codexgpt 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.example.md +20 -0
- package/CHANGELOG.md +342 -0
- package/CHATGPT_PROMPT.md +12 -0
- package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
- package/CODEX_PROMPT.md +12 -0
- package/CONTRIBUTING.md +62 -0
- package/DOMAIN_SETUP.md +275 -0
- package/FAQ.md +366 -0
- package/FAQ_ZH.md +329 -0
- package/LICENSE +21 -0
- package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
- package/README.md +490 -0
- package/README_ZH.md +747 -0
- package/SECURITY.md +295 -0
- package/config.example.env +103 -0
- package/dist/access/fullAccessLease.js +148 -0
- package/dist/access/fullAccessLease.js.map +1 -0
- package/dist/access/protectedRoots.js +122 -0
- package/dist/access/protectedRoots.js.map +1 -0
- package/dist/access/rootAdmission.js +347 -0
- package/dist/access/rootAdmission.js.map +1 -0
- package/dist/analysis/cache.js +27 -0
- package/dist/analysis/cache.js.map +1 -0
- package/dist/analysis/classify.js +102 -0
- package/dist/analysis/classify.js.map +1 -0
- package/dist/analysis/extract.js +139 -0
- package/dist/analysis/extract.js.map +1 -0
- package/dist/analysis/graph.js +22 -0
- package/dist/analysis/graph.js.map +1 -0
- package/dist/analysis/impact.js +167 -0
- package/dist/analysis/impact.js.map +1 -0
- package/dist/analysis/index.js +215 -0
- package/dist/analysis/index.js.map +1 -0
- package/dist/analysis/inventory.js +51 -0
- package/dist/analysis/inventory.js.map +1 -0
- package/dist/analysis/providers.js +24 -0
- package/dist/analysis/providers.js.map +1 -0
- package/dist/analysis/rank.js +27 -0
- package/dist/analysis/rank.js.map +1 -0
- package/dist/analysis/types.js +8 -0
- package/dist/analysis/types.js.map +1 -0
- package/dist/audit/canonicalJson.js +79 -0
- package/dist/audit/canonicalJson.js.map +1 -0
- package/dist/audit/diagnostics.js +128 -0
- package/dist/audit/diagnostics.js.map +1 -0
- package/dist/audit/index.js +12 -0
- package/dist/audit/index.js.map +1 -0
- package/dist/audit/lifecycleV3.js +53 -0
- package/dist/audit/lifecycleV3.js.map +1 -0
- package/dist/audit/lifecycleV4.js +70 -0
- package/dist/audit/lifecycleV4.js.map +1 -0
- package/dist/audit/lock.js +195 -0
- package/dist/audit/lock.js.map +1 -0
- package/dist/audit/queryTool.js +120 -0
- package/dist/audit/queryTool.js.map +1 -0
- package/dist/audit/runtime.js +48 -0
- package/dist/audit/runtime.js.map +1 -0
- package/dist/audit/schemas.js +640 -0
- package/dist/audit/schemas.js.map +1 -0
- package/dist/audit/store.js +1309 -0
- package/dist/audit/store.js.map +1 -0
- package/dist/audit/transactionParticipant.js +45 -0
- package/dist/audit/transactionParticipant.js.map +1 -0
- package/dist/audit/types.js +11 -0
- package/dist/audit/types.js.map +1 -0
- package/dist/auth/audit.js +44 -0
- package/dist/auth/audit.js.map +1 -0
- package/dist/auth/authorizationStore.js +333 -0
- package/dist/auth/authorizationStore.js.map +1 -0
- package/dist/auth/challenges.js +25 -0
- package/dist/auth/challenges.js.map +1 -0
- package/dist/auth/clientStore.js +469 -0
- package/dist/auth/clientStore.js.map +1 -0
- package/dist/auth/cloudflareConfig.js +112 -0
- package/dist/auth/cloudflareConfig.js.map +1 -0
- package/dist/auth/configuration.js +167 -0
- package/dist/auth/configuration.js.map +1 -0
- package/dist/auth/credentialStore.js +65 -0
- package/dist/auth/credentialStore.js.map +1 -0
- package/dist/auth/deploymentLock.js +220 -0
- package/dist/auth/deploymentLock.js.map +1 -0
- package/dist/auth/deploymentRegistry.js +149 -0
- package/dist/auth/deploymentRegistry.js.map +1 -0
- package/dist/auth/errors.js +26 -0
- package/dist/auth/errors.js.map +1 -0
- package/dist/auth/grantStore.js +307 -0
- package/dist/auth/grantStore.js.map +1 -0
- package/dist/auth/index.js +39 -0
- package/dist/auth/index.js.map +1 -0
- package/dist/auth/keyManager.js +148 -0
- package/dist/auth/keyManager.js.map +1 -0
- package/dist/auth/localAdminSession.js +173 -0
- package/dist/auth/localAdminSession.js.map +1 -0
- package/dist/auth/metadata.js +69 -0
- package/dist/auth/metadata.js.map +1 -0
- package/dist/auth/oauthProvider.js +589 -0
- package/dist/auth/oauthProvider.js.map +1 -0
- package/dist/auth/ownerApproval.js +51 -0
- package/dist/auth/ownerApproval.js.map +1 -0
- package/dist/auth/policyIdentity.js +189 -0
- package/dist/auth/policyIdentity.js.map +1 -0
- package/dist/auth/rateLimits.js +66 -0
- package/dist/auth/rateLimits.js.map +1 -0
- package/dist/auth/recovery.js +275 -0
- package/dist/auth/recovery.js.map +1 -0
- package/dist/auth/requestContext.js +34 -0
- package/dist/auth/requestContext.js.map +1 -0
- package/dist/auth/resourceMiddleware.js +147 -0
- package/dist/auth/resourceMiddleware.js.map +1 -0
- package/dist/auth/runtimeStatus.js +51 -0
- package/dist/auth/runtimeStatus.js.map +1 -0
- package/dist/auth/schemas.js +84 -0
- package/dist/auth/schemas.js.map +1 -0
- package/dist/auth/stateStore.js +468 -0
- package/dist/auth/stateStore.js.map +1 -0
- package/dist/auth/tokenService.js +631 -0
- package/dist/auth/tokenService.js.map +1 -0
- package/dist/auth/toolSecurity.js +108 -0
- package/dist/auth/toolSecurity.js.map +1 -0
- package/dist/auth/types.js +6 -0
- package/dist/auth/types.js.map +1 -0
- package/dist/auth/windowsDpapi.js +193 -0
- package/dist/auth/windowsDpapi.js.map +1 -0
- package/dist/bashOps.js +292 -0
- package/dist/bashOps.js.map +1 -0
- package/dist/capabilitiesOps.js +412 -0
- package/dist/capabilitiesOps.js.map +1 -0
- package/dist/changesets/crypto.js +92 -0
- package/dist/changesets/crypto.js.map +1 -0
- package/dist/changesets/index.js +9 -0
- package/dist/changesets/index.js.map +1 -0
- package/dist/changesets/moveStore.js +237 -0
- package/dist/changesets/moveStore.js.map +1 -0
- package/dist/changesets/moveUndo.js +386 -0
- package/dist/changesets/moveUndo.js.map +1 -0
- package/dist/changesets/schemas.js +234 -0
- package/dist/changesets/schemas.js.map +1 -0
- package/dist/changesets/store.js +573 -0
- package/dist/changesets/store.js.map +1 -0
- package/dist/changesets/types.js +9 -0
- package/dist/changesets/types.js.map +1 -0
- package/dist/changesets/undo.js +525 -0
- package/dist/changesets/undo.js.map +1 -0
- package/dist/changesets/unifiedUndo.js +31 -0
- package/dist/changesets/unifiedUndo.js.map +1 -0
- package/dist/cliEnvironment.js +85 -0
- package/dist/cliEnvironment.js.map +1 -0
- package/dist/codexSessions.js +733 -0
- package/dist/codexSessions.js.map +1 -0
- package/dist/codexgptSupertool.js +216 -0
- package/dist/codexgptSupertool.js.map +1 -0
- package/dist/codexproSupertool.js +204 -0
- package/dist/codexproSupertool.js.map +1 -0
- package/dist/config.js +733 -0
- package/dist/config.js.map +1 -0
- package/dist/control/localApprovalClient.js +287 -0
- package/dist/control/localApprovalClient.js.map +1 -0
- package/dist/control/localApprovalServer.js +466 -0
- package/dist/control/localApprovalServer.js.map +1 -0
- package/dist/control/runtime.js +178 -0
- package/dist/control/runtime.js.map +1 -0
- package/dist/control/schemas.js +184 -0
- package/dist/control/schemas.js.map +1 -0
- package/dist/control/windowsLocalControl.js +348 -0
- package/dist/control/windowsLocalControl.js.map +1 -0
- package/dist/fsOps.js +541 -0
- package/dist/fsOps.js.map +1 -0
- package/dist/git/admission.js +26 -0
- package/dist/git/admission.js.map +1 -0
- package/dist/git/branchService.js +51 -0
- package/dist/git/branchService.js.map +1 -0
- package/dist/git/capabilities.js +143 -0
- package/dist/git/capabilities.js.map +1 -0
- package/dist/git/commitService.js +344 -0
- package/dist/git/commitService.js.map +1 -0
- package/dist/git/durableState.js +151 -0
- package/dist/git/durableState.js.map +1 -0
- package/dist/git/execution.js +451 -0
- package/dist/git/execution.js.map +1 -0
- package/dist/git/fileTransaction.js +50 -0
- package/dist/git/fileTransaction.js.map +1 -0
- package/dist/git/indexService.js +421 -0
- package/dist/git/indexService.js.map +1 -0
- package/dist/git/integrations.js +653 -0
- package/dist/git/integrations.js.map +1 -0
- package/dist/git/locks.js +287 -0
- package/dist/git/locks.js.map +1 -0
- package/dist/git/mutationContext.js +92 -0
- package/dist/git/mutationContext.js.map +1 -0
