observability-toolkit 1.8.0 → 1.8.4

package/dist/lib/constants.js

@@ -1,9 +1,10 @@
 /**
  * Constants for observability-toolkit MCP server
  */
-import { join } from 'path';
-import { existsSync } from 'fs';
+import { join, resolve, dirname } from 'path';
+import { existsSync, realpathSync, lstatSync, readlinkSync, openSync, fstatSync, closeSync, constants as fsConstants } from 'fs';
 import { expandTilde } from './file-utils.js';
+import { homedir } from 'os';
 // Paths - expand tilde in case TELEMETRY_DIR is set to ~/... (tilde doesn't expand in JSON/env)
 export const CLAUDE_HOME = join(process.env.HOME || '', '.claude');
 export const TELEMETRY_DIR = expandTilde(process.env.TELEMETRY_DIR || '') || join(CLAUDE_HOME, 'telemetry');
@@ -13,9 +14,130 @@ const LOCAL_TELEMETRY_PATHS = [
     'telemetry',
     '.telemetry',
 ];
+/**
+ * Atomically check and resolve a path, preventing TOCTOU race conditions.
+ * Returns { exists: false } if path doesn't exist or is inaccessible.
+ * Returns { exists: true, isSymlink, realPath } with atomically resolved data.
+ *
+ * Security: Uses file descriptor-based operations to prevent symlink swap attacks.
+ * For regular directories, opens with O_DIRECTORY to verify it's a directory.
+ * For symlinks, reads target directly then verifies the resolved target exists.
+ */
+function atomicPathCheck(path) {
+    let fd;
+    try {
+        // Step 1: Get lstat info (does not follow symlinks)
+        const lstats = lstatSync(path);
+        const isSymbolicLink = lstats.isSymbolicLink();
+        if (isSymbolicLink) {
+            // Step 2a: For symlinks, read and verify the target
+            const target = readlinkSync(path);
+            // Resolve the target (handles both relative and absolute paths)
+            const parentDir = dirname(path);
+            const resolvedTarget = resolve(parentDir, target);
+            // Verify the target exists and is a directory
+            try {
+                const targetStats = lstatSync(resolvedTarget);
+                // If target is also a symlink, we need to follow the chain
+                // Use realpathSync to get the final destination
+                const realPath = targetStats.isSymbolicLink()
+                    ? realpathSync(resolvedTarget)
+                    : (targetStats.isDirectory() ? realpathSync(resolvedTarget) : null);
+                if (!realPath) {
+                    return { exists: false };
+                }
+                // Final verification that the resolved path is a directory
+                const finalStats = lstatSync(realPath);
+                if (!finalStats.isDirectory()) {
+                    return { exists: false };
+                }
+                return {
+                    exists: true,
+                    isSymlink: true,
+                    realPath,
+                };
+            }
+            catch {
+                return { exists: false };
+            }
+        }
+        // Step 2b: For non-symlinks, use file descriptor for atomic verification
+        // Open with O_RDONLY | O_DIRECTORY to ensure it's a directory
+        try {
+            fd = openSync(path, fsConstants.O_RDONLY | fsConstants.O_DIRECTORY);
+            const fdStats = fstatSync(fd);
+            if (!fdStats.isDirectory()) {
+                return { exists: false };
+            }
+            // Path is verified to be a directory via file descriptor
+            // Resolve any parent symlinks (safe since we hold FD to the actual dir)
+            const realPath = realpathSync(path);
+            return {
+                exists: true,
+                isSymlink: false,
+                realPath,
+            };
+        }
+        finally {
+            if (fd !== undefined) {
+                try {
+                    closeSync(fd);
+                }
+                catch {
+                    // Ignore close errors
+                }
+            }
+        }
+    }
+    catch {
+        return { exists: false };
+    }
+}
+/**
+ * Validate that a resolved path is within allowed base directories.
+ * Prevents symlink-based path traversal attacks.
