@armoriq/sdk-dev 0.6.10 → 0.8.0

package/dist/observability/content-capture.js

@@ -0,0 +1,423 @@
+"use strict";
+/**
+ * One policy-aware content projector for every native OTel producer.
+ *
+ * Adapters pass values, never pre-redacted strings. This module bounds and
+ * removes unsafe data before an SDK span receives it, independent of the
+ * destination vendor.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONTENT_ATTRIBUTE_KEYS = exports.CONTENT_NOT_PROVIDED_BY_ADAPTER = exports.METADATA_CONTENT_PLACEHOLDER = exports.ATTR_CONTENT_TRUNCATED = exports.ATTR_REDACTION_APPLIED = void 0;
+exports.bufferTelemetryContent = bufferTelemetryContent;
+exports.projectTelemetryContent = projectTelemetryContent;
+exports.reboundCapturedJson = reboundCapturedJson;
+exports.trustedContentDiagnostics = trustedContentDiagnostics;
+exports.rememberSpanContentDiagnostics = rememberSpanContentDiagnostics;
+exports.spanContentDiagnostics = spanContentDiagnostics;
+const ENHANCED = { maxBytes: 2 * 1024, maxDepth: 4, maxItems: 20, maxString: 512 };
+const DEBUG = { maxBytes: 8 * 1024, maxDepth: 8, maxItems: 100, maxString: 2 * 1024 };
+const PLACEHOLDER = '[Not captured - organization capture mode: metadata]';
+const OFF_PLACEHOLDER = '[Not captured - organization observability is off]';
+const EXTERNAL_DISABLED = '[Not captured - organization external content capture is disabled]';
+const INTERNAL_DISABLED = '[Not captured - organization content capture is disabled]';
+const UNAVAILABLE = '[Not captured - observability policy authority unavailable]';
+const NOT_PROVIDED = '[Not provided by adapter]';
+const SENSITIVE_KEY = /(?:api[_-]?key|auth(?:orization)?|bearer|cookie|credential|password|passphrase|secret|private[_-]?key|token|signature|session(?:_|-)?id)/i;
+const SECRET = /(?:\beyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b|\b(?:ak|sk|pk|rk|ghp|github_pat)_[A-Za-z0-9_-]{8,}\b|-----BEGIN [A-Z0-9 ]+-----|\bBearer\s+[A-Za-z0-9._~+/-]{8,}\b)/ig;
+const EMAIL = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/ig;
+const SSN = /(?:^|\D)\d{3}[- ]?\d{2}[- ]?\d{4}(?:$|\D)/g;
+const PHONE_OR_CARD = /\+?\d(?:[ .()-]*\d){8,18}/g;
+const SIGNED_URL = /https?:\/\/[^\s"'<>]*(?:[?&](?:x-amz-signature|signature|sig|token|access_token)=)[^\s"'<>]*/ig;
+// Matches the Python SDK's armoriq_sdk/observability/redaction.py _STUDENT_GRADE.
+const STUDENT_GRADE = /\bstudent(?:\s+[a-z0-9][a-z0-9 .'-]{0,63})?\s+(?:received|earned|got|was\s+awarded)\s+(?:a\s+)?grade\s+[a-f][+-]?(?![a-z0-9])/gi;
+function numericPersonalIdentifier(candidate) {
+    const digits = candidate.replace(/\D/g, '');
+    if (digits.length >= 10 && digits.length <= 15)
+        return true;
+    if (digits.length < 13 || digits.length > 19)
+        return false;
+    let sum = 0;
+    let alternate = false;
+    for (let index = digits.length - 1; index >= 0; index -= 1) {
+        let digit = Number(digits[index]);
+        if (alternate && (digit *= 2) > 9)
+            digit -= 9;
+        sum += digit;
+        alternate = !alternate;
+    }
+    return sum % 10 === 0;
+}
+function redactString(input, limits, state) {
+    // SECRET must run before STUDENT_GRADE: STUDENT_GRADE's identifier group
+    // allows letters, digits, dots, and hyphens, so a credential-shaped token
+    // (e.g. a JWT) sitting between "student" and "received/earned/... grade X"
+    // would otherwise get consumed into [REDACTED:STUDENT_GRADE] before SECRET
+    // ever saw it, losing the more specific credential signal.
+    let value = input.replace(SECRET, () => { state.redacted = true; return '[REDACTED:SECRET]'; });
+    // STUDENT_GRADE must run before SSN/PHONE_OR_CARD: a numeric student ID of
+    // 9+ contiguous digits (e.g. "student 482134567 received grade B") would
+    // otherwise get consumed by those digit-only checks first, mangling the
+    // phrase so STUDENT_GRADE no longer matches and the grade disclosure leaks.