- package/dist/git/mutationJournal.js +91 -0
- package/dist/git/mutationJournal.js.map +1 -0
- package/dist/git/mutationService.js +352 -0
- package/dist/git/mutationService.js.map +1 -0
- package/dist/git/normalization.js +57 -0
- package/dist/git/normalization.js.map +1 -0
- package/dist/git/objectQuarantine.js +243 -0
- package/dist/git/objectQuarantine.js.map +1 -0
- package/dist/git/opaqueRecordStore.js +187 -0
- package/dist/git/opaqueRecordStore.js.map +1 -0
- package/dist/git/operationStore.js +287 -0
- package/dist/git/operationStore.js.map +1 -0
- package/dist/git/parsers.js +311 -0
- package/dist/git/parsers.js.map +1 -0
- package/dist/git/privateIndex.js +79 -0
- package/dist/git/privateIndex.js.map +1 -0
- package/dist/git/productionBootstrap.js +39 -0
- package/dist/git/productionBootstrap.js.map +1 -0
- package/dist/git/readService.js +846 -0
- package/dist/git/readService.js.map +1 -0
- package/dist/git/recovery.js +417 -0
- package/dist/git/recovery.js.map +1 -0
- package/dist/git/repositoryIdentity.js +611 -0
- package/dist/git/repositoryIdentity.js.map +1 -0
- package/dist/git/repositoryStore.js +237 -0
- package/dist/git/repositoryStore.js.map +1 -0
- package/dist/git/resources.js +113 -0
- package/dist/git/resources.js.map +1 -0
- package/dist/git/restoreService.js +178 -0
- package/dist/git/restoreService.js.map +1 -0
- package/dist/git/reviewToken.js +86 -0
- package/dist/git/reviewToken.js.map +1 -0
- package/dist/git/stashService.js +566 -0
- package/dist/git/stashService.js.map +1 -0
- package/dist/git/stateToken.js +139 -0
- package/dist/git/stateToken.js.map +1 -0
- package/dist/gitOps.js +147 -0
- package/dist/gitOps.js.map +1 -0
- package/dist/guard.js +608 -0
- package/dist/guard.js.map +1 -0
- package/dist/guidance/diagnostics.js +14 -0
- package/dist/guidance/diagnostics.js.map +1 -0
- package/dist/guidance/instructions.js +167 -0
- package/dist/guidance/instructions.js.map +1 -0
- package/dist/guidance/mode.js +18 -0
- package/dist/guidance/mode.js.map +1 -0
- package/dist/guidance/openaiSkillMetadata.js +29 -0
- package/dist/guidance/openaiSkillMetadata.js.map +1 -0
- package/dist/guidance/safeTextReader.js +171 -0
- package/dist/guidance/safeTextReader.js.map +1 -0
- package/dist/guidance/skillCatalog.js +70 -0
- package/dist/guidance/skillCatalog.js.map +1 -0
- package/dist/guidance/skillDiscovery.js +353 -0
- package/dist/guidance/skillDiscovery.js.map +1 -0
- package/dist/guidance/skillMetadata.js +115 -0
- package/dist/guidance/skillMetadata.js.map +1 -0
- package/dist/guidance/skillResources.js +146 -0
- package/dist/guidance/skillResources.js.map +1 -0
- package/dist/handoffOps.js +449 -0
- package/dist/handoffOps.js.map +1 -0
- package/dist/http/localAdminApp.js +203 -0
- package/dist/http/localAdminApp.js.map +1 -0
- package/dist/http/oauthMcpRuntime.js +294 -0
- package/dist/http/oauthMcpRuntime.js.map +1 -0
- package/dist/http/publicApp.js +350 -0
- package/dist/http/publicApp.js.map +1 -0
- package/dist/http/securityHeaders.js +11 -0
- package/dist/http/securityHeaders.js.map +1 -0
- package/dist/http.js +2076 -0
- package/dist/http.js.map +1 -0
- package/dist/moves/engine.js +1079 -0
- package/dist/moves/engine.js.map +1 -0
- package/dist/moves/index.js +6 -0
- package/dist/moves/index.js.map +1 -0
- package/dist/moves/planner.js +270 -0
- package/dist/moves/planner.js.map +1 -0
- package/dist/moves/recovery.js +557 -0
- package/dist/moves/recovery.js.map +1 -0
- package/dist/moves/service.js +300 -0
- package/dist/moves/service.js.map +1 -0
- package/dist/moves/types.js +11 -0
- package/dist/moves/types.js.map +1 -0
- package/dist/mutations/index.js +4 -0
- package/dist/mutations/index.js.map +1 -0
- package/dist/mutations/lifecycle.js +165 -0
- package/dist/mutations/lifecycle.js.map +1 -0
- package/dist/mutations/localService.js +163 -0
- package/dist/mutations/localService.js.map +1 -0
- package/dist/mutations/runtime.js +322 -0
- package/dist/mutations/runtime.js.map +1 -0
- package/dist/mutations/types.js +2 -0
- package/dist/mutations/types.js.map +1 -0
- package/dist/mutations/writers.js +360 -0
- package/dist/mutations/writers.js.map +1 -0
- package/dist/patchOps.js +420 -0
- package/dist/patchOps.js.map +1 -0
- package/dist/policy/approval.js +306 -0
- package/dist/policy/approval.js.map +1 -0
- package/dist/policy/audit.js +88 -0
- package/dist/policy/audit.js.map +1 -0
- package/dist/policy/authorizationFacts.js +187 -0
- package/dist/policy/authorizationFacts.js.map +1 -0
- package/dist/policy/compat.js +104 -0
- package/dist/policy/compat.js.map +1 -0
- package/dist/policy/context.js +31 -0
- package/dist/policy/context.js.map +1 -0
- package/dist/policy/enforcement.js +46 -0
- package/dist/policy/enforcement.js.map +1 -0
- package/dist/policy/evaluator.js +338 -0
- package/dist/policy/evaluator.js.map +1 -0
- package/dist/policy/executionCapabilities.js +80 -0
- package/dist/policy/executionCapabilities.js.map +1 -0
- package/dist/policy/executionResources.js +192 -0
- package/dist/policy/executionResources.js.map +1 -0
- package/dist/policy/fullAccessResources.js +23 -0
- package/dist/policy/fullAccessResources.js.map +1 -0
- package/dist/policy/hardPolicy.js +50 -0
- package/dist/policy/hardPolicy.js.map +1 -0
- package/dist/policy/identity.js +142 -0
- package/dist/policy/identity.js.map +1 -0
- package/dist/policy/integration.js +331 -0
- package/dist/policy/integration.js.map +1 -0
- package/dist/policy/pendingApprovals.js +301 -0
- package/dist/policy/pendingApprovals.js.map +1 -0
- package/dist/policy/profileStore.js +367 -0
- package/dist/policy/profileStore.js.map +1 -0
- package/dist/policy/resources.js +249 -0
- package/dist/policy/resources.js.map +1 -0
- package/dist/policy/runtime.js +713 -0
- package/dist/policy/runtime.js.map +1 -0
- package/dist/policy/schemas.js +625 -0
- package/dist/policy/schemas.js.map +1 -0
- package/dist/policy/toolPolicy.js +141 -0
- package/dist/policy/toolPolicy.js.map +1 -0
- package/dist/policy/transport.js +10 -0
- package/dist/policy/transport.js.map +1 -0
- package/dist/policy/types.js +31 -0
- package/dist/policy/types.js.map +1 -0
- package/dist/proContext.js +675 -0
- package/dist/proContext.js.map +1 -0
- package/dist/process/authority.js +18 -0
- package/dist/process/authority.js.map +1 -0
- package/dist/process/backendDiscovery.js +83 -0
- package/dist/process/backendDiscovery.js.map +1 -0
- package/dist/process/commandCompiler.js +71 -0
- package/dist/process/commandCompiler.js.map +1 -0
- package/dist/process/outputCursor.js +67 -0
- package/dist/process/outputCursor.js.map +1 -0
- package/dist/process/outputQuota.js +94 -0
- package/dist/process/outputQuota.js.map +1 -0
- package/dist/process/outputRing.js +138 -0
- package/dist/process/outputRing.js.map +1 -0
- package/dist/process/processAuditCoordinator.js +52 -0
- package/dist/process/processAuditCoordinator.js.map +1 -0
- package/dist/process/processManager.js +311 -0
- package/dist/process/processManager.js.map +1 -0
- package/dist/process/runCommand.js +332 -0
- package/dist/process/runCommand.js.map +1 -0
- package/dist/process/streamingRedactor.js +105 -0
- package/dist/process/streamingRedactor.js.map +1 -0
- package/dist/process/types.js +2 -0
- package/dist/process/types.js.map +1 -0
- package/dist/process/windowsHostClient.js +604 -0
- package/dist/process/windowsHostClient.js.map +1 -0
- package/dist/process/windowsHostProtocol.js +270 -0
- package/dist/process/windowsHostProtocol.js.map +1 -0
- package/dist/process/windowsPersistentBackend.js +263 -0
- package/dist/process/windowsPersistentBackend.js.map +1 -0
- package/dist/productionRuntime.js +907 -0
- package/dist/productionRuntime.js.map +1 -0
- package/dist/profileStore.js +231 -0
- package/dist/profileStore.js.map +1 -0
- package/dist/redact.js +124 -0
- package/dist/redact.js.map +1 -0
- package/dist/searchOps.js +186 -0
- package/dist/searchOps.js.map +1 -0
- package/dist/selfTestOps.js +786 -0
- package/dist/selfTestOps.js.map +1 -0
- package/dist/semantic/budgets.js +12 -0
- package/dist/semantic/budgets.js.map +1 -0
- package/dist/semantic/builtin/typescriptAssets.js +68 -0
- package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
