synorch 0.2.0 → 0.4.0-beta.0

package/dist/harness/mcp/errors.js

@@ -0,0 +1,67 @@
+/**
+ * MCP start failures in words a person reads at a glance. The raw error (protocol text, JSON-RPC
+ * bodies, stderr) goes to the server's log and the `/mcp` detail view, never to the first screen.
+ */
+export class McpStartError extends Error {
+    kind;
+    /** Short, human text: "command not found (npx)", "needs sign-in". */
+    friendly;
+    /** Everything known (raw message, status, stderr tail), for `/mcp <name>` and the log. */
+    detail;
+    constructor(server, kind, friendly, detail) {
+        super(`${server}: ${friendly}`);
+        this.name = "McpStartError";
+        this.kind = kind;
+        this.friendly = friendly;
+        this.detail = detail;
+    }
+}
+const AUTH_PATTERN = /\b401\b|unauthori[sz]ed|authentication required|not authenticated|invalid[_ ]token|missing (?:bearer|access) token|sign[- ]?in required|login required|McpSignInRequiredError|needs sign-in/i;
+/** True when a start failure means "the server wants credentials" rather than "it is broken". */
+export function isAuthFailure(error) {
+    if (typeof error === "object" && error !== null) {
+        const code = error.code;
+        if (code === 401)
+            return true;
+        const name = error.name;
+        if (name === "UnauthorizedError" || name === "McpSignInRequiredError")
+            return true;
+    }
+    const text = error instanceof Error ? `${error.name} ${error.message}` : String(error);
+    return AUTH_PATTERN.test(text);
+}
+/** One short reason for a failure that is not about sign-in. */
+export function friendlyFailure(error, context) {
+    if (context.timedOut)
+        return `did not start within ${Math.round(context.timeoutMs / 1000)} s`;
+    const code = typeof error === "object" && error !== null ? error.code : undefined;
+    const text = error instanceof Error ? error.message : String(error);
+    const host = hostOf(context.url);
+    if (code === "ENOENT" || /\bENOENT\b|not recognized as an internal or external command|command not found/i.test(text))
+        return `command not found${context.command === undefined ? "" : ` (${context.command})`}`;
+    if (code === 401 || isAuthFailure(error))
+        return context.configuredCredentials ? "rejected the configured credentials" : "needs sign-in";
+    if (code === 403 || /\b403\b|forbidden/i.test(text))
+        return "access denied (403)";
+    if (code === 404 || /\b404\b|not found/i.test(text))
+        return `endpoint not found${host === undefined ? "" : ` at ${host}`} (404)`;
+    if (typeof code === "number" && code >= 500)
+        return `the server had an error (${code})`;
+    if (/ECONNREFUSED|ENOTFOUND|EAI_AGAIN|ETIMEDOUT|ECONNRESET|fetch failed|network/i.test(text))
+        return `could not reach ${host ?? "the server"}`;
+    if (/connection closed|closed the connection|exited|EPIPE/i.test(text))
+        return "the server exited while starting";
+    const first = text.split(/\r?\n/)[0]?.replace(/\{.*$/, "").replace(/:\s*$/, "").trim() ?? "";
+    return first === "" ? "could not start" : first.length > 70 ? `${first.slice(0, 67)}...` : first;
+}
+function hostOf(url) {
+    if (url === undefined)
+        return undefined;
+    try {
+        return new URL(url).host;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/harness/mcp/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/harness/mcp/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAiB;IACrC,qEAAqE;IACrD,QAAQ,CAAS;IACjC,0FAA0F;IAC1E,MAAM,CAAS;IAE/B,YAAmB,MAAc,EAAE,IAAoB,EAAE,QAAgB,EAAE,MAAc;QACvF,KAAK,CAAC,GAAG,MAAM,KAAK,QAAQ,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,YAAY,GAAG,8LAA8L,CAAC;AAEpN,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,wBAAwB;YAAE,OAAO,IAAI,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAAsL;IACpO,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;IAC9F,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,QAAQ,IAAI,iFAAiF,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,oBAAoB,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC;IACjN,IAAI,IAAI,KAAK,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,eAAe,CAAC;IACzI,IAAI,IAAI,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAClF,IAAI,IAAI,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,qBAAqB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,QAAQ,CAAC;IACjI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,4BAA4B,IAAI,GAAG,CAAC;IACxF,IAAI,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,mBAAmB,IAAI,IAAI,YAAY,EAAE,CAAC;IAC/I,IAAI,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,kCAAkC,CAAC;IAClH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7F,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AACnG,CAAC;AAED,SAAS,MAAM,CAAC,GAAuB;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/harness/mcp/index.d.ts

