ramosedb 0.0.1 → 0.4.0

package/dist/worker/handle.js

@@ -0,0 +1,386 @@
+import { requestChangeset } from "./changesets.js";
+import { isDatabaseName } from "../db/DatabaseName.js";
+import { callerFromVerified, DatabaseId, executeAuthorizedDatabaseTarget, executeAuthorizedRead, hashReadCompatibility, OneShotReadError, } from "../internal/authorization/index.js";
+import { Histogram, RateMeter, componentLogger, setTelemetryLevel, toJson, } from "../internal/core/index.js";
+import { MAX_REPLICATION_REQUEST_BYTES, ReplicationProtocolError, decodeActivationRequest, } from "../internal/replication/index.js";
+import { isInternal } from "../internal/transactor/index.js";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { authenticateRequest } from "./admit.js";
+import { acquireCurrentDb, acquireWatchedDb, parseOneShotReadRequest, provisionResolvedDatabase, queryMaxCells, } from "./authorized-read.js";
+import { authorizedLiveResponse, } from "./authorized-live.js";
+import { authorizedReplicationResponse, incompatibleReplicationResponse, updateRequiredReplicationResponse, } from "./authorized-replication.js";
+import { Analytics, bindingOf, fromBinding, httpPoint, routeOf, } from "./analytics.js";
+import { BadRequest, ChangesetRejected, NotFound, OperationRejected, Unauthorized, fromThrown, isRamoseError, toHttp, } from "./errors.js";
+import { JwtVerifier, fromEnv } from "./jwt.js";
+import { mcpResponse } from "./mcp.js";
+import { watchBasisChanges } from "./peer.js";
+import { invokeAuthoritativeOperation, parseOperationRequest, publicOperationResult, } from "./authorized-operation.js";
+import { deployedCatalogProof, deployedDatabaseCatalogBindings, deployedOperationCatalogs, } from "./operation-catalogs.js";
+import { PUBLIC_HEALTH, publicCorsHeaders, publicErrorBody, publicResponseHeaders, } from "./public-observation.js";
+const plog = componentLogger("peer");
+const peerMetrics = {
+    queries: new RateMeter(10_000),
+    transacts: new RateMeter(10_000),
+    queryMs: new Histogram(),
+    transactMs: new Histogram(),
+    budgetAborts: 0,
+    errors: 0,
+    aeWrites: 0,
+};
+let levelApplied = false;
+const json = (body, status = 200, request, env, extra = {}) => new Response(JSON.stringify(toJson(body)), {
+    status,
+    headers: {
+        "content-type": "application/json",
+        ...publicResponseHeaders(extra),
+        ...publicCorsHeaders(request, env),
+    },
+});
+const DEPLOYMENT_HEADER = "x-ramose-deployment";
+const deploymentVersion = (env) => {
+    const id = env.CF_VERSION_METADATA?.id;
+    return typeof id === "string" && id.length > 0 ? id : undefined;
+};
+export const respond = (err, request, env) => {
+    const h = toHttp(err);
+    return json(publicErrorBody(h.body), h.status, request, env, h.headers);
+};
+const recover = (info, t0, request, env) => ({
+    ChangesetRejected: (e) => Effect.sync(() => respond(e, request, env)),
+    NotFound: (e) => Effect.sync(() => respond(e, request, env)),
+    BadRequest: (e) => Effect.sync(() => respond(e, request, env)),
+    Unauthorized: (e) => Effect.sync(() => respond(e, request, env)),
+    UpstreamError: (e) => Effect.sync(() => respond(e, request, env)),
+    QueryBudgetExceeded: (e) => Effect.sync(() => {
+        peerMetrics.budgetAborts++;
+        plog.warn("query.budget-exceeded", {
+            db: info.db,
+            clause: e.clause,
+            cells: e.cells,
+            limit: e.limit,
+            spentBy: e.spentBy ?? "caller",
+            ms: Date.now() - t0,
+        });
+        return respond(e, request, env);
+    }),
+    Internal: (e) => Effect.sync(() => {
+        peerMetrics.errors++;
+        plog.error("request.error", {
+            db: info.db,
+            path: info.path,
+            error: e.message,
+        });
+        return respond(e, request, env);
+    }),
+    OperationRejected: (e) => Effect.sync(() => respond(e, request, env)),
+});
+const recordHttp = (request, info, status, ms) => Effect.gen(function* () {
+    const ae = yield* Analytics;
+    if (!ae.bound)
+        return;
+    const colo = request.cf?.colo;
+    yield* ae.writeDataPoint(httpPoint({
+        db: info.db,
+        ...(colo !== undefined ? { colo } : {}),
+        route: info.route,
+        status,
+        ms,
+    }));
+    peerMetrics.aeWrites++;
+}).pipe(Effect.ignoreCause);
+const decodeDatabaseName = (encoded) => Result.try({
+    try: () => decodeURIComponent(encoded),
+    catch: () => new BadRequest({ message: "invalid database name" }),
+});
+const readReplicationActivation = async (request) => {
+    const declared = request.headers.get("content-length");
+    if (declared !== null &&
+        (!/^\d+$/.test(declared) || Number(declared) > MAX_REPLICATION_REQUEST_BYTES)) {
