@allocator-one/rcl 4.4.19

package/dist/telemetry/attested-retry.d.ts

@@ -0,0 +1,79 @@
+/**
+ * The bounded in-workflow recovery for an attested envelope whose POST may
+ * have reached Harness after its acknowledgement was lost. Callers supply
+ * only the original serialized payload: this module never creates a run,
+ * rebuilds an envelope, or invokes a reviewer.
+ */
+export declare const ATTESTED_DELIVERY_MAX_ATTEMPTS = 3;
+export declare const ATTESTED_DELIVERY_DEADLINE_MS = 20000;
+export declare const ATTESTED_DELIVERY_RETRY_PAUSE_MS = 250;
+/** Parse a UTC expiry in the backend's second precision or exact milliseconds. */
+export declare function parseAttestedExpiry(value: string): number | undefined;
+export type DeliveryAttempt<TRecorded = undefined, TDisabled = never> = {
+    kind: 'recorded';
+    value?: TRecorded;
+} | {
+    kind: 'unavailable';
+} | {
+    kind: 'conflict';
+} | {
+    kind: 'disabled';
+    value: TDisabled;
+} | {
+    kind: 'rejected';
+};
+/** A receipt read is the authorization boundary for an idempotent replay. */
+export type ReceiptProbe<T = undefined> = {
+    kind: 'recorded';
+    value?: T;
+} | {
+    kind: 'absent';
+} | {
+    kind: 'unavailable';
+} | {
+    kind: 'rejected';
+};
+interface RecoveryOutcomeCommon {
+    attempts: number;
+    recovered: boolean;
+}
+type TerminalRecoveryKind = 'conflict' | 'rejected' | 'receipt_unavailable' | 'receipt_rejected' | 'operation_failed' | 'expired' | 'cancelled' | 'deadline_exceeded' | 'attempts_exhausted';
+type RecordedRecoveryOutcome<TRecorded> = RecoveryOutcomeCommon & {
+    kind: 'recorded';
+    value?: TRecorded;
+};
+type DisabledRecoveryOutcome<TDisabled> = RecoveryOutcomeCommon & {
+    kind: 'disabled';
+    value: TDisabled;
+};
+type TerminalRecoveryOutcome = RecoveryOutcomeCommon & {
+    kind: TerminalRecoveryKind;
+};
+export type AttestedRecoveryOutcome<TRecorded = undefined, TDisabled = never> = RecordedRecoveryOutcome<TRecorded> | DisabledRecoveryOutcome<TDisabled> | TerminalRecoveryOutcome;
+export interface AttestedRecoveryOptions<TRecorded = undefined, TDisabled = never> {
+    runId: string;
+    /** The pre-serialized original envelope. It is passed through byte-for-byte. */
+    payload: string;
+    expiresAt: string;
+    post: (payload: string, signal: AbortSignal) => Promise<DeliveryAttempt<TRecorded, TDisabled>>;
+    /** Must read only the credential-bound run and validate a matching receipt. */
+    receipt: (runId: string, signal: AbortSignal) => Promise<ReceiptProbe<TRecorded>>;
+    /** Epoch clock used only for the credential's absolute expiry. */
+    now?: () => number;
+    /** Monotonic clock used for the finite elapsed delivery budget. */
+    monotonicNow?: () => number;
+    sleep?: (ms: number, signal: AbortSignal) => Promise<void>;
+    signal?: AbortSignal;
+    maxAttempts?: number;
+    deadlineMs?: number;
+    /** A POST already became unavailable; prove absence before another POST. */
+    receiptFirst?: boolean;
+    /** Number of already-issued POSTs that count against the finite budget. */
+    initialAttempts?: number;
+}
+/**
+ * A finite receipt-first retry loop. A transient POST is never replayed until
+ * a successful own-run receipt lookup proves the server has not recorded it.
+ */
+export declare function recoverAttestedDelivery<TRecorded = undefined, TDisabled = never>(options: AttestedRecoveryOptions<TRecorded, TDisabled>): Promise<AttestedRecoveryOutcome<TRecorded, TDisabled>>;
+export {};

package/dist/telemetry/attested-retry.js

@@ -0,0 +1,195 @@
+/**
+ * The bounded in-workflow recovery for an attested envelope whose POST may
+ * have reached Harness after its acknowledgement was lost. Callers supply
+ * only the original serialized payload: this module never creates a run,
+ * rebuilds an envelope, or invokes a reviewer.
