ftown 0.20.9 → 0.24.0

package/dist/ledger-relay.js

@@ -0,0 +1,595 @@
+/*
+ * Account-mode wiring between the bridge's ledger replica (via BridgeSecurityService), the ftown server and the relay:
+ * - the server's public ledger endpoints, bounded (createLedgerServer);
+ * - the relay token by proof (createRelayTokenFetcher) behind the cooldown/caching provider, with the ledger hooks (createAccountRelay);
+ * - the relay's ledger messages and (re)subscriptions, spaced so a relay publisher cannot force back-to-back reads and verifies;
+ * - the re-offer of this bridge's chain when a server read shows the server behind it (ledger-reoffer.ts): relay input only ever leads to
+ *   a paced read, never to a POST, and a refused relay token (plain 401) only to a read that may then re-offer;
+ * - signed head announcements (security/ledger/announce.ts, CONTRACT §10/§13): this bridge announces its head after the ledger channel
+ *   subscribes and after every adopt (at most one per HEAD_ANNOUNCE_SPACING_MS, latest head, best effort); a received one is verified against
+ *   the trusted checkpoint and, when its head is unknown here, only queues the same paced server read as a ledger notice;
+ * - the last relay URL the server named (security/relay-url.json), for an offline start.
+ * Nothing here decides trust: every ledger goes to security.offerLedgerResult / refreshLedger / readServerLedger, which verify it.
+ */
+import { randomUUID } from 'node:crypto';
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { UnauthorizedError } from 'centrifuge';
+import { signHeadAnnouncement } from './security/ledger/announce.js';
+import { createLedgerReoffer } from './ledger-reoffer.js';
+import { createRelayTokenFetcher } from './relay-token.js';
+import { createTokenProvider } from './token-provider.js';
+export const LEDGER_REQUEST_TIMEOUT_MS = 15_000;
+/** A ledger is at most 2 MiB (LEDGER_LIMITS.maxBytes); its JSON envelope stays well under this. */
+const MAX_LEDGER_RESPONSE_BYTES = 3 * 1024 * 1024;
+const MAX_RELAY_URL_LENGTH = 2048;
+/** Relay-triggered ledger work (offers and refreshes) runs at least this far apart... */
+export const RELAY_LEDGER_MIN_SPACING_MS = 1_000;
+/** ...doubling up to this while it keeps changing nothing; an adopted ledger resets it. */
+export const RELAY_LEDGER_MAX_SPACING_MS = 60_000;
+/** Refreshes pulled by requests from endpoints the replica does not list run at most this often (single-flight, trailing). */
+export const UNKNOWN_ENDPOINT_REFRESH_SPACING_MS = 2_000;
+/** This bridge announces its head at most this often; a pending announcement is replaced by the latest head, never queued. */
+export const HEAD_ANNOUNCE_SPACING_MS = 5_000;
+/** A failed announcement (best effort) is logged at most this often. */
+export const HEAD_ANNOUNCE_WARN_SPACING_MS = 60_000;
+/** Retry-After as ms from `now`: delta-seconds or an HTTP date; null when absent or unreadable. */
+export function parseRetryAfter(value, now = Date.now()) {
+    if (value === null)
+        return null;
+    const text = value.trim();
+    if (/^\d{1,9}$/.test(text))
+        return Number(text) * 1000;
+    // An HTTP date starts with the day name ("Sun, 06 Nov 1994 08:49:37 GMT"); anything else is not a date here.
