@affiant/core 0.1.0-alpha.0

package/dist/gate/pipeline.js

@@ -0,0 +1,515 @@
+/**
+ * The gate pipeline: everything between a tool call and a Docket row, in the order
+ * the protocol fixes.
+ *
+ * **Rules served: GT-1** (the order itself), **GT-3** (runtime substance refusal),
+ * **GT-4** (TTL stamped from the policy result, after the chain; a re-file keeps the
+ * existing deadline), **PV-1** (confidence clamped, merge by confidence then
+ * determinism), **PV-3** (the inference step cannot mint `UserStated`), **AF-1**
+ * (every proposed field present, unknown provenance recorded as `Empty`), **AF-3**
+ * (create carries no previous values; update carries the key on every field),
+ * **AZ-1** (a Standing Order writes its attestation in the same operation as the
+ * filing), **AZ-4** (a requirement this version does not run is filed blocked),
+ * **CV-4** (a declared-uncovered tool's proposal is filed blocked), **SR-4** (the
+ * card names the protocol version it conforms to), **TL-1** (the events).
+ *
+ * ## The order, and why it is this order (GT-1)
+ *
+ * 1. **Turn context** arrives as a parameter. Nothing here reads a global, and the
+ *    accumulators below are function-local, so two conversations interleaved in one
+ *    isolate cannot see each other's fields (GT-2).
+ * 2. **Deterministic interceptors** first, because a value a host can look up is
+ *    better evidence than a value a model can guess, and running them first means the
+ *    merge in step 4 is comparing against something rather than filling a blank.
+ * 3. **One tool-free structured inference** against the *unmodified* turn. One,
+ *    because a second pass over a turn a previous pass has already been told about is
+ *    a model agreeing with itself. Tool-free, because a model that can call tools
+ *    while being asked what a person said can go and find out.
+ * 4. **Merge** (PV-1): higher confidence wins, ties toward the more deterministic
+ *    source, the loser kept in the chain so a card can show a reviewer that the model
+ *    and the system of record disagreed.
+ * 5. **Projection**, then the Affidavit is built (AF-1, AF-3, AF-2).
+ * 6. **Substance refusal** (GT-3) — *before* the policy chain. A proposal that swears
+ *    to nothing must not reach a policy that might approve it, and must not be filed,
+ *    counted or broadcast.
+ * 7. **Policy** (AZ-4, PV-4, GT-5).
+ * 8. **TTL** (GT-4) — *after* the policy, because the deadline is part of what the
+ *    policy decided, and a global default stamped before the chain is the
+ *    non-conformant shape the rule names.
+ * 9. **File** (DK-1), idempotent by entry id.
+ *
+ * ## Entry ids are derived, not minted
+ *
+ * The id is a SHA-256 over the tenant, the conversation, the tool name and the
+ * canonical form of the operation and its arguments, laid out as a UUID. So a retry
+ * of the same call in the same conversation is the *same* entry: `store.file` returns
+ * the row that is already there, with its **existing** `expiresAt` (GT-4), and the
+ * card the model gets back is the card a reviewer is already looking at. A random id
+ * would file a second row for a retried call and start a second clock, which is the
+ * shape GT-4 names as wrong.
+ *
+ * A resubmission adds the id of the entry it supersedes to that material, so it is a
+ * different entry from the one it replaces (DK-1) and resubmitting the same expired
+ * entry twice is still one row.
+ *
+ * @packageDocumentation
+ */
+import { newEntry } from "../docket/entry.js";
+import { instantMs } from "../docket/expiry.js";
+import { AffiantError } from "../errors.js";
+import { buildAffidavit, isJsonValue, presentationToWire, toWire } from "../model/affidavit.js";
+import { canonicalJson, sha256Hex } from "../model/canonical.js";
+import { chainOf, merge, mintConversation, mintInferred, mintTag } from "../model/provenance.js";
+import { coverageRefusedMarker } from "./coverage.js";
+import { evaluatePolicies } from "./policy.js";
+/**
+ * Run steps 2 through 9 for `proposal` in `ctx` and return the filed entry with its
+ * card.
+ *
+ * @throws AffiantError `"substance-refused"` when the proposal swears to nothing
+ *         (GT-3). Nothing is filed, nothing is broadcast, and the refusal is on the
+ *         telemetry port before the throw.
