-proxy。');
+        error.code = 'CODEFREE_AUTH_EXPIRED';
+        throw error;
+    })();
+    try {
+        await refreshPromise;
+    }
+    finally {
+        refreshPromise = null;
+    }
+}
+
 export function buildUpstreamHeaders(credentials, model) {
-    return {
+    const headers = {
         'content-type': 'application/json',
         accept: 'text/event-stream',
-        apiKey: credentials.apiKey,
         authorization: 'Bearer codefree',
-        userId: credentials.userId,
-        subService: 'cli_chat',
+        userId: String(credentials.userId),
+        projectId: '0',
+        subService: 'codefree_o_chat',
         clientType: 'codefree-cli',
         clientVersion: CLIENT_VERSION,
-        modelName: model
+        modelName: model,
+        'X-Codefree-Quota-Schema': '1'
     };
+    if (credentials.apiKey)
+        headers.apiKey = String(credentials.apiKey);
+    if (credentials.sessionId)
+        headers.sessionId = credentials.sessionId;
+    return { ...headers, ...buildCfTokenHeaders(credentials, 'POST') };
 }
 export async function postUpstreamJson(body, credentials, options = {}) {
     const fetchImpl = options.fetchImpl ?? fetch;
@@ -19,6 +186,7 @@ export async function postUpstreamJson(body, credentials, options = {}) {
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 120_000);
     try {
+        await ensureModernCredentials(credentials, fetchImpl);
         return await fetchImpl(UPSTREAM_URL, {
             method: 'POST',
             headers: buildUpstreamHeaders(credentials, model ?? ''),

package/dist/proxy/upstream-retry.js

@@ -0,0 +1,97 @@
+/** Shared retry helpers for SRD Cloud acbackend transient failures. */
+// Keep total wall time under typical --timeout 300s when each attempt may take ~120s (SRD 504).
+export const UPSTREAM_RETRY = {
+    maxAttempts: 2,
+    baseDelayMs: 1500,
+};
+export function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export function parseRetCode(bodyText) {
+    const text = (bodyText || '').trim();
+    if (!text)
+        return null;
+    try {
+        const data = JSON.parse(text);
+        if (data && typeof data.retCode === 'number')
+            return data.retCode;
+    }
+    catch {
+        // fall through to regex
+    }
+    const match = /"retCode"\s*:\s*(\d+)/.exec(text);
+    return match ? Number(match[1]) : null;
+}
+export function isRetriableUpstreamError(status, bodyText) {
+    if (status === 502 || status === 503 || status === 504)
+        return true;
+    // retCode 51 = SRD Cloud gateway / inference timeout
+    return parseRetCode(bodyText) === 51;
+}
+export function formatUpstreamError(status, bodyText) {
+    const body = (bodyText || '').trim();
+    const retCode = parseRetCode(body);
+    if (status === 504 || retCode === 51) {
+        return `Upstream gateway timeout (HTTP ${status}${retCode != null ? `, retCode ${retCode}` : ''}). SRD Cloud 推理超时，请重试或缩短上下文。`;
+    }
+    if (status === 502 || status === 503) {
+        return `Upstream temporarily unavailable (HTTP ${status}${retCode != null ? `, retCode ${retCode}` : ''}). 请稍后重试。`;
+    }
+    if (retCode != null) {
+        return `Upstream error (HTTP ${status}, retCode ${retCode}): ${body.slice(0, 200)}`;
+    }
+    return body || `Upstream error (HTTP ${status})`;
+}
+export function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * POST with retries. onPost(body, credentials, options) must return a fetch Response-like object.
+ * 401/403 returned immediately for auth refresh by the caller.
+ */
+export async function fetchUpstreamWithRetry(onPost, body, credentials, options, label = 'upstream') {
+    const maxAttempts = UPSTREAM_RETRY.maxAttempts;
+    let lastErrorBody = '';
+    let lastStatus = 0;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        let response;
+        try {
+            response = await onPost(body, credentials, options);
+        }
+        catch (error) {
+            if (attempt < maxAttempts) {
+                const delay = UPSTREAM_RETRY.baseDelayMs * attempt;
+                console.log(`[debug] ${label} network error attempt=${attempt}/${maxAttempts} retryIn=${delay}ms err=${errorMessage(error)}`);
+                await sleep(delay);
+                continue;
+            }
+            throw error;
+        }
+        if (response.ok) {
+            if (attempt > 1)
+                console.log(`[debug] ${label} succeeded after ${attempt} attempts`);
+            return { response, errorBody: null };
+        }
+        if (response.status === 401 || response.status === 403) {
+            return { response, errorBody: null };
+        }
+        const errorBody = await response.text();
+        lastErrorBody = errorBody;
+        lastStatus = response.status;
+        console.log(`[debug] ${label} non-ok: status=${response.status} body=${errorBody.slice(0, 200)} attempt=${attempt}/${maxAttempts}`);
+        if (attempt < maxAttempts && isRetriableUpstreamError(response.status, errorBody)) {
+            const delay = UPSTREAM_RETRY.baseDelayMs * attempt;
+            console.log(`[debug] ${label} retriable (e.g. retCode 51 / 5xx), retryIn=${delay}ms`);
+            await sleep(delay);
+            continue;
+        }
+        return {
+            response: { ok: false, status: lastStatus, text: async () => lastErrorBody },
+            errorBody: lastErrorBody,
+        };
+    }
+    return {
+        response: { ok: false, status: lastStatus || 502, text: async () => lastErrorBody },
+        errorBody: lastErrorBody,
+    };
+}

