offrouter-core 0.5.0 → 0.6.0

package/dist/secrets.js

@@ -3,37 +3,63 @@
  *
  * Secrets are stored only by OffRouter under user control:
  * - FileSecretStore: `secrets.json` fallback (chmod 0600 on POSIX)
- * - KeychainSecretStore: OS keychain boundary/stub for real runs
+ * - KeychainSecretStore: macOS Keychain via `/usr/bin/security` (darwin only)
  *
  * Never scrapes, copies, or reverse-engineers credentials from other CLIs.
  * No network access. No live credential discovery.
  */
 import { readFileSync } from "node:fs";
 import { mkdir, readFile, rename, unlink, writeFile, chmod, } from "node:fs/promises";
-import { dirname } from "node:path";
+import { dirname, join } from "node:path";
 import { randomBytes } from "node:crypto";
-/** Placeholder substituted for secret material in log-safe strings. */
+import { execFile as execFileCallback } from "node:child_process";
+import { promisify } from "node:util";
+import { homedir as osHomedir } from "node:os";
+const execFileAsync = promisify(execFileCallback);
 /** Placeholder substituted for secret material in log-safe strings. */
 export const REDACTED = "[REDACTED]";
 const DEFAULT_KEYCHAIN_SERVICE = "offrouter";
+const DEFAULT_KEYCHAIN_SCOPE = "default";
 const DEFAULT_ACCOUNT_PREFIX = "provider:";
-/**
- * Common API-key / token shapes seen in provider error messages.
- * Patterns are intentionally conservative (long alphabetic payload)
- * to avoid eating short unrelated tokens while still catching leaks.
- */
-const API_KEY_PATTERNS = [
+const DEFAULT_SECURITY_PATH = "/usr/bin/security";
+/** security(1) exit status when a generic-password item is not found. */
+const SECURITY_ERR_SEC_ITEM_NOT_FOUND = 44;
+const KEYCHAIN_UNAVAILABLE_MESSAGE = "OS keychain backend is not wired in this OffRouter build. " +
+    "OffRouter will not scrape other CLI credential stores. Use FileSecretStore for tests, or approve an " +
+    "explicit file fallback for real runs when keychain is unavailable.";
+export const SECRET_PATTERNS = [
     // Anthropic: sk-ant-...
-    /\bsk-ant-[a-zA-Z0-9_-]{16,}\b/g,
-    // OpenAI / OpenRouter-style: sk-... (including sk-live-, sk-proj-, etc.)
-    /\bsk-[a-zA-Z0-9_-]{16,}\b/g,
+    { name: "anthropic_api_key", pattern: /\bsk-ant-[a-zA-Z0-9_-]{16,}\b/g },
+    // OpenAI project / service-account style (before generic sk-)
+    { name: "openai_project_key", pattern: /\bsk-proj-[a-zA-Z0-9_-]{16,}\b/g },
+    // OpenAI / OpenRouter-style: sk-... (including sk-live-, etc.)
+    { name: "openai_api_key", pattern: /\bsk-[a-zA-Z0-9_-]{16,}\b/g },
     // Google API keys
-    /\bAIza[0-9A-Za-z_-]{20,}\b/g,
+    { name: "google_api_key", pattern: /\bAIza[0-9A-Za-z_-]{20,}\b/g },
     // Bearer tokens in Authorization headers / log lines
-    /\bBearer\s+[A-Za-z0-9._\-+=/]{16,}\b/gi,
-    // OpenAI project / service-account style
-    /\bsk-proj-[a-zA-Z0-9_-]{16,}\b/g,
+    {
+        name: "bearer_token",
+        pattern: /\bBearer\s+[A-Za-z0-9._\-+=/]{16,}\b/gi,
+    },
+    // Slack bot tokens
+    { name: "slack_bot_token", pattern: /\bxoxb-[0-9A-Za-z-]{10,}\b/g },
+    // GitHub personal access tokens (classic)
+    { name: "github_pat", pattern: /\bghp_[A-Za-z0-9]{20,}\b/g },
+    // AWS access key IDs
+    { name: "aws_access_key_id", pattern: /\bAKIA[0-9A-Z]{16}\b/g },
+    // PEM private key headers
+    {
+        name: "pem_private_key",
+        pattern: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/g,
+    },
+    // Generic key=value / key: value where the key name looks secret-ish
+    {
+        name: "generic_secret_assignment",
+        pattern: /\b(?:api[_-]?key|secret[_-]?key|access[_-]?token|auth[_-]?token|private[_-]?key|client[_-]?secret)\b\s*[=:]\s*["']?[^\s"']{8,}/gi,
+    },
 ];
+/** Flat list used by redact() — same patterns, name discarded. */
+const API_KEY_PATTERNS = SECRET_PATTERNS.map((p) => p.pattern);
 function assertProviderId(providerId) {
     if (typeof providerId !== "string" || providerId.trim() === "") {
         throw new TypeError("providerId must be a non-empty string");
@@ -216,57 +242,355 @@ export class KeychainUnavailableError extends Error {
         this.name = "KeychainUnavailableError";
     }
 }
+function defaultKeychainIndexPath() {
+    const override = process.env.OFFROUTER_HOME?.trim();
+    const home = override && override.length > 0 ? override : join(osHomedir(), ".offrouter");
+    return join(home, "keychain-index.json");
+}
+function asExecError(err) {
+    if (err && typeof err === "object") {
+        return err;
+    }
+    return { message: String(err) };
+}
+function bufferToString(value) {
+    if (value == null)
+        return "";
+    return typeof value === "string" ? value : value.toString("utf8");
+}
+/** Encode utf8 bytes as lowercase hex for `security ... -X`. */
+function toHexUtf8(value) {
+    return Buffer.from(value, "utf8").toString("hex");
+}
+/**
+ * Escape a token for a single-line `security -i` command so account/service
+ * ids with spaces or quotes cannot break the interactive command line.
