siclaw 0.1.0 → 0.1.2

package/dist/tools/credential-manager.js

@@ -0,0 +1,313 @@
+/**
+ * Generic credential registration, removal, and listing for TUI mode.
+ *
+ * Writes the same manifest.json + credential files format used by Gateway's
+ * buildCredentialPayload(), so credential_list tool works identically.
+ */
+import { execFile } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import yaml from "js-yaml";
+import { resolveUnderDir } from "../shared/path-utils.js";
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function safeName(name) {
+    const cleaned = name.replace(/[^a-zA-Z0-9_-]/g, "_").replace(/^_+|_+$/g, "");
+    if (!cleaned)
+        throw new Error("Credential name must contain at least one alphanumeric character");
+    return cleaned;
+}
+/** Reject values that could inject SSH config directives (newlines, leading whitespace). */
+function sanitizeSshField(value, fieldName) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        throw new Error(`${fieldName} must not be empty`);
+    if (/[\r\n]/.test(trimmed))
+        throw new Error(`${fieldName} must not contain newlines`);
+    return trimmed;
+}
+function ensureDir(dir) {
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+}
+function readManifest(credentialsDir) {
+    const manifestPath = path.join(credentialsDir, "manifest.json");
+    if (!fs.existsSync(manifestPath))
+        return [];
+    try {
+        const parsed = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+function writeManifest(credentialsDir, manifest) {
+    ensureDir(credentialsDir);
+    fs.writeFileSync(path.join(credentialsDir, "manifest.json"), JSON.stringify(manifest, null, 2) + "\n", { mode: 0o600 });
+}
+function writeCredentialFile(credentialsDir, filename, content, mode = 0o600) {
+    const filePath = resolveUnderDir(credentialsDir, filename);
+    fs.writeFileSync(filePath, content, { mode });
+}
+// ---------------------------------------------------------------------------
+// Kubeconfig probing (extracted from credential-list.ts)
+// ---------------------------------------------------------------------------
+/** Probe a kubeconfig with `kubectl version` (3s timeout, parallel-safe). */
+export function probeKubeconfig(kubeconfigPath) {
+    return new Promise((resolve) => {
+        execFile("kubectl", ["version", "--output=json", `--kubeconfig=${kubeconfigPath}`, "--request-timeout=3s"], { timeout: 5000 }, (err, stdout) => {
+            if (err) {
+                const msg = err.message?.includes("timed out")
+                    ? "connection timeout"
+                    : err.message?.split("\n")[0] ?? "unknown error";
+                resolve({ reachable: false, error: msg });
+                return;
+            }
+            try {
+                const info = JSON.parse(stdout);
+                const ver = info.serverVersion?.gitVersion ?? "unknown";
+                resolve({ reachable: true, version: ver });
+            }
+            catch {
+                resolve({ reachable: true, version: "unknown" });
+            }
+        });
+    });
+}
+export function registerKubeconfig(credentialsDir, opts) {
+    let content;
+    if (opts.content) {
+        content = opts.content;
+    }
+    else if (opts.sourcePath) {
+        const resolvedPath = path.resolve(opts.sourcePath);
+        if (!fs.existsSync(resolvedPath)) {
+            return { error: `File not found: ${resolvedPath}` };
+        }
+        content = fs.readFileSync(resolvedPath, "utf-8");
+    }
+    else {
+        return { error: "Either sourcePath or content is required" };
+    }
+    // Validate YAML
+    let metadata;
+    try {
+        const kc = yaml.load(content);
+        if (!kc || typeof kc !== "object") {
+            return { error: "Invalid kubeconfig: not a YAML object" };
+        }
+        const clusters = kc?.clusters ?? [];
+        const contexts = kc?.contexts ?? [];
+        metadata = {
+            clusters: clusters.map((c) => ({ name: c.name, server: c.cluster?.server })),
+            contexts: contexts.map((c) => ({
+                name: c.name,
+                cluster: c.context?.cluster,
+                namespace: c.context?.namespace,
+            })),
+            currentContext: kc?.["current-context"],
+        };
+    }
+    catch (err) {
+        return { error: `Invalid kubeconfig YAML: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    const safe = safeName(opts.name);
+    const filename = `${safe}.kubeconfig`;
+    ensureDir(credentialsDir);
+    writeCredentialFile(credentialsDir, filename, content);
+    const entry = {
+        name: opts.name,