+        throw new ReplicationProtocolError({ reason: "oversized" });
+    }
+    if (request.body === null)
+        return "";
+    const reader = request.body.getReader();
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    let bytes = 0;
+    let text = "";
+    try {
+        for (;;) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            bytes += next.value.byteLength;
+            if (bytes > MAX_REPLICATION_REQUEST_BYTES) {
+                throw new ReplicationProtocolError({ reason: "oversized" });
+            }
+            text += decoder.decode(next.value, { stream: true });
+        }
+        text += decoder.decode();
+        return text;
+    }
+    finally {
+        reader.releaseLock();
+    }
+};
+export const handle = (request, env, t0, info, peer, boundariesOf) => Effect.gen(function* () {
+    if (!levelApplied) {
+        levelApplied = true;
+        const lvl = env.RAMOSE_LOG_LEVEL;
+        if (lvl === "debug" ||
+            lvl === "info" ||
+            lvl === "warn" ||
+            lvl === "error") {
+            setTelemetryLevel(lvl);
+        }
+    }
+    const url = new URL(request.url);
+    const cors = publicCorsHeaders(request, env);
+    info.path = url.pathname;
+    if (request.method === "OPTIONS") {
+        return new Response(null, { status: 204, headers: cors });
+    }
+    if (url.pathname === "/" || url.pathname === "/index.html") {
+        return yield* new NotFound({});
+    }
+    if (url.pathname === "/health") {
+        info.route = "health";
+        const version = deploymentVersion(env);
+        return new Response(JSON.stringify(PUBLIC_HEALTH), {
+            status: 200,
+            headers: {
+                "content-type": "application/json",
+                ...cors,
+                "cache-control": "no-store",
+                ...(version === undefined || !isInternal(env, request)
+                    ? {}
+                    : { [DEPLOYMENT_HEADER]: version }),
+            },
+        });
+    }
+    const match = /^\/db\/([^/]+)(\/.*)?$/.exec(url.pathname);
+    if (match === null)
+        return yield* new NotFound({});
+    const rest = match[2] ?? "/";
+    info.path = rest;
+    info.route = routeOf(rest, request.method);
+    const verified = yield* authenticateRequest(request);
+    const db = yield* Effect.fromResult(decodeDatabaseName(match[1]));
+    info.db = db;
+    if (!isDatabaseName(db)) {
+        return yield* new BadRequest({ message: "invalid database name" });
+    }
+    const boundaries = boundariesOf?.(db);
+    const deployedOperations = peer.operationCatalogs === undefined
+        ? undefined
+        : deployedOperationCatalogs(peer.operationCatalogs);
+    const databaseBindings = peer.operationCatalogs === undefined
+        ? undefined
+        : deployedDatabaseCatalogBindings(peer.operationCatalogs);
+    const catalogs = deployedOperations?.catalogs;
+    if (rest === "/replicate" && request.method === "POST") {
+        if (databaseBindings === undefined) {
+            return yield* new Unauthorized({ status: 403 });
+        }
+        const activationText = yield* Effect.tryPromise({
+            try: () => readReplicationActivation(request),
+            catch: () => new BadRequest({ message: "invalid replication activation" }),
+        });
+        const decoded = decodeActivationRequest(activationText);
+        if (Result.isFailure(decoded)) {
+            if (decoded.failure.reason === "incompatible-version") {
+                return incompatibleReplicationResponse(cors);
+            }
+            return yield* new BadRequest({ message: "invalid replication activation" });
+        }
+        const root = yield* Effect.fromResult(databaseBindings.root(DatabaseId.make(db))).pipe(Effect.mapError(() => new Unauthorized({ status: 403 })));
+        const caller = callerFromVerified(verified);
+        const initialTarget = yield* executeAuthorizedDatabaseTarget({
+            authenticate: Effect.succeed(caller),
+            bindings: databaseBindings,
+            root,
+            currentDb: acquireCurrentDb(env, request, {
+                bypassBasisCache: true,
+                authoritativeBasisFence: true,
+            }),
+            provision: (route, derivation) => provisionResolvedDatabase(env, route, derivation),
+        }, (authorized) => Effect.succeed(authorized)).pipe(Effect.mapError((cause) => isRamoseError(cause) ? cause : fromThrown(cause, {
+            stacks: env.RAMOSE_STAGE !== "prod",
+        })));
+        const targetCompatibility = yield* hashReadCompatibility(initialTarget.route.deployed.unit.catalog).pipe(Effect.mapError((cause) => fromThrown(cause, {
+            stacks: env.RAMOSE_STAGE !== "prod",