+ * Hex passwords (`-X`) are [0-9a-f] only and need no further escaping.
+ */
+function securityInteractiveToken(value) {
+    // Reject control chars / newlines that would break the -i command stream.
+    if (value.includes("\r") || value.includes("\n") || value.includes("\0")) {
+        throw new TypeError("keychain attribute must not contain CR, LF, or NUL");
+    }
+    if (/^[A-Za-z0-9_.:@/+-]+$/.test(value)) {
+        return value;
+    }
+    // Double-quote and escape embedded quotes/backslashes.
+    const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    return `"${escaped}"`;
+}
 /**
- * OS keychain boundary for real runs.
+ * macOS Keychain-backed secret store.
  *
- * V1 ships this as a typed stub: it never scrapes other CLIs and does not
- * perform network I/O. Get/set/delete/list reject with KeychainUnavailableError
- * until a platform backend is wired. Prefer this store at the seams of real
- * runs once keychain support lands; tests and dry runs use FileSecretStore.
+ * Uses `/usr/bin/security` via `child_process.execFile` (argv only — never a
+ * shell). OffRouter only reads entries it wrote under the namespaced service
+ * `${service}:${scope}` (default `offrouter:default`). Account names are
+ * `${accountPrefix}${providerId}` (default `provider:<id>`).
+ *
+ * Secret values are written via `security -i` (interactive command mode):
+ * a single `add-generic-password ... -U -X <hex>` line is sent on stdin. The
+ * process argv is only `security -i`, so the secret never appears in `ps`.
+ * (Bare `security add-generic-password -w` without a value reads `/dev/tty`,
+ * not a pipe — that path is intentionally avoided.)
+ *
+ * Listing cannot be done safely via `security dump-keychain` (it dumps the
+ * entire keychain). Instead, a non-secret index of provider ids is maintained
+ * at `indexPath` (default `$OFFROUTER_HOME/keychain-index.json`). The index
+ * never contains secret values and is written with mode 0600.
+ *
+ * Non-darwin platforms throw KeychainUnavailableError with the same message
+ * shape historical callers expect (`OS keychain backend is not wired...`).
+ * Tests must inject `execFile` and must never touch the real keychain.
  */
 export class KeychainSecretStore {
     service;
     accountPrefix;
+    scope;
+    indexPath;
+    securityPath;
+    #platform;
+    #execFile;
+    #fs;
+    #available;
+    /** In-process cache of secrets known to this instance (for redact only). */
+    #knownSecrets = new Map();
     constructor(options = {}) {
         this.service = options.service?.trim() || DEFAULT_KEYCHAIN_SERVICE;
         this.accountPrefix =
             options.accountPrefix === undefined
                 ? DEFAULT_ACCOUNT_PREFIX
                 : options.accountPrefix;
+        this.scope = options.scope?.trim() || DEFAULT_KEYCHAIN_SCOPE;
+        this.indexPath = options.indexPath ?? defaultKeychainIndexPath();
+        this.securityPath = options.securityPath ?? DEFAULT_SECURITY_PATH;
+        this.#platform = options.platform ?? process.platform;
+        this.#execFile = options.execFile ?? execFileAsync;
+        this.#fs = {
+            mkdir,
+            readFile,
+            rename,
+            unlink,
+            writeFile,
+            chmod,
+            ...options.fileSystem,
+        };
+        this.#available = this.#platform === "darwin";
+    }
+    /** security(1) `-s` service string: `offrouter:<scope>`. */
+    get securityService() {
+        return `${this.service}:${this.scope}`;
     }
     async get(providerId) {
         assertProviderId(providerId);
-        this.#reject("get");
+        this.#ensureAvailable("get");
+        const account = this.#accountName(providerId);
+        try {
+            const { stdout } = await this.#runSecurity(["find-generic-password", "-a", account, "-s", this.securityService, "-w"], { secretForScrub: undefined });
+            // security -w prints the password followed by a trailing newline.