+ */
+import { abortSignalWithTimeout } from './abort-signal.js';
+export const ATTESTED_DELIVERY_MAX_ATTEMPTS = 3;
+export const ATTESTED_DELIVERY_DEADLINE_MS = 20_000;
+export const ATTESTED_DELIVERY_RETRY_PAUSE_MS = 250;
+/** Parse a UTC expiry in the backend's second precision or exact milliseconds. */
+export function parseAttestedExpiry(value) {
+    const normalized = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/.test(value)
+        ? value.replace(/Z$/, '.000Z') : value;
+    const parsed = Date.parse(normalized);
+    return /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(normalized) &&
+        Number.isFinite(parsed) && new Date(parsed).toISOString() === normalized ? parsed : undefined;
+}
+/**
+ * A finite receipt-first retry loop. A transient POST is never replayed until
+ * a successful own-run receipt lookup proves the server has not recorded it.
+ */
+export async function recoverAttestedDelivery(options) {
+    const now = options.now ?? Date.now;
+    const monotonicNow = options.monotonicNow ?? (() => performance.now());
+    const sleep = options.sleep ?? abortableSleep;
+    const maxAttempts = cappedOverride(options.maxAttempts, ATTESTED_DELIVERY_MAX_ATTEMPTS, 'maxAttempts', 1);
+    const deadlineMs = cappedOverride(options.deadlineMs, ATTESTED_DELIVERY_DEADLINE_MS, 'deadlineMs', 1);
+    const expiresAt = parseAttestedExpiry(options.expiresAt);
+    if (expiresAt === undefined)
+        throw new RangeError('expiresAt must be a valid ISO timestamp');
+    const startedAt = monotonicNow();
+    const expiresInMs = expiresAt - now();
+    const initialAttempts = options.initialAttempts ?? (options.receiptFirst ? 1 : 0);
+    let attempts = Math.min(validOverride(initialAttempts, 'initialAttempts', 0), maxAttempts);
+    const boundary = () => {
+        if (options.signal?.aborted)
+            return { stopped: terminalOutcome('cancelled', attempts) };
+        const current = now();
+        const elapsedMs = monotonicNow() - startedAt;
+        if (current >= expiresAt || elapsedMs >= expiresInMs)
+            return { stopped: terminalOutcome('expired', attempts) };
+        if (elapsedMs >= deadlineMs)
+            return { stopped: terminalOutcome('deadline_exceeded', attempts) };
+        const remainingMs = Math.min(deadlineMs - elapsedMs, expiresInMs - elapsedMs);
+        if (remainingMs <= 0)
+            return { stopped: terminalOutcome(expiresInMs <= deadlineMs ? 'expired' : 'deadline_exceeded', attempts) };
+        return { remainingMs };
+    };
+    const stopped = () => {
+        const active = boundary();
+        return 'stopped' in active ? active.stopped : undefined;
+    };
+    const failed = (error) => error instanceof ActiveOperationBoundaryError && error.kind === 'deadline_exceeded' &&
+        (now() >= expiresAt || monotonicNow() - startedAt >= expiresInMs)
+        ? terminalOutcome('expired', attempts)
+        : failedOperation(error, attempts);
+    if (options.receiptFirst) {
+        const active = boundary();
+        if ('stopped' in active)
+            return active.stopped;
+        let receipt;
+        try {
+            receipt = await withActiveSignal(options.signal, active.remainingMs, signal => options.receipt(options.runId, signal));
+        }
+        catch (error) {
+            return failed(error);
+        }
+        if (receipt.kind === 'recorded')
+            return recordedOutcome(attempts, true, receipt.value);
+        const afterInitialReceipt = stopped();
+        if (afterInitialReceipt)
+            return afterInitialReceipt;
+        if (receipt.kind === 'unavailable')
+            return terminalOutcome('receipt_unavailable', attempts);
+        if (receipt.kind === 'rejected')
+            return terminalOutcome('receipt_rejected', attempts);
+    }
+    while (attempts < maxAttempts) {
+        const active = boundary();
+        if ('stopped' in active)
+            return active.stopped;
+        attempts++;
+        let posted;
+        try {
+            posted = await withActiveSignal(options.signal, active.remainingMs, signal => options.post(options.payload, signal));
+        }
+        catch (error) {
+            return failed(error);
+        }
+        if (posted.kind === 'recorded')
+            return recordedOutcome(attempts, attempts > 1, posted.value);
+        if (posted.kind === 'conflict')
+            return terminalOutcome('conflict', attempts);
+        if (posted.kind === 'disabled')
+            return disabledOutcome(attempts, posted.value);
+        if (posted.kind === 'rejected')
+            return terminalOutcome('rejected', attempts);
+        const afterPost = stopped();
+        if (afterPost)
+            return afterPost;
