@ashlr/hub 3.5.1 → 3.8.0

package/dist/core/daemon/post-merge-halt.js

@@ -0,0 +1,503 @@
+/**
+ * post-merge-halt.ts — the ONE gate that makes an unattended night survivable.
+ *
+ * ── WHAT WAS ALREADY THERE, AND WHAT WAS NOT ───────────────────────────────
+ * The PRE-merge gate is genuinely solid and this module does not duplicate a
+ * line of it. `fleet/automerge-pass` → `inbox/merge.autoMergeProposal` already
+ * runs the repo's OWN typecheck / tests / lint in a throwaway worktree branched
+ * off the default-branch head (`inbox/merge.verifyProposal`), with the verify
+ * commands detected from the BASE tree so a diff cannot rewrite which commands
+ * run; refuses any diff touching package.json / lockfiles / CI / Dockerfile /
+ * Makefile outright; caps scope (4 files / 150 lines) and risk; requires an
+ * independent frontier judge with an HMAC-signed attestation; calls
+ * `assertMayMutate` so only `listEnrolled()` repos are ever touched; and
+ * re-checks the kill switch at every write boundary. A proposal that cannot be
+ * verified is left PENDING or rejected — never merged — and every rejection is
+ * audited (`inbox:proposal-rejected`) with a decisions-ledger row. That is the
+ * pre-merge half of the contract, and it holds.
+ *
+ * What did NOT exist anywhere is the half that matters at 4am: NOTHING re-ran
+ * the suite AFTER a merge landed, and nothing could halt the run when it went
+ * red. The only post-merge machinery is observation-only by construction —
+ * `fleet/automerge-canary-observer` declares `authority: 'observation-only',
+ * enforceSupported: false` and merely writes an audit row, and the M189
+ * regression sentinel is default-OFF, needs two consecutive RED observations,
+ * and is explicitly "proposal-only — NEVER applies, merges, or pushes".
+ *
+ * So a regression merged at 01:00 was invisible to the gate, and iteration N+1
+ * was then built on top of it, and N+2 on top of that. By morning the bad
+ * commit is load-bearing and backing it out is archaeology. THIS module makes
+ * that impossible: the first red suite after a merge ENDS THE RUN. A bad night
+ * costs exactly one revert, which this module names precisely, instead of a
+ * tangled morning.
+ *
+ * ── HOW IT KNOWS A MERGE LANDED ────────────────────────────────────────────
+ * By reading the repos, not by trusting a return value. It snapshots each
+ * enrolled repo's HEAD before the tick and compares after. Anything that moved
+ * a default branch — `automerge-pass`, a future path, anything at all — is
+ * caught, because the evidence is the repository itself. A result object can be
+ * wrong about what it did; `git rev-parse HEAD` cannot.
+ *
+ * ── FAIL SAFE ──────────────────────────────────────────────────────────────
+ * A landing that cannot be verified HALTS. Not "continue and hope": if the
+ * repo declares no required verify command, or the command cannot be run, or
+ * git cannot be read, or THE WORKING TREE IS DIRTY, the run ends and says why.
+ * That is the same direction the pre-merge gate already fails
+ * (`allowWithoutVerification` defaults false) and the same direction
+ * `daemonPaused()` projects an unreadable sentinel.
+ *
+ * Those cases are reported as UNPROVABLE, never as a regression, and the
+ * distinction is deliberate. Not being overly critical governs how harshly a
+ * CHANGE is judged; it says nothing about whether the EVIDENCE is sound. A
+ * dirty tree means the post-merge run measured the operator's uncommitted
+ * edits instead of the merge — the gate is not being strict there, it is
+ * being honest that it proved nothing. That case matters more than the rest,
+ * because it is the only one where the gate would otherwise say GREEN and be
+ * wrong, and a false green is what the whole run window exists to prevent.