- package/dist/semantic/builtin/typescriptProvider.js +211 -0
- package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
- package/dist/semantic/builtin/typescriptWorker.js +365 -0
- package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
- package/dist/semantic/diffPreview.js +36 -0
- package/dist/semantic/diffPreview.js.map +1 -0
- package/dist/semantic/index.js +11 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/manager.js +522 -0
- package/dist/semantic/manager.js.map +1 -0
- package/dist/semantic/positions.js +86 -0
- package/dist/semantic/positions.js.map +1 -0
- package/dist/semantic/previewStore.js +276 -0
- package/dist/semantic/previewStore.js.map +1 -0
- package/dist/semantic/projectResolver.js +309 -0
- package/dist/semantic/projectResolver.js.map +1 -0
- package/dist/semantic/sourceSnapshot.js +54 -0
- package/dist/semantic/sourceSnapshot.js.map +1 -0
- package/dist/semantic/status.js +46 -0
- package/dist/semantic/status.js.map +1 -0
- package/dist/semantic/types.js +2 -0
- package/dist/semantic/types.js.map +1 -0
- package/dist/server.js +8676 -0
- package/dist/server.js.map +1 -0
- package/dist/stdio.js +64 -0
- package/dist/stdio.js.map +1 -0
- package/dist/toolCardWidget.js +2000 -0
- package/dist/toolCardWidget.js.map +1 -0
- package/dist/tools/contracts/catalog.js +111 -0
- package/dist/tools/contracts/catalog.js.map +1 -0
- package/dist/tools/contracts/index.js +8 -0
- package/dist/tools/contracts/index.js.map +1 -0
- package/dist/tools/contracts/registration.js +27 -0
- package/dist/tools/contracts/registration.js.map +1 -0
- package/dist/tools/contracts/schemas.js +11 -0
- package/dist/tools/contracts/schemas.js.map +1 -0
- package/dist/tools/contracts/types.js +2 -0
- package/dist/tools/contracts/types.js.map +1 -0
- package/dist/tools/contracts/v3.js +76 -0
- package/dist/tools/contracts/v3.js.map +1 -0
- package/dist/tools/contracts/v4.js +39 -0
- package/dist/tools/contracts/v4.js.map +1 -0
- package/dist/tools/contracts/v5.js +20 -0
- package/dist/tools/contracts/v5.js.map +1 -0
- package/dist/tools/phase3dServer.js +350 -0
- package/dist/tools/phase3dServer.js.map +1 -0
- package/dist/tools/schemas/applyPatch.js +388 -0
- package/dist/tools/schemas/applyPatch.js.map +1 -0
- package/dist/tools/schemas/bash.js +202 -0
- package/dist/tools/schemas/bash.js.map +1 -0
- package/dist/tools/schemas/closeWorkspace.js +105 -0
- package/dist/tools/schemas/closeWorkspace.js.map +1 -0
- package/dist/tools/schemas/codexContext.js +402 -0
- package/dist/tools/schemas/codexContext.js.map +1 -0
- package/dist/tools/schemas/codexSessions.js +328 -0
- package/dist/tools/schemas/codexSessions.js.map +1 -0
- package/dist/tools/schemas/codexgpt.js +1068 -0
- package/dist/tools/schemas/codexgpt.js.map +1 -0
- package/dist/tools/schemas/codexgptInventory.js +359 -0
- package/dist/tools/schemas/codexgptInventory.js.map +1 -0
- package/dist/tools/schemas/codexgptSelfTest.js +563 -0
- package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
- package/dist/tools/schemas/codexpro.js +917 -0
- package/dist/tools/schemas/codexpro.js.map +1 -0
- package/dist/tools/schemas/codexproInventory.js +352 -0
- package/dist/tools/schemas/codexproInventory.js.map +1 -0
- package/dist/tools/schemas/codexproSelfTest.js +546 -0
- package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
- package/dist/tools/schemas/common.js +21 -0
- package/dist/tools/schemas/common.js.map +1 -0
- package/dist/tools/schemas/createTaskWorktree.js +51 -0
- package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/edit.js +321 -0
- package/dist/tools/schemas/edit.js.map +1 -0
- package/dist/tools/schemas/execution.js +330 -0
- package/dist/tools/schemas/execution.js.map +1 -0
- package/dist/tools/schemas/exportProContext.js +370 -0
- package/dist/tools/schemas/exportProContext.js.map +1 -0
- package/dist/tools/schemas/getTaskWorktree.js +19 -0
- package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/gitBranch.js +42 -0
- package/dist/tools/schemas/gitBranch.js.map +1 -0
- package/dist/tools/schemas/gitCommit.js +40 -0
- package/dist/tools/schemas/gitCommit.js.map +1 -0
- package/dist/tools/schemas/gitCreateBranch.js +22 -0
- package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
- package/dist/tools/schemas/gitDiff.js +222 -0
- package/dist/tools/schemas/gitDiff.js.map +1 -0
- package/dist/tools/schemas/gitLog.js +41 -0
- package/dist/tools/schemas/gitLog.js.map +1 -0
- package/dist/tools/schemas/gitRestore.js +47 -0
- package/dist/tools/schemas/gitRestore.js.map +1 -0
- package/dist/tools/schemas/gitStage.js +33 -0
- package/dist/tools/schemas/gitStage.js.map +1 -0
- package/dist/tools/schemas/gitStash.js +102 -0
- package/dist/tools/schemas/gitStash.js.map +1 -0
- package/dist/tools/schemas/gitStatus.js +226 -0
- package/dist/tools/schemas/gitStatus.js.map +1 -0
- package/dist/tools/schemas/gitV4Common.js +205 -0
- package/dist/tools/schemas/gitV4Common.js.map +1 -0
- package/dist/tools/schemas/guidance.js +40 -0
- package/dist/tools/schemas/guidance.js.map +1 -0
- package/dist/tools/schemas/handoffToAgent.js +276 -0
- package/dist/tools/schemas/handoffToAgent.js.map +1 -0
- package/dist/tools/schemas/handoffToCodex.js +137 -0
- package/dist/tools/schemas/handoffToCodex.js.map +1 -0
- package/dist/tools/schemas/inspectWorkspace.js +379 -0
- package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
- package/dist/tools/schemas/listTaskWorktrees.js +21 -0
- package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
- package/dist/tools/schemas/listWorkspaces.js +134 -0
- package/dist/tools/schemas/listWorkspaces.js.map +1 -0
- package/dist/tools/schemas/loadSkill.js +619 -0
- package/dist/tools/schemas/loadSkill.js.map +1 -0
- package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
- package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/movePaths.js +175 -0
- package/dist/tools/schemas/movePaths.js.map +1 -0
- package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
- package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
- package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
- package/dist/tools/schemas/openWorkspace.js +193 -0
- package/dist/tools/schemas/openWorkspace.js.map +1 -0
- package/dist/tools/schemas/queryAuditEvents.js +193 -0
- package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
- package/dist/tools/schemas/read.js +199 -0
- package/dist/tools/schemas/read.js.map +1 -0
- package/dist/tools/schemas/readCodexSession.js +353 -0
- package/dist/tools/schemas/readCodexSession.js.map +1 -0
- package/dist/tools/schemas/readHandoff.js +446 -0
- package/dist/tools/schemas/readHandoff.js.map +1 -0
- package/dist/tools/schemas/removeTaskWorktree.js +40 -0
- package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
- package/dist/tools/schemas/search.js +235 -0
- package/dist/tools/schemas/search.js.map +1 -0
- package/dist/tools/schemas/semantic.js +195 -0
- package/dist/tools/schemas/semantic.js.map +1 -0
- package/dist/tools/schemas/serverConfig.js +157 -0
- package/dist/tools/schemas/serverConfig.js.map +1 -0
- package/dist/tools/schemas/showChanges.js +283 -0
- package/dist/tools/schemas/showChanges.js.map +1 -0
- package/dist/tools/schemas/transactionResult.js +11 -0
- package/dist/tools/schemas/transactionResult.js.map +1 -0
- package/dist/tools/schemas/tree.js +136 -0
- package/dist/tools/schemas/tree.js.map +1 -0
- package/dist/tools/schemas/undoChangeSet.js +152 -0
- package/dist/tools/schemas/undoChangeSet.js.map +1 -0
- package/dist/tools/schemas/waitForHandoff.js +462 -0
- package/dist/tools/schemas/waitForHandoff.js.map +1 -0
- package/dist/tools/schemas/workspaceSnapshot.js +145 -0
- package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
- package/dist/tools/schemas/write.js +285 -0
- package/dist/tools/schemas/write.js.map +1 -0
- package/dist/transactions/atomicFs.js +438 -0
- package/dist/transactions/atomicFs.js.map +1 -0
- package/dist/transactions/atomicStateFile.js +190 -0
- package/dist/transactions/atomicStateFile.js.map +1 -0
- package/dist/transactions/engine.js +574 -0
- package/dist/transactions/engine.js.map +1 -0
- package/dist/transactions/index.js +12 -0