+        const receiptActive = boundary();
+        if ('stopped' in receiptActive)
+            return receiptActive.stopped;
+        let receipt;
+        try {
+            receipt = await withActiveSignal(options.signal, receiptActive.remainingMs, signal => options.receipt(options.runId, signal));
+        }
+        catch (error) {
+            return failed(error);
+        }
+        if (receipt.kind === 'recorded')
+            return recordedOutcome(attempts, true, receipt.value);
+        const afterReceipt = stopped();
+        if (afterReceipt)
+            return afterReceipt;
+        if (receipt.kind === 'unavailable')
+            return terminalOutcome('receipt_unavailable', attempts);
+        if (receipt.kind === 'rejected')
+            return terminalOutcome('receipt_rejected', attempts);
+        if (attempts === maxAttempts)
+            break;
+        const beforePause = stopped();
+        if (beforePause)
+            return beforePause;
+        const pauseActive = boundary();
+        if ('stopped' in pauseActive)
+            return pauseActive.stopped;
+        try {
+            await withActiveSignal(options.signal, pauseActive.remainingMs, signal => sleep(ATTESTED_DELIVERY_RETRY_PAUSE_MS, signal));
+        }
+        catch (error) {
+            return failed(error);
+        }
+    }
+    return terminalOutcome('attempts_exhausted', attempts);
+}
+function validOverride(value, field, minimum) {
+    if (value === undefined)
+        return minimum;
+    if (!Number.isSafeInteger(value) || value < minimum)
+        throw new RangeError(`${field} must be a ${minimum === 0 ? 'nonnegative' : 'positive'} safe integer`);
+    return value;
+}
+function cappedOverride(value, ceiling, field, minimum) {
+    return value === undefined ? ceiling : Math.min(validOverride(value, field, minimum), ceiling);
+}
+function recordedOutcome(attempts, recovered, value) {
+    return { kind: 'recorded', attempts, recovered, ...(value === undefined ? {} : { value }) };
+}
+function disabledOutcome(attempts, value) {
+    return { kind: 'disabled', attempts, recovered: false, value };
+}
+function terminalOutcome(kind, attempts) {
+    return { kind, attempts, recovered: false };
+}
+function failedOperation(error, attempts) {
+    return terminalOutcome(error instanceof ActiveOperationBoundaryError ? error.kind : 'operation_failed', attempts);
+}
+class ActiveOperationBoundaryError extends Error {
+    kind;
+    constructor(kind) {
+        super(kind);
+        this.kind = kind;
+    }
+}
+/** Bound one in-flight operation and release its timer/listener when it settles. */
+async function withActiveSignal(parent, remainingMs, operation) {
+    const lease = abortSignalWithTimeout(parent, remainingMs);
+    try {
+        return await operation(lease.signal);
+    }
+    catch (error) {
+        if (lease.signal.aborted && isAbortFailure(error, lease.signal)) {
+            const cancelled = parent?.aborted === true && Object.is(lease.signal.reason, parent.reason);
+            throw new ActiveOperationBoundaryError(cancelled ? 'cancelled' : 'deadline_exceeded');
+        }
+        throw error;
+    }
+    finally {
+        lease.dispose();
+    }
+}
+function isAbortFailure(error, signal) {
+    return Object.is(error, signal.reason) || error instanceof DOMException && error.name === 'AbortError';
+}
+function abortableSleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted)
+            return reject(signal.reason);
+        const timer = setTimeout(resolve, ms);
+        signal.addEventListener('abort', () => { clearTimeout(timer); reject(signal.reason); }, { once: true });
+    });
+}
+//# sourceMappingURL=attested-retry.js.map

package/dist/telemetry/attested-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attested-retry.js","sourceRoot":"","sources":["../../src/telemetry/attested-retry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AACpD,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,UAAU,GAAG,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC;QACrE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,+CAA+C,CAAC,IAAI,CAAC,UAAU,CAAC;QACrE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAClG,CAAC;AA2DD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAsD;IAEtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAC1G,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,6BAA6B,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACtG,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,yCAAyC,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;IACtC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE3F,MAAM,QAAQ,GAAG,GAAmE,EAAE;QACpF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC;QAC7C,