ds-harness-remote 0.3.8

package/dist/harness-api-bridge.js

@@ -0,0 +1,387 @@
+import { createRpcResponse, encodeMessage, MAX_SECURE_MESSAGE_BYTES, } from '@dsh-remote/protocol';
+import { z } from 'zod';
+import { RpcError } from './rpc-router.js';
+import { listRemoteDirectory } from './remote-directory-browser.js';
+const callSchema = z.object({
+    method: z.string().min(1).max(80),
+    rpcId: z.string().min(1).max(128),
+    payload: z.unknown(),
+}).strict();
+const respondSchema = z.object({
+    message: z.object({
+        type: z.literal('client-response'),
+        rpcId: z.string().min(1).max(128),
+        result: z.unknown(),
+    }).strict(),
+}).strict();
+const streamOpenSchema = z.object({
+    streamId: z.string().min(1).max(128),
+    stream: z.enum(['mux', 'host']),
+    rpcId: z.string().min(1).max(128),
+    payload: z.object({
+        // Optional focus for a mux stream: only frames belonging to this session
+        // are forwarded. The Remote Web selects one session at a time, so without
+        // this every active session's events (potentially megabytes) would be
+        // pushed over the tunnel and stall the WebRTC data channel.
+        sessionId: z.string().min(1).max(128).optional(),
+    }).strict(),
+}).strict();
+const streamCloseSchema = z.object({ streamId: z.string().min(1).max(128) }).strict();
+const permissionCommandSchema = z.object({
+    agentId: z.string().min(1).max(128),
+    line: z.string().regex(/^\/permission [a-z0-9]+(?:-[a-z0-9]+)*$/),
+}).strict();
+/**
+ * Harness API methods that are safe to expose to an authenticated remote UI.
+ * Settings, credentials, native open/picker calls, directory mutation, file
+ * contents, downloads, and attachment upload intentionally remain outside
+ * this bridge. Directory listing exposes metadata only for workspace picking.
+ */
+export const HARNESS_API_ALLOWLIST = [
+    'session.list',
+    'session.search',
+    'session.create',
+    'session.history',
+    'session.models',
+    'session.selectModel',
+    'session.rename',
+    'session.fork',
+    'session.prompt',
+    'session.updateQueue',
+    'session.cancel',
+    'subagent.list',
+    'subagent.history',
+    'subagent.prompt',
+    'subagent.interrupt',
+    'host.describe',
+    'host.listDirectory',
+    'workspace.list',
+    'workspace.create',
+    'workspace.rename',
+    'workspace.delete',
+    'workspace.insertBefore',
+    'workspace.insertSessionBefore',
+    'workspace.archiveSession',
+    'skill.list',
+    'agentPreset.list',
+    'agentPreset.select',
+    'agentPreset.read',
+    'goal.create',
+    'goal.edit',
+    'goal.pause',
+    'goal.resume',
+    'goal.complete',
+    'goal.clear',
+    'commands.execute',
+    'llm.providers',
+    'llm.models',
+];
+/**
+ * Native Harness ApiProxy call timeout. The Remote Web frontend gives each
+ * `harness.api.call` RPC a 60s window; this bridge must fail faster so the
+ * RPC error (not a silent Web-side timeout) reaches the peer and the pending
+ * call is released. 30s gives slow native methods room while still beating the
+ * Web-side 60s timer by a wide margin.
+ */
+const NATIVE_CALL_TIMEOUT_MS = 30_000;
+const SESSION_HISTORY_PAGE_SIZES = [50, 30, 20, 12, 6, 3, 1];
+export class HarnessApiBridge {
+    api;
+    publish;
+    maxStreams;
+    logger;
+    methods;
+    streams = new Map();
+    respondable = new Map();
+    mux;
+    host;
+    answer;
+    constructor(api, publish, maxStreams = 3, logger, typertGateway) {
+        this.api = api;
+        this.publish = publish;
+        this.maxStreams = maxStreams;
+        this.logger = logger;
+        this.methods = createMethodMap(api, typertGateway);
+        this.mux = api.events.mux.bind(api.events);
+        this.host = api.events.host.bind(api.events);
+        this.answer = api.respond.bind(api);
+    }
+    async call(input) {
+        const params = callSchema.parse(input);
+        const method = this.methods.get(params.method);
+        if (method === undefined)
+            throw deniedMethod(params.method);
+        const startedAt = performance.now();
+        const signal = AbortSignal.timeout(NATIVE_CALL_TIMEOUT_MS);
+        const request = { rpcId: params.rpcId, payload: params.payload };
+        try {
+            // Race the native call against the timeout: some native ApiProxy
+            // methods ignore AbortSignal, and without this the Host would never
+            // answer and the Web-side 60s timer would fire instead. A guaranteed
+            // local response turns that into a fast, explicit RPC error.