+        })));
+        if (decoded.success.readCompatibilityHash !== targetCompatibility) {
+            return updateRequiredReplicationResponse(cors);
+        }
+        return yield* authorizedReplicationResponse({
+            activation: decoded.success,
+            env,
+            request,
+            bindings: databaseBindings,
+            root,
+            initialCaller: caller,
+            initialTarget,
+            headers: cors,
+            ...(boundaries === undefined ? {} : { boundaries }),
+        }).pipe(Effect.mapError((cause) => fromThrown(cause, {
+            stacks: env.RAMOSE_STAGE !== "prod",
+        })));
+    }
+    if (rest === "/mcp" && request.method === "POST") {
+        if (databaseBindings === undefined) {
+            return yield* new Unauthorized({ status: 403 });
+        }
+        const root = yield* Effect.fromResult(databaseBindings.root(DatabaseId.make(db))).pipe(Effect.mapError(() => new Unauthorized({ status: 403 })));
+        return yield* mcpResponse({
+            requiresApproval: peer.changesets?.requiresApproval?.(callerFromVerified(verified)) === true,
+            env,
+            request,
+            bindings: databaseBindings,
+            root,
+            caller: callerFromVerified(verified),
+            headers: cors,
+            ...(boundaries === undefined ? {} : { boundaries }),
+        });
+    }
+    if (rest === "/changesets" && request.method === "POST") {
+        if (peer.operationCatalogs === undefined || databaseBindings === undefined)
+            return yield* new Unauthorized({ status: 403 });
+        const proof = deployedCatalogProof(peer.operationCatalogs, db);
+        if (proof === undefined)
+            return yield* new Unauthorized({ status: 403 });
+        const raw = yield* Effect.tryPromise({
+            try: async () => {
+                const text = await readReplicationActivation(request);
+                if (text.length > 1_000_000)
+                    throw new Error("oversized");
+                return JSON.parse(text);
+            }, catch: () => new BadRequest({ message: "invalid changeset request" }),
+        });
+        const root = yield* Effect.fromResult(databaseBindings.root(DatabaseId.make(db)))
+            .pipe(Effect.mapError(() => new Unauthorized({ status: 403 })));
+        yield* provisionResolvedDatabase(env, root, { rootDatabase: root.database });
+        const result = yield* Effect.tryPromise({
+            try: () => requestChangeset(env, url.origin, db, proof.catalogKey, proof.unitHash, callerFromVerified(verified), raw, (caller) => peer.changesets?.requiresApproval?.(caller) !== true && peer.changesets?.canApprove(caller) === true),
+            catch: (cause) => isRamoseError(cause) ? cause : fromThrown(cause),
+        });
+        return json(result, 200, request, env);
+    }
+    if (rest === "/op" && request.method === "POST") {
+        if (peer.changesets?.requiresApproval?.(callerFromVerified(verified)) === true) {
+            return yield* new Unauthorized({ status: 403 });
+        }
+        if (peer.operationCatalogs === undefined) {
+            return yield* new Unauthorized({ status: 403 });
+        }
+        const parsed = yield* parseOperationRequest(request);
+        const caller = callerFromVerified(verified);
+        const invoke = (database, catalogKey, unitHash) => Effect.tryPromise({
+            try: () => invokeAuthoritativeOperation(env, database, new URL(request.url).origin, {
+                catalogKey,
+                unitHash,
+                owner: parsed.owner,
+                localName: parsed.localName,
+                invocationId: parsed.invocationId,
+                ...(parsed.operationVersion === undefined
+                    ? {}
+                    : { operationVersion: parsed.operationVersion }),
+                ...(parsed.target === undefined ? {} : { target: parsed.target }),
+                ...(parsed.sealedTarget === undefined
+                    ? {}
+                    : { sealedTarget: parsed.sealedTarget }),
+                ...(parsed.allocations === undefined
+                    ? {}
+                    : { allocations: parsed.allocations }),
+                input: parsed.input,
+            }, caller),
+            catch: (cause) => isRamoseError(cause) ? cause : fromThrown(cause, {
+                stacks: env.RAMOSE_STAGE !== "prod",
+            }),
+        });
+        const rootProof = deployedCatalogProof(peer.operationCatalogs, db);
+        if (rootProof === undefined)
+            return yield* new Unauthorized({ status: 403 });
+        const ack = yield* Effect.gen(function* () {
+            if (databaseBindings !== undefined) {