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,IAAI,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/G,IAAI,SAAS,IAAI,UAAU;YAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;QAC9E,IAAI,WAAW,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjI,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAwC,EAAE;QACxD,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,OAAO,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE,CACzD,KAAK,YAAY,4BAA4B,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QACjF,CAAC,GAAG,EAAE,IAAI,SAAS,IAAI,YAAY,EAAE,GAAG,SAAS,IAAI,WAAW,CAAC;QACjE,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;QACtC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAEvC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,IAAI,SAAS,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;QAC/C,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EACjE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,mBAAmB,GAAG,OAAO,EAAE,CAAC;QACtC,IAAI,mBAAmB;YAAE,OAAO,mBAAmB,CAAC;QACpD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,eAAe,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,IAAI,SAAS,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;QAE/C,QAAQ,EAAE,CAAC;QACX,IAAI,MAA6C,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAChE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7F,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC;QAC5B,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC;QACjC,IAAI,SAAS,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC;QAC7D,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,WAAW,EACxE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;QAC/B,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,eAAe,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAEtF,IAAI,QAAQ,KAAK,WAAW;YAAE,MAAM;QACpC,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;QAC9B,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QACpC,MAAM,WAAW,GAAG,QAAQ,EAAE,CAAC;QAC/B,IAAI,SAAS,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,WAAW,EAC5D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,KAAa,EAAE,OAAe;IAC9E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,cAAc,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,eAAe,CAAC,CAAC;IAC3J,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB,EAAE,OAAe,EAAE,KAAa,EAAE,OAAe;IAChG,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,eAAe,CAAY,QAAgB,EAAE,SAAkB,EAAE,KAAiB;IACzF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CAAY,QAAgB,EAAE,KAAgB;IACpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,IAA0B,EAAE,QAAgB;IACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,OAAO,eAAe,CAAC,KAAK,YAAY,4BAA4B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AACpH,CAAC;AAED,MAAM,4BAA6B,SAAQ,KAAK;IACzB;IAArB,YAAqB,IAAuC;QAC1D,KAAK,CAAC,IAAI,CAAC,CAAC;QADO,SAAI,GAAJ,IAAI,CAAmC;IAE5D,CAAC;CACF;AAED,oFAAoF;AACpF,KAAK,UAAU,gBAAgB,CAAI,MAA+B,EAAE,WAAmB,EAAE,SAA8C;IACrI,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5F,MAAM,IAAI,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAmB;IACzD,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AACzG,CAAC;AAED,SAAS,cAAc,CAAC,EAAU,EAAE,MAAmB;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/telemetry/attested-reviewer-delivery.d.ts

@@ -0,0 +1,58 @@
+import { type ReviewerArtifact } from '../report/reviewer-artifact.js';
+import type { ReviewerRecoveryPreflight } from '../evidence/reviewer-recovery.js';
+import { type Attestation } from './attest.js';
+import { type ArtifactBytes, type RunEnvelope } from './envelope.js';
+import { type RequestOptions } from './sink.js';
+import type { HarnessCredential } from './credentials.js';
+export interface AttestedReviewerOptions {
+    rclVersion: string;
+    kind: 'original' | 'successor';
+    /** Exact persisted launch/operation binding; a restart never receives a fresh duration. */
+    operationBytes: string;
+    /** Optional stricter absolute deadline; never extends the persisted operation. */
+    deadlineAtMs?: number;
+    fetchImpl?: typeof fetch;
+}
+export interface AttestedReviewerInput {
+    envelope: RunEnvelope;
+    artifacts: ArtifactBytes;
+    artifact: ReviewerArtifact;
+}
+export interface AttestedReviewerReceipt {
+    runId: string;
+    reportJsonVerified: true;
+    /** RunBoundScope has no generic artifact GET. Markdown is verified by its PUT digest receipt only. */
+    markdown: 'not_declared' | 'put_receipt';
+}
+/**
+ * Transient same-workflow private delivery. The caller reopens exact terminal
+ * bytes and the saved operation on restart; no token, outbox or fresh deadline
+ * is persisted here. Server authorization remains opaque and independently
+ * enforced on every request. This class never allocates native/provider work.