+ * @throws RangeError when a port hands back something that is not a JSON value, or
+ *         an interceptor claims a field the operation does not propose. Neither is a
+ *         refusal the gate hands back to a model: they are host programming errors,
+ *         and an `AffiantError` code would invite a host to catch and continue.
+ */
+export async function runPipeline(proposal, ctx, deps) {
+    const now = deps.clock.now();
+    const op = proposal.operation;
+    const proposed = new Set(op.fields);
+    const schemaByName = new Map((proposal.schema?.fields ?? []).map((entry) => [entry.name, entry]));
+    // Function-local, so nothing survives the call and nothing is shared between two
+    // interleaved conversations (GT-2).
+    const states = new Map();
+    /** Admit a tag and its value, merging by PV-1 and keeping the loser in the chain. */
+    const admit = (name, tag, value) => {
+        const state = states.get(name);
+        if (state === undefined) {
+            states.set(name, { chain: chainOf(tag), value });
+            return;
+        }
+        const chain = merge(state.chain, tag);
+        // `merge` returns the winner as `current`; identity tells us whose value is now
+        // in force without re-deciding the contest here.
+        states.set(name, { chain, value: chain.current === tag ? value : state.value });
+    };
+    if (proposal.preparedFields === null) {
+        // ---- step 2: deterministic interceptors (PV-2) -------------------------
+        for (const interceptor of deps.interceptors) {
+            const produced = await interceptor.resolve(op, ctx);
+            for (const [name, intercepted] of Object.entries(produced)) {
+                if (!proposed.has(name)) {
+                    throw new RangeError(`AF-1: interceptor ${JSON.stringify(interceptor.name)} resolved field ` +
+                        `${JSON.stringify(name)}, which operation ${op.kind} on ${op.entityType} does not ` +
+                        `propose; a field the operation does not propose is absent from the Affidavit`);
+                }
+                // `InterceptedField.source` is `"External" | "Computed"`, so PV-3's other
+                // half — a host resolver cannot claim the person said it — is a type, not a
+                // check. A binding is required by the same type (PV-2).
+                admit(name, mintTag({
+                    source: intercepted.source,
+                    confidence: intercepted.confidence,
+                    at: now,
+                    note: intercepted.evidence,
+                    binding: intercepted.binding,
+                }), requireJsonValue(intercepted.value, `interceptor ${interceptor.name} field ${name}`));
+            }
+        }
+        // ---- step 3: one tool-free structured inference; step 4: merge ---------
+        if (proposal.schema !== null) {
+            const inferred = await deps.inference.infer(ctx.turn, proposal.schema);
+            for (const [name, structured] of Object.entries(inferred.fields)) {
+                // A model naming a field the operation does not propose is the model being
+                // a model, not the host being wrong: the extra field is dropped, and AF-1
+                // still holds because the Affidavit is built from `op.fields`.
+                if (!proposed.has(name))
+                    continue;
+                const value = requireJsonValue(structured.value, `inferred field ${name}`);
+                // PV-3: `mintConversation` and `mintInferred` are the only two mints reachable
+                // from here, and neither can name `UserStated` — the parameter type forbids it
+                // and the runtime guard in `mintInference` catches an untyped caller.
+                const tag = structured.presence === "literal"
+                    ? mintConversation({
+                        confidence: structured.confidence,
+                        at: now,
+                        note: `Literally present in the turn: ${name}`,
+                        binding: await utteranceSpanBinding(ctx.turn.utterance, structured.utteranceSpan),
+                    })
+                    : mintInferred({
+                        confidence: structured.confidence,
+                        at: now,
+                        note: `Inferred from the turn: ${name}`,
+                    });
+                admit(name, tag, value);
+            }
+        }
+    }
+    else {
+        for (const prepared of proposal.preparedFields) {
+            if (!proposed.has(prepared.name)) {
+                throw new RangeError(`AF-1: prepared field ${JSON.stringify(prepared.name)} is not proposed by the ` +
+                    `operation; a field the operation does not propose is absent from the Affidavit`);
+            }
+            if (prepared.provenance !== undefined) {
+                states.set(prepared.name, { chain: prepared.provenance, value: prepared.value });
+            }
+        }
+    }
+    // ---- step 5: projection, then the Affidavit (AF-1, AF-3, AF-2) -----------
+    // The port is consulted for an update only: AF-3 says a create carries
+    // `previousValue: null` on every field, and there is nothing for a host to look up
+    // for an entity that does not exist yet.
