mandala-computer-mcp 0.4.0 → 0.6.0

package/dist/credentials.js

@@ -0,0 +1,395 @@
+import fs from 'node:fs';
+import { isIP } from 'node:net';
+import os from 'node:os';
+import path from 'node:path';
+import { DEFAULT_BASE_URL } from './api.js';
+const MAX_BYTES = 65_536;
+const RESERVED = new Set([
+    '__proto__',
+    'prototype',
+    'constructor',
+    '__defineGetter__',
+    '__defineSetter__',
+    'hasOwnProperty',
+    '__lookupGetter__',
+    '__lookupSetter__',
+    'isPrototypeOf',
+    'propertyIsEnumerable',
+    'toLocaleString',
+    'toString',
+    'valueOf',
+]);
+function credentialWhitespace(code) {
+    return ((code >= 9 && code <= 13) ||
+        code === 32 ||
+        code === 133 ||
+        code === 160 ||
+        code === 5760 ||
+        (code >= 8192 && code <= 8202) ||
+        code === 8232 ||
+        code === 8233 ||
+        code === 8239 ||
+        code === 8287 ||
+        code === 12288 ||
+        code === 65279);
+}
+/** Fixed credential whitespace, shared with the other local clients. */
+export function trimCredentialWhitespace(value) {
+    let start = 0;
+    let end = value.length;
+    while (start < end && credentialWhitespace(value.charCodeAt(start)))
+        start++;
+    while (end > start && credentialWhitespace(value.charCodeAt(end - 1)))
+        end--;
+    return value.slice(start, end);
+}
+/** Local diagnostics never include file contents, keys, paths or supplied values. */
+export class CredentialsError extends Error {
+    code;
+    constructor(code, detail) {
+        super(`${detail} Run mandala login with the TypeScript CLI, or set MANDALA_API_KEY.`);
+        this.code = code;
+        this.name = 'CredentialsError';
+    }
+}
+function fail(code, detail = 'Invalid saved credentials.') {
+    throw new CredentialsError(code, detail);
+}
+function profileName(value) {
+    if (typeof value !== 'string' ||
+        value.length < 1 ||
+        value.length > 64 ||
+        !/[A-Za-z0-9]/.test(value[0]) ||
+        /[^A-Za-z0-9._-]/.test(value) ||
+        RESERVED.has(value)) {
+        fail('invalid_profile', 'Invalid profile name; use 1–64 ASCII letters, digits, dots, underscores or hyphens.');
+    }
+}
+/** Strict file-bound URL syntax; explicit-key transport behavior is separate. */
+export function canonicalizeBaseUrl(value) {
+    const bad = () => fail('invalid_base_url', 'Invalid saved-credential base URL.');
+    if (typeof value !== 'string')
+        return bad();
+    const raw = trimCredentialWhitespace(value);
+    if (!raw || raw.length > 2048 || /[^\x21-\x7e]|[\\%?#]/.test(raw))
+        return bad();
+    const schemeMatch = /^(https?):\/\//i.exec(raw);
+    if (!schemeMatch)
+        return bad();
+    const scheme = schemeMatch[1].toLowerCase();
+    const rest = raw.slice(schemeMatch[0].length);
+    const slash = rest.indexOf('/');
+    const authority = slash < 0 ? rest : rest.slice(0, slash);
+    const pathname = slash < 0 ? '' : rest.slice(slash);
+    if (!authority || authority.includes('@'))
+        return bad();
+    let host;
+    let port;
+    if (authority.startsWith('[')) {
+        const close = authority.indexOf(']');
+        if (close < 0)
+            return bad();
+        const address = authority.slice(1, close);
+        if (isIP(address) !== 6)
+            return bad();
+        const suffix = authority.slice(close + 1);
+        if (suffix && !suffix.startsWith(':'))
+            return bad();
+        port = suffix ? suffix.slice(1) : undefined;
+        // Only IPv6 reaches the URL parser, after strict address validation. It
+        // serializes the first longest zero run and any dotted IPv4 tail.
+        host = new URL(`https://[${address}]`).hostname;
+    }
+    else {
+        const parts = authority.split(':');
+        if (parts.length > 2)
+            return bad();
+        host = parts[0].toLowerCase();
+        port = parts[1];
+        if (!host || host.length > 253)
+            return bad();
+        const labels = host.split('.');
+        if (labels.some((label) => !label ||
+            label.length > 63 ||
+            /[^a-z0-9-]/.test(label) ||
+            !/[a-z0-9]/.test(label[0]) ||
+            !/[a-z0-9]/.test(label[label.length - 1])))
+            return bad();
+        const last = labels[labels.length - 1];
+        if (/^(?:[0-9]+|0x[0-9a-f]*)$/.test(last) && isIP(host) !== 4)
+            return bad();
+    }
+    let portSuffix = '';
+    if (port !== undefined) {
+        if (!port || /[^0-9]/.test(port))
+            return bad();
+        const n = Number(port);
+        if (!Number.isInteger(n) || n < 1 || n > 65535)
+            return bad();
+        if (!(scheme === 'https' && n === 443) && !(scheme === 'http' && n === 80))
+            portSuffix = `:${n}`;
+    }
+    if (scheme === 'http' &&
+        host !== 'localhost' &&
+        host !== '[::1]' &&
+        !(isIP(host) === 4 && host.startsWith('127.')))
