cyrus-codex-runner 0.2.74-cypack1546.0 → 0.2.76

package/dist/backend/ContainedCodexProcess.js

@@ -1,306 +0,0 @@
-import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { AppServerClient } from "./appServerClient.js";
-// Runs inside the isolated container. The only bridge is framed stdio; its HTTP
-// server is in the container's network-none namespace, never a host listener.
-const relay = String.raw `
-const http = require('node:http'), cp = require('node:child_process'), readline = require('node:readline'), fs = require('node:fs');
-fs.mkdirSync('/work/home/.codex', {recursive:true,mode:448});
-const pending = new Map(); let sequence=0, child;
-function emit(value) { process.stdout.write(JSON.stringify(value)+'\n'); }
-const server = http.createServer(async (req,res) => {
- if(req.method!=='POST'||req.url!=='/responses'||pending.size>=2){res.writeHead(403);res.end();return;}
- const chunks=[];let size=0;
- try { for await(const part of req){size+=part.length;if(size>2000000)throw Error();chunks.push(part);} }
- catch {res.writeHead(413);res.end();return;}
- const id='cyrus-model-'+(++sequence);
- const timer=setTimeout(()=>{pending.delete(id);res.writeHead(504);res.end();},60000);
- pending.set(id,{res,timer});
- emit({id,method:'cyrus/model',params:{body:Buffer.concat(chunks).toString('utf8')}});
-});
-server.listen(0,'127.0.0.1',()=>{
- const base='http://127.0.0.1:'+server.address().port;
- const config={model_provider:'cyrus_contained',model_providers:{cyrus_contained:{name:'Cyrus scoped model broker',base_url:base,wire_api:'responses',requires_openai_auth:false,supports_websockets:false,request_max_retries:0,stream_max_retries:0}},web_search:'disabled',mcp_servers:{},analytics:{enabled:false},features:{shell_tool:false,unified_exec:false,multi_agent:false,goals:false,apps:false,plugins:false,hooks:false,remote_plugin:false,skill_search:false,skill_mcp_dependency_install:false,memories:false,external_agent_memory_import:false,browser_use:false,browser_use_external:false,computer_use:false,image_generation:false,code_mode_host:false,workspace_dependencies:false,sleep_tool:false},cli_auth_credentials_store:'ephemeral'};
- const args=['app-server','--listen','stdio://'];
- // TOML overrides for fixed supervisor settings only. Never merge user config.
- for(const [k,v] of Object.entries(config)) {
-  if(k==='model_providers') {
-   for(const [field,value] of Object.entries(v.cyrus_contained))args.push('-c','model_providers.cyrus_contained.'+field+'='+JSON.stringify(value));
-  } else if(typeof v==='object') {
-   for(const [field,value] of Object.entries(v))args.push('-c',k+'.'+field+'='+JSON.stringify(value));
-  } else args.push('-c',k+'='+JSON.stringify(v));
- }
- child=cp.spawn('/usr/local/bin/codex',args,{cwd:'/work',env:{PATH:'/usr/local/bin:/usr/bin:/bin',HOME:'/work/home',CODEX_HOME:'/work/home/.codex'},stdio:['pipe','pipe','pipe']});
- child.stdout.pipe(process.stdout); child.stderr.resume();
- child.on('error',()=>process.exit(70));child.on('exit',()=>process.exit(0));
- const input=readline.createInterface({input:process.stdin});let bytes=0;
- input.on('line',line=>{
-  bytes+=Buffer.byteLength(line);if(line.length>8000000||bytes>64000000)process.exit(71);
-  let message;try{message=JSON.parse(line);}catch{process.exit(72);}
-  if(typeof message.id==='string'&&message.id.startsWith('cyrus-model-')) {
-   const p=pending.get(message.id);if(!p)return;pending.delete(message.id);clearTimeout(p.timer);
-   const r=message.result;
-   if(!r||typeof r.body!=='string'||r.body.length>8000000||!Number.isInteger(r.status)){p.res.writeHead(502);p.res.end();return;}
-   p.res.writeHead(r.status,{'content-type':r.contentType==='text/event-stream'?'text/event-stream':'application/json'});p.res.end(Buffer.from(r.body,'base64'));
-  } else child.stdin.write(line+'\n');
- });
- input.on('close',()=>process.exit(0));
-});
-`;
-/** Dedicated process, empty home, no mounts/network/credentials; never uses the
- * ordinary shared app-server pool. Container data is untrusted at the bridge. */
-export class ContainedCodexProcess {
-    config;
-    name = `cyrus-codex-${randomUUID()}`;
-    client;
-    stopped = false;
-    started = false;
-    initialized = false;
-    closing;
-    requests = new Set();
-    constructor(config) {
-        this.config = config;
-        if (!/^sha256:[a-f0-9]{64}$/.test(config.image) ||
-            !config.dockerPath.startsWith("/") ||
-            !config.dockerHost.startsWith("unix:///"))
-            throw new Error("Contained Codex requires a local immutable image and Docker socket");