+    const previous = op.kind === "update" ? ((await deps.projection.previousValues(op, ctx)) ?? {}) : {};
+    const preparedByName = new Map((proposal.preparedFields ?? []).map((prepared) => [prepared.name, prepared]));
+    const inputs = op.fields.map((name) => {
+        const state = states.get(name);
+        const prepared = preparedByName.get(name);
+        const schemaEntry = schemaByName.get(name);
+        const previousValue = op.kind === "update"
+            ? requireJsonValue(previous[name] ?? null, `previous value of ${name}`)
+            : null;
+        return {
+            name,
+            kind: prepared?.kind ?? schemaEntry?.kind ?? "text",
+            value: state?.value ?? prepared?.value ?? null,
+            previousValue,
+            isMandatory: prepared?.isMandatory ?? schemaEntry?.required ?? false,
+            // Absent, not `undefined`: `buildAffidavit` reads the absence as "provenance
+            // unknown" and writes an `Empty` tag (AF-1).
+            ...(state === undefined ? {} : { provenance: state.chain }),
+        };
+    });
+    const affidavit = buildAffidavit(op, inputs, { createdAt: now });
+    // ---- step 6: runtime substance refusal (GT-3) ----------------------------
+    refuseHollow(affidavit, proposal, ctx, deps, now);
+    // ---- step 7: the policy chain (AZ-4, PV-4, GT-5) -------------------------
+    const outcome = await evaluatePolicies(deps.policies, affidavit, ctx, {
+        riskScorer: deps.riskScorer,
+        telemetry: deps.telemetry,
+        now,
+    });
+    // ---- step 8: TTL, from the policy result (GT-4) --------------------------
+    const ttlMs = outcome.ttlMs ?? deps.defaultTtlMs;
+    const expiresAt = new Date(instantMs(now, "clock.now()") + ttlMs).toISOString();
+    // ---- step 9: file (DK-1, AZ-1, AZ-4, CV-4) ------------------------------
+    const uncovered = deps.coverage.lookup(proposal.toolName);
+    const blocked = blockedMarker(proposal.toolName, uncovered, outcome.requirement);
+    // A blocked entry is never auto-approved: AZ-4 says a level the implementation does
+    // not run is filed `pending` and refuses every decision, and CV-4 says the same of a
+    // tool the host cannot cover. Both are a move *toward* a person, which is the
+    // direction AZ-4 permits.
+    const fires = outcome.requirement === "StandingOrder" && blocked === null;
+    const entryId = await deriveEntryId(ctx, proposal);
+    if (uncovered !== null) {
+        deps.telemetry.emit({
+            key: "coverage.refused",
+            at: now,
+            attributes: {
+                "gen_ai.tool.name": proposal.toolName,
+                "coverage.category": uncovered,
+                phase: "proposal",
+            },
+        });
+    }
+    const attestation = fires && outcome.policy !== null
+        ? {
+            by: {
+                kind: "standing-order",
+                policyId: outcome.policy.id,
+                version: outcome.policy.version,
+            },
+            at: now,
+            entryId,
+        }
+        : null;
+    const init = {
+        entryId,
+        tenantId: ctx.tenantId,
+        conversationId: ctx.conversationId,
+        channel: ctx.channel,
+        // On the row so a resubmission can re-run the coverage lookup against the tool
+        // that actually proposed the write (CV-4), and so an audit can name it.
+        toolName: proposal.toolName,
+        affidavit,
+        requirement: outcome.requirement,
+        filedAt: now,
+        expiresAt,
+        // DK-1: a resubmission names what it replaces on the way in. The successor link
+        // is written on the *other* row, by `resubmit`, after this filing succeeds.
+        ...(proposal.supersedes === null ? {} : { supersedes: proposal.supersedes }),
+        // A Standing Order writes status, execution outcome and attestation in the same
+        // operation as the filing (AZ-1) — never a file followed by an approve, which
+        // would leave a window in which an approved write had no attestation.
