dodo-mcp 1.0.0

package/dist/server/appServer.js

@@ -0,0 +1,461 @@
+import { InstallationRuntime } from './installationRuntime.js';
+import { instructionsFor } from './instructions.js';
+import http from 'node:http';
+import { ipcEndpointPresent } from '../ipc/authentication.js';
+import express, {} from 'express';
+import { hostHeaderValidation, originValidation, requireBearerAuth, mcpAuthMetadataRouter, getOAuthProtectedResourceMetadataUrl } from '@modelcontextprotocol/express';
+import { createMcpHandler, McpServer } from '@modelcontextprotocol/server';
+import { toNodeHandler } from '@modelcontextprotocol/node';
+import { DodoError } from '../errors.js';
+import { ensureConfigDir, ipcSocketPath, resolveConfigDir, statePaths } from '../config/paths.js';
+import { validatePublicUrl } from '../config/globalConfig.js';
+import { loadOrCreateJwks, loadOrCreateCookieKeys } from '../auth/keys.js';
+import { buildProvider } from '../auth/provider.js';
+import { buildTokenVerifier } from '../auth/verifier.js';
+import { interactionRouter } from '../auth/interactions.js';
+import { ALL_SCOPES } from '../security/policy.js';
+import { registerSurface, surfaceStats } from '../tools/surface.js';
+import { startOwnerControl } from '../ipc/ownerControl.js';
+import { ipcCall, IpcError } from '../ipc/client.js';
+import { openDatabase } from '../store/db.js';
+import { Store } from '../store/store.js';
+import { bootstrapWorkspace } from './bootstrap.js';
+import { createIpcDispatcher } from './ipcDispatch.js';
+import { attachOptionalServices } from './optionalServices.js';
+import { createWorkspaceHost } from './workspaceHost.js';
+import { startLocalConfig } from './localConfig.js';
+import { DODO_VERSION } from './version.js';
+export { DODO_VERSION };
+/**
+ * The HTTP entry (`dodo start`): OAuth AS + MCP resource server on
+ * 127.0.0.1, locked until a public URL is configured (spec §4, §7, §8).
+ *
+ * One process, one ACTIVE workspace at a time. Every long-lived closure
+ * (MCP server factory, token verifier, consent router, IPC, Local Config)
+ * resolves the active workspace per request through the WorkspaceHost, so
+ * the owner can switch roots from the Local Config page without a restart.
+ */
+export async function startServer(opts) {
+    const log = opts.onLog ?? (() => undefined);
+    const runMode = opts.runMode;
+    let closing = false;
+    let shutdownPromise;
+    if (opts.deferWorkspace && opts.rootOverride !== undefined) {
+        throw new DodoError('INVALID_INPUT', 'deferWorkspace cannot be combined with an explicit root');
+    }
+    const launcherConfig = opts.deferWorkspace ? resolveConfigDir(process.env) : undefined;
+    if (launcherConfig)
+        ensureConfigDir(launcherConfig.dir);
+    const launcherRoot = launcherConfig ? statePaths(launcherConfig.dir).launcherWorkspaceDir : undefined;
+    // ---- workspace bootstrap (initial root, and later roots for a switch) ----
+    // The launcher root is private and inert. It may expose the authenticated
+    // catalog, but every operation remains denied until a project ACL is set or
+    // the caller explicitly targets an authorized registered project.
+    const launcherBootstrap = launcherRoot !== undefined && launcherConfig !== undefined
+        ? { rootOverride: launcherRoot, configDir: launcherConfig }
+        : opts.rootOverride !== undefined
+            ? { rootOverride: opts.rootOverride }
+            : {};
+    const ws0 = bootstrapWorkspace({
+        invokedCwd: opts.invokedCwd,
+        ...launcherBootstrap,
+        allowUnsafeRoot: opts.allowUnsafeRoot ?? false,
+        log,
+        ...(runMode ? { runMode } : {}),
+    });
+    attachOptionalServices(ws0, log);
+    const { config, paths, configDir, configDirSource, configDirEnvVar } = ws0;
+    const limits = config.limits;
+    // Tool exposure only — never permissions (ADR-029). HTTP defaults to the
+    // compact gateway surface so remote clients ingest a small catalog.