+    if (!/^[A-Za-z]{3}/.test(text))
+        return null;
+    const at = Date.parse(text);
+    return Number.isNaN(at) ? null : Math.max(0, at - now);
+}
+/** An HTTP answer that is not a success, with its status. */
+export class HttpStatusError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'HttpStatusError';
+    }
+}
+const messageOf = (error) => error instanceof Error ? error.message : String(error);
+const apiBase = (apiUrl) => apiUrl.replace(/\/+$/, '');
+/** The HTTP status an error reports: its `status`, else a `(NNN)` in its message (relay-token errors), else null. */
+export function httpStatusOf(error) {
+    if (typeof error === 'object' && error !== null && 'status' in error && typeof error.status === 'number')
+        return error.status;
+    const match = /\((\d{3})\)/.exec(messageOf(error));
+    return match ? Number(match[1]) : null;
+}
+/** A refusal (401/403, or an UnauthorizedError) rather than a temporary failure. */
+export function isRefusal(error) {
+    if (error instanceof UnauthorizedError)
+        return true;
+    const status = httpStatusOf(error);
+    return status === 401 || status === 403;
+}
+function timeoutError(error, timeoutMs) {
+    return error instanceof Error && (error.name === 'TimeoutError' || error.name === 'AbortError')
+        ? new Error(`Ledger request timed out after ${timeoutMs}ms`) : error;
+}
+export function createLedgerServer(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const timeoutMs = input.timeoutMs ?? LEDGER_REQUEST_TIMEOUT_MS;
+    const maxBytes = input.maxBytes ?? MAX_LEDGER_RESPONSE_BYTES;
+    const base = apiBase(input.apiUrl);
+    return {
+        async fetchLedger(accountId) {
+            let text;
+            let status;
+            try {
+                const response = await fetchImpl(`${base}/api/account/ledger?accountId=${encodeURIComponent(accountId)}`, {
+                    method: 'GET', headers: { accept: 'application/json' }, cache: 'no-store', signal: AbortSignal.timeout(timeoutMs),
+                });
+                status = response.status;
+                if (Number(response.headers.get('content-length')) > maxBytes) {
+                    await response.body?.cancel().catch(() => undefined);
+                    throw new Error('ledger_response_too_large');
+                }
+                text = await response.text();
+            }
+            catch (error) {
+                throw timeoutError(error, timeoutMs);
+            }
+            if (Buffer.byteLength(text, 'utf8') > maxBytes)
+                throw new Error('ledger_response_too_large');
+            if (status !== 200)
+                throw new HttpStatusError(`Ledger read failed (${status})`, status);
+            let body;
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                throw new Error('Ledger response malformed');
+            }
+            const ledger = typeof body === 'object' && body !== null && !Array.isArray(body) ? body.ledger : undefined;
+            if (typeof ledger !== 'object' || ledger === null)
+                throw new Error('Ledger response malformed');
+            return ledger;
+        },
+        async postLedger(ledger, expectHead) {
+            let status;
+            let retryAfterMs;
+            let text = null;
+            try {
+                const response = await fetchImpl(`${base}/api/account/ledger`, {
+                    method: 'POST', headers: { 'Content-Type': 'application/json', accept: 'application/json' }, cache: 'no-store',
+                    body: JSON.stringify({ ledger, expectHead }), signal: AbortSignal.timeout(timeoutMs),
+                });
+                status = response.status;
+                retryAfterMs = parseRetryAfter(response.headers.get('retry-after'));
+                if (Number(response.headers.get('content-length')) > maxBytes)
+                    await response.body?.cancel().catch(() => undefined);
+                else
+                    text = await response.text();
+            }
+            catch (error) {
+                throw timeoutError(error, timeoutMs);
+            }
+            let body = null;
+            if (text !== null && Buffer.byteLength(text, 'utf8') <= maxBytes) {
+                try {
+                    body = JSON.parse(text);
+                }
+                catch {
+                    body = null;
+                }
+            }
+            return { status, body, retryAfterMs };
+        },
+    };
+}
+/**
+ * Publishes ONLY this bridge's own ledger endpoint in the account's endpoint directory (PUT /api/security/endpoints), authenticated
+ * with its relay token. Throws HttpStatusError when the server does not accept it.
+ */
+export async function registerBridgeEndpoint(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const timeoutMs = input.timeoutMs ?? LEDGER_REQUEST_TIMEOUT_MS;
+    let status;
+    try {
+        const response = await fetchImpl(`${apiBase(input.apiUrl)}/api/security/endpoints`, {
+            method: 'PUT', headers: { Authorization: `Bearer ${input.token}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({ endpoint: input.endpoint, bridgeId: input.bridgeId, label: input.label, protocolVersion: 1 }),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        await response.body?.cancel().catch(() => undefined);
+        status = response.status;
+    }
+    catch (error) {
+        throw timeoutError(error, timeoutMs);
+    }
+    if (status < 200 || status >= 300)
+        throw new HttpStatusError(`Endpoint directory registration failed (${status})`, status);
+}
+/** The line printed when the startup relay token is refused (exit 1). */
+export function relayTokenFailureMessage(error, apiUrl) {
+    if (error instanceof UnauthorizedError) {
+        return "[Bridge] The ftown server did not accept this computer's key. If it was removed from your account, run `ftown start --new-identity` to pair it again.";
+    }
+    if (isRefusal(error))
+        return `[Bridge] The ftown server at ${apiBase(apiUrl)} refused this computer (${messageOf(error)}).`;
+    return `[Bridge] Could not get a relay token from ${apiBase(apiUrl)} (${messageOf(error)}). Check the connection and run \`ftown start\` again.`;
+}
+export const MISSING_RELAY_URL_MESSAGE = '[Bridge] The ftown server did not name its relay (centrifugoUrl) in the relay-token response. '
+    + 'Update the server, or set FTOWN_CENTRIFUGO_URL to its wss:// URL.';
+function isLoopbackHost(hostname) {
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]' || hostname.endsWith('.localhost');
+}
+/**
+ * A Centrifugo URL the bridge may connect to, or null: wss://, or ws:// only to a loopback host or when the API itself is plain
+ * http (the operator already chose an insecure transport). The token rides this connection.