+        return bad();
+    if (/[^A-Za-z0-9\-._~!$&'()*+,;=:@/]/.test(pathname) ||
+        pathname.split('/').some((part) => part === '.' || part === '..'))
+        return bad();
+    return `${scheme}://${host}${portSuffix}${pathname.replace(/\/+$/, '')}`;
+}
+function object(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        fail('invalid_schema');
+}
+function closed(value, keys) {
+    object(value);
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key)))
+        fail('invalid_schema');
+}
+function nonempty(value) {
+    if (typeof value !== 'string' || !value.length)
+        fail('invalid_schema');
+}
+function stringsWellFormed(value) {
+    const pending = [value];
+    while (pending.length) {
+        const current = pending.pop();
+        if (typeof current === 'string') {
+            for (let i = 0; i < current.length; i++) {
+                const code = current.charCodeAt(i);
+                if (code >= 0xd800 && code <= 0xdbff) {
+                    const next = current.charCodeAt(++i);
+                    if (!(next >= 0xdc00 && next <= 0xdfff))
+                        fail('invalid_schema');
+                }
+                else if (code >= 0xdc00 && code <= 0xdfff)
+                    fail('invalid_schema');
+            }
+        }
+        else if (current && typeof current === 'object') {
+            for (const [key, child] of Object.entries(current))
+                pending.push(key, child);
+        }
+    }
+}
+export function parseCredentials(bytes) {
+    if (bytes.byteLength > MAX_BYTES)
+        fail('file_too_large', 'Saved credentials exceed 65,536 bytes.');
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
+    }
+    catch {
+        return fail('invalid_utf8', 'Saved credentials must be valid UTF-8.');
+    }
+    let doc;
+    try {
+        doc = JSON.parse(text);
+    }
+    catch {
+        return fail('invalid_json', 'Saved credentials are not valid JSON.');
+    }
+    stringsWellFormed(doc);
+    object(doc);
+    if (typeof doc.version !== 'number' ||
+        !Number.isFinite(doc.version) ||
+        !Number.isInteger(doc.version))
+        fail('invalid_schema');
+    if (doc.version !== 1)
+        fail('unsupported_version', 'Unsupported saved-credentials version.');
+    if (!Object.hasOwn(doc, 'default_profile'))
+        fail('missing_default_profile', 'Saved credentials have no default profile.');
+    closed(doc, ['version', 'default_profile', 'profiles']);
+    if (typeof doc.default_profile !== 'string')
+        fail('invalid_schema');
+    profileName(doc.default_profile);
+    object(doc.profiles);
+    const names = Object.keys(doc.profiles);
+    if (!names.length)
+        fail('invalid_schema');
+    if (names.length > 100)
+        fail('too_many_profiles', 'Saved credentials contain more than 100 profiles.');
+    for (const name of names) {
+        profileName(name);
+        const entry = doc.profiles[name];
+        closed(entry, ['api_key', 'base_url', 'key_id', 'account', 'scope']);
+        nonempty(entry.api_key);
+        if (!trimCredentialWhitespace(entry.api_key))
+            fail('invalid_schema');
+        if (canonicalizeBaseUrl(entry.base_url) !== entry.base_url)
+            fail('invalid_base_url', 'Stored base URLs must be canonical.');
+        nonempty(entry.key_id);
+        closed(entry.account, ['id', 'name']);
+        nonempty(entry.account.id);
+        if (entry.account.name !== null && typeof entry.account.name !== 'string')
+            fail('invalid_schema');
+        object(entry.scope);
+        if (entry.scope.type === 'account')
+            closed(entry.scope, ['type']);
+        else if (entry.scope.type === 'workspace') {
+            closed(entry.scope, ['type', 'workspace_id', 'workspace_name']);
+            nonempty(entry.scope.workspace_id);
+            nonempty(entry.scope.workspace_name);
+        }
+        else
+            fail('invalid_schema');
+    }
+    if (!Object.hasOwn(doc.profiles, doc.default_profile))
+        fail('missing_default_profile', 'The saved default profile is missing.');
+    return doc;
+}
+const sameObject = (a, b) => a.dev === b.dev && a.ino === b.ino;
+const sameDirectory = (initial, current) => sameObject(initial, current) &&
+    initial.ctimeNs === current.ctimeNs &&
+    initial.mtimeNs === current.mtimeNs;
+/**
+ * Opened descriptors are checked against pre/post named directory AND file
+ * identities and the initial directory's change timestamps. Renaming a
+ * directory away and back preserves dev/ino and can preserve mtime, so ctime
+ * is essential. Bigint stats retain the filesystem's timestamp precision.