+    const surface = opts.toolSurface ?? config.toolSurface ?? 'compact';
+    const surfaceFeatures = { subagents: config.exposeSubagentsToMcp };
+    const bootstrapFor = (root) => {
+        const ws = bootstrapWorkspace({
+            invokedCwd: opts.invokedCwd,
+            rootOverride: root,
+            // --allow-unsafe-root is a boot-time CLI decision; a switch over the
+            // config plane always goes through the strict root policy.
+            allowUnsafeRoot: false,
+            // Same state directory as the boot workspace, never re-resolved from the
+            // environment of whoever triggers the switch.
+            configDir: { dir: configDir, source: configDirSource },
+            log,
+            ...(runMode ? { runMode } : {}),
+        });
+        attachOptionalServices(ws, log);
+        return ws;
+    };
+    // Installation-scoped store for OAuth/consent state: it outlives any single
+    // workspace (a workspace's own connection is closed when it is switched out).
+    const installDb = openDatabase(paths.dbFile);
+    const installStore = new Store(installDb);
+    let workspaceSelected = !opts.deferWorkspace;
+    // Assigned once the IPC resources exist; closures below read it per request.
+    const hostRef = { host: undefined };
+    const active = () => (hostRef.host ? hostRef.host.current() : ws0);
+    // ---- public URL / auth mode -------------------------------------------
+    const publicUrlRaw = opts.publicUrlOverride ?? config.publicUrl;
+    let locked = true;
+    let issuer = null;
+    let resourceUrl = null;
+    if (publicUrlRaw !== undefined) {
+        const url = validatePublicUrl(publicUrlRaw, config.dangerouslyAllowInsecurePublicUrl);
+        issuer = url.origin;
+        resourceUrl = `${issuer}/mcp`;
+        locked = false;
+    }
+    // ---- express app -------------------------------------------------------
+    const app = express();
+    app.disable('x-powered-by');
+    // The only hop is the owner's local tunnel daemon (bind is loopback-only);
+    // its X-Forwarded-* headers are trusted for protocol/IP, never for issuer.
+    app.set('trust proxy', 'loopback');
+    const hostAllowlist = ['127.0.0.1', 'localhost', '[::1]', ...config.allowedHosts];
+    if (issuer)
+        hostAllowlist.push(new URL(issuer).hostname);
+    app.use(hostHeaderValidation(hostAllowlist));
+    const originAllowlist = ['127.0.0.1', 'localhost', '[::1]', ...config.allowedOrigins];
+    if (issuer)
+        originAllowlist.push(new URL(issuer).hostname);
+    app.use(originValidation(originAllowlist));
+    app.get('/healthz', (_req, res) => {
+        res.setHeader('Cache-Control', 'no-store').json({ status: 'ok', name: 'dodo', version: DODO_VERSION, authConfigured: !locked, workspaceSelected });
+    });
+    let mcpHandlerClose;
+    if (locked) {
+        app.all(['/mcp', '/mcp/*splat'], (_req, res) => {
+            res
+                .status(401)
+                .setHeader('Cache-Control', 'no-store')
+                .setHeader('WWW-Authenticate', 'Bearer error="invalid_token", error_description="server setup incomplete"')
+                .json({
+                error: 'setup_required',
+                error_description: 'This DODO server has no public URL / OAuth configuration yet. On the server machine run: dodo init --public-url https://your-host',
+            });
+        });
+    }
+    else {
+        const jwks = loadOrCreateJwks(paths.jwksFile);
+        const cookieKeys = loadOrCreateCookieKeys(paths.cookieKeysFile);
+        const provider = buildProvider({
+            issuer: issuer,
+            resourceUrl: resourceUrl,
+            store: installStore,
+            jwks,
+            cookieKeys,
+            workspaceId: () => active().workspaceId,
+        });
+        const verifier = buildTokenVerifier({
+            targetRouting: true,
+            issuer: issuer,
+            resourceUrl: resourceUrl,
+            jwks,
+            active: () => ({ workspaceId: active().workspaceId, store: installStore }),
+        });
+        const oauthMetadata = {
+            issuer: issuer,
+            authorization_endpoint: `${issuer}/auth`,
+            token_endpoint: `${issuer}/token`,
+            jwks_uri: `${issuer}/jwks`,
+            revocation_endpoint: `${issuer}/token/revocation`,
+            response_types_supported: ['code'],
+            grant_types_supported: ['authorization_code', 'refresh_token'],
+            code_challenge_methods_supported: ['S256'],
+            token_endpoint_auth_methods_supported: ['client_secret_basic', 'client_secret_post', 'none'],
+            scopes_supported: [...ALL_SCOPES, 'offline_access'],
+            // RFC 9207: oidc-provider puts `iss` on every authorization response
+            // (success and error). Advertising it lets clients such as ChatGPT use
+            // their stable OAuth callback instead of a per-connection one.