+ */
+export function parseRelayUrl(value, apiUrl) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > MAX_RELAY_URL_LENGTH)
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    if (url.username || url.password)
+        return null;
+    if (url.protocol === 'wss:')
+        return url.href;
+    if (url.protocol !== 'ws:')
+        return null;
+    let insecureApi = false;
+    try {
+        insecureApi = new URL(apiUrl).protocol === 'http:';
+    }
+    catch { /* treated as secure */ }
+    return insecureApi || isLoopbackHost(url.hostname) ? url.href : null;
+}
+const relayUrlFile = (dataDir) => join(dataDir, 'security', 'relay-url.json');
+/** The last relay URL the server named (`security/relay-url.json`), if it is still acceptable for this API; else null. */
+export function readSavedRelayUrl(dataDir, apiUrl) {
+    try {
+        const value = JSON.parse(readFileSync(relayUrlFile(dataDir), 'utf8'));
+        if (typeof value !== 'object' || value === null || value.version !== 1)
+            return null;
+        return parseRelayUrl(value.url, apiUrl);
+    }
+    catch {
+        return null;
+    }
+}
+/** Atomically saves the relay URL (mode 0600). The identity reset deletes it. */
+export function saveRelayUrl(dataDir, url) {
+    const file = relayUrlFile(dataDir);
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    mkdirSync(join(dataDir, 'security'), { recursive: true, mode: 0o700 });
+    try {
+        writeFileSync(temporary, JSON.stringify({ version: 1, url }), { mode: 0o600, flag: 'wx' });
+        renameSync(temporary, file);
+    }
+    catch (error) {
+        rmSync(temporary, { force: true });
+        throw error;
+    }
+}
+/** Subscribes `listener` when the security service offers onApprovalRequired; false when it does not (nothing subscribed). */
+export function subscribeApprovalRequired(security, listener) {
+    const signal = security.onApprovalRequired;
+    if (typeof signal !== 'function')
+        return false;
+    signal.call(security, listener);
+    return true;
+}
+const defaultSchedule = (run, ms) => {
+    const timer = setTimeout(run, ms);
+    timer.unref();
+    return () => clearTimeout(timer);
+};
+export function createAccountRelay(deps) {
+    const log = deps.log ?? ((line) => console.warn(line));
+    const monotonic = deps.now ?? (() => performance.now());
+    const schedule = deps.schedule ?? defaultSchedule;
+    const baseFetch = deps.fetchImpl ?? fetch;
+    const relayTokenUrl = `${apiBase(deps.apiUrl)}/api/auth/relay-token`;
+    const override = deps.relayUrlOverride === undefined || deps.relayUrlOverride === '' ? null : parseRelayUrl(deps.relayUrlOverride, deps.apiUrl);
+    if (deps.relayUrlOverride && override === null)
+        log('[Bridge] Ignoring FTOWN_CENTRIFUGO_URL: it must be a wss:// URL (ws:// only for a local relay).');
+    let learnedRelayUrl = null;
+    const savedRelayUrl = deps.savedRelayUrl ?? null;
+    const head = () => deps.security.ledgerStatus().head;
+    /** The relay connection was refused (terminal for centrifuge-js) and has not been reconnected since. */
+    let relayRefused = false;
+    let stopped = false;
+    // Our chain goes back to the server only after a fresh read shows the server holding a strict prefix of it, with that head as expectHead.
+    const reoffer = createLedgerReoffer({
+        read: () => deps.security.readServerLedger(),
+        local: async () => {
+            // Like a browser, a bridge that is not an active member of its own chain sends nothing.
+            if (deps.security.ledgerStatus().own !== 'active')
+                return null;
+            const state = await deps.store.read();
+            return state === null ? null : { ledger: state.ledger, head: state.checkpoint.head };
+        },
+        post: (ledger, expectHead) => deps.server.postLedger(ledger, expectHead),
+        offer: ledger => deps.security.offerLedgerResult(ledger, 'server'),
+        now: monotonic, random: deps.random ?? Math.random, schedule, log,
+    });
+    /** After any server read: the server is behind us, so re-offer (paced; it reads again first). */
+    const afterServerRead = () => {
+        if (!stopped && deps.security.ledgerStatus().serverBehind)
+            reoffer.noteServerBehind();
+    };
+    const reconnectIfRefused = () => {
+        if (!relayRefused || stopped)
+            return;
+        relayRefused = false;
+        try {
+            deps.reconnect?.();
+        }
+        catch (error) {
+            log(`[Bridge] Relay reconnect failed: ${messageOf(error)}`);
+        }
+    };
+    // Reads `centrifugoUrl` from a successful relay-token response without consuming the body the fetcher reads.