+ */
+export declare class AttestedReviewerDelivery {
+    private readonly attestation;
+    private readonly sink;
+    private readonly operation;
+    private readonly operationBytes;
+    private readonly kind;
+    private readonly deadlineAtMs;
+    private readonly expiry;
+    private readonly monotonicEnd;
+    private fresh;
+    private posts;
+    private busy;
+    private envelopeBytes?;
+    constructor(attestation: Attestation, options: AttestedReviewerOptions);
+    /** Match an explicitly injected runtime without disclosing or substituting its credential. */
+    matchesRuntime(credential: HarnessCredential, expiresAt: string | undefined): boolean;
+    /** Original execution capability check; the caller must invoke it before paid work. */
+    checkOriginal(options?: RequestOptions): Promise<void>;
+    /** Signed immediate-parent access only; full retained ancestry is validated independently by the server/caller. */
+    preflight(original: ReviewerRecoveryPreflight, options?: RequestOptions): Promise<void>;
+    /** Own-run receipt before every retry; ordinary PUTs precede private admission, with no generic GET. */
+    deliver(input: AttestedReviewerInput, options?: RequestOptions): Promise<AttestedReviewerReceipt>;
+    private snapshot;
+    private remaining;
+    private within;
+}

package/dist/telemetry/attested-reviewer-delivery.js

@@ -0,0 +1,238 @@
+import { isDeepStrictEqual } from 'node:util';
+import { decodeOriginalLaunch } from '../dispatch/original-launch.js';
+import { decodeRecoveryOperation } from '../dispatch/recovery-operation.js';
+import { decodeCheckpointProof } from '../dispatch/checkpoint.js';
+import { isReviewerArtifact } from '../report/reviewer-artifact.js';
+import { describeReviewerEvidence } from '../report/reviewer-evidence.js';
+import { decodeSupplementalAsync } from '../report/supplemental-async.js';
+import { consumeFreshAttestation, snapshotReviewerAttestation } from './attest.js';
+import { abortSignalWithTimeout } from './abort-signal.js';
+import { ATTESTED_DELIVERY_DEADLINE_MS, ATTESTED_DELIVERY_MAX_ATTEMPTS, parseAttestedExpiry, recoverAttestedDelivery } from './attested-retry.js';
+import { assertReviewerRecoveryReference, assertReviewerRecoverySource } from './reviewer-preflight.js';
+import { validateRunEnvelope } from './envelope-validation.js';
+import { sha256Hex } from './envelope.js';
+import { HarnessSink } from './sink.js';
+function fail(reason) { throw new Error(`attested_reviewer_${reason}`); }
+function accepted(outcome) {
+    if (outcome.kind !== 'ok')
+        fail(outcome.kind === 'unavailable' ? 'unavailable' : 'refused');
+    return outcome.value;
+}
+/**
+ * Transient same-workflow private delivery. The caller reopens exact terminal
+ * bytes and the saved operation on restart; no token, outbox or fresh deadline
+ * is persisted here. Server authorization remains opaque and independently
+ * enforced on every request. This class never allocates native/provider work.
+ */
+export class AttestedReviewerDelivery {
+    attestation;
+    sink;
+    operation;
+    operationBytes;
+    kind;
+    deadlineAtMs;
+    expiry;
+    monotonicEnd;
+    fresh;
+    posts = 0;
+    busy = false;
+    envelopeBytes;
+    constructor(attestation, options) {
+        if (attestation.credential.source !== 'attest' || !attestation.credential.token.startsWith('rbc_'))
+            fail('credential');
+        this.attestation = structuredClone(attestation);
+        this.kind = options.kind;
+        this.operationBytes = options.operationBytes;
+        if (options.kind !== 'original' && options.kind !== 'successor')
+            fail('operation');
+        this.operation = options.kind === 'original' ? decodeOriginalLaunch(options.operationBytes) : decodeRecoveryOperation(options.operationBytes);
+        const runId = 'runId' in this.operation ? this.operation.runId : this.operation.successorRunId;
+        if (runId !== attestation.runId)
+            fail('run_mismatch');
+        if (options.kind === 'original') {
+            if (attestation.reviewerRecovery !== undefined)
+                fail('grant_mismatch');
+        }
+        else {
+            if (!attestation.reviewerRecovery)
+                fail('grant_required');
+            this.attestation.reviewerRecovery = snapshotReviewerAttestation(runId, attestation.reviewerRecovery);
+            const operation = this.operation, source = this.attestation.reviewerRecovery.source;
+            if (source.run_id !== operation.sourceRunId || source.report_sha256 !== operation.sourceReportSha256)
+                fail('grant_mismatch');
+        }
+        const expiry = parseAttestedExpiry(attestation.expiresAt);
+        if (expiry === undefined)
+            fail('invalid_expiry');
+        this.expiry = expiry;
+        this.deadlineAtMs = options.deadlineAtMs ?? this.operation.expiresAtMs;
+        if (!Number.isSafeInteger(this.deadlineAtMs) || this.deadlineAtMs < this.operation.startedAtMs || this.deadlineAtMs > this.operation.expiresAtMs)
+            fail('deadline');
+        this.monotonicEnd = performance.now() + Math.min(this.deadlineAtMs, expiry) - Date.now();
+        this.sink = new HarnessSink({ credential: this.attestation.credential, rclVersion: options.rclVersion,
+            attestedExpiresAt: this.attestation.expiresAt, ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}) });
+        this.fresh = consumeFreshAttestation(attestation);
+    }
+    /** Match an explicitly injected runtime without disclosing or substituting its credential. */
+    matchesRuntime(credential, expiresAt) {
+        return isDeepStrictEqual(credential, this.attestation.credential) && expiresAt === this.attestation.expiresAt;
+    }
+    /** Original execution capability check; the caller must invoke it before paid work. */