+            const value = bufferToString(stdout).replace(/\r?\n$/, "");
+            if (value.length === 0) {
+                return undefined;
+            }
+            this.#knownSecrets.set(providerId, value);
+            return value;
+        }
+        catch (err) {
+            if (this.#isNotFound(err)) {
+                return undefined;
+            }
+            throw this.#wrapSecurityError("get", err);
+        }
     }
     async set(providerId, secret) {
         assertProviderId(providerId);
         assertSecret(secret);
-        this.#reject("set");
+        this.#ensureAvailable("set");
+        const account = this.#accountName(providerId);
+        // security -i reads commands from stdin. Password is hex-encoded via -X so
+        // the raw secret never lands in process argv (visible to `ps`). Bare
+        // `add-generic-password -w` without a value reads /dev/tty, not a pipe.
+        const hex = toHexUtf8(secret);
+        const command = [
+            "add-generic-password",
+            "-a",
+            securityInteractiveToken(account),
+            "-s",
+            securityInteractiveToken(this.securityService),
+            "-U",
+            "-X",
+            hex,
+        ].join(" ") + "\n";
+        try {
+            await this.#runSecurity(["-i"], {
+                input: command,
+                secretForScrub: secret,
+                extraScrub: [hex],
+            });
+        }
+        catch (err) {
+            throw this.#wrapSecurityError("set", err, secret, [hex]);
+        }
+        this.#knownSecrets.set(providerId, secret);
+        await this.#indexAdd(providerId);
     }
     async delete(providerId) {
         assertProviderId(providerId);
-        this.#reject("delete");
+        this.#ensureAvailable("delete");
+        const account = this.#accountName(providerId);
+        try {
+            await this.#runSecurity(["delete-generic-password", "-a", account, "-s", this.securityService], { secretForScrub: this.#knownSecrets.get(providerId) });
+        }
+        catch (err) {
+            if (this.#isNotFound(err)) {
+                // Match FileSecretStore: delete of missing id is a no-op.
+                this.#knownSecrets.delete(providerId);
+                await this.#indexRemove(providerId);
+                return;
+            }
+            throw this.#wrapSecurityError("delete", err, this.#knownSecrets.get(providerId));
+        }
+        this.#knownSecrets.delete(providerId);
+        await this.#indexRemove(providerId);
     }
     async listProviders() {
-        this.#reject("listProviders");
+        this.#ensureAvailable("listProviders");
+        const doc = await this.#loadIndex();
+        return [...doc.providers].sort((a, b) => a.localeCompare(b));
     }
     redact(value) {
-        // Stub holds no secrets in-process; still scrub common API key shapes.
-        return redact(value);
+        return redact(value, this.#knownSecrets.values());
     }
     toJSON() {
         return {
             kind: "keychain",
             service: this.service,
             accountPrefix: this.accountPrefix,
-            available: false,
+            scope: this.scope,
+            securityService: this.securityService,
+            indexPath: this.indexPath,
+            available: this.#available,
+            // Never include secret values. Provider ids come from the non-secret index
+            // only when already loaded into #knownSecrets keys + index is not re-read
+            // synchronously here (toJSON must not throw / hit the network/keychain).
+            providers: [...this.#knownSecrets.keys()].sort((a, b) => a.localeCompare(b)),
         };
     }
-    #reject(operation) {
-        throw new KeychainUnavailableError(`KeychainSecretStore.${operation} is unavailable: OS keychain backend is not wired in this OffRouter build. ` +
-            `OffRouter will not scrape other CLI credential stores. Use FileSecretStore for tests, or approve an ` +
-            `explicit file fallback for real runs when keychain is unavailable.`);
+    #accountName(providerId) {
+        return `${this.accountPrefix}${providerId}`;
+    }
+    #ensureAvailable(operation) {
+        if (!this.#available) {
+            throw new KeychainUnavailableError(`KeychainSecretStore.${operation} is unavailable: ${KEYCHAIN_UNAVAILABLE_MESSAGE}`);
+        }
+    }
+    #isNotFound(err) {
+        const e = asExecError(err);
+        // Node sets err.code to the numeric exit status for execFile failures.