@@ -0,0 +1,9 @@
+/** K3 — MCP client: external MCP servers (stdio, streamable HTTP) as gateway-governed tools. */
+export { createMcpApprovalStore, MCP_APPROVALS_FILE, type McpApprovalStore } from "./approvals.ts";
+export { McpConnection, mcpLogFile, type McpCallResult, type McpToolInfo } from "./client.ts";
+export { defaultMcpRoles, expandVariables, MCP_SERVER_NAME_PATTERN, MCP_STARTUP_MODES, MCP_TRUST_LEVELS, mcpConfigSchema, mcpServerEntrySchema, mergeServers, modelToolName, parseMcpServerEntry, readMcpJson, toDefinition, type McpConfig, type McpServerDefinition, type McpServerEntry, type McpSource, type McpTrust, } from "./config.ts";
+export { friendlyFailure, isAuthFailure, McpStartError, type McpFailureKind } from "./errors.ts";
+export { McpManager, type McpManagerOptions, type McpServerState, type McpServerStatus } from "./manager.ts";
+export { createMcpOAuthStore, loginMcpServer, mcpOAuthRef, McpSignInRequiredError, type McpLoginDependencies, type McpOAuthRecord, type McpOAuthStore } from "./oauth.ts";
+export { createMcpTool, modelSchema, untrustedMcpEnvelope } from "./tools.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/harness/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/harness/mcp/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EACL,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,QAAQ,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,sBAAsB,EAAE,KAAK,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1K,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/harness/mcp/index.js

@@ -0,0 +1,9 @@
+/** K3 — MCP client: external MCP servers (stdio, streamable HTTP) as gateway-governed tools. */
+export { createMcpApprovalStore, MCP_APPROVALS_FILE } from "./approvals.js";
+export { McpConnection, mcpLogFile } from "./client.js";
+export { defaultMcpRoles, expandVariables, MCP_SERVER_NAME_PATTERN, MCP_STARTUP_MODES, MCP_TRUST_LEVELS, mcpConfigSchema, mcpServerEntrySchema, mergeServers, modelToolName, parseMcpServerEntry, readMcpJson, toDefinition, } from "./config.js";
+export { friendlyFailure, isAuthFailure, McpStartError } from "./errors.js";
+export { McpManager } from "./manager.js";
+export { createMcpOAuthStore, loginMcpServer, mcpOAuthRef, McpSignInRequiredError } from "./oauth.js";
+export { createMcpTool, modelSchema, untrustedMcpEnvelope } from "./tools.js";
+//# sourceMappingURL=index.js.map

package/dist/harness/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/harness/mcp/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAyB,MAAM,gBAAgB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAwC,MAAM,aAAa,CAAC;AAC9F,OAAO,EACL,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,YAAY,GAMb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,UAAU,EAAqE,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,sBAAsB,EAAsE,MAAM,YAAY,CAAC;AAC1K,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/harness/mcp/manager.d.ts

@@ -0,0 +1,115 @@
+import type { ToolRegistry } from "../contracts/index.ts";
+import { type McpApprovalStore } from "./approvals.ts";
+import { McpConnection, type McpToolInfo } from "./client.ts";
+import { type McpConfig, type McpConfigProblem, type McpServerDefinition } from "./config.ts";
+import { type McpLoginDependencies, type McpOAuthStore } from "./oauth.ts";
+/**
+ * K3 MCP client: the servers of one runtime. It resolves the configured servers (user, project,
+ * `.mcp.json`), enforces the project approval gate, connects lazily or at session start, registers
+ * each server's tools in the ToolRegistry as `mcp__<server>__<tool>` and removes them again when a
+ * server is disabled or reconnected. Every server process ends with the session.