+ *
+ * ── FOLLOW-UP: THE MERGE COMMIT MESSAGE ────────────────────────────────────
+ * Each merge is already exactly one revertable commit, but its message names
+ * only the proposal: `ashlr: merge proposal branch ashlr/merge/<id>`
+ * (inbox/merge.ts:2843-2854) over `ashlr: auto-merge proposal <id>`
+ * (inbox/merge.ts:2690). It says WHAT, not WHY. Carrying the why into the
+ * commit means editing inbox/merge.ts, which 14 automerge suites pin; until
+ * that is worth doing, the why lives in the overnight status record
+ * (daemon/overnight-status.ts), keyed by the same proposal id, and in the
+ * halt record written below.
+ *
+ * ── HOW IT HALTS ───────────────────────────────────────────────────────────
+ * By PARKING, never by killing. `stopDaemon()` is `setKill(true)`, which writes
+ * the global `~/.ashlr/KILL` that `assertMayMutate` also reads — it would
+ * disable the operator's own MCP write tools on arrival. This module's halt is
+ * `pauseDaemon()` (`~/.ashlr/daemon.paused`, see daemon/pause.ts), which stops
+ * autonomous dispatch and nothing else, and which one click reverses.
+ *
+ * No new runtime deps; node builtins only. Never throws out of a public API.
+ */
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, writeFileSync, readdirSync, readFileSync, renameSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { audit } from '../sandbox/audit.js';
+import { listEnrolled } from '../sandbox/policy.js';
+import { detectVerifyCommands, runVerifyCommandAsync, } from '../run/verify-commands.js';
+const GIT_TIMEOUT_MS = 10_000;
+/** Failure kinds that mean "could not prove it", not "it is broken". */
+const NON_REGRESSION_KINDS = new Set(['detection', 'harness', 'git', 'dirty-tree']);
+/**
+ * Is the repo's working tree clean enough for a post-merge verdict to MEAN
+ * anything?
+ *
+ * Returns null when clean, or a short description of what is dirty.
+ * `git status --porcelain` already honours `.gitignore`, so build output and
+ * caches do not show up here — what does show up is a real uncommitted change
+ * or a real untracked, un-ignored file. Both change what the suite measures.
+ *
+ * An unreadable status is reported as dirty: the same fail-safe direction as
+ * everything else here. We are asking "can this verdict be trusted", and
+ * "I could not tell" is not a yes.
+ */
+function workingTreeDirt(repo) {
+    const status = git(repo, ['status', '--porcelain', '--untracked-files=normal']);
+    if (status === null)
+        return 'git status could not be read';
+    if (status.length === 0)
+        return null;
+    const lines = status.split('\n').filter((line) => line.trim().length > 0);
+    const modified = lines.filter((line) => !line.startsWith('??')).length;
+    const untracked = lines.length - modified;
+    const parts = [];
+    if (modified > 0)
+        parts.push(`${modified} uncommitted change${modified === 1 ? '' : 's'}`);
+    if (untracked > 0)
+        parts.push(`${untracked} untracked file${untracked === 1 ? '' : 's'}`);
+    return parts.join(' and ');
+}
+/** Run git in `cwd`; trimmed stdout, or null on ANY failure. Never throws. */
+function git(cwd, args) {
+    try {
+        return execFileSync('git', args, {
+            cwd,
+            timeout: GIT_TIMEOUT_MS,
+            stdio: 'pipe',
+            encoding: 'utf8',
+            // A merge landed by the fleet must not be re-read through a hook.
+            env: { ...process.env, GIT_OPTIONAL_LOCKS: '0' },
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// Snapshot + landing detection
+// ---------------------------------------------------------------------------
+/**
+ * Read every ENROLLED repo's HEAD. Enrollment is the only source of repos —
+ * a repo that is not enrolled is never read, never verified, and can never
+ * appear in a landing or a halt.
+ *
+ * Never throws; an unreadable repo is recorded as such, not dropped.