+        const status = typeof e.code === "number"
+            ? e.code
+            : typeof e.status === "number"
+                ? e.status
+                : undefined;
+        return status === SECURITY_ERR_SEC_ITEM_NOT_FOUND;
+    }
+    async #runSecurity(args, options) {
+        const execOptions = {
+            // Never invoke via a shell — args stay as argv.
+            shell: false,
+            maxBuffer: 1024 * 1024,
+            encoding: "utf8",
+        };
+        if (options.input !== undefined) {
+            execOptions.input = options.input;
+        }
+        try {
+            return await this.#execFile(this.securityPath, args, execOptions);
+        }
+        catch (err) {
+            const scrubList = [
+                ...(options.secretForScrub ? [options.secretForScrub] : []),
+                ...(options.extraScrub ?? []),
+            ].filter((s) => s.length > 0);
+            if (scrubList.length === 0) {
+                throw err;
+            }
+            const e = asExecError(err);
+            const rawMessage = typeof e.message === "string" ? e.message : String(err);
+            const rawStderr = bufferToString(e.stderr);
+            const needsScrub = scrubList.some((s) => rawMessage.includes(s) || rawStderr.includes(s));
+            if (!needsScrub) {
+                throw err;
+            }
+            const scrubbed = new Error(redact(rawMessage, scrubList));
+            scrubbed.code = e.code;
+            scrubbed.status = e.status;
+            scrubbed.stdout = e.stdout;
+            scrubbed.stderr = redact(rawStderr, scrubList);
+            throw scrubbed;
+        }
+    }
+    #wrapSecurityError(operation, err, secret, extraScrub = []) {
+        const e = asExecError(err);
+        const rawStderr = bufferToString(e.stderr);
+        const rawMessage = typeof e.message === "string" ? e.message : String(err);
+        const known = [
+            ...(secret ? [secret] : []),
+            ...extraScrub,
+            ...this.#knownSecrets.values(),
+        ];
+        const safeStderr = redact(rawStderr, known);
+        const safeMessage = redact(rawMessage, known);
+        const detail = safeStderr.trim() || safeMessage;
+        const wrapped = new Error(`KeychainSecretStore.${operation} failed via security(1): ${detail}`);
+        // Never attach the original err as cause if it might embed the secret;
+        // preserve exit status only.
+        wrapped.exitCode =
+            typeof e.code === "number" || typeof e.code === "string" ? e.code : e.status;
+        return wrapped;
+    }
+    async #loadIndex() {
+        try {
+            const raw = await this.#fs.readFile(this.indexPath, "utf8");
+            return parseKeychainIndex(raw, this.indexPath);
+        }
+        catch (err) {
+            if (err &&
+                typeof err === "object" &&
+                "code" in err &&
+                err.code === "ENOENT") {
+                return { version: 1, providers: [] };
+            }
+            throw err;
+        }
+    }
+    async #persistIndex(doc) {
+        await this.#fs.mkdir(dirname(this.indexPath), { recursive: true });
+        const payload = `${JSON.stringify({
+            version: 1,
+            providers: [...doc.providers].sort((a, b) => a.localeCompare(b)),
+        }, null, 2)}\n`;
+        const tmp = `${this.indexPath}.${randomBytes(8).toString("hex")}.tmp`;
+        try {
+            await this.#fs.writeFile(tmp, payload, { encoding: "utf8", mode: 0o600 });
+            await this.#fs.chmod(tmp, 0o600);
+            await this.#fs.rename(tmp, this.indexPath);
+            await this.#fs.chmod(this.indexPath, 0o600);
+        }
+        catch (err) {
+            await this.#fs.unlink(tmp).catch((unlinkErr) => {
+                if (unlinkErr &&
+                    typeof unlinkErr === "object" &&
+                    "code" in unlinkErr &&
+                    unlinkErr.code === "ENOENT") {
+                    return;
+                }
+                throw unlinkErr;
+            });
+            throw err;
+        }
+    }
+    async #indexAdd(providerId) {
+        const doc = await this.#loadIndex();
+        if (!doc.providers.includes(providerId)) {
+            doc.providers.push(providerId);
+            await this.#persistIndex(doc);
+        }
+    }
+    async #indexRemove(providerId) {
+        const doc = await this.#loadIndex();
+        const next = doc.providers.filter((id) => id !== providerId);
+        if (next.length !== doc.providers.length) {
+            await this.#persistIndex({ version: 1, providers: next });
+        }
+    }
+}
+function parseKeychainIndex(raw, filePath) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Invalid keychain index ${filePath}: ${message}`, {
+            cause: err,
+        });
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error(`Invalid keychain index ${filePath}: expected a JSON object`);
+    }
+    const record = parsed;
+    const providersRaw = record.providers;
+    if (!Array.isArray(providersRaw)) {
+        throw new Error(`Invalid keychain index ${filePath}: missing array field "providers"`);
+    }
+    const providers = [];
+    for (const entry of providersRaw) {
+        if (typeof entry !== "string" || entry.trim() === "") {
+            throw new Error(`Invalid keychain index ${filePath}: providers must be non-empty strings`);
+        }
+        providers.push(entry);
     }
+    return { version: 1, providers };
 }
 /**
  * Retrieve a provider token from the secret store.

