@brightbeamai/chap-coordinator 0.3.1 → 0.3.2

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/canonical.ts","../src/catalogue.ts","../src/crypto.ts","../src/ids.ts","../src/jsonrpc.ts","../src/audit.ts","../src/patch.ts","../src/storage/store.ts","../src/api.ts","../src/types.ts","../src/profiles/audit_scitt.ts","../src/profiles/control.ts","../src/profiles/deliberation.ts","../src/profiles/handoff.ts","../src/profiles/routing.ts","../src/profiles/security_signed.ts","../src/profiles/whisper.ts","../src/coordinator.ts","../src/policy.ts","../src/transports/wrap.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator\n *\n * Public entry point. Re-exports the Coordinator class and the\n * supporting types so consumers can `import { Coordinator } from \"@brightbeamai/chap-coordinator\"`.\n *\n * Architecture:\n *\n *   coordinator.ts   The Coordinator class with Core + review/1.0 handlers\n *                    and the dispatch/registration infrastructure.\n *   profiles/*.ts    One module per optional profile, each registers its\n *                    method handlers on a Coordinator instance.\n *   canonical.ts     JCS canonicalisation (RFC 8785).\n *   crypto.ts        Ed25519 signing/verification (Node built-ins).\n *   ids.ts           ULID-format id generation.\n *   jsonrpc.ts       Error codes and helpers.\n *   patch.ts         RFC 6902 JSON Patch.\n *   types.ts         Wire and in-memory types.\n */\n\nexport { Coordinator, PRIVILEGED_METHODS } from \"./coordinator.js\";\nexport type {\n  CoordinatorOptions,\n  Handler,\n  TokenVerifier,\n  CredentialVerifier,\n  ScittSubmitter,\n  ScittReceiptVerifier,\n  RoutingPolicyFn,\n  ReviewDepthPolicyFn,\n  EscalationPolicyFn,\n} from \"./coordinator.js\";\n\nexport { call, makeApi, CoordinatorError } from \"./api.js\";\nexport type { CoordinatorApi } from \"./api.js\";\nexport type {\n  MethodName,\n  MethodParams,\n  MethodResult,\n  MethodTable,\n} from \"./methods.js\";\n\nexport { entryCall, entryRecord, isRefusal, linkHash } from \"./audit.js\";\n\nexport { MemoryStore } from \"./storage/store.js\";\nexport type { Store, WorkspaceRecord } from \"./storage/store.js\";\n\nexport * from \"./types.js\";\nexport * from \"./jsonrpc.js\";\nexport * from \"./patch.js\";\nexport {\n  canonicalize, sha256Hex, contentHash, ZERO_HASH,\n} from \"./canonical.js\";\nexport {\n  deriveKeypair, deriveSeed, jwkFromPrivateKey,\n  publicKeyBytes, publicKeyFromJwk, publicKeyFromRaw,\n  signEnvelope, verifyEnvelope,\n} from \"./crypto.js\";\nexport type { Jwk as CryptoJwk } from \"./crypto.js\";\nexport { IdFactory } from \"./ids.js\";\nexport { makeDefaultPolicy } from \"./policy.js\";\n\nexport {\n  wrapMcpToolCall,\n  wrapA2aMessageExchange,\n} from \"./transports/wrap.js\";\nexport type {\n  WrapMcpToolCallOptions,\n  WrapA2aExchangeOptions,\n  WrapResult,\n  WrapA2aResult,\n} from \"./transports/wrap.js\";\n","/**\n * @brightbeamai/chap-coordinator/canonical\n *\n * Deterministic JSON canonicalisation for CHAP. CHAP signs and hashes the\n * canonicalisation of envelopes.\n *\n * Follows RFC 8785 (JCS) for objects, arrays, strings, booleans, and null,\n * with one deliberate restriction on numbers. RFC 8785 mandates the\n * ECMAScript number-to-string algorithm, which is hard to reproduce\n * byte-identically across languages; a subtle mismatch would make a chain\n * written by one implementation fail verification against another. To make\n * cross-implementation agreement provable rather than approximate, a CHAP\n * canonical number MUST be an integer within the safe-integer range\n * (abs value <= Number.MAX_SAFE_INTEGER). Non-integers and larger\n * magnitudes are rejected: represent them as strings. The Python reference\n * enforces the identical rule.\n */\n\nimport { createHash } from \"node:crypto\";\n\nexport const ZERO_HASH = \"sha256:\" + \"0\".repeat(64);\n\nconst NON_INTEGER_ERROR =\n  'CHAP canonical numbers must be integers; represent decimals as strings ' +\n  '(e.g. \"8.2\") so the hash is deterministic across implementations.';\nconst NUMBER_RANGE_ERROR =\n  \"CHAP canonical integers must be within the safe-integer range \" +\n  \"(abs value <= Number.MAX_SAFE_INTEGER); represent larger numbers as strings.\";\n\nconst LONE_SURROGATE_ERROR =\n  \"CHAP canonical strings must be valid Unicode (I-JSON / RFC 7493); \" +\n  \"unpaired UTF-16 surrogates are not permitted.\";\n\nfunction assertNoLoneSurrogate(s: string): void {\n  for (let i = 0; i < s.length; i++) {\n    const c = s.charCodeAt(i);\n    if (c >= 0xd800 && c <= 0xdbff) {\n      const next = i + 1 < s.length ? s.charCodeAt(i + 1) : 0;\n      if (next < 0xdc00 || next > 0xdfff) throw new Error(LONE_SURROGATE_ERROR);\n      i++;\n    } else if (c >= 0xdc00 && c <= 0xdfff) {\n      throw new Error(LONE_SURROGATE_ERROR);\n    }\n  }\n}\n\nfunction canonicalString(s: string): string {\n  assertNoLoneSurrogate(s);\n  return JSON.stringify(s);\n}\n\nfunction canonicalNumber(n: number): string {\n  if (!Number.isFinite(n)) {\n    throw new Error(\n      \"Non-finite numbers are not permitted in a CHAP canonical value\",\n    );\n  }\n  if (!Number.isInteger(n)) {\n    throw new Error(NON_INTEGER_ERROR);\n  }\n  if (Math.abs(n) > Number.MAX_SAFE_INTEGER) {\n    throw new Error(NUMBER_RANGE_ERROR);\n  }\n  // A safe integer's toString() is always plain decimal digits (no\n  // exponent), byte-identical to Python's str(int(...)).\n  return n.toString();\n}\n\nfunction canon(value: unknown): string {\n  if (value === null) return \"null\";\n  if (value === true) return \"true\";\n  if (value === false) return \"false\";\n  if (typeof value === \"string\") return canonicalString(value);\n  if (typeof value === \"number\") return canonicalNumber(value);\n  if (Array.isArray(value)) {\n    return \"[\" + value.map(canon).join(\",\") + \"]\";\n  }\n  if (typeof value === \"object\") {\n    const obj = value as Record<string, unknown>;\n    const keys = Object.keys(obj).sort();\n    const parts: string[] = [];\n    for (const key of keys) {\n      parts.push(canonicalString(key) + \":\" + canon(obj[key]));\n    }\n    return \"{\" + parts.join(\",\") + \"}\";\n  }\n  throw new TypeError(`Cannot canonicalise value of type ${typeof value}`);\n}\n\n/** Return the JCS canonical UTF-8 bytes for a JSON-compatible value. */\nexport function canonicalize(value: unknown): Buffer {\n  return Buffer.from(canon(value), \"utf-8\");\n}\n\n/** Return ``sha256:<64-hex>`` digest of bytes. */\nexport function sha256Hex(data: Buffer | string): string {\n  const h = createHash(\"sha256\");\n  h.update(typeof data === \"string\" ? Buffer.from(data, \"utf-8\") : data);\n  return \"sha256:\" + h.digest(\"hex\");\n}\n\n/** Convenience: content hash for an artefact payload via JCS. */\nexport function contentHash(content: unknown): string {\n  return sha256Hex(canonicalize(content));\n}\n","// Generated by scripts/sync-method-catalogue.mjs. Do not edit.\n// Source: schemas/profiles/chap-methods.schema.json\n/**\n * Which profile owns which method, and which methods are never gated.\n *\n * SPECIFICATION 15.4: a Coordinator refuses a method whose owning profile the\n * workspace does not advertise.\n * The rule applies to each method, since a namespace can span profiles: audit\n * spans audit-scitt and core; escalate spans review and routing; review spans\n * review and routing; task spans core and routing.\n */\n\n/** The profile that introduces each method the references implement. */\nexport const OWNING_PROFILE: Readonly<Record<string, string>> = Object.freeze({\n  \"abstain.declare\":         \"review/1.0\",\n  \"audit.read\":              \"core/1.0\",\n  \"audit.submit_to_scitt\":   \"audit-scitt/1.0\",\n  \"audit.verify_chain\":      \"audit-scitt/1.0\",\n  \"audit.verify_receipt\":    \"audit-scitt/1.0\",\n  \"control.cancel\":          \"control/1.0\",\n  \"control.pause\":           \"control/1.0\",\n  \"control.resume\":          \"control/1.0\",\n  \"control.rollback\":        \"control/1.0\",\n  \"control.set_mode_ceiling\":\"control/1.0\",\n  \"control.snapshot\":        \"control/1.0\",\n  \"control.supersede\":       \"control/1.0\",\n  \"decide.approve\":          \"review/1.0\",\n  \"decide.override\":         \"review/1.0\",\n  \"decide.reject\":           \"review/1.0\",\n  \"deliberate.close\":        \"deliberation/1.0\",\n  \"deliberate.comment\":      \"deliberation/1.0\",\n  \"deliberate.open\":         \"deliberation/1.0\",\n  \"deliberate.vote\":         \"deliberation/1.0\",\n  \"escalate.auto\":           \"routing/1.0\",\n  \"escalate.raise\":          \"review/1.0\",\n  \"handoff.accept\":          \"handoff/1.0\",\n  \"handoff.decline\":         \"handoff/1.0\",\n  \"handoff.propose\":         \"handoff/1.0\",\n  \"participant.join\":        \"core/1.0\",\n  \"participant.leave\":       \"core/1.0\",\n  \"participant.revoke_key\":  \"core/1.0\",\n  \"participant.rotate_key\":  \"core/1.0\",\n  \"review.depth\":            \"routing/1.0\",\n  \"review.request\":          \"review/1.0\",\n  \"task.complete\":           \"core/1.0\",\n  \"task.create\":             \"core/1.0\",\n  \"task.route\":              \"routing/1.0\",\n  \"task.update\":             \"core/1.0\",\n  \"whisper.answer\":          \"whisper/1.0\",\n  \"whisper.ask\":             \"whisper/1.0\",\n  \"workspace.create\":        \"core/1.0\",\n  \"workspace.describe\":      \"core/1.0\",\n  \"workspace.set_profiles\":  \"core/1.0\",\n});\n\n/**\n * Callable whatever the workspace advertises.\n *\n * Reads, because a workspace must always be able to ask what it is and to\n * check its own chain. Not the coordinator's read-only set: that holds\n * audit.submit_to_scitt, which reaches a transparency service and is a real\n * audit-scitt/1.0 capability.\n */\nexport const ALWAYS_AVAILABLE: ReadonlySet<string> = new Set([\n  \"workspace.describe\",\n  \"audit.read\",\n  \"audit.verify_chain\",\n  \"audit.verify_receipt\",\n]);\n","/**\n * @brightbeamai/chap-coordinator/crypto\n *\n * Ed25519 signing/verification for the security-signed/1.0 profile.\n *\n * Uses Node's built-in crypto (no external dependencies). Keys are\n * represented as RFC 7517 JWKs with kty=OKP, crv=Ed25519.\n */\n\nimport {\n  createPrivateKey,\n  createPublicKey,\n  KeyObject,\n  sign as nodeSign,\n  verify as nodeVerify,\n  randomBytes,\n  createHash,\n} from \"node:crypto\";\n\nconst ED25519_OID = Buffer.from(\"302a300506032b6570032100\", \"hex\");\n\nfunction b64urlNoPad(buf: Buffer): string {\n  return buf.toString(\"base64\").replace(/=+$/, \"\").replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n}\n\nfunction b64urlDecode(s: string): Buffer {\n  const pad = \"=\".repeat((4 - (s.length % 4)) % 4);\n  return Buffer.from(s.replace(/-/g, \"+\").replace(/_/g, \"/\") + pad, \"base64\");\n}\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  d?:  string;\n  use?: string;\n  alg?: string;\n}\n\n/**\n * Deterministically derive a 32-byte Ed25519 seed from a participant URI.\n * Demo / test only. production deployments supply real keys.\n */\nexport function deriveSeed(uri: string): Buffer {\n  return createHash(\"sha256\").update(\"chap:\" + uri).digest();\n}\n\n/**\n * Build a Node KeyObject (private key) from a raw 32-byte Ed25519 seed.\n */\nexport function privateKeyFromSeed(seed: Buffer): KeyObject {\n  if (seed.length !== 32) {\n    throw new Error(\"Ed25519 seed must be 32 bytes\");\n  }\n  // PKCS#8 DER for Ed25519: SEQ(SEQ(OID), OCTET(OCTET(seed)))\n  const pkcs8 = Buffer.concat([\n    Buffer.from(\"302e020100300506032b657004220420\", \"hex\"),\n    seed,\n  ]);\n  return createPrivateKey({ key: pkcs8, format: \"der\", type: \"pkcs8\" });\n}\n\n/** Public key bytes (32 bytes) from a private key. */\nexport function publicKeyBytes(privateKey: KeyObject): Buffer {\n  const pub = createPublicKey(privateKey);\n  const der = pub.export({ format: \"der\", type: \"spki\" }) as Buffer;\n  // SPKI for Ed25519 is the OID prefix + 32-byte raw public key\n  return der.subarray(der.length - 32);\n}\n\n/** Public KeyObject from raw 32-byte Ed25519 public key. */\nexport function publicKeyFromRaw(raw: Buffer): KeyObject {\n  if (raw.length !== 32) {\n    throw new Error(\"Ed25519 public key must be 32 bytes\");\n  }\n  const der = Buffer.concat([ED25519_OID, raw]);\n  return createPublicKey({ key: der, format: \"der\", type: \"spki\" });\n}\n\n/** Render a JWK from a Node private KeyObject. */\nexport function jwkFromPrivateKey(uri: string, key: KeyObject): Jwk {\n  const pub = publicKeyBytes(key);\n  return {\n    kty: \"OKP\",\n    crv: \"Ed25519\",\n    kid: createHash(\"sha256\").update(uri).digest(\"hex\").slice(0, 16),\n    use: \"sig\",\n    alg: \"EdDSA\",\n    x:   b64urlNoPad(pub),\n  };\n}\n\n/** Sign canonical bytes; return ``ed25519:<kid>:<base64>``. */\nexport function signEnvelope(canonical: Buffer, privateKey: KeyObject, kid: string): string {\n  const sig = nodeSign(null, canonical, privateKey);\n  return `ed25519:${kid}:${sig.toString(\"base64\")}`;\n}\n\n/** Verify a CHAP sig string against canonical bytes and a public key. */\nexport function verifyEnvelope(canonical: Buffer, sigTag: string, publicKey: KeyObject): boolean {\n  if (!sigTag.startsWith(\"ed25519:\")) return false;\n  const parts = sigTag.split(\":\");\n  if (parts.length < 2) return false;\n  const sigB64 = parts[parts.length - 1];\n  try {\n    const sig = Buffer.from(sigB64, \"base64\");\n    return nodeVerify(null, canonical, publicKey, sig);\n  } catch {\n    return false;\n  }\n}\n\n/** Parse a JWK x (base64url) into a Node public KeyObject. */\nexport function publicKeyFromJwk(jwk: Jwk): KeyObject {\n  return publicKeyFromRaw(b64urlDecode(jwk.x));\n}\n\n/** Demo helper: build a deterministic keypair + JWK for a URI. */\nexport function deriveKeypair(uri: string): { privateKey: KeyObject; jwk: Jwk } {\n  const seed = deriveSeed(uri);\n  const privateKey = privateKeyFromSeed(seed);\n  return { privateKey, jwk: jwkFromPrivateKey(uri, privateKey) };\n}\n\nexport { b64urlNoPad, b64urlDecode };\n","/**\n * @brightbeamai/chap-coordinator/ids\n *\n * ULID-format identifier generation. Supports a deterministic mode\n * for tests/demos so byte-for-byte replay works.