+ */
+export function snapshotEnrolledHeads(seams = {}) {
+    let repos;
+    try {
+        repos = (seams.listEnrolledRepos ?? listEnrolled)();
+    }
+    catch {
+        return [];
+    }
+    if (!Array.isArray(repos))
+        return [];
+    const out = [];
+    for (const repo of repos) {
+        if (typeof repo !== 'string' || repo.length === 0)
+            continue;
+        const head = git(repo, ['rev-parse', 'HEAD']);
+        out.push(head && /^[0-9a-f]{40}$/.test(head)
+            ? { repo, head }
+            : { repo, head: null, unreadable: 'git rev-parse HEAD failed' });
+    }
+    return out;
+}
+function parseLandedCommits(repo, beforeHead, afterHead) {
+    // `%H %P %s` — oid, parent oids, subject. Oldest first so the revert plan
+    // can be emitted newest-first by reversing it.
+    const raw = git(repo, ['log', '--reverse', '--format=%H%x00%P%x00%s', `${beforeHead}..${afterHead}`]);
+    if (raw === null || raw.length === 0)
+        return [];
+    const commits = [];
+    for (const line of raw.split('\n')) {
+        const [sha, parents, subject] = line.split('\0');
+        if (!sha || !/^[0-9a-f]{40}$/.test(sha))
+            continue;
+        commits.push({
+            sha,
+            subject: (subject ?? '').slice(0, 200),
+            isMerge: (parents ?? '').trim().split(/\s+/).filter(Boolean).length > 1,
+        });
+    }
+    return commits;
+}
+/**
+ * Which enrolled repos moved between two snapshots.
+ *
+ * A repo present in `before` but unreadable in `after` (or vice versa) is NOT
+ * treated as "nothing happened" — it is reported as a landing with an empty
+ * commit list so the caller fails safe rather than assuming quiet.
+ */
+export function detectLandings(before, after) {
+    const beforeByRepo = new Map(before.map((s) => [s.repo, s]));
+    const landings = [];
+    const unreadable = [];
+    for (const now of after) {
+        const then = beforeByRepo.get(now.repo);
+        // A repo enrolled DURING the tick has no 'before'. Nothing can be said to
+        // have landed in it during this iteration, so it is not a landing.
+        if (!then)
+            continue;
+        if (then.head === null || now.head === null) {
+            unreadable.push({
+                repo: now.repo,
+                kind: 'git',
+                command: 'git rev-parse HEAD',
+                detail: now.unreadable ?? then.unreadable ?? 'repository head unreadable',
+            });
+            continue;
+        }
+        if (then.head === now.head)
+            continue;
+        const commits = parseLandedCommits(now.repo, then.head, now.head);
+        landings.push({
+            repo: now.repo,
+            beforeHead: then.head,
+            afterHead: now.head,
+            commits,
+            revertCommand: revertCommandFor(then.head, now.head, commits),
+        });
+    }
+    return { landings, unreadable };
+}
+/**
+ * The exact command that backs a landing out.
+ *
+ * A single merge commit — which is what `inbox/merge.mergeLocally` produces,
+ * a two-parent `commit-tree` against the verified base — reverts with
+ * `git revert -m 1 <oid>`. Several commits revert newest-first. A landing whose
+ * commits could not be listed falls back to resetting the branch to the exact
+ * OID it had before the iteration, which is always correct for a local-only
+ * merge that was never pushed (and `inbox/merge` never pushes: host auto-merge
+ * is disabled and returns a handoff instead).
+ */
+export function revertCommandFor(beforeHead, afterHead, commits) {
+    if (commits.length === 0) {
+        return `git reset --hard ${beforeHead}  # was ${afterHead}`;
+    }
+    const newestFirst = [...commits].reverse();
+    return newestFirst
+        .map((c) => `git revert --no-edit ${c.isMerge ? '-m 1 ' : ''}${c.sha}`)
+        .join(' && ');
+}
+// ---------------------------------------------------------------------------
+// The gate
+// ---------------------------------------------------------------------------
+/**
+ * Re-run each landed-on repo's OWN required verify commands against the MERGED
+ * head, and decide whether the run may continue.