+            authorization_response_iss_parameter_supported: true,
+        };
+        app.use(mcpAuthMetadataRouter({
+            oauthMetadata,
+            resourceServerUrl: new URL(resourceUrl),
+            scopesSupported: [...ALL_SCOPES],
+            resourceName: 'DODO workspace MCP',
+            dangerouslyAllowInsecureIssuerUrl: config.dangerouslyAllowInsecurePublicUrl,
+        }));
+        // Light global rate limit for auth-sensitive routes (flood protection —
+        // everything arrives from the local tunnel, so IP buckets are useless).
+        app.use(['/auth', '/token', '/interaction'], rateLimiter(120, 10_000));
+        app.use(interactionRouter({
+            provider,
+            store: installStore,
+            resourceUrl: resourceUrl,
+            active: () => ({ workspaceId: active().workspaceId, epoch: active().epoch }),
+        }));
+        // Per-request server instances: the catalog binds to whatever workspace
+        // is active when the request arrives.
+        const factory = () => {
+            const server = new McpServer({ name: 'dodo', version: DODO_VERSION, title: 'DODO workspace server' }, { instructions: instructionsFor(surface, surfaceFeatures) });
+            const workspace = active();
+            registerSurface(server, { ...workspace.services, beginTool: () => {
+                    const host = hostRef.host;
+                    if (closing || (host && (host.state() !== 'ready' || host.current() !== workspace)))
+                        throw new DodoError('STALE_WORKSPACE', 'workspace changed; call project_overview again');
+                    return host ? host.inflight.enter() : () => undefined;
+                } }, surface, surfaceFeatures);
+            return server;
+        };
+        const mcpHandler = createMcpHandler(factory, {
+            legacy: 'stateless',
+            onerror: (err) => log(`[dodo] mcp: ${err.message}`),
+        });
+        mcpHandlerClose = mcpHandler.close;
+        const nodeHandler = toNodeHandler(mcpHandler, { onerror: (err) => log(`[dodo] mcp-adapter: ${err.message}`) });
+        const pendingBodies = new WeakMap();
+        // Switch gate + in-flight accounting: while the owner switches workspace,
+        // new calls are told to retry; calls already running are drained first.
+        const switchGate = (req, res, next) => {
+            pendingBodies.get(req)?.();
+            const host = hostRef.host;
+            const targeted = typeof req.body?.params?.arguments?.targetProjectId === 'string';
+            if (closing || (!targeted && host && host.state() !== 'ready')) {
+                res
+                    .status(503)
+                    .setHeader('Retry-After', '2')
+                    .setHeader('Cache-Control', 'no-store')
+                    .json({ error: 'workspace_switching', error_description: 'the owner is switching the active workspace; retry in a moment and call project_overview again' });
+                return;
+            }
+            const done = host && !targeted ? host.inflight.enter() : () => undefined;
+            res.once('close', done);
+            res.once('finish', done);
+            next();
+        };
+        app.all('/mcp', (req, res, next) => {
+            const done = hostRef.host ? hostRef.host.inflight.enter() : () => undefined;
+            pendingBodies.set(req, done);
+            res.once('close', done);
+            res.once('finish', done);
+            next();
+        }, requireBearerAuth({
+            verifier,
+            resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(new URL(resourceUrl)),
+        }), express.json({ limit: limits.requestBodyBytes }), switchGate, (req, res) => {
+            res.setHeader('Cache-Control', 'no-store');
+            void nodeHandler(req, res, req.body);
+        });
+        // Body-size errors from express.json → clean 413 (AUTH-16).