\n */\n\nconst ALPHABET = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";  // Crockford\n\nfunction encode(value: bigint, length: number): string {\n  let out = \"\";\n  for (let i = 0; i < length; i++) {\n    const idx = Number(value & 31n);\n    out = ALPHABET[idx] + out;\n    value >>= 5n;\n  }\n  return out;\n}\n\nexport class IdFactory {\n  private counter: bigint;\n  private clockMs: number;\n\n  constructor(\n    public readonly deterministic: boolean = false,\n    seed: bigint = 0n,\n    startMs: number = 1_700_000_000_000,\n  ) {\n    this.counter = seed;\n    this.clockMs = startMs;\n  }\n\n  nowMs(): number {\n    if (this.deterministic) {\n      this.clockMs += 1;\n      return this.clockMs;\n    }\n    return Date.now();\n  }\n\n  private randomness(): bigint {\n    if (this.deterministic) {\n      this.counter += 1n;\n      return (this.counter * 0x9E3779B97F4A7C15n) & ((1n << 80n) - 1n);\n    }\n    // 80 bits of randomness. `globalThis.crypto` is standard from Node 19\n    // and present in every other supported runtime, so there is no fallback\n    // path: the previous one called `require`, which does not exist in an\n    // ES module and so threw on any runtime without the global.\n    const buf = new Uint8Array(10);\n    crypto.getRandomValues(buf);\n    let n = 0n;\n    for (const b of buf) n = (n << 8n) | BigInt(b);\n    return n;\n  }\n\n  ulid(): string {\n    const ts = BigInt(this.nowMs()) & ((1n << 48n) - 1n);\n    const rand = this.randomness();\n    return encode(ts, 10) + encode(rand, 16);\n  }\n\n  envelopeId():     string { return this.ulid(); }\n  taskId():         string { return \"tsk_\" + this.ulid(); }\n  artefactId():     string { return \"art_\" + this.ulid(); }\n  logicalId():      string { return \"lgl_\" + this.ulid(); }\n  workspaceId():    string { return \"wsp_\" + this.ulid(); }\n  deliberationId(): string { return \"dlb_\" + this.ulid(); }\n  handoffId():      string { return \"hnd_\" + this.ulid(); }\n  snapshotId():     string { return \"snp_\" + this.ulid(); }\n}\n","/**\n * @brightbeamai/chap-coordinator/jsonrpc\n *\n * Error codes (JSON-RPC standard + CHAP private range) and helpers.\n *\n * Error code allocations come directly from each profile spec. See\n * profiles/*.md for the authoritative definitions.\n */\n\nexport const E = {\n  // JSON-RPC 2.0 standard\n  PARSE:    -32700,\n  REQUEST:  -32600,\n  METHOD:   -32601,\n  PARAMS:   -32602,\n  INTERNAL: -32603,\n\n  // review/1.0 profile\n  NOT_REVIEWABLE: -32010,\n  NOT_AUTHORISED: -32011,\n  PATCH_FAILED:   -32012,\n  REVIEW_LAPSED:  -32013,\n  REVIEW_ALREADY_OPEN: -32014,\n\n  // whisper/1.0 profile (profiles/whisper.md S6)\n  WHISPER_ALREADY_ANSWERED:    -32020,\n  WHISPER_LAPSED:              -32021,\n  WHISPER_OPTION_NOT_IN_SET:   -32022,\n\n  // deliberation/1.0 profile (profiles/deliberation.md S5)\n  DELIB_VOTER_NOT_IN_LIST: -32030,\n  DELIB_ALREADY_VOTED:     -32031,\n  DELIB_CLOSED_OR_LAPSED:  -32032,\n  DELIB_UNKNOWN_RULE:      -32033,\n\n  // modes/1.0 profile (profiles/modes.md S6)\n  MODE_CEILING_EXCEEDED:   -32040,\n  MODE_STEP_UP_REQUIRED:   -32041,\n\n  // handoff/1.0 profile (profiles/handoff.md S6)\n  HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER: -32050,\n  HANDOFF_ALREADY_RESOLVED:               -32051,\n  HANDOFF_RECIPIENT_NOT_MEMBER:           -32052,\n\n  // control/1.0 profile (profiles/control.md S6)\n  CONTROL_STEP_UP_REQUIRED:    -32060,\n  CONTROL_NOT_AUTHORISED:      -32061,\n  CONTROL_SNAPSHOT_NOT_FOUND:  -32062,\n  CONTROL_WORKSPACE_PAUSED:    -32063,\n\n  // security-signed/1.0 profile (profiles/security-signed.md S7)\n  SIG_VERIFY_FAILED:         -32070,\n  SIG_KEY_NOT_FOUND:         -32071,\n  SIG_KEY_REVOKED:           -32072,\n  SIG_ROTATION_KEY_MISMATCH: -32073,\n  SIG_ARTEFACT_DIGEST_MISMATCH: -32074,\n\n  // audit-scitt/1.0 profile (profiles/audit-scitt.md S8)\n  SCITT_UNREACHABLE:        -32080,\n  SCITT_STATEMENT_REJECTED: -32081,\n  SCITT_RECEIPT_INVALID:    -32082,\n\n  // identity-oidc/1.0 profile (profiles/identity-oidc.md S8)\n  OIDC_STEP_UP_REQUIRED: -32402,\n  OIDC_TOKEN_INVALID:    -32403,\n  OIDC_CNF_MISMATCH:     -32404,\n  OIDC_SCOPE_MISSING:    -32405,\n\n  // identity-vc/1.0 profile (profiles/identity-vc.md S8)\n  VC_VP_INVALID:             -32410,\n  VC_HOLDER_BINDING_INVALID: -32411,\n  VC_CREDENTIAL_REVOKED:     -32412,\n  VC_SCHEMA_UNKNOWN:         -32413,\n\n  // routing/1.0 profile (profiles/routing.md S3-S5)\n  ROUTING_NO_ELIGIBLE_ASSIGNEE:   -32510,\n  ROUTING_POLICY_VIOLATION:       -32511,\n  ROUTING_AUTO_ESCALATION_TRIGGERED: -32512,\n  ROUTING_CANDIDATES_EMPTY:       -32513,\n  ROUTING_DEPTH_NOT_APPLICABLE:   -32514,\n  ROUTING_POLICY_UNREACHABLE:     -32515,\n  ROUTING_ESC_TARGET_UNAVAILABLE: -32516,\n} as const;\n\nexport function rpcError(code: number, message: string, data?: unknown) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\nexport function isValidEnvelope(env: unknown): boolean {\n  if (typeof env !== \"object\" || env === null) return false;\n  const e = env as Record<string, unknown>;\n  return e.jsonrpc === \"2.0\";\n}\n","/**\n * @brightbeamai/chap-coordinator/audit\n *\n * Audit entries, the chain link over them, and the rule for recording a\n * refusal (SPECIFICATION 10.1).\n *\n * An accepted call is recorded under `envelope`. A refused call that the rule\n * names is recorded under `request`, with an `outcome` beside it, so a reader\n * keyed on `envelope` passes it by instead of replaying it as effective. The\n * chain link hashes what the entry records: the envelope of an accepted call,\n * and the outcome together with the request of a refusal. Altering either\n * half of a refusal breaks the chain, moving its record under `envelope` fails\n * the shape check, and an entry with no outcome hashes exactly as it always\n * has, so every existing chain still verifies.\n */\nimport { canonicalize, sha256Hex } from \"./canonical.js\";\nimport { E } from \"./jsonrpc.js\";\nimport type { AuditEntry, Envelope } from \"./types.js\";\n\n/** The value an entry's chain link hashes. */\nexport function entryRecord(entry: AuditEntry): unknown {\n  if (entry.outcome != null) return { outcome: entry.outcome, request: entry.request };\n  return entry.envelope;\n}\n\n/** The call an entry records, whether it took effect or was refused. */\nexport function entryCall(entry: AuditEntry): Envelope | undefined {\n  return entry.envelope ?? entry.request ?? undefined;\n}\n\n/** True when an entry records a refused call. */\nexport function isRefusal(entry: AuditEntry): boolean {\n  return entry.outcome != null;\n}\n\n/** A JSON-RPC call: an object with `jsonrpc` \"2.0\" and a string `method`. */\nfunction isCall(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\n/**\n * An entry is well formed when it records an accepted call alone, under\n * `envelope`, or a refused call alone, under `request`, with an outcome of\n * status `refused` and an integer code. Requiring a JSON-RPC call on either\n * side is what stops a refusal's record being moved under `envelope`, where it\n * would hash to the same bytes and read as a call that took effect.\n */\nexport function entryIsWellFormed(entry: AuditEntry): boolean {\n  const accepted = entry.envelope != null;\n  const refused = entry.request != null;\n  if (accepted === refused) return false;\n  if (accepted) return isCall(entry.envelope) && entry.outcome == null;\n  const o = entry.outcome as unknown as Record<string, unknown> | null | undefined;\n  return isCall(entry.request) && o != null && typeof o === \"object\"\n    && o.status === \"refused\" && Number.isInteger(o.code);\n}\n\n/** Whether a call carries a top-level signature (security-signed/1.0). */\nexport function isSigned(call: unknown): boolean {\n  return call !== null && typeof call === \"object\" && typeof (call as { sig?: unknown }).sig === \"string\";\n}\n\n/**\n * The digest that identifies a signed call by what its sender signed: SHA-256\n * of the JCS of the call without its `sig`. Two encodings of one signature\n * give the same digest, so re-encoding a signature does not make a new call.\n */\nexport function signedDigest(call: Envelope): string {\n  const signed: Record<string, unknown> = { ...call };\n  delete signed.sig;\n  return sha256Hex(canonicalize(signed));\n}\n\n/** chain_head = SHA-256( JCS(record) || prev_hash ). */\nexport function linkHash(record: unknown, prev: string): string {\n  return sha256Hex(Buffer.concat([canonicalize(record), Buffer.from(prev, \"utf-8\")]));\n}\n\n/**\n * Refusals the log never records: a call that was malformed or invalid, a\n * fault in the Coordinator, and a call whose signature or key did not check\n * out.\n */\nconst UNRECORDED_CODES: ReadonlySet<number> = new Set([\n  E.PARSE, E.REQUEST, E.PARAMS, E.INTERNAL,\n  E.SIG_VERIFY_FAILED, E.SIG_KEY_NOT_FOUND, E.SIG_KEY_REVOKED, E.SIG_ROTATION_KEY_MISMATCH,\n]);\n\n/**\n * Methods whose refusals are never recorded. They run before the caller is\n * established as a member and are exempt from signature checks, so a refusal\n * of one proves nothing about who sent it.\n */\nconst UNRECORDED_METHODS: ReadonlySet<string> = new Set([\"workspace.create\", \"participant.join\"]);\n\n/**\n * Whether a refusal with this error is one the log records, before the test\n * that the caller is a member.\n *\n * `-32601` is recorded only when the profile gate refused a privileged method,\n * which is an attempt to pull an emergency brake the workspace has switched\n * off. The gate refusing an ordinary method, and a method that does not\n * exist, are not recorded.\n */\nexport function refusalIsRecorded(\n  method: string,\n  error: { code: number; data?: unknown },\n  privileged: ReadonlySet<string>,\n): boolean {\n  if (!Number.isInteger(error.code)) return false;\n  if (UNRECORDED_METHODS.has(method)) return false;\n  if (UNRECORDED_CODES.has(error.code)) return false;\n  if (error.code === E.METHOD) {\n    const data = error.data as { profile?: unknown } | undefined;\n    return typeof data?.profile === \"string\" && privileged.has(method);\n  }\n  return true;\n}\n","/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\n// The JSON type name of a value. Python and JavaScript name their own types\n// differently (dict against object, list against object, str against string).\n// The refusal names the JSON type, which both references and the\n// specification share.\nfunction jsonType(value: unknown): string {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  switch (typeof value) {\n    case \"object\":  return \"object\";\n    case \"string\":  return \"string\";\n    case \"number\":  return \"number\";\n    case \"boolean\": return \"boolean\";\n    default:        return \"null\";\n  }\n}\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names the position after the last element, which no\n      // element occupies, so only \"add\" can use it. Left as a string it slips\n      // through a numeric range check and writes a \"-\" property on the array.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names no existing element, so it cannot be removed.\n      // Left as a string it passes the numeric range check and then splice\n      // coerces it to zero, removing the first element instead.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n","/**\n * Pluggable persistence for the Coordinator.\n *\n * A Store persists workspace state between process restarts. Coordinators\n * call `store.save(workspaceId, snapshot)` after every mutation that\n * appends to the audit chain, and `store.load()` on startup to restore.\n *\n * Two implementations ship in-tree:\n *   - MemoryStore  (default, no persistence; existing behaviour)\n *   - SqliteStore  (real SQLite via better-sqlite3, opt-in)\n *\n * Third-party stores (Postgres, Redis, etc.) implement this interface.\n *\n * Concurrency model\n * -----------------\n *\n * A Coordinator is a **single-writer** component: dispatch is serial, workspace\n * state is held in memory, and each chain link is computed from the head the\n * instance holds. This interface is a persistence mechanism, not a\n * concurrency-control one. `save` is an unconditional write and no\n * implementation rejects a stale record.\n *\n * Running two or more Coordinator instances against one shared store is\n * therefore not supported. A stale instance's write replaces a newer one\n * wholesale: entries written by the other instance are lost, the chain is\n * re-linked from the surviving head, and `audit.verify_chain` still reports\n * `ok`, because the surviving chain is internally consistent. The loss is\n * silent and CHAP's own verification will not reveal it.\n *\n * If you need more than one instance, serialise writes above the Coordinator by\n * partitioning workspaces so no workspace is ever written by two, or by holding\n * an external lock. See SPECIFICATION.md section 10.3.\n *\n * Stores hold per-workspace JSON snapshots, not a decomposed relational\n * model. The Coordinator's snapshot/restore methods produce JSON-safe\n * payloads; this is fast for workspaces in the low-thousands of audit\n * entries and trades query flexibility for simplicity. Production\n * deployments needing rich query semantics should project the audit log\n * into their own analytics store via the `onAudit` listener.\n */\n\nexport interface WorkspaceRecord {\n  /** Workspace identifier. */\n  id: string;\n  /** JSON-serialisable payload produced by `Coordinator.snapshot()`. */\n  data: unknown;\n  /**\n   * Incremented on each save. Recorded for diagnostics and for stores that\n   * want it; it is NOT enforced. Nothing here performs a compare-and-swap,\n   * so this field does not give you optimistic concurrency. See the\n   * concurrency model in this module's header.\n   */\n  version: number;\n  /** Wall-clock timestamp of the last write, ISO-8601. */\n  updated_at: string;\n}\n\nexport interface Store {\n  /** Load all workspace records into memory. Called once on coordinator start. */\n  load(): Promise<WorkspaceRecord[]> | WorkspaceRecord[];\n\n  /** Persist one workspace record. Called after every mutation. */\n  save(record: WorkspaceRecord): Promise<void> | void;\n\n  /** Remove one workspace. Used by `workspace.delete` semantics (not in v0.2). */\n  delete(id: string): Promise<void> | void;\n\n  /** Release resources. Idempotent. */\n  close?(): Promise<void> | void;\n}\n\n/**\n * In-memory store. Default behaviour: no persistence, fast tests.