+ */
+export type McpServerState = "disabled" | "needs-approval" | "needs-auth" | "idle" | "starting" | "connected" | "failed";
+export interface McpServerStatus {
+    readonly name: string;
+    readonly source: McpServerDefinition["source"];
+    readonly file: string;
+    readonly transport: McpServerDefinition["transport"];
+    readonly target: string;
+    readonly trust: McpServerDefinition["trust"];
+    readonly startup: McpServerDefinition["startup"];
+    readonly state: McpServerState;
+    /** Model-visible tool names (registered now). */
+    readonly tools: readonly string[];
+    /** Short, human reason ("needs sign-in", "command not found (npx)"). */
+    readonly error: string | undefined;
+    /** The raw failure (protocol text, stderr tail) for the /mcp detail view. */
+    readonly detail: string | undefined;
+    readonly logFile: string;
+    readonly missingVariables: readonly string[];
+}
+export interface McpManagerOptions {
+    readonly home: string;
+    readonly workspaceRoot: string;
+    /** Canonical workspace root (the trust store's form): project approvals bind to it. */
+    readonly workspaceKey: string;
+    readonly environment: Readonly<Record<string, string | undefined>>;
+    readonly registry: ToolRegistry;
+    readonly clientVersion: string;
+    readonly user: {
+        readonly config: McpConfig | undefined;
+        readonly file: string;
+    };
+    readonly project: {
+        readonly config: McpConfig | undefined;
+        readonly file: string;
+    };
+    readonly platform?: NodeJS.Platform;
+    /** An MCP result reached the model: untrusted content entered the turn. */
+    readonly onUntrustedContent?: () => void;
+    /** Secret-looking values from expanded env/headers join the gateway's redaction set. */
+    readonly addRedaction?: (value: string) => void;
+    readonly approvals?: McpApprovalStore;
+    /** K7: servers of enabled plugins (installed by the user or enabled in Claude Code): trusted like user servers. */
+    readonly plugins?: () => readonly McpServerDefinition[];
+    /** MCP OAuth sign-ins (Synorch's credential store); without it remote servers never use OAuth. */
+    readonly oauth?: McpOAuthStore;
+    /** False when the folder is not a project (the home folder, no git, no markers): project servers are not read. */
+    readonly projectScope?: boolean;
+}
+export declare class McpManager {
+    private readonly options;
+    private readonly approvals;
+    private readonly logDirectory;
+    private readonly cacheDirectory;
+    private slots;
+    private loadProblems;
+    private loaded;
+    private closed;
+    constructor(options: McpManagerOptions);
+    /** Reads `.mcp.json` and resolves every server definition (no process is started). */
+    load(): Promise<void>;
+    get problems(): readonly McpConfigProblem[];
+    has(name: string): boolean;
+    definitions(): readonly McpServerDefinition[];
+    /** Project servers waiting for the user's one-time approval. */
+    pendingApprovals(): readonly McpServerDefinition[];
+    /**
+     * Session start: every enabled, approved server either connects now (`startup: session`, or no
+     * cached tool list yet) or registers its cached tools and connects at first use. Never throws;
+     * failures are kept for `/mcp`. Resolves when every eager connection settled.
+     */
+    startSession(): Promise<void>;
+    status(): McpServerStatus[];
+    /** The server's tools as the server names them (connected servers only). */
+    serverTools(name: string): readonly McpToolInfo[];
+    /** The live connection for a tool call: connects (or reconnects after a crash) on demand. */
+    connection(name: string, signal?: AbortSignal): Promise<McpConnection>;
+    reconnect(name: string): Promise<McpServerStatus | undefined>;
+    /** `/mcp login <name>`: MCP OAuth in the browser, then a fresh start with the stored sign-in. */
+    login(name: string, deps: Omit<McpLoginDependencies, "store">): Promise<McpServerStatus | undefined>;
+    /** `/mcp logout <name>`: forgets the stored sign-in and stops the server. */
+    logout(name: string): Promise<boolean>;
+    /** Session-scoped enable/disable (the CLI also persists it for user servers). */
+    setEnabled(name: string, enabled: boolean): Promise<boolean>;
+    /** Approves a project server's current definition for this workspace (user scope) and starts it. */
+    approve(name: string, start?: boolean): Promise<boolean>;
+    revoke(name: string): Promise<boolean>;
+    /**
+     * Claude Code native mode: the servers Claude should run itself (`--mcp-config`), in Claude's
+     * format; only enabled and approved ones. Claude's own permission prompts reach Synorch's broker.