+                const root = yield* Effect.fromResult(databaseBindings.root(DatabaseId.make(db))).pipe(Effect.mapError(() => new Unauthorized({ status: 403 })));
+                yield* provisionResolvedDatabase(env, root, {
+                    rootDatabase: root.database,
+                });
+            }
+            return yield* invoke(db, rootProof.catalogKey, rootProof.unitHash);
+        });
+        yield* Effect.tryPromise({
+            try: () => boundaries?.checkpoint("operation.response") ?? Promise.resolve(),
+            catch: (cause) => isRamoseError(cause) ? cause : fromThrown(cause, {
+                stacks: env.RAMOSE_STAGE !== "prod",
+            }),
+        });
+        if (!Number.isSafeInteger(caller.exp) || caller.exp * 1_000 <= Date.now()) {
+            return yield* new Unauthorized({ status: 403 });
+        }
+        const projected = publicOperationResult(ack);
+        return new Response(JSON.stringify(projected.status === 200
+            ? projected.body
+            : publicErrorBody(projected.body)), {
+            status: projected.status,
+            headers: { "content-type": "application/json", ...cors },
+        });
+    }
+    if (catalogs === undefined)
+        return yield* new Unauthorized({});
+    if (!((rest === "/query" || rest === "/pull" || rest === "/live") && request.method === "POST") &&
+        !(/^\/entity\/\d+$/.test(rest) && request.method === "GET")) {
+        return yield* new Unauthorized({});
+    }
+    const parsed = yield* parseOneShotReadRequest(request, rest);
+    const stacks = env.RAMOSE_STAGE !== "prod";
+    const mapReadError = (error) => {
+        if (error instanceof Unauthorized)
+            return error;
+        if (isRamoseError(error))
+            return error;
+        if (error instanceof OneShotReadError)
+            return fromThrown(error.cause, { stacks });
+        return fromThrown(error, { stacks });
+    };
+    const liveWatch = rest === "/live" ? watchBasisChanges(env, db, request) : undefined;
+    const admissionCurrentDb = acquireCurrentDb(env, request, {
+        bypassBasisCache: rest === "/live",
+        authoritativeBasisFence: rest === "/live",
+    });
+    const input = {
+        authenticate: rest === "/live"
+            ? authenticateRequest(request).pipe(Effect.map(callerFromVerified))
+            : Effect.succeed(callerFromVerified(verified)),
+        ...(liveWatch === undefined ? {} : {
+            basisChanges: liveWatch.changes,
+            admissionCurrentDb,
+        }),
+        catalogs,
+        routeDatabase: DatabaseId.make(db),
+        catalogKey: parsed.catalogKey,
+        unitHash: parsed.unitHash,
+        currentDb: liveWatch === undefined
+            ? admissionCurrentDb
+            : acquireWatchedDb(env, liveWatch.currentBasis),
+        view: parsed.view,
+    };
+    if (rest === "/live") {
+        return yield* authorizedLiveResponse(boundaries === undefined
+            ? input
+            : { ...input, boundaries }, parsed.read, { maxCells: queryMaxCells(env) }, cors).pipe(Effect.mapError(mapReadError));
+    }
+    const result = yield* executeAuthorizedRead(input, parsed.read, {
+        maxCells: queryMaxCells(env),
+    }).pipe(Effect.mapError(mapReadError));
+    return json({ result }, 200, request, env);
+});
+export const runFetch = (request, env, peer, boundariesOf) => {
+    const t0 = Date.now();
+    const info = { db: "-", path: "-", route: "other" };
+    const services = Context.make(Analytics, fromBinding(bindingOf(env))).pipe(Context.add(JwtVerifier, fromEnv(env)));
+    return Effect.runPromise(handle(request, env, t0, info, peer, boundariesOf).pipe(Effect.catchTags(recover(info, t0, request, env)), Effect.tap((res) => recordHttp(request, info, res.status, Date.now() - t0)), Effect.provide(services)));
+};
+//# sourceMappingURL=handle.js.map

package/dist/worker/handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.js","sourceRoot":"","sources":["../../src/worker/handle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAyB,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,+BAA+B,EAC/B,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GAGjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,MAAM,GACP,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,EACzB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,SAAS,EAET,SAAS,EACT,WAAW,EACX,SAAS,EACT,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,EACV,iBAAiB,EAEjB,QAAQ,EACR,iBAAiB,EAGjB,YAAY,EAEZ,UAAU,EACV,aAAa,EACb,MAAM,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,yBAAyB,GAE1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAOjC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,IAAI,SAAS,EAAE;IACxB,UAAU,EAAE,IAAI,SAAS,EAAE;IAC3B,