+    const fetchImpl = async (input, init) => {
+        const response = await baseFetch(input, init);
+        if (response.ok && String(input) === relayTokenUrl) {
+            try {
+                const body = JSON.parse(await response.clone().text());
+                const named = typeof body === 'object' && body !== null ? parseRelayUrl(body.centrifugoUrl, deps.apiUrl) : null;
+                if (named !== null) {
+                    const previous = learnedRelayUrl ?? savedRelayUrl;
+                    learnedRelayUrl = named;
+                    if (named !== previous) {
+                        try {
+                            deps.onRelayUrl?.(named);
+                        }
+                        catch (error) {
+                            log(`[Bridge] Could not save the relay URL: ${messageOf(error)}`);
+                        }
+                    }
+                }
+            }
+            catch { /* the fetcher reports a malformed response */ }
+        }
+        return response;
+    };
+    const fetcher = createRelayTokenFetcher({
+        apiUrl: deps.apiUrl,
+        accountId: () => deps.accountId,
+        bridgeId: deps.bridgeId,
+        authPrivateKey: deps.authPrivateKey,
+        head,
+        // A newer server ledger rides the token response. An invalid one is only logged: the token is still returned. One the server holds
+        // as a strict prefix of ours (a rolled-back server) starts the re-offer.
+        onLedger: async (ledger) => {
+            try {
+                const outcome = await deps.security.offerLedgerResult(ledger, 'server');
+                if (outcome.decision === 'reject')
+                    log('[Bridge] Ignored an account ledger from the relay-token response.');
+                if (outcome.relation === 'behind')
+                    reoffer.noteServerBehind();
+            }
+            catch (error) {
+                log(`[Bridge] Account ledger from the relay-token response failed: ${messageOf(error)}`);
+            }
+        },
+        // No chain in the answer: the server's head is the one we sent (or the one it names). Behind -> re-offer; unknown -> read it.
+        onServerHead: server => {
+            const relation = deps.security.noteServerHead(server);
+            if (relation === 'behind')
+                reoffer.noteServerBehind();
+            else if (relation === 'unknown')
+                submit({ kind: 'refresh', head: null });
+        },
+        // Evidence of a revoked key: the replica's append-only rule decides. Only a chain that is AHEAD of ours (or an owner-chosen history)
+        // and revokes this bridge triggers the reset (security's onBridgeRevoked); a diverged one is refused and recorded, never evidence.
+        onRevoked: async (ledger) => {
+            try {
+                await deps.security.offerLedgerResult(ledger, 'server');
+            }
+            catch (error) {
+                log(`[Bridge] Revocation evidence failed: ${messageOf(error)}`);
+            }
+        },
+        // A plain 401: the server may lack our records (a rolled-back server missing our add_bridge). Nothing is posted blindly: the
+        // re-offer reads the server first and posts our chain (expectHead, never creating an account) only if the server is behind it.
+        // The token is retried once only when the server took our chain.
+        onUnauthorized: async () => (await reoffer.check()) === 'posted',
+        hostname: deps.hostname,
+        localPort: deps.localPort,
+        fetchImpl,
+        timeoutMs: LEDGER_REQUEST_TIMEOUT_MS,
+    });
+    const tokens = createTokenProvider({
+        fetchToken: async () => {
+            const token = await fetcher();
+            // Every relay-token answer is a server contact: it renews the offline grace of the account devices.
+            deps.security.noteServerContact();
+            // The key is accepted again (e.g. the server learned our add_bridge): a refused relay connection may come back.
+            reconnectIfRefused();
+            return token;
+        },
+        now: monotonic,
+        random: deps.random,
+        head,
+    });
+    // Relay-triggered ledger work: at most one at a time, at least RELAY_LEDGER_MIN_SPACING_MS apart, only the latest kept.
+    let pending = null;
+    let running = false;
+    let cancelTimer = null;
+    let readyAt = 0;
+    let idleRuns = 0;
+    let lastRunEndedAt = Number.NEGATIVE_INFINITY;
+    const run = async (work) => {
+        const before = head();
+        try {
+            if (work.kind === 'offer') {
+                const outcome = await deps.security.offerLedgerResult(work.ledger, 'relay');
+                // A relayed chain that is a prefix of ours hints that the server may be behind: read the server (paced). A relay message is never
+                // proof of the server's state, so it never leads to a POST by itself.