+    value = value.replace(STUDENT_GRADE, () => { state.redacted = true; return '[REDACTED:STUDENT_GRADE]'; });
+    value = value
+        .replace(SIGNED_URL, () => { state.redacted = true; return '[REDACTED:SIGNED_URL]'; })
+        .replace(EMAIL, () => { state.redacted = true; return '[REDACTED:EMAIL]'; })
+        .replace(SSN, (match) => { state.redacted = true; return match.replace(/\d/g, 'X').replace(/X+/g, '[REDACTED:PII]'); });
+    value = value.replace(PHONE_OR_CARD, (match) => {
+        if (!numericPersonalIdentifier(match))
+            return match;
+        state.redacted = true;
+        return '[REDACTED:PII]';
+    });
+    if (value.length > limits.maxString) {
+        state.truncated = true;
+        return `${value.slice(0, Math.max(0, limits.maxString - 14))}[TRUNCATED]`;
+    }
+    return value;
+}
+function project(value, limits, state, depth, key) {
+    if (key && SENSITIVE_KEY.test(key)) {
+        state.redacted = true;
+        return '[REDACTED:SECRET]';
+    }
+    if (value === null || value === undefined)
+        return value ?? null;
+    if (typeof value === 'string')
+        return redactString(value, limits, state);
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : '[INVALID_NUMBER]';
+    if (typeof value === 'bigint')
+        return '[BIGINT]';
+    if (typeof value === 'symbol' || typeof value === 'function')
+        return `[${typeof value}]`;
+    if (typeof value !== 'object')
+        return String(value);
+    if (state.seen.has(value))
+        return '[CIRCULAR]';
+    if (depth >= limits.maxDepth) {
+        state.truncated = true;
+        return '[TRUNCATED:MAX_DEPTH]';
+    }
+    state.seen.add(value);
+    if (Array.isArray(value)) {
+        const values = value.slice(0, limits.maxItems).map((item) => project(item, limits, state, depth + 1));
+        if (value.length > limits.maxItems) {
+            values.push('[TRUNCATED:ARRAY_ITEMS]');
+            state.truncated = true;
+        }
+        return values;
+    }
+    const result = {};
+    const entries = Object.entries(value);
+    for (const [childKey, child] of entries.slice(0, limits.maxItems)) {
+        result[childKey] = project(child, limits, state, depth + 1, childKey);
+    }
+    if (entries.length > limits.maxItems) {
+        result.__truncated__ = 'MAX_OBJECT_KEYS';
+        state.truncated = true;
+    }
+    return result;
+}
+/**
+ * Truncates to at most `maxBytes` UTF-8 bytes without splitting a code point.
+ * `String.prototype.slice` counts UTF-16 code units, which undercounts
+ * multibyte text by up to 3x -- the reason a byte ceiling has to be enforced
+ * on the encoded buffer rather than on string length.
+ */
+function sliceUtf8(value, maxBytes) {
+    if (maxBytes <= 0)
+        return '';
+    if (Buffer.byteLength(value, 'utf8') <= maxBytes)
+        return value;
+    const buffer = Buffer.from(value, 'utf8');
+    let end = maxBytes;
+    // Never cut inside a multi-byte sequence: back off to the last lead byte.
+    while (end > 0 && (buffer[end] & 0xc0) === 0x80)
+        end -= 1;
+    let sliced = buffer.subarray(0, end).toString('utf8');
+    // A lone high surrogate can survive the decode; drop it.
+    if (sliced.length > 0 && /[\uD800-\uDBFF]$/.test(sliced))
+        sliced = sliced.slice(0, -1);
+    return sliced;
+}
+function stringify(value, limits, state) {
+    let result;
+    try {
+        result = JSON.stringify(project(value, limits, state, 0));
+    }
+    catch {
+        state.redacted = true;
+        result = '"[UNSERIALIZABLE]"';
+    }
+    if (Buffer.byteLength(result, 'utf8') <= limits.maxBytes)
+        return result;
+    state.truncated = true;
+    // The wrapper object and JSON escaping both add bytes after slicing, so
+    // budget the preview down until the encoded result actually fits.
+    let budget = Math.floor(limits.maxBytes / 2);
+    let encoded = JSON.stringify({ __truncated__: 'MAX_BYTES', preview: sliceUtf8(result, budget) });
+    while (budget > 0 && Buffer.byteLength(encoded, 'utf8') > limits.maxBytes) {
+        budget = Math.floor(budget / 2);
+        encoded = JSON.stringify({ __truncated__: 'MAX_BYTES', preview: sliceUtf8(result, budget) });
+    }
+    return encoded;
+}
+/**
+ * Remove secrets and cap content before it enters an in-memory pending buffer.
+ * Values stay structured so the final authority projector serializes each
+ * semantic role exactly once.
+ */
+function bufferTelemetryContent(content) {
+    const buffered = {};
+    let redacted = false;
+    let truncated = false;
+    for (const key of ['input', 'output', 'toolArguments', 'toolResult', 'errorSummary']) {
+        if (!Object.prototype.hasOwnProperty.call(content, key))
+            continue;
+        const value = content[key];
+        if (value === undefined) {
+            buffered[key] = undefined;
+            continue;
+        }
+        const state = { redacted: false, truncated: false, seen: new WeakSet() };
+        const encoded = stringify(value, DEBUG, state);
+        try {
+            buffered[key] = JSON.parse(encoded);
+        }
+        catch {
+            buffered[key] = '[UNSERIALIZABLE]';
+            state.redacted = true;
+        }
+        redacted ||= state.redacted;
+        truncated ||= state.truncated;
+    }
+    return Object.freeze({ content: Object.freeze(buffered), redacted, truncated });
+}
+function placeholder(authority) {
+    if (authority.reasonCode === 'capture_mode_off')
+        return OFF_PLACEHOLDER;
+    if (authority.reasonCode === 'capture_mode_metadata')
+        return PLACEHOLDER;
+    if (authority.reasonCode === 'external_content_disabled')
+        return EXTERNAL_DISABLED;
+    if (authority.reasonCode === 'organization_content_disabled')
+        return INTERNAL_DISABLED;
+    return UNAVAILABLE;
+}
+/**
+ * SDK-owned capture provenance keys. These record that the SDK's own
+ * projector redacted or truncated captured content; they are never trusted
+ * from a public span attribute (which any framework or caller can forge).