+ * Node has no portable openat: these checks reject observed substitutions
+ * rather than claiming an atomic directory-relative open.
+ */
+function readStore() {
+    if (process.platform === 'win32' ||
+        typeof process.getuid !== 'function' ||
+        !fs.constants.O_NOFOLLOW ||
+        !fs.constants.O_DIRECTORY) {
+        fail('unsupported_file_protection', 'Saved credentials require verified POSIX file protection.');
+    }
+    const deadline = performance.now() + 5000;
+    const checkTime = () => {
+        if (performance.now() >= deadline)
+            fail('credential_read_timeout', 'Reading saved credentials timed out.');
+    };
+    const uid = process.getuid();
+    const directoryUid = BigInt(uid);
+    const checkDir = (st) => {
+        if (!st.isDirectory() || st.uid !== directoryUid || (st.mode & 4095n) !== 448n)
+            fail('unsafe_directory', 'The credentials directory must be owned by you with mode 0700.');
+    };
+    const checkFile = (st) => {
+        if (!st.isFile() || st.uid !== uid || (st.mode & 0o7777) !== 0o600 || st.nlink !== 1)
+            fail('unsafe_file', 'The credentials file must be a private, owned regular file with mode 0600 and one link.');
+        if (st.size > MAX_BYTES)
+            fail('file_too_large', 'Saved credentials exceed 65,536 bytes.');
+    };
+    let dirFd;
+    let fileFd;
+    try {
+        const home = os.homedir();
+        if (!home || !path.isAbsolute(home))
+            fail('missing_credentials', 'Cannot discover your home directory.');
+        const directory = path.join(home, '.mandala');
+        const filename = path.join(directory, 'credentials.json');
+        const namedDir = fs.lstatSync(directory, { bigint: true });
+        checkDir(namedDir);
+        dirFd = fs.openSync(directory, fs.constants.O_RDONLY |
+            fs.constants.O_DIRECTORY |
+            fs.constants.O_NOFOLLOW |
+            fs.constants.O_NONBLOCK);
+        const openedDir = fs.fstatSync(dirFd, { bigint: true });
+        checkDir(openedDir);
+        if (!sameDirectory(namedDir, openedDir))
+            fail('unsafe_directory');
+        const namedFile = fs.lstatSync(filename);
+        checkFile(namedFile);
+        const beforeDir = fs.lstatSync(directory, { bigint: true });
+        checkDir(beforeDir);
+        if (!sameDirectory(namedDir, beforeDir))
+            fail('unsafe_directory');
+        checkTime();
+        fileFd = fs.openSync(filename, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        const openedFile = fs.fstatSync(fileFd);
+        checkFile(openedFile);
+        if (!sameObject(namedFile, openedFile))
+            fail('unsafe_file');
+        const buffer = Buffer.alloc(MAX_BYTES + 1);
+        let size = 0;
+        for (;;) {
+            checkTime();
+            const n = fs.readSync(fileFd, buffer, size, Math.min(8192, buffer.length - size), null);
+            size += n;
+            if (size > MAX_BYTES)
+                fail('file_too_large', 'Saved credentials exceed 65,536 bytes.');
+            if (!n)
+                break;
+        }
+        const finalFile = fs.fstatSync(fileFd);
+        checkFile(finalFile);
+        if (!sameObject(openedFile, finalFile) ||
+            size !== finalFile.size ||
+            openedFile.size !== finalFile.size ||
+            openedFile.mtimeMs !== finalFile.mtimeMs ||
+            openedFile.ctimeMs !== finalFile.ctimeMs)
+            fail('unsafe_file');
+        const finalNamedFile = fs.lstatSync(filename);
+        checkFile(finalNamedFile);
+        if (!sameObject(openedFile, finalNamedFile))
+            fail('unsafe_file');
+        const finalDir = fs.fstatSync(dirFd, { bigint: true });
+        const finalNamedDir = fs.lstatSync(directory, { bigint: true });
+        checkDir(finalDir);
+        checkDir(finalNamedDir);
+        if (!sameDirectory(namedDir, finalDir) || !sameDirectory(namedDir, finalNamedDir))
+            fail('unsafe_directory');
+        checkTime();
+        return buffer.subarray(0, size);
+    }
+    catch (error) {
+        if (error instanceof CredentialsError)
+            throw error;
+        const code = error?.code;
+        if (code === 'ENOENT')
+            fail('missing_credentials', 'No API key or saved credentials found.');
+        return fail('unsafe_file', 'Cannot safely read saved credentials; check the directory and file protection.');
+    }
+    finally {
+        if (fileFd !== undefined)
+            fs.closeSync(fileFd);
+        if (dirFd !== undefined)
+            fs.closeSync(dirFd);
+    }
+}
+/** Resolve once at local startup, before constructing an explicit ServerConfig. */
+export function resolveCredentials(options = {}) {
+    const explicit = options.apiKey;
+    const legacyBase = () => (options.baseUrl ?? process.env.MANDALA_BASE_URL?.trim()) || DEFAULT_BASE_URL;
+    if (explicit !== undefined) {
+        if (typeof explicit !== 'string' || !trimCredentialWhitespace(explicit))
+            fail('invalid_explicit_key', 'The supplied API key must be a nonempty string.');
+        return {
+            apiKey: trimCredentialWhitespace(explicit),
+            baseUrl: legacyBase(),
+            source: 'explicit',
+        };
+    }
+    const environment = trimCredentialWhitespace(process.env.MANDALA_API_KEY ?? '');
+    if (environment)
+        return { apiKey: environment, baseUrl: legacyBase(), source: 'environment' };
+    // null is supplied in JavaScript, and must not fall through to the environment.