+            const callWithTimeout = (overridePayload) => withTimeout(method({ rpcId: params.rpcId, payload: overridePayload }, signal), NATIVE_CALL_TIMEOUT_MS, `Harness API call ${params.method} timed out after ${NATIVE_CALL_TIMEOUT_MS}ms`);
+            let response;
+            if (params.method === 'session.history') {
+                response = await callSessionHistory(callWithTimeout, params.payload, params.rpcId);
+            }
+            else {
+                response = await callWithTimeout(request.payload);
+            }
+            if (params.method === 'host.listDirectory' && needsRemoteDirectoryFallback(response)) {
+                const payload = typeof params.payload === 'object' && params.payload !== null ? params.payload : {};
+                const value = await listRemoteDirectory(typeof payload.path === 'string' ? payload.path : undefined, signal);
+                response = { rpcId: params.rpcId, result: { ok: true, value } };
+            }
+            this.logger?.debug('harness api call ok', {
+                method: params.method,
+                durationMs: Math.round(performance.now() - startedAt),
+            });
+            return response;
+        }
+        catch (error) {
+            const durationMs = Math.round(performance.now() - startedAt);
+            this.logger?.warn('harness api call failed', {
+                method: params.method,
+                durationMs,
+                timedOut: signal.aborted,
+                reason: diagnosticReason(error),
+            });
+            throw error;
+        }
+    }
+    async respond(input) {
+        const params = respondSchema.parse(input);
+        this.logger?.debug('harness api respond', { rpcId: shortId(params.message.rpcId) });
+        if (!this.respondable.has(params.message.rpcId)) {
+            throw new RpcError('PERMISSION_NOT_PENDING', 'The response id was not emitted on this peer connection.');
+        }
+        const receipt = await this.answer(params.message);
+        if (receipt.accepted || receipt.reason === 'not-pending')
+            this.respondable.delete(params.message.rpcId);
+        return receipt;
+    }
+    openStream(input) {
+        const params = streamOpenSchema.parse(input);
+        if (this.streams.has(params.streamId))
+            throw new RpcError('REQUEST_CONFLICT', 'The Harness event stream is already open.');
+        if (this.streams.size >= this.maxStreams)
+            throw new RpcError('RATE_LIMITED', 'Too many Harness event streams are open.', undefined, true);
+        const controller = new AbortController();
+        const request = { rpcId: params.rpcId, payload: params.payload };
+        const stream = params.stream === 'mux'
+            ? this.mux(request, controller.signal)
+            : this.host(request, controller.signal);
+        const focusSessionId = params.stream === 'mux' ? params.payload.sessionId : undefined;
+        const task = this.pump(params.streamId, stream, controller.signal, focusSessionId);
+        this.streams.set(params.streamId, { controller, task, ...(focusSessionId === undefined ? {} : { focusSessionId }) });
+        this.logger?.debug('harness api stream open', {
+            stream: params.stream,
+            streamId: shortId(params.streamId),
+            ...(focusSessionId === undefined ? {} : { focusSessionId: shortId(focusSessionId) }),
+        });
+        return { opened: true, streamId: params.streamId };
+    }
+    closeStream(input) {
+        const params = streamCloseSchema.parse(input);
+        const active = this.streams.get(params.streamId);
+        if (active !== undefined) {
+            // Free the slot synchronously. A native ApiProxy stream may not observe
+            // the abort until its next frame, so a session-focused mux stream on an
+            // idle session could otherwise hold its slot forever and block the
+            // client's documented close-then-reopen session switch with
+            // RATE_LIMITED. The pump's finally performs a no-op delete later.
+            this.streams.delete(params.streamId);
+            active.controller.abort();
+        }
+        this.logger?.debug('harness api stream close', { streamId: shortId(params.streamId), closed: active !== undefined });
+        return { closed: active !== undefined, streamId: params.streamId };
+    }
+    async closeAll(reason = 'peer-disconnected') {
+        const streams = [...this.streams.values()];
+        this.streams.clear();
+        this.respondable.clear();
+        for (const stream of streams)
+            stream.controller.abort(reason);
+        // A native ApiProxy stream may not observe AbortSignal until its next
+        // frame. Waiting for every pump here would block a replacement peer from
+        // installing its message handler indefinitely. The detached pumps own
+        // their errors and terminal event publication, so abort and release them
+        // without holding up the authenticated connection handoff.