+ *
+ * @param resolvedPath - The real path after resolving symlinks
+ * @param allowedBasePaths - Array of allowed base directories
+ * @returns true if the path is within allowed directories
+ */
+function isPathWithinAllowedBases(resolvedPath, allowedBasePaths) {
+    const sep = process.platform === 'win32' ? '\\' : '/';
+    for (const basePath of allowedBasePaths) {
+        try {
+            // Resolve the base path too in case it contains symlinks
+            const resolvedBase = existsSync(basePath) ? realpathSync(basePath) : resolve(basePath);
+            if (resolvedPath === resolvedBase || resolvedPath.startsWith(resolvedBase + sep)) {
+                return true;
+            }
+        }
+        catch {
+            // Skip invalid base paths
+            continue;
+        }
+    }
+    return false;
+}
+/**
+ * Get allowed base directories for local telemetry paths.
+ * Local telemetry must be within the working directory or home directory.
+ */
+function getAllowedLocalBases(workingDir) {
+    const home = homedir();
+    const resolvedWorkingDir = existsSync(workingDir) ? realpathSync(workingDir) : resolve(workingDir);
+    // Allow paths within the working directory or within home/.claude/
+    return [
+        resolvedWorkingDir,
+        join(home, '.claude'),
+    ];
+}
 /**
  * Get all telemetry directories (global + local project directories)
  * Returns array of { path, source } objects
+ *
+ * Security: Validates paths to prevent symlink-based path traversal attacks.
+ * Local telemetry directories must resolve to paths within the working directory
+ * or ~/.claude/ to prevent accessing sensitive files via malicious symlinks.
  */
 export function getTelemetryDirectories(cwd) {
     const dirs = [];
@@ -25,11 +147,28 @@ export function getTelemetryDirectories(cwd) {
     }
     // Check for local project telemetry directories
     const workingDir = cwd || process.cwd();
+    const allowedBases = getAllowedLocalBases(workingDir);
     for (const localPath of LOCAL_TELEMETRY_PATHS) {
         const fullPath = join(workingDir, localPath);
-        // Avoid adding duplicates (in case local path resolves to same as global)
-        if (existsSync(fullPath) && !dirs.some(d => d.path === fullPath)) {
-            dirs.push({ path: fullPath, source: 'local' });
+        // Security: Atomically check existence, symlink status, and resolve path
+        // This prevents TOCTOU race conditions where symlink target could be swapped
+        // between check and use
+        const pathInfo = atomicPathCheck(fullPath);
+        if (!pathInfo.exists) {
+            continue;
+        }
+        const { isSymlink: isSymbolicLink, realPath } = pathInfo;
+        // Security: Validate symlinks point to allowed directories
+        if (isSymbolicLink) {
+            if (!isPathWithinAllowedBases(realPath, allowedBases)) {
+                console.warn(`[SECURITY] Rejected symlink traversal: ${fullPath} -> ${realPath}`);
+                continue;
+            }
+        }
+        // Use the atomically resolved real path
+        // Avoid adding duplicates
+        if (!dirs.some(d => d.path === realPath)) {
+            dirs.push({ path: realPath, source: 'local' });
         }
     }
     return dirs;
@@ -47,15 +186,114 @@ export const CIRCUIT_BREAKER = {
     MAX_FAILURES: parseInt(process.env.CIRCUIT_BREAKER_MAX_FAILURES || '3', 10),
     RESET_MS: parseInt(process.env.CIRCUIT_BREAKER_RESET_MS || '60000', 10),
 };
+// Rate limiter configuration (token bucket)
+export const RATE_LIMITER = {
+    /** Maximum tokens (burst capacity) */
+    MAX_TOKENS: parseInt(process.env.RATE_LIMIT_MAX_TOKENS || '60', 10),
+    /** Tokens to refill per second */
+    REFILL_RATE: parseInt(process.env.RATE_LIMIT_REFILL_RATE || '1', 10),
+};
 // Claude context window size (200K tokens)
 export const CONTEXT_WINDOW_SIZE = 200000;
 // Approximate tokens per character
 export const TOKENS_PER_CHAR = 0.25;
-// Model pricing per 1M tokens (as of Jan 2026)
+/**
+ * Model pricing metadata for staleness detection
+ */
+export const MODEL_PRICING_METADATA = {
+    /** ISO date when pricing was last updated */
+    lastUpdated: '2026-01-30',