-    }
-    command(args, signal) {
-        return new Promise((resolve, reject) => {
-            const child = spawn(this.config.dockerPath, ["--host", this.config.dockerHost, ...args], {
-                env: { PATH: "/usr/bin:/bin", HOME: "/nonexistent" },
-                stdio: ["ignore", "pipe", "pipe"],
-                signal,
-            });
-            let output = "", size = 0;
-            const timer = setTimeout(() => child.kill("SIGKILL"), 15000);
-            child.stdout.on("data", (part) => {
-                size += part.length;
-                if (size > 1000000)
-                    child.kill("SIGKILL");
-                else
-                    output += part.toString();
-            });
-            child.stderr.resume();
-            child.on("error", () => {
-                clearTimeout(timer);
-                reject(new Error("Contained Codex Docker operation failed"));
-            });
-            child.on("close", (code) => {
-                clearTimeout(timer);
-                if (code === 0 && size <= 1000000)
-                    resolve(output);
-                else
-                    reject(new Error("Contained Codex Docker operation failed"));
-            });
-        });
-    }
-    async start(options) {
-        if (this.started || this.stopped)
-            throw new Error("Contained Codex process cannot be reused");
-        this.started = true;
-        const info = JSON.parse(await this.command(["image", "inspect", this.config.image], options.signal));
-        if (info.length !== 1 || Object.keys(info[0]?.Config?.Volumes ?? {}).length)
-            throw new Error("Contained image may not declare volumes");
-        if (this.stopped)
-            throw new Error("Contained process is closing");
-        const args = [
-            "--host",
-            this.config.dockerHost,
-            "run",
-            "--rm",
-            "--pull=never",
-            "--interactive",
-            "--name",
-            this.name,
-            "--network=none",
-            "--read-only",
-            "--no-healthcheck",
-            "--cap-drop=ALL",
-            "--security-opt=no-new-privileges",
-            "--pids-limit=128",
-            "--memory=768m",
-            "--cpus=1",
-            "--user=1000:1000",
-            "--workdir=/work",
-            "--tmpfs=/work:rw,nosuid,nodev,size=128m,uid=1000,gid=1000,mode=0700",
-            "--tmpfs=/tmp:rw,nosuid,nodev,size=64m,uid=1000,gid=1000,mode=0700",
-            "--entrypoint=/usr/bin/env",
-            this.config.image,
-            "-i",
-            "PATH=/usr/local/bin:/usr/bin:/bin",
-            "HOME=/work/home",
-            "/usr/local/bin/node",
-            "-e",
-            relay,
-        ];
-        const client = new AppServerClient({
-            binaryPath: this.config.dockerPath,
-            args,
-            env: { PATH: "/usr/bin:/bin", HOME: "/nonexistent" },
-            logger: { warn() { }, error() { } },
-            requestTimeoutMs: 20000,
-            maxOutputBytes: 32_000_000,
-        });
-        this.client = client;
-        let modelRequests = 0;
-        client.setNotificationHandler(options.notification);
-        client.setServerRequestHandler((method, params) => {
-            if (this.stopped)
-                throw new Error("Contained process is closing");
-            const work = (async () => {
-                options.signal.throwIfAborted();
-                if (method !== "cyrus/model")
-                    return options.request(method, params);
-                if (++modelRequests > 24 ||
-                    !params ||
-                    typeof params !== "object" ||
-                    Object.keys(params).join() !== "body" ||
-                    typeof params.body !== "string" ||
-                    Buffer.byteLength(params.body) > 2000000)
-                    throw new Error("Contained model request rejected");
-                return options.model(params, options.signal);
-            })();
-            this.requests.add(work);
-            const settled = () => this.requests.delete(work);
-            void work.then(settled, settled);
-            return work;
-        });
-        client.on("error", () => {
-            void this.close().catch(() => { });
-        });
-        const abort = () => {
-            void this.close().catch(() => { });
-        };
-        options.signal.addEventListener("abort", abort, { once: true });
-        client.on("exit", () => {
-            options.signal.removeEventListener("abort", abort);
-            options.exit?.();