package/dist/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,GACN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,uEAAuE;AACvE,uEAAuE;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAqB,CAAC;AA0D9C,MAAM,wBAAwB,GAAG,WAAW,CAAC;AAC7C,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAE3C;;;;GAIG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,wBAAwB;IACxB,gCAAgC;IAChC,yEAAyE;IACzE,4BAA4B;IAC5B,kBAAkB;IAClB,6BAA6B;IAC7B,qDAAqD;IACrD,wCAAwC;IACxC,yCAAyC;IACzC,iCAAiC;CAClC,CAAC;AAEF,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,KAAa,EACb,eAAiC,EAAE;IAEnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,GAAG,GAAG,KAAK,CAAC;IAEhB,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAEvC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACpC,wEAAwE;QACxE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,0DAA0D;QAC1D,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IACjB,QAAQ,CAAS;IACjB,GAAG,CAA4B;IACxC,MAAM,GAA8B,IAAI,CAAC;IACzC,wEAAwE;IACxE,YAAY,GAAa,EAAE,CAAC;IAE5B,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/D,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG;YACT,KAAK;YACL,QAAQ;YACR,MAAM;YACN,MAAM;YACN,SAAS;YACT,KAAK;YACL,GAAG,OAAO,CAAC,UAAU;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,MAAc;QAC1C,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;QACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;YACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YACjC,2EAA2E;YAC3E,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IACE,GAAG;gBACH,OAAO,GAAG,KAAK,QAAQ;gBACvB,MAAM,IAAI,GAAG;gBACZ,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAC5C,CAAC;gBACD,MAAM,KAAK,GAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB;QACpC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAC/B,EAAE,OAAO,EAAE,CAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAC7C,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;QAEN,yEAAyE;QACzE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,6EAA6E;YAC7E,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,SAAkB,EAAE,EAAE;gBACtD,IACE,SAAS;oBACT,OAAO,SAAS,KAAK,QAAQ;oBAC7B,MAAM,IAAI,SAAS;oBAClB,SAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,MAAM,SAAS,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,GAAuB;QAC/B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzD,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,sBAA+B,CAAC;IAEhD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACrB,OAAO,CAAS;IAChB,aAAa,CAAS;IAE/B,YAAY,UAAsC,EAAE;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC;QACnE,IAAI,CAAC,aAAa;YAChB,OAAO,CAAC,aAAa,KAAK,SAAS;gBACjC,CAAC,CAAC,sBAAsB;gBACxB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,MAAc;QAC1C,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,uEAAuE;QACvE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,SAAS,6EAA6E;YAC3G,sGAAsG;YACtG,oEAAoE,CACvE,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,KAAkB;IAElB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,KAAa,EACb,KAAkB;IAElB,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAC1B,GAAW,EACX,QAAgB;IAEhB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,KAAK,OAAO,EAAE,EAAE;YAC9D,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,0BAA0B,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;IAClC,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,KAAK,IAAI;QACnB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,kCAAkC,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,UAAqC,CACtC,EAAE,CAAC;QACF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,iBAAiB,GAAG,oBAAoB,CACzE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAM,EACN,SAAS,EACT,KAAK,GACN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAwB,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,aAAa,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAElD,uEAAuE;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAqB,CAAC;AAgG9C,MAAM,wBAAwB,GAAG,WAAW,CAAC;AAC7C,MAAM,sBAAsB,GAAG,SAAS,CAAC;AACzC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAClD,yEAAyE;AACzE,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAC3C,MAAM,4BAA4B,GAChC,4DAA4D;IAC5D,sGAAsG;IACtG,oEAAoE,CAAC;AAiBvE,MAAM,CAAC,MAAM,eAAe,GAAgC;IAC1D,wBAAwB;IACxB,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gCAAgC,EAAE;IACxE,8DAA8D;IAC9D,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAC1E,+DAA+D;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACjE,kBAAkB;IAClB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE;IAClE,qDAAqD;IACrD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,wCAAwC;KAClD;IACD,mBAAmB;IACnB,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,6BAA6B,EAAE;IACnE,0CAA0C;IAC1C,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC5D,qBAAqB;IACrB,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE;IAC/D,0BAA0B;IAC1B;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,oDAAoD;KAC9D;IACD,qEAAqE;IACrE;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EACL,kIAAkI;KACrI;CACO,CAAC;AAEX,kEAAkE;AAClE,MAAM,gBAAgB,GAAsB,eAAe,CAAC,GAAG,CAC7D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACjB,CAAC;AAEF,