+ *
+ * Fast in the common case: when no enrolled repo moved, this is one
+ * `git rev-parse` per repo and returns `no-landing` without running anything.
+ * The expensive path only runs when something actually merged, which is exactly
+ * when it is worth paying for.
+ *
+ * `halt` is true for `regressed` and `unverifiable` and for nothing else.
+ * Never throws.
+ */
+export async function runPostMergeGate(before, after, cfg, seams = {}) {
+    const now = seams.now ?? Date.now;
+    const startedAtMs = now();
+    const detect = seams.detect ?? detectVerifyCommands;
+    const run = seams.run ?? runVerifyCommandAsync;
+    const finish = (verdict, landings, failures, ranCommands, detail) => ({
+        verdict,
+        halt: verdict === 'regressed' || verdict === 'unverifiable',
+        landings,
+        failures,
+        ranCommands,
+        detail,
+        revertPlan: landings.map((l) => l.revertCommand),
+        durationMs: Math.max(0, now() - startedAtMs),
+    });
+    let landings;
+    let unreadable;
+    try {
+        ({ landings, unreadable } = detectLandings(before, after));
+    }
+    catch (error) {
+        const detail = `post-merge gate could not compare repository heads: ${errText(error)}`;
+        return finish('unverifiable', [], [{
+                repo: '(unknown)', kind: 'git', command: 'git rev-parse HEAD', detail,
+            }], 0, detail);
+    }
+    if (unreadable.length > 0) {
+        // FAIL SAFE. An enrolled repo we cannot read may have taken a merge we
+        // cannot see. Continuing would be iteration N+1 on an unknown tree.
+        const detail = `post-merge gate cannot read ${unreadable.length} enrolled repo(s) ` +
+            `(${unreadable.map((f) => f.repo).join(', ')}); the run cannot prove what landed`;
+        return finish('unverifiable', landings, unreadable, 0, detail);
+    }
+    if (landings.length === 0) {
+        return finish('no-landing', [], [], 0, 'no enrolled repository head moved this iteration');
+    }
+    const failures = [];
+    let ranCommands = 0;
+    let unverifiable = false;
+    for (const landing of landings) {
+        if (seams.signal?.aborted) {
+            // A shutdown mid-verification has NOT proven the merge good. Halt.
+            const detail = `post-merge verification was interrupted for ${landing.repo}; the merge is unproven`;
+            failures.push({ repo: landing.repo, kind: 'harness', command: '(interrupted)', detail });
+            return finish('unverifiable', landings, failures, ranCommands, detail);
+        }
+        // ── UNPROVABLE: a dirty tree ─────────────────────────────────────────
+        // Checked BEFORE the suite runs, because a suite run against a dirty tree
+        // is not cheap and not meaningful.
+        //
+        // The whole overnight safety property is "post-merge verification halts
+        // the run before a regression compounds". If that verification can be
+        // silently invalid, the property is void — and this is the one failure
+        // mode where the gate says GREEN and is wrong, which is strictly worse
+        // than a false halt. A tree carrying uncommitted edits measures the
+        // operator's work-in-progress, not the merge.
+        //
+        // This is NOT the gate being harsh about a change. Being un-harsh governs
+        // how we judge a diff; it says nothing about whether the evidence is
+        // sound. A dirty tree sits in the same category as a repo with no
+        // required verify command and a repo whose HEAD cannot be read: the gate
+        // is not refusing the change, it is refusing to pretend it proved one.