package/dist/server.js

@@ -2,7 +2,7 @@ import Fastify from 'fastify';
 import { AuthManager } from './auth/auth-manager.js';
 import { registerOpenAIRoutes } from './proxy/openai-routes.js';
 export function buildServer(options = {}) {
-    const app = Fastify({ logger: true });
+    const app = Fastify({ logger: true, bodyLimit: 10 * 1024 * 1024 });
     registerOpenAIRoutes(app, {
         auth: options.auth ?? new AuthManager(),
         upstreamFetch: options.upstreamFetch,
@@ -10,4 +10,4 @@ export function buildServer(options = {}) {
     });
     return app;
 }
-//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codefree-proxy",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "OpenAI-compatible local proxy for SRD Cloud CodeFree",
   "license": "MIT",
   "author": "Maxwell",

package/dist/auth/browser-login.d.ts

@@ -1,30 +0,0 @@
-import type { StoredCredentials } from './config-store.js';
-export interface BrowserLoginOptions {
-    openBrowser?: (url: string) => void;
-    timeoutMs?: number;
-    fetchImpl?: typeof fetch;
-    codeVerifier?: string;
-    randomCode?: string;
-    baseUrl?: string;
-}
-export interface PkcePair {
-    codeVerifier: string;
-    codeChallenge: string;
-}
-export interface AuthorizeUrlOptions {
-    codeVerifier?: string;
-    randomCode?: string;
-    baseUrl?: string;
-}
-export declare function createPkcePair(codeVerifier?: string): PkcePair;
-export declare function buildAuthorizeUrl(port: number, options?: AuthorizeUrlOptions): {
-    url: string;
-    state: string;
-    codeVerifier: string;
-};
-export declare function exchangeCodeForToken(code: string, codeVerifier: string, fetchImpl?: typeof fetch, baseUrl?: string): Promise<{
-    sessionId: string;
-    userId: string;
-}>;
-export declare function fetchEncryptedApiKey(sessionId: string, userId: string, fetchImpl?: typeof fetch, baseUrl?: string): Promise<string>;
-export declare function authorizeWithBrowser(options?: BrowserLoginOptions): Promise<StoredCredentials>;