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,KAAa,EACb,eAAiC,EAAE;IAEnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,GAAG,GAAG,KAAK,CAAC;IAEhB,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAEvC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACpC,wEAAwE;QACxE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,0DAA0D;QAC1D,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IACjB,QAAQ,CAAS;IACjB,GAAG,CAA4B;IACxC,MAAM,GAA8B,IAAI,CAAC;IACzC,wEAAwE;IACxE,YAAY,GAAa,EAAE,CAAC;IAE5B,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/D,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG;YACT,KAAK;YACL,QAAQ;YACR,MAAM;YACN,MAAM;YACN,SAAS;YACT,KAAK;YACL,GAAG,OAAO,CAAC,UAAU;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,MAAc;QAC1C,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;QACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;YACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACpC,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YACjC,2EAA2E;YAC3E,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IACE,GAAG;gBACH,OAAO,GAAG,KAAK,QAAQ;gBACvB,MAAM,IAAI,GAAG;gBACZ,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAC5C,CAAC;gBACD,MAAM,KAAK,GAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB;QACpC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAC/B,EAAE,OAAO,EAAE,CAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAC7C,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;QAEN,yEAAyE;QACzE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,6EAA6E;YAC7E,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,SAAkB,EAAE,EAAE;gBACtD,IACE,SAAS;oBACT,OAAO,SAAS,KAAK,QAAQ;oBAC7B,MAAM,IAAI,SAAS;oBAClB,SAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,MAAM,SAAS,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,CAAC,GAAuB;QAC/B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzD,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,sBAA+B,CAAC;IAEhD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAOD,SAAS,wBAAwB;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAO/B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,GAMN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAAkC;IACxD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,KAAa;IAC7C,0EAA0E;IAC1E,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,uDAAuD;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,IAAI,OAAO,GAAG,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,mBAAmB;IACrB,OAAO,CAAS;IAChB,aAAa,CAAS;IACtB,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,SAAS,CAAkB;IAC3B,SAAS,CAAmB;IAC5B,GAAG,CAA4B;IAC/B,UAAU,CAAU;IAC7B,4EAA4E;IAC5E,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,YAAY,UAAsC,EAAE;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC;QACnE,IAAI,CAAC,aAAa;YAChB,OAAO,CAAC,aAAa,KAAK,SAAS;gBACjC,CAAC,CAAC,sBAAsB;gBACxB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC;QACjE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;QACnD,IAAI,CAAC,GAAG,GAAG;YACT,KAAK;YACL,QAAQ;YACR,MAAM;YACN,MAAM;YACN,SAAS;YACT,KAAK;YACL,GAAG,OAAO,CAAC,UAAU;SACtB,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC;IAChD,CAAC;IAED,4DAA4D;IAC5D,IAAI,eAAe;QACjB,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CACxC,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,EAC1E,EAAE,cAAc,EAAE,SAAS,EAAE,CAC9B,CAAC;YACF,kEAAkE;YAClE,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,MAAc;QAC1C,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9C,2EAA2E;QAC3E,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GACX;YACE,sBAAsB;YACtB,IAAI;YACJ,wBAAwB,CAAC,OAAO,CAAC;YACjC,IAAI;YACJ,wBAAwB,CAAC,IAAI,CAAC,eAAe,CAAC;YAC9C,IAAI;YACJ,IAAI;YACJ,GAAG;SACJ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE;gBAC9B,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,MAAM;gBACtB,UAAU,EAAE,CAAC,GAAG,CAAC;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CACrB,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,EACtE,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,0DAA0D;gBAC1D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACtC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,kBAAkB,CAC3B,QAAQ,EACR,GAAG,EACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CACnC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtD,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB;SACF,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,UAAkB;QAC7B,OAAO,GAAG,IAAI,CAAC,aAAa,GAAG,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,wBAAwB,CAChC,uBAAuB,SAAS,oBAAoB,4BAA4B,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,WAAW,CAAC,GAAY;QACtB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,uEAAuE;QACvE,MAAM,MAAM,GACV,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YACxB,CAAC,CAAC,CAAC,CAAC,IAAI;YACR,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAC5B,CAAC,CAAC,CAAC,CAAC,MAAM;gBACV,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO,MAAM,KAAK,+BAA+B,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAc,EACd,OAIC;QAED,MAAM,WAAW,GAAyC;YACxD,gDAAgD;YAChD,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,IAAI,GAAG,IAAI;YACtB,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