+    }
+    async pump(streamId, stream, signal, focusSessionId) {
+        let reason = 'completed';
+        try {
+            for await (const frame of stream) {
+                if (signal.aborted)
+                    break;
+                if (focusSessionId !== undefined && frameSessionId(frame) !== undefined && frameSessionId(frame) !== focusSessionId) {
+                    // Keep pushing to the native stream (the peer's upstream may still
+                    // emit approvals for the focused session through the same pump) but
+                    // do not forward other sessions' traffic over the tunnel.
+                    continue;
+                }
+                this.trackRespondable(frame);
+                await this.publish('harness.api.frame', { streamId, frame });
+            }
+            if (signal.aborted)
+                reason = 'cancelled';
+        }
+        catch {
+            reason = signal.aborted ? 'cancelled' : 'failed';
+        }
+        finally {
+            this.streams.delete(streamId);
+            await this.publish('harness.api.stream.closed', { streamId, reason }).catch(() => undefined);
+        }
+    }
+    trackRespondable(frame) {
+        const payload = frame.payload;
+        if (payload.type === 'approval/requested') {
+            this.respondable.set(String(frame.rpcId), `approval:${String(payload.approvalId)}`);
+            return;
+        }
+        if (payload.type === 'question/requested') {
+            this.respondable.set(String(frame.rpcId), `question:${String(frame.rpcId)}`);
+            return;
+        }
+        if (payload.type === 'approval/resolved') {
+            this.deleteRespondable(`approval:${String(payload.approvalId)}`);
+            return;
+        }
+        if (payload.type === 'question/resolved') {
+            this.respondable.delete(String(payload.questionRpcId));
+        }
+    }
+    deleteRespondable(value) {
+        for (const [rpcId, correlation] of this.respondable) {
+            if (correlation === value)
+                this.respondable.delete(rpcId);
+        }
+    }
+}
+function needsRemoteDirectoryFallback(response) {
+    const result = response.result;
+    return typeof result === 'object' && result !== null && 'ok' in result && result.ok === false
+        && 'error' in result && typeof result.error === 'object' && result.error !== null
+        && 'code' in result.error && result.error.code === 'directory-picker-unavailable';
+}
+function createMethodMap(api, typertGateway) {
+    const domains = api;
+    const methods = new Map();
+    for (const method of HARNESS_API_ALLOWLIST) {
+        if (method === 'commands.execute') {
+            // Commands live behind the official Typert registry (no ApiProxy
+            // `commands` domain). Dispatch them through the gateway when it is
+            // available; without it the method stays denied (fail-closed).
+            if (typertGateway === undefined)
+                continue;
+            const implementation = async (request, signal) => {
+                const args = permissionCommandSchema.parse(request.payload);
+                const [namespace, commandMethod] = method.split('.');
+                const value = await typertGateway.invoke({
+                    namespace,
+                    method: commandMethod,
+                    args,
+                    ...(signal === undefined ? {} : { signal }),
+                });
+                return { rpcId: request.rpcId, result: { ok: true, value } };
+            };
+            methods.set(method, implementation);
+            continue;
+        }
+        const [wireDomain, action] = method.split('.');
+        const domain = domainProperty(wireDomain);
+        const implementation = domains[domain]?.[action];
+        if (typeof implementation !== 'function')
+            continue;
+        methods.set(method, implementation.bind(domains[domain]));
+    }
+    return methods;
+}
+function domainProperty(wireDomain) {
+    if (wireDomain === 'session')
+        return 'sessions';
+    if (wireDomain === 'subagent')
+        return 'subagents';
+    if (wireDomain === 'skill')
+        return 'skills';
+    if (wireDomain === 'agentPreset')
+        return 'agentPresets';
+    if (wireDomain === 'goal')
+        return 'goals';
+    return wireDomain;
+}
+function deniedMethod(method) {
+    return new RpcError('METHOD_NOT_ALLOWED', `Harness API method ${JSON.stringify(method)} is not available in remote mode.`);
+}
+function diagnosticReason(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.replace(/[\r\n]+/g, ' ').slice(0, 160) || 'Unknown Harness API failure.';
+}
+/** Session id of a mux frame, or undefined for frames without one (e.g. stream/error). */
+function frameSessionId(frame) {
+    const payload = frame.payload;
+    return typeof payload.sessionId === 'string' && payload.sessionId.length > 0 ? payload.sessionId : undefined;
+}
+function callSessionHistory(callWithTimeout, payload, rpcId) {
+    const fallbackPageSizes = sessionHistoryFallbackPageSizes(payloadMaxMessages(payload));