+    /** Days after which pricing is considered stale */
+    staleThresholdDays: 90,
+    /** Pricing sources for verification */
+    sources: {
+        anthropic: 'https://www.anthropic.com/pricing',
+        openai: 'https://openai.com/pricing',
+        google: 'https://ai.google.dev/pricing',
+        mistral: 'https://mistral.ai/pricing',
+        cohere: 'https://cohere.com/pricing',
+        groq: 'https://groq.com/pricing',
+        together: 'https://www.together.ai/pricing',
+        perplexity: 'https://www.perplexity.ai/pricing',
+    },
+};
+/**
+ * Check if pricing data is stale (>90 days old)
+ * @returns { isStale: boolean, daysSinceUpdate: number }
+ */
+export function checkPricingStaleness() {
+    const lastUpdate = new Date(MODEL_PRICING_METADATA.lastUpdated);
+    const now = new Date();
+    const daysSinceUpdate = Math.floor((now.getTime() - lastUpdate.getTime()) / (1000 * 60 * 60 * 24));
+    return {
+        isStale: daysSinceUpdate > MODEL_PRICING_METADATA.staleThresholdDays,
+        daysSinceUpdate,
+    };
+}
+// Check pricing staleness on module load (M13 fix)
+const pricingStatus = checkPricingStaleness();
+if (pricingStatus.isStale) {
+    console.warn(`[WARN] Model pricing data is ${pricingStatus.daysSinceUpdate} days old (last updated: ${MODEL_PRICING_METADATA.lastUpdated}). Consider updating MODEL_PRICING in constants.ts.`);
+}
+/**
+ * Model pricing per 1M tokens (as of Jan 2026)
+ *
+ * Pricing sources:
+ * - Anthropic: https://www.anthropic.com/pricing
+ * - OpenAI: https://openai.com/pricing
+ * - Google: https://ai.google.dev/pricing
+ * - Mistral: https://mistral.ai/pricing
+ * - Cohere: https://cohere.com/pricing
+ *
+ * Note: Pricing changes frequently. These are approximate values for cost estimation.
+ * For batch API pricing, multiply by 0.5 (50% discount typically).
+ *
+ * @see MODEL_PRICING_METADATA.lastUpdated for when this data was last verified
+ */
 export const MODEL_PRICING = {
+    // Anthropic Claude models
     'claude-opus-4-5-20251101': { input: 15.0, output: 75.0 },
     'claude-sonnet-4-20250514': { input: 3.0, output: 15.0 },
     'claude-3-5-haiku-20241022': { input: 0.80, output: 4.0 },
+    // Aliases for common model names
+    'claude-3-opus': { input: 15.0, output: 75.0 },
+    'claude-3-sonnet': { input: 3.0, output: 15.0 },
+    'claude-3-haiku': { input: 0.25, output: 1.25 },
+    // OpenAI GPT models
+    'gpt-4o': { input: 2.50, output: 10.0 },
+    'gpt-4o-mini': { input: 0.15, output: 0.60 },
+    'gpt-4-turbo': { input: 10.0, output: 30.0 },
+    'gpt-4': { input: 30.0, output: 60.0 },
+    'gpt-3.5-turbo': { input: 0.50, output: 1.50 },
+    'o1': { input: 15.0, output: 60.0 },
+    'o1-mini': { input: 3.0, output: 12.0 },
+    'o3-mini': { input: 1.10, output: 4.40 },
+    // Google Gemini models
+    'gemini-1.5-pro': { input: 1.25, output: 5.0 },
+    'gemini-1.5-flash': { input: 0.075, output: 0.30 },
+    'gemini-2.0-flash': { input: 0.10, output: 0.40 },
+    'gemini-1.0-pro': { input: 0.50, output: 1.50 },
+    // Mistral AI models
+    'mistral-large': { input: 2.0, output: 6.0 },
+    'mistral-medium': { input: 2.7, output: 8.1 },
+    'mistral-small': { input: 0.2, output: 0.6 },
+    'mixtral-8x7b': { input: 0.7, output: 0.7 },
+    'codestral': { input: 0.2, output: 0.6 },
+    // Cohere models
+    'command-r-plus': { input: 2.50, output: 10.0 },
+    'command-r': { input: 0.15, output: 0.60 },
+    'command': { input: 1.0, output: 2.0 },
+    'command-light': { input: 0.30, output: 0.60 },
+    // Groq models (competitive pricing)
+    'llama-3.3-70b': { input: 0.59, output: 0.79 },
+    'llama-3.1-8b': { input: 0.05, output: 0.08 },
+    'mixtral-8x7b-groq': { input: 0.24, output: 0.24 },
+    // Together AI models (approximate)
+    'llama-3-70b': { input: 0.90, output: 0.90 },
+    'llama-3-8b': { input: 0.20, output: 0.20 },
+    // Perplexity models
+    'sonar-pro': { input: 3.0, output: 15.0 },
+    'sonar': { input: 1.0, output: 1.0 },
 };
 // File patterns
 export const TRACES_FILE_PATTERN = 'traces-*.jsonl';
@@ -101,4 +339,12 @@ export function escapeFilterValue(value) {
 export const MAX_QUERY_LIMIT = 1000;
 // Retention configuration (default 7 days)