+ */
+exports.ATTR_REDACTION_APPLIED = 'armoriq.observability.redaction.applied';
+exports.ATTR_CONTENT_TRUNCATED = 'armoriq.observability.content.truncated';
+/**
+ * Projects optional structured input/output/tool values. Metadata output is a
+ * deliberate placeholder, so dashboards explain why user content is absent.
+ */
+function projectTelemetryContent(content, authority) {
+    const attrs = {
+        'armoriq.observability.capture.mode': authority.mode,
+    };
+    const canCapture = authority.contentAllowed && (authority.mode === 'enhanced' || authority.mode === 'debug');
+    const hasInput = Object.prototype.hasOwnProperty.call(content, 'input');
+    const hasOutput = Object.prototype.hasOwnProperty.call(content, 'output');
+    const hasToolArguments = Object.prototype.hasOwnProperty.call(content, 'toolArguments');
+    const hasToolResult = Object.prototype.hasOwnProperty.call(content, 'toolResult');
+    if (!canCapture) {
+        if (hasInput) {
+            attrs['gen_ai.input.messages'] = placeholder(authority);
+            attrs['armoriq.observability.content.input.state'] = 'not_captured';
+        }
+        if (hasOutput) {
+            attrs['gen_ai.output.messages'] = placeholder(authority);
+            attrs['armoriq.observability.content.output.state'] = 'not_captured';
+        }
+        if (hasToolArguments) {
+            attrs['armoriq.observability.content.tool_arguments.state'] = 'not_captured';
+            attrs['armoriq.observability.content.tool_arguments.reason_code'] = authority.reasonCode;
+        }
+        if (hasToolResult) {
+            attrs['armoriq.observability.content.tool_result.state'] = 'not_captured';
+            attrs['armoriq.observability.content.tool_result.reason_code'] = authority.reasonCode;
+        }
+        attrs['armoriq.observability.content.reason_code'] = authority.reasonCode;
+        return Object.freeze({ attributes: Object.freeze(attrs), redacted: false, truncated: false });
+    }
+    const limits = authority.mode === 'debug' ? DEBUG : ENHANCED;
+    const state = { redacted: false, truncated: false, seen: new WeakSet() };
+    const serialize = (value) => {
+        // Independent fields may deliberately share the same object. Scope cycle
+        // tracking to one serialized field so output is not falsely circular.
+        const fieldState = { redacted: false, truncated: false, seen: new WeakSet() };
+        const encoded = stringify(value, limits, fieldState);
+        state.redacted ||= fieldState.redacted;
+        state.truncated ||= fieldState.truncated;
+        return encoded;
+    };
+    const projectField = (present, value, attribute, stateAttribute, reasonAttribute) => {
+        if (!present)
+            return;
+        if (value === undefined) {
+            attrs[attribute] = NOT_PROVIDED;
+            attrs[stateAttribute] = 'not_provided_by_adapter';
+            attrs[reasonAttribute] = 'not_provided_by_adapter';
+            return;
+        }
+        attrs[attribute] = serialize(value);
+        attrs[stateAttribute] = 'captured';
+    };
+    projectField(hasInput, content.input, 'gen_ai.input.messages', 'armoriq.observability.content.input.state', 'armoriq.observability.content.input.reason_code');
+    projectField(hasOutput, content.output, 'gen_ai.output.messages', 'armoriq.observability.content.output.state', 'armoriq.observability.content.output.reason_code');
+    projectField(hasToolArguments, content.toolArguments, 'gen_ai.tool.call.arguments', 'armoriq.observability.content.tool_arguments.state', 'armoriq.observability.content.tool_arguments.reason_code');
+    projectField(hasToolResult, content.toolResult, 'gen_ai.tool.call.result', 'armoriq.observability.content.tool_result.state', 'armoriq.observability.content.tool_result.reason_code');
+    if (Object.prototype.hasOwnProperty.call(content, 'errorSummary')) {
+        if (content.errorSummary === undefined) {
+            attrs['armoriq.observability.error.summary.state'] = 'not_provided_by_adapter';
+            attrs['armoriq.observability.error.summary.reason_code'] = 'not_provided_by_adapter';
+        }
+        else {
+            attrs['armoriq.observability.error.summary'] = serialize(content.errorSummary);
+            attrs['armoriq.observability.error.summary.state'] = 'captured';
+        }
+    }
+    attrs['armoriq.observability.content.reason_code'] = 'captured';
+    if (state.redacted)
+        attrs[exports.ATTR_REDACTION_APPLIED] = true;
+    if (state.truncated)
+        attrs[exports.ATTR_CONTENT_TRUNCATED] = true;
+    return Object.freeze({ attributes: Object.freeze(attrs), redacted: state.redacted, truncated: state.truncated });
+}
+/**
+ * Re-bounds an already-serialized content attribute against `mode`'s limits.
+ * Used at export time when the current ceiling's mode differs from whatever
+ * mode a span's content was originally captured under, so a debug-captured
+ * value can't retain debug's looser size/depth/item/string allowances once
+ * the ceiling has downgraded to enhanced. Not valid JSON (e.g. a
+ * not-provided-by-adapter placeholder) is returned unchanged.
+ */
+function reboundCapturedJson(json, mode) {
+    let parsed;
+    try {
+        parsed = JSON.parse(json);
+    }
+    catch {
+        return { value: json, truncated: false, redacted: false };
+    }
+    const limits = mode === 'debug' ? DEBUG : ENHANCED;
+    const state = { redacted: false, truncated: false, seen: new WeakSet() };
+    return { value: stringify(parsed, limits, state), truncated: state.truncated, redacted: state.redacted };
+}
+exports.METADATA_CONTENT_PLACEHOLDER = PLACEHOLDER;
+exports.CONTENT_NOT_PROVIDED_BY_ADAPTER = NOT_PROVIDED;
+/**
+ * Every attribute key this module -- or its internal-ingest mirror keys
+ * assigned by `ArmorIQTelemetryRuntime.safeAttributesWithAuthority` in
+ * otel-runtime.ts (`armoriq.content.input` / `armoriq.content.output`) --
+ * ever writes to carry content or content-state metadata on a span.