+    return callHistoryWithRetry(callWithTimeout, payload, rpcId, fallbackPageSizes);
+}
+async function callHistoryWithRetry(callWithTimeout, payload, rpcId, pageSizes) {
+    for (const maxMessages of pageSizes) {
+        const requestPayload = historyRequestPayload(payload, maxMessages);
+        const response = await callWithTimeout(requestPayload);
+        const request = createRpcResponse(rpcId, response.result);
+        if (encodeMessage(request).byteLength <= MAX_SECURE_MESSAGE_BYTES)
+            return response;
+        if (maxMessages === pageSizes[pageSizes.length - 1]) {
+            throw new RpcError('RESPONSE_TOO_LARGE', 'The Host response is too large for the remote channel. Request a smaller page.', { maxBytes: MAX_SECURE_MESSAGE_BYTES }, true);
+        }
+    }
+    throw new RpcError('INTERNAL_ERROR', 'Failed to load session history with a fallback page size.');
+}
+function sessionHistoryFallbackPageSizes(requestedMaxMessages) {
+    const requested = normalizeSessionHistoryPageSize(requestedMaxMessages);
+    const sizes = [];
+    if (requested === undefined) {
+        sizes.push(...SESSION_HISTORY_PAGE_SIZES);
+        return sizes;
+    }
+    sizes.push(requested);
+    for (const value of SESSION_HISTORY_PAGE_SIZES) {
+        if (value < requested && !sizes.includes(value))
+            sizes.push(value);
+    }
+    return sizes;
+}
+function normalizeSessionHistoryPageSize(value) {
+    if (value === undefined)
+        return undefined;
+    if (!Number.isInteger(value))
+        return undefined;
+    if (value <= 0)
+        return undefined;
+    return Math.max(1, value);
+}
+function payloadMaxMessages(payload) {
+    if (payload === null || typeof payload !== 'object')
+        return undefined;
+    const value = payload.maxMessages;
+    return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : undefined;
+}
+function historyRequestPayload(payload, maxMessages) {
+    if (payload === null || typeof payload !== 'object' || Array.isArray(payload))
+        return { maxMessages };
+    return { ...payload, maxMessages };
+}
+function withTimeout(promise, ms, message) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            reject(new RpcError('TIMEOUT', message, undefined, true));
+        }, ms);
+        timer.unref?.();
+        promise.then(value => { clearTimeout(timer); resolve(value); }, error => { clearTimeout(timer); reject(error); });
+    });
+}
+function shortId(value) { return value.length <= 12 ? value : `${value.slice(0, 8)}…${value.slice(-4)}`; }
+//# sourceMappingURL=harness-api-bridge.js.map

package/dist/harness-api-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-api-bridge.js","sourceRoot":"","sources":["../src/harness-api-bridge.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAMnE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACpB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,4DAA4D;QAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACjD,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AAErF,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yCAAyC,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,gBAAgB;IAChB,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,wBAAwB;IACxB,+BAA+B;IAC/B,0BAA0B;IAC1B,YAAY;IACZ,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;IACb,WAAW;IACX,YAAY;IACZ,aAAa;IACb,eAAe;IACf,YAAY;IACZ,kBAAkB;IAClB,eAAe;IACf,YAAY;CACJ,CAAA;AAWV;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAErC,MAAM,0BAA0B,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAA;AAiBrE,MAAM,OAAO,gBAAgB;IASR;IACA;IACA;IACA;IAXF,OAAO,CAAmC;IAC1C,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IACzC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,GAAG,CAA2B;IAC9B,IAAI,CAA4B;IAChC,MAAM,CAAqB;IAE5C,YACmB,GAAa,EACb,OAAqB,EACrB,aAAa,CAAC,EACd,MAAmB,EACpC,aAAiC;QAJhB,QAAG,GAAH,GAAG,CAAU;QACb,YAAO,GAAP,OAAO,CAAc;QACrB,eAAU,GAAV,UAAU,CAAI;QACd,WAAM,GAAN,MAAM,CAAa;QAGpC,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;QAClD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAc;QACvB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAyB,CAAA;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;QAC1D,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QACzE,IAAI,CAAC;YACH,iEAAiE;YACjE,oEAAoE;YACpE,qEAAqE;YACrE,6DAA6D;YAC7D,MAAM,eAAe,GAAG,CAAC,eAAwB,EAAE,EAAE,CAAC,WAAW,CAC/D,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAc,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,EAC1E,sBAAsB,EACtB,oBAAoB,MAAM,CAAC,MAAM,oBAAoB,sBAAsB,IAAI,CAChF,CAAA;YACD,IAAI,QAA8B,CAAA;YAClC,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBACxC,QAAQ,GAAG,MAAM,kBAAkB,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAc,CAAC,CAAA;YAC7F,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YACnD,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,IAAI,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrF,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;gBACzH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;gBAC5G,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAc,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAA;YAC1E,