+        const dirt = workingTreeDirt(landing.repo);
+        if (dirt !== null) {
+            failures.push({
+                repo: landing.repo,
+                kind: 'dirty-tree',
+                command: 'git status --porcelain',
+                detail: `the working tree holds ${dirt}, so a post-merge run there would measure those ` +
+                    `and not the merge — the result cannot be trusted either way`,
+            });
+            unverifiable = true;
+            continue;
+        }
+        let commands;
+        try {
+            commands = detect(landing.repo, 'merge');
+        }
+        catch (error) {
+            failures.push({
+                repo: landing.repo, kind: 'detection', command: 'detectVerifyCommands',
+                detail: `verify-command detection threw: ${errText(error)}`,
+            });
+            unverifiable = true;
+            continue;
+        }
+        const required = commands.filter((c) => c.required !== false);
+        if (required.length === 0) {
+            // Same fail-closed direction as the PRE-merge gate, which refuses a repo
+            // with no required command unless allowWithoutVerification is set. A
+            // merge that landed in a repo that can no longer prove itself is not
+            // something to keep building on for another six hours.
+            failures.push({
+                repo: landing.repo, kind: 'detection', command: 'detectVerifyCommands',
+                detail: 'no REQUIRED verify command detected after the merge — the landing cannot be proven good',
+            });
+            unverifiable = true;
+            continue;
+        }
+        for (const command of required) {
+            if (seams.signal?.aborted) {
+                const detail = `post-merge verification was interrupted for ${landing.repo}; the merge is unproven`;
+                failures.push({ repo: landing.repo, kind: 'harness', command: '(interrupted)', detail });
+                return finish('unverifiable', landings, failures, ranCommands, detail);
+            }
+            let result;
+            try {
+                ranCommands++;
+                result = await run(command, landing.repo, cfg, {
+                    ...(seams.signal ? { signal: seams.signal } : {}),
+                });
+            }
+            catch (error) {
+                // A command that could not be EXECUTED proves nothing about the diff.
+                // Classified as 'harness' so it halts as unverifiable rather than as a
+                // regression the merge did not necessarily cause.
+                failures.push({
+                    repo: landing.repo, kind: 'harness', command: command.cmd.join(' '),
+                    detail: `verify command could not be run: ${errText(error)}`,
+                });
+                unverifiable = true;
+                continue;
+            }
+            if (!result.ok) {
+                failures.push({
+                    repo: landing.repo,
+                    kind: command.kind,
+                    command: result.command || command.cmd.join(' '),
+                    // Metadata only — command OUTPUT never reaches an audit summary.
+                    detail: result.timedOut
+                        ? `timed out after the merge`
+                        : `failed after the merge (exit ${result.exitCode}` +
+                            `${result.failureCategory ? `, ${result.failureCategory}` : ''})`,
+                });
+            }
+        }
+    }
+    const merged = landings.reduce((n, l) => n + Math.max(1, l.commits.length), 0);
+    // Only a check that actually RAN and came back red is a regression.
+    const red = failures.filter((f) => !NON_REGRESSION_KINDS.has(f.kind));
+    if (red.length > 0) {
+        return finish('regressed', landings, failures, ranCommands, `POST-MERGE REGRESSION: ${red.length} required check(s) RED in ` +
+            `${new Set(red.map((f) => f.repo)).size} repo(s) after ${merged} landed commit(s); run halted`);
+    }
+    if (unverifiable) {
+        const dirty = failures.filter((f) => f.kind === 'dirty-tree');
+        return finish('unverifiable', landings, failures, ranCommands, `POST-MERGE UNPROVABLE: landing could not be verified in ` +
+            `${new Set(failures.map((f) => f.repo)).size} repo(s)` +
+            (dirty.length > 0
+                ? ` (${dirty.length} with a dirty working tree — the verdict would have measured ` +
+                    `uncommitted edits, not the merge)`
+                : '') +
+            `; run halted rather than built upon`);
+    }
+    return finish('clean', landings, failures, ranCommands, `post-merge suite green: ${ranCommands} required check(s) across ` +
+        `${landings.length} repo(s) after ${merged} landed commit(s)`);
+}
+function errText(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+// ---------------------------------------------------------------------------
+// The halt record — a bad night must cost one revert, not archaeology
+// ---------------------------------------------------------------------------
+export function postMergeHaltDir() {
+    return join(homedir(), '.ashlr', 'run-window');
+}
+/**
+ * Persist the halt durably (exclusive tmp + atomic rename) and audit it.