\n * State lives in a Map; closing it discards everything.\n */\nexport class MemoryStore implements Store {\n  private records = new Map<string, WorkspaceRecord>();\n\n  load(): WorkspaceRecord[] {\n    return Array.from(this.records.values());\n  }\n\n  save(record: WorkspaceRecord): void {\n    this.records.set(record.id, record);\n  }\n\n  delete(id: string): void {\n    this.records.delete(id);\n  }\n\n  close(): void {\n    this.records.clear();\n  }\n}\n","/**\n * Typed method facade for the Coordinator.\n *\n * Replaces the verbose dispatch pattern:\n *\n *   const env = await coord.dispatch({\n *     jsonrpc: \"2.0\", id: \"x\",\n *     method: \"task.create\",\n *     params: { workspace, from, kind, input }\n *   });\n *   const taskId = env.result.task_id;\n *\n * with namespace-grouped calls that autocomplete and type-check:\n *\n *   const { task_id } = coord.api.task.create({ workspace, from, kind, input });\n *\n * Every method on the facade calls `dispatch(envelope)` internally with\n * an auto-generated envelope id, so the audit chain semantics, profile\n * gates, and signature checks all run identically.\n *\n * On dispatch error, the facade throws a `CoordinatorError` carrying the\n * JSON-RPC error code and message. Callers expecting `error` objects on\n * the wire can still use `dispatch()` directly.\n */\n\nimport type { Coordinator } from \"./coordinator.js\";\nimport type { Envelope } from \"./types.js\";\nimport type {\n  MethodName, MethodParams, MethodResult,\n} from \"./methods.js\";\n\nexport class CoordinatorError extends Error {\n  readonly code: number;\n  readonly data?: unknown;\n  constructor(code: number, message: string, data?: unknown) {\n    super(message);\n    this.name = \"CoordinatorError\";\n    this.code = code;\n    this.data = data;\n  }\n}\n\n/**\n * Single-call helper. Type-safe wrapper around `coord.dispatch()`.\n * Throws CoordinatorError if dispatch returns an error response.\n */\nexport function call<M extends MethodName>(\n  coord: Coordinator,\n  method: M,\n  params: MethodParams<M>,\n): MethodResult<M> {\n  const envelope: Envelope = {\n    jsonrpc: \"2.0\",\n    id: coord.ids.envelopeId(),\n    method,\n    params: params as unknown as Record<string, unknown>,\n  };\n  const out = coord.dispatch(envelope);\n  if (out.error) {\n    throw new CoordinatorError(out.error.code, out.error.message, out.error.data);\n  }\n  return out.result as MethodResult<M>;\n}\n\n// ============================================================\n//   Namespace-grouped facades\n// ============================================================\n//\n// Each namespace facade is a small object exposing one method per\n// CHAP verb. Implementations are one-liners that delegate to call().\n// The pattern is verbose but autocompletes well and type-checks\n// param shape and result shape from one declaration in methods.ts.\n\nexport function makeApi(coord: Coordinator) {\n  const c = <M extends MethodName>(m: M, p: MethodParams<M>) => call(coord, m, p);\n\n  return {\n    workspace: {\n      create:       (p: MethodParams<\"workspace.create\">)       => c(\"workspace.create\", p),\n      describe:     (p: MethodParams<\"workspace.describe\">)     => c(\"workspace.describe\", p),\n      set_profiles: (p: MethodParams<\"workspace.set_profiles\">) => c(\"workspace.set_profiles\", p),\n    },\n    participant: {\n      join:       (p: MethodParams<\"participant.join\">)       => c(\"participant.join\", p),\n      leave:      (p: MethodParams<\"participant.leave\">)      => c(\"participant.leave\", p),\n      rotate_key: (p: MethodParams<\"participant.rotate_key\">) => c(\"participant.rotate_key\", p),\n      revoke_key: (p: MethodParams<\"participant.revoke_key\">) => c(\"participant.revoke_key\", p),\n    },\n    task: {\n      create:   (p: MethodParams<\"task.create\">)   => c(\"task.create\", p),\n      update:   (p: MethodParams<\"task.update\">)   => c(\"task.update\", p),\n      complete: (p: MethodParams<\"task.complete\">) => c(\"task.complete\", p),\n      route:    (p: MethodParams<\"task.route\">)    => c(\"task.route\", p),\n    },\n    review: {\n      request: (p: MethodParams<\"review.request\">) => c(\"review.request\", p),\n      depth:   (p: MethodParams<\"review.depth\">)   => c(\"review.depth\", p),\n    },\n    decide: {\n      approve:  (p: MethodParams<\"decide.approve\">)  => c(\"decide.approve\", p),\n      reject:   (p: MethodParams<\"decide.reject\">)   => c(\"decide.reject\", p),\n      override: (p: MethodParams<\"decide.override\">) => c(\"decide.override\", p),\n    },\n    abstain: {\n      declare: (p: MethodParams<\"abstain.declare\">) => c(\"abstain.declare\", p),\n    },\n    escalate: {\n      raise: (p: MethodParams<\"escalate.raise\">) => c(\"escalate.raise\", p),\n      auto:  (p: MethodParams<\"escalate.auto\">)  => c(\"escalate.auto\", p),\n    },\n    whisper: {\n      ask:    (p: MethodParams<\"whisper.ask\">)    => c(\"whisper.ask\", p),\n      answer: (p: MethodParams<\"whisper.answer\">) => c(\"whisper.answer\", p),\n    },\n    deliberate: {\n      open:    (p: MethodParams<\"deliberate.open\">)    => c(\"deliberate.open\", p),\n      comment: (p: MethodParams<\"deliberate.comment\">) => c(\"deliberate.comment\", p),\n      vote:    (p: MethodParams<\"deliberate.vote\">)    => c(\"deliberate.vote\", p),\n      close:   (p: MethodParams<\"deliberate.close\">)   => c(\"deliberate.close\", p),\n    },\n    handoff: {\n      propose: (p: MethodParams<\"handoff.propose\">) => c(\"handoff.propose\", p),\n      accept:  (p: MethodParams<\"handoff.accept\">)  => c(\"handoff.accept\", p),\n      decline: (p: MethodParams<\"handoff.decline\">) => c(\"handoff.decline\", p),\n    },\n    control: {\n      pause:             (p: MethodParams<\"control.pause\">)             => c(\"control.pause\", p),\n      resume:            (p: MethodParams<\"control.resume\">)            => c(\"control.resume\", p),\n      cancel:            (p: MethodParams<\"control.cancel\">)            => c(\"control.cancel\", p),\n      supersede:         (p: MethodParams<\"control.supersede\">)         => c(\"control.supersede\", p),\n      snapshot:          (p: MethodParams<\"control.snapshot\">)          => c(\"control.snapshot\", p),\n      rollback:          (p: MethodParams<\"control.rollback\">)          => c(\"control.rollback\", p),\n      set_mode_ceiling:  (p: MethodParams<\"control.set_mode_ceiling\">)  => c(\"control.set_mode_ceiling\", p),\n    },\n    audit: {\n      read:            (p: MethodParams<\"audit.read\">)            => c(\"audit.read\", p),\n      submit_to_scitt: (p: MethodParams<\"audit.submit_to_scitt\">) => c(\"audit.submit_to_scitt\", p),\n      verify_receipt:  (p: MethodParams<\"audit.verify_receipt\">)  => c(\"audit.verify_receipt\", p),\n      verify_chain:    (p: MethodParams<\"audit.verify_chain\">)    => c(\"audit.verify_chain\", p),\n    },\n  };\n}\n\nexport type CoordinatorApi = ReturnType<typeof makeApi>;\n","/**\n * @brightbeamai/chap-coordinator. type vocabulary\n *\n * Wire-shape and in-memory types for the Coordinator. The schemas at\n * schemas/ are the normative wire types; these mirror them in\n * TypeScript for in-process use.\n */\n\nexport type ParticipantUri = string;\nexport type WorkspaceId    = string;\nexport type TaskId         = string;\nexport type ArtefactId     = string;\n\nexport type ParticipantType = \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n\nexport interface Envelope {\n  jsonrpc: \"2.0\";\n  id?:     string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?:  { code: number; message: string; data?: unknown };\n  /** security-signed/1.0: top-level signature, signed over JCS of the\n   *  envelope with this field removed. Form: ``ed25519:<kid>:<b64>``. */\n  sig?: string;\n}\n\nexport type Mode = \"shadow\" | \"trial\" | \"production\";\nexport type WorkspaceState = \"active\" | \"paused\" | \"closed\";\nexport type PauseScope = \"task\" | \"participant\" | \"workspace\";\n\nexport type TaskState =\n  | \"created\"\n  | \"in_progress\"\n  | \"review_requested\"\n  | \"completed\"\n  | \"declined\"\n  | \"abstained\"\n  | \"escalated\"\n  | \"superseded\"\n  | \"paused\"\n  | \"cancelled\";\n\n// ============================================================\n//   Key records (security-signed/1.0)\n// ============================================================\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  use?: string;\n  alg?: string;\n}\n\n/** A participant's JWK plus the validity window. Lookup by\n *  (participant, kid, ts) so historical envelopes verify across\n *  rotation per security-signed/1.0 S3-S5. */\nexport interface KeyRecord {\n  jwk:         Jwk;\n  kid:         string;\n  valid_from:  string;            // ISO timestamp; inclusive\n  valid_until?: string;           // ISO timestamp; exclusive; absent = unbounded\n  revoked_at?: string;\n  revoked_reason?: string;\n}\n\n// ============================================================\n//   Participants\n// ============================================================\n\nexport interface Member {\n  uri:    ParticipantUri;\n  type:   ParticipantType;\n  role:   string;\n  joined: string;\n  display_name?: string;\n  capabilities?: Record<string, unknown>;\n  scopes?:       string[];\n  keys:          KeyRecord[];\n  paused:        boolean;         // control.pause scope=participant\n  oidc_sub?:     string;\n  oidc_auth_time?: number;        // unix seconds\n  oidc_acr?:     string;\n  vc_holder?:    string;\n}\n\n// ============================================================\n//   Routing hints\n// ============================================================\n\nexport interface TaskRoutingHints {\n  criticality?: \"low\" | \"medium\" | \"high\" | \"critical\";\n  deadline?:    string;\n  max_cost_usd?: number;\n  risk_tier?:   string;\n  [extra: string]: unknown;\n}\n\nexport interface ArtefactRoutingHints {\n  confidence?:        number | string;\n  model_id?:          string;\n  cost_consumed_usd?: number;\n  latency_ms?:        number;\n  [extra: string]:    unknown;\n}\n\n// ============================================================\n//   JSON Patch (RFC 6902)\n// ============================================================\n\nexport interface JsonPatchOp {\n  op:    \"add\" | \"replace\" | \"remove\" | \"copy\" | \"move\" | \"test\";\n  path:  string;\n  value?: unknown;\n  from?: string;\n}\n\n// ============================================================\n//   Override artefact (review/1.0)\n// ============================================================\n\nexport interface OverrideArtefact {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  reviewer:          ParticipantUri;\n  based_on_artefact: unknown;\n  diff:              JsonPatchOp[];\n  result:            unknown;\n  rationale:         string;\n  tags:              string[];\n  policy_refs:       string[];\n  ts:                string;\n  logical_id?:       string;\n  instance_id?:      string;\n  intent_preserved?: boolean;\n}\n\n// ============================================================\n//   Route decision artefact (routing/1.0)\n// ============================================================\n\nexport interface RouteDecisionArtefact {\n  id:             ArtefactId;\n  kind:           \"route_decision\";\n  decision_type:  \"task.route\" | \"review.depth\" | \"escalate.auto\";\n  outcome:        unknown;\n  produced_by:    ParticipantUri;\n  produced_at:    string;\n  task?:          TaskId;\n  policy_id?:     string;\n  hints_observed: Record<string, unknown>;\n  rationale:      string;\n  // Auxiliary fields per decision_type:\n  // task.route:     alternatives_considered\n  // review.depth:   sampling_probability\n  // escalate.auto:  escalation_target\n  [extra: string]: unknown;\n}\n\n// ============================================================\n//   Snapshot artefact (control/1.0)\n// ============================================================\n\nexport interface SnapshotArtefact {\n  id:           ArtefactId;\n  kind:         \"snapshot\";\n  produced_at:  string;\n  produced_by:  ParticipantUri;\n  content_hash: string;\n  content: {\n    workspace: WorkspaceId;\n    audit_seq: number;\n    label?:    string;\n    include:   string[];\n    state:     Record<string, unknown>;\n  };\n}\n\n// ============================================================\n//   Whisper (whisper/1.0)\n// ============================================================\n\nexport interface WhisperPrompt {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  asker:             ParticipantUri;\n  askee:             ParticipantUri[];\n  question:          string;\n  options?:          Array<{ id: string; label?: string }>;\n  asked_at:          string;\n  deadline_ms:       number;\n  default_if_lapsed: unknown;\n  urgency:           \"low\" | \"medium\" | \"high\";\n  state:             \"pending\" | \"answered\" | \"lapsed\";\n  answered_at?:      string;\n  answered_by?:      ParticipantUri;\n  answer_option?:    string;\n  answer_text?:      string;\n  comment?:          string;\n  default_applied?:  unknown;\n}\n\n// ============================================================\n//   Deliberation (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberationVote {\n  ts:            string;\n  voter:         ParticipantUri;\n  vote:          \"yea\" | \"nay\" | \"abstain\";\n  weight?:       number;\n  comment?:      string;\n  veto_invoked?: boolean;\n}\n\nexport interface Deliberation {\n  id:           string;\n  task_id?:     TaskId;\n  opener:       ParticipantUri;\n  participants: ParticipantUri[];\n  rule:         string;        // raw rule string\n  question?:    string;\n  weights?:     Record<ParticipantUri, number>;\n  veto?:        Record<ParticipantUri, boolean>;\n  deadline?:    string;\n  state:        \"open\" | \"closed\" | \"lapsed\";\n  comments:     { ts: string; from: ParticipantUri; text: string }[];\n  votes:        DeliberationVote[];\n  outcome?:     {\n    outcome:  \"approved\" | \"rejected\" | \"error\";\n    rule:     string;\n    tally?:   { yea: number; nay: number };\n    vetoes?:  ParticipantUri[];\n    reason?:  string;\n  };\n  opened_at:    string;\n}\n\n// ============================================================\n//   Handoff (handoff/1.0)\n// ============================================================\n\nexport interface HandoffTaskItem {\n  task_id:         TaskId;\n  title?:          string;\n  status_summary?: string;\n  next_action?:    string;\n  blockers?:       string[];\n}\n\nexport interface Handoff {\n  id:           string;\n  proposer:     ParticipantUri;\n  recipient:    ParticipantUri;     // single URI or \"group:...