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE;gBACxC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;aACtD,CAAC,CAAA;YACF,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAA;YAC5D,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE;gBAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,OAAO;gBACxB,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC;aAChC,CAAC,CAAA;YACF,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAc;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAA;QACpE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACnF,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,0DAA0D,CAAC,CAAA;QAC1G,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAyB,CAAC,CAAA;QACnE,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa;YAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvG,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,UAAU,CAAC,KAAc;QACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAA+B,CAAA;QAC1E,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAA;QAC1H,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,0CAA0C,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;QACzI,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK;YACpC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAgB,EAAE,UAAU,CAAC,MAAM,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAClF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAA;QACpH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,yBAAyB,EAAE;YAC5C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;SACrF,CAAC,CAAA;QACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;IACpD,CAAC;IAED,WAAW,CAAC,KAAc;QACxB,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,wEAAwE;YACxE,wEAAwE;YACxE,mEAAmE;YACnE,4DAA4D;YAC5D,kEAAkE;YAClE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACpC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;QAC3B,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC,CAAA;QACpH,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAA+C,mBAAmB;QAC/E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;QACxB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC7D,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,yEAAyE;QACzE,2DAA2D;IAC7D,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,QAAgB,EAChB,MAAqB,EACrB,MAAmB,EACnB,cAAuB;QAEvB,IAAI,MAAM,GAAyC,WAAW,CAAA;QAC9D,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAK;gBACzB,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,cAAc,EAAE,CAAC;oBACpH,mEAAmE;oBACnE,oEAAoE;oBACpE,0DAA0D;oBAC1D,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;gBAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAgC,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,GAAG,WAAW,CAAA;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAA;QAClD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAuC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACnI,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAuC;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QAC7B,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,IAAI,CAAC,iBAAiB,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YAChE,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,WAAW,KAAK,KAAK;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;CACF;AAED,SAAS,4BAA4B,CAAC,QAA8B;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC9B,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK;WACxF,OAAO,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;WAC9E,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAAA;AACrF,CAAC;AAED,SAAS,eAAe,CAAC,GAAa,EAAE,aAAiC;IACvE,MAAM,OAAO,GAAG,GAA8D,CAAA;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAClC,iEAAiE;YACjE,mEAAmE;YACnE,+DAA+D;YAC/D,IAAI,aAAa,KAAK,SAAS;gBAAE,SAAQ;YACzC,MAAM,cAAc,GAAiB,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC7D,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;gBAC3D,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAA;gBACxE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC;oBACvC,SAAS;oBACT,MAAM,EAAE,aAAa;oBACrB,IAAI;oBACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC5C,CAAC,CAAA;gBACF,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAA;YAC9D,CAAC,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;YACnC,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAA;QAClE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;QACzC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,OAAO,cAAc,KAAK,UAAU;YAAE,SAAQ;QAClD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAA;IAC/C,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,WAAW,CAAA;IACjD,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IAC3C,IAAI,UAAU,KAAK,aAAa;QAAE,OAAO,cAAc,CAAA;IACvD,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,OAAO,CAAA;IACzC,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAA;AAC5H,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,8BAA8B,CAAA;AACzF,CAAC;AAED,0FAA0F;AAC1F,SAAS,cAAc,CAAC,KAAuC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAA;IACxD,OAAO,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9G,CAAC;AAED,SAAS,kBAAkB,CACzB,eAAoE,EACpE,OAAgB,EAChB,KAAa;IAEb,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