+ *
+ * This is the one list of "what counts as content-scoped" on an already-built
+ * span. The export-time ceiling (otel-export-ceiling.ts) clears exactly this
+ * set before re-deriving it under whatever policy is current at export time,
+ * so a span-creation change to this contract cannot silently drift out of
+ * sync with what purge-on-downgrade clears.
+ */
+exports.CONTENT_ATTRIBUTE_KEYS = Object.freeze([
+    'gen_ai.input.messages',
+    'gen_ai.output.messages',
+    'gen_ai.tool.call.arguments',
+    'gen_ai.tool.call.result',
+    'armoriq.content.input',
+    'armoriq.content.output',
+    'armoriq.observability.content.input.state',
+    'armoriq.observability.content.input.reason_code',
+    'armoriq.observability.content.output.state',
+    'armoriq.observability.content.output.reason_code',
+    'armoriq.observability.content.tool_arguments.state',
+    'armoriq.observability.content.tool_arguments.reason_code',
+    'armoriq.observability.content.tool_result.state',
+    'armoriq.observability.content.tool_result.reason_code',
+    'armoriq.observability.content.reason_code',
+    exports.ATTR_REDACTION_APPLIED,
+    exports.ATTR_CONTENT_TRUNCATED,
+    'armoriq.observability.error.summary',
+    'armoriq.observability.error.summary.state',
+    'armoriq.observability.error.summary.reason_code',
+]);
+/**
+ * The content-bearing subset of `CONTENT_ATTRIBUTE_KEYS`: keys that carry
+ * actual captured user content (not state/reason-code metadata). A capture
+ * diagnostic is only meaningful while at least one of these survives on the
+ * span; once every one is purged (a downgrade withheld the content) the
+ * redaction/truncation facts describe nothing and must not be restored.
+ */
+const CONTENT_BEARING_KEYS = Object.freeze([
+    'gen_ai.input.messages',
+    'gen_ai.output.messages',
+    'gen_ai.tool.call.arguments',
+    'gen_ai.tool.call.result',
+    'armoriq.content.input',
+    'armoriq.content.output',
+]);
+/**
+ * Private, per-span capture provenance kept off the public OTel attribute
+ * namespace. A public span attribute can be forged by any framework adapter or
+ * caller, so the two diagnostic flags are never trusted from `span.attributes`
+ * at export time; they are read back only from this SDK-owned record.
+ *
+ * Keyed by the span object itself (the Node SDK hands the same `Span` instance
+ * to processors and exporters as a `ReadableSpan`), so the provenance has the
+ * span's lifetime and survives the processor to exporter hand-off without a
+ * global registry. A `WeakMap` -- rather than a property on `span.attributes`
+ * -- is required because the export ceiling rewrites that attribute object
+ * wholesale (`writeAttributes` in otel-export-ceiling.ts), which would clobber
+ * any stash placed inside it.
+ */
+const spanDiagnostics = new WeakMap();
+/**
+ * The capture facts a trusted source (a prior governance pass or the SDK's own
+ * private buffer) asserts, restricted to what still describes live content.
+ * Returns an empty record once no content-bearing key survives in `governed`,
+ * so a withheld-content downgrade drops the diagnostics rather than leaving a
+ * flag that refers to content no longer present.
+ */
+function trustedContentDiagnostics(source, governed) {
+    if (!CONTENT_BEARING_KEYS.some((key) => Object.prototype.hasOwnProperty.call(governed, key))) {
+        return {};
+    }
+    const result = {};
+    if (source[exports.ATTR_REDACTION_APPLIED] === true)
+        result[exports.ATTR_REDACTION_APPLIED] = true;
+    if (source[exports.ATTR_CONTENT_TRUNCATED] === true)
+        result[exports.ATTR_CONTENT_TRUNCATED] = true;
+    return result;
+}
+/**
+ * Record the SDK-owned capture diagnostics carried by `governed` privately on
+ * the span, so a later export-time re-governance can restore them without
+ * trusting the public attribute. Discards them when captured content did not
+ * survive. Fails open (records nothing) for an unsupported span object.
+ */
+function rememberSpanContentDiagnostics(span, governed) {
+    if (!span || (typeof span !== 'object' && typeof span !== 'function'))
+        return;
+    try {
+        spanDiagnostics.set(span, trustedContentDiagnostics(governed, governed));
+    }
+    catch {
+        // Telemetry stays fail-open: an unusable span key never restores diagnostics.
+    }
+}
+/**
+ * The capture diagnostics privately recorded for this span that still describe
+ * live content in `governed`. Never reads the public span attributes.