+        ...(attestation === null
+            ? {}
+            : { status: "approved", execution: "unexecuted", attestation }),
+        ...(blocked === null ? {} : { blocked }),
+    };
+    const { entry, created } = await deps.store.file(newEntry(init));
+    if (fires && outcome.policy !== null) {
+        deps.telemetry.emit({
+            key: "standing-order.fired",
+            at: now,
+            attributes: {
+                "policy.id": outcome.policy.id,
+                "policy.version": outcome.policy.version,
+                "entry.id": entry.entryId,
+                "risk.score": outcome.riskScore,
+            },
+        });
+    }
+    deps.telemetry.emit({
+        key: "affidavit.filed",
+        at: now,
+        attributes: {
+            "gen_ai.tool.name": proposal.toolName,
+            "gen_ai.conversation.id": ctx.conversationId,
+            "entry.id": entry.entryId,
+            "docket.requirement": entry.requirement,
+            "docket.status": entry.status,
+            "affidavit.field_count": entry.affidavit.fields.length,
+            created,
+        },
+    });
+    return { entry, created, card: evidenceCard(entry, proposal, outcome) };
+}
+// ---------------------------------------------------------------------------
+// Step 6 — substance (GT-3)
+// ---------------------------------------------------------------------------
+/**
+ * Refuse a proposal that swears to nothing: no field carrying provenance other than
+ * `Empty`, or a non-empty value sitting under an `Empty` tag (GT-3).
+ *
+ * The hollow case is checked first because it is the more specific diagnosis — an
+ * all-`Empty` Affidavit with values in it satisfies both descriptions, and "you filled
+ * in a value and told me nothing about where it came from" is the more useful thing to
+ * say.
+ *
+ * A value counts as empty when it is `null` or a string that is blank. `0` and `false`
+ * are values somebody meant, and a field carrying one under an `Empty` tag is exactly
+ * the hollow shape the rule is about.
+ */
+function refuseHollow(affidavit, proposal, ctx, deps, now) {
+    const hollow = affidavit.fields.find((field) => field.provenance.current.source === "Empty" && !isEmptyValue(field.value));
+    const reason = hollow !== undefined
+        ? `field ${JSON.stringify(hollow.name)} carries a value with Empty provenance`
+        : affidavit.fields.every((field) => field.provenance.current.source === "Empty")
+            ? "no proposed field carries provenance other than Empty"
+            : null;
+    if (reason === null)
+        return;
+    deps.telemetry.emit({
+        key: "affidavit.refused.substance",
+        at: now,
+        attributes: {
+            "gen_ai.tool.name": proposal.toolName,
+            "gen_ai.conversation.id": ctx.conversationId,
+            "affidavit.field_count": affidavit.fields.length,
+            reason,
+        },
+    });
+    throw new AffiantError("substance-refused", `GT-3: this proposal swears to nothing — ${reason}. It is not filed, not counted and ` +
+        `not broadcast.`, { toolName: proposal.toolName, reason, entityType: affidavit.entityType });
+}
+/** Whether `value` is the absence of a value: `null`, or a string with nothing in it. */
+function isEmptyValue(value) {
+    if (value === null)
+        return true;
+    return typeof value === "string" && value.trim() === "";
+}
+// ---------------------------------------------------------------------------
+// Step 9 — the row and the card
+// ---------------------------------------------------------------------------
+/**
+ * The AZ-4 marker the entry is filed with, or `null` when it can be decided.
+ *
+ * Coverage comes first: a tool the host cannot intercept is the more fundamental
+ * problem, and its category is the more useful thing on the row.
+ */
+function blockedMarker(toolName, uncovered, requirement) {
+    if (uncovered !== null)
+        return coverageRefusedMarker(toolName, uncovered);
+    if (requirement === "MultiParty" || requirement === "ReferralRequired") {
+        // Recorded verbatim (AZ-4): the row says what was asked for, and no code path
+        // turns it into the weaker requirement this version does know how to run.