\"\n  proposed_at:  string;\n  tasks:        HandoffTaskItem[];\n  summary?:     string;\n  context_links: string[];\n  state:        \"proposed\" | \"accepted\" | \"declined\";\n  resolved_at?: string;\n  accepted_by?: ParticipantUri;\n  accepted_task_ids?: TaskId[];\n  accept_comment?:    string;\n  decline_reason?:    string;\n  decline_suggested_target?: ParticipantUri;\n}\n\n// ============================================================\n//   Review decision (review/1.0)\n// ============================================================\n\nexport interface ReviewDecision {\n  reviewer: ParticipantUri;\n  kind:     \"approve\" | \"reject\" | \"override\" | \"abstain\";\n  ts:       string;\n  comment?: string;\n  tags?:    string[];\n  override_artefact_id?: ArtefactId;\n  abstain_category?:     string;\n}\n\n// ============================================================\n//   Task\n// ============================================================\n\nexport interface Task {\n  id:           TaskId;\n  kind:         string;\n  state:        TaskState;\n  assignee:     ParticipantUri;\n  delegator:    ParticipantUri;\n  input:        Record<string, unknown>;\n  output?:      unknown;\n  confidence?:  number | string;\n  deadline?:    string;\n  created_at:   string;\n  updated_at:   string;\n  mode:         Mode;\n  review_required?: boolean;\n  routing_hints?:           TaskRoutingHints;\n  artefact_routing_hints?:  ArtefactRoutingHints;\n  review?: {\n    requested_at: string;\n    requested_to: ParticipantUri[];\n    rule:         string;\n    deadline?:    string;\n    decisions:    ReviewDecision[];\n  };\n  history:      { ts: string; from: ParticipantUri; state: TaskState; note?: string }[];\n  supersedes?:  TaskId;\n  superseded_by?: TaskId;\n  parent?:      TaskId;\n  paused:       boolean;\n  paused_from?: TaskState;\n  /** Transient: holds the artefact passed to review.request so\n   *  decide.override can use it as the patch base. */\n  pending_artefact?: unknown;\n}\n\n// ============================================================\n//   Audit\n// ============================================================\n\nexport interface AuditEntry {\n  seq:      number;\n  arrived:  string;\n  /** The accepted call. Absent on a refusal entry. */\n  envelope?: Envelope;\n  /**\n   * The refused call, as received. Present only on a refusal entry, and held\n   * here rather than under `envelope` so a reader keyed on `envelope` passes\n   * the refusal by instead of replaying it (SPECIFICATION 10.1).\n   */\n  request?:  Envelope;\n  /** Present only on a refusal entry. */\n  outcome?:  RefusalOutcome;\n  prev_hash?: string;\n}\n\n/** Why a recorded call did not take effect. */\nexport interface RefusalOutcome {\n  status: \"refused\";\n  /** The error code the caller was answered with. */\n  code:   number;\n}\n\n// ============================================================\n//   Workspace\n// ============================================================\n\nexport interface Workspace {\n  id:           WorkspaceId;\n  created:      string;\n  state:        WorkspaceState;\n  profiles:     string[];\n  mode:         Mode;\n  mode_ceiling: Mode;\n  routing_policy_uri?: string;\n  step_up_window_sec: number;\n  min_acr?: string;\n  members:         Map<ParticipantUri, Member>;\n  tasks:           Map<TaskId, Task>;\n  overrides:       Map<ArtefactId, OverrideArtefact>;\n  whispers:        Map<string, WhisperPrompt>;\n  deliberations:   Map<string, Deliberation>;\n  handoffs:        Map<string, Handoff>;\n  snapshots:       Map<ArtefactId, SnapshotArtefact>;\n  route_decisions: Map<ArtefactId, RouteDecisionArtefact>;\n  // task.create idempotency: caller-supplied key -> task_id.\n  idempotency_keys: Record<string, TaskId>;\n  audit:           AuditEntry[];\n  chain_head?:     string;\n  chain_enabled:   boolean;\n}\n\n/**\n * Listener callback invoked synchronously when an envelope is appended\n * to the workspace audit log.\n */\nexport type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;\n\n/** True iff mode `a` is <= ceiling. */\nexport function modeLE(a: Mode, ceiling: Mode): boolean {\n  const order: Record<Mode, number> = { shadow: 0, trial: 1, production: 2 };\n  return order[a] <= order[ceiling];\n}\n","/**\n * audit-scitt/1.0 profile (profiles/audit-scitt.md).\n *\n * Methods:\n *   - audit.submit_to_scitt   -> build COSE_Sign1-shaped statements, pass to submitter\n *   - audit.verify_receipt    -> delegate to deployment hook\n *   - audit.verify_chain      -> replay local prev_hash chain\n *\n * External SCITT integration is the deployment's job; the Coordinator\n * builds the statement shape and routes through CoordinatorOptions.scittSubmitter.\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { entryIsWellFormed, entryRecord, linkHash } from \"../audit.js\";\nimport { canonicalize, ZERO_HASH } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\n\n/** The head after a malformed entry, which no stored head can match. */\nconst MALFORMED = \"sha256:malformed\";\n\n/**\n * A statement's payload is what the entry's chain link hashes: the envelope\n * of an accepted call, or the outcome together with the request of a refusal.\n */\nfunction buildStatement(workspaceId: string, record: unknown, issuer: string): Record<string, unknown> {\n  return {\n    protected: {\n      alg: -8,  // Ed25519 per COSE\n      iss: issuer,\n      kid: \"scitt-issuer\",\n      cwt_claims: { sub: workspaceId, iat: null },\n      \"content-type\": \"application/chap+json;version=0.3\",\n    },\n    payload: canonicalize(record).toString(\"utf-8\"),\n    signature: \"<deployment-supplied>\",\n  };\n}\n\nexport function registerAuditScitt(coord: Coordinator): void {\n  coord.handlers.set(\"audit.submit_to_scitt\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const issuer = (p.issuer as string) ?? \"service:coordinator\";\n\n    if (!coord.options.scittSubmitter) {\n      const statements = ws.audit.slice(fromSeq, toSeq).map(e =>\n        buildStatement(ws.id, entryRecord(e), issuer));\n      return { result: {\n        statements,\n        note: \"No scittSubmitter configured; submit these out-of-band\",\n      }};\n    }\n    const receipts: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      const statement = buildStatement(ws.id, entryRecord(entry), issuer);\n      let receipt: Record<string, unknown> | null;\n      try {\n        receipt = coord.options.scittSubmitter(statement);\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_UNREACHABLE, `SCITT submission error: ${msg}`) };\n      }\n      if (receipt === null) {\n        return { error: rpcError(E.SCITT_STATEMENT_REJECTED,\n          `Statement rejected at seq ${entry.seq}`) };\n      }\n      receipts.push({ seq: entry.seq, receipt });\n    }\n    return { result: { receipts } };\n  });\n\n  coord.handlers.set(\"audit.verify_receipt\", (p) => {\n    const receipt = p.receipt;\n    if (typeof receipt !== \"object\" || receipt === null) {\n      return { error: rpcError(E.PARAMS, \"receipt must be an object\") };\n    }\n    if (coord.options.verifyScittReceipt) {\n      let ok: boolean;\n      try { ok = !!coord.options.verifyScittReceipt(receipt as Record<string, unknown>); }\n      catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_RECEIPT_INVALID, `verify error: ${msg}`) };\n      }\n      if (!ok) return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"Receipt did not verify\") };\n      return { result: { verified: true } };\n    }\n    return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"No verifyScittReceipt hook configured; receipt not verified\") };\n  });\n\n  coord.handlers.set(\"audit.verify_chain\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (!(ws.chain_enabled || coord.options.enableChain)) {\n      return { error: rpcError(E.PARAMS, \"Chain not enabled for this workspace\") };\n    }\n    // Range verification is not implemented. Accepting the parameters and\n    // replaying the whole log anyway would answer a wider question than the\n    // caller asked while reporting counts scoped to the whole log, which is\n    // the failure this method was just fixed to stop making.\n    if (p.from_seq !== undefined || p.to_seq !== undefined) {\n      return { error: rpcError(\n        E.PARAMS,\n        \"Range verification is not implemented; omit from_seq and to_seq to \" +\n        \"verify the whole log.\",\n      ) };\n    }\n    // Coverage begins at the first entry carrying a prev_hash. A workspace\n    // may enable chaining part-way through its life, in which case every\n    // earlier entry is outside the chain and cannot be evaluated against\n    // anything. Those entries are not evidence of tampering and not\n    // evidence of integrity: they were never checked, and the verdict\n    // below has to say so rather than pass over them.\n    let start = ws.audit.findIndex(e => e.prev_hash != null);\n    if (start < 0) start = ws.audit.length;\n    const errors: string[] = [];\n    let prev = ZERO_HASH;\n    let resync = false;\n    for (const e of ws.audit.slice(start)) {\n      // After a malformed entry the next link is taken as stored, so the\n      // entries after it are judged on their own links. The chain is\n      // reported broken either way.\n      const expectedPrev = resync && typeof e.prev_hash === \"string\" ? e.prev_hash : prev;\n      resync = false;\n      // A chain-enabled workspace must have prev_hash on every entry; a\n      // missing value is a defect, not a reason to skip the check.\n      if (e.prev_hash !== expectedPrev) {\n        errors.push(`seq ${e.seq}: prev_hash mismatch`);\n      }\n      // An entry that records neither one accepted envelope nor one refused\n      // request with its outcome has been altered, and cannot be linked.\n      if (!entryIsWellFormed(e)) {\n        errors.push(`seq ${e.seq}: malformed entry`);\n        prev = MALFORMED;\n        resync = true;\n        continue;\n      }\n      prev = linkHash(entryRecord(e), expectedPrev);\n    }\n    // The recomputed head must match the stored head; this is what makes\n    // the final entry tamper-evident.\n    // Explicit null/undefined check, matching Python. A falsy-but-present\n    // head must not be silently replaced with ZERO_HASH, or the two\n    // implementations return different verdicts for the same state.\n    const storedHead = (ws.chain_head === undefined || ws.chain_head === null)\n      ? ZERO_HASH : ws.chain_head;\n    if (prev !== storedHead) {\n      errors.push(\"chain_head mismatch: replay does not match stored head\");\n    }\n    if (errors.length) {\n      return { error: rpcError(E.PARAMS, errors.join(\"; \")) };\n    }\n    const entriesTotal     = ws.audit.length;\n    const entriesChecked   = entriesTotal - start;\n    const entriesUnchecked = start;\n    // Three terminal verdicts, mutually exclusive: a broken chain returned\n    // above as an error, an unevaluated range here, and a pass only when\n    // coverage is complete. `not_evaluated` never rides alongside ok:true;\n    // a reader that looks at ok alone fails closed rather than reading a\n    // pass over entries nothing was checked against.\n    if (entriesUnchecked > 0) {\n      return { result: {\n        status:            \"not_evaluated\",\n        ok:                false,\n        reason:            \"unchained_prefix\",\n        entries_total:     entriesTotal,\n        entries_checked:   entriesChecked,\n        entries_unchecked: entriesUnchecked,\n        checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n        chain_head:        storedHead,\n      }};\n    }\n    return { result: {\n      status:            \"verified\",\n      ok:                true,\n      entries_total:     entriesTotal,\n      entries_checked:   entriesChecked,\n      entries_unchecked: 0,\n      checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n      chain_head:        storedHead,\n    }};\n  });\n}\n","/**\n * control/1.0 profile (profiles/control.md).\n *\n * Methods:\n *   - control.pause / control.resume   (scope: task|participant|workspace)\n *   - control.cancel\n *   - control.snapshot                  (returns art_... id)\n *   - control.rollback                  (to_snapshot_artefact_id + what_to_restore)\n *   - control.supersede                 (creates successor in one shot)\n *   - control.set_mode_ceiling\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { contentHash } from \"../canonical.js\";\nimport { modeLE } from \"../types.js\";\nimport type { Mode, SnapshotArtefact, Task, TaskState } from \"../types.js\";\n\nconst VALID_MODES = new Set<Mode>([\"shadow\", \"trial\", \"production\"]);\nconst VALID_SCOPES = new Set([\"task\", \"participant\", \"workspace\"]);\n\nexport function registerControl(coord: Coordinator): void {\n  coord.handlers.set(\"control.pause\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, `scope must be task/participant/workspace`) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot pause ${task.state} task`) };\n      }\n      task.paused = true;\n      const prior = task.state;\n      if (prior !== \"paused\") task.paused_from = prior;\n      task.state = \"paused\";\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: \"paused\", note: `was ${prior}` });\n      return { result: { scope: \"task\", task_id: task.id, state: \"paused\" } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri || !ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = true;\n      return { result: {\n        scope: \"participant\", participant_uri: uri, paused: true,\n        in_flight_policy: (p.in_flight_policy as string) || \"allow_to_complete\",\n      }};\n    }\n    // workspace\n    ws.state = \"paused\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"paused\" } };\n  });\n\n  coord.handlers.set(\"control.resume\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, `scope must be task/participant/workspace`) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state !