+ */
+function spanContentDiagnostics(span, governed) {
+    if (!span || (typeof span !== 'object' && typeof span !== 'function'))
+        return {};
+    const source = spanDiagnostics.get(span) ?? {};
+    return trustedContentDiagnostics(source, governed);
+}
+//# sourceMappingURL=content-capture.js.map

package/dist/observability/content-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-capture.js","sourceRoot":"","sources":["../../src/observability/content-capture.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAiLH,wDAuBC;AAsBD,0DA8EC;AAUD,kDAUC;AA+ED,8DAWC;AAQD,wEAOC;AAMD,wDAIC;AAnYD,MAAM,QAAQ,GAAW,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAC3F,MAAM,KAAK,GAAW,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;AAC9F,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAC3E,MAAM,eAAe,GAAG,oDAAoD,CAAC;AAC7E,MAAM,iBAAiB,GAAG,oEAAoE,CAAC;AAC/F,MAAM,iBAAiB,GAAG,2DAA2D,CAAC;AACtF,MAAM,WAAW,GAAG,6DAA6D,CAAC;AAClF,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,aAAa,GAAG,2IAA2I,CAAC;AAClK,MAAM,MAAM,GAAG,mLAAmL,CAAC;AACnM,MAAM,KAAK,GAAG,6CAA6C,CAAC;AAC5D,MAAM,GAAG,GAAG,4CAA4C,CAAC;AACzD,MAAM,aAAa,GAAG,4BAA4B,CAAC;AACnD,MAAM,UAAU,GAAG,gGAAgG,CAAC;AACpH,kFAAkF;AAClF,MAAM,aAAa,GAAG,iIAAiI,CAAC;AAExJ,SAAS,yBAAyB,CAAC,SAAiB;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,IAAI,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAC9C,GAAG,IAAI,KAAK,CAAC;QACb,SAAS,GAAG,CAAC,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc,EAAE,KAAsB;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,4EAA4E;IAC5E,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,KAAK,GAAG,KAAK;SACV,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC;SACrF,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;SAC3E,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,OAAO,gBAAgB,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,aAAa,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,MAAc,EAAE,KAAsB,EAAE,KAAa,EAAE,GAAY;IAClG,IAAI,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,IAAI,IAAI,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,IAAI,OAAO,KAAK,GAAG,CAAC;IACzF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC/C,IAAI,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QAAC,OAAO,uBAAuB,CAAC;IAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QAAC,CAAC;QACvG,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAAC,MAAM,CAAC,aAAa,GAAG,iBAAiB,CAAC;QAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;IAAC,CAAC;IAC3G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,KAAa,EAAE,QAAgB;IAChD,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,0EAA0E;IAC1E,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC;IAC1D,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,yDAAyD;IACzD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,MAAc,EAAE,KAAsB;IACvE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,MAAM,GAAG,oBAAoB,CAAC;IAAC,CAAC;IAClI,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IACxE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,wEAAwE;IACxE,kEAAkE;IAClE,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACjG,OAAO,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1E,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAyB;IAC9D,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,CAAU,EAAE,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,SAAS;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAU,EAAE,CAAC;QAClG,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC;YACnC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;QAC5B,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,SAAkC;IACrD,IAAI,SAAS,CAAC,UAAU,KAAK,kBAAkB;QAAE,OAAO,eAAe,CAAC;IACxE,IAAI,SAAS,CAAC,UAAU,KAAK,uBAAuB;QAAE,OAAO,WAAW,CAAC;IACzE,IAAI,SAAS,CAAC,UAAU,KAAK,2BAA2B;QAAE,OAAO,iBAAiB,CAAC;IACnF,IAAI,SAAS,CAAC,UAAU,KAAK,+BAA+B;QAAE,OAAO,iBAAiB,CAAC;IACvF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,yCAAyC,CAAC;AACnE,QAAA,sBAAsB,GAAG,yCAAyC,CAAC;AAEhF;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,OAAyB,EACzB,SAAkC;IAElC,MAAM,KAAK,GAAqC;QAC9C,oCAAoC,EAAE,SAAS,CAAC,IAAI;KACrD,CAAC;IACF,MAAM,UAAU,GAAG,SAAS,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,uBAAuB,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACxD,KAAK,CAAC,2CAA2C,CAAC,GAAG,cAAc,CAAC;QACtE,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,wBAAwB,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACzD,KAAK,CAAC,4CAA4C,CAAC,GAAG,cAAc,CAAC;QACvE,CAAC;QACD,IAAI,gBAAgB,EAAE,CAAC;YACrB,KAAK,CAAC,oDAAoD,CAAC,GAAG,cAAc,CAAC;YAC7E,KAAK,CAAC,0DAA0D,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC;QAC3F,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,CAAC,iDAAiD,CAAC,GAAG,cAAc,CAAC;YAC1E,KAAK,CAAC,uDAAuD,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,2CAA2C,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC;QAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7D,MAAM,KAAK,GAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAU,EAAE,CAAC;IAClG,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE;QAC3C,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,UAAU,GAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAU,EAAE,CAAC;QACvG,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC;QACvC,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CACnB,OAAgB,EAChB,KAAc,EACd,SAAwH,EACxH,cAAsB,EACtB