package/dist/auth/browser-login.js

@@ -1,181 +0,0 @@
-import { createHash, randomBytes } from 'node:crypto';
-import { spawn } from 'node:child_process';
-import { createServer } from 'node:http';
-import { URLSearchParams } from 'node:url';
-import { decryptApiKey } from './codefree-o.js';
-const BASE_URL = 'https://www.srdcloud.cn';
-const REDIRECT_PATH = '/login/oauth-srdcloud-redirect';
-const AUTHORIZE_PATH = '/login/oauth/authorize';
-const ACCESS_TOKEN_PATH = '/login/oauth/access_token';
-const API_KEY_PATH = '/api/acbackend/usermanager/v1/users/apikey';
-const PKCE_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
-function clientIdForBaseUrl(baseUrl) {
-    if (baseUrl.includes('dev'))
-        return '2510a379050azejezeas';
-    if (baseUrl.includes('test'))
-        return '2512525649b2unrogn26';
-    return '251384680635inwsxjcm';
-}
-function randomPkceVerifier() {
-    return Array.from(randomBytes(64)).map((byte) => PKCE_CHARS[byte % PKCE_CHARS.length]).join('');
-}
-function base64Url(buffer) {
-    return buffer.toString('base64').replaceAll('+', '-').replaceAll('/', '_').replace(/=+$/, '');
-}
-export function createPkcePair(codeVerifier = randomPkceVerifier()) {
-    return {
-        codeVerifier,
-        codeChallenge: base64Url(createHash('sha256').update(codeVerifier).digest())
-    };
-}
-export function buildAuthorizeUrl(port, options = {}) {
-    const baseUrl = options.baseUrl ?? BASE_URL;
-    const randomCode = options.randomCode ?? String(Math.floor(1000 + Math.random() * 9000));
-    const { codeVerifier, codeChallenge } = createPkcePair(options.codeVerifier);
-    const callbackUrl = `http://127.0.0.1:${port}/oauth2callback?from=codefree-o&randomCode=${randomCode}`;
-    const state = Buffer.from(callbackUrl, 'utf8').toString('base64');
-    const params = new URLSearchParams({
-        client_id: clientIdForBaseUrl(baseUrl),
-        redirect_uri: `${baseUrl}${REDIRECT_PATH}`,
-        response_type: 'code',
-        state,
-        code_challenge: codeChallenge,
-        code_challenge_method: 'S256'
-    });
-    return { url: `${baseUrl}${AUTHORIZE_PATH}?${params.toString()}`, state, codeVerifier };
-}
-export async function exchangeCodeForToken(code, codeVerifier, fetchImpl = fetch, baseUrl = BASE_URL) {
-    const params = new URLSearchParams({
-        grant_type: 'authorization_code',
-        client_id: clientIdForBaseUrl(baseUrl),
-        code,
-        redirect_uri: `${baseUrl}${REDIRECT_PATH}`,
-        code_verifier: codeVerifier
-    });
-    const response = await fetchImpl(`${baseUrl}${ACCESS_TOKEN_PATH}?${params.toString()}`, { method: 'GET' });
-    if (!response.ok)
-        throw new Error(`token exchange failed: ${response.status} ${await response.text()}`);
-    const parsed = new URLSearchParams(await response.text());
-    const sessionId = parsed.get('ori_session_id') ?? '';
-    const userId = parsed.get('uid') ?? '';
-    if (!sessionId || !userId)
-        throw new Error('token exchange response missing ori_session_id or uid');
-    return { sessionId, userId };
-}
-export async function fetchEncryptedApiKey(sessionId, userId, fetchImpl = fetch, baseUrl = BASE_URL) {
-    const response = await fetchImpl(`${baseUrl}${API_KEY_PATH}`, {
-        method: 'GET',
-        headers: {
-            Accept: '*/*',
-            'User-Agent': 'node',
-            sessionId,
-            userId,
-            projectId: '0'
-        }
-    });
-    if (!response.ok)
-        throw new Error(`apikey fetch failed: ${response.status} ${await response.text()}`);
-    const data = await response.json();
-    const encryptedApiKey = data.encryptedApiKey ?? data.apikey;
-    if (!encryptedApiKey)
-        throw new Error('apikey response missing encryptedApiKey');
-    return encryptedApiKey;
-}
-function defaultOpenBrowser(url) {
-    const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
-    const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
-    const child = spawn(command, args, { detached: true, stdio: 'ignore' });
-    child.unref();
-}
-function escapeHtml(value) {
-    return value
-        .replaceAll('&', '&')
-        .replaceAll('<', '&lt;')
-        .replaceAll('>', '&gt;')
-        .replaceAll('"', '&quot;')
-        .replaceAll("'", '&#39;');
-}
-function startCallbackServer(timeoutMs) {
-    return new Promise((resolve, reject) => {
-        let settled = false;
-        let timeout;
-        let resolveCode;
-        let rejectCode;
-        const codePromise = new Promise((resolveInner, rejectInner) => {
-            resolveCode = resolveInner;
-            rejectCode = rejectInner;
-        });
-        const server = createServer((request, response) => {
-            const url = new URL(request.url ?? '/', 'http://127.0.0.1');
-            if (url.pathname !== '/oauth2callback') {
-                response.writeHead(404);
-                response.end('not found');
-                return;
-            }
-            const code = url.searchParams.get('code');
-            const error = url.searchParams.get('error');
-            if (error) {
-                response.writeHead(400, { 'content-type': 'text/html; charset=utf-8' });
-                response.end(`<h2>Authorization failed</h2><p>${escapeHtml(error)}</p>`);
-                if (!settled) {
-                    settled = true;
-                    clearTimeout(timeout);
-                    rejectCode(new Error(`OAuth error: ${error}`));
-                }
-                return;
-            }
-            if (!code) {
-                response.writeHead(400, { 'content-type': 'text/html; charset=utf-8' });
-                response.end('<h2>Authorization failed</h2><p>Missing code</p>');
-                return;
-            }
-            response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
-            response.end('<h2>Authorization successful</h2><p>You can close this tab.</p>');
-            if (!settled) {
-                settled = true;
-                clearTimeout(timeout);
-                resolveCode(code);
-            }
-        });
-        server.on('error', reject);
-        server.listen(0, '127.0.0.1', () => {
-            const port = server.address().port;
-            timeout = setTimeout(() => {
-                if (!settled) {
-                    settled = true;
-                    rejectCode(new Error('OAuth callback timed out'));
-                }
-            }, timeoutMs);
-            timeout.unref();
-            resolve({
-                port,
-                codePromise,
-                close: () => new Promise((done) => server.close(() => done()))
-            });
-        });
-    });
-}
-export async function authorizeWithBrowser(options = {}) {
-    const timeoutMs = options.timeoutMs ?? 300_000;
-    const baseUrl = options.baseUrl ?? BASE_URL;
-    const callback = await startCallbackServer(timeoutMs);
-    const codePromise = callback.codePromise;
-    const { url, codeVerifier } = buildAuthorizeUrl(callback.port, { codeVerifier: options.codeVerifier, randomCode: options.randomCode, baseUrl });
-    try {
-        ;
-        (options.openBrowser ?? defaultOpenBrowser)(url);
-        const code = await codePromise;
-        const token = await exchangeCodeForToken(code, codeVerifier, options.fetchImpl ?? fetch, baseUrl);
-        const encryptedApiKey = await fetchEncryptedApiKey(token.sessionId, token.userId, options.fetchImpl ?? fetch, baseUrl);
-        return {
-            userId: token.userId,
-            apiKey: decryptApiKey(encryptedApiKey),
-            sessionId: token.sessionId,
-            updatedAt: Date.now()
-        };
-    }
-    finally {
-        await callback.close();
-    }
-}
-//# sourceMappingURL=browser-login.js.map