-        });
-        try {
-            options.signal.throwIfAborted();
-            client.start();
-            const initialized = await client.request("initialize", {
-                clientInfo: { name: "cyrus-contained-codex", version: "1" },
-                capabilities: { experimentalApi: true },
-            });
-            if (initialized.codexHome !== "/work/home/.codex" ||
-                !initialized.userAgent.includes("/0.153.3 "))
-                throw new Error("Unsupported contained Codex protocol");
-            this.initialized = true;
-        }
-        catch {
-            await this.close();
-            throw new Error("Contained Codex initialization failed");
-        }
-    }
-    request(method, params) {
-        if (this.stopped || !this.client)
-            throw new Error("Contained Codex is unavailable");
-        return this.client.request(method, params);
-    }
-    /** Native rollout only; no auth/config/database files or host filesystem access. */
-    async snapshot(threadId) {
-        if (!/^[a-f0-9-]{36}$/.test(threadId))
-            throw new Error("Invalid native session ID");
-        const { thread } = await this.request("thread/read", { threadId, includeTurns: false });
-        if (thread.id !== threadId ||
-            typeof thread.path !== "string" ||
-            !thread.path.startsWith("/work/home/.codex/sessions/"))
-            throw new Error("Foreign native checkpoint");
-        const result = await this.request("command/exec", {
-            command: [
-                "/usr/local/bin/node",
-                "-e",
-                `const fs=require('node:fs');const p=process.argv[1];if(!fs.realpathSync(p).startsWith('/work/home/.codex/sessions/'))process.exit(1);const fd=fs.openSync(p,fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW);const s=fs.fstatSync(fd);if(!s.isFile()||s.size>2000000)process.exit(2);process.stdout.write(fs.readFileSync(fd).toString('base64'));`,
-                thread.path,
-            ],
-            cwd: "/work",
-            sandboxPolicy: { type: "dangerFullAccess" },
-            timeoutMs: 5000,
-            outputBytesCap: 2700000,
-        });
-        if (result.exitCode !== 0)
-            throw new Error("Native checkpoint capture failed");
-        const snapshot = { threadId, rollout: result.stdout };
-        this.validateSnapshot(snapshot);
-        return snapshot;
-    }
-    validateSnapshot(snapshot) {
-        if (!/^[a-f0-9-]{36}$/.test(snapshot.threadId) ||
-            snapshot.rollout.length > 2700000 ||
-            !/^[A-Za-z0-9+/]+={0,2}$/.test(snapshot.rollout))
-            throw new Error("Invalid native checkpoint");
-        const bytes = Buffer.from(snapshot.rollout, "base64");
-        if (bytes.length > 2000000 || bytes.toString("base64") !== snapshot.rollout)
-            throw new Error("Invalid native checkpoint encoding");
-        const first = JSON.parse(bytes.toString("utf8").split("\n")[0]);
-        if (first.type !== "session_meta" ||
-            first.payload?.id !== snapshot.threadId ||
-            first.payload?.cwd !== "/work")
-            throw new Error("Native checkpoint identity mismatch");
-    }
-    async restore(snapshot) {
-        this.validateSnapshot(snapshot);
-        const path = `/work/home/.codex/sessions/cyrus-${snapshot.threadId}.jsonl`;
-        const result = await this.request("command/exec", {
-            command: [
-                "/usr/local/bin/node",
-                "-e",
-                `const fs=require('node:fs');fs.mkdirSync('/work/home/.codex/sessions',{recursive:true,mode:448});fs.writeFileSync(process.argv[1],Buffer.from(process.argv[2],'base64'),{flag:'wx',mode:384});`,
-                path,
-                snapshot.rollout,
-            ],
-            cwd: "/work",
-            sandboxPolicy: { type: "dangerFullAccess" },
-            timeoutMs: 5000,
-        });
-        if (result.exitCode !== 0)
-            throw new Error("Native checkpoint restore failed");
-        return path;
-    }
-    close() {
-        if (this.closing)
-            return this.closing;
-        this.stopped = true;
-        this.closing = (async () => {
-            const clientClosed = await Promise.allSettled([this.client?.close()]);
-            const containerClosed = await Promise.allSettled([
-                (async () => {
-                    if (this.started) {
-                        // --rm may already have removed it. A successful empty listing,
-                        // not a swallowed removal/daemon failure, proves absence.