,eAAuB,EACvB,EAAE;QACF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;YAChC,KAAK,CAAC,cAAc,CAAC,GAAG,yBAAyB,CAAC;YAClD,KAAK,CAAC,eAAe,CAAC,GAAG,yBAAyB,CAAC;YACnD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC;IACrC,CAAC,CAAC;IACF,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,uBAAuB,EAAE,2CAA2C,EAAE,iDAAiD,CAAC,CAAC;IAC/J,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,4CAA4C,EAAE,kDAAkD,CAAC,CAAC;IACpK,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,aAAa,EAAE,4BAA4B,EAAE,oDAAoD,EAAE,0DAA0D,CAAC,CAAC;IACtM,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,yBAAyB,EAAE,iDAAiD,EAAE,uDAAuD,CAAC,CAAC;IACvL,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,2CAA2C,CAAC,GAAG,yBAAyB,CAAC;YAC/E,KAAK,CAAC,iDAAiD,CAAC,GAAG,yBAAyB,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,qCAAqC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC/E,KAAK,CAAC,2CAA2C,CAAC,GAAG,UAAU,CAAC;QAClE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,2CAA2C,CAAC,GAAG,UAAU,CAAC;IAChE,IAAI,KAAK,CAAC,QAAQ;QAAE,KAAK,CAAC,8BAAsB,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,KAAK,CAAC,SAAS;QAAE,KAAK,CAAC,8BAAsB,CAAC,GAAG,IAAI,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;AACnH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CAAC,IAAY,EAAE,IAAiB;IACjE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnD,MAAM,KAAK,GAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAU,EAAE,CAAC;IAClG,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC3G,CAAC;AAEY,QAAA,4BAA4B,GAAG,WAAW,CAAC;AAC3C,QAAA,+BAA+B,GAAG,YAAY,CAAC;AAE5D;;;;;;;;;;;GAWG;AACU,QAAA,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACrE,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,yBAAyB;IACzB,uBAAuB;IACvB,wBAAwB;IACxB,2CAA2C;IAC3C,iDAAiD;IACjD,4CAA4C;IAC5C,kDAAkD;IAClD,oDAAoD;IACpD,0DAA0D;IAC1D,iDAAiD;IACjD,uDAAuD;IACvD,2CAA2C;IAC3C,8BAAsB;IACtB,8BAAsB;IACtB,qCAAqC;IACrC,2CAA2C;IAC3C,iDAAiD;CAClD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5D,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,yBAAyB;IACzB,uBAAuB;IACvB,wBAAwB;CACzB,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAAG,IAAI,OAAO,EAAgC,CAAC;AAEpE;;;;;;GAMG;AACH,SAAgB,yBAAyB,CACvC,MAAyC,EACzC,QAA2C;IAE3C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,IAAI,MAAM,CAAC,8BAAsB,CAAC,KAAK,IAAI;QAAE,MAAM,CAAC,8BAAsB,CAAC,GAAG,IAAI,CAAC;IACnF,IAAI,MAAM,CAAC,8BAAsB,CAAC,KAAK,IAAI;QAAE,MAAM,CAAC,8BAAsB,CAAC,GAAG,IAAI,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,8BAA8B,CAAC,IAA+B,EAAE,QAA2C;IACzH,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,UAAU,CAAC;QAAE,OAAO;IAC9E,IAAI,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,IAA+B,EAAE,QAA2C;IACjH,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC"}

package/dist/observability/index.d.ts

@@ -4,12 +4,11 @@
  * This module is the contract the peer chokepoint subagent and downstream
  * consumers import from. Every export here is a stable, documented surface.
  */
-export { ObservabilityRecorder, type ObservabilityConfig } from './recorder';
-export { ObservabilityShipper, type ShipperConfig } from './shipper';
 export { computeCostUsd, MODEL_PRICES, type ModelPrice } from './model-prices';
-export type { TraceRecord, SpanRecord, SpanKind, SpanStatus, SpanAttributes, PolicyCallAttributes, GenerationAttributes, EventAttributes, SessionRecord, IngestPayload, IngestBatch, TraceContext, PolicyDecision, PolicySource, PolicyEnforcementAction, EnforcementAction, EventLevel, } from './schema';
-export { isValidTraceRecord, isValidSpanRecord, isValidSpanAttributes, isValidPolicyCallAttributes, isValidGenerationAttributes, isValidEventAttributes, isValidIngestBatch, isValidIngestPayload, isValidUuid, } from './schema';
-export { startTrace, recordSpan, recordPolicyCall, recordGeneration, recordEvent, openSpan, closeSpan, endTrace, flushObservability, } from './handle';
-export { __setObservabilitySinkForTests } from './recorder';
-export type { SinkEvent, ObservabilitySink } from './recorder';
+export { resolveOtelConfig, lowerCaptureMode, CAPTURE_RANK, type CaptureMode, type OtelExporterMode, type OtelProtocol, type ObservabilityOptions, type ResolvedOtelConfig, } from './otel-config';
+export { ArmorIQTelemetryRuntime, type AttributeContext, type TelemetryRuntimeOptions, type TelemetryAttributes, type TelemetryAttributeValue, } from './otel-runtime';
+export { parsePolicyLease, fallbackPolicyLease, isLeaseCurrent, type PolicyLease } from './policy-lease';
+export { projectTelemetryContent, METADATA_CONTENT_PLACEHOLDER, type ContentReasonCode, type ContentCaptureAuthority, type TelemetryContent, type ProjectedTelemetryContent, } from './content-capture';
+export { __ownedTelemetryRuntimeCountForTests } from './otel-shutdown';
+export { OtelSession, type OtelSessionOptions, type OtelTerminalStatus, type SpanHandle, type PlanInput, type PolicyInput, type PolicyResult, type ToolResult, type RootInput, type ModelInput, type ModelOutput, } from './otel-session';
 //# sourceMappingURL=index.d.ts.map

package/dist/observability/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE/E,YAAY,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,aAAa,EACb,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,GACX,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,GACZ,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE/E,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oCAAoC,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,WAAW,EACX,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC"}