 export const RETENTION_DAYS = parseInt(process.env.RETENTION_DAYS || '7', 10);
+// Memory limits for result processing
+/** Hard cap on results held in memory to prevent OOM */
+export const MAX_RESULTS_IN_MEMORY = 10000;
+/** Switch to streaming aggregation when results exceed this threshold */
+export const STREAMING_THRESHOLD = 5000;
+// Duration limits for queries
+/** Maximum duration filter value (24 hours in milliseconds) */
+export const MAX_DURATION_MS = 86400000;
 //# sourceMappingURL=constants.js.map

package/dist/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAE5G,+CAA+C;AAC/C,MAAM,qBAAqB,GAAG;IAC5B,mBAAmB;IACnB,WAAW;IACX,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,MAAM,IAAI,GAAwD,EAAE,CAAC;IAErE,4CAA4C;IAC5C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC7C,0EAA0E;QAC1E,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uBAAuB;AACvB,kDAAkD;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;AAClG,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;AACnE,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;AAE/D,gCAAgC;AAChC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,EAAE,EAAE,CAAC;IAC3E,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,EAAE,EAAE,CAAC;CAC/D,CAAC;AAEX,2CAA2C;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C,mCAAmC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAsD;IAC9E,0BAA0B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACzD,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACxD,2BAA2B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;CAC1D,CAAC;AAEF,gBAAgB;AAChB,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,sDAAsD;AACtD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAE5F;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wDAAwD;AACxD,iEAAiE;AACjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAU,CAAC;AAG9D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,uDAAuD;IACvD,sEAAsE;IACtE,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,eAAe;AACf,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,IAAI,CAAC;AACjI,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAE5G,+CAA+C;AAC/C,MAAM,qBAAqB,GAAG;IAC5B,mBAAmB;IACnB,WAAW;IACX,YAAY;CACb,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,IAAY;IAOnC,IAAI,EAAsB,CAAC;IAE3B,IAAI,CAAC;QACH,oDAAoD;QACpD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAE/C,IAAI,cAAc,EAAE,CAAC;YACnB,oDAAoD;YACpD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAElC,gEAAgE;YAChE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAElD,8CAA8C;YAC9C,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;gBAC9C,2DAA2D;gBAC3D,gDAAgD;gBAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,cAAc,EAAE;oBAC3C,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC;oBAC9B,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAEtE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC3B,CAAC;gBAED,2DAA2D;gBAC3D,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;oBACf,QAAQ;iBACT,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAE9B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC3B,CAAC;YAED,yDAAyD;YACzD,wEAAwE;YACxE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAEpC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,KAAK;gBAChB,QAAQ;aACT,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,YAAoB,EAAE,gBAA0B;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAEtD,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEvF,IAAI,YAAY,KAAK,YAAY,IAAI,YAAY,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;YAC1B,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,kBAAkB,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnG,mEAAmE;IACnE,OAAO;QACL,kBAAkB;QAClB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;KACtB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,MAAM,IAAI,GAAwD,EAAE,CAAC;IAErE,4CAA4C;IAC5C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAE7C,yEAAyE;QACzE,6EAA6E;QAC7E,wBAAwB;QACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE3C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAEzD,2DAA2D;QAC3D,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,0CAA0C,QAAQ,OAAO,QAAQ,EAAE,CAAC,CAAC;gBAClF,SAAS;YACX,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