+     */
+    claudeServers(): Record<string, Record<string, unknown>>;
+    close(): Promise<void>;
+    killAllSync(): void;
+    private needsApproval;
+    private usable;
+    private stateOf;
+    private connect;
+    private register;
+    private stop;
+    private cacheFile;
+    private readCache;
+    private writeCache;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/harness/mcp/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/harness/mcp/manager.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAc,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAA4C,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAExI,OAAO,EAAuC,KAAK,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhH;;;;;GAKG;AAEH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,gBAAgB,GAAG,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,2EAA2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;IACzC,wFAAwF;IACxF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IACtC,mHAAmH;IACnH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,SAAS,mBAAmB,EAAE,CAAC;IACxD,kGAAkG;IAClG,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B,kHAAkH;IAClH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAoBD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEJ,OAAO,EAAE,iBAAiB;IAO7C,sFAAsF;IACzE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBlC,IAAW,QAAQ,IAAI,SAAS,gBAAgB,EAAE,CAEjD;IAEM,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,WAAW,IAAI,SAAS,mBAAmB,EAAE;IAIpD,gEAAgE;IACzD,gBAAgB,IAAI,SAAS,mBAAmB,EAAE;IAIzD;;;;OAIG;IACU,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAenC,MAAM,IAAI,eAAe,EAAE;IAqBlC,4EAA4E;IACrE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE;IAIxD,6FAA6F;IAChF,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAkBtE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAW1E,iGAAiG;IACpF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IASjH,6EAA6E;IAChE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYnD,iFAAiF;IACpE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAazE,oGAAoG;IACvF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,UAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAQrD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnD;;;OAGG;IACI,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAelD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,WAAW,IAAI,IAAI;IAI1B,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,OAAO;IAiDf,OAAO,CAAC,QAAQ;YAoBF,IAAI;IAWlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,SAAS;YAUH,UAAU;CASzB"}

package/dist/harness/mcp/manager.js

@@ -0,0 +1,361 @@
+import { readFileSync } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { z } from "zod";
+import { createMcpApprovalStore } from "./approvals.js";
+import { McpConnection, mcpLogFile } from "./client.js";
+import { mergeServers, modelToolName, readMcpJson } from "./config.js";
+import { McpStartError } from "./errors.js";
+import { loginMcpServer, sessionAuthProvider } from "./oauth.js";
+import { createMcpTool } from "./tools.js";
+const cacheSchema = z.strictObject({
+    digest: z.string(),
+    tools: z.array(z.strictObject({ name: z.string(), description: z.string().optional(), inputSchema: z.record(z.string(), z.unknown()), annotations: z.record(z.string(), z.unknown()).optional() })),
+});
+const SECRET_NAME = /(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|COOKIE|AUTH)/i;
+export class McpManager {
+    options;
+    approvals;
+    logDirectory;
+    cacheDirectory;
+    slots = new Map();
+    loadProblems = [];
+    loaded = false;
+    closed = false;
+    constructor(options) {
+        this.options = options;
+        this.approvals = options.approvals ?? createMcpApprovalStore(options.home);
+        this.logDirectory = path.join(options.home, "logs", "mcp");
+        this.cacheDirectory = path.join(options.home, "mcp", "cache");
+    }
+    /** Reads `.mcp.json` and resolves every server definition (no process is started). */
+    async load() {
+        const projectScope = this.options.projectScope !== false;
+        const mcpJson = projectScope ? await readMcpJson(this.options.workspaceRoot, this.options.environment) : { servers: [], problems: [] };
+        const merged = mergeServers(this.options.user.config, this.options.user.file, projectScope ? this.options.project.config : undefined, this.options.project.file, mcpJson, this.options.environment, this.options.workspaceRoot, this.options.plugins?.() ?? []);
+        this.loadProblems = [...merged.problems];