+        app.use('/mcp', (err, _req, res, next) => {
+            if (res.headersSent) {
+                next(err);
+                return;
+            }
+            const status = err.status ?? 400;
+            res.status(status).setHeader('Cache-Control', 'no-store').json({ error: status === 413 ? 'payload_too_large' : 'bad_request' });
+        });
+        app.use(provider.callback());
+    }
+    // Anything else (locked mode reaches here): plain 404, no admin surface.
+    app.use((_req, res) => {
+        res.status(404).setHeader('Cache-Control', 'no-store').json({ error: 'not_found' });
+    });
+    // ---- listen ------------------------------------------------------------
+    const port = opts.portOverride ?? config.port;
+    const httpServer = http.createServer(app);
+    httpServer.requestTimeout = 120_000;
+    httpServer.headersTimeout = 30_000;
+    await new Promise((resolve, reject) => {
+        httpServer.once('error', (err) => {
+            if (err.code === 'EADDRINUSE') {
+                reject(new DodoError('RESOURCE_LIMIT', `port ${port} is already in use`, {
+                    recovery: 'if it is another DODO server, run dodo kill from any folder (OAuth login is kept); otherwise stop that program yourself or choose --port <other-port>',
+                }));
+            }
+            else {
+                reject(new DodoError('INTERNAL_ERROR', `listen failed: ${err.message}`));
+            }
+        });
+        httpServer.listen(port, '127.0.0.1', () => resolve());
+    }).catch(async (error) => { await mcpHandlerClose?.(); await ws0.shutdownServices(); installDb.close(); throw error; });
+    const actualPort = httpServer.address().port;
+    {
+        const stats = surfaceStats(surface, surfaceFeatures);
+        log(`[dodo] mcp tool surface | transport=http | surface=${surface} | tools=${stats.toolCount} | schemaBytes=${stats.schemaBytes} | subagents=${surfaceFeatures.subagents ? 'on' : 'off'}`);
+    }
+    function closeHttp() {
+        return new Promise((resolve) => {
+            httpServer.close(() => resolve());
+            httpServer.closeAllConnections();
+        });
+    }
+    // ---- private IPC (per workspace) ---------------------------------------
+    const transportInfo = () => ({ kind: 'http', port: actualPort, locked, publicUrl: issuer });
+    const resourcesFor = async (ws) => {
+        return startOwnerControl(ws, createIpcDispatcher({ ws, transport: transportInfo(), requestStop: () => void shutdown() }));
+    };
+    // A live process for the target root would be clobbered by our IPC bind
+    // (startIpcServer removes an existing socket file): probe it first.
+    const isRootServedElsewhere = async (workspaceId) => {
+        const p = ipcSocketPath(configDir, workspaceId);
+        if (!ipcEndpointPresent(p))
+            return false;
+        try {
+            await ipcCall(p, 'status', {}, 1500);
+            return true;
+        }
+        catch (err) {
+            // Stale socket file (nothing listening) is the only safe "no".