== \"paused\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot resume ${task.state} task`) };\n      }\n      task.paused = false;\n      const restored: TaskState = task.paused_from ?? \"in_progress\";\n      task.paused_from = undefined;\n      task.state = restored;\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: restored });\n      return { result: { scope: \"task\", task_id: task.id, state: restored } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri || !ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = false;\n      return { result: { scope: \"participant\", participant_uri: uri, paused: false } };\n    }\n    ws.state = \"active\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"active\" } };\n  });\n\n  coord.handlers.set(\"control.cancel\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n      return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot cancel ${task.state} task`) };\n    }\n    task.state = \"cancelled\";\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: p.from as string, state: \"cancelled\", note: p.reason as string | undefined });\n    return { result: { state: \"cancelled\" } };\n  });\n\n  coord.handlers.set(\"control.snapshot\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (Array.isArray(p.include) && p.include.length === 0) {\n      return { error: rpcError(E.PARAMS, \"include must not be empty\") };\n    }\n    const include: string[] = Array.isArray(p.include)\n      ? [...p.include as string[]]\n      : [\"members\", \"open_tasks\", \"mode_ceiling\"];\n    const state: Record<string, unknown> = {};\n    if (include.includes(\"members\")) {\n      const members = Array.from(ws.members.values()).map(m => ({\n        uri: m.uri, type: m.type,\n        ...(m.role ? { role: m.role } : {}),\n        ...(m.scopes?.length ? { scopes: m.scopes } : {}),\n      }));\n      if (members.length) state.members = members;\n    }\n    if (include.includes(\"open_tasks\")) {\n      const tasks = Array.from(ws.tasks.values())\n        .filter(t => t.state !== \"completed\" && t.state !== \"declined\" && t.state !== \"cancelled\" && t.state !== \"superseded\")\n        .map(t => ({ id: t.id, kind: t.kind, state: t.state,\n          ...(t.assignee ? { assignee: t.assignee } : {}),\n        }));\n      if (tasks.length) state.open_tasks = tasks;\n    }\n    if (include.includes(\"mode_ceiling\")) state.mode_ceiling = ws.mode_ceiling;\n    if (include.includes(\"policy\") && ws.routing_policy_uri) state.routing_policy_uri = ws.routing_policy_uri;\n    if (include.includes(\"audit\") || include.includes(\"all\")) state.audit_seq = ws.audit.length;\n\n    // Store the same canonical artefact that is emitted on the wire. Copies\n    // belong to this explicit capture boundary, never Coordinator.snapshot().\n    const content: SnapshotArtefact[\"content\"] = structuredClone({\n      workspace: ws.id,\n      audit_seq: ws.audit.length,\n      include,\n      state,\n      ...(p.label ? { label: p.label as string } : {}),\n    });\n    const snapId = coord.ids.artefactId();\n    const snap: SnapshotArtefact = {\n      id: snapId,\n      kind: \"snapshot\",\n      produced_at: coord.now(),\n      produced_by: p.from as string,\n      content_hash: contentHash(content),\n      content,\n    };\n    ws.snapshots.set(snapId, snap);\n    return {\n      result: {\n        snapshot_artefact_id: snapId,\n        audit_seq: snap.content.audit_seq,\n        artefact: structuredClone(snap),\n      },\n    };\n  });\n\n  coord.handlers.set(\"control.rollback\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const snapId = (p.to_snapshot_artefact_id as string)\n                 || (p.snapshot_artefact_id as string)\n                 || (p.snapshot_id as string);\n    if (!snapId) return { error: rpcError(E.PARAMS, \"to_snapshot_artefact_id is required\") };\n    const snap = ws.snapshots.get(snapId);\n    if (!snap) return { error: rpcError(E.CONTROL_SNAPSHOT_NOT_FOUND, `Unknown snapshot: ${snapId}`) };\n    if (Array.isArray(p.what_to_restore) && p.what_to_restore.length === 0) {\n      return { error: rpcError(E.PARAMS, \"what_to_restore must not be empty\") };\n    }\n    const what: string[] = (p.what_to_restore as string[]) ?? snap.content.include;\n    const restored: string[] = [];\n    if (what.includes(\"mode_ceiling\") && snap.content.state.mode_ceiling) {\n      ws.mode_ceiling = snap.content.state.mode_ceiling as Mode;\n      restored.push(\"mode_ceiling\");\n    }\n    if (what.includes(\"members\") && Array.isArray(snap.content.state.members)) {\n      const snapByUri = new Map<string, Record<string, unknown>>();\n      for (const m of snap.content.state.members as Array<Record<string, unknown>>) {\n        snapByUri.set(m.uri as string, m);\n      }\n      for (const [uri, snapM] of snapByUri) {\n        if (ws.members.has(uri)) {\n          const cur = ws.members.get(uri)!;\n          cur.role = (snapM.role as string) ?? cur.role;\n          cur.scopes = Array.isArray(snapM.scopes) ? [...snapM.scopes as string[]] : undefined;\n        }\n      }\n      restored.push(\"members\");\n    }\n    return { result: {\n      rolled_back_to: snapId, audit_seq: snap.content.audit_seq, restored,\n      ...(p.reason ? { reason: p.reason as string } : {}),\n    }};\n  });\n\n  coord.handlers.set(\"control.supersede\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const oldId = p.task_id as string;\n    const old = ws.tasks.get(oldId);\n    if (!old) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const newSpec = (p.successor_task as Record<string, unknown>) ?? {};\n    if (!newSpec.kind) {\n      return { error: rpcError(E.PARAMS, \"successor_task must include kind\") };\n    }\n    const assignee = (newSpec.assignee as string) || old.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"successor assignee not in workspace\") };\n    }\n    // The successor is a created task, so the participant-paused check\n    // task.create applies has to apply here too. Without it, superseding is a\n    // way to hand work to a participant whose work was stopped.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    // The successor is a created task, so it is bound by the same modes/1.0\n    // invariants as task.create: it must not exceed the workspace ceiling, and\n    // a trial-mode task forces review on regardless of its own setting.\n    if (newSpec.mode !== undefined && newSpec.mode !== null && typeof newSpec.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.mode must be a string\") };\n    }\n    const requestedMode = (newSpec.mode as Mode) || old.mode;\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (newSpec.review_required !== undefined && newSpec.review_required !== null\n        && typeof newSpec.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.review_required must be a boolean\") };\n    }\n    const now = coord.now();\n    const newId = coord.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: newSpec.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as string,\n      input: (newSpec.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode: requestedMode,\n      supersedes: old.id,\n      history: [{ ts: now, from: p.from as string, state: \"created\",\n                  note: `supersedes ${old.id}: ${(p.reason as string) || \"\"}` }],\n      paused: false,\n    };\n    // A successor keeps the review requirement of the task it replaces, so\n    // superseding never removes a required review. Trial forces review only\n    // when the workspace opted into modes/1.0, matching task.create, since\n    // mode is inert without the profile. Otherwise the spec's own setting\n    // applies.\n    if (old.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    } else if (\"review_required\" in newSpec) {\n      newTask.review_required = !!newSpec.review_required;\n    }\n    ws.tasks.set(newId, newTask);\n    old.state = \"superseded\";\n    old.superseded_by = newId;\n    old.updated_at = now;\n    old.history.push({ ts: now, from: p.from as string, state: \"superseded\",\n                       note: `-> ${newId}: ${(p.reason as string) || \"\"}` });\n    return { result: { superseded_task_id: old.id, new_task_id: newId, reason: p.reason as string | undefined } };\n  });\n\n  coord.handlers.set(\"control.set_mode_ceiling\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const m = (p.new_ceiling as Mode) ?? (p.mode_ceiling as Mode);\n    if (!VALID_MODES.has(m)) {\n      return { error: rpcError(E.PARAMS, `new_ceiling must be shadow/trial/production`) };\n    }\n    ws.mode_ceiling = m;\n    return { result: { mode_ceiling: ws.mode_ceiling, reason: p.reason as string | undefined } };\n  });\n}\n","/**\n * deliberation/1.0 profile (profiles/deliberation.md).\n *\n * Methods:\n *   - deliberate.open\n *   - deliberate.comment\n *   - deliberate.vote\n *   - deliberate.close\n *\n * Rules: any_one_approves | all_approve | quorum:N |\n *        weighted_vote:T | weighted_vote_with_veto:T\n *\n * Error codes (spec S5):\n *   -32030 voter not in participant list\n *   -32031 already voted\n *   -32032 closed or lapsed\n *   -32033 unknown rule\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { Deliberation } from \"../types.js\";\n\nfunction parseRule(rule: string): { kind: string; params: Record<string, number> } {\n  if (rule.includes(\":\")) {\n    const [kind, arg] = rule.split(\":\", 2);\n    if (kind === \"quorum\") return { kind, params: { n: parseInt(arg, 10) } };\n    if (kind === \"weighted_vote\" || kind === \"weighted_vote_with_veto\") {\n      return { kind, params: { threshold: parseFloat(arg) } };\n    }\n  }\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return { kind: rule, params: {} };\n  throw new Error(`Unknown rule: ${rule}`);\n}\n\nfunction computeOutcome(delib: Deliberation): Deliberation[\"outcome\"] {\n  const parsed = parseRule(delib.rule);\n  const yea = delib.votes.filter(v => v.vote === \"yea\");\n  const nay = delib.votes.filter(v => v.vote === \"nay\");\n  const vetoes = delib.votes.filter(v => v.veto_invoked && (delib.veto ?? {})[v.voter]);\n  const weights = delib.weights ?? {};\n\n  const weighted = (vs: typeof yea) =>\n    vs.reduce((s, v) => s + (weights[v.voter] ?? 1.0), 0);\n\n  if (parsed.kind === \"any_one_approves\") {\n    return {\n      outcome: yea.length >= 1 ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"all_approve\") {\n    const passed = yea.length === delib.participants.length && nay.length === 0;\n    return {\n      outcome: passed ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"quorum\") {\n    const n = parsed.params.n;\n    const cast = yea.length + nay.length;\n    if (cast < n) {\n      return {\n        outcome: \"rejected\", reason: \"quorum not met\", rule: delib.rule,\n        tally: { yea: yea.length, nay: nay.length }, vetoes: [],\n      };\n    }\n    return {\n      outcome: yea.length > nay.length ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote\") {\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote_with_veto\") {\n    if (vetoes.length) {\n      return {\n        outcome: \"rejected\", rule: delib.rule,\n        tally: { yea: 0, nay: 0 },\n        vetoes: vetoes.map(v => v.voter),\n      };\n    }\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  return { outcome: \"error\", rule: delib.rule, reason: `unsupported rule ${parsed.kind}` };\n}\n\nexport function registerDeliberation(coord: Coordinator): void {\n  coord.handlers.set(\"deliberate.open\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"rule\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const to = p.to ?? p.participants;\n    const participants: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!participants.length) {\n      return { error: rpcError(E.PARAMS, \"deliberate.open needs 'to' (participants list)\") };\n    }\n    try { parseRule(p.rule as string); }\n    catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.DELIB_UNKNOWN_RULE, msg) };\n    }\n    const id = (p.deliberation_id as string) || coord.ids.deliberationId();\n    const delib: Deliberation = {\n      id,\n      task_id: p.task_id as string | undefined,\n      opener: p.from as string,\n      participants,\n      rule: p.rule as string,\n      question: p.question as string | undefined,\n      weights: p.weights as Deliberation[\"weights\"],\n      veto: p.veto as Deliberation[\"veto\"],\n      deadline: p.deadline as string | undefined,\n      state: \"open\",\n      comments: [],\n      votes: [],\n      opened_at: coord.now(),\n    };\n    ws.deliberations.set(id, delib);\n    return { result: { deliberation_id: id, state: \"open\" } };\n  });\n\n  coord.handlers.set(\"deliberate.comment\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    delib.comments.push({\n      ts: coord.now(),\n      from: p.from as string,\n      text: (p.comment as string) || (p.text as string) || \"\",\n    });\n    return { result: { accepted: true } };\n  });\n\n  coord.handlers.set(\"deliberate.vote\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    for (const f of [\"from\", \"vote\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const v = p.vote as string;\n    if (v !== \"yea\" && v !== \"nay\" && v !== \"abstain\") {\n      return { error: rpcError(E.PARAMS, \"vote must be yea/nay/abstain\") };\n    }\n    const voter = p.from as string;\n    if (!delib.participants.includes(voter)) {\n      return { error: rpcError(E.DELIB_VOTER_NOT_IN_LIST,\n        `Voter ${voter} not in participant list`) };\n    }\n    if (delib.votes.some(x => x.voter === voter)) {\n      return { error: rpcError(E.DELIB_ALREADY_VOTED, `Voter ${voter} has already voted`) };\n    }\n    delib.votes.push({\n      ts: coord.now(),\n      voter,\n      vote: v as \"yea\" | \"nay\" | \"abstain\",\n      weight: p.weight as number | undefined,\n      comment: p.comment as string | undefined,\n      veto_invoked: !!p.veto_invoked,\n    });\n    return { result: { recorded: true } };\n  });\n\n  coord.handlers.set(\"deliberate.close\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state === \"closed\") return { result: delib.outcome! };\n    delib.state = \"closed\";\n    delib.outcome = computeOutcome(delib);\n    return { result: delib.outcome };\n  });\n}\n","/**\n * handoff/1.0 profile (profiles/handoff.md).