+ * Returns the record path, or null when it could not be written — a write
+ * failure must never itself throw out of the loop's shutdown path.
+ */
+export function recordPostMergeHalt(result, opts = {}) {
+    if (!result.halt)
+        return null;
+    const nowMs = (opts.now ?? Date.now)();
+    const record = {
+        recordType: 'daemon-post-merge-halt',
+        haltedAt: new Date(nowMs).toISOString(),
+        verdict: result.verdict,
+        detail: result.detail,
+        landings: result.landings,
+        failures: result.failures,
+        revertPlan: result.revertPlan,
+    };
+    let path = null;
+    try {
+        const dir = postMergeHaltDir();
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        path = join(dir, `halt-${new Date(nowMs).toISOString().replace(/[:.]/g, '-')}.json`);
+        const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
+        try {
+            writeFileSync(tmp, JSON.stringify(record, null, 2) + '\n', { mode: 0o600, flag: 'wx' });
+            renameSync(tmp, path);
+        }
+        catch (error) {
+            try {
+                unlinkSync(tmp);
+            }
+            catch { /* the rename already consumed it */ }
+            throw error;
+        }
+        void dirname(path);
+    }
+    catch {
+        path = null;
+    }
+    try {
+        audit({
+            action: 'daemon:post-merge-halt',
+            repo: result.landings[0]?.repo ?? null,
+            sandboxId: null,
+            summary: `${result.detail}${result.revertPlan.length > 0
+                ? ` — revert with: ${result.revertPlan.join(' ; ')}`
+                : ''}`,
+            result: 'refused',
+        });
+    }
+    catch {
+        // audit() swallows its own errors; this covers a thrown path resolution.
+    }
+    return path;
+}
+/** Read halt records back, newest first. Best-effort; never throws. */
+export function readPostMergeHalts(limit = 20) {
+    try {
+        const dir = postMergeHaltDir();
+        const names = readdirSync(dir)
+            .filter((n) => n.startsWith('halt-') && n.endsWith('.json'))
+            .sort()
+            .reverse()
+            .slice(0, Math.max(0, limit));
+        const out = [];
+        for (const name of names) {
+            try {
+                const parsed = JSON.parse(readFileSync(join(dir, name), 'utf8'));
+                if (parsed?.recordType === 'daemon-post-merge-halt')
+                    out.push(parsed);
+            }
+            catch { /* a malformed record is skipped, never fatal */ }
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=post-merge-halt.js.map

package/dist/core/daemon/post-merge-halt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-merge-halt.js","sourceRoot":"","sources":["../../../src/core/daemon/post-merge-halt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,2BAA2B,CAAC;AA+FnC,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,wEAAwE;AACxE,MAAM,oBAAoB,GACxB,IAAI,GAAG,CAA2B,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AAEnF;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAChF,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,8BAA8B,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,sBAAsB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3F,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,kBAAkB,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/B,GAAG;YACH,OAAO,EAAE,cAAc;YACvB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM;YAChB,kEAAkE;YAClE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE;SACjD,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA4B,EAAE;IAClE,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,YAAY,CAAC,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,UAAkB,EAAE,SAAiB;IAC7E,0EAA0E;IAC1E,+CAA+C;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,yBAAyB,EAAE,GAAG,UAAU,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC;IACtG,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACtC,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA0B,EAC1B,KAAyB;IAEzB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAE1C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,oBAAoB;gBAC7B,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,IAAI,4BAA4B;aAC1E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;YAAE,SAAS;QAErC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,OAAO;YACP,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,SAAiB,EACjB,OAAuB;IAEvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,oBAAoB,UAAU,WAAW,SAAS,