+            return !(err instanceof IpcError && err.message.startsWith('no running DODO server'));
+        }
+    };
+    let initialResources;
+    try {
+        initialResources = await resourcesFor(ws0);
+    }
+    catch (err) {
+        await closeHttp();
+        await mcpHandlerClose?.();
+        await ws0.shutdownServices();
+        try {
+            installDb.close();
+        }
+        catch {
+            /* ignore */
+        }
+        throw err;
+    }
+    const installation = new InstallationRuntime(ws0, active, resourcesFor, log, [21730, 21731, actualPort, opts.configPort ?? config.configPort]);
+    hostRef.host = createWorkspaceHost({
+        initial: ws0,
+        initialResources,
+        bootstrap: bootstrapFor,
+        resources: resourcesFor,
+        isRootServedElsewhere,
+        busy: () => installation.busy(active().workspaceId),
+        log,
+        ...(opts.drainTimeoutMs !== undefined ? { drainTimeoutMs: opts.drainTimeoutMs } : {}),
+    });
+    const theHost = hostRef.host;
+    const startSchedules = (ws) => ws.services.schedules.start(() => !closing && workspaceSelected && theHost.state() === 'ready' && theHost.current() === ws);
+    if (workspaceSelected)
+        startSchedules(ws0);
+    theHost.onSwitch(next => {
+        workspaceSelected = true;
+        installation.attach(next);
+        startSchedules(next);
+    });
+    installation.defaultReady = () => theHost.state() === 'ready';
+    // ---- owner-only Local Config plane ------------------------------------
+    let localConfig;
+    try {
+        if (opts.configPort !== undefined) {
+            localConfig = await startLocalConfig(theHost, opts.configPort, {
+                version: DODO_VERSION,
+                transport: transportInfo(),
+                runMode: runMode ?? null,
+                workspaceSelected: () => workspaceSelected,
+                ...(opts.tunnelRuntime ? { tunnelRuntime: opts.tunnelRuntime } : {}),
+                log,
+            });
+            installation.ai.settings.ports.push(Number(new URL(localConfig.url).port));
+        }
+    }
+    catch (err) {
+        await closeHttp();
+        await mcpHandlerClose?.();
+        await installation.close();
+        await theHost.close();
+        try {
+            installDb.close();
+        }
+        catch {
+            /* ignore */
+        }
+        throw err;
+    }
+    // ---- shutdown ----------------------------------------------------------
+    function shutdown() {
+        if (!shutdownPromise) {
+            closing = true;
+            // Cancel owned jobs before draining handlers that may be awaiting them.
+            const jobsClosed = active().services.jobs.shutdown(3000);
+            shutdownPromise = (async () => {
+                try {
+                    await localConfig?.close();
+                    await closeHttp();
+                    await jobsClosed;
+                    await mcpHandlerClose?.();
+                    await installation.close();
+                    await theHost.close(); // current IPC socket + current workspace services
+                    try {
+                        installDb.close();
+                    }
+                    catch { /* already closed */ }
+                }
+                catch { /* shutdown is best effort */ }
+                opts.onStopped?.();
+            })();
+        }
+        return shutdownPromise;
+    }
+    const { rootInfo, workspaceId, epoch, services } = ws0;
+    const banner = [
+        `DODO ${DODO_VERSION}  |  foreground`,
+        workspaceSelected ? `Workspace: ${rootInfo.root}` : 'Workspace: (ยังไม่ได้เลือก — เพิ่มหรือเลือกใน Local Config / dodo --cli)',
+        workspaceSelected ? `Workspace ID: ${workspaceId}  |  epoch: ${epoch}` : 'Workspace ID: (ยังไม่สร้าง context สำหรับ AI)',
+        `MCP: http://127.0.0.1:${actualPort}/mcp`,
+        locked ? `Public: (not configured — server is LOCKED; run: dodo init --public-url https://your-host)` : `Public: ${issuer}/mcp`,
+        !workspaceSelected ? 'Auth: OAuth installation login available; project access remains denied until owner ACL assignment' : locked ? 'Auth: LOCKED / setup required — all tool access refused' : `Auth: OAuth enabled  |  Policy: ${services.trustMode()}`,
+        workspaceSelected ? `Exec: ${services.trustMode() === 'trusted' ? 'allowed by trusted mode (OS-user privileges!)' : 'local approval required'}  |  OS sandbox: ${config.commandSandbox === 'off' ? 'NOT enabled' : `${config.commandSandbox} (adapter: ${services.jobs ? 'configured' : 'n/a'})`}` : 'Exec: disabled until a workspace is selected',