+        return { code: "requirement-not-implemented", level: requirement };
+    }
+    return null;
+}
+/** The card a host delivers, built from the **stored** entry (GT-4) and the wire carry. */
+function evidenceCard(entry, proposal, outcome) {
+    // AF-2's three numbers come off the stored Affidavit, so the card and the record
+    // can never disagree about them: all three ride the wire Affidavit, and two of
+    // them are repeated on the envelope for the one version the superseded wire's
+    // consumers are still reading.
+    const sworn = entry.amendedAffidavit ?? entry.affidavit;
+    const carry = wireCarry(entry, proposal, outcome);
+    return {
+        protocolVersion: entry.protocolVersion,
+        docketId: entry.entryId,
+        // The record's own version, not the row's envelope tag (SR-4). SR-1's canonical
+        // form is over the Affidavit as the schema defines it, `protocolVersion`
+        // included, so re-stamping the record on the way onto the card would produce a
+        // document whose hash is not the row's `canonicalHash` — the substitution the
+        // form exists to make impossible. The two are the same value on every path a
+        // host takes; they differ only where a caller pinned the row to another tag,
+        // and then it is the envelope that carries the pin, not the sworn record.
+        affidavit: toWire(sworn),
+        requiredBy: entry.expiresAt,
+        priorAmendments: proposal.priorAmendments ?? entry.preservedAmendments?.amendments ?? null,
+        populatedConfidence: sworn.populatedConfidence,
+        emptyFieldCount: sworn.emptyFieldCount,
+        blocked: entry.blocked,
+        ...presentationToWire(carry),
+        requiresConfirmation: carry.requiresConfirmation,
+    };
+}
+/**
+ * The presentation the core does not own: the sentences a reviewer should see,
+ * whether a person must confirm, the reviewer surface's per-field rendering hints,
+ * and the host's own verb for the operation.
+ */
+function wireCarry(entry, proposal, outcome) {
+    const warnings = [];
+    if (outcome.reason !== null)
+        warnings.push(outcome.reason);
+    if (entry.blocked?.code === "coverage-refused") {
+        warnings.push(`CV-4: ${JSON.stringify(proposal.toolName)} is declared uncovered ` +
+            `(${String(entry.blocked.category)}); this proposal is on the record and cannot be ` +
+            `approved through the gate.`);
+    }
+    if (entry.blocked?.code === "requirement-not-implemented") {
+        warnings.push(`AZ-4: ${String(entry.blocked.level)} approval is not implemented in this version; the ` +
+            `entry is blocked and no decision on it will be accepted.`);
+    }
+    // One entry per field the host declared something about, naming a field the
+    // Affidavit carries — a hint for a field the record does not carry would render
+    // a control over nothing. A field the host said nothing about gets no entry at
+    // all, rather than an entry full of nulls: absence is how the wire spells "no
+    // hint, render from the field's own kind".
+    const presentation = [];
+    const schemaByName = new Map((proposal.schema?.fields ?? []).map((entry_) => [entry_.name, entry_]));
+    for (const field of (entry.amendedAffidavit ?? entry.affidavit).fields) {
+        const declared = schemaByName.get(field.name);
+        const allowedValues = declared?.allowedValues ?? null;
+        // Carried from the host's field schema, never invented here: the reviewer
+        // surface renders it as an input constraint and the gate validates nothing
+        // against it.
+        const pattern = declared?.pattern ?? null;
+        if (allowedValues === null && pattern === null)
+            continue;
+        presentation.push({
+            name: field.name,
+            kind: field.kind,
+            ...(allowedValues === null ? {} : { allowedValues }),
+            ...(pattern === null ? {} : { pattern }),
+        });
+    }
+    return {
+        warnings,
+        // A blocked entry sits in `pending` and refuses every decision (AZ-4, CV-4), so
+        // it is not a card a person can confirm. Saying `true` here would offer a
+        // reviewer surface an approve button that cannot work, on the same card that
+        // carries a warning saying no decision will be accepted.
+        requiresConfirmation: entry.status === "pending" && entry.blocked === null,
+        presentation,
+        // The host's word for what it is doing, carried onto the card so a reviewer
+        // surface can head the card with the verb a person recognises rather than with
+        // the protocol's two-valued shape. It comes from this filing, like the hints
+        // beside it — a resubmission builds its proposal from the row, which swears to
+        // the evidence and not to how the host labels it, so a resubmitted card carries
+        // neither until the host supplies them again.