+        type: "kubeconfig",
+        description: opts.description ?? null,
+        files: [filename],
+        ...(metadata ? { metadata } : {}),
+    };
+    // Update manifest
+    const manifest = readManifest(credentialsDir).filter((e) => e.name !== opts.name);
+    manifest.push(entry);
+    writeManifest(credentialsDir, manifest);
+    return { entry };
+}
+export function registerSshPassword(credentialsDir, opts) {
+    const safe = safeName(opts.name);
+    const fileNames = [];
+    ensureDir(credentialsDir);
+    // Sanitize SSH fields against config injection
+    const host = sanitizeSshField(opts.host, "host");
+    const username = sanitizeSshField(opts.username, "username");
+    // SSH config
+    const sshConfigLines = [`Host ${safe}`];
+    sshConfigLines.push(`  HostName ${host}`);
+    if (opts.port)
+        sshConfigLines.push(`  Port ${opts.port}`);
+    sshConfigLines.push(`  User ${username}`);
+    sshConfigLines.push("  StrictHostKeyChecking accept-new");
+    const sshConfigFile = `${safe}.ssh_config`;
+    writeCredentialFile(credentialsDir, sshConfigFile, sshConfigLines.join("\n") + "\n");
+    fileNames.push(sshConfigFile);
+    // Password file
+    const pwFile = `${safe}.password`;
+    writeCredentialFile(credentialsDir, pwFile, opts.password, 0o600);
+    fileNames.push(pwFile);
+    const entry = {
+        name: opts.name,
+        type: "ssh_password",
+        description: opts.description ?? null,
+        files: fileNames,
+        metadata: {
+            host: opts.host,
+            ...(opts.port ? { port: opts.port } : {}),
+            username: opts.username,
+        },
+    };
+    const manifest = readManifest(credentialsDir).filter((e) => e.name !== opts.name);
+    manifest.push(entry);
+    writeManifest(credentialsDir, manifest);
+    return { entry };
+}
+export function registerSshKey(credentialsDir, opts) {
+    const resolvedKeyPath = path.resolve(opts.keyPath);
+    if (!fs.existsSync(resolvedKeyPath)) {
+        return { error: `Key file not found: ${resolvedKeyPath}` };
+    }
+    const safe = safeName(opts.name);
+    const fileNames = [];
+    ensureDir(credentialsDir);
+    // Copy private key
+    const keyContent = fs.readFileSync(resolvedKeyPath, "utf-8");
+    const keyFile = `${safe}.key`;
+    writeCredentialFile(credentialsDir, keyFile, keyContent, 0o600);
+    fileNames.push(keyFile);
+    // Sanitize SSH fields against config injection
+    const host = sanitizeSshField(opts.host, "host");
+    const username = sanitizeSshField(opts.username, "username");
+    // SSH config
+    const sshConfigLines = [`Host ${safe}`];
+    sshConfigLines.push(`  HostName ${host}`);
+    if (opts.port)
+        sshConfigLines.push(`  Port ${opts.port}`);
+    sshConfigLines.push(`  User ${username}`);
+    sshConfigLines.push(`  IdentityFile ${path.join(credentialsDir, keyFile)}`);
+    sshConfigLines.push("  StrictHostKeyChecking accept-new");
+    const sshConfigFile = `${safe}.ssh_config`;
+    writeCredentialFile(credentialsDir, sshConfigFile, sshConfigLines.join("\n") + "\n");
+    fileNames.push(sshConfigFile);
+    const entry = {
+        name: opts.name,
+        type: "ssh_key",
+        description: opts.description ?? null,
+        files: fileNames,
+        metadata: {
+            host: opts.host,
+            ...(opts.port ? { port: opts.port } : {}),
+            username: opts.username,
+        },
+    };
+    const manifest = readManifest(credentialsDir).filter((e) => e.name !== opts.name);
+    manifest.push(entry);
+    writeManifest(credentialsDir, manifest);
+    return { entry };
+}
+export function registerApiToken(credentialsDir, opts) {
+    const safe = safeName(opts.name);
+    ensureDir(credentialsDir);
+    const tokenData = {};
+    if (opts.url)
+        tokenData.url = opts.url;
+    tokenData.token = opts.token;
+    const tokenFile = `${safe}.token`;
+    writeCredentialFile(credentialsDir, tokenFile, JSON.stringify(tokenData, null, 2), 0o600);
+    const entry = {
+        name: opts.name,
+        type: "api_token",
+        description: opts.description ?? null,
+        files: [tokenFile],
+        metadata: { ...(opts.url ? { url: opts.url } : {}) },
+    };
+    const manifest = readManifest(credentialsDir).filter((e) => e.name !== opts.name);
+    manifest.push(entry);
+    writeManifest(credentialsDir, manifest);
+    return { entry };
+}
+export function registerApiBasicAuth(credentialsDir, opts) {
+    const safe = safeName(opts.name);
+    ensureDir(credentialsDir);
+    const authData = {};
+    if (opts.url)
+        authData.url = opts.url;