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;CACZ,CAAC;AACF,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,MAAM,IAAI,GAAG,CACX,IAAa,EACb,MAAM,GAAG,GAAG,EACZ,OAAiB,EACjB,GAAe,EACf,KAAK,GAA2B,EAAE,EAClC,EAAE,CACF,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE;IACzC,MAAM;IACN,OAAO,EAAE;QACP,cAAc,EAAE,kBAAkB;QAClC,GAAG,qBAAqB,CAAC,KAAK,CAAC;QAC/B,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC;KACnC;CACF,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,MAAM,iBAAiB,GAAG,CAAC,GAAc,EAAsB,EAAE;IAC/D,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC;IACvC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,GAAgB,EAChB,OAAiB,EACjB,GAAe,EACL,EAAE;IACZ,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACd,IAAiB,EACjB,EAAU,EACV,OAAgB,EAChB,GAAc,EACd,EAAE,CAAC,CAAC;IACJ,iBAAiB,EAAE,CAAC,CAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACxF,QAAQ,EAAE,CAAC,CAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtE,UAAU,EAAE,CAAC,CAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1E,YAAY,EAAE,CAAC,CAAe,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9E,aAAa,EAAE,CAAC,CAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAChF,mBAAmB,EAAE,CAAC,CAAsB,EAAE,EAAE,CAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,WAAW,CAAC,YAAY,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACjC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,QAAQ;YAC9B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SACpB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC;IACJ,QAAQ,EAAE,CAAC,CAAW,EAAE,EAAE,CACxB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,WAAW,CAAC,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE;YAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,CAAC,CAAC,OAAO;SACjB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC;IACJ,iBAAiB,EAAE,CAAC,CAAoB,EAAE,EAAE,CAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CACjB,OAAgB,EAChB,IAAiB,EACjB,MAAc,EACd,EAAU,EACV,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,KAAK;QAAE,OAAO;IACtB,MAAM,IAAI,GAAI,OAAsC,CAAC,EAAE,EAAE,IAAI,CAAC;IAC9D,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CACtB,SAAS,CAAC;QACR,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM;QACN,EAAE;KACH,CAAC,CACH,CAAC;IACF,WAAW,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAE9B,MAAM,kBAAkB,GAAG,CACzB,OAAe,EACoB,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC;IACtC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;CAClE,CAAC,CAAC;AAEL,MAAM,yBAAyB,GAAG,KAAK,EAAE,OAAgB,EAAmB,EAAE;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvD,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,6BAA6B,CAAC,EAC7E,CAAC;QACD,MAAM,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;gBAC1C,MAAM,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,OAAgB,EAChB,GAAc,EACd,EAAU,EACV,IAAiB,EACjB,IAAmB,EACnB,YAAsD,EACH,EAAE,CACrD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACjC,IACE,GAAG,KAAK,OAAO;YACf,GAAG,KAAK,MAAM;YACd,GAAG,KAAK,MAAM;YACd,GAAG,KAAK,OAAO,EACf,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE;YACjD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI;gBACP,eAAe,EAAE,UAAU;gBAC3B,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;oBACpD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC;aACtC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAC7D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAC3D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,kBAAkB,EAAE,QAAQ,CAAC;IAC9C,IAAI,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9C,GAAG,EAAE,GAAG,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC;YAC7C,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBACtD,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACnC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,+BAA+B,CAAC;YAC3D,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,gBAAgB;YAC1B,IAAI;YACJ,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE;gBACxC,gBAAgB,EAAE,IAAI;gBACtB,uBAAuB,EAAE,IAAI;aAC9B,CAAC;YACF,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAC/B,yBAAyB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;SACpD,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE;YAC1E,MAAM,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM;SACpC,CAAC,CAAC,CACJ,CAAC;QACF,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,qBAAqB,CACtD,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;YAClD,MAAM,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM;SACpC,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,OAAO,CAAC,qBAAqB,KAAK,mBAAmB,EAAE,CAAC;YAClE,OAAO,iCAAiC,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,6BAA6B,CAAC;YAC1C,UAAU,EAAE,OAAO,CAAC,OAAO;YAC3B,GAAG;YACH,OAAO;YACP,QAAQ,EAAE,gBAAgB;YAC1B,IAAI;YACJ,aAAa,EAAE,MAAM;YACrB,aAAa;YACb,