\n *\n * Carries multiple tasks. Recipient is a single URI or a group:... URI.\n *\n * Error codes (spec S6):\n *   -32050 tasks not assigned to proposer\n *   -32051 already resolved\n *   -32052 recipient not a workspace member\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { Handoff, HandoffTaskItem } from \"../types.js\";\n\nexport function registerHandoff(coord: Coordinator): void {\n  coord.handlers.set(\"handoff.propose\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"tasks\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const proposer = p.from as string;\n    const recipient = p.to as string;\n    if (typeof recipient === \"string\" && !recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(recipient)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          `Recipient ${recipient} is not a member`) };\n      }\n    }\n    const tasksIn = p.tasks;\n    if (!Array.isArray(tasksIn) || !tasksIn.length) {\n      return { error: rpcError(E.PARAMS, \"tasks must be a non-empty list\") };\n    }\n    const proposed: HandoffTaskItem[] = [];\n    for (const t of tasksIn as Array<Record<string, unknown>>) {\n      const tid = t.task_id as string;\n      if (!tid || !ws.tasks.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Unknown task in handoff: ${tid}`) };\n      }\n      const task = ws.tasks.get(tid)!;\n      if (task.assignee !== proposer) {\n        return { error: rpcError(E.HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER,\n          `Task ${tid} is not currently assigned to ${proposer}`) };\n      }\n      proposed.push({\n        task_id: tid,\n        title: t.title as string | undefined,\n        status_summary: t.status_summary as string | undefined,\n        next_action: t.next_action as string | undefined,\n        blockers: (t.blockers as string[] | undefined) ?? [],\n      });\n    }\n    const id = (p.handoff_id as string) || coord.ids.handoffId();\n    const ho: Handoff = {\n      id,\n      proposer,\n      recipient,\n      proposed_at: coord.now(),\n      tasks: proposed,\n      summary: p.summary as string | undefined,\n      context_links: (p.context_links as string[] | undefined) ?? [],\n      state: \"proposed\",\n    };\n    ws.handoffs.set(id, ho);\n    return { result: { handoff_id: id, state: \"proposed\", task_ids: proposed.map(t => t.task_id) } };\n  });\n\n  coord.handlers.set(\"handoff.accept\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const acceptor = p.from as string;\n    if (ho.recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    } else {\n      if (acceptor !== ho.recipient) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not the named recipient\") };\n      }\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    }\n    // Accepting makes the acceptor the assignee. A paused participant is\n    // assigned no new tasks (control/1.0), so it cannot take tasks this way.\n    if (ws.members.get(acceptor)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Acceptor ${acceptor} is paused`) };\n    }\n    // Omission accepts all proposed tasks; an empty selection is not a handoff.\n    if (Array.isArray(p.accepted_task_ids) && p.accepted_task_ids.length === 0) {\n      return { error: rpcError(E.PARAMS, \"accepted_task_ids must not be empty\") };\n    }\n    const validIds = new Set(ho.tasks.map(t => t.task_id));\n    const acceptedIds: string[] = Array.isArray(p.accepted_task_ids)\n      ? [...p.accepted_task_ids as string[]]\n      : ho.tasks.map(t => t.task_id);\n    for (const tid of acceptedIds) {\n      if (!validIds.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Task ${tid} not in this handoff`) };\n      }\n    }\n    const now = coord.now();\n    for (const tid of acceptedIds) {\n      const task = ws.tasks.get(tid)!;\n      task.assignee = acceptor;\n      task.updated_at = now;\n      task.history.push({\n        ts: now, from: acceptor, state: task.state,\n        note: `handoff accepted from ${ho.proposer}`,\n      });\n    }\n    ho.state = \"accepted\";\n    ho.accepted_by = acceptor;\n    ho.accepted_task_ids = [...acceptedIds];\n    ho.accept_comment = p.comment as string | undefined;\n    ho.resolved_at = now;\n    return { result: { accepted: true, task_ids: [...acceptedIds], assignee: acceptor } };\n  });\n\n  coord.handlers.set(\"handoff.decline\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const decliner = p.from as string;\n    ho.decline_reason = p.reason as string | undefined;\n    ho.decline_suggested_target = p.suggested_target as string | undefined;\n    if (!ho.recipient.startsWith(\"group:\") && decliner === ho.recipient) {\n      ho.state = \"declined\";\n      ho.resolved_at = coord.now();\n    }\n    return { result: { recorded: true, state: ho.state } };\n  });\n}\n","/**\n * routing/1.0 profile (profiles/routing.md).\n *\n * Three methods, each emits a route_decision artefact:\n *   - task.route      -> pick assignee + update task.assignee\n *   - review.depth    -> skip / spot_check / full + sampling_probability\n *   - escalate.auto   -> evaluate auto-escalation\n *\n * Error codes:\n *   -32510 no eligible assignee\n *   -32513 candidates_empty\n *   -32514 depth_not_applicable\n *   -32515 policy_unreachable\n *   -32516 escalation target unavailable\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { RouteDecisionArtefact, Task } from \"../types.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\n\nfunction defaultDepth(hints: Record<string, unknown>): {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling?: number;\n  summary: string;\n} {\n  const crit = (hints.criticality as string) ?? \"medium\";\n  let conf = 1.0;\n  try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n  if (isNaN(conf)) conf = 1.0;\n  const r = CRIT[crit] ?? 1;\n  if (r >= 3) return { depth: \"full\", summary: \"criticality=critical: full review\" };\n  if (r === 2 && conf < 0.7) return { depth: \"full\", summary: \"criticality=high and confidence<0.7: full review\" };\n  if (r === 0 && conf >= 0.95) return { depth: \"skip\", summary: \"very low criticality + very high confidence: skip\" };\n  if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling: 0.10, summary: \"low criticality + high confidence: 10% sample\" };\n  return { depth: \"spot_check\", sampling: 0.25, summary: \"default mid-confidence: 25% sample\" };\n}\n\nexport function registerRouting(coord: Coordinator): void {\n  coord.handlers.set(\"task.route\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (p.candidates !== undefined && p.candidates !== null && !Array.isArray(p.candidates)) {\n      return { error: rpcError(E.PARAMS, \"candidates must be a list\") };\n    }\n    const candidates = (p.candidates as string[] | null | undefined) ?? [];\n    if (!candidates.length) {\n      return { error: rpcError(E.ROUTING_CANDIDATES_EMPTY, \"candidates array was empty\") };\n    }\n    let selected: string;\n    let rationale: Record<string, unknown>;\n    if (coord.options.routingPolicy) {\n      try {\n        const d = coord.options.routingPolicy(task, [...candidates]);\n        selected = d.selected;\n        rationale = d.rationale;\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `routing policy error: ${msg}`) };\n      }\n    } else {\n      // A paused participant is assigned no new tasks (control/1.0), so the\n      // default policy passes over one as it passes over a non-member, and\n      // names it among the alternatives with that reason.\n      const memberOf = (c: unknown) => (typeof c === \"string\" ? ws.members.get(c) : undefined);\n      const eligible = candidates.filter(c => { const m = memberOf(c); return !!m && !m.paused; });\n      if (!eligible.length) {\n        return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE, \"No candidate is a workspace member who is not paused\") };\n      }\n      selected = eligible[0];\n      const alternatives: Array<{ candidate: string; reason_excluded: string }> = [];\n      let chosen = false;\n      for (const c of candidates) {\n        const m = memberOf(c);\n        if (!m) continue;\n        if (m.paused) alternatives.push({ candidate: c, reason_excluded: \"paused\" });\n        else if (!chosen) chosen = true;\n        else alternatives.push({ candidate: c, reason_excluded: \"not first eligible\" });\n      }\n      rationale = {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: alternatives,\n      };\n    }\n    if (!ws.members.has(selected)) {\n      return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE,\n        `Selected ${JSON.stringify(selected)} is not a member`) };\n    }\n    // An operator policy can pick a paused participant. Routing to one would\n    // assign a task to a participant whose work was stopped, so it is refused\n    // as task.create refuses a paused assignee.\n    if (ws.members.get(selected)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${selected} is paused`) };\n    }\n    task.assignee = selected;\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: \"service:coordinator\",\n                        state: task.state, note: `routed to ${selected}` });\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"task.route\", outcome: selected,\n      produced_by: \"service:coordinator\", produced_at: task.updated_at,\n      task: task.id,\n      policy_id: rationale.policy_id as string | undefined,\n      hints_observed: { ...(task.routing_hints ?? {}) },\n      rationale: (rationale.summary as string) ?? \"\",\n      alternatives_considered: rationale.alternatives_considered,\n    };\n    ws.route_decisions.set(artId, artefact);\n    return { result: { selected, decision_artefact: artId, rationale } };\n  });\n\n  coord.handlers.set(\"review.depth\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const hints: Record<string, unknown> = { ...(task.routing_hints ?? {}),\n                                              ...((p.artefact_routing_hints as Record<string, unknown>) ?? {}) };\n    if (!Object.keys(hints).length) {\n      return { error: rpcError(E.ROUTING_DEPTH_NOT_APPLICABLE, \"No routing_hints to consult\") };\n    }\n    let depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n    let sampling: number | undefined;\n    let summary: string;\n    let policyId: string;\n    if (coord.options.reviewDepthPolicy) {\n      try {\n        const d = coord.options.reviewDepthPolicy(task, hints);\n        depth = d.depth;\n        sampling = d.sampling_probability;\n        summary = (d.rationale.summary as string) ?? \"operator policy\";\n        policyId = (d.rationale.policy_id as string) ?? \"operator\";\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `depth policy error: ${msg}`) };\n      }\n    } else {\n      const d = defaultDepth(hints);\n      depth = d.depth; sampling = d.sampling; summary = d.summary;\n      policyId = \"default\";\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"review.depth\", outcome: depth,\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id, policy_id: policyId,\n      hints_observed: hints, rationale: summary,\n      ...(sampling !== undefined ? { sampling_probability: sampling } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    const result: Record<string, unknown> = {\n      depth, decision_artefact: artId,\n      rationale: { policy_id: policyId, hints_used: Object.keys(hints), summary },\n    };\n    if (sampling !== undefined) result.sampling_probability = sampling;\n    return { result };\n  });\n\n  coord.handlers.set(\"escalate.auto\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const hints = { ...(task.routing_hints ?? {}) };\n    let escalate: boolean, to: string | undefined, rule: Record<string, unknown>;\n    if (coord.options.escalationPolicy) {\n      try {\n        const d = coord.options.escalationPolicy(task, hints);\n        escalate = !!d.escalate;\n        to = d.to;\n        rule = d.triggered_rule ?? {};\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `escalation policy error: ${msg}`) };\n      }\n    } else {\n      const crit = (hints.criticality as string) ?? \"medium\";\n      let conf = 1.0;\n      try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n      if (isNaN(conf)) conf = 1.0;\n      const r = CRIT[crit] ?? 1;\n      escalate = r >= 3 || (r >= 2 && conf < 0.6);\n      to = p.default_escalation_target as string | undefined;\n      rule = {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      };\n    }\n    if (escalate) {\n      if (!to) return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n        \"Escalation triggered but no target available\") };\n      if (!to.startsWith(\"group:\") && !ws.members.has(to)) {\n        return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n          `Escalation target ${to} is not a member or group`) };\n      }\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"escalate.auto\",\n      outcome: escalate ? { escalate: true, to } : { escalate: false },\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id,\n      policy_id: rule.rule_id as string | undefined,\n      hints_observed: hints,\n      rationale: (rule.summary as string) ?? \"\",\n      ...(escalate ? { escalation_target: to } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    if (escalate) {\n      if (coord.options.onAutoEscalate && to) {\n        try { coord.options.onAutoEscalate(task, to); } catch { /* */ }\n      }\n      return { result: { escalate: true, to, decision_artefact: artId, triggered_rule: rule } };\n    }\n    return { result: { escalate: false, decision_artefact: artId } };\n  });\n}\n","/**\n * security-signed/1.0 profile (profiles/security-signed.md).\n *\n * Top-level `sig` field on every envelope: ed25519:<kid>:<base64>.\n * Verification happens at dispatch (see Coordinator.verifySignature).