+    const profile = options.profile !== undefined
+        ? options.profile
+        : trimCredentialWhitespace(process.env.MANDALA_PROFILE ?? '') || undefined;
+    if (profile !== undefined)
+        profileName(profile);
+    const doc = parseCredentials(readStore());
+    const name = profile ?? doc.default_profile;
+    if (!Object.hasOwn(doc.profiles, name))
+        fail('missing_selected_profile', 'The selected credential profile is missing.');
+    const entry = doc.profiles[name];
+    const override = options.baseUrl !== undefined
+        ? options.baseUrl
+        : trimCredentialWhitespace(process.env.MANDALA_BASE_URL ?? '') || undefined;
+    if (override !== undefined && canonicalizeBaseUrl(override) !== entry.base_url)
+        fail('base_binding_mismatch', 'The base URL does not match the selected credential profile.');
+    return {
+        apiKey: trimCredentialWhitespace(entry.api_key),
+        baseUrl: entry.base_url,
+        source: 'file',
+        profile: name,
+    };
+}
+//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,WAAW;IACX,WAAW;IACX,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,sBAAsB;IACtB,gBAAgB;IAChB,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,CACL,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,EAAE;QACX,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,IAAI;QACb,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;QAC9B,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,KAAK,CACf,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,OAAO,KAAK,GAAG,GAAG,IAAI,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAAE,KAAK,EAAE,CAAC;IAC7E,OAAO,GAAG,GAAG,KAAK,IAAI,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAAE,GAAG,EAAE,CAAC;IAC7E,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,qFAAqF;AACrF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IADX,YACW,IAAY,EACrB,MAAc;QAEd,KAAK,CAAC,GAAG,MAAM,qEAAqE,CAAC,CAAC;QAH7E,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAM,GAAG,4BAA4B;IAC/D,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,GAAG,EAAE;QACjB,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EACnB,CAAC;QACD,IAAI,CACF,iBAAiB,EACjB,qFAAqF,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,GAAG,GAAG,GAAU,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,EAAE,CAAC;IAChF,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,GAAG,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,EAAE,CAAC;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,IAAwB,CAAC;IAC7B,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,EAAE,CAAC;QACpD,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5C,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,GAAG,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK;YACN,KAAK,CAAC,MAAM,GAAG,EAAE;YACjB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YACxB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAC5C;YAED,OAAO,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;YAAE,OAAO,GAAG,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACxE,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IACE,MAAM,KAAK,MAAM;QACjB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,OAAO;QAChB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE9C,OAAO,GAAG,EAAE,CAAC;IACf,IACE,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAEjE,OAAO,GAAG,EAAE,CAAC;IACf,OAAO,GAAG,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAGD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAClG,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,IAAc;IAC5C,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7F,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;oBACrC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;wBAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAClE,CAAC;qBAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;oBAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAKD,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,KAAK,CAAC,UAAU,GAAG,SAAS;QAC9B,IAAI,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,CAAC;IACnE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,cAAc,EAAE,wCAAwC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAC;IACvE,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,CAAC;IACZ,IACE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC/B,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;QAE9B,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzB,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC;QACxC,IAAI,CAAC,yBAAyB,EAAE,4CAA4C,CAAC,CAAC;IAChF,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpE,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QACpB,IAAI,CAAC,mBAAmB,EAAE,mDAAmD,CAAC,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrE,IAAI,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,QAAQ;YACxD,IAAI,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;QAClE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;YACvE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;aAC7D,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAChE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;;YAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,eAAe,CAAC;QACnD,IAAI,CAAC,yBAAyB,EAAE,uCAAuC,CAAC,CAAC;IAC3E,OAAO,GAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAA4B,EAAE,CAA4B,EAAE,EAAE,CAChF,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;AACrC,MAAM,aAAa,GAAG,CAAC,OAAuB,EAAE,OAAuB,EAAE,EAAE,CACzE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;IACnC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;AAEtC;