+        'Tunnel: external / managed by you',
+        `State: ${configDir}${configDirEnvVar ? ` (from ${configDirEnvVar})` : configDirSource === 'env' ? ' (from explicit environment override)' : ''}`,
+    ];
+    if (localConfig)
+        log(`[dodo] Private config (expires in 8h): ${localConfig.url}`);
+    if (runMode)
+        log(`[dodo] ${runMode}: trusted OS-user execution for this run; OAuth, client/path access and file guards remain required.`);
+    if (!opts.quiet)
+        banner.forEach((l) => log(l));
+    return {
+        version: DODO_VERSION,
+        get root() {
+            return theHost.current().rootInfo.root;
+        },
+        get workspaceId() {
+            return theHost.current().workspaceId;
+        },
+        get epoch() {
+            return theHost.current().epoch;
+        },
+        port: actualPort,
+        locked,
+        publicUrl: issuer,
+        get ipcPath() {
+            return ipcSocketPath(configDir, theHost.current().workspaceId);
+        },
+        configDir,
+        get services() {
+            return theHost.current().services;
+        },
+        configUrl: localConfig?.url ?? null,
+        host: theHost,
+        get workspaceSelected() {
+            return workspaceSelected;
+        },
+        bannerLines: banner,
+        switchWorkspace: (input) => theHost.switchTo(input),
+        close: () => shutdown(),
+    };
+}
+/** Simple global token-bucket limiter (auth flood bounds, AUTH-16). */
+function rateLimiter(maxPerWindow, windowMs) {
+    let count = 0;
+    let windowStart = Date.now();
+    return (_req, res, next) => {
+        const now = Date.now();
+        if (now - windowStart > windowMs) {
+            windowStart = now;
+            count = 0;
+        }
+        count += 1;
+        if (count > maxPerWindow) {
+            res.status(429).setHeader('Cache-Control', 'no-store').json({ error: 'rate_limited' });
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=appServer.js.map

package/dist/server/appServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appServer.js","sourceRoot":"","sources":["../../src/server/appServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,OAAO,EAAE,EAAkD,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAC;AACvK,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAyB,MAAM,8BAA8B,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AAEtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAA8B,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAoF,MAAM,oBAAoB,CAAC;AAC3I,OAAO,EAAE,gBAAgB,EAA0B,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,OAAO,EAAE,YAAY,EAAE,CAAC;AA+CxB;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkB;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,eAA0C,CAAC;IAE/C,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,yDAAyD,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,cAAc;QAAE,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtG,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,YAAY,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS;QAClF,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE;QAC3D,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,iBAAiB;QACpB,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;QAC9C,GAAG;QACH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,OAAO,GAAgB,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC;IACjF,MAAM,eAAe,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAyB,EAAE;QAC3D,MAAM,EAAE,GAAG,kBAAkB,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI;YAClB,qEAAqE;YACrE,2DAA2D;YAC3D,eAAe,EAAE,KAAK;YACtB,yEAAyE;YACzE,8CAA8C;YAC9C,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE;YACtD,GAAG;YACH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,sBAAsB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,iBAAiB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC;IAE7C,6EAA6E;IAC7E,MAAM,OAAO,GAAwC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,GAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE1F,0EAA0E;IAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,SAAS,CAAC;IAChE,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,WAAW,GAAG,GAAG,MAAM,MAAM,CAAC;QAC9B,MAAM,GAAG,KAAK,CAAC;IACjB,CAAC;IAED,2EAA2E;IAC3E,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,2EAA2E;IAC3E,2EAA2E;IAC3E,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAEnC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAClF,IAAI,MAAM;QAAE,aAAa,