+        const next = new Map();
+        for (const definition of merged.servers) {
+            const previous = this.slots.get(definition.name);
+            next.set(definition.name, previous !== undefined && previous.definition.digest === definition.digest ? { ...previous, definition } : { definition, sessionDisabled: false, connection: undefined, connecting: undefined, registered: [], error: undefined, detail: undefined, needsAuth: false });
+            for (const value of [...Object.entries(definition.env), ...Object.entries(definition.headers)]) {
+                if (SECRET_NAME.test(value[0]) && value[1].length >= 8)
+                    this.options.addRedaction?.(value[1]);
+            }
+        }
+        for (const [name, slot] of this.slots)
+            if (next.get(name) !== slot)
+                await this.stop(slot);
+        this.slots = next;
+        this.loaded = true;
+    }
+    get problems() {
+        return this.loadProblems;
+    }
+    has(name) {
+        return this.slots.has(name);
+    }
+    definitions() {
+        return [...this.slots.values()].map((slot) => slot.definition);
+    }
+    /** Project servers waiting for the user's one-time approval. */
+    pendingApprovals() {
+        return [...this.slots.values()].filter((slot) => slot.definition.enabled && this.needsApproval(slot.definition)).map((slot) => slot.definition);
+    }
+    /**
+     * Session start: every enabled, approved server either connects now (`startup: session`, or no
+     * cached tool list yet) or registers its cached tools and connects at first use. Never throws;
+     * failures are kept for `/mcp`. Resolves when every eager connection settled.
+     */
+    async startSession() {
+        if (!this.loaded)
+            await this.load();
+        const eager = [];
+        for (const slot of this.slots.values()) {
+            if (!this.usable(slot))
+                continue;
+            const cached = slot.definition.startup === "lazy" ? this.readCache(slot.definition) : undefined;
+            if (cached !== undefined) {
+                this.register(slot, cached);
+                continue;
+            }
+            eager.push(this.connect(slot).catch(() => undefined));
+        }
+        await Promise.all(eager);
+    }
+    status() {
+        return [...this.slots.values()].map((slot) => {
+            const definition = slot.definition;
+            return {
+                name: definition.name,
+                source: definition.source,
+                file: definition.file,
+                transport: definition.transport,
+                target: definition.transport === "stdio" ? [definition.command ?? "", ...definition.args].join(" ") : (definition.url ?? ""),
+                trust: definition.trust,
+                startup: definition.startup,
+                state: this.stateOf(slot),
+                tools: [...slot.registered],
+                error: slot.error,
+                detail: slot.detail,
+                logFile: mcpLogFile(this.logDirectory, definition.name),
+                missingVariables: definition.missingVariables,
+            };
+        });
+    }
+    /** The server's tools as the server names them (connected servers only). */
+    serverTools(name) {
+        return this.slots.get(name)?.connection?.tools ?? [];
+    }
+    /** The live connection for a tool call: connects (or reconnects after a crash) on demand. */
+    async connection(name, signal) {
+        const slot = this.slots.get(name);
+        if (slot === undefined)
+            throw new Error(`no MCP server named ${name}`);
+        if (!slot.definition.enabled || slot.sessionDisabled)
+            throw new Error(`${name} is disabled (/mcp enable ${name})`);
+        if (this.needsApproval(slot.definition))
+            throw new Error(`${name} is a project server that has not been approved (/mcp approve ${name})`);
+        if (slot.needsAuth && slot.connecting === undefined)
+            throw new Error(`${name} needs sign-in (/mcp login ${name})`);
+        if (slot.connection !== undefined && !slot.connection.isClosed)
+            return slot.connection;
+        const pending = this.connect(slot);
+        if (signal === undefined)
+            return pending;
+        return Promise.race([
+            pending,
+            new Promise((_resolve, reject) => {
+                if (signal.aborted)
+                    reject(new Error("cancelled"));
+                signal.addEventListener("abort", () => reject(new Error("cancelled")), { once: true });