+        hostOperation: proposal.operationLabel,
+    };
+}
+// ---------------------------------------------------------------------------
+// Entry ids
+// ---------------------------------------------------------------------------
+/**
+ * The entry id for this proposal: a SHA-256 over the tenant, the conversation, the
+ * tool and the canonical form of the operation and its arguments, laid out as a UUID.
+ *
+ * The layout sets the version nibble to `8` and the variant bits to `10`, which RFC
+ * 9562 reserves for exactly this — a UUID whose bits are a hash an application chose.
+ * The shape matters because `docketId` is a UUID string on the wire; the determinism
+ * matters because it is what makes a retried tool call a replay rather than a second
+ * review (GT-4, DK-1).
+ *
+ * @throws TypeError if `args` contains something with no canonical form — a function,
+ *         a symbol, a cycle. Tool arguments are JSON; anything else is a caller bug.
+ */
+export async function deriveEntryId(ctx, proposal) {
+    const material = canonicalJson({
+        tenantId: ctx.tenantId,
+        conversationId: ctx.conversationId,
+        toolName: proposal.toolName,
+        operation: proposal.operation,
+        args: proposal.args ?? null,
+        // Only when there is one, so a first filing's id is exactly what it was before
+        // resubmission existed, and a retry of the original call is still a replay.
+        ...(proposal.supersedes === null ? {} : { supersedes: proposal.supersedes }),
+    });
+    const digest = await sha256Hex(new TextEncoder().encode(material));
+    return uuidFromDigest(digest);
+}
+/** Lay 128 bits of `digest` out as a UUID with version 8 and the RFC 9562 variant. */
+function uuidFromDigest(digest) {
+    const nibbles = [...digest.slice(0, 32)];
+    nibbles[12] = "8";
+    nibbles[16] = "89ab"[Number.parseInt(nibbles[16] ?? "0", 16) % 4] ?? "8";
+    const hex = nibbles.join("");
+    return [
+        hex.slice(0, 8),
+        hex.slice(8, 12),
+        hex.slice(12, 16),
+        hex.slice(16, 20),
+        hex.slice(20, 32),
+    ].join("-");
+}
+// ---------------------------------------------------------------------------
+// Bindings and values
+// ---------------------------------------------------------------------------
+/**
+ * The `utterance-span` binding for a value the port reported as literally present
+ * (PV-2), or `null` when there is no span or the span does not fit the turn.
+ *
+ * The hash is a SHA-256 of the span's own text, so an auditor holding the turn can
+ * re-derive it and see that the pointer still points where it did. A span that runs
+ * past the end of the utterance, or reads backwards, is not evidence: the binding is
+ * dropped and the tag stays `Conversation` with nothing behind it, which PV-4 then
+ * treats as unbound — the honest outcome.
+ */
+async function utteranceSpanBinding(utterance, span) {
+    if (span === null)
+        return null;
+    if (!Number.isInteger(span.start) || !Number.isInteger(span.end))
+        return null;
+    if (span.start < 0 || span.end < span.start || span.end > utterance.length)
+        return null;
+    const text = utterance.slice(span.start, span.end);
+    return {
+        kind: "utterance-span",
+        ref: {
+            offset: span.start,
+            length: span.end - span.start,
+            hash: await sha256Hex(new TextEncoder().encode(text)),
+        },
+    };
+}
+/**
+ * `value` as a JSON value.
+ *
+ * @throws RangeError when a port hands back something with no JSON form. A port
+ *         contract violation is a host programming error rather than a refusal, and
+ *         letting it through would put an unserializable value on a record whose
+ *         whole purpose is to be read back later.