uBAAuB;AACvB,kDAAkD;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;AAClG,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;AACnE,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;AAE/D,gCAAgC;AAChC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,EAAE,EAAE,CAAC;IAC3E,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,EAAE,EAAE,CAAC;CAC/D,CAAC;AAEX,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,sCAAsC;IACtC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,EAAE,EAAE,CAAC;IACnE,kCAAkC;IAClC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,GAAG,EAAE,EAAE,CAAC;CAC5D,CAAC;AAEX,2CAA2C;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C,mCAAmC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,6CAA6C;IAC7C,WAAW,EAAE,YAAY;IACzB,mDAAmD;IACnD,kBAAkB,EAAE,EAAE;IACtB,uCAAuC;IACvC,OAAO,EAAE;QACP,SAAS,EAAE,mCAAmC;QAC9C,MAAM,EAAE,4BAA4B;QACpC,MAAM,EAAE,+BAA+B;QACvC,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,4BAA4B;QACpC,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,iCAAiC;QAC3C,UAAU,EAAE,mCAAmC;KAChD;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACnG,OAAO;QACL,OAAO,EAAE,eAAe,GAAG,sBAAsB,CAAC,kBAAkB;QACpE,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;AAC9C,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,gCAAgC,aAAa,CAAC,eAAe,4BAA4B,sBAAsB,CAAC,WAAW,qDAAqD,CAAC,CAAC;AACjM,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsD;IAC9E,0BAA0B;IAC1B,0BAA0B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACzD,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACxD,2BAA2B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;IACzD,iCAAiC;IACjC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9C,iBAAiB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAC/C,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAE/C,oBAAoB;IACpB,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACvC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC5C,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC5C,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACtC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9C,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACnC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACvC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAExC,uBAAuB;IACvB,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;IAC9C,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;IAClD,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACjD,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAE/C,oBAAoB;IACpB,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC5C,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC7C,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC5C,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC3C,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAExC,gBAAgB;IAChB,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC/C,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC1C,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IACtC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAE9C,oCAAoC;IACpC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9C,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC7C,mBAAmB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAElD,mCAAmC;IACnC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC5C,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAE3C,oBAAoB;IACpB,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACzC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;CACrC,CAAC;AAEF,gBAAgB;AAChB,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,sDAAsD;AACtD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAE5F;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wDAAwD;AACxD,iEAAiE;AACjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAU,CAAC;AAG9D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,uDAAuD;IACvD,sEAAsE;IACtE,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,eAAe;AACf,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAE9E,sCAAsC;AACtC,wDAAwD;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC3C,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,8BAA8B;AAC9B,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC"}