;IACtF,OAAO,oBAAoB,CAAC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,eAAoE,EACpE,OAAgB,EAChB,KAAa,EACb,SAA4B;IAE5B,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;QACzD,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,IAAI,wBAAwB;YAAE,OAAO,QAAQ,CAAA;QAClF,IAAI,WAAW,KAAK,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,QAAQ,CAChB,oBAAoB,EACpB,gFAAgF,EAChF,EAAE,QAAQ,EAAE,wBAAwB,EAAE,EACtC,IAAI,CACL,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,2DAA2D,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,+BAA+B,CAAC,oBAAwC;IAC/E,MAAM,SAAS,GAAG,+BAA+B,CAAC,oBAAoB,CAAC,CAAA;IACvE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,0BAA0B,CAAC,CAAA;QACzC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrB,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAyB;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9C,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACrE,MAAM,KAAK,GAAI,OAAqC,CAAC,WAAW,CAAA;IAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9F,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB,EAAE,WAAmB;IAClE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,CAAA;IACrG,OAAO,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,CAAA;AACpC,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAU,EAAE,OAAe;IACtE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;QAC3D,CAAC,EAAE,EAAE,CAAC,CAAA;QACN,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;QACf,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,EAChD,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAChD,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,IAAY,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAC"}

package/dist/identity-store.d.ts

@@ -0,0 +1,45 @@
+export interface HostIdentity {
+    schemaVersion: 1;
+    deviceId: string;
+    name: string;
+    publicKey: string;
+    privateKey: string;
+    fingerprint: string;
+}
+export interface TrustedPeer {
+    deviceId: string;
+    name: string;
+    platform: string;
+    publicKey: string;
+    fingerprint: string;
+    trustedAt: number;
+    membershipId?: string;
+}
+export interface IdentityStoreOptions {
+    directory?: string;
+    env?: NodeJS.ProcessEnv;
+    homeDirectory?: string;
+}
+export type RemoteDeviceRole = 'host' | 'client';
+export declare class IdentityInvalidError extends Error {
+    readonly code = "IDENTITY_INVALID";
+}
+export declare class IdentityStore {
+    readonly directory: string;
+    private identity?;
+    private peers;
+    constructor(options?: IdentityStoreOptions);
+    loadOrCreate(deviceName: string): Promise<HostIdentity>;
+    current(): HostIdentity;
+    reset(deviceName: string): Promise<HostIdentity>;
+    listTrustedPeers(): TrustedPeer[];
+    trustedPeer(deviceId: string): TrustedPeer | undefined;
+    isTrusted(deviceId: string, publicKey: string): boolean;
+    trustPeer(input: Omit<TrustedPeer, 'fingerprint' | 'trustedAt'>): Promise<TrustedPeer>;
+    revokePeer(deviceId: string): Promise<boolean>;
+    private loadPeers;
+    private savePeers;
+}
+export declare function serverStorageDirectory(root: string, serverUrl: string, role: RemoteDeviceRole): string;
+export declare function fingerprint(publicKey: string): string;
+//# sourceMappingURL=identity-store.d.ts.map

package/dist/identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-store.d.ts","sourceRoot":"","sources":["../src/identity-store.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,CAAC,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEhD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,sBAAqB;CACnC;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,OAAO,CAAC,QAAQ,CAAC,CAAc;IAC/B,OAAO,CAAC,KAAK,CAAiC;gBAElC,OAAO,GAAE,oBAAyB;IAMxC,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAsC7D,OAAO,IAAI,YAAY;IAKjB,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAOtD,gBAAgB,IAAI,WAAW,EAAE;IAIjC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAKtD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAIjD,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IAYtF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAMtC,SAAS;YAiBT,SAAS;CAMxB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAItG;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGrD"}

package/dist/identity-store.js

@@ -0,0 +1,183 @@
+import { createHash } from 'node:crypto';
+import { chmod, mkdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fromBase64Url, generateKeyPair } from '@dsh-remote/crypto';
+import { z } from 'zod';
+import { uuidV7 } from './ids.js';
+const identitySchema = z.object({
+    schemaVersion: z.literal(1),
+    deviceId: z.string().uuid(),
+    name: z.string().min(1).max(80),
+    publicKey: z.string().min(1),
+}).strict();
+const trustedPeerSchema = z.object({
+    deviceId: z.string().min(1),
+    name: z.string().min(1).max(80),
+    platform: z.string().min(1).max(40),
+    publicKey: z.string().min(1),
+    fingerprint: z.string().min(1),
+    trustedAt: z.number().int().nonnegative(),
+    membershipId: z.string().min(1).optional(),
+}).strict();
+const trustedPeersSchema = z.object({