package/dist/observability/index.js

@@ -6,34 +6,25 @@
  * consumers import from. Every export here is a stable, documented surface.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.__setObservabilitySinkForTests = exports.flushObservability = exports.endTrace = exports.closeSpan = exports.openSpan = exports.recordEvent = exports.recordGeneration = exports.recordPolicyCall = exports.recordSpan = exports.startTrace = exports.isValidUuid = exports.isValidIngestPayload = exports.isValidIngestBatch = exports.isValidEventAttributes = exports.isValidGenerationAttributes = exports.isValidPolicyCallAttributes = exports.isValidSpanAttributes = exports.isValidSpanRecord = exports.isValidTraceRecord = exports.MODEL_PRICES = exports.computeCostUsd = exports.ObservabilityShipper = exports.ObservabilityRecorder = void 0;
-var recorder_1 = require("./recorder");
-Object.defineProperty(exports, "ObservabilityRecorder", { enumerable: true, get: function () { return recorder_1.ObservabilityRecorder; } });
-var shipper_1 = require("./shipper");
-Object.defineProperty(exports, "ObservabilityShipper", { enumerable: true, get: function () { return shipper_1.ObservabilityShipper; } });
+exports.OtelSession = exports.__ownedTelemetryRuntimeCountForTests = exports.METADATA_CONTENT_PLACEHOLDER = exports.projectTelemetryContent = exports.isLeaseCurrent = exports.fallbackPolicyLease = exports.parsePolicyLease = exports.ArmorIQTelemetryRuntime = exports.CAPTURE_RANK = exports.lowerCaptureMode = exports.resolveOtelConfig = exports.MODEL_PRICES = exports.computeCostUsd = void 0;
 var model_prices_1 = require("./model-prices");
 Object.defineProperty(exports, "computeCostUsd", { enumerable: true, get: function () { return model_prices_1.computeCostUsd; } });
 Object.defineProperty(exports, "MODEL_PRICES", { enumerable: true, get: function () { return model_prices_1.MODEL_PRICES; } });
-var schema_1 = require("./schema");
-Object.defineProperty(exports, "isValidTraceRecord", { enumerable: true, get: function () { return schema_1.isValidTraceRecord; } });
-Object.defineProperty(exports, "isValidSpanRecord", { enumerable: true, get: function () { return schema_1.isValidSpanRecord; } });
-Object.defineProperty(exports, "isValidSpanAttributes", { enumerable: true, get: function () { return schema_1.isValidSpanAttributes; } });
-Object.defineProperty(exports, "isValidPolicyCallAttributes", { enumerable: true, get: function () { return schema_1.isValidPolicyCallAttributes; } });
-Object.defineProperty(exports, "isValidGenerationAttributes", { enumerable: true, get: function () { return schema_1.isValidGenerationAttributes; } });
-Object.defineProperty(exports, "isValidEventAttributes", { enumerable: true, get: function () { return schema_1.isValidEventAttributes; } });
-Object.defineProperty(exports, "isValidIngestBatch", { enumerable: true, get: function () { return schema_1.isValidIngestBatch; } });
-Object.defineProperty(exports, "isValidIngestPayload", { enumerable: true, get: function () { return schema_1.isValidIngestPayload; } });
-Object.defineProperty(exports, "isValidUuid", { enumerable: true, get: function () { return schema_1.isValidUuid; } });
-var handle_1 = require("./handle");
-Object.defineProperty(exports, "startTrace", { enumerable: true, get: function () { return handle_1.startTrace; } });
-Object.defineProperty(exports, "recordSpan", { enumerable: true, get: function () { return handle_1.recordSpan; } });
-Object.defineProperty(exports, "recordPolicyCall", { enumerable: true, get: function () { return handle_1.recordPolicyCall; } });
-Object.defineProperty(exports, "recordGeneration", { enumerable: true, get: function () { return handle_1.recordGeneration; } });
-Object.defineProperty(exports, "recordEvent", { enumerable: true, get: function () { return handle_1.recordEvent; } });
-Object.defineProperty(exports, "openSpan", { enumerable: true, get: function () { return handle_1.openSpan; } });
-Object.defineProperty(exports, "closeSpan", { enumerable: true, get: function () { return handle_1.closeSpan; } });
-Object.defineProperty(exports, "endTrace", { enumerable: true, get: function () { return handle_1.endTrace; } });
-Object.defineProperty(exports, "flushObservability", { enumerable: true, get: function () { return handle_1.flushObservability; } });
-var recorder_2 = require("./recorder");
-Object.defineProperty(exports, "__setObservabilitySinkForTests", { enumerable: true, get: function () { return recorder_2.__setObservabilitySinkForTests; } });
+var otel_config_1 = require("./otel-config");
+Object.defineProperty(exports, "resolveOtelConfig", { enumerable: true, get: function () { return otel_config_1.resolveOtelConfig; } });
+Object.defineProperty(exports, "lowerCaptureMode", { enumerable: true, get: function () { return otel_config_1.lowerCaptureMode; } });
+Object.defineProperty(exports, "CAPTURE_RANK", { enumerable: true, get: function () { return otel_config_1.CAPTURE_RANK; } });
+var otel_runtime_1 = require("./otel-runtime");
+Object.defineProperty(exports, "ArmorIQTelemetryRuntime", { enumerable: true, get: function () { return otel_runtime_1.ArmorIQTelemetryRuntime; } });