;;;;;;GAOG;AACH,SAAS,SAAS;IAChB,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QACpC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU;QACxB,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EACzB,CAAC;QACD,IAAI,CACF,6BAA6B,EAC7B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;YAC/B,IAAI,CAAC,yBAAyB,EAAE,sCAAsC,CAAC,CAAC;IAC5E,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,EAAkB,EAAE,EAAE;QACtC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM;YAChF,IAAI,CAAC,kBAAkB,EAAE,gEAAgE,CAAC,CAAC;IAC/F,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,EAAY,EAAE,EAAE;QACjC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC;YAClF,IAAI,CACF,aAAa,EACb,yFAAyF,CAC1F,CAAC;QACJ,IAAI,EAAE,CAAC,IAAI,GAAG,SAAS;YAAE,IAAI,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,KAAyB,CAAC;IAC9B,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACjC,IAAI,CAAC,qBAAqB,EAAE,sCAAsC,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnB,KAAK,GAAG,EAAE,CAAC,QAAQ,CACjB,SAAS,EACT,EAAE,CAAC,SAAS,CAAC,QAAQ;YACnB,EAAE,CAAC,SAAS,CAAC,WAAW;YACxB,EAAE,CAAC,SAAS,CAAC,UAAU;YACvB,EAAE,CAAC,SAAS,CAAC,UAAU,CAC1B,CAAC;QACF,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClE,SAAS,EAAE,CAAC;QACZ,MAAM,GAAG,EAAE,CAAC,QAAQ,CAClB,QAAQ,EACR,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAC1E,CAAC;QACF,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC;YAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,SAAS,CAAC;YACR,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YACxF,IAAI,IAAI,CAAC,CAAC;YACV,IAAI,IAAI,GAAG,SAAS;gBAAE,IAAI,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC;gBAAE,MAAM;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,IACE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC;YAClC,IAAI,KAAK,SAAS,CAAC,IAAI;YACvB,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;YAClC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;YACxC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;YAExC,IAAI,CAAC,aAAa,CAAC,CAAC;QACtB,MAAM,cAAc,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC;YAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnB,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;YAC/E,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3B,SAAS,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAC;QACnD,MAAM,IAAI,GAAI,KAA+B,EAAE,IAAI,CAAC;QACpD,IAAI,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;QAC7F,OAAO,IAAI,CACT,aAAa,EACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAUD,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,UAAkC,EAAE;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,IAAI,gBAAgB,CAAC;IAChF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC;YACrE,IAAI,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;QAClF,OAAO;YACL,MAAM,EAAE,wBAAwB,CAAC,QAAQ,CAAC;YAC1C,OAAO,EAAE,UAAU,EAAE;YACrB,MAAM,EAAE,UAAU;SACnB,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC9F,gFAAgF;IAChF,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,CAAC,OAAO,CAAC,OAAO;QACjB,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;IAC/E,IAAI,OAAO,KAAK,SAAS;QAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;QACpC,IAAI,CAAC,0BAA0B,EAAE,6CAA6C,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,CAAC,OAAO,CAAC,OAAO;QACjB,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;IAChF,IAAI,QAAQ,KAAK,SAAS,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,QAAQ;QAC5E,IAAI,CAAC,uBAAuB,EAAE,8DAA8D,CAAC,CAAC;IAChG,OAAO;QACL,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/C,OAAO,EAAE,KAAK,CAAC,QAAQ;QACvB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -16,6 +16,19 @@
 export declare class MandalaError extends Error {
     name: string;
 }
+/** Optional diagnostics supplied by an HTTP response; never permission to replay a request. */
+export interface APIErrorMetadata {
+    requestId?: string;
+    allow?: string;
+    wwwAuthenticate?: string;
+    /**
+     * The HTTP method of the request that was refused, when known. Read by
+     * {@link isTransient} for one status: a `503` answered to a change may or may
+     * not have been acted on, so only a request that is safe to repeat is
+     * transient on it.
+     */
+    method?: string;
+}
 export declare class APIError extends MandalaError {
     readonly status: number;
     readonly body?: unknown | undefined;
@@ -36,9 +49,17 @@ export declare class APIError extends MandalaError {
      * the caller who arrived a moment earlier heard.
      */
     readonly reason?: string;
+    /** Response header first, then the top-level body ID; never an idempotency key. */
+    readonly requestId?: string;
+    /** The received Allow header, when supplied. */
+    readonly allow?: string;
+    /** The received WWW-Authenticate header, when supplied. */
+    readonly wwwAuthenticate?: string;
+    /** The method of the refused request, upper case, when known. */
+    readonly method?: string;
     constructor(message: string, status: number, body?: unknown | undefined, 
     /** Parsed Retry-After delay in milliseconds; absent when missing or invalid. */
-    retryAfterMs?: number | undefined);
+    retryAfterMs?: number | undefined, metadata?: APIErrorMetadata);
 }
 /** Whether waiting can change a classified refusal's answer. */
 export type ReasonKind = 'clears' | 'permanent';
@@ -102,12 +123,14 @@ export declare function reasonAdvice(reason: string | undefined): string | undef
  * the work may already stand. None of the three is a fault on the computer, and
  * a model told only "unauthorized (HTTP 401)" reads it as one.