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzD,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACtF,IAAI,MAAM;QAAE,eAAe,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC;IAE3C,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;IAEH,IAAI,eAAkD,CAAC;IAEvD,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAChE,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC;iBACtC,SAAS,CAAC,kBAAkB,EAAE,2EAA2E,CAAC;iBAC1G,IAAI,CAAC;gBACJ,KAAK,EAAE,gBAAgB;gBACvB,iBAAiB,EAAE,mIAAmI;aACvJ,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,MAAM,EAAE,MAAgB;YACxB,WAAW,EAAE,WAAqB;YAClC,KAAK,EAAE,YAAY;YACnB,IAAI;YACJ,UAAU;YACV,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW;SACxC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC;YAClC,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,MAAgB;YACxB,WAAW,EAAE,WAAqB;YAClC,IAAI;YACJ,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;SAC3E,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,MAAgB;YACxB,sBAAsB,EAAE,GAAG,MAAM,OAAO;YACxC,cAAc,EAAE,GAAG,MAAM,QAAQ;YACjC,QAAQ,EAAE,GAAG,MAAM,OAAO;YAC1B,mBAAmB,EAAE,GAAG,MAAM,mBAAmB;YACjD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,qCAAqC,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,CAAC;YAC5F,gBAAgB,EAAE,CAAC,GAAG,UAAU,EAAE,gBAAgB,CAAC;YACnD,qEAAqE;YACrE,uEAAuE;YACvE,+DAA+D;YAC/D,8CAA8C,EAAE,IAAI;SACrD,CAAC;QACF,GAAG,CAAC,GAAG,CACL,qBAAqB,CAAC;YACpB,aAAa;YACb,iBAAiB,EAAE,IAAI,GAAG,CAAC,WAAqB,CAAC;YACjD,eAAe,EAAE,CAAC,GAAG,UAAU,CAAC;YAChC,YAAY,EAAE,oBAAoB;YAClC,iCAAiC,EAAE,MAAM,CAAC,iCAAiC;SAC5E,CAAC,CACH,CAAC;QAEF,wEAAwE;QACxE,wEAAwE;QACxE,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAEvE,GAAG,CAAC,GAAG,CACL,iBAAiB,CAAC;YAChB,QAAQ;YACR,KAAK,EAAE,YAAY;YACnB,WAAW,EAAE,WAAqB;YAClC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;SAC7E,CAAC,CACH,CAAC;QAEF,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,OAAO,GAAqB,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;YACnK,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;YAC3B,eAAe,CAAC,MAAM,EAAE,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;oBAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;oBAC1B,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;oBAC9K,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;gBACxD,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,EAAE;YAC3C,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC;QACnC,MAAM,WAAW,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAE/G,MAAM,aAAa,GAAG,IAAI,OAAO,EAAuB,CAAC;QACzD,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACrE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,MAAM,QAAQ,GAAG,OAAQ,GAAG,CAAC,IAAsE,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,KAAK,QAAQ,CAAC;YACrJ,IAAI,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;gBAC/D,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC;qBAC7B,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC;qBACtC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,gGAAgG,EAAE,CAAC,CAAC;gBAC/J,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzB,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QAEF,GAAG,CAAC,GAAG,CACL,MAAM,EACN,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAC5E,aAAa,CAAC,GAAG,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,CAAC;YAAC,IAAI,EAAE,CAAC;QACvF,CAAC,EACD,iBAAiB,CAAC;YAChB,QAAQ;YACR,mBAAmB,EAAE,oCAAoC,CAAC,IAAI,GAAG,CAAC,WAAqB,CAAC,CAAC;SAC1F,CAAC,EACF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,EAChD,UAAU,EACV,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;YAC9B,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC3C,KAAK,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CACF,CAAC;QAEF,4DAA4D;QAC5D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAA+C,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACpH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAClI,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,yEAAyE;IACzE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1C,UAAU,CAAC,cAAc,GAAG,OAAO,CAAC;IACpC,UAAU,CAAC,cAAc,GAAG,MAAM,CAAC;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YACtD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,CACJ,IAAI,SAAS,CAAC,gBAAgB,EAAE,QAAQ,IAAI,oBAAoB,EAAE;oBAChE,QAAQ,EAAE,uJAAuJ;iBAClK,CAAC,CACH,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,SAAS,CAAC,gBAAgB,EAAE,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,GAAG,MAAM,eAAe,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,MAAM,UAAU,GAAI,UAAU,CAAC,OAAO,EAAsB,CAAC,IAAI,CAAC;IAClE,CAAC;QACC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,GAAG,CAAC,sDAAsD,OAAO,YAAY,KAAK,CAAC,SAAS,kBAAkB,KAAK,CAAC,WAAW,gBAAgB,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7L,CAAC;IAED,SAAS,SAAS;QAChB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAClC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACrG,MAAM,YAAY,GAAG,KAAK,EAAE,EAAyB,EAA+B,EAAE;QACpF,OAAO,iBAAiB,CAAC,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5H,CAAC,CAAC;IACF,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,qBAAqB,GAAG,KAAK,EAAE,WAAmB,EAAoB,EAAE;QAC5E,MAAM,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+DAA+D;YAC/D,OAAO,CAAC,CAAC,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,gBAAoC,CAAC;IACzC,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,EAAE,CAAC;QAClB,MAAM,eAAe,EAAE,EAAE,CAAC;QAC1B,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/I,OAAO,CAAC,IAAI,GAAG,mBAAmB,CAAC;QACjC,OAAO,EAAE,GAAG;QACZ,gBAAgB;QAChB,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,YAAY;QACvB,qBAAqB;QACrB,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC;QACnD,GAAG;QACH,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7B,MAAM,cAAc,GAAG,CAAC,EAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,iBAAiB,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClL,IAAI,iBAAiB;QAAE,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QACtB,iBAAiB,GAAG,IAAI,CAAC;QACzB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,cAAc,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,OAAO,CAAC;IAE9D,0EAA0E;IAC1E,IAAI,WAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;gBAC7D,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,aAAa,EAAE;gBAC1B,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAiB;gBAC1C,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG;aACJ,CAAC,CAAC;YACH,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,EAAE,CAAC;QAClB,MAAM,eAAe,EAAE,EAAE,CAAC;QAC1B,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,2EAA2E;IAC3E,SAAS,QAAQ;QACf,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,wEAAwE;YACxE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzD,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC;oBACH,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC;oBAC3B,MAAM,SAAS,EAAE,CAAC;oBAClB,MAAM,UAAU,CAAC;oBACjB,MAAM,eAAe,EAAE,EAAE,CAAC;oBAC1B,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;oBAC3B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,kDAAkD;oBACzE,IAAI,CAAC;wBAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;gBACzC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IACvD,MAAM,MAAM,GAAG;QACb,QAAQ,YAAY,iBAAiB;QACrC,iBAAiB,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,0EAA0E;QAC9H,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,WAAW,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,+CAA+C;QACxH,yBAAyB,UAAU,MAAM;QACzC,MAAM,CAAC,CAAC,CAAC,4FAA4F,CAAC,CAAC,CAAC,WAAW,MAAM,MAAM;QAC/H,CAAC,iBAAiB,CAAC,CAAC,CAAC,oGAAoG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,mCAAmC,QAAQ,CAAC,SAAS,EAAE,EAAE;QAC1P,iBAAiB,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,SAAS,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,yBAAyB,oBAAoB,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,cAAc,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,8CAA8C;QACnV,mCAAmC;QACnC,UAAU,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,eAAe,GAAG,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,EAAE,EAAE;KAClJ,CAAC;IACF,IAAI,WAAW;QAAE,GAAG,CAAC,0CAA0C,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAClF,IAAI,OAAO;QAAE,GAAG,CAAC,UAAU,OAAO,sGAAsG,CAAC,CAAC;IAC1I,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/C,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,IAAI,IAAI;YACN,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzC,CAAC;QACD,IAAI,WAAW;YACb,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC;QACvC,CAAC;QACD,IAAI,KAAK;YACP,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC;QACjC,CAAC;QACD,IAAI,EAAE,UAAU;QAChB,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,IAAI,OAAO;YACT,OAAO,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;QACjE,CAAC;QACD,SAAS;QACT,IAAI,QAAQ;YACV,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC;QACpC,CAAC;QACD,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,IAAI;QACnC,IAAI,EAAE,OAAO;QACb,IAAI,iBAAiB;YACnB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,WAAW,EAAE,MAAM;QACnB,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,WAAW,CAAC,YAAoB,EAAE,QAAgB;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,WAAW,GAAG,QAAQ,EAAE,CAAC;YACjC,WAAW,GAAG,GAAG,CAAC;YAClB,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}