+    async checkOriginal(options = {}) {
+        if (this.kind !== 'original')
+            fail('grant_mismatch');
+        await this.within(options, async (request) => { accepted(await this.sink.checkReviewerRecovery(request())); });
+    }
+    /** Signed immediate-parent access only; full retained ancestry is validated independently by the server/caller. */
+    async preflight(original, options = {}) {
+        const input = structuredClone(original), operation = this.operation;
+        if (!('sourceRunId' in operation) || !this.attestation.reviewerRecovery)
+            fail('grant_required');
+        const source = this.attestation.reviewerRecovery.source;
+        assertReviewerRecoveryReference(input);
+        if (input.successorRunId !== this.attestation.runId || input.target !== operation.target ||
+            input.source.runId !== source.run_id || input.source.reportSha256 !== source.report_sha256 ||
+            input.source.reviewerArtifactSha256 !== source.reviewer_artifact_sha256)
+            fail('grant_mismatch');
+        await this.within(options, async (request) => {
+            accepted(await this.sink.checkReviewerRecovery(request()));
+            const read = await this.sink.getReviewerArtifact(source.run_id, { sha256: source.reviewer_artifact_sha256 }, request());
+            if (read.kind !== 'ok')
+                fail('source_unavailable');
+            assertReviewerRecoverySource(input, read.value.bytes);
+            const wire = JSON.parse(read.value.bytes.toString('utf8'));
+            const parent = wire.checkpoints.at(-1);
+            const proof = decodeCheckpointProof(parent.bytes);
+            if (parent.runId !== source.run_id || proof.digest !== operation.sourceCheckpointSha256 ||
+                proof.plan.digest !== operation.planDigest || sha256Hex(proof.bindings['captured-inputs']) !== operation.capturedInputsSha256)
+                fail('source_mismatch');
+        });
+    }
+    /** Own-run receipt before every retry; ordinary PUTs precede private admission, with no generic GET. */
+    async deliver(input, options = {}) {
+        const entry = this.snapshot(input);
+        if (this.envelopeBytes !== undefined && this.envelopeBytes !== entry.envelopeBytes)
+            fail('immutable_conflict');
+        this.envelopeBytes = entry.envelopeBytes;
+        if (this.busy)
+            fail('busy');
+        this.busy = true;
+        try {
+            return await this.within(options, async (request) => {
+                accepted(await this.sink.checkReviewerRecovery(request()));
+                const prepared = this.sink.preparePostRun(entry.envelope, entry.envelopeBytes);
+                if (prepared.kind !== 'ready')
+                    fail('envelope');
+                const first = this.fresh;
+                this.fresh = false;
+                let unknownRun = false;
+                const recovered = await recoverAttestedDelivery({ runId: this.attestation.runId,
+                    payload: entry.envelopeBytes, expiresAt: this.attestation.expiresAt, receiptFirst: true,
+                    initialAttempts: this.posts, maxAttempts: ATTESTED_DELIVERY_MAX_ATTEMPTS,
+                    deadlineMs: Math.max(1, Math.floor(Math.min(request().timeoutMs, ATTESTED_DELIVERY_DEADLINE_MS))), signal: request().signal,
+                    receipt: async (_id, signal) => {
+                        const outcome = await prepared.receipt({ ...request(), signal });
+                        if (outcome.kind === 'absent' && !first && this.posts === 0) {
+                            unknownRun = true;
+                            return { kind: 'rejected' };
+                        }
+                        return outcome;
+                    },
+                    post: async (payload, signal) => {
+                        if (payload !== entry.envelopeBytes)
+                            return { kind: 'rejected' };
+                        this.posts++;
+                        const outcome = await prepared.post({ ...request(), signal });
+                        if (outcome.kind === 'ok')
+                            return { kind: 'recorded', value: outcome.value };
+                        return { kind: outcome.kind === 'conflict' ? 'conflict' : outcome.kind === 'unavailable' ? 'unavailable' : 'rejected' };
+                    }, });
+                if (recovered.kind !== 'recorded' || !recovered.value) {
+                    if (unknownRun)
+                        fail('unknown_run');
+                    fail(`envelope_${recovered.kind}`);
+                }
+                let read = await this.sink.getReviewerArtifact(this.attestation.runId, entry.reference, request());
+                if (read.kind !== 'pending' && read.kind !== 'ok')
+                    accepted(read);
+                if (read.kind === 'ok' && !read.value.bytes.equals(Buffer.from(entry.privateBytes)))
+                    fail('private_mismatch');
+                for (const kind of ['report_json', 'report_md']) {
+                    const bytes = entry.artifacts[kind];
+                    if (bytes !== undefined)
+                        accepted(await this.sink.putArtifact(this.attestation.runId, kind, bytes, request()));
+                }
+                if (read.kind === 'pending') {
+                    const put = await this.sink.putReviewerArtifact(this.attestation.runId, entry.privateBytes, entry.reference, request());
+                    if (put.kind !== 'ok' && put.kind !== 'unavailable')
+                        accepted(put);
+                    // An uncertain PUT is never blindly repeated. Read the exact own-run
+                    // private bytes before any later invocation can consider another write.