- package/dist/transactions/index.js.map +1 -0
- package/dist/transactions/installation.js +158 -0
- package/dist/transactions/installation.js.map +1 -0
- package/dist/transactions/manifestV2Store.js +96 -0
- package/dist/transactions/manifestV2Store.js.map +1 -0
- package/dist/transactions/participantRecovery.js +98 -0
- package/dist/transactions/participantRecovery.js.map +1 -0
- package/dist/transactions/recovery.js +513 -0
- package/dist/transactions/recovery.js.map +1 -0
- package/dist/transactions/schemas.js +365 -0
- package/dist/transactions/schemas.js.map +1 -0
- package/dist/transactions/stateRoot.js +63 -0
- package/dist/transactions/stateRoot.js.map +1 -0
- package/dist/transactions/types.js +11 -0
- package/dist/transactions/types.js.map +1 -0
- package/dist/transactions/workspaceLock.js +201 -0
- package/dist/transactions/workspaceLock.js.map +1 -0
- package/dist/workspaceOps.js +924 -0
- package/dist/workspaceOps.js.map +1 -0
- package/dist/worktrees/candidateWorkspace.js +566 -0
- package/dist/worktrees/candidateWorkspace.js.map +1 -0
- package/dist/worktrees/manager.js +258 -0
- package/dist/worktrees/manager.js.map +1 -0
- package/dist/worktrees/materializer.js +60 -0
- package/dist/worktrees/materializer.js.map +1 -0
- package/dist/worktrees/mergeExecute.js +498 -0
- package/dist/worktrees/mergeExecute.js.map +1 -0
- package/dist/worktrees/mergePlanStore.js +247 -0
- package/dist/worktrees/mergePlanStore.js.map +1 -0
- package/dist/worktrees/mergePrepare.js +709 -0
- package/dist/worktrees/mergePrepare.js.map +1 -0
- package/dist/worktrees/recovery.js +294 -0
- package/dist/worktrees/recovery.js.map +1 -0
- package/dist/worktrees/remove.js +296 -0
- package/dist/worktrees/remove.js.map +1 -0
- package/dist/worktrees/remover.js +57 -0
- package/dist/worktrees/remover.js.map +1 -0
- package/dist/worktrees/root.js +47 -0
- package/dist/worktrees/root.js.map +1 -0
- package/dist/worktrees/service.js +245 -0
- package/dist/worktrees/service.js.map +1 -0
- package/dist/worktrees/store.js +156 -0
- package/dist/worktrees/store.js.map +1 -0
- package/dist/worktrees/treeManifest.js +106 -0
- package/dist/worktrees/treeManifest.js.map +1 -0
- package/dist/worktrees/verificationReceipts.js +215 -0
- package/dist/worktrees/verificationReceipts.js.map +1 -0
- package/dist/worktrees/verificationTerminal.js +23 -0
- package/dist/worktrees/verificationTerminal.js.map +1 -0
- package/dist/worktrees/workspaceAuthority.js +64 -0
- package/dist/worktrees/workspaceAuthority.js.map +1 -0
- package/docs/favicon.svg +5 -0
- package/docs/index.html +624 -0
- package/docs/og.svg +52 -0
- package/docs/script.js +33 -0
- package/docs/star.svg +11 -0
- package/docs/styles.css +1571 -0
- package/docs/zh.html +428 -0
- package/package.json +121 -0
- package/scripts/analysis-cli-smoke.mjs +81 -0
- package/scripts/analysis-smoke.mjs +179 -0
- package/scripts/atomic-file.mjs +137 -0
- package/scripts/ci-change-classifier.mjs +59 -0
- package/scripts/ci-failure-summary.mjs +92 -0
- package/scripts/cloudflared-installer.mjs +215 -0
- package/scripts/cloudflared-release.mjs +63 -0
- package/scripts/codexgpt-entry.mjs +235 -0
- package/scripts/codexgpt.mjs +4987 -0
- package/scripts/connector-auth-output-shim.cjs +66 -0
- package/scripts/doctor-smoke.mjs +90 -0
- package/scripts/doctor.mjs +165 -0
- package/scripts/exact-head-ci.mjs +126 -0
- package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
- package/scripts/execute-handoff-smoke.mjs +1117 -0
- package/scripts/g8-u-live-probe.mjs +208 -0
- package/scripts/http-smoke-compat.mjs +151 -0
- package/scripts/http-smoke.mjs +776 -0
- package/scripts/long-task-runner.mjs +1037 -0
- package/scripts/oauth-admin.mjs +1608 -0
- package/scripts/output-bounds.mjs +29 -0
- package/scripts/owned-temp-root.d.mts +50 -0
- package/scripts/owned-temp-root.mjs +567 -0
- package/scripts/phase-4a-smoke.mjs +36 -0
- package/scripts/policy-windows-spike.mjs +135 -0
- package/scripts/pro-apply.mjs +152 -0
- package/scripts/pro-bundle.mjs +121 -0
- package/scripts/pro-smoke.mjs +97 -0
- package/scripts/process-identity.mjs +67 -0
- package/scripts/repository-policy.mjs +166 -0
- package/scripts/run-and-summarize.mjs +134 -0
- package/scripts/run-smoke.mjs +52 -0
- package/scripts/run-with-cleanup.mjs +98 -0
- package/scripts/settings-smoke-platform-compat.mjs +85 -0
- package/scripts/settings-smoke.mjs +769 -0
- package/scripts/smoke-platform-compat.mjs +302 -0
- package/scripts/smoke.mjs +1180 -0
- package/scripts/stress-contract-compat.mjs +94 -0
- package/scripts/stress.mjs +882 -0
- package/scripts/test-domains.mjs +247 -0
- package/scripts/test-execution-profile-manifest.mjs +273 -0
- package/scripts/test-execution-profiles.mjs +147 -0
- package/scripts/test-performance-reporter.mjs +291 -0
- package/scripts/toolchain-manager.mjs +266 -0
- package/scripts/toolchains.json +19 -0
- package/scripts/windows-conpty-probe-child.mjs +82 -0
- package/scripts/windows-conpty-worker.ps1 +24 -0
- package/scripts/windows-credential-host-manifest.json +16 -0
- package/scripts/windows-credential-host-protocol-v1.json +16 -0
- package/scripts/windows-credential-host.cs +256 -0
- package/scripts/windows-credential-host.ps1 +26 -0
- package/scripts/windows-local-control-manifest.json +23 -0
- package/scripts/windows-local-control-spike.cs +738 -0
- package/scripts/windows-local-control-spike.mjs +415 -0
- package/scripts/windows-local-control-spike.ps1 +35 -0
- package/scripts/windows-local-control.cs +738 -0
- package/scripts/windows-local-control.ps1 +35 -0
- package/scripts/windows-native-api-inventory-v1.json +90 -0
- package/scripts/windows-process-host-manifest.json +20 -0
- package/scripts/windows-process-host-protocol-v1.json +59 -0
- package/scripts/windows-process-host.cs +2385 -0
- package/scripts/windows-process-host.ps1 +59 -0
- package/scripts/windows-realpath-shim.cjs +78 -0
|
@@ -0,0 +1,468 @@
|
|
|
1
|
+
import { createHash, randomBytes as nodeRandomBytes } from "node:crypto";
|
|
2
|
+
import fs from "node:fs";
|
|
3
|
+
import path from "node:path";
|
|
4
|
+
import { z } from "zod";
|
|
5
|
+
import { AtomicJsonFileStore } from "../transactions/atomicStateFile.js";
|
|
6
|
+
import { authConfigurationError } from "./errors.js";
|
|
7
|
+
import { OAUTH_CREDENTIAL_PROVIDER } from "./credentialStore.js";
|
|
8
|
+
const opaqueId = (prefix) => z.string().regex(new RegExp(`^${prefix}_[a-f0-9]{32}$`));
|
|
9
|
+
const timestampSchema = z.string().datetime({ offset: true });
|
|
10
|
+
const integritySchema = z.string().regex(/^sha256:[a-f0-9]{64}$/);
|
|
11
|
+
const protectedValueSchema = z.string().min(4).max(131072).regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
|
|
12
|
+
const hostnameSchema = z.string().min(1).max(253).regex(/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(?:\.(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?))+$/);
|
|
13
|
+
const publicJwkSchema = z.object({
|
|
14
|
+
kty: z.literal("EC"),
|
|
15
|
+
crv: z.literal("P-256"),
|
|
16
|
+
x: z.string().min(40).max(64),
|
|
17
|
+
y: z.string().min(40).max(64),
|
|
18
|
+
kid: z.string().regex(/^kid_[a-f0-9]{32}$/),
|
|
19
|
+
alg: z.literal("ES256"),
|
|
20
|
+
use: z.literal("sig")
|
|
21
|
+
}).strict();
|
|
22
|
+
export const InstallationOwnerRecordV1Schema = z.object({
|
|
23
|
+
schemaVersion: z.literal(1),
|
|
24
|
+
ownerRef: opaqueId("ownerref"),
|
|
25
|
+
credentialProvider: z.literal(OAUTH_CREDENTIAL_PROVIDER),
|
|
26
|
+
protectedSubject: protectedValueSchema,
|
|
27
|
+
createdAt: timestampSchema,
|
|
28
|
+
integrity: integritySchema
|
|
29
|
+
}).strict();
|
|
30
|
+
const LegacyDeploymentGrantRecordV1Schema = z.object({
|
|
31
|
+
grantId: opaqueId("grant"),
|
|
32
|
+
clientRef: opaqueId("clientref"),
|
|
33
|
+
active: z.boolean(),
|
|
34
|
+
grantRevision: z.number().int().nonnegative().safe(),
|
|
35
|
+
refreshGeneration: z.number().int().nonnegative().safe()
|
|
36
|
+
}).strict();
|
|
37
|
+
export const OAuthGrantRecordV1Schema = z.object({
|
|
38
|
+
grantId: opaqueId("grant"),
|
|
39
|
+
familyHandle: z.string().regex(/^family_[a-f0-9]{32}$/),
|
|
40
|
+
clientRef: opaqueId("clientref"),
|
|
41
|
+
clientId: z.string().regex(/^client_[A-Za-z0-9_-]{43}$/),