+            }),
+        ]);
+    }
+    async reconnect(name) {
+        const slot = this.slots.get(name);
+        if (slot === undefined)
+            return undefined;
+        await this.stop(slot);
+        slot.error = undefined;
+        slot.detail = undefined;
+        slot.needsAuth = false;
+        if (this.usable(slot))
+            await this.connect(slot).catch(() => undefined);
+        return this.status().find((entry) => entry.name === name);
+    }
+    /** `/mcp login <name>`: MCP OAuth in the browser, then a fresh start with the stored sign-in. */
+    async login(name, deps) {
+        const slot = this.slots.get(name);
+        if (slot === undefined)
+            return undefined;
+        const store = this.options.oauth;
+        if (store === undefined)
+            throw new Error("sign-in is not available here (no credential store)");
+        await loginMcpServer(slot.definition, { ...deps, store });
+        return this.reconnect(name);
+    }
+    /** `/mcp logout <name>`: forgets the stored sign-in and stops the server. */
+    async logout(name) {
+        const slot = this.slots.get(name);
+        const removed = (await this.options.oauth?.remove(name).catch(() => false)) ?? false;
+        if (slot !== undefined) {
+            await this.stop(slot);
+            slot.error = undefined;
+            slot.detail = undefined;
+            slot.needsAuth = false;
+        }
+        return removed;
+    }
+    /** Session-scoped enable/disable (the CLI also persists it for user servers). */
+    async setEnabled(name, enabled) {
+        const slot = this.slots.get(name);
+        if (slot === undefined)
+            return false;
+        slot.sessionDisabled = !enabled;
+        if (!enabled) {
+            await this.stop(slot);
+            return true;
+        }
+        if (!slot.definition.enabled)
+            slot.definition = { ...slot.definition, enabled: true };
+        if (this.usable(slot) && slot.registered.length === 0)
+            await this.connect(slot).catch(() => undefined);
+        return true;
+    }
+    /** Approves a project server's current definition for this workspace (user scope) and starts it. */
+    async approve(name, start = true) {
+        const slot = this.slots.get(name);
+        if (slot === undefined || slot.definition.source === "user" || slot.definition.source === "plugin" || slot.definition.source === "claude-plugin")
+            return false;
+        await this.approvals.approve(this.options.workspaceKey, name, slot.definition.digest);
+        if (start && this.usable(slot) && !this.closed)
+            await this.connect(slot).catch(() => undefined);
+        return true;
+    }
+    async revoke(name) {
+        const slot = this.slots.get(name);
+        const removed = await this.approvals.revoke(this.options.workspaceKey, name);
+        if (slot !== undefined)
+            await this.stop(slot);
+        return removed;
+    }
+    /**
+     * Claude Code native mode: the servers Claude should run itself (`--mcp-config`), in Claude's
+     * format; only enabled and approved ones. Claude's own permission prompts reach Synorch's broker.
+     */
+    claudeServers() {
+        const servers = {};
+        for (const slot of this.slots.values()) {
+            if (!this.usable(slot))
+                continue;
+            const definition = slot.definition;
+            // K7 (verified on 2.1.282): under `--strict-mcp-config` Claude does NOT load its enabled plugins' MCP servers,
+            // so they are passed here under Claude's own name (`plugin:<plugin>:<server>`): same tool names and permission rules, no duplicate.
+            servers[definition.claudeName ?? definition.name] =
+                definition.transport === "stdio"
+                    ? { type: "stdio", command: definition.command, args: [...definition.args], env: { ...definition.env } }
+                    : { type: definition.transport, url: definition.url, headers: { ...definition.headers } };
+        }
+        return servers;
+    }
+    async close() {
+        this.closed = true;
+        await Promise.all([...this.slots.values()].map((slot) => this.stop(slot, false)));
+    }
+    killAllSync() {
+        for (const slot of this.slots.values())
+            slot.connection?.killSync();
+    }
+    needsApproval(definition) {
+        // A user server, or one from a plugin the user installed or enabled in Claude Code, is the user's own choice.