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACpD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;YACnD,MAAM,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM;SACpC,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACjD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACnC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC;YACxB,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI;YAC5F,GAAG;YACH,OAAO;YACP,QAAQ,EAAE,gBAAgB;YAC1B,IAAI;YACJ,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC;YACpC,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5H,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACnC,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YACrC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACtC,GAAG,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAC/E,kBAAkB,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAC5C,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;YACzG,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;SACnE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/E,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,CACb,QAAgB,EAChB,UAAqB,EACrB,QAAyB,EACzB,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;YACrB,GAAG,EAAE,GAAG,EAAE,CAAC,4BAA4B,CACrC,GAAG,EACH,QAAQ,EACR,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAC3B;gBACE,UAAU;gBACV,QAAQ;gBACR,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAClD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;oBAClC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,EACD,MAAM,CACP;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE;gBACjE,MAAM,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM;aACpC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACnC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjE,KAAK,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC1C,YAAY,EAAE,IAAI,CAAC,QAAQ;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;YAC5E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE;gBACjE,MAAM,EAAE,GAAG,CAAC,YAAY,KAAK,MAAM;aACpC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAChC,SAAS,CAAC,MAAM,KAAK,GAAG;YACtB,CAAC,CAAC,SAAS,CAAC,IAAI;YAChB,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CACpC,EAAE;YACD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/D,IACE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;QAC3F,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,EAC3D,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC;IAC3C,MAAM,YAAY,GAAG,CAAC,KAAc,EAAe,EAAE;QACnD,IAAI,KAAK,YAAY,YAAY;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,KAAK,YAAY,gBAAgB;YAAE,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,OAAO,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE;QACxD,gBAAgB,EAAE,IAAI,KAAK,OAAO;QAClC,uBAAuB,EAAE,IAAI,KAAK,OAAO;KAC1C,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,YAAY,EACV,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACnE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjC,YAAY,EAAE,SAAS,CAAC,OAAO;YAC/B,kBAAkB;SACnB,CAAC;QACF,QAAQ;QACR,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,SAAS,KAAK,SAAS;YAChC,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,YAAY,CAAC;QACjD,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IACF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAClC,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAC5B,MAAM,CAAC,IAAI,EACX,EAAE,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAChC,IAAI,CACL,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC9B,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;QAC9D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC;KAC7B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,OAAgB,EAChB,GAAc,EACd,IAAmB,EACnB,YAAsD,EACnC,EAAE;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAgB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAC3B,SAAS,EACT,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAC5B,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,UAAU,CACtB,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,EACjD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjB,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CACvD,EACD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CACzB,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/worker/index.d.ts

@@ -0,0 +1,27 @@
+import { type DeployOperationCatalogsInput, type OperationCatalogs } from "./operation-catalogs.ts";
+type WorkerDurableObjectClass = new (ctx: DurableObjectState, env: unknown) => DurableObject;
+/** Cloudflare class exports with the internal binding shape erased. */
+export declare const TransactorDO: WorkerDurableObjectClass;
+export declare const QueryReplicaDO: WorkerDurableObjectClass;
+/**
+ * Assemble native catalogs against Cloudflare's immutable Worker version.