|
|
42
|
+
ownerRef: opaqueId("ownerref"),
|
|
43
|
+
resource: z.string().url().max(2048),
|
|
44
|
+
scopes: z.array(z.enum(["codexgpt:read", "codexgpt:write", "codexgpt:execute"])).min(1).max(3),
|
|
45
|
+
active: z.boolean(),
|
|
46
|
+
status: z.enum(["active", "revoked", "expired"]),
|
|
47
|
+
grantRevision: z.number().int().nonnegative().safe(),
|
|
48
|
+
refreshGeneration: z.number().int().nonnegative().safe(),
|
|
49
|
+
refreshTokenHash: z.string().regex(/^hmac-sha256:[a-f0-9]{64}$/),
|
|
50
|
+
authorizationCodeHash: z.string().regex(/^hmac-sha256:[a-f0-9]{64}$/),
|
|
51
|
+
createdAt: timestampSchema,
|
|
52
|
+
lastUsedAt: timestampSchema,
|
|
53
|
+
idleExpiresAt: timestampSchema,
|
|
54
|
+
absoluteExpiresAt: timestampSchema,
|
|
55
|
+
revokedAt: timestampSchema.nullable(),
|
|
56
|
+
revokeReason: z.enum(["public", "local", "client", "owner", "replay", "expired", "scope_revision"]).nullable()
|
|
57
|
+
}).strict().superRefine((value, context) => {
|
|
58
|
+
if ((value.status === "active") !== value.active) {
|
|
59
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["active"], message: "OAuth grant active state is inconsistent." });
|
|
60
|
+
}
|
|
61
|
+
if ((value.status === "active") !== (value.revokedAt === null && value.revokeReason === null)) {
|
|
62
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["revokedAt"], message: "OAuth grant terminal state is inconsistent." });
|
|
63
|
+
}
|
|
64
|
+
const canonicalScopes = ["codexgpt:read", "codexgpt:write", "codexgpt:execute"]
|
|
65
|
+
.filter((scope) => value.scopes.includes(scope));
|
|
66
|
+
if (canonicalScopes.length !== value.scopes.length ||
|
|
67
|
+
canonicalScopes.some((scope, index) => scope !== value.scopes[index])) {
|
|
68
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["scopes"], message: "OAuth grant scopes are not canonical." });
|
|
69
|
+
}
|
|
70
|
+
if (Date.parse(value.createdAt) > Date.parse(value.lastUsedAt) ||
|
|
71
|
+
Date.parse(value.lastUsedAt) > Date.parse(value.idleExpiresAt) ||
|
|
72
|
+
Date.parse(value.idleExpiresAt) > Date.parse(value.absoluteExpiresAt)) {
|
|
73
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["idleExpiresAt"], message: "OAuth grant lifetime ordering is invalid." });
|
|
74
|
+
}
|
|
75
|
+
if ((value.status === "expired") !== (value.revokeReason === "expired") ||
|
|
76
|
+
(value.status === "revoked" && value.revokeReason === "expired")) {
|
|
77
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["revokeReason"], message: "OAuth grant terminal reason is inconsistent." });
|
|
78
|
+
}
|
|
79
|
+
});
|
|
80
|
+
export const DeploymentGrantRecordV1Schema = z.union([
|
|
81
|
+
OAuthGrantRecordV1Schema,
|
|
82
|
+
LegacyDeploymentGrantRecordV1Schema
|
|
83
|
+
]);
|
|
84
|
+
export const RegisteredOAuthClientV1Schema = z.object({
|
|
85
|
+
clientId: z.string().regex(/^client_[A-Za-z0-9_-]{43}$/),
|
|
86
|
+
clientRef: opaqueId("clientref"),
|
|
87
|
+
redirectUri: z.string().max(2048).refine((value) => value === "https://chatgpt.com/connector_platform_oauth_redirect" ||
|
|
88
|
+
/^https:\/\/chatgpt\.com\/connector\/oauth\/[A-Za-z0-9_-]{8,160}$/.test(value), "OAuth client redirect URI is invalid."),
|
|
89
|
+
clientName: z.string().min(1).max(128).nullable(),
|
|
90
|
+
clientUri: z.string().url().max(2048).nullable(),
|
|
91
|
+
logoUri: z.string().url().max(2048).nullable(),
|
|
92
|
+
tosUri: z.string().url().max(2048).nullable(),
|
|
93
|
+
policyUri: z.string().url().max(2048).nullable(),
|
|
94
|
+
contacts: z.array(z.string().min(1).max(128)).max(8),
|
|
95
|
+
softwareId: z.string().min(1).max(128).nullable(),
|
|
96
|
+
softwareVersion: z.string().min(1).max(128).nullable(),
|
|
97
|
+
issuedAt: z.number().int().positive().safe(),
|
|
98
|
+
status: z.enum(["unapproved", "approved", "revoked"]),
|
|
99
|
+
createdAt: timestampSchema,
|
|
100
|
+
expiresAt: timestampSchema.nullable(),
|
|
101
|
+
approvedAt: timestampSchema.nullable()
|
|
102
|
+
}).strict().superRefine((value, context) => {
|
|
103
|
+
if ((value.status === "approved") !== (value.approvedAt !== null)) {
|
|
104
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["approvedAt"], message: "Approved client state is inconsistent." });
|
|
105
|
+
}
|
|
106
|
+
if ((value.status === "unapproved") !== (value.expiresAt !== null)) {
|
|
107
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["expiresAt"], message: "Unapproved client expiry is inconsistent." });
|
|
108
|
+
}
|
|
109
|
+
});
|
|
110
|
+
export const DeploymentStateV1Schema = z.object({
|
|
111
|
+
schemaVersion: z.literal(1),
|
|
112
|
+
generation: z.number().int().positive(),
|
|
113
|
+
bindingId: opaqueId("binding"),
|
|
114
|
+
incarnationId: opaqueId("incarnation"),
|
|
115
|
+
recoveryEpoch: opaqueId("epoch"),
|
|
116
|
+
canonicalRoot: z.string().min(1).max(32768),
|
|
117
|
+
profileId: z.string().regex(/^[a-f0-9]{24}$/),
|
|
118
|
+
hostname: hostnameSchema,
|
|
119
|
+
issuer: z.string().url(),
|
|
120
|
+
resource: z.string().url(),
|
|
121
|
+
ownerRef: opaqueId("ownerref"),
|
|
122
|
+
credentialProvider: z.literal(OAUTH_CREDENTIAL_PROVIDER),
|
|
123
|
+
protectedSigningPrivateJwk: protectedValueSchema,
|
|
124
|
+
activePublicJwk: publicJwkSchema,
|
|
125
|
+
previousPublicJwks: z.array(publicJwkSchema).max(4),
|
|
126
|
+
protectedRefreshPepper: protectedValueSchema,
|
|
127
|
+
grants: z.array(DeploymentGrantRecordV1Schema).max(4096),
|
|
128
|
+
clients: z.array(RegisteredOAuthClientV1Schema).max(48).optional(),
|
|
129
|
+
recoveryRequired: z.boolean(),
|
|
130
|
+
auditCursorRef: z.string().regex(/^auditref_[a-f0-9]{32}$/).nullable(),
|
|
131
|
+
createdAt: timestampSchema,
|
|
132
|
+
updatedAt: timestampSchema,
|
|
133
|
+
integrity: integritySchema
|
|
134
|
+
}).strict().superRefine((value, context) => {
|
|
135
|
+
const expectedIssuer = `https://${value.hostname}`;
|
|
136
|
+
if (value.issuer !== expectedIssuer || value.resource !== `${expectedIssuer}/mcp`) {
|
|
137
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["issuer"], message: "Deployment URL identity is inconsistent." });
|
|
138
|
+
}
|
|
139
|
+
const allKids = [value.activePublicJwk.kid, ...value.previousPublicJwks.map((key) => key.kid)];
|
|
140
|
+
if (new Set(allKids).size !== allKids.length) {
|
|
141
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["previousPublicJwks"], message: "OAuth signing key identifiers must be unique." });
|
|
142
|
+
}
|
|
143
|
+
const clients = value.clients ?? [];
|
|
144
|
+
if (new Set(clients.map((client) => client.clientId)).size !== clients.length) {
|
|
145
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["clients"], message: "OAuth client identifiers must be unique." });
|
|
146
|
+
}
|
|
147
|
+
if (new Set(clients.map((client) => client.clientRef)).size !== clients.length) {
|
|
148
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["clients"], message: "OAuth client references must be unique." });
|
|
149
|
+
}
|
|
150
|
+
const oauthGrants = value.grants.filter((grant) => "familyHandle" in grant);
|
|
151
|
+
if (new Set(oauthGrants.map((grant) => grant.grantId)).size !== oauthGrants.length) {
|
|
152
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["grants"], message: "OAuth grant identifiers must be unique." });
|
|
153
|
+
}
|
|
154
|
+
if (new Set(oauthGrants.map((grant) => grant.familyHandle)).size !== oauthGrants.length) {
|
|
155
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["grants"], message: "OAuth refresh family handles must be unique." });
|
|
156
|
+
}
|
|
157
|
+
if (new Set(oauthGrants.map((grant) => grant.authorizationCodeHash)).size !== oauthGrants.length) {
|
|
158
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["grants"], message: "OAuth authorization codes must map to one grant." });
|
|
159
|
+
}
|
|
160
|
+
const clientById = new Map(clients.map((client) => [client.clientId, client]));
|
|
161
|
+
for (const [index, grant] of oauthGrants.entries()) {
|
|
162
|
+
const client = clientById.get(grant.clientId);
|
|
163
|
+
const invalidClientBinding = grant.status === "active"
|
|
164
|
+
? !client || client.clientRef !== grant.clientRef
|
|
165
|
+