-                        await this.command(["rm", "--force", this.name]).catch(() => { });
-                        const remaining = await this.command([
-                            "ps",
-                            "--all",
-                            "--quiet",
-                            "--no-trunc",
-                            "--filter",
-                            `name=^/${this.name}$`,
-                        ]);
-                        if (remaining.trim())
-                            throw new Error("Contained container cleanup unconfirmed");
-                    }
-                })(),
-            ]);
-            let timer;
-            try {
-                await Promise.race([
-                    Promise.allSettled([...this.requests]),
-                    new Promise((_, reject) => {
-                        timer = setTimeout(() => reject(new Error("Contained request cleanup unconfirmed")), 15000);
-                    }),
-                ]);
-            }
-            finally {
-                clearTimeout(timer);
-            }
-            if ((this.started && !this.initialized) ||
-                [...clientClosed, ...containerClosed].some((result) => result.status === "rejected"))
-                throw new Error("Contained process cleanup unconfirmed");
-        })();
-        return this.closing;
-    }
-}
-//# sourceMappingURL=ContainedCodexProcess.js.map

package/dist/backend/ContainedCodexProcess.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ContainedCodexProcess.js","sourceRoot":"","sources":["../../src/backend/ContainedCodexProcess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAiBvD,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2CvB,CAAC;AAEF;iFACiF;AACjF,MAAM,OAAO,qBAAqB;IAQJ,MAAM;IAPlB,IAAI,GAAG,eAAe,UAAU,EAAE,EAAE,CAAC;IAC9C,MAAM,CAAmB;IACzB,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,WAAW,GAAG,KAAK,CAAC;IACpB,OAAO,CAAiB;IACf,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxD,YAA6B,MAA4B;sBAA5B,MAAM;QAClC,IACC,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3C,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAClC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;YAEzC,MAAM,IAAI,KAAK,CACd,oEAAoE,CACpE,CAAC;IACJ,CAAC;IACO,OAAO,CAAC,IAAc,EAAE,MAAoB;QACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,KAAK,CAClB,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAC3C;gBACC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE;gBACpD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,MAAM;aACN,CACD,CAAC;YACF,IAAI,MAAM,GAAG,EAAE,EACd,IAAI,GAAG,CAAC,CAAC;YACV,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;gBACpB,IAAI,IAAI,GAAG,OAAO;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;;oBACrC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,OAAO;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;oBAC9C,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OASX;QACA,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAC/B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,IAAI,CAAC,OAAO,CACjB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EACvC,OAAO,CAAC,MAAM,CACd,CACD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;YAC1E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG;YACZ,QAAQ;YACR,IAAI,CAAC,MAAM,CAAC,UAAU;YACtB,KAAK;YACL,MAAM;YACN,cAAc;YACd,eAAe;YACf,QAAQ;YACR,IAAI,CAAC,IAAI;YACT,gBAAgB;YAChB,aAAa;YACb,kBAAkB;YAClB,gBAAgB;YAChB,kCAAkC;YAClC,kBAAkB;YAClB,eAAe;YACf,UAAU;YACV,kBAAkB;YAClB,iBAAiB;YACjB,qEAAqE;YACrE,mEAAmE;YACnE,2BAA2B;YAC3B,IAAI,CAAC,MAAM,CAAC,KAAK;YACjB,IAAI;YACJ,mCAAmC;YACnC,iBAAiB;YACjB,qBAAqB;YACrB,IAAI;YACJ,KAAK;SACL,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,IAAI;YACJ,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE;YACpD,MAAM,EAAE,EAAE,IAAI,KAAI,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE;YACjC,gBAAgB,EAAE