+ * Requires the `CF_VERSION_METADATA` binding that `Ramose.Server` installs.
+ */
+export declare const deployOperationCatalogs: (input: DeployOperationCatalogsInput) => import("effect/Effect").Effect<OperationCatalogs, import("./operation-catalogs.ts").OperationCatalogDeploymentError, never>;
+/** Build the Transactor class from the same opaque registry as `createServer`. */
+export declare const createTransactorDO: (operationCatalogs: OperationCatalogs) => WorkerDurableObjectClass;
+export { OperationCatalogDeploymentError, type DeployOperationCatalogsInput, type OperationCatalogDeployment, type OperationCatalogProof, type OperationCatalogs, } from "./operation-catalogs.ts";
+/** Opaque runtime assembly accepted by the supported Worker entry. */
+export interface ServerOptions {
+    readonly changesets?: import("./changesets.ts").ChangesetOptions;
+    readonly operationCatalogs?: OperationCatalogs;
+}
+/** Build a peer Worker. One-shot reads consume the filtered request `Db`. */
+export declare const createServer: (options?: ServerOptions) => {
+    fetch(request: Request, env: unknown, _ctx?: ExecutionContext): Promise<Response>;
+};
+declare const _default: {
+    fetch(request: Request, env: unknown, _ctx?: ExecutionContext): Promise<Response>;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/worker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAIL,KAAK,4BAA4B,EACjC,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,KAAK,wBAAwB,GAAG,KAC9B,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,OAAO,KACT,aAAa,CAAC;AAEnB,uEAAuE;AACvE,eAAO,MAAM,YAAY,EAAsC,wBAAwB,CAAC;AACxF,eAAO,MAAM,cAAc,EAAwC,wBAAwB,CAAC;AAC5F;;;GAGG;AACH,eAAO,MAAM,uBAAuB,UAAW,4BAA4B,gIAIxE,CAAC;AACJ,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,sBACV,iBAAiB,KACnC,wBAIuC,CAAC;AAC3C,OAAO,EACL,+BAA+B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,CAAC;IACjE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CAChD;AAED,6EAA6E;AAC7E,eAAO,MAAM,YAAY,aAAa,aAAa;IAC3C,KAAK,UAAU,OAAO,OAAO,OAAO,SAAS,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;CAGvF,CAAC;;mBAHoB,OAAO,OAAO,OAAO,SAAS,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC"}

package/dist/worker/index.js

@@ -0,0 +1,24 @@
+import { env } from "cloudflare:workers";
+import { createTransactorDO as createInternalTransactorDO, TransactorDO as InternalTransactorDO, } from "../internal/transactor/transactor-do.js";
+import { QueryReplicaDO as InternalQueryReplicaDO } from "../internal/replica/index.js";
+import { runFetch } from "./handle.js";
+import { deployedDatabaseCatalogBindings, deployedOperationCatalogs, deployOperationCatalogsForVersion, } from "./operation-catalogs.js";
+/** Cloudflare class exports with the internal binding shape erased. */
+export const TransactorDO = InternalTransactorDO;
+export const QueryReplicaDO = InternalQueryReplicaDO;
+/**
+ * Assemble native catalogs against Cloudflare's immutable Worker version.
+ * Requires the `CF_VERSION_METADATA` binding that `Ramose.Server` installs.