: Boolean(client && client.clientRef !== grant.clientRef);
|
|
166
|
+
if (grant.ownerRef !== value.ownerRef || grant.resource !== value.resource || invalidClientBinding) {
|
|
167
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["grants", index], message: "OAuth grant deployment binding is invalid." });
|
|
168
|
+
}
|
|
169
|
+
}
|
|
170
|
+
const active = oauthGrants.filter((grant) => grant.status === "active");
|
|
171
|
+
if (active.length > 64) {
|
|
172
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["grants"], message: "OAuth active grant deployment capacity is exceeded." });
|
|
173
|
+
}
|
|
174
|
+
const activeByClient = new Map();
|
|
175
|
+
for (const grant of active)
|
|
176
|
+
activeByClient.set(grant.clientRef, (activeByClient.get(grant.clientRef) ?? 0) + 1);
|
|
177
|
+
if ([...activeByClient.values()].some((count) => count > 8)) {
|
|
178
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["grants"], message: "OAuth active grant client capacity is exceeded." });
|
|
179
|
+
}
|
|
180
|
+
});
|
|
181
|
+
export const DeploymentRegistryEntryV1Schema = z.object({
|
|
182
|
+
identityKey: z.string().regex(/^sha256:[a-f0-9]{64}$/),
|
|
183
|
+
canonicalRoot: z.string().min(1).max(32768),
|
|
184
|
+
profileId: z.string().regex(/^[a-f0-9]{24}$/),
|
|
185
|
+
hostname: hostnameSchema,
|
|
186
|
+
issuer: z.string().url(),
|
|
187
|
+
resource: z.string().url(),
|
|
188
|
+
bindingId: opaqueId("binding"),
|
|
189
|
+
currentIncarnationId: opaqueId("incarnation"),
|
|
190
|
+
tunnelOwnerMarker: z.object({
|
|
191
|
+
tunnel: z.literal("cloudflare-named"),
|
|
192
|
+
tunnelName: z.string().min(1).max(128),
|
|
193
|
+
tunnelOwner: z.literal("codexgpt"),
|
|
194
|
+
bindingId: opaqueId("binding")
|
|
195
|
+
}).strict()
|
|
196
|
+
}).strict().superRefine((value, context) => {
|
|
197
|
+
if (value.tunnelOwnerMarker.bindingId !== value.bindingId) {
|
|
198
|
+
context.addIssue({ code: z.ZodIssueCode.custom, path: ["tunnelOwnerMarker", "bindingId"], message: "Tunnel owner marker binding mismatch." });
|
|
199
|
+
}
|
|
200
|
+
});
|
|
201
|
+
export const DeploymentRegistryV1Schema = z.object({
|
|
202
|
+
schemaVersion: z.literal(1),
|
|
203
|
+
generation: z.number().int().positive(),
|
|
204
|
+
entries: z.array(DeploymentRegistryEntryV1Schema).max(256),
|
|
205
|
+
updatedAt: timestampSchema,
|
|
206
|
+
integrity: integritySchema
|
|
207
|
+
}).strict();
|
|
208
|
+
function stableValue(value) {
|
|
209
|
+
if (Array.isArray(value))
|
|
210
|
+
return value.map(stableValue);
|
|
211
|
+
if (value && typeof value === "object") {
|
|
212
|
+
const output = {};
|
|
213
|
+
for (const key of Object.keys(value).sort()) {
|
|
214
|
+
if (key !== "integrity")
|
|
215
|
+
output[key] = stableValue(value[key]);
|
|
216
|
+
}
|
|
217
|
+
return output;
|
|
218
|
+
}
|
|
219
|
+
return value;
|
|
220
|
+
}
|
|
221
|
+
export function authStateIntegrity(value) {
|
|
222
|
+
return `sha256:${createHash("sha256").update(JSON.stringify(stableValue(value))).digest("hex")}`;
|
|
223
|
+
}
|
|
224
|
+
function withIntegrity(value) {
|
|
225
|
+
return { ...value, integrity: authStateIntegrity(value) };
|
|
226
|
+
}
|
|
227
|
+
function verifyIntegrity(value) {
|
|
228
|
+
if (value.integrity !== authStateIntegrity(value)) {
|
|
229
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth state integrity verification failed.");
|
|
230
|
+
}
|
|
231
|
+
}
|
|
232
|
+
function checkedId(prefix, value) {
|
|
233
|
+
if (!new RegExp(`^${prefix}_[a-f0-9]{32}$`).test(value)) {
|
|
234
|
+
throw authConfigurationError("OAUTH_STATE_INVALID", `OAuth ${prefix} identifier is invalid.`);
|
|
235
|
+
}
|
|
236
|
+
return value;
|
|
237
|
+
}
|
|
238
|
+
function assertDurableWrite(result) {
|
|
239
|
+
if (result === "failed") {
|
|
240
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth state replacement completed without a verifiable directory durability boundary.");
|
|
241
|
+
}
|
|
242
|
+
}
|
|
243
|
+
export function authStatePaths(stateRoot) {
|
|
244
|
+
const root = path.resolve(stateRoot);
|
|
245
|
+
return Object.freeze({
|
|
246
|
+
root,
|
|
247
|
+
installationDirectory: path.join(root, "installation"),
|
|
248
|
+
ownerFile: path.join(root, "installation", "owner.json"),
|
|
249
|
+
deploymentsDirectory: path.join(root, "deployments"),
|
|
250
|
+
registryFile: path.join(root, "deployments", "registry.json"),
|
|
251
|
+
runtimeDirectory: path.join(root, "runtime")
|
|
252
|
+
});
|
|
253
|
+
}
|
|
254
|
+
export function deploymentStateFile(stateRoot, bindingId, incarnationId) {
|
|
255
|
+
checkedId("binding", bindingId);
|
|
256
|
+
checkedId("incarnation", incarnationId);
|
|
257
|
+
return path.join(authStatePaths(stateRoot).deploymentsDirectory, bindingId, "incarnations", incarnationId, "state.json");
|
|
258
|
+
}
|
|
259
|
+
export function deploymentBackupsDirectory(stateRoot, bindingId, incarnationId) {
|
|
260
|
+
checkedId("binding", bindingId);
|
|
261
|
+
checkedId("incarnation", incarnationId);
|
|
262
|
+
return path.join(authStatePaths(stateRoot).deploymentsDirectory, bindingId, "incarnations", incarnationId, "backups");
|
|
263
|
+
}
|
|
264
|
+
export function deploymentBackupFile(stateRoot, bindingId, incarnationId, backupId) {
|
|
265
|
+
if (!/^backup_[0-9]{13}_[a-f0-9]{32}\.json$/.test(backupId)) {
|
|
266
|
+
throw authConfigurationError("OAUTH_BACKUP_INVALID", "OAuth backup identifier is invalid.");
|
|
267
|
+
}
|
|
268
|
+
return path.join(deploymentBackupsDirectory(stateRoot, bindingId, incarnationId), backupId);
|
|
269
|
+
}
|
|
270
|
+
export class AuthStateStore {
|
|
271
|
+
#paths;
|
|
272
|
+
#ownerStore;
|
|
273
|
+
#deploymentStore;
|
|
274
|
+
#registryStore;
|
|
275
|
+
#credentialStore;
|
|
276
|
+
#randomBytes;
|
|
277
|
+
#now;
|
|
278
|
+
#audit;
|
|
279
|
+
constructor(stateRoot, credentialStore, dependencies) {
|
|
280
|
+
this.#paths = authStatePaths(stateRoot);
|
|
281
|
+
this.#credentialStore = credentialStore;
|
|
282
|
+
this.#randomBytes = dependencies.randomBytes ?? nodeRandomBytes;
|
|
283
|
+
this.#now = dependencies.now ?? Date.now;
|
|
284
|
+
this.#audit = dependencies.audit;
|
|
285
|
+
this.#ownerStore = new AtomicJsonFileStore(this.#paths.root, InstallationOwnerRecordV1Schema);
|
|
286
|
+
this.#deploymentStore = new AtomicJsonFileStore(this.#paths.root, DeploymentStateV1Schema);
|
|
287
|
+
this.#registryStore = new AtomicJsonFileStore(this.#paths.root, DeploymentRegistryV1Schema);
|
|
288
|
+
}
|
|
289
|
+
paths() {
|
|
290
|
+
return this.#paths;
|
|
291
|
+
}
|
|
292
|
+
async initializeOwner() {
|
|
293
|
+
if (fs.existsSync(this.#paths.ownerFile)) {
|
|
294
|
+
const record = this.readOwner();
|
|
295
|
+
const plaintext = await this.#credentialStore.unprotect(record.protectedSubject, "codexgpt-owner-v1");
|
|
296
|
+
try {
|
|
297
|
+
const subject = Buffer.from(plaintext).toString("utf8");
|
|
298
|
+
if (!/^subject_[A-Za-z0-9_-]{43}$/.test(subject)) {
|
|
299
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth owner subject is invalid.");
|
|
300
|
+
}
|
|
301
|
+
return { record, subject };
|
|
302
|
+
}
|
|
303
|
+
finally {
|
|
304
|
+
plaintext.fill(0);
|
|
305
|
+
}
|
|
306
|
+
}
|
|
307
|
+
const ownerRef = `ownerref_${this.#random(16).toString("hex")}`;
|
|
308
|
+
const subject = `subject_${this.#random(32).toString("base64url")}`;
|
|
309
|
+
const subjectBytes = Buffer.from(subject, "utf8");
|
|
310
|
+
let protectedSubject;
|
|
311
|
+
try {
|
|
312
|
+
protectedSubject = await this.#credentialStore.protect(subjectBytes, "codexgpt-owner-v1");
|
|
313
|
+
}
|
|
314
|
+
finally {
|
|
315
|
+
subjectBytes.fill(0);
|
|
316
|
+
}
|
|
317
|
+
const record = InstallationOwnerRecordV1Schema.parse(withIntegrity({
|
|
318
|
+
schemaVersion: 1,
|
|
319
|
+
ownerRef,
|
|
320
|
+
credentialProvider: OAUTH_CREDENTIAL_PROVIDER,
|
|
321
|
+
protectedSubject,
|
|
322
|
+
createdAt: new Date(this.#now()).toISOString()
|
|
323
|
+
}));
|
|
324
|
+
await this.#auditBefore("installation_owner_created", null, null, 1, record);
|
|
325
|
+
assertDurableWrite(this.#ownerStore.write(this.#paths.ownerFile, record));
|
|
326
|
+
return { record, subject };
|
|
327
|
+
}
|
|
328
|
+
readOwner() {
|
|
329
|
+
try {
|
|
330
|
+