+                if (outcome.relation === 'behind' && pending === null)
+                    pending = { kind: 'refresh', head: null };
+                if (outcome.decision !== 'adopt')
+                    return 'idle';
+            }
+            else {
+                if (work.head !== null && work.head === before)
+                    return 'skipped';
+                await deps.security.refreshLedger();
+                afterServerRead();
+                if (head() === before)
+                    return 'idle';
+            }
+        }
+        catch (error) {
+            log(`[Bridge] Relay ledger update failed: ${messageOf(error)}`);
+            return 'idle';
+        }
+        reconnectIfRefused();
+        return 'adopt';
+    };
+    const pump = () => {
+        if (stopped || running || cancelTimer !== null || pending === null)
+            return;
+        const wait = readyAt - monotonic();
+        if (wait > 0) {
+            cancelTimer = schedule(() => { cancelTimer = null; pump(); }, wait);
+            return;
+        }
+        const work = pending;
+        pending = null;
+        running = true;
+        void run(work).then(outcome => {
+            if (outcome === 'skipped')
+                return;
+            lastRunEndedAt = monotonic();
+            if (outcome === 'adopt')
+                idleRuns = 0;
+            const spacing = outcome === 'adopt' ? RELAY_LEDGER_MIN_SPACING_MS
+                : Math.min(RELAY_LEDGER_MIN_SPACING_MS * 2 ** idleRuns++, RELAY_LEDGER_MAX_SPACING_MS);
+            readyAt = monotonic() + spacing;
+        }).finally(() => { running = false; pump(); });
+    };
+    const submit = (work) => {
+        if (stopped)
+            return;
+        // Leading edge: the first work after a quiet second runs at once with a fresh backoff; only a burst is spaced and backed off.
+        if (!running && pending === null && cancelTimer === null && monotonic() - lastRunEndedAt >= RELAY_LEDGER_MIN_SPACING_MS) {
+            idleRuns = 0;
+            readyAt = 0;
+        }
+        pending = work;
+        pump();
+    };
+    // Refreshes pulled by unknown endpoints: their own limit, independent of the relay spacing.
+    let unknownInFlight = false;
+    let unknownQueued = false;
+    let unknownCancel = null;
+    let unknownReadyAt = Number.NEGATIVE_INFINITY;
+    const refreshForUnknown = () => {
+        if (stopped)
+            return;
+        if (unknownInFlight) {
+            unknownQueued = true;
+            return;
+        }
+        if (unknownCancel !== null)
+            return;
+        const wait = unknownReadyAt - monotonic();
+        if (wait > 0) {
+            unknownCancel = schedule(() => { unknownCancel = null; refreshForUnknown(); }, wait);
+            return;
+        }
+        unknownInFlight = true;
+        unknownReadyAt = monotonic() + UNKNOWN_ENDPOINT_REFRESH_SPACING_MS;
+        const before = head();
+        deps.security.refreshLedger()
+            .then(() => { afterServerRead(); if (head() !== before)
+            reconnectIfRefused(); })
+            .catch((error) => log(`[Bridge] Account ledger refresh failed: ${messageOf(error)}`))
+            .finally(() => {
+            unknownInFlight = false;
+            if (unknownQueued) {
+                unknownQueued = false;
+                refreshForUnknown();
+            }
+        });
+    };
+    // This bridge's head announcements: best effort, never awaited by a caller, at most one per HEAD_ANNOUNCE_SPACING_MS. A request while one
+    // is pending only marks it wanted; the head is read when it is signed, so the latest head is the one announced.
+    const wallClock = deps.wallClock ?? Date.now;
+    let publisher = null;
+    let announceWanted = false;
+    let announcing = false;
+    let announceCancel = null;
+    let lastAnnounceAt = Number.NEGATIVE_INFINITY;
+    let lastAnnounceWarnAt = Number.NEGATIVE_INFINITY;
+    const sendAnnouncement = async () => {
+        const publish = publisher;
+        const status = deps.security.ledgerStatus();
+        // Only an active member of its own chain speaks for it (not unpaired, absent or revoked).