+    schemaVersion: z.literal(1),
+    peers: z.array(trustedPeerSchema),
+}).strict();
+export class IdentityInvalidError extends Error {
+    code = 'IDENTITY_INVALID';
+}
+export class IdentityStore {
+    directory;
+    identity;
+    peers = new Map();
+    constructor(options = {}) {
+        const env = options.env ?? process.env;
+        const dshHome = env.DSH_HOME || join(options.homeDirectory ?? homedir(), '.dsh');
+        this.directory = options.directory ?? join(dshHome, 'remote');
+    }
+    async loadOrCreate(deviceName) {
+        await mkdir(this.directory, { recursive: true, mode: 0o700 });
+        await chmod(this.directory, 0o700);
+        const devicePath = join(this.directory, 'device.json');
+        const keyPath = join(this.directory, 'device.key');
+        const [hasDevice, hasKey] = await Promise.all([exists(devicePath), exists(keyPath)]);
+        if (hasDevice !== hasKey) {
+            throw new IdentityInvalidError('device identity is incomplete; repair it explicitly before reconnecting');
+        }
+        if (!hasDevice) {
+            const keys = generateKeyPair();
+            const record = { schemaVersion: 1, deviceId: uuidV7(), name: deviceName, publicKey: keys.publicKey };
+            await atomicJsonWrite(devicePath, record, 0o600);
+            await atomicTextWrite(keyPath, `${keys.privateKey}\n`, 0o600);
+        }
+        await assertPrivateMode(keyPath);
+        try {
+            let record = identitySchema.parse(JSON.parse(await readFile(devicePath, 'utf8')));
+            const privateKey = (await readFile(keyPath, 'utf8')).trim();
+            const regenerated = generateKeyPair(fromBase64Url(privateKey));
+            if (regenerated.publicKey !== record.publicKey) {
+                throw new IdentityInvalidError('device public and private keys do not match');
+            }
+            if (record.name !== deviceName) {
+                record = { ...record, name: deviceName };
+                await atomicJsonWrite(devicePath, record, 0o600);
+            }
+            this.identity = { ...record, privateKey, fingerprint: fingerprint(record.publicKey) };
+            await this.loadPeers();
+            return this.identity;
+        }
+        catch (error) {
+            if (error instanceof IdentityInvalidError)
+                throw error;
+            throw new IdentityInvalidError(`device identity is invalid: ${safeErrorMessage(error)}`);
+        }
+    }
+    current() {
+        if (this.identity === undefined)
+            throw new Error('identity store has not been loaded');
+        return this.identity;
+    }
+    async reset(deviceName) {
+        await rm(this.directory, { recursive: true, force: true });
+        this.identity = undefined;
+        this.peers.clear();
+        return this.loadOrCreate(deviceName);
+    }
+    listTrustedPeers() {
+        return [...this.peers.values()].map(peer => ({ ...peer }));
+    }
+    trustedPeer(deviceId) {
+        const peer = this.peers.get(deviceId);
+        return peer === undefined ? undefined : { ...peer };
+    }
+    isTrusted(deviceId, publicKey) {
+        return this.peers.get(deviceId)?.publicKey === publicKey;
+    }
+    async trustPeer(input) {
+        this.current();
+        const peer = {
+            ...input,
+            fingerprint: fingerprint(input.publicKey),
+            trustedAt: Date.now(),
+        };
+        this.peers.set(peer.deviceId, peer);
+        await this.savePeers();
+        return { ...peer };
+    }
+    async revokePeer(deviceId) {
+        const removed = this.peers.delete(deviceId);
+        if (removed)
+            await this.savePeers();
+        return removed;
+    }
+    async loadPeers() {
+        const path = join(this.directory, 'trusted-peers.json');
+        if (!(await exists(path))) {
+            await atomicJsonWrite(path, { schemaVersion: 1, peers: [] }, 0o600);
+        }
+        const parsed = trustedPeersSchema.parse(JSON.parse(await readFile(path, 'utf8')));
+        const peers = new Map();
+        for (const peer of parsed.peers) {
+            if (peer.fingerprint !== fingerprint(peer.publicKey)) {
+                throw new IdentityInvalidError(`trusted peer ${peer.deviceId} has an invalid fingerprint`);
+            }
+            if (peers.has(peer.deviceId))
+                throw new IdentityInvalidError(`trusted peer ${peer.deviceId} is duplicated`);
+            peers.set(peer.deviceId, peer);
+        }
+        this.peers = peers;
+    }
+    async savePeers() {
+        await atomicJsonWrite(join(this.directory, 'trusted-peers.json'), {
+            schemaVersion: 1,
+            peers: [...this.peers.values()],
+        }, 0o600);
+    }
+}
+export function serverStorageDirectory(root, serverUrl, role) {
+    const origin = new URL(serverUrl).origin;
+    const scope = createHash('sha256').update(origin).digest('hex').slice(0, 24);
+    return join(root, 'servers', scope, role);
+}
+export function fingerprint(publicKey) {
+    const compact = createHash('sha256').update(fromBase64Url(publicKey)).digest('hex').slice(0, 12).toUpperCase();