,GAAG;gBAChB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;aAC9B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,UAAU,GACd,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GACd,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAKvD,CAAC;YACF,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACvB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YAC3B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YAC3B,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC;QACjB,CAAC;IACH,CAAC;IAED,kBAAkB,CAChB,SAAiB,EACjB,GAAY,EACZ,MAAe,EACf,aAAuB,EAAE;QAEzB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,UAAU;YACb,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;SAC/B,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,KAAK,CACvB,uBAAuB,SAAS,4BAA4B,MAAM,EAAE,CACrE,CAAC;QACF,uEAAuE;QACvE,6BAA6B;QAC5B,OAAyD,CAAC,QAAQ;YACjE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5D,OAAO,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IACE,GAAG;gBACH,OAAO,GAAG,KAAK,QAAQ;gBACvB,MAAM,IAAI,GAAG;gBACZ,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAC5C,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAA0B;QAC5C,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAC/B;YACE,OAAO,EAAE,CAAU;YACnB,SAAS,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACjE,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;QACN,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,SAAkB,EAAE,EAAE;gBACtD,IACE,SAAS;oBACT,OAAO,SAAS,KAAK,QAAQ;oBAC7B,MAAM,IAAI,SAAS;oBAClB,SAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,MAAM,SAAS,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,QAAgB;IACvD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,KAAK,OAAO,EAAE,EAAE;YAChE,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,0BAA0B,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,mCAAmC,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,uCAAuC,CAC1E,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,KAAkB;IAElB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,KAAa,EACb,KAAkB;IAElB,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAC1B,GAAW,EACX,QAAgB;IAEhB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,KAAK,OAAO,EAAE,EAAE;YAC9D,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,0BAA0B,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;IAClC,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,KAAK,IAAI;QACnB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,kCAAkC,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,UAAqC,CACtC,EAAE,CAAC;QACF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,iBAAiB,GAAG,oBAAoB,CACzE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}

package/dist/spend.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Estimated paid API-key spend rollup for hard spend caps and `status --costs`.
+ *
+ * Extends the near-limit mechanism: near-limit warns on subscription quota,
+ * spend caps hard-block paid API-key candidates. Both read the same usage
+ * store; subscription and local tiers are never blocked by spend caps.
+ *
+ * Accounting window: the usage store today models a single cumulative window
+ * (per-account token totals persisted in usage.json; no time bucketing), so
+ * rollups cover everything recorded since the usage file was last reset.
+ *
+ * Spend estimation: per-account usage records (`used` = total tokens, keyed
+ * by providerId + accountId, which the delegation runtime sets to the model
+ * id) priced with the catalog PricingHint. When a per-model input/output
+ * breakdown is present, tokens are priced exactly (input rate × input +
+ * output rate × output). The unattributed remainder
+ * (`used - sum(model tokens)`) keeps the conservative max(input, output)
+ * rate treatment and flags costsIncomplete. Where pricing is unknown the
+ * contribution is not guessed: zero for cap math + costsIncomplete. Local
+ * runtimes are known-zero (no paid spend by definition).
+ */
+import { type PricingHint } from "./providers/catalog-data.js";
+import type { AccountUsageSnapshot, UsageStore } from "./usage.js";
+/** Identifier for the accounting window the usage store currently models. */
+export declare const SPEND_ACCOUNTING_WINDOW = "cumulative";
+/** Hard spend caps in USD. Per-provider overrides beat the global cap. */
+export interface SpendCaps {
+    globalUsd?: number;
+    perProviderUsd?: Record<string, number>;
+}
+export interface ModelSpendLine {
+    providerId: string;
+    /** Model id (the accountId dimension usage records are keyed by). */
+    modelId: string;
+    totalTokens: number;
+    /** Input tokens when a breakdown was recorded; undefined for legacy totals. */
+    inputTokens?: number;
+    /** Output tokens when a breakdown was recorded; undefined for legacy totals. */
+    outputTokens?: number;
+    /** Estimated USD; 0 when pricing is unknown (see costsIncomplete). */
+    estimatedUsd: number;
+    /** False when no pricing hint exists; estimate is then a lower bound of 0. */
+    pricingKnown: boolean;
+    /**
+     * True when this line was priced from an exact input/output split.