+        if (publish === null || status.own !== 'active' || status.head === null || status.revision === null)
+            return;
+        try {
+            const announcement = await signHeadAnnouncement(deps.authPrivateKey, {
+                accountId: deps.accountId, kind: 'bridge', keyId: deps.bridgeId, head: status.head, revision: status.revision, at: Math.floor(wallClock()),
+            });
+            if (!stopped)
+                await publish(announcement);
+        }
+        catch (error) {
+            const at = monotonic();
+            if (at - lastAnnounceWarnAt >= HEAD_ANNOUNCE_WARN_SPACING_MS) {
+                lastAnnounceWarnAt = at;
+                log(`[Bridge] Could not announce the ledger head: ${messageOf(error)}`);
+            }
+        }
+    };
+    const pumpAnnounce = () => {
+        if (stopped || !announceWanted || announcing || announceCancel !== null)
+            return;
+        const wait = lastAnnounceAt + HEAD_ANNOUNCE_SPACING_MS - monotonic();
+        if (wait > 0) {
+            announceCancel = schedule(() => { announceCancel = null; pumpAnnounce(); }, wait);
+            return;
+        }
+        announceWanted = false;
+        announcing = true;
+        lastAnnounceAt = monotonic();
+        void sendAnnouncement().finally(() => { announcing = false; pumpAnnounce(); });
+    };
+    const announce = () => {
+        // Not wired to a relay client (yet): nothing to announce on, nothing scheduled.
+        if (stopped || publisher === null)
+            return;
+        announceWanted = true;
+        pumpAnnounce();
+    };
+    // Every adopt (and an own-status change, e.g. paired again) is announced.
+    const stopHeadListener = deps.security.onLedgerHead(announce);
+    // A received announcement: the owner filter and the strict shape ran in the client. Verified against the trusted checkpoint (one signature
+    // check); an unknown head only queues the paced server read. An announcement is never proof: no POST, nothing fetched from its sender.
+    const judge = async (announcement) => {
+        if (stopped || (announcement.kind === 'bridge' && announcement.keyId === deps.bridgeId))
+            return;
+        let relation;
+        try {
+            relation = await deps.security.judgeHeadAnnouncement(announcement);
+        }
+        catch {
+            return;
+        }
+        if (relation === 'unknown')
+            submit({ kind: 'refresh', head: announcement.head });
+    };
+    // The startup read (security.startLedger) may already have shown the server behind.
+    afterServerRead();
+    return {
+        tokens,
+        async connectionToken() {
+            try {
+                return await tokens.getToken();
+            }
+            catch (error) {
+                if (error instanceof UnauthorizedError)
+                    relayRefused = true;
+                throw error;
+            }
+        },
+        relayUrl: () => override ?? learnedRelayUrl ?? savedRelayUrl,
+        onLedgerMessage(message) {
+            if (message.type === 'ledger')
+                submit({ kind: 'offer', ledger: message.ledger });
+            else if (message.type === 'head_announcement')
+                void judge(message.announcement);
+            else if (message.head !== head())
+                submit({ kind: 'refresh', head: message.head });
+        },
+        onLedgerSubscribed: () => {
+            submit({ kind: 'refresh', head: null });
+            announce();
+        },
+        setLedgerPublisher(publish) { publisher = publish; },
+        onUnknownEndpoint: refreshForUnknown,
+        stop() {
+            stopped = true;
+            reoffer.stop();
+            pending = null;
+            cancelTimer?.();
+            cancelTimer = null;
+            unknownCancel?.();
+            unknownCancel = null;
+            announceWanted = false;
+            announceCancel?.();
+            announceCancel = null;
+            stopHeadListener();
+        },
+    };
+}
+//# sourceMappingURL=ledger-relay.js.map

package/dist/ledger-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-relay.js","sourceRoot":"","sources":["../src/ledger-relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,oBAAoB,EAAyB,MAAM,+BAA+B,CAAC;AAG5F,OAAO,EAAE,mBAAmB,EAAyB,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,mGAAmG;AACnG,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,yFAAyF;AACzF,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AACjD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,8HAA8H;AAC9H,MAAM,CAAC,MAAM,mCAAmC,GAAG,KAAK,CAAC;AACzD,8HAA8H;AAC9H,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,wEAAwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAWpD,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAAC,KAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,6GAA6G;IAC7G,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,6DAA6D;AAC7D,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACF;IAAtC,YAAY,OAAe,EAAW,MAAc;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAElD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrG,MAAM,OAAO,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEvE,qHAAqH;AACrH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAC9H,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,SAAiB;IACrD,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QAC7F,CAAC,CAAC,IAAI,KAAK,CAAC,kCAAkC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA0F;IAC3H,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,yBAAyB,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,SAAS;YACzB,IAAI,IAAY,CAAC;YACjB,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,iCAAiC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE;oBACxG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;iBAClH,CAAC,CAAC;gBACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACzB,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;oBAC9D,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YACzD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC7F,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,MAAM,GAAG,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAAC,CAAC;YACxF,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACrI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAChG,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU;YACjC,IAAI,MAAc,CAAC;YACnB,IAAI,YAA2B,CAAC;YAChC,IAAI,IAAI,GAAkB,IAAI,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,qBAAqB,EAAE;oBAC7D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,UAAU;oBAC9G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;iBACrF,CAAC,CAAC;gBACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACzB,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBACpE,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,QAAQ;oBAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;;oBAC/G,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YACzD,IAAI,IAAI,GAAY,IAAI,CAAC;YACzB,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACjE,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,CAAC;YACzD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAE5C;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,yBAAyB,CAAC;IAC/D,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE;YAClF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACtG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;YACpH,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IACzD,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,eAAe,CAAC,2CAA2C,MAAM,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7H,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,MAAc;IACrE,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,uJAAuJ,CAAC;IACjK,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,gCAAgC,OAAO,CAAC,MAAM,CAAC,2BAA2B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5H,OAAO,6CAA6C,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,wDAAwD,CAAC;AACnJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,gGAAgG;MACrI,mEAAmE,CAAC;AAExE,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACzH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,MAAc;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACxG,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACpD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QAAC,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC7F,OAAO,WAAW,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAE9F,0HAA0H;AAC1H,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc;IAC/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA+B,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/G,OAAO,aAAa,CAAE,KAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,GAAW;IACvD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA+ED,8HAA8H;AAC9H,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,QAAsC;IAChG,MAAM,MAAM,GAAI,QAAmC,CAAC,kBAAkB,CAAC;IACvE,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAID,MAAM,eAAe,GAAG,CAAC,GAAe,EAAE,EAAU,EAAgB,EAAE;IACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,aAAa,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChJ,IAAI,IAAI,CAAC,gBAAgB,IAAI,QAAQ,KAAK,IAAI;QAAE,GAAG,CAAC,iGAAiG,CAAC,CAAC;IACvJ,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,GAAkB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC;IACpE,wGAAwG;IACxG,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,0IAA0I;IAC1I,MAAM,OAAO,GAAG,mBAAmB,CAAC;QAClC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;QAC5C,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,wFAAwF;YACxF,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC;QACxE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG;KAClE,CAAC,CAAC;IACH,iGAAiG;IACjG,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,YAAY;YAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;IACxF,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,GAAS,EAAE;QACpC,IAAI,CAAC,YAAY,IAAI,OAAO;YAAE,OAAO;QACrC,YAAY,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,oCAAoC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC5G,CAAC,CAAC;IAEF,6GAA6G;IAC7G,MAAM,SAAS,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAE,IAAoC,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjJ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,MAAM,QAAQ,GAAG,eAAe,IAAI,aAAa,CAAC;oBAClD,eAAe,GAAG,KAAK,CAAC;oBACxB,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACvB,IAAI,CAAC;4BAAC,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;wBAAC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAAC,GAAG,CAAC,0CAA0C,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBAAC,CAAC;oBACxH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,uBAAuB,CAAC;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,IAAI;QACJ,mIAAmI;QACnI,yEAAyE;QACzE,QAAQ,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACxE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAAE,GAAG,CAAC,mEAAmE,CAAC,CAAC;gBAC5G,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,GAAG,CAAC,iEAAiE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAC/G,CAAC;QACD,8HAA8H;QAC9H,YAAY,EAAE,MAAM,CAAC,EAAE;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,QAAQ,KAAK,QAAQ;gBAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;iBACjD,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,qIAAqI;QACrI,mIAAmI;QACnI,SAAS,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACxB,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YAChE,OAAO,KAAK,EAAE,CAAC;gBAAC,GAAG,CAAC,wCAAwC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACpF,CAAC;QACD,6HAA6H;QAC7H,+HAA+H;QAC/H,iEAAiE;QACjE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,QAAQ;QAChE,