+        if (definition.source === "user" || definition.source === "plugin" || definition.source === "claude-plugin")
+            return false;
+        return !this.approvals.isApproved(this.options.workspaceKey, definition.name, definition.digest);
+    }
+    usable(slot) {
+        return slot.definition.enabled && !slot.sessionDisabled && !this.needsApproval(slot.definition);
+    }
+    stateOf(slot) {
+        if (!slot.definition.enabled || slot.sessionDisabled)
+            return "disabled";
+        if (this.needsApproval(slot.definition))
+            return "needs-approval";
+        if (slot.connecting !== undefined)
+            return "starting";
+        if (slot.connection !== undefined && !slot.connection.isClosed)
+            return "connected";
+        if (slot.needsAuth)
+            return "needs-auth";
+        if (slot.error !== undefined)
+            return "failed";
+        return "idle";
+    }
+    connect(slot) {
+        if (this.closed)
+            return Promise.reject(new Error("the session is closing"));
+        if (slot.connecting !== undefined)
+            return slot.connecting;
+        const definition = slot.definition;
+        const attempt = sessionAuthProvider(definition, this.options.oauth).then((authProvider) => McpConnection.connect(definition, {
+            workspaceRoot: this.options.workspaceRoot,
+            logDirectory: this.logDirectory,
+            clientVersion: this.options.clientVersion,
+            environment: this.options.environment,
+            ...(this.options.platform === undefined ? {} : { platform: this.options.platform }),
+            ...(authProvider === undefined ? {} : { authProvider }),
+        })).then(async (connection) => {
+            slot.connecting = undefined;
+            if (this.closed || slot.definition !== definition || slot.sessionDisabled) {
+                await connection.close();
+                throw new Error(`${definition.name} was stopped while it started`);
+            }
+            slot.connection = connection;
+            slot.error = undefined;
+            slot.detail = undefined;
+            slot.needsAuth = false;
+            connection.onClose((reason) => {
+                if (slot.connection === connection)
+                    slot.error = `stopped: ${reason}${connection.lastStderr.trim() === "" ? "" : ` (${connection.lastStderr.trim().split(/\r?\n/).at(-1)?.slice(0, 300) ?? ""})`}`;
+            });
+            this.register(slot, connection.tools);
+            void this.writeCache(definition, connection.tools);
+            return connection;
+        }, (error) => {
+            slot.connecting = undefined;
+            if (error instanceof McpStartError) {
+                slot.error = error.friendly;
+                slot.detail = error.detail;
+                slot.needsAuth = error.kind === "needs-auth";
+            }
+            else {
+                slot.error = error instanceof Error ? error.message : String(error);
+                slot.detail = slot.error;
+                slot.needsAuth = false;
+            }
+            throw error;
+        });
+        slot.connecting = attempt;
+        return attempt;
+    }
+    register(slot, tools) {
+        const registry = this.options.registry;
+        const wanted = new Map();
+        for (const tool of tools) {
+            const name = modelToolName(slot.definition.name, tool.name);
+            if (!wanted.has(name))
+                wanted.set(name, tool);
+        }
+        for (const name of slot.registered)
+            registry.unregister?.(name);
+        slot.registered = [];
+        for (const [name, tool] of wanted) {
+            if (registry.get(name) !== undefined)
+                continue;
+            try {
+                registry.register(createMcpTool(slot.definition, tool, name, { connection: (server, signal) => this.connection(server, signal), onUntrustedContent: () => this.options.onUntrustedContent?.() }));
+                slot.registered.push(name);
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+    async stop(slot, wait = true) {
+        // A start in flight settles first, so its connection is closed here instead of leaking (at
+        // session close it is not awaited: the closed flag makes the start close its own connection).
+        if (wait)
+            await slot.connecting?.catch(() => undefined);
+        for (const name of slot.registered)
+            this.options.registry.unregister?.(name);
+        slot.registered = [];
+        const connection = slot.connection;
+        slot.connection = undefined;
+        await connection?.close().catch(() => undefined);
+    }
+    cacheFile(definition) {
+        return path.join(this.cacheDirectory, `${definition.name}.json`);
+    }
+    readCache(definition) {
+        try {
+            const parsed = cacheSchema.safeParse(JSON.parse(readFileSync(this.cacheFile(definition), "utf8")));
+            if (!parsed.success || parsed.data.digest !== definition.digest || parsed.data.tools.length === 0)
+                return undefined;
+            return parsed.data.tools.map((tool) => ({ name: tool.name, description: tool.description, inputSchema: tool.inputSchema, annotations: tool.annotations }));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async writeCache(definition, tools) {
+        try {
+            await mkdir(this.cacheDirectory, { recursive: true });
+            const data = { digest: definition.digest, tools: tools.map((tool) => ({ name: tool.name, ...(tool.description === undefined ? {} : { description: tool.description }), inputSchema: tool.inputSchema, ...(tool.annotations === undefined ? {} : { annotations: tool.annotations }) })) };
+            await writeFile(this.cacheFile(definition), JSON.stringify(data), "utf8");
+        }
+        catch {
+            // The cache is a convenience.