+ */
+export const deployOperationCatalogs = (input) => deployOperationCatalogsForVersion(input, env.CF_VERSION_METADATA);
+/** Build the Transactor class from the same opaque registry as `createServer`. */
+export const createTransactorDO = (operationCatalogs) => createInternalTransactorDO(deployedOperationCatalogs(operationCatalogs), deployedDatabaseCatalogBindings(operationCatalogs));
+export { OperationCatalogDeploymentError, } from "./operation-catalogs.js";
+/** Build a peer Worker. One-shot reads consume the filtered request `Db`. */
+export const createServer = (options = {}) => ({
+    async fetch(request, env, _ctx) {
+        return runFetch(request, env, options);
+    },
+});
+export default createServer();
+//# sourceMappingURL=index.js.map

package/dist/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAEzC,OAAO,EACL,kBAAkB,IAAI,0BAA0B,EAChD,YAAY,IAAI,oBAAoB,GACrC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,QAAQ,EAA8C,MAAM,aAAa,CAAC;AACnF,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,iCAAiC,GAGlC,MAAM,yBAAyB,CAAC;AAMjC,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,oBAA2D,CAAC;AACxF,MAAM,CAAC,MAAM,cAAc,GAAG,sBAA6D,CAAC;AAC5F;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAmC,EAAE,EAAE,CAC7E,iCAAiC,CAC/B,KAAK,EACJ,GAA0B,CAAC,mBAAmB,CAChD,CAAC;AACJ,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,iBAAoC,EACV,EAAE,CAC5B,0BAA0B,CACxB,yBAAyB,CAAC,iBAAiB,CAAC,EAC5C,+BAA+B,CAAC,iBAAiB,CAAC,CACZ,CAAC;AAC3C,OAAO,EACL,+BAA+B,GAKhC,MAAM,yBAAyB,CAAC;AAQjC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,GAAkB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAY,EAAE,IAAuB;QACjE,OAAO,QAAQ,CAAC,OAAO,EAAE,GAAgB,EAAE,OAA+B,CAAC,CAAC;IAC9E,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,YAAY,EAAE,CAAC"}

package/dist/worker/jwt.d.ts

@@ -0,0 +1,23 @@
+import type { RamoseEnv } from "../RamoseEnv.ts";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { type FetchImplementation } from "jose";
+import { Unauthorized } from "./errors.ts";
+import { type VerifiedPrincipal } from "./auth.ts";
+type JwtVerifierEnv = Pick<RamoseEnv, "RAMOSE_JWKS_URL" | "RAMOSE_JWKS_JSON" | "RAMOSE_JWKS_SERVICE" | "RAMOSE_JWT_ISS" | "RAMOSE_JWT_AUD" | "RAMOSE_JWT_MAX_TTL">;
+export interface JwksServiceBinding {
+    fetch(url: string, init: RequestInit): Promise<Response>;
+}
+export interface JwtVerifierClient {
+    readonly verify: (token: Redacted.Redacted<string>) => Effect.Effect<VerifiedPrincipal, Unauthorized>;
+}
+declare const JwtVerifier_base: Context.ServiceClass<JwtVerifier, "ramose/worker/JwtVerifier", JwtVerifierClient>;
+export declare class JwtVerifier extends JwtVerifier_base {
+}
+export declare const temporalClaimsHold: (iat: number, exp: number, nbf: number | undefined, nowMs: number) => boolean;
+export declare const serviceBindingFetch: (binding: JwksServiceBinding) => FetchImplementation;
+export declare const resetJwtVerifier: () => void;
+export declare const fromEnv: (env: JwtVerifierEnv) => JwtVerifierClient;
+export {};
+//# sourceMappingURL=jwt.d.ts.map

package/dist/worker/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/worker/jwt.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAML,KAAK,mBAAmB,EAIzB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,WAAW,CAAC;AAKnB,KAAK,cAAc,GAAG,IAAI,CACxB,SAAS,EACP,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,CACvB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAC7B,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;CACrD;;AAED,qBAAa,WAAY,SAAQ,gBAEhC;CAAG;AAiBJ,eAAO,MAAM,kBAAkB,QACxB,MAAM,OACN,MAAM,OACN,MAAM,GAAG,SAAS,SAChB,MAAM,KACZ,OAOF,CAAC;AA2LF,eAAO,MAAM,mBAAmB,YACrB,kBAAkB,KAC1B,mBAOG,CAAC;AAwGP,eAAO,MAAM,gBAAgB,QAAO,IAEnC,CAAC;AAEF,eAAO,MAAM,OAAO,QAAS,cAAc,KAAG,iBAc7C,CAAC"}