  *
- * Only these three. A 404 is deliberately not here: it does not separate deleted
+ * A 404 is deliberately not classified here: it does not separate deleted
  * from out of this key's reach, so a single clause would have to be wrong about
  * one of them — that judgement belongs to the tools that know which id they were
  * given. Silence is the same discipline {@link reasonAdvice} keeps.
  */
-export declare function statusAdvice(status: number | undefined): string | undefined;
+export declare function authenticationAdvice(reason: string | undefined): string;
+/** Status-specific guidance, with authentication provenance supplied by the refusal reason. */
+export declare function statusAdvice(status: number | undefined, reason?: string): string | undefined;
 /** 401 — the key is missing, malformed, or revoked. */
 export declare class AuthenticationError extends APIError {
     name: string;
@@ -120,10 +143,14 @@ export declare class PlanLimitError extends APIError {
 export declare class PermissionDeniedError extends APIError {
     name: string;
 }
-/** 404 — no such computer, snapshot, or route. */
+/** 404 — no such computer, snapshot, guest path, or route. */
 export declare class NotFoundError extends APIError {
     name: string;
 }
+/** 405 — the path does not support the requested method; inspect the received Allow. */
+export declare class MethodNotAllowedError extends APIError {
+    name: string;
+}
 /**
  * 409 — the thing exists but is in the wrong state for this right now.
  *
@@ -180,8 +207,73 @@ export declare class MoveRequiredError extends ConflictError {
     name: string;
     constructor(message: string, status: number, body: unknown, 
     /** Whether a host in this region could run the size that was asked for. */
-    movePossible: boolean, retryAfterMs?: number);
+    movePossible: boolean, retryAfterMs?: number, metadata?: APIErrorMetadata);
 }
+/**
+ * The 409 a create-only upload gets when the path is already taken.
+ *
+ * `PUT /computers/{id}/files?overwrite=false` creates the file only if nothing
+ * is at `path`. When something is, the answer is 409 with `reason: "exists"` and
+ * THIS request wrote nothing — an earlier attempt whose answer was lost may have
+ * written the file itself. Its own class for the reason {@link MoveRequiredError}
+ * has one: it is a {@link ConflictError} by status and the opposite of one by
+ * nature — it clears only when the caller decides, never by waiting — so
+ * {@link isTransient} says no to it. A subclass, so `instanceof ConflictError`
+ * written before this existed still catches it.
+ *
+ * Raised only for the platform's explicit `reason: "exists"`, so the class is
+ * the claim: something is at the path. A create-only 409 whose reason could
+ * not be read is {@link CreateOnlyConflictError} instead, which claims nothing
+ * about the path.
+ */
+export declare class FileExistsError extends ConflictError {
+    name: string;
+}
+/**
+ * A create-only upload refused with 409 whose reason could not be read.
+ *
+ * `PUT /computers/{id}/files?overwrite=false` is answered 409 `exists`
+ * ({@link FileExistsError}) or 409 `unsupported` when it is refused. A 409 can
+ * also arrive with no usable reason: the body interrupted, empty, a proxy's
+ * page instead of the platform's JSON, or JSON whose `reason` is missing, not a
+ * string, or blank. {@link Api} raises that refusal as this class (see
+ * {@link createOnlyRefusal}), with {@link APIError.reason} `undefined` and a
+ * message saying the reason is unknown. It does NOT say the path is taken, and
+ * it does not say whether the write landed.
+ *
+ * Final, not transient: {@link isTransient} says no to it. Sending the same
+ * create-only write again repeats a refusal that was not said to clear, and a
+ * delayed retry after the path is cleared could create the file when no one
+ * expected it. Read the path to find out what is there before deciding. The
+ * raw body stays on {@link APIError.body} for diagnostics. A subclass of
+ * {@link ConflictError}, so `instanceof ConflictError` still catches it.
+ */
+export declare class CreateOnlyConflictError extends ConflictError {
+    name: string;
+}
+/**
+ * A create-only upload's 409, never left looking like a passing conflict.
+ *
+ * Applied by {@link Api} to every `PUT computers/:id/files` sent with
+ * `overwrite=false`, so an embedder's {@link isTransient} and this server's
+ * tools give one answer. The platform's taken path is 409 `exists`, which
+ * {@link errorForStatus} already maps to {@link FileExistsError}. A 409 without
+ * a usable word — the body lost, empty, a proxy's page, or JSON whose `reason`
+ * is missing, not a string, or blank — would otherwise be a bare
+ * {@link ConflictError} that {@link isTransient} calls worth sending again: a
+ * retry of a refusal that does not clear, and one that could create the file
+ * later if the path were cleared in between. So it is a
+ * {@link CreateOnlyConflictError} here, final, with a neutral message: not the
+ * body's own text, which could say "already exists" without the `exists`
+ * reason. The body stays on the error for diagnostics. A 409 that DID carry a
+ * string reason keeps the platform's classification, whatever the word.
+ */
+export declare function createOnlyRefusal(err: APIError): APIError;
+/**
+ * Whether this request is a create-only upload: `PUT computers/:id/files` with
+ * `overwrite=false`. The only request {@link createOnlyRefusal} applies to.