+                    read = await this.sink.getReviewerArtifact(this.attestation.runId, entry.reference, request());
+                }
+                if (read.kind === 'pending')
+                    fail('unavailable');
+                if (!accepted(read).bytes.equals(Buffer.from(entry.privateBytes)))
+                    fail('private_mismatch');
+                return { runId: this.attestation.runId, reportJsonVerified: true,
+                    markdown: entry.artifacts.report_md === undefined ? 'not_declared' : 'put_receipt' };
+            });
+        }
+        finally {
+            this.busy = false;
+        }
+    }
+    snapshot(input) {
+        if (!isReviewerArtifact(input.artifact))
+            fail('artifact');
+        const envelopeBytes = JSON.stringify(input.envelope), envelope = JSON.parse(envelopeBytes);
+        const artifacts = { ...input.artifacts }, privateBytes = input.artifact.bytes;
+        if (validateRunEnvelope(envelope, artifacts).length || envelope.run.id !== this.attestation.runId)
+            fail('envelope');
+        const declaration = envelope.reviewer_recovery;
+        if (!declaration || declaration.sha256 !== input.artifact.digest || declaration.bytes !== Buffer.byteLength(privateBytes) ||
+            !isDeepStrictEqual(declaration.source, this.attestation.reviewerRecovery?.source))
+            fail('declaration');
+        const wire = JSON.parse(privateBytes), last = wire.checkpoints.at(-1), proof = decodeCheckpointProof(last.bytes);
+        const descriptor = describeReviewerEvidence(proof, decodeSupplementalAsync(wire.supplementalAsync.bytes));
+        if (last.runId !== this.attestation.runId || proof.bindings[this.kind === 'original' ? 'launch' : 'operation'] !== this.operationBytes ||
+            !isDeepStrictEqual(descriptor, declaration.descriptor) || wire.report.bytes !== artifacts.report_json ||
+            wire.report.sha256 !== sha256Hex(artifacts.report_json))
+            fail('report_binding');
+        return { envelope, envelopeBytes, artifacts, privateBytes, reference: { sha256: declaration.sha256, bytes: declaration.bytes } };
+    }
+    remaining() {
+        const now = Date.now();
+        if (now < this.operation.startedAtMs)
+            fail('clock');
+        const remaining = Math.min(this.deadlineAtMs - now, this.expiry - now, this.monotonicEnd - performance.now());
+        if (remaining <= 0)
+            fail('deadline');
+        return remaining;
+    }
+    async within(options, work) {
+        const timeout = options.timeoutMs ?? 120_000;
+        if (!Number.isFinite(timeout) || timeout <= 0)
+            fail('deadline');
+        const duration = Math.min(this.remaining(), timeout, 120_000), end = performance.now() + duration;
+        const lease = abortSignalWithTimeout(options.signal, duration);
+        const request = () => {
+            if (lease.signal.aborted)
+                fail('deadline');
+            const remaining = Math.min(this.remaining(), end - performance.now());
+            if (remaining <= 0)
+                fail('deadline');
+            return { signal: lease.signal, timeoutMs: remaining };
+        };
+        try {
+            request();
+            const value = await work(request);
+            request();
+            return value;
+        }
+        finally {
+            lease.dispose();
+        }
+    }
+}
+//# sourceMappingURL=attested-reviewer-delivery.js.map

package/dist/telemetry/attested-reviewer-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attested-reviewer-delivery.js","sourceRoot":"","sources":["../../src/telemetry/attested-reviewer-delivery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAuB,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAA0B,MAAM,mCAAmC,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAyB,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAoB,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClJ,OAAO,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACxG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAwC,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,WAAW,EAA0D,MAAM,WAAW,CAAC;AAmBhG,SAAS,IAAI,CAAC,MAAc,IAAW,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACxF,SAAS,QAAQ,CAAI,OAAuB;IAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IAClB,WAAW,CAAc;IACzB,IAAI,CAAc;IAClB,SAAS,CAAqC;IAC9C,cAAc,CAAS;IACvB,IAAI,CAA2B;IAC/B,YAAY,CAAS;IACrB,MAAM,CAAS;IACf,YAAY,CAAS;IAC9B,KAAK,CAAU;IACf,KAAK,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,KAAK,CAAC;IACb,aAAa,CAAU;IAE/B,YAAY,WAAwB,EAAE,OAAgC;QACpE,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACvH,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;YAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9I,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;QAC/F,IAAI,KAAK,KAAK,WAAW,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,WAAW,CAAC,gBAAgB,KAAK,SAAS;gBAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,CAAC,gBAAgB;gBAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1D,IAAI,CAAC,WAAW,CAAC,gBAAgB,GAAG,2BAA2B,CAAC,KAAK,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;YACrG,MAAM,SAAS,GAAG,IAAI,CAAC,SAA8B,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACzG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,kBAAkB;gBAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACnK,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzF,IAAI,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YACnG,iBAAiB,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACnH,IAAI,CAAC,KAAK,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,8FAA8F;IAC9F,cAAc,CAAC,UAA6B,EAAE,SAA6B;QACzE,OAAO,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,SAAS,KAAK,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;IAChH,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,aAAa,CAAC,UAA0B,EAAE;QAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,CAAC;IAED,mHAAmH;IACnH,KAAK,CAAC,SAAS,CAAC,QAAmC,EAAE,UAA0B,EAAE;QAC/E,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACpE,IAAI,CAAC,CAAC,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACxD,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACtF,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,aAAa;YAC1F,KAAK,CAAC,MAAM,CAAC,sBAAsB,KAAK,MAAM,CAAC,wBAAwB;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACzC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACxH,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACnD,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,sBAAsB;gBACrF,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAE,CAAC,KAAK,SAAS,CAAC,oBAAoB;gBAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5J,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,OAAO,CAAC,KAA4B,EAAE,UAA0B,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;YAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/G,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;gBAChD,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBAC/E,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;oBAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC7C,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAa,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;oBACzF,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI;oBACvF,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,8BAA8B;oBACxE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,SAAU,EAAE,6BAA6B,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM;oBAC5H,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;wBAC7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;wBACjE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;4BAAC,UAAU,GAAG,IAAI,CAAC;4BAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;wBAAC,CAAC;wBAChH,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;wBAC9B,IAAI,OAAO,KAAK,KAAK,CAAC,aAAa;4BAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;wBACjE,IAAI,CAAC,KAAK,EAAE,CAAC;wBACb,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;wBAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;4BAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;wBAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;oBAC1H,CAAC,GACF,CAAC,CAAC;gBACH,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACtD,IAAI,UAAU;wBAAE,IAAI,CAAC,aAAa,CAAC,CAAC;oBACpC,IAAI,CAAC,YAAY,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnG,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;oBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC9G,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,WAAW,CAAU,EAAE,CAAC;oBACzD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBACpC,IAAI,KAAK,KAAK,SAAS;wBAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBACjH,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;oBACxH,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;wBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACnE,qEAAqE;oBACrE,wEAAwE;oBACxE,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjG,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC5F,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI;oBAC9D,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACzF,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;IAClC,CAAC;IAEO,QAAQ,CAAC,KAA4B;QAC3C,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAgB,CAAC;QAC1G,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,EAAE,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9E,IAAI,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpH,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,KAAK,KAAK,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;YACvH,CAAC,iBAAiB,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,CAAC;YAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjH,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,cAAc;YACpI,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,WAAW;YACrG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClF,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IACnI,CAAC;IAEO,SAAS;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9G,IAAI,SAAS,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IACO,KAAK,CAAC,MAAM,CAAI,OAAuB,EAAE,IAAmD;QAClG,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QAClG,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;YACtE,IAAI,SAAS,IAAI,CAAC;gBAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACxD,CAAC,CAAC;QACF,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;gBACtE,CAAC;YAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC9B,CAAC;CACF"}