,KAAK;YACvB,cAAc,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,CAAC,uBAAuB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YACjD,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;gBACxB,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAChC,IAAI,MAAM,KAAK,aAAa;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrE,IACC,EAAE,aAAa,GAAG,EAAE;oBACpB,CAAC,MAAM;oBACP,OAAO,MAAM,KAAK,QAAQ;oBAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM;oBACrC,OAAQ,MAAgC,CAAC,IAAI,KAAK,QAAQ;oBAC1D,MAAM,CAAC,UAAU,CAAE,MAAgC,CAAC,IAAI,CAAC,GAAG,OAAO;oBAEnE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACrD,OAAO,OAAO,CAAC,KAAK,CAAC,MAA+B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACb,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,EAAE;YAClB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAGrC,YAAY,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,EAAE;gBAC3D,YAAY,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;aACvC,CAAC,CAAC;YACH,IACC,WAAW,CAAC,SAAS,KAAK,mBAAmB;gBAC7C,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAE5C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;IACD,OAAO,CAAc,MAAc,EAAE,MAAe;QACnD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,oFAAoF;IACpF,KAAK,CAAC,QAAQ,CACb,QAAgB;QAEhB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAElC,aAAa,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IACC,MAAM,CAAC,EAAE,KAAK,QAAQ;YACtB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC;YAEtD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,cAAc,EACd;YACC,OAAO,EAAE;gBACR,qBAAqB;gBACrB,IAAI;gBACJ,kVAAkV;gBAClV,MAAM,CAAC,IAAI;aACX;YACD,GAAG,EAAE,OAAO;YACZ,aAAa,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC3C,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,OAAO;SACvB,CACD,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,QAAQ,CAAC;IACjB,CAAC;IACO,gBAAgB,CAAC,QAGxB;QACA,IACC,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO;YACjC,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAEhD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,OAAO;YAC1E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACjE,IACC,KAAK,CAAC,IAAI,KAAK,cAAc;YAC7B,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,QAAQ,CAAC,QAAQ;YACvC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO;YAE9B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAGb;QACA,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,oCAAoC,QAAQ,CAAC,QAAQ,QAAQ,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAuB,cAAc,EAAE;YACvE,OAAO,EAAE;gBACR,qBAAqB;gBACrB,IAAI;gBACJ,gMAAgM;gBAChM,IAAI;gBACJ,QAAQ,CAAC,OAAO;aAChB;YACD,GAAG,EAAE,OAAO;YACZ,aAAa,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC3C,SAAS,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,KAAK;QACJ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBAChD,CAAC,KAAK,IAAI,EAAE;oBACX,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBAClB,gEAAgE;wBAChE,0DAA0D;wBAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;wBACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;4BACpC,IAAI;4BACJ,OAAO;4BACP,SAAS;4BACT,YAAY;4BACZ,UAAU;4BACV,UAAU,IAAI,CAAC,IAAI,GAAG;yBACtB,CAAC,CAAC;wBACH,IAAI,SAAS,CAAC,IAAI,EAAE;4BACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBAC7D,CAAC;gBACF,CAAC,CAAC,EAAE;aACJ,CAAC,CAAC;YACH,IAAI,KAAgD,CAAC;YACrD,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,IAAI,CAAC;oBAClB,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;wBAChC,KAAK,GAAG,UAAU,CACjB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,EAChE,KAAK,CACL,CAAC;oBACH,CAAC,CAAC;iBACF,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,IACC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;gBACnC,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,CAAC,IAAI,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CACxC;gBAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;CACD"}