+ */
+function requireJsonValue(value, where) {
+    if (!isJsonValue(value)) {
+        throw new RangeError(`${where} is not a JSON value (${typeof value}); every value on an Affidavit must ` +
+            `survive serialization`);
+    }
+    return value;
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/gate/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/gate/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAYH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQ5C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAEhG,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAejG,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAwN/C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAA0B,EAC1B,GAAgB,EAChB,IAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CACpE,CAAC;IAEF,iFAAiF;IACjF,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE7C,qFAAqF;IACrF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,GAAkB,EAAE,KAAgB,EAAQ,EAAE;QACzE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,gFAAgF;QAChF,iDAAiD;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACrC,2EAA2E;QAC3E,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,UAAU,CAClB,qBAAqB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB;wBACrE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,UAAU,YAAY;wBACnF,8EAA8E,CACjF,CAAC;gBACJ,CAAC;gBACD,0EAA0E;gBAC1E,4EAA4E;gBAC5E,wDAAwD;gBACxD,KAAK,CACH,IAAI,EACJ,OAAO,CAAC;oBACN,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,EAAE,EAAE,GAAG;oBACP,IAAI,EAAE,WAAW,CAAC,QAAQ;oBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;iBAC7B,CAAC,EACF,gBAAgB,CAAC,WAAW,CAAC,KAAK,EAAE,eAAe,WAAW,CAAC,IAAI,UAAU,IAAI,EAAE,CAAC,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvE,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,2EAA2E;gBAC3E,0EAA0E;gBAC1E,+DAA+D;gBAC/D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;gBAC3E,+EAA+E;gBAC/E,+EAA+E;gBAC/E,sEAAsE;gBACtE,MAAM,GAAG,GACP,UAAU,CAAC,QAAQ,KAAK,SAAS;oBAC/B,CAAC,CAAC,gBAAgB,CAAC;wBACf,UAAU,EAAE,UAAU,CAAC,UAAU;wBACjC,EAAE,EAAE,GAAG;wBACP,IAAI,EAAE,kCAAkC,IAAI,EAAE;wBAC9C,OAAO,EAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC;qBAClF,CAAC;oBACJ,CAAC,CAAC,YAAY,CAAC;wBACX,UAAU,EAAE,UAAU,CAAC,UAAU;wBACjC,EAAE,EAAE,GAAG;wBACP,IAAI,EAAE,2BAA2B,IAAI,EAAE;qBACxC,CAAC,CAAC;gBACT,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,UAAU,CAClB,wBAAwB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B;oBAC7E,gFAAgF,CACnF,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,uEAAuE;IACvE,mFAAmF;IACnF,yCAAyC;IACzC,MAAM,QAAQ,GACZ,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAC7E,CAAC;IAEF,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAuB,EAAE;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,aAAa,GACjB,EAAE,CAAC,IAAI,KAAK,QAAQ;YAClB,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,qBAAqB,IAAI,EAAE,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC;QACX,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,WAAW,EAAE,IAAI,IAAI,MAAM;YACnD,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,QAAQ,EAAE,KAAK,IAAI,IAAI;YAC9C,aAAa;YACb,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,WAAW,EAAE,QAAQ,IAAI,KAAK;YACpE,6EAA6E;YAC7E,6CAA6C;YAC7C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjE,6EAA6E;IAC7E,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAElD,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;QACpE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG;KACJ,CAAC,CAAC;IAEH,6EAA6E;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEhF,4EAA4E;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACjF,oFAAoF;IACpF,qFAAqF;IACrF,8EAA8E;IAC9E,0BAA0B;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,KAAK,eAAe,IAAI,OAAO,KAAK,IAAI,CAAC;IAC1E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEnD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,GAAG,EAAE,kBAAkB;YACvB,EAAE,EAAE,GAAG;YACP,UAAU,EAAE;gBACV,kBAAkB,EAAE,QAAQ,CAAC,QAAQ;gBACrC,mBAAmB,EAAE,SAAS;gBAC9B,KAAK,EAAE,UAAU;aAClB;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GACf,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;QAC9B,CAAC,CAAC;YACE,EAAE,EAAE;gBACF,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;aAChC;YACD,EAAE,EAAE,GAAG;YACP,OAAO;SACR;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,IAAI,GAAiB;QACzB,OAAO;QACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,+EAA+E;QAC/E,wEAAwE;QACxE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS;QACT,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,GAAG;QACZ,SAAS;QACT,gFAAgF;QAChF,4EAA4E;QAC5E,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5E,gFAAgF;QAChF,8EAA8E;QAC9E,sEAAsE;QACtE,GAAG,CAAC,WAAW,KAAK,IAAI;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,SAAS,EAAE,YAAqB,EAAE,WAAW,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KACzC,CAAC;IAEF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjE,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,GAAG,EAAE,sBAAsB;YAC3B,EAAE,EAAE,GAAG;YACP,UAAU,EAAE;gBACV,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC9B,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBACxC,UAAU,EAAE,KAAK,CAAC,OAAO;gBACzB,YAAY,EAAE,OAAO,CAAC,SAAS;aAChC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAClB,GAAG,EAAE,iBAAiB;QACtB,EAAE,EAAE,GAAG;QACP,UAAU,EAAE;YACV,kBAAkB,EAAE,QAAQ,CAAC,QAAQ;YACrC,wBAAwB,EAAE,GAAG,CAAC,cAAc;YAC5C,UAAU,EAAE,KAAK,CAAC,OAAO;YACzB,oBAAoB,EAAE,KAAK,CAAC,WAAW;YACvC,eAAe,EAAE,KAAK,CAAC,MAAM;YAC7B,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM;YACtD,OAAO;SACR;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CACnB,SAAoB,EACpB,QAA0B,EAC1B,GAAgB,EAChB,IAAkB,EAClB,GAAW;IAEX,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CACrF,CAAC;IACF,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC;QAC9E,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC;YAC9E,CAAC,CAAC,uDAAuD;YACzD,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAE5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAClB,GAAG,EAAE,6BAA6B;QAClC,EAAE,EAAE,GAAG;QACP,UAAU,EAAE;YACV,kBAAkB,EAAE,QAAQ,CAAC,QAAQ;YACrC,wBAAwB,EAAE,GAAG,CAAC,cAAc;YAC5C,uBAAuB,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM;YAChD,MAAM;SACP;KACF,CAAC,CAAC;IAEH,MAAM,IAAI,YAAY,CACpB,mBAAmB,EACnB,2CAA2C,MAAM,qCAAqC;QACpF,gBAAgB,EAClB,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAC1E,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,YAAY,CAAC,KAAgB;IACpC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,aAAa,CACpB,QAAgB,EAChB,SAAiD,EACjD,WAA4B;IAE5B,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1E,IAAI,WAAW,KAAK,YAAY,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvE,8EAA8E;QAC9E,0EAA0E;QAC1E,OAAO,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY,CACnB,KAAkB,EAClB,QAA0B,EAC1B,OAAsB;IAEtB,iFAAiF;IACjF,+EAA+E;IAC/E,8EAA8E;IAC9E,+BAA+B;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,SAAS,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,gFAAgF;QAChF,yEAAyE;QACzE,+EAA+E;QAC/E,8EAA8E;QAC9E,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;QACxB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,KAAK,CAAC,mBAAmB,EAAE,UAAU,IAAI,IAAI;QAC1F,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,kBAAkB,CAAC,KAAK,CAAC;QAC5B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAChB,KAAkB,EAClB,QAA0B,EAC1B,OAAsB;IAEtB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAAyB;YACjE,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kDAAkD;YACpF,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CACX,SAAS,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oDAAoD;YACtF,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,2CAA2C;IAC3C,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACvE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,QAAQ,EAAE,aAAa,IAAI,IAAI,CAAC;QACtD,0EAA0E;QAC1E,2EAA2E;QAC3E,cAAc;QACd,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC;QAC1C,IAAI,aAAa,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QACzD,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACpD,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ;QACR,gFAAgF;QAChF,0EAA0E;QAC1E,6EAA6E;QAC7E,yDAAyD;QACzD,oBAAoB,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAC1E,YAAY;QACZ,4EAA4E;QAC5E,+EAA+E;QAC/E,6EAA6E;QAC7E,+EAA+E;QAC/E,gFAAgF;QAChF,8CAA8C;QAC9C,aAAa,EAAE,QAAQ,CAAC,cAAc;KACvC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAgB,EAChB,QAAkF;IAElF,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI;QAC3B,+EAA+E;QAC/E,4EAA4E;QAC5E,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;KAC7E,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KAClB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,KAAK,UAAU,oBAAoB,CACjC,SAAiB,EACjB,IAA0B;IAE1B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE;YACH,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,MAAM,EAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK;YAC7B,IAAI,EAAE,MAAM,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,GAAG,KAAK,yBAAyB,OAAO,KAAK,sCAAsC;YACjF,uBAAuB,CAC1B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}