+     * False when the conservative max-rate treatment (or zero) was used.
+     */
+    exactPricing: boolean;
+}
+export interface ProviderSpendLine {
+    providerId: string;
+    totalTokens: number;
+    estimatedUsd: number;
+    /** True when any model usage for this provider had unknown pricing. */
+    costsIncomplete: boolean;
+    /** Applicable cap (per-provider override beats global), when configured. */
+    capUsd?: number;
+    /** max(0, cap - spend) when a cap is configured. */
+    remainingUsd?: number;
+    /** True when a cap is configured and spend meets/exceeds it. */
+    capExceeded: boolean;
+    models: ModelSpendLine[];
+}
+export interface SpendRollup {
+    /** Accounting window identifier (see SPEND_ACCOUNTING_WINDOW). */
+    window: string;
+    totalUsd: number;
+    /** True when any usage had unknown pricing; totals are then a lower bound. */
+    costsIncomplete: boolean;
+    /** Global cap, when configured. */
+    capUsd?: number;
+    /** max(0, global cap - total) when a global cap is configured. */
+    remainingUsd?: number;
+    /** True when a global cap is configured and the total meets/exceeds it. */
+    capExceeded: boolean;
+    providers: ProviderSpendLine[];
+}
+export interface BuildSpendRollupOptions {
+    caps?: SpendCaps;
+    /**
+     * Pricing lookup override for tests/custom catalogs. Defaults to the
+     * built-in catalog. Return undefined for unknown pricing.
+     */
+    pricing?: (providerId: string, modelId: string) => PricingHint | undefined;
+}
+/** Catalog pricing hint for a provider/model pair, when documented. */
+export declare function pricingHintForModel(providerId: string, modelId: string): PricingHint | undefined;
+/**
+ * Estimate USD for a token total under a pricing hint using the higher of
+ * the input/output rates (conservative upper bound). Used for unattributed
+ * remainder / legacy totals where the input/output split is unknown.
+ * Returns undefined when the hint carries no usable rate — unknown pricing
+ * is never guessed.
+ */
+export declare function estimateTokensCostUsd(totalTokens: number, hint: PricingHint | undefined): number | undefined;
+/**
+ * Estimate USD from an exact input/output split. Falls back to the
+ * single documented rate when only one side is known. Returns undefined
+ * when the hint carries no usable rate.
+ */
+export declare function estimateSplitTokensCostUsd(inputTokens: number, outputTokens: number, hint: PricingHint | undefined): number | undefined;
+/**
+ * Build a spend rollup from per-account usage records. Pure and
+ * deterministic; providers and models are sorted by id like the usage stores.
+ *
+ * Only API-key usage counts toward paid spend. Subscription and local tiers
+ * are recorded as known-zero. Legacy records with no authTier are counted
+ * conservatively (as paid) but always mark the rollup costsIncomplete.
+ *
+ * When a per-model input/output breakdown is present, those tokens are priced
+ * exactly. Any unattributed remainder (aggregate `used` minus attributed
+ * tokens) is priced at the conservative max rate under the accountId model
+ * and flags costsIncomplete for that remainder.
+ */
+export declare function buildSpendRollup(accounts: readonly AccountUsageSnapshot[], options?: BuildSpendRollupOptions): SpendRollup;
+/**
+ * Build the `currentSpendByProviderUsd` map that PolicyConfig expects from a
+ * usage store. Non-fatal on the caller side: this helper throws when the
+ * store cannot be read so the caller can decide whether to swallow the error.
+ */
+export declare function buildCurrentSpendByProviderUsd(store: UsageStore, options?: Pick<BuildSpendRollupOptions, "pricing">): Promise<Record<string, number>>;
+//# sourceMappingURL=spend.d.ts.map

package/dist/spend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.d.ts","sourceRoot":"","sources":["../src/spend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,oBAAoB,EAEpB,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,eAAe,CAAC;AAEpD,0EAA0E;AAC1E,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,eAAe,EAAE,OAAO,CAAC;IACzB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,eAAe,EAAE,OAAO,CAAC;IACzB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;CAC5E;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,WAAW,GAAG,SAAS,CAGzB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAKpB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,WAAW,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAmBpB;AAqED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,SAAS,oBAAoB,EAAE,EACzC,OAAO,GAAE,uBAA4B,GACpC,WAAW,CAsJb;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,UAAU,EACjB,OAAO,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,GACjD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAOjC"}