\n *\n * Methods:\n *   - participant.rotate_key\n *   - participant.revoke_key\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { KeyRecord } from \"../types.js\";\n\nexport function registerSecuritySigned(coord: Coordinator): void {\n  coord.handlers.set(\"participant.rotate_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"old_kid\", \"new_jwk\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const member = ws.members.get(p.from as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown participant: ${p.from}`) };\n    const oldKid = p.old_kid as string;\n    const oldKey = member.keys.find(k => k.kid === oldKid);\n    if (!oldKey) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${oldKid} for ${p.from}`) };\n    if (oldKey.revoked_at) return { error: rpcError(E.SIG_KEY_REVOKED, `Key ${oldKid} is revoked`) };\n\n    const newJwk = p.new_jwk as Record<string, unknown>;\n    if (!newJwk || typeof newJwk.kid !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_jwk must include kid\") };\n    }\n    const now = coord.now();\n    oldKey.valid_until = now;\n    member.keys.push({\n      jwk: newJwk as unknown as KeyRecord[\"jwk\"],\n      kid: newJwk.kid as string,\n      valid_from: now,\n    });\n    return { result: { rotated: true, old_kid: oldKid, new_kid: newJwk.kid, valid_from: now } };\n  });\n\n  coord.handlers.set(\"participant.revoke_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"target_uri\", \"kid\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const sender = p.from as string | undefined;\n    if (sender !== p.target_uri) {\n      const caller = sender ? ws.members.get(sender) : undefined;\n      if (!caller || caller.role !== \"admin\") {\n        return { error: rpcError(E.NOT_AUTHORISED,\n          \"Revoking another member's key requires the admin role\") };\n      }\n    }\n    const member = ws.members.get(p.target_uri as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown target: ${p.target_uri}`) };\n    const key = member.keys.find(k => k.kid === p.kid);\n    if (!key) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${p.kid} for target`) };\n    const now = coord.now();\n    key.revoked_at = now;\n    key.revoked_reason = (p.reason as string) || \"unspecified\";\n    return { result: { revoked: true, kid: key.kid, revoked_at: now, reason: key.revoked_reason } };\n  });\n}\n","/**\n * whisper/1.0 profile (profiles/whisper.md).\n *\n * Methods:\n *   - whisper.ask     -> pose a deadline-bound question with options + default\n *   - whisper.answer  -> answer a whisper\n *\n * Lapse handling: coordinator.checkWhisperLapses(workspaceId, now?) is\n * registered on the Coordinator instance for deployments to call from a\n * scheduler.\n *\n * Error codes (per spec S6):\n *   -32020 WHISPER_ALREADY_ANSWERED\n *   -32021 WHISPER_LAPSED\n *   -32022 WHISPER_OPTION_NOT_IN_SET\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { canonicalize } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { WhisperPrompt, Envelope } from \"../types.js\";\n\nfunction parseIso(ts: string): number { return new Date(ts).getTime(); }\n\n/**\n * Whether an answer field holds anything, read as Python reads a value's\n * truth, so both references agree that an empty answer is no answer.\n */\nfunction present(v: unknown): boolean {\n  if (v === undefined || v === null || v === false || v === 0 || v === \"\") return false;\n  if (Array.isArray(v)) return v.length > 0;\n  if (typeof v === \"object\") return Object.keys(v as object).length > 0;\n  return true;\n}\n\nexport function registerWhisper(coord: Coordinator): void {\n  coord.handlers.set(\"whisper.ask\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"task_id\", \"question\", \"deadline_ms\", \"default_if_lapsed\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    if (!ws.tasks.has(p.task_id as string)) {\n      return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    }\n    if (p.options !== undefined && p.options !== null && !Array.isArray(p.options)) {\n      return { error: rpcError(E.PARAMS, \"options must be a list\") };\n    }\n    const to = p.to;\n    const askee: string[] = Array.isArray(to) ? (to as string[]) : [to as string];\n    const id = (p.whisper_id as string) || coord.ids.artefactId();\n    const prompt: WhisperPrompt = {\n      id,\n      task_id: p.task_id as string,\n      asker: p.from as string,\n      askee,\n      question: p.question as string,\n      options: p.options as WhisperPrompt[\"options\"],\n      asked_at: coord.now(),\n      deadline_ms: Number(p.deadline_ms),\n      default_if_lapsed: p.default_if_lapsed,\n      urgency: (p.urgency as WhisperPrompt[\"urgency\"]) || \"low\",\n      state: \"pending\",\n    };\n    ws.whispers.set(id, prompt);\n    return { result: { whisper_id: id, deadline_ms: prompt.deadline_ms } };\n  });\n\n  coord.handlers.set(\"whisper.answer\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"whisper_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const prompt = ws.whispers.get(p.whisper_id as string);\n    if (!prompt) return { error: rpcError(E.PARAMS, \"Unknown whisper id\") };\n    // Only a participant the whisper was addressed to may answer it. A\n    // broadcast scope (workspace:/group:) is satisfied by any member; the\n    // coordinator does not model group membership (see SPECIFICATION.md).\n    const answerer = p.from as string;\n    const broadcast = prompt.askee.some((a) => typeof a === \"string\" && (a.startsWith(\"workspace:\") || a.startsWith(\"group:\")));\n    if (broadcast) {\n      if (!ws.members.has(answerer)) {\n        return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${answerer}`) };\n      }\n    } else if (!prompt.askee.includes(answerer)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Whisper was not addressed to ${answerer}`) };\n    }\n    if (prompt.state === \"answered\") {\n      return { error: rpcError(E.WHISPER_ALREADY_ANSWERED, \"Whisper already answered\") };\n    }\n    if (prompt.state === \"lapsed\") {\n      return { error: rpcError(E.WHISPER_LAPSED, \"Whisper already lapsed\") };\n    }\n\n    // A null option is no option, and an empty answer no answer, as in Python.\n    const answerOption = p.answer_option as string | undefined;\n    const hasOption = answerOption !== undefined && answerOption !== null;\n    const answerText = (present(p.answer) ? p.answer : p.answer_text) as string | undefined;\n    if (prompt.options && prompt.options.length) {\n      if (!hasOption) {\n        return { error: rpcError(E.PARAMS, \"answer_option is required when options are defined\") };\n      }\n      const valid = new Set(prompt.options.map(o => o.id));\n      if (!valid.has(answerOption)) {\n        return { error: rpcError(E.WHISPER_OPTION_NOT_IN_SET,\n          `Answer option ${canonicalize(answerOption as never).toString(\"utf-8\")} not in option set`) };\n      }\n    } else if (!present(answerText) && !hasOption) {\n      return { error: rpcError(E.PARAMS, \"answer or answer_option required\") };\n    }\n\n    prompt.state = \"answered\";\n    prompt.answered_at = coord.now();\n    prompt.answered_by = p.from as string;\n    prompt.answer_option = answerOption;\n    prompt.answer_text = answerText;\n    prompt.comment = p.comment as string | undefined;\n    return { result: { answered: true, whisper_id: prompt.id, task_id: prompt.task_id } };\n  });\n\n  // Expose the lapse-check function on the coordinator instance.\n  coord.checkWhisperLapses = (workspaceId: string, now?: string): Envelope[] => {\n    const ws = coord.workspaces.get(workspaceId);\n    if (!ws) return [];\n    const cutoff = parseIso(now ?? coord.now());\n    const emitted: Envelope[] = [];\n    for (const prompt of ws.whispers.values()) {\n      if (prompt.state !== \"pending\") continue;\n      const asked = parseIso(prompt.asked_at);\n      const deadline = asked + prompt.deadline_ms;\n      if (cutoff < deadline) continue;\n      prompt.state = \"lapsed\";\n      prompt.default_applied = prompt.default_if_lapsed;\n      const notify: Envelope = {\n        jsonrpc: \"2.0\",\n        method: \"notify.message\",\n        params: {\n          workspace: ws.id,\n          from: \"service:coordinator\",\n          to: [prompt.asker, ...prompt.askee],\n          ts: coord.now(),\n          kind: \"whisper_lapsed\",\n          whisper_id: prompt.id,\n          // Carry the task so a task-filtered audit.read surfaces the\n          // lapse. A lapsed whisper applies its default with no human\n          // input, so it is the case most in need of being visible on\n          // the task's thread.\n          task_id: prompt.task_id,\n          default_applied: prompt.default_if_lapsed,\n        },\n      };\n      coord.recordAudit(ws, notify);\n      emitted.push(notify);\n    }\n    return emitted;\n  };\n}\n","/**\n * @brightbeamai/chap-coordinator/coordinator\n *\n * The Coordinator class. CHAP protocol logic, packaged as a library\n * rather than a CLI server. Applications instantiate one, call\n * `dispatch(envelope)`, subscribe to audit events, and persist via\n * the provided hooks.\n *\n * Coverage:\n *   - Core (9 methods)\n *   - review/1.0 (6 methods)\n *   - whisper/1.0 (2 methods + lapse handling)\n *   - deliberation/1.0 (4 methods)\n *   - modes/1.0 (mode handling at task.create; trial forces review)\n *   - handoff/1.0 (3 methods with multi-task and group support)\n *   - control/1.0 (7 methods with task/participant/workspace scopes)\n *   - routing/1.0 (3 methods producing route_decision artefacts)\n *   - security-signed/1.0 (top-level `sig` field; key history)\n *   - audit-scitt/1.0 (statement assembly + local chain linkage)\n *   - identity-oidc/1.0 + identity-vc/1.0 (binding hooks at join)\n */\n\nimport { canonicalize, contentHash, ZERO_HASH } from \"./canonical.js\";\nimport { ALWAYS_AVAILABLE, OWNING_PROFILE } from \"./catalogue.js\";\nimport { publicKeyFromJwk, verifyEnvelope } from \"./crypto.js\";\nimport { IdFactory } from \"./ids.js\";\nimport { E, isValidEnvelope, rpcError } from \"./jsonrpc.js\";\nimport { entryCall, entryRecord, isSigned, linkHash, refusalIsRecorded, signedDigest } from \"./audit.js\";\nimport { applyJsonPatch } from \"./patch.js\";\nimport type { Store, WorkspaceRecord } from \"./storage/store.js\";\nimport { MemoryStore } from \"./storage/store.js\";\nimport { makeApi, type CoordinatorApi } from \"./api.js\";\nimport type {\n  ArtefactId,\n  AuditEntry,\n  AuditListener,\n  Envelope,\n  KeyRecord,\n  Member,\n  Mode,\n  OverrideArtefact,\n  ParticipantUri,\n  SnapshotArtefact,\n  Task,\n  TaskId,\n  Workspace,\n  WorkspaceId,\n} from \"./types.js\";\nimport { modeLE } from \"./types.js\";\nimport { registerAuditScitt } from \"./profiles/audit_scitt.js\";\nimport { registerControl } from \"./profiles/control.js\";\nimport { registerDeliberation } from \"./profiles/deliberation.js\";\nimport { registerHandoff } from \"./profiles/handoff.js\";\nimport { registerRouting } from \"./profiles/routing.js\";\nimport { registerSecuritySigned } from \"./profiles/security_signed.js\";\nimport { registerWhisper } from \"./profiles/whisper.js\";\n\n// ============================================================\n//   Options\n// ============================================================\n\nexport type TokenVerifier = (token: string) => Record<string, unknown> | null;\nexport type CredentialVerifier = (presentation: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittSubmitter = (statement: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittReceiptVerifier = (receipt: Record<string, unknown>) => boolean;\nexport type RoutingPolicyFn = (task: Task, candidates: ParticipantUri[]) => {\n  selected: ParticipantUri;\n  rationale: Record<string, unknown>;\n};\nexport type ReviewDepthPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling_probability?: number;\n  rationale: Record<string, unknown>;\n};\nexport type EscalationPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  escalate: boolean;\n  to?: ParticipantUri;\n  triggered_rule?: Record<string, unknown>;\n};\n\n/** Methods classified as privileged for step-up auth. */\nexport const PRIVILEGED_METHODS = new Set<string>([\n  \"control.pause\", \"control.resume\", \"control.cancel\", \"control.supersede\",\n  \"control.snapshot\", \"control.rollback\", \"control.set_mode_ceiling\",\n  \"workspace.set_profiles\",\n  \"participant.rotate_key\", \"participant.revoke_key\",\n]);\n\n// Methods outside the control, deliberate, handoff and whisper namespaces that\n// dispatch holds to the membership floor before the handler runs.\nconst MEMBER_ONLY_METHODS = new Set<string>([\n  \"task.route\", \"review.depth\", \"escalate.auto\", \"participant.leave\",\n]);\n\n// Read-only methods return workspace state but do not mutate it, so they are not\n// recorded in the audit chain -- recording a read would grow and re-link it.\nconst READ_ONLY_METHODS = new Set<string>([\n  \"workspace.describe\", \"audit.read\", \"audit.verify_chain\", \"audit.verify_receipt\",\n  // Submitting the chain to a transparency service reads it and sends it\n  // onward. Recording the submission would append to the very log being\n  // submitted, so the receipt would attest a chain one entry shorter.\n  \"audit.submit_to_scitt\",\n]);\n\n// Cap on a workspace's task.create idempotency map. Older keys are evicted, so\n// the dedup window is bounded rather than growing unbounded in a long-lived\n// workspace; a redelivery beyond this many intervening creates is not deduped.\nconst MAX_IDEMPOTENCY_KEYS = 10_000;\n\n// Largest envelope accepted, published in the workspace descriptor (SPEC S4.4).\nconst DEFAULT_MAX_ENVELOPE_BYTES = 1_048_576;\n\n// How deeply a request may nest, counting the envelope as level one. The\n// reference HTTP servers refuse deeper bodies before dispatch; the same limit\n// here means an in-process caller cannot send what the canonicaliser, the\n// copy of a recorded call and the two references handle differently.\nconst MAX_NESTING = 64;\n\nfunction withinNesting(value: unknown, limit: number): boolean {\n  const stack: Array<[unknown, number]> = [[value, 1]];\n  while (stack.length) {\n    const [node, depth] = stack.pop()!;\n    if (depth > limit) return false;\n    if (Array.isArray(node)) {\n      for (const v of node) stack.push([v, depth + 1]);\n    } else if (node !