const value = this.#ownerStore.read(this.#paths.ownerFile);
|
|
331
|
+
verifyIntegrity(value);
|
|
332
|
+
return value;
|
|
333
|
+
}
|
|
334
|
+
catch (error) {
|
|
335
|
+
if (error.code === "OAUTH_STATE_RECOVERY_REQUIRED")
|
|
336
|
+
throw error;
|
|
337
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth installation owner state is unavailable.");
|
|
338
|
+
}
|
|
339
|
+
}
|
|
340
|
+
readDeployment(bindingId, incarnationId) {
|
|
341
|
+
try {
|
|
342
|
+
const value = this.#deploymentStore.read(deploymentStateFile(this.#paths.root, bindingId, incarnationId));
|
|
343
|
+
verifyIntegrity(value);
|
|
344
|
+
if (value.recoveryRequired) {
|
|
345
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth deployment requires explicit recovery.");
|
|
346
|
+
}
|
|
347
|
+
return value;
|
|
348
|
+
}
|
|
349
|
+
catch (error) {
|
|
350
|
+
if (error.code === "OAUTH_STATE_RECOVERY_REQUIRED")
|
|
351
|
+
throw error;
|
|
352
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth deployment state is unavailable.");
|
|
353
|
+
}
|
|
354
|
+
}
|
|
355
|
+
async writeDeployment(value, transition = "deployment_state_written") {
|
|
356
|
+
const record = DeploymentStateV1Schema.parse(withIntegrity(value));
|
|
357
|
+
await this.#auditBefore(transition, record.bindingId, record.incarnationId, record.generation, record);
|
|
358
|
+
assertDurableWrite(this.#deploymentStore.write(deploymentStateFile(this.#paths.root, record.bindingId, record.incarnationId), record));
|
|
359
|
+
return record;
|
|
360
|
+
}
|
|
361
|
+
async createDeploymentBackup(bindingId, incarnationId) {
|
|
362
|
+
const current = this.readDeployment(bindingId, incarnationId);
|
|
363
|
+
const backupId = `backup_${String(this.#now()).padStart(13, "0")}_${this.#random(16).toString("hex")}.json`;
|
|
364
|
+
const backupFile = deploymentBackupFile(this.#paths.root, bindingId, incarnationId, backupId);
|
|
365
|
+
if (fs.existsSync(backupFile)) {
|
|
366
|
+
throw authConfigurationError("OAUTH_BACKUP_CONFLICT", "OAuth backup identifier already exists.");
|
|
367
|
+
}
|
|
368
|
+
await this.#auditBefore("deployment_backup_created", current.bindingId, current.incarnationId, current.generation, current);
|
|
369
|
+
assertDurableWrite(this.#deploymentStore.write(backupFile, current));
|
|
370
|
+
return backupId;
|
|
371
|
+
}
|
|
372
|
+
readDeploymentBackup(bindingId, incarnationId, backupId) {
|
|
373
|
+
try {
|
|
374
|
+
const value = this.#deploymentStore.read(deploymentBackupFile(this.#paths.root, bindingId, incarnationId, backupId));
|
|
375
|
+
verifyIntegrity(value);
|
|
376
|
+
if (value.bindingId !== bindingId || value.incarnationId !== incarnationId) {
|
|
377
|
+
throw authConfigurationError("OAUTH_BACKUP_INVALID", "OAuth backup identity does not match its storage path.");
|
|
378
|
+
}
|
|
379
|
+
return value;
|
|
380
|
+
}
|
|
381
|
+
catch (error) {
|
|
382
|
+
if (error.code === "OAUTH_BACKUP_INVALID")
|
|
383
|
+
throw error;
|
|
384
|
+
throw authConfigurationError("OAUTH_BACKUP_INVALID", "OAuth backup is missing, malformed, or fails integrity verification.");
|
|
385
|
+
}
|
|
386
|
+
}
|
|
387
|
+
listDeploymentBackups(bindingId, incarnationId) {
|
|
388
|
+
const directory = deploymentBackupsDirectory(this.#paths.root, bindingId, incarnationId);
|
|
389
|
+
let names;
|
|
390
|
+
try {
|
|
391
|
+
names = fs.readdirSync(directory);
|
|
392
|
+
}
|
|
393
|
+
catch (error) {
|
|
394
|
+
if (error.code === "ENOENT")
|
|
395
|
+
return [];
|
|
396
|
+
throw authConfigurationError("OAUTH_BACKUP_INVALID", "OAuth backup directory is unreadable.");
|
|
397
|
+
}
|
|
398
|
+
return names
|
|
399
|
+
.filter((name) => /^backup_[0-9]{13}_[a-f0-9]{32}\.json$/.test(name))
|
|
400
|
+
.sort();
|
|
401
|
+
}
|
|
402
|
+
listBindingBackups(bindingId) {
|
|
403
|
+
checkedId("binding", bindingId);
|
|
404
|
+
const incarnationsDirectory = path.join(this.#paths.deploymentsDirectory, bindingId, "incarnations");
|
|
405
|
+
let entries;
|
|
406
|
+
try {
|
|
407
|
+
entries = fs.readdirSync(incarnationsDirectory, { withFileTypes: true });
|
|
408
|
+
}
|
|
409
|
+
catch (error) {
|
|
410
|
+
if (error.code === "ENOENT")
|
|
411
|
+
return [];
|
|
412
|
+
throw authConfigurationError("OAUTH_BACKUP_INVALID", "OAuth incarnation directory is unreadable.");
|
|
413
|
+
}
|
|
414
|
+
const backups = [];
|
|
415
|
+
for (const entry of entries) {
|
|
416
|
+
if (!entry.isDirectory() || !/^incarnation_[a-f0-9]{32}$/.test(entry.name))
|
|
417
|
+
continue;
|
|
418
|
+
for (const backupId of this.listDeploymentBackups(bindingId, entry.name)) {
|
|
419
|
+
backups.push({ backupId, incarnationId: entry.name });
|
|
420
|
+
}
|
|
421
|
+
}
|
|
422
|
+
return backups.sort((left, right) => left.backupId.localeCompare(right.backupId) || left.incarnationId.localeCompare(right.incarnationId));
|
|
423
|
+
}
|
|
424
|
+
readRegistry() {
|
|
425
|
+
if (!fs.existsSync(this.#paths.registryFile))
|
|
426
|
+
return null;
|
|
427
|
+
try {
|
|
428
|
+
const value = this.#registryStore.read(this.#paths.registryFile);
|
|
429
|
+
verifyIntegrity(value);
|
|
430
|
+
return value;
|
|
431
|
+
}
|
|
432
|
+
catch (error) {
|
|
433
|
+
if (error.code === "OAUTH_STATE_RECOVERY_REQUIRED")
|
|
434
|
+
throw error;
|
|
435
|
+
throw authConfigurationError("OAUTH_STATE_RECOVERY_REQUIRED", "OAuth deployment registry is unavailable.");
|
|
436
|
+
}
|
|
437
|
+
}
|
|
438
|
+
async writeRegistry(value, identity) {
|
|
439
|
+
checkedId("binding", identity.bindingId);
|
|
440
|
+
checkedId("incarnation", identity.incarnationId);
|
|
441
|
+
const record = DeploymentRegistryV1Schema.parse(withIntegrity(value));
|
|
442
|
+
await this.#auditBefore("registry_written", identity.bindingId, identity.incarnationId, record.generation, record);
|
|
443
|
+
assertDurableWrite(this.#registryStore.write(this.#paths.registryFile, record));
|
|
444
|
+
return record;
|
|
445
|
+
}
|
|
446
|
+
#random(size) {
|
|
447
|
+
const value = this.#randomBytes(size);
|
|
448
|
+
if (!Buffer.isBuffer(value) || value.length !== size) {
|
|
449
|
+
throw authConfigurationError("OAUTH_STATE_INVALID", "OAuth state random source is invalid.");
|
|
450
|
+
}
|
|
451
|
+
return value;
|
|
452
|
+
}
|
|
453
|
+
async #auditBefore(transition, bindingId, incarnationId, generation, value) {
|
|
454
|
+
try {
|
|
455
|
+
await this.#audit.append({
|
|
456
|
+
transition,
|
|
457
|
+
bindingId,
|
|
458
|
+
incarnationId,
|
|
459
|
+
generation,
|
|
460
|
+
stateDigest: authStateIntegrity(value)
|
|
461
|
+
});
|
|
462
|
+
}
|
|
463
|
+
catch {
|
|
464
|
+
throw authConfigurationError("OAUTH_AUDIT_FAILURE", "OAuth state transition could not be durably audited.");
|
|
465
|
+
}
|
|
466
|
+
}
|
|
467
|
+
}
|
|
468
|
+
//# sourceMappingURL=stateStore.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"stateStore.js","sourceRoot":"","sources":["../../src/auth/stateStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,yBAAyB,EAE1B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,gBAAgB,CAAC,CAAC,CAAC;AAC9F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAClE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;AACrI,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;AACrJ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7B,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACtB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACxD,gBAAgB,EAAE,oBAAoB;IACtC,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC1B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACvD,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACxD,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IACxD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAChE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACrE,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,eAAe;IAC3B,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,eAAe;IAClC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/G,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9F,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;SAC5E,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAsC,CAAC,CAAC,CAAC;IACpF,IACE,eAAe,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;QAC9C,