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS;QACT,SAAS,EAAE,yBAAyB;KACrC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;YAC9B,oGAAoG;YACpG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAClC,gHAAgH;YAChH,kBAAkB,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI;KACL,CAAC,CAAC;IAEH,wHAAwH;IACxH,IAAI,OAAO,GAAqB,IAAI,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAwB,IAAI,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE9C,MAAM,GAAG,GAAG,KAAK,EAAE,IAAe,EAAyC,EAAE;QAC3E,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC5E,kIAAkI;gBAClI,sEAAsE;gBACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACjG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAAE,OAAO,MAAM,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,SAAS,CAAC;gBACjE,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACpC,eAAe,EAAE,CAAC;gBAClB,IAAI,IAAI,EAAE,KAAK,MAAM;oBAAE,OAAO,MAAM,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,wCAAwC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,kBAAkB,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,OAAO,IAAI,OAAO,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC3E,MAAM,IAAI,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;QACnC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC5B,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClC,cAAc,GAAG,SAAS,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,OAAO;gBAAE,QAAQ,GAAG,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,2BAA2B;gBAC/D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,GAAG,CAAC,IAAI,QAAQ,EAAE,EAAE,2BAA2B,CAAC,CAAC;YACzF,OAAO,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;QAClC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,IAAe,EAAQ,EAAE;QACvC,IAAI,OAAO;YAAE,OAAO;QACpB,8HAA8H;QAC9H,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,IAAI,SAAS,EAAE,GAAG,cAAc,IAAI,2BAA2B,EAAE,CAAC;YACxH,QAAQ,GAAG,CAAC,CAAC;YACb,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,4FAA4F;IAC5F,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAwB,IAAI,CAAC;IAC9C,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC9C,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACnC,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,eAAe,EAAE,CAAC;YAAC,aAAa,GAAG,IAAI,CAAC;YAAC,OAAO;QAAC,CAAC;QACtD,IAAI,aAAa,KAAK,IAAI;YAAE,OAAO;QACnC,MAAM,IAAI,GAAG,cAAc,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,aAAa,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,eAAe,GAAG,IAAI,CAAC;QACvB,cAAc,GAAG,SAAS,EAAE,GAAG,mCAAmC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE;aAC1B,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,KAAK,MAAM;YAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;aAC/E,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,GAAG,CAAC,2CAA2C,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAC7F,OAAO,CAAC,GAAG,EAAE;YACZ,eAAe,GAAG,KAAK,CAAC;YACxB,IAAI,aAAa,EAAE,CAAC;gBAAC,aAAa,GAAG,KAAK,CAAC;gBAAC,iBAAiB,EAAE,CAAC;YAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,0IAA0I;IAC1I,gHAAgH;IAChH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC;IAC7C,IAAI,SAAS,GAA+D,IAAI,CAAC;IACjF,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,cAAc,GAAwB,IAAI,CAAC;IAC/C,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC9C,IAAI,kBAAkB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAElD,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;QACjD,MAAM,OAAO,GAAG,SAAS,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5C,0FAA0F;QAC1F,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO;QAC5G,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,cAAc,EAAE;gBACnE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;aAC3I,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;YACvB,IAAI,EAAE,GAAG,kBAAkB,IAAI,6BAA6B,EAAE,CAAC;gBAC7D,kBAAkB,GAAG,EAAE,CAAC;gBACxB,GAAG,CAAC,gDAAgD,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,IAAI,OAAO,IAAI,CAAC,cAAc,IAAI,UAAU,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO;QAChF,MAAM,IAAI,GAAG,cAAc,GAAG,wBAAwB,GAAG,SAAS,EAAE,CAAC;QACrE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,cAAc,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,cAAc,GAAG,KAAK,CAAC;QACvB,UAAU,GAAG,IAAI,CAAC;QAClB,cAAc,GAAG,SAAS,EAAE,CAAC;QAC7B,KAAK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,gFAAgF;QAChF,IAAI,OAAO,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO;QAC1C,cAAc,GAAG,IAAI,CAAC;QACtB,YAAY,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,0EAA0E;IAC1E,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE9D,2IAA2I;IAC3I,uIAAuI;IACvI,MAAM,KAAK,GAAG,KAAK,EAAE,YAA8B,EAAiB,EAAE;QACpE,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO;QAChG,IAAI,QAAmC,CAAC;QACxC,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7F,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IAEF,oFAAoF;IACpF,eAAe,EAAE,CAAC;IAElB,OAAO;QACL,MAAM;QACN,KAAK,CAAC,eAAe;YACnB,IAAI,CAAC;gBAAC,OAAO,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YAAC,CAAC;YACvC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,iBAAiB;oBAAE,YAAY,GAAG,IAAI,CAAC;gBAC5D,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,IAAI,eAAe,IAAI,aAAa;QAC5D,eAAe,CAAC,OAAO;YACrB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;iBAC5E,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;gBAAE,KAAK,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;iBAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE;gBAAE,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,kBAAkB,CAAC,OAAO,IAAI,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC;QACpD,iBAAiB,EAAE,iBAAiB;QACpC,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,EAAE,CAAC;YAChB,WAAW,GAAG,IAAI,CAAC;YACnB,aAAa,EAAE,EAAE,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;YACrB,cAAc,GAAG,KAAK,CAAC;YACvB,cAAc,EAAE,EAAE,CAAC;YACnB,cAAc,GAAG,IAAI,CAAC;YACtB,gBAAgB,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC"}