+var policy_lease_1 = require("./policy-lease");
+Object.defineProperty(exports, "parsePolicyLease", { enumerable: true, get: function () { return policy_lease_1.parsePolicyLease; } });
+Object.defineProperty(exports, "fallbackPolicyLease", { enumerable: true, get: function () { return policy_lease_1.fallbackPolicyLease; } });
+Object.defineProperty(exports, "isLeaseCurrent", { enumerable: true, get: function () { return policy_lease_1.isLeaseCurrent; } });
+var content_capture_1 = require("./content-capture");
+Object.defineProperty(exports, "projectTelemetryContent", { enumerable: true, get: function () { return content_capture_1.projectTelemetryContent; } });
+Object.defineProperty(exports, "METADATA_CONTENT_PLACEHOLDER", { enumerable: true, get: function () { return content_capture_1.METADATA_CONTENT_PLACEHOLDER; } });
+var otel_shutdown_1 = require("./otel-shutdown");
+Object.defineProperty(exports, "__ownedTelemetryRuntimeCountForTests", { enumerable: true, get: function () { return otel_shutdown_1.__ownedTelemetryRuntimeCountForTests; } });
+var otel_session_1 = require("./otel-session");
+Object.defineProperty(exports, "OtelSession", { enumerable: true, get: function () { return otel_session_1.OtelSession; } });
 //# sourceMappingURL=index.js.map

package/dist/observability/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAA6E;AAApE,iHAAA,qBAAqB,OAAA;AAC9B,qCAAqE;AAA5D,+GAAA,oBAAoB,OAAA;AAC7B,+CAA+E;AAAtE,8GAAA,cAAc,OAAA;AAAE,4GAAA,YAAY,OAAA;AAsBrC,mCAUkB;AAThB,4GAAA,kBAAkB,OAAA;AAClB,2GAAA,iBAAiB,OAAA;AACjB,+GAAA,qBAAqB,OAAA;AACrB,qHAAA,2BAA2B,OAAA;AAC3B,qHAAA,2BAA2B,OAAA;AAC3B,gHAAA,sBAAsB,OAAA;AACtB,4GAAA,kBAAkB,OAAA;AAClB,8GAAA,oBAAoB,OAAA;AACpB,qGAAA,WAAW,OAAA;AAGb,mCAUkB;AAThB,oGAAA,UAAU,OAAA;AACV,oGAAA,UAAU,OAAA;AACV,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,kGAAA,QAAQ,OAAA;AACR,mGAAA,SAAS,OAAA;AACT,kGAAA,QAAQ,OAAA;AACR,4GAAA,kBAAkB,OAAA;AAGpB,uCAA4D;AAAnD,0HAAA,8BAA8B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAA+E;AAAtE,8GAAA,cAAc,OAAA;AAAE,4GAAA,YAAY,OAAA;AAErC,6CASuB;AARrB,gHAAA,iBAAiB,OAAA;AACjB,+GAAA,gBAAgB,OAAA;AAChB,2GAAA,YAAY,OAAA;AAQd,+CAMwB;AALtB,uHAAA,uBAAuB,OAAA;AAMzB,+CAAyG;AAAhG,gHAAA,gBAAgB,OAAA;AAAE,mHAAA,mBAAmB,OAAA;AAAE,8GAAA,cAAc,OAAA;AAC9D,qDAO2B;AANzB,0HAAA,uBAAuB,OAAA;AACvB,+HAAA,4BAA4B,OAAA;AAM9B,iDAAuE;AAA9D,qIAAA,oCAAoC,OAAA;AAC7C,+CAYwB;AAXtB,2GAAA,WAAW,OAAA"}

package/dist/observability/otel-config.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Immutable, fail-safe OpenTelemetry configuration.
+ *
+ * The public contract intentionally follows standard OTLP environment
+ * variables. It never identifies or configures a specific external vendor.
+ */
+import type { TracerProvider } from '@opentelemetry/api';
+export type CaptureMode = 'off' | 'metadata' | 'enhanced' | 'debug';
+export type OtelExporterMode = 'armoriq' | 'external' | 'provider';
+export type OtelProtocol = 'http/protobuf';
+export interface ObservabilityOptions {
+    enabled?: boolean;
+    exporter?: OtelExporterMode;
+    /** Explicit complete OTLP traces endpoint. */
+    endpoint?: string;
+    /** Explicit OTLP base endpoint; `/v1/traces` is appended. */
+    baseEndpoint?: string;
+    headers?: Readonly<Record<string, string>>;
+    protocol?: OtelProtocol;
+    timeoutMillis?: number;
+    resourceAttributes?: Readonly<Record<string, string>>;
+    tracerProvider?: TracerProvider;
+    captureMode?: CaptureMode;
+    serviceName?: string;
+    /** Explicit caller-owned user identity for external OTel export. */
+    userId?: string;
+}
+export interface ResolvedOtelConfig {
+    readonly enabled: boolean;
+    readonly exporter: OtelExporterMode;
+    readonly endpoint?: string;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly protocol: OtelProtocol;
+    readonly timeoutMillis: number;
+    readonly resourceAttributes: Readonly<Record<string, string>>;
+    readonly tracerProvider?: TracerProvider;
+    readonly captureMode: CaptureMode;
+    readonly serviceName: string;
+    readonly disabledReason?: string;
+}
+/** Returns an externally safe value, or no value when it could identify a person. */
+export declare function sanitizeExternalTelemetryValue(value: string, maxLength?: number): string | undefined;
+/** Resolve without network I/O. No returned object is mutable by a caller. */
+export declare function resolveOtelConfig(options?: ObservabilityOptions): ResolvedOtelConfig;
+export declare const CAPTURE_RANK: Readonly<Record<CaptureMode, number>>;
+export declare function lowerCaptureMode(left: CaptureMode, right: CaptureMode): CaptureMode;
+//# sourceMappingURL=otel-config.d.ts.map

package/dist/observability/otel-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-config.d.ts","sourceRoot":"","sources":["../../src/observability/otel-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;AACpE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AACnE,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC;AAE3C,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAiDD,qFAAqF;AACrF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,MAAY,GAAG,MAAM,GAAG,SAAS,CAIzG;AA+JD,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,oBAAyB,GAAG,kBAAkB,CAyBxF;AAED,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAK7D,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,GAAG,WAAW,CAEnF"}