package/dist/auth/browser-login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-login.js","sourceRoot":"","sources":["../../src/auth/browser-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAG/C,MAAM,QAAQ,GAAG,yBAAyB,CAAA;AAC1C,MAAM,aAAa,GAAG,gCAAgC,CAAA;AACtD,MAAM,cAAc,GAAG,wBAAwB,CAAA;AAC/C,MAAM,iBAAiB,GAAG,2BAA2B,CAAA;AACrD,MAAM,YAAY,GAAG,4CAA4C,CAAA;AACjE,MAAM,UAAU,GAAG,oEAAoE,CAAA;AAsBvF,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAA;IAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,sBAAsB,CAAA;IAC3D,OAAO,sBAAsB,CAAA;AAC/B,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjG,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC/F,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAY,GAAG,kBAAkB,EAAE;IAChE,OAAO;QACL,YAAY;QACZ,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;KAC7E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,UAA+B,EAAE;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAA;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;IACxF,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5E,MAAM,WAAW,GAAG,oBAAoB,IAAI,8CAA8C,UAAU,EAAE,CAAA;IACtG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACjE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACtC,YAAY,EAAE,GAAG,OAAO,GAAG,aAAa,EAAE;QAC1C,aAAa,EAAE,MAAM;QACrB,KAAK;QACL,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;KAC9B,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,cAAc,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,YAAoB,EAAE,YAA0B,KAAK,EAAE,OAAO,GAAG,QAAQ;IAChI,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACtC,IAAI;QACJ,YAAY,EAAE,GAAG,OAAO,GAAG,aAAa,EAAE;QAC1C,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,iBAAiB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1G,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACvG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAA;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IACnG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,MAAc,EAAE,YAA0B,KAAK,EAAE,OAAO,GAAG,QAAQ;IAC/H,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,EAAE;QAC5D,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,MAAM;YACpB,SAAS;YACT,MAAM;YACN,SAAS,EAAE,GAAG;SACf;KACF,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACrG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAmD,CAAA;IACnF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAA;IAC3D,IAAI,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAChF,OAAO,eAAe,CAAA;AACxB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAA;IAC1G,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvE,KAAK,CAAC,KAAK,EAAE,CAAA;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,OAAuB,CAAA;QAC3B,IAAI,WAAmC,CAAA;QACvC,IAAI,UAAkC,CAAA;QACtC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;YACpE,WAAW,GAAG,YAAY,CAAA;YAC1B,UAAU,GAAG,WAAW,CAAA;QAC1B,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;YAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACvC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBACvB,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBACzB,OAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3C,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAA;gBACvE,QAAQ,CAAC,GAAG,CAAC,mCAAmC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACxE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAA;oBACd,YAAY,CAAC,OAAO,CAAC,CAAA;oBACrB,UAAU,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAA;gBAChD,CAAC;gBACD,OAAM;YACR,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAA;gBACvE,QAAQ,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAA;gBAChE,OAAM;YACR,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAA;YACvE,QAAQ,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAA;YAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,WAAW,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAA;YACnD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAA;oBACd,UAAU,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;gBACnD,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAA;YACb,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,OAAO,CAAC;gBACN,IAAI;gBACJ,WAAW;gBACX,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;aACrE,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAA+B,EAAE;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAA;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAA;IACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;IACxC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IAC/I,IAAI,CAAC;QACH,CAAC;QAAA,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAA;QAC9B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,EAAE,OAAO,CAAC,CAAA;QACjG,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,EAAE,OAAO,CAAC,CAAA;QACtH,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAA;IACH,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;AACH,CAAC"}