+    return compact.match(/.{1,4}/g).join(' ');
+}
+async function assertPrivateMode(path) {
+    if (process.platform === 'win32')
+        return;
+    const mode = (await stat(path)).mode & 0o777;
+    if ((mode & 0o077) !== 0) {
+        throw new IdentityInvalidError(`private key permissions must be 0600, got ${mode.toString(8).padStart(3, '0')}`);
+    }
+}
+async function atomicJsonWrite(path, value, mode) {
+    await atomicTextWrite(path, `${JSON.stringify(value, null, 2)}\n`, mode);
+}
+async function atomicTextWrite(path, value, mode) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${process.pid}.${uuidV7()}.tmp`;
+    await writeFile(temporary, value, { encoding: 'utf8', mode, flag: 'wx' });
+    await chmod(temporary, mode);
+    await rename(temporary, path);
+    await chmod(path, mode);
+}
+async function exists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && 'code' in error;
+}
+function safeErrorMessage(error) {
+    return error instanceof Error ? error.message : 'invalid identity data';
+}
+//# sourceMappingURL=identity-store.js.map

package/dist/identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-store.js","sourceRoot":"","sources":["../src/identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAEjC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC,MAAM,EAAE,CAAA;AAEX,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAClC,CAAC,CAAC,MAAM,EAAE,CAAA;AA6BX,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,kBAAkB,CAAA;CACnC;AAED,MAAM,OAAO,aAAa;IACf,SAAS,CAAQ;IAClB,QAAQ,CAAe;IACvB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAA;IAE9C,YAAY,UAAgC,EAAE;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;QAChF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7D,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAClD,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACpF,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,oBAAoB,CAAC,yEAAyE,CAAC,CAAA;QAC3G,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,eAAe,EAAE,CAAA;YAC9B,MAAM,MAAM,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;YAC7G,MAAM,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAChD,MAAM,eAAe,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,KAAK,CAAC,CAAA;QAC/D,CAAC;QAED,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;YACjF,MAAM,UAAU,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC3D,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;YAC9D,IAAI,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,oBAAoB,CAAC,6CAA6C,CAAC,CAAA;YAC/E,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;gBACxC,MAAM,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAClD,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAA;YACrF,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;YACtB,OAAO,IAAI,CAAC,QAAQ,CAAA;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAA;YACtD,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACtF,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;IACtC,CAAC;IAED,gBAAgB;QACd,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,WAAW,CAAC,QAAgB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAA;IACrD,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,SAAiB;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,KAAK,SAAS,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAqD;QACnE,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,MAAM,IAAI,GAAgB;YACxB,GAAG,KAAK;YACR,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAA;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACnC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;QACtB,OAAO,EAAE,GAAG,IAAI,EAAE,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;QACnC,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QACvD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACjF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAA;QAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,IAAI,CAAC,QAAQ,6BAA6B,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,IAAI,CAAC,QAAQ,gBAAgB,CAAC,CAAA;YAC3G,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAChC,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE;YAChE,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SAChC,EAAE,KAAK,CAAC,CAAA;IACX,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,SAAiB,EAAE,IAAsB;IAC5F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5E,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9G,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAM;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;IAC5C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,oBAAoB,CAAC,6CAA6C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAClH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc,EAAE,IAAY;IACvE,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAC1E,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY;IACtE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,EAAE,MAAM,CAAA;IAC1D,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC5B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC/D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAA;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAA;AACzE,CAAC"}