+        }
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/harness/mcp/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/harness/mcp/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAyB,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAoB,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAmE,MAAM,aAAa,CAAC;AACxI,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAiD,MAAM,YAAY,CAAC;AAChH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiE3C,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;CACpM,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,8DAA8D,CAAC;AAEnF,MAAM,OAAO,UAAU;IACJ,OAAO,CAAoB;IAC3B,SAAS,CAAmB;IAC5B,YAAY,CAAS;IACrB,cAAc,CAAS;IAChC,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,YAAY,GAAuB,EAAE,CAAC;IACtC,MAAM,GAAG,KAAK,CAAC;IACf,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAmB,OAA0B;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,sFAAsF;IAC/E,KAAK,CAAC,IAAI;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;QACzD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACvI,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChQ,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC3C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAClS,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC/F,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEM,GAAG,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEM,WAAW;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IAED,gEAAgE;IACzD,gBAAgB;QACrB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,YAAY;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,KAAK,GAAuB,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEM,MAAM;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACnC,OAAO;gBACL,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,MAAM,EAAE,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,CAAC;gBAC5H,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACzB,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC;gBACvD,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;aAC9C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IACrE,WAAW,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,MAAoB;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,IAAI,GAAG,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iEAAiE,IAAI,GAAG,CAAC,CAAC;QAC1I,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,IAAI,GAAG,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,OAAO;YACP,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBACnD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,IAAY;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,iGAAiG;IAC1F,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAyC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAChG,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,6EAA6E;IACtE,KAAK,CAAC,MAAM,CAAC,IAAY;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC;QACrF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iFAAiF;IAC1E,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAgB;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oGAAoG;IAC7F,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAK,GAAG,IAAI;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC;QAC/J,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtF,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC7E,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACI,aAAa;QAClB,MAAM,OAAO,GAA4C,EAAE,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACnC,+GAA+G;YAC/G,oIAAoI;YACpI,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC;gBAC/C,UAAU,CAAC,SAAS,KAAK,OAAO;oBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE;oBACxG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAEM,WAAW;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtE,CAAC;IAEO,aAAa,CAAC,UAA+B;QACnD,8GAA8G;QAC9G,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC;QAC1H,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACnG,CAAC;IAEO,MAAM,CAAC,IAAgB;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClG,CAAC;IAEO,OAAO,CAAC,IAAgB;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,UAAU,CAAC;QACxE,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,gBAAgB,CAAC;QACjE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QACrD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,OAAO,WAAW,CAAC;QACnF,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,CAAC;QACxC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,OAAO,CAAC,IAAgB;QAC9B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CACxF,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE;YAChC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;SACxD,CAAC,CACH,CAAC,IAAI,CACJ,KAAK,EAAE,UAAU,EAAE,EAAE;YACnB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1E,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,+BAA+B,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC7B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC5B,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;oBAAE,IAAI,CAAC,KAAK,GAAG,YAAY,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;YACrM,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,UAAU,CAAC;QACpB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;gBACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACzB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,QAAQ,CAAC,IAAgB,EAAE,KAA6B;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU;YAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAClC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC/C,IAAI,CAAC;gBACH,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAU,CAAC,CAAC;gBAC3M,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAgB,EAAE,IAAI,GAAG,IAAI;QAC9C,2FAA2F;QAC3F,8FAA8F;QAC9F,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAEO,SAAS,CAAC,UAA+B;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC;IACnE,CAAC;IAEO,SAAS,CAAC,UAA+B;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACpH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7J,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAA+B,EAAE,KAA6B;QACrF,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACzR,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;CACF"}