+ */
+export declare function isCreateOnlyUpload(method: string, path: string, query: Record<string, string | number | boolean | undefined> | undefined): boolean;
 /**
  * 416 — the `Range` named no byte the file has.
  *
@@ -200,7 +292,7 @@ export declare class RangeNotSatisfiableError extends APIError {
     name: string;
     constructor(message: string, status: number, body?: unknown, 
     /** The file's real length, off `Content-Range`, when the response sent one. */
-    size?: number | undefined, retryAfterMs?: number);
+    size?: number | undefined, retryAfterMs?: number, metadata?: APIErrorMetadata);
 }
 /**
  * 429 — the request is valid; the caller has spent a temporary rate budget.
@@ -219,12 +311,27 @@ export declare class RateLimitError extends APIError {
     name: string;
     constructor(message: string, status: number, body?: unknown, 
     /** From `Retry-After`, in milliseconds from now, when the response sent one. */
-    retryAfterMs?: number);
+    retryAfterMs?: number, metadata?: APIErrorMetadata);
 }
-/** 503 — a hypervisor could not be reached, so an inventory would be short. */
+/**
+ * 503 — something the request depends on (a hypervisor, a store, a host's
+ * capacity) could not answer or take it right now.
+ *
+ * A READ answered 503 can be asked again shortly. A CHANGE answered 503 may or
+ * may not have happened: the platform answers a failure after the request was
+ * sent the same way, with or without a warning in the message. So
+ * {@link isTransient} calls a 503 worth repeating only for a request that is
+ * safe to repeat — a GET or HEAD, see {@link REPEATABLE_METHODS} — and any
+ * change has its current state read before it is sent again.
+ */
 export declare class UnavailableError extends APIError {
     name: string;
 }
+/**
+ * Whether a `503` leaves the request's outcome unknown: it was a change, or its
+ * method was not recorded.
+ */
+export declare function outcomeUnknownOn503(err: unknown): boolean;
 /**
  * The request was given up on before the platform answered.
  *
@@ -464,7 +571,7 @@ export declare class OriginTLSError extends APIError {
  */
 export declare function platformSaid(body: unknown): string | undefined;
 /** Build the error for a status, with the platform's own message when it sent one. */
-export declare function errorForStatus(status: number, message: string, body?: unknown, retryAfterMs?: number): APIError;
+export declare function errorForStatus(status: number, message: string, body?: unknown, retryAfterMs?: number, metadata?: APIErrorMetadata): APIError;
 /**
  * Whether an error is worth trying again without changing the request.
  *
@@ -474,7 +581,9 @@ export declare function errorForStatus(status: number, message: string, body?: u
  * including one that creates something — so it names only failures that both
  * clear on their own AND are safe to replay blind.
  *
- * Answered by TYPE, with no status numbers at all, which is the OPL-3724
+ * Terminal authentication, authority, payment, missing-resource and method
+ * refusals stay terminal even with a contradictory reason. Other cases are
+ * answered by TYPE, which is the OPL-3724
  * decision written down. Three clients had drifted into three mechanisms for
  * one question: this file matched classes plus a list of numbers, the
  * TypeScript SDK matched classes alone, and the Python SDK named the fatal
@@ -485,7 +594,9 @@ export declare function errorForStatus(status: number, message: string, body?: u
  * - {@link ConflictError} — something is in flight that this cannot run
  *   alongside, minus the one that is a decision
  * - {@link RateLimitError} — a cadence, and the response usually says how long
- * - {@link UnavailableError} — a hypervisor briefly out of reach
+ * - {@link UnavailableError} — something briefly out of reach, for a GET or
+ *   HEAD only. Any change answered 503 may have happened, so it is not
+ *   transient, whatever `reason` it carries
  * - {@link ConnectivityError} — the request never left
  *
  * That last line is now literally true, and it was not always. The class used

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAa,SAAQ,KAAK;IAC5B,IAAI,SAAkB;CAChC;AAED,qBAAa,QAAS,SAAQ,YAAY;IAkBtC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO;IACvB,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;IApBvB,IAAI,SAAc;IAC3B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,YAAA;IACvB,gFAAgF;IACvE,YAAY,CAAC,EAAE,MAAM,YAAA;CAKjC;AA0BD,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAK7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CA2B3E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAW3E;AAkBD,uDAAuD;AACvD,qBAAa,mBAAoB,SAAQ,QAAQ;IACtC,IAAI,SAAyB;CACvC;AAED,iEAAiE;AACjE,qBAAa,cAAe,SAAQ,QAAQ;IACjC,IAAI,SAAoB;CAClC;AAED,qEAAqE;AACrE,qBAAa,qBAAsB,SAAQ,QAAQ;IACxC,IAAI,SAA2B;CACzC;AAED,kDAAkD;AAClD,qBAAa,aAAc,SAAQ,QAAQ;IAChC,IAAI,SAAmB;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,aAAc,SAAQ,QAAQ;IAChC,IAAI,SAAmB;CACjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,iBAAkB,SAAQ,aAAa;IAMhD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,OAAO;IANvB,IAAI,SAAuB;gBAElC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO;IACb,2EAA2E;IAClE,YAAY,EAAE,OAAO,EAC9B,YAAY,CAAC,EAAE,MAAM;CAIxB;AAoBD;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAyB,SAAQ,QAAQ;IAMlD,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IANf,IAAI,SAA8B;gBAEzC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO;IACd,+EAA+E;IACtE,IAAI,CAAC,EAAE,MAAM,YAAA,EACtB,YAAY,CAAC,EAAE,MAAM;CAIxB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAe,SAAQ,QAAQ;IACjC,IAAI,SAAoB;gBAG/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO;IACd,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM;CAIxB;AAED,+EAA+E;AAC/E,qBAAa,gBAAiB,SAAQ,QAAQ;IACnC,IAAI,SAAsB;CACpC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,SAAQ,YAAY;IACrC,IAAI,SAAoB;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,iBAAkB,SAAQ,YAAY;IACxC,IAAI,SAAuB;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,4BAA6B,SAAQ,iBAAiB;IACxD,IAAI,SAAkC;CAChD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;IACtC,IAAI,SAAyB;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,sBAAuB,SAAQ,QAAQ;IACzC,IAAI,SAA4B;CAC1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,aAAc,SAAQ,QAAQ;IAChC,IAAI,SAAmB;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;IACtC,IAAI,SAAyB;CACvC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,cAAe,SAAQ,QAAQ;IACjC,IAAI,SAAoB;CAClC;AAwKD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI9D;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,GACpB,QAAQ,CA2CV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAuCjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAUxD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAa,SAAQ,KAAK;IAC5B,IAAI,SAAkB;CAChC;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD,qBAAa,QAAS,SAAQ,YAAY;IA0BtC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO;IACvB,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;IA5BvB,IAAI,SAAc;IAC3B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,YAAA;IACvB,gFAAgF;IACvE,YAAY,CAAC,EAAE,MAAM,YAAA,EAC9B,QAAQ,CAAC,EAAE,gBAAgB;CAU9B;AAwCD,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAK7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAmC3E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAUvE;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAa5F;AAoBD,uDAAuD;AACvD,qBAAa,mBAAoB,SAAQ,QAAQ;IACtC,IAAI,SAAyB;CACvC;AAED,iEAAiE;AACjE,qBAAa,cAAe,SAAQ,QAAQ;IACjC,IAAI,SAAoB;CAClC;AAED,qEAAqE;AACrE,qBAAa,qBAAsB,SAAQ,QAAQ;IACxC,IAAI,SAA2B;CACzC;AAED,8DAA8D;AAC9D,qBAAa,aAAc,SAAQ,QAAQ;IAChC,IAAI,SAAmB;CACjC;AAED,wFAAwF;AACxF,qBAAa,qBAAsB,SAAQ,QAAQ;IACxC,IAAI,SAA2B;CACzC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,aAAc,SAAQ,QAAQ;IAChC,IAAI,SAAmB;CACjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,iBAAkB,SAAQ,aAAa;IAMhD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,OAAO;IANvB,IAAI,SAAuB;gBAElC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO;IACb,2EAA2E;IAClE,YAAY,EAAE,OAAO,EAC9B,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,gBAAgB;CAI9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,eAAgB,SAAQ,aAAa;IACvC,IAAI,SAAqB;CACnC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,uBAAwB,SAAQ,aAAa;IAC/C,IAAI,SAA6B;CAC3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,GAAG,QAAQ,CAsBzD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,SAAS,GACvE,OAAO,CAKT;AAoBD;;;;;;;;;;;GAWG;AACH,qBAAa,wBAAyB,SAAQ,QAAQ;IAMlD,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IANf,IAAI,SAA8B;gBAEzC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO;IACd,+EAA+E;IACtE,IAAI,CAAC,EAAE,MAAM,YAAA,EACtB,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,gBAAgB;CAI9B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAe,SAAQ,QAAQ;IACjC,IAAI,SAAoB;gBAG/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO;IACd,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,gBAAgB;CAI9B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;IACnC,IAAI,SAAsB;CACpC;AAYD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,SAAQ,YAAY;IACrC,IAAI,SAAoB;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,iBAAkB,SAAQ,YAAY;IACxC,IAAI,SAAuB;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,4BAA6B,SAAQ,iBAAiB;IACxD,IAAI,SAAkC;CAChD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;IACtC,IAAI,SAAyB;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,sBAAuB,SAAQ,QAAQ;IACzC,IAAI,SAA4B;CAC1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,aAAc,SAAQ,QAAQ;IAChC,IAAI,SAAmB;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;IACtC,IAAI,SAAyB;CACvC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,cAAe,SAAQ,QAAQ;IACjC,IAAI,SAAoB;CAClC;AAoKD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQ9D;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,QAAQ,CA4DV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAoDjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAexD"}