+    authData.username = opts.username;
+    authData.password = opts.password;
+    const authFile = `${safe}.auth`;
+    writeCredentialFile(credentialsDir, authFile, JSON.stringify(authData, null, 2), 0o600);
+    const entry = {
+        name: opts.name,
+        type: "api_basic_auth",
+        description: opts.description ?? null,
+        files: [authFile],
+        metadata: {
+            ...(opts.url ? { url: opts.url } : {}),
+            username: opts.username,
+        },
+    };
+    const manifest = readManifest(credentialsDir).filter((e) => e.name !== opts.name);
+    manifest.push(entry);
+    writeManifest(credentialsDir, manifest);
+    return { entry };
+}
+// ---------------------------------------------------------------------------
+// Remove
+// ---------------------------------------------------------------------------
+export function removeCredential(credentialsDir, name) {
+    const manifest = readManifest(credentialsDir);
+    const entry = manifest.find((e) => e.name === name);
+    if (!entry)
+        return { removed: false };
+    // Delete credential files (with path traversal check)
+    for (const file of entry.files) {
+        try {
+            const filePath = resolveUnderDir(credentialsDir, file);
+            fs.unlinkSync(filePath);
+        }
+        catch { /* file may already be gone or path invalid */ }
+    }
+    // Update manifest
+    const updated = manifest.filter((e) => e.name !== name);
+    writeManifest(credentialsDir, updated);
+    return { removed: true };
+}
+// ---------------------------------------------------------------------------
+// List
+// ---------------------------------------------------------------------------
+export async function listCredentials(credentialsDir) {
+    const manifest = readManifest(credentialsDir);
+    // Probe kubeconfigs in parallel
+    const entries = manifest.map((e) => ({ ...e }));
+    const kubeconfigs = entries.filter((e) => e.type === "kubeconfig");
+    if (kubeconfigs.length > 0) {
+        const probes = await Promise.all(kubeconfigs.map(async (c) => {
+            const kubeconfigFile = c.files.find((f) => f.endsWith(".kubeconfig")) ?? c.files[0];
+            const fullPath = path.join(credentialsDir, kubeconfigFile);
+            return { name: c.name, probe: await probeKubeconfig(fullPath) };
+        }));
+        for (const { name, probe } of probes) {
+            const cred = entries.find((c) => c.name === name);
+            if (cred) {
+                cred.reachable = probe.reachable;
+                if (probe.version)
+                    cred.server_version = probe.version;
+                if (probe.error)
+                    cred.probe_error = probe.error;
+            }
+        }
+    }
+    return entries;
+}
+// ---------------------------------------------------------------------------
+// Test-only exports (not part of public API)
+// ---------------------------------------------------------------------------
+/** @internal Exposed for unit testing only. */
+export const _testing = { safeName, sanitizeSshField, readManifest };
+//# sourceMappingURL=credential-manager.js.map

package/dist/tools/credential-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../../src/tools/credential-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA6E1D,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4FAA4F;AAC5F,SAAS,gBAAgB,CAAC,KAAa,EAAE,SAAiB;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,oBAAoB,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,4BAA4B,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,cAAsB;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB,EAAE,QAAmC;IAChF,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1B,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,EAC1C,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACxC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,QAAgB,EAAE,OAAe,EAAE,OAAe,KAAK;IAC1G,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,cAAsB;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,SAAS,EACT,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,cAAc,EAAE,EAAE,sBAAsB,CAAC,EACtF,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACd,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;oBAC5C,CAAC,CAAC,oBAAoB;oBACtB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;gBACnD,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,IAAI,SAAS,CAAC;gBACxD,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,UAAU,kBAAkB,CAChC,cAAsB,EACtB,IAA4B;IAE5B,IAAI,OAAe,CAAC;IAEpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,mBAAmB,YAAY,EAAE,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC/D,CAAC;IAED,gBAAgB;IAChB,IAAI,QAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,CAAC;QACzD,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,GAAI,EAAE,EAAE,QAAmE,IAAI,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAI,EAAE,EAAE,QAAwF,IAAI,EAAE,CAAC;QACrH,QAAQ,GAAG;YACT,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO;gBAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS;aAChC,CAAC,CAAC;YACH,cAAc,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAuB;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,IAAI,aAAa,CAAC;IAEtC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1B,mBAAmB,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEvD,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;IAEF,kBAAkB;IAClB,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,cAAsB,EACtB,IAA6B;IAE7B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,SAAS,CAAC,cAAc,CAAC,CAAC;IAE1B,+CAA+C;IAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE7D,aAAa;IACb,MAAM,cAAc,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,cAAc,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,IAAI;QAAE,cAAc,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,cAAc,CAAC,IAAI,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,GAAG,IAAI,aAAa,CAAC;IAC3C,mBAAmB,CAAC,cAAc,EAAE,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACrF,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE9B,gBAAgB;IAChB,MAAM,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC;IAClC,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,cAAsB,EACtB,IAAwB;IAExB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,uBAAuB,eAAe,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,SAAS,CAAC,cAAc,CAAC,CAAC;IAE1B,mBAAmB;IACnB,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;IAC9B,mBAAmB,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAChE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAExB,+CAA+C;IAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE7D,aAAa;IACb,MAAM,cAAc,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,cAAc,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,IAAI;QAAE,cAAc,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,cAAc,CAAC,IAAI,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5E,cAAc,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,GAAG,IAAI,aAAa,CAAC;IAC3C,mBAAmB,CAAC,cAAc,EAAE,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACrF,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE9B,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,cAAsB,EACtB,IAA0B;IAE1B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjC,SAAS,CAAC,cAAc,CAAC,CAAC;IAE1B,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,GAAG;QAAE,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACvC,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAE7B,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,CAAC;IAClC,mBAAmB,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAE1F,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,KAAK,EAAE,CAAC,SAAS,CAAC;QAClB,QAAQ,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KACrD,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,cAAsB,EACtB,IAA8B;IAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjC,SAAS,CAAC,cAAc,CAAC,CAAC;IAE1B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,IAAI,CAAC,GAAG;QAAE,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACtC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAClC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAElC,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC;IAChC,mBAAmB,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAExF,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,QAAQ,EAAE;YACR,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,aAAa,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,UAAU,gBAAgB,CAC9B,cAAsB,EACtB,IAAY;IAEZ,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEtC,sDAAsD;IACtD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACvD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC5D,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,cAAsB;IAEtB,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IAE9C,gCAAgC;IAChC,MAAM,OAAO,GAA0B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAEnE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1B,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,CAAC,CAAC,CACH,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAClD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBACjC,IAAI,KAAK,CAAC,OAAO;oBAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;gBACvD,IAAI,KAAK,CAAC,KAAK;oBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC"}