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EACrE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,IACE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACrE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACnI,CAAC;IACD,IACE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;QACnE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,EAChE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACrI,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,wBAAwB;IACxB,mCAAmC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACxD,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,uDAAuD;QAC1E,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,EAChF,uCAAuC,CACxC;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACrD,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC9B,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC;IACtC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;IAC9B,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACxD,0BAA0B,EAAE,oBAAoB;IAChD,eAAe,EAAE,eAAe;IAChC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,sBAAsB,EAAE,oBAAoB;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IACtE,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,MAAM,cAAc,GAAG,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,cAAc,MAAM,EAAE,CAAC;QAClF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/F,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;IAC5I,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAA+B,EAAE,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;IACzG,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACxF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACjG,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ;YACpD,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACjD,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5D,IACE,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,oBAAoB,EAC9F,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;QACpI,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChH,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAC;IAClI,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC9B,oBAAoB,EAAE,QAAQ,CAAC,aAAa,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACtC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;KAC/B,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,IAAI,KAAK,CAAC,iBAAiB,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;IAChJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1D,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAgDZ,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,IAAI,GAAG,KAAK,WAAW;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,SAAS,aAAa,CAAoC,KAAQ;IAChE,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,KAA4B;IACnD,IAAI,KAAK,CAAC,SAAS,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,sBAAsB,CAAC,+BAA+B,EAAE,4CAA4C,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,sBAAsB,CAAC,qBAAqB,EAAE,SAAS,MAAM,yBAAyB,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA8C;IACxE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,sBAAsB,CAC1B,+BAA+B,EAC/B,uFAAuF,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAQ9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QACtD,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,CAAC;QACxD,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACpD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,CAAC;QAC7D,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,SAAiB,EAAE,aAAqB;IAC7F,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CACd,cAAc,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAC9C,SAAS,EACT,cAAc,EACd,aAAa,EACb,YAAY,CACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,SAAiB,EAAE,SAAiB,EAAE,aAAqB;IACpG,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CACd,cAAc,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAC9C,SAAS,EACT,cAAc,EACd,aAAa,EACb,SAAS,CACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,SAAiB,EACjB,SAAiB,EACjB,aAAqB,EACrB,QAAgB;IAEhB,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,sBAAsB,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,MAAM,CAAoC;IAC1C,WAAW,CAAiD;IAC5D,gBAAgB,CAAyC;IACzD,cAAc,CAA4C;IAC1D,gBAAgB,CAAkB;IAClC,YAAY,CAA2B;IACvC,IAAI,CAAe;IACnB,MAAM,CAAyB;IAExC,YAAY,SAAiB,EAAE,eAAgC,EAAE,YAAwC;QACvG,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,WAAW,IAAI,eAAe,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAC9F,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QAC3F,IAAI,CAAC,cAAc,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YACtG,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACxD,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,MAAM,sBAAsB,CAAC,+BAA+B,EAAE,iCAAiC,CAAC,CAAC;gBACnG,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,gBAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5F,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC,aAAa,CAAC;YACjE,aAAa,EAAE,CAAU;YACzB,QAAQ;YACR,kBAAkB,EAAE,yBAAyB;YAC7C,gBAAgB;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;SAC/C,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7E,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,SAAS;QACP,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3D,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,+BAA+B;gBAAE,MAAM,KAAK,CAAC;YACvF,MAAM,sBAAsB,CAAC,+BAA+B,EAAE,gDAAgD,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,aAAqB;QACrD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;YAC1G,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,MAAM,sBAAsB,CAAC,+BAA+B,EAAE,8CAA8C,CAAC,CAAC;YAChH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,+BAA+B;gBAAE,MAAM,KAAK,CAAC;YACvF,MAAM,sBAAsB,CAAC,+BAA+B,EAAE,wCAAwC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAA2C,EAAE,aAAgD,0BAA0B;QAC3I,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACvG,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACvI,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB,EAAE,aAAqB;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5G,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC9F,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,sBAAsB,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,CACrB,2BAA2B,EAC3B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,UAAU,EAClB,OAAO,CACR,CAAC;QACF,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oBAAoB,CAAC,SAAiB,EAAE,aAAqB,EAAE,QAAgB;QAC7E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrH,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;gBAC3E,MAAM,sBAAsB,CAAC,sBAAsB,EAAE,wDAAwD,CAAC,CAAC;YACjH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,sBAAsB;gBAAE,MAAM,KAAK,CAAC;YAC9E,MAAM,sBAAsB,CAAC,sBAAsB,EAAE,sEAAsE,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC,SAAiB,EAAE,aAAqB;QAC5D,MAAM,SAAS,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACzF,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,sBAAsB,CAAC,sBAAsB,EAAE,uCAAuC,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACpE,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,kBAAkB,CAAC,SAAiB;QAClC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChC,MAAM,qBAAqB,GAAG,IAAI,CAAC,IAAI,CACrC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAChC,SAAS,EACT,cAAc,CACf,CAAC;QACF,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,sBAAsB,CAAC,sBAAsB,EAAE,4CAA4C,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,OAAO,GAAuD,EAAE,CAAC;QACvE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CACrG,CAAC;IACJ,CAAC;IAED,YAAY;QACV,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACjE,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,+BAA+B;gBAAE,MAAM,KAAK,CAAC;YACvF,MAAM,sBAAsB,CAAC,+BAA+B,EAAE,2CAA2C,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAA8C,EAC9C,QAAsD;QAEtD,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,SAAS,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnH,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,sBAAsB,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAA6C,EAC7C,SAAwB,EACxB,aAA4B,EAC5B,UAAkB,EAClB,KAAc;QAEd,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvB,UAAU;gBACV,SAAS;gBACT,aAAa;gBACb,UAAU;gBACV,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,sBAAsB,CAAC,qBAAqB,EAAE,sDAAsD,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;CACF"}
|