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3C,OAAO,WAAW;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;SACtE,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA0B,EAC1B,KAAyB,EACzB,GAAgB,EAChB,QAAuD,EAAE;IAEzD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,oBAAoB,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,qBAAqB,CAAC;IAE/C,MAAM,MAAM,GAAG,CACb,OAAyB,EACzB,QAA4B,EAC5B,QAA4B,EAC5B,WAAmB,EACnB,MAAc,EACO,EAAE,CAAC,CAAC;QACzB,OAAO;QACP,IAAI,EAAE,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,cAAc;QAC3D,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,MAAM;QACN,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAChD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;KAC7C,CAAC,CAAC;IAEH,IAAI,QAA4B,CAAC;IACjC,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,uDAAuD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC;gBACjC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM;aACtE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,MAAM,GACV,+BAA+B,UAAU,CAAC,MAAM,oBAAoB;YACpE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC;QACpF,OAAO,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,kDAAkD,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,mEAAmE;YACnE,MAAM,MAAM,GAAG,+CAA+C,OAAO,CAAC,IAAI,yBAAyB,CAAC;YACpG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,OAAO,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;QAED,wEAAwE;QACxE,0EAA0E;QAC1E,mCAAmC;QACnC,EAAE;QACF,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,8CAA8C;QAC9C,EAAE;QACF,0EAA0E;QAC1E,qEAAqE;QACrE,kEAAkE;QAClE,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,0BAA0B,IAAI,kDAAkD;oBACtF,6DAA6D;aAChE,CAAC,CAAC;YACH,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB;gBACtE,MAAM,EAAE,mCAAmC,OAAO,CAAC,KAAK,CAAC,EAAE;aAC5D,CAAC,CAAC;YACH,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;QAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,yEAAyE;YACzE,qEAAqE;YACrE,qEAAqE;YACrE,uDAAuD;YACvD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB;gBACtE,MAAM,EAAE,yFAAyF;aAClG,CAAC,CAAC;YACH,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,+CAA+C,OAAO,CAAC,IAAI,yBAAyB,CAAC;gBACpG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzF,OAAO,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,MAAyD,CAAC;YAC9D,IAAI,CAAC;gBACH,WAAW,EAAE,CAAC;gBACd,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;oBAC7C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,uEAAuE;gBACvE,kDAAkD;gBAClD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;oBACnE,MAAM,EAAE,oCAAoC,OAAO,CAAC,KAAK,CAAC,EAAE;iBAC7D,CAAC,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;oBAChD,iEAAiE;oBACjE,MAAM,EAAE,MAAM,CAAC,QAAQ;wBACrB,CAAC,CAAC,2BAA2B;wBAC7B,CAAC,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE;4BACjD,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;iBACtE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,oEAAoE;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EACxD,0BAA0B,GAAG,CAAC,MAAM,4BAA4B;YAChE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB,MAAM,+BAA+B,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAC3D,0DAA0D;YAC1D,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU;YACtD,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACf,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,+DAA+D;oBAChF,mCAAmC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,qCAAqC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EACpD,2BAA2B,WAAW,4BAA4B;QAClE,GAAG,QAAQ,CAAC,MAAM,kBAAkB,MAAM,mBAAmB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA2B,EAC3B,OAA+B,EAAE;IAEjC,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,MAAM,GAAwB;QAClC,UAAU,EAAE,wBAAwB;QACpC,QAAQ,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QACvC,OAAO,EAAE,MAAM,CAAC,OAAyC;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IACF,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;QACzD,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC;YACJ,MAAM,EAAE,wBAAwB;YAChC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI;YACtC,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACtD,CAAC,CAAC,mBAAmB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACpD,CAAC,CAAC,EAAE,EAAE;YACR,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAAC,KAAK,GAAG,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAC3D,IAAI,EAAE;aACN,OAAO,EAAE;aACT,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAChC,MAAM,GAAG,GAA0B,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;gBACxF,IAAI,MAAM,EAAE,UAAU,KAAK,wBAAwB;oBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}