== null && typeof node === \"object\") {\n      for (const v of Object.values(node as Record<string, unknown>)) stack.push([v, depth + 1]);\n    }\n  }\n  return true;\n}\n\nexport interface CoordinatorOptions {\n  deterministicIds?: boolean;\n  deterministicClock?: boolean;\n  enableChain?: boolean;\n  requireSignatures?: boolean;\n  enforceStepUp?: boolean;\n  requireReadMembership?: boolean;\n  /** Largest envelope accepted (default 1 MiB), published in the descriptor. */\n  maxEnvelopeBytes?: number;\n  onAudit?: AuditListener;\n  onAutoEscalate?: (task: Task, to: ParticipantUri) => void;\n  onStoreError?: (err: unknown, record: { id: string; version: number }) => void;\n  verifyOidcToken?: TokenVerifier;\n  verifyVc?: CredentialVerifier;\n  scittSubmitter?: ScittSubmitter;\n  verifyScittReceipt?: ScittReceiptVerifier;\n  routingPolicy?: RoutingPolicyFn;\n  reviewDepthPolicy?: ReviewDepthPolicyFn;\n  escalationPolicy?: EscalationPolicyFn;\n  defaultProfiles?: string[];\n  /**\n   * Persistence backend. Defaults to MemoryStore (no persistence).\n   * Pass SqliteStore or any other Store implementation to persist\n   * workspaces between process restarts. The Coordinator calls\n   * `store.load()` once during `start()` and `store.save()` after\n   * every successful mutation.\n   */\n  store?: Store;\n}\n\n// ============================================================\n//   Helpers\n// ============================================================\n\nfunction nowIso(clockMs?: number): string {\n  const d = clockMs === undefined ? new Date() : new Date(clockMs);\n  return d.toISOString().replace(/\\.(\\d{3})Z$/, \".$1Z\");\n}\n\nfunction missing(params: Record<string, unknown>, fields: string[]): string | null {\n  for (const f of fields) if (!(f in params)) return f;\n  return null;\n}\n\nfunction tagsError(p: Record<string, unknown>): { error: ReturnType<typeof rpcError> } | null {\n  const tags = p.tags;\n  if (tags !== undefined && (!Array.isArray(tags) || !tags.every((t) => typeof t === \"string\"))) {\n    return { error: rpcError(E.PARAMS, \"tags must be a list of strings\") };\n  }\n  return null;\n}\n\nfunction reviewRuleSupported(rule: string): boolean {\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return true;\n  if (rule.startsWith(\"quorum:\")) {\n    const arg = rule.slice(\"quorum:\".length);\n    return /^[0-9]+$/.test(arg) && parseInt(arg, 10) >= 1;\n  }\n  return false;\n}\n\nfunction reviewSatisfied(review: { requested_to: string[]; rule: string; decisions: { kind: string; reviewer: string }[] }): boolean {\n  const approvers = new Set(review.decisions.filter(d => d.kind === \"approve\").map(d => d.reviewer));\n  const rule = review.rule || \"any_one_approves\";\n  if (rule === \"all_approve\") {\n    // A broadcast-only review has no bounded reviewer set to wait on, so it\n    // degrades to first-approve.\n    const named = review.requested_to.filter(r => !(r.startsWith(\"workspace:\") || r.startsWith(\"group:\")));\n    if (named.length === 0) return approvers.size >= 1;\n    return named.every(r => approvers.has(r));\n  }\n  if (rule.startsWith(\"quorum:\")) return approvers.size >= parseInt(rule.slice(\"quorum:\".length), 10);\n  return approvers.size >= 1;  // any_one_approves (and the default)\n}\n\nfunction reply(env: Envelope, body: { result?: unknown; error?: { code: number; message: string; data?: unknown } }): Envelope {\n  const out: Envelope = { jsonrpc: \"2.0\", id: env.id };\n  if (body.error !== undefined) out.error = body.error;\n  else out.result = body.result;\n  return out;\n}\n\n/** The signed calls on a log, keyed by `signedDigest`. */\ninterface SignedIndex {\n  refused: Map<string, { seq: number; code: number }>;\n  accepted: Set<string>;\n}\n\nfunction indexSigned(index: SignedIndex, entry: AuditEntry): void {\n  const call = entryCall(entry);\n  if (!isSigned(call)) return;\n  let digest: string;\n  try { digest = signedDigest(call as Envelope); }\n  catch { return; /* an entry that cannot be canonicalised was altered; verify_chain reports it */ }\n  if (entry.outcome != null) index.refused.set(digest, { seq: entry.seq, code: entry.outcome.code });\n  else index.accepted.add(digest);\n}\n\n// ============================================================\n//   Handler type for profile modules\n// ============================================================\n\nexport type Handler = (params: Record<string, unknown>) => { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n\n// ============================================================\n//   Coordinator\n// ============================================================\n\n// States in which a task has been deliberately stopped. review.request and\n// task.complete both refuse these, so neither can revive a terminated task nor\n// bypass a pause.\nconst REVIEW_REQUEST_STOPPED: string[] = [\"cancelled\", \"superseded\", \"paused\"];\n\nexport class Coordinator {\n  readonly workspaces = new Map<WorkspaceId, Workspace>();\n  readonly options: CoordinatorOptions;\n  readonly ids: IdFactory;\n  readonly store: Store;\n  private wsVersions = new Map<WorkspaceId, number>();\n  private saveChains = new Map<WorkspaceId, Promise<void>>();\n  private clockMs?: number;\n  private frozenNow?: string;\n  private auditListeners: AuditListener[] = [];\n  /**\n   * The signed calls on each workspace's log, by what their senders signed:\n   * recorded refusals with their seq and code, and accepted calls. Rebuilt\n   * from the log when missing, so a snapshot never carries it.\n   */\n  private signedIndexes = new WeakMap<Workspace, SignedIndex>();\n  /** Method handler registry; profiles plug into this. */\n  readonly handlers = new Map<string, Handler>();\n  /** Custom lapse-check function (whisper/1.0). Set by the whisper profile. */\n  checkWhisperLapses?: (workspaceId: string, now?: string) => Envelope[];\n  /** Typed method facade. Defined via getter in the constructor. */\n  readonly api!: CoordinatorApi;\n  /** @internal cached facade instance */\n  private _api?: CoordinatorApi;\n\n  constructor(options: CoordinatorOptions = {}) {\n    this.options = options;\n    this.store = options.store ?? new MemoryStore();\n    this.ids = new IdFactory(!!options.deterministicIds, 0n, 1_700_000_000_000);\n    if (options.deterministicClock) this.clockMs = 1_700_000_000_000;\n    if (options.onAudit) this.auditListeners.push(options.onAudit);\n\n    this.registerCoreHandlers();\n    this.registerProfileHandlers();\n\n    // Lazily-initialised typed facade. Constructed on first access so\n    // tests that don't use it pay nothing.\n    Object.defineProperty(this, \"api\", {\n      get: () => {\n        if (!this._api) this._api = makeApi(this);\n        return this._api;\n      },\n      enumerable: false,\n      configurable: true,\n    });\n\n    // Rehydrate any persisted state synchronously. Async stores can\n    // call `start()` instead; this fallback covers the common\n    // synchronous Memory/Sqlite path with no async setup needed.\n    try {\n      const loaded = this.store.load();\n      if (!(loaded instanceof Promise)) {\n        this.applyRecords(loaded);\n      }\n    } catch {\n      /* fall through; caller must invoke start() */\n    }\n  }\n\n  /**\n   * Asynchronously hydrate workspaces from the store. Required only for\n   * stores whose `load()` returns a Promise. Idempotent.\n   */\n  async start(): Promise<void> {\n    const records = await this.store.load();\n    this.applyRecords(records);\n  }\n\n  private applyRecords(records: WorkspaceRecord[]): void {\n    // One restore for every record: restore replaces the workspaces it\n    // holds, so restoring record by record kept only the last.\n    this.wsVersions.clear();\n    this.restore(records.map(r => r.data));\n    for (const r of records) this.wsVersions.set(r.id, r.version);\n  }\n\n  /** Persist the current snapshot of one workspace to the store. */\n  private persist(ws: Workspace): void {\n    const next = (this.wsVersions.get(ws.id) ?? 0) + 1;\n    this.wsVersions.set(ws.id, next);\n    let record: WorkspaceRecord;\n    try {\n      const all = this.snapshot() as Array<Record<string, unknown>>;\n      const data = all.find(w => w.id === ws.id);\n      if (!data) return;\n      record = { id: ws.id, data, version: next, updated_at: this.now() };\n    } catch {\n      return;\n    }\n\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      this.trackSave(pending.then(() => this.store.save(record)), record);\n      return;\n    }\n    let result: Promise<void> | void;\n    try {\n      result = this.store.save(record);\n    } catch (err) {\n      this.reportStoreError(err, record);\n      return;\n    }\n    if (result instanceof Promise) {\n      this.trackSave(result, record);\n    }\n  }\n\n  private trackSave(save: Promise<void>, record: WorkspaceRecord): void {\n    const guarded = save.catch(err => this.reportStoreError(err, record));\n    this.saveChains.set(record.id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(record.id) === guarded) {\n        this.saveChains.delete(record.id);\n      }\n    });\n  }\n\n  private reportStoreError(err: unknown, record: WorkspaceRecord): void {\n    if (this.options.onStoreError) {\n      try {\n        this.options.onStoreError(err, { id: record.id, version: record.version });\n      } catch {\n        void 0;\n      }\n    }\n  }\n\n  async drainSaves(): Promise<void> {\n    while (this.saveChains.size) {\n      await Promise.allSettled([...this.saveChains.values()]);\n    }\n  }\n\n  // -- lifecycle -----------------------------------------------------\n\n  private advanceClock(): string {\n    if (this.clockMs !== undefined) {\n      this.clockMs += 1000;\n      return nowIso(this.clockMs);\n    }\n    return nowIso();\n  }\n\n  now(): string {\n    return this.frozenNow ?? this.advanceClock();\n  }\n\n  onAudit(listener: AuditListener): () => void {\n    this.auditListeners.push(listener);\n    return () => {\n      const i = this.auditListeners.indexOf(listener);\n      if (i >= 0) this.auditListeners.splice(i, 1);\n    };\n  }\n\n  /** Convenience: get a workspace by id, or undefined. */\n  getWorkspace(id: WorkspaceId): Workspace | undefined {\n    return this.workspaces.get(id);\n  }\n\n  // ----- authorisation preconditions -----\n\n  /**\n   * Assert that `sender` is a joined member of `ws`. Returns an error\n   * fragment if not, else null. Every actor-action method runs this on\n   * its `from` so a decision, completion, or review request can never\n   * be attributed to a participant who never joined. See\n   * SPECIFICATION.md S6.3 and the `unknown_participant` condition in\n   * S13.3. (The published spec assigns -32403; the reference\n   * implementations use NOT_AUTHORISED -32011 because -32403 already\n   * denotes OIDC_TOKEN_INVALID in their private range. The spec/impl\n   * error-table divergence is tracked separately.)\n   */\n  private requireMember(ws: Workspace, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    // A `from` that is not a string names nobody. It is answered in fixed\n    // words, so both references refuse it alike whatever was sent.\n    if (typeof sender !== \"string\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"Not a workspace member: from is not a participant URI\") };\n    }\n    if (!ws.members.has(sender)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${sender}`) };\n    }\n    return null;\n  }\n\n  /**\n   * Assert that `sender` was addressed in the task's review. Applied to\n   * review-decision methods (decide.* and abstain.declare): to act on a\n   * review you must be one of the reviewers it was addressed to (the\n   * `to` set on review.request). Membership is the floor; this is the\n   * eligibility ceiling for decisions. Returns an error fragment if not\n   * eligible, else null.\n   */\n  private requireReviewer(task: Task, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    const review = task.review;\n    if (!review || !review.requested_to || review.requested_to.length === 0) {\n      // No recorded reviewer set: fall back to the membership floor,\n      // which the caller has already enforced.\n      return null;\n    }\n    // A broadcast-scoped reviewer (workspace:/group: URI) is satisfied by\n    // any workspace member; the membership floor already passed. Note the\n    // coordinator does not model group membership: a group: target means\n    // \"any member\", not \"any member of that group\" (deployments needing\n    // true group restriction enforce it externally). Keeps the documented\n    // `to: workspace:<id>` broadcast pattern working.\n    if (review.requested_to.some((r) => typeof r === \"string\" && (r.startsWith(\"workspace:\") || r.startsWith(\"group:\")))) {\n      return null;\n    }\n    if (typeof sender !== \"string\" || !review.requested_to.includes(sender as ParticipantUri)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not an addressed reviewer for this task: ${String(sender)}`) };\n    }\n    return null;\n  }\n\n  /** Serialise all workspaces to a JSON-safe structure for persistence. */\n  snapshot(): unknown {\n    const out: Array<Record<string, unknown>> = [];\n    for (const ws of this.workspaces.values()) {\n      out.push({\n        id:           ws.id,\n        created:      ws.created,\n        state:        ws.state,\n        profiles:     ws.profiles,\n        mode:         ws.mode,\n        mode_ceiling: ws.mode_ceiling,\n        routing_policy_uri: ws.routing_policy_uri,\n        step_up_window_sec: ws.step_up_window_sec,\n        min_acr:         ws.min_acr,\n        members:         Array.from(ws.members.values()),\n        tasks:           Array.from(ws.tasks.values()),\n        overrides:       Array.from(ws.overrides.values()),\n        whispers:        Array.from(ws.whispers.values()),\n        deliberations:   Array.from(ws.deliberations.values()),\n        handoffs:        Array.from(ws.handoffs.values()),\n        snapshots:       Array.from(ws.snapshots.values()),\n        route_decisions: Array.from(ws.route_decisions.values()),\n        idempotency_keys: ws.idempotency_keys,\n        audit:           ws.audit,\n        chain_head:      ws.chain_head,\n        chain_enabled:   ws.chain_enabled,\n      });\n    }\n    return out;\n  }\n\n  /** Restore from a snapshot produced by ``snapshot()``. Replaces\n   *  any existing in-memory workspaces. */\n  restore(data: unknown): void {\n    this.workspaces.clear();\n    if (!Array.isArray(data)) return;\n    for (const w of data as Array<Record<string, unknown>>) {\n      const ws: Workspace = {\n        id: w.id as WorkspaceId,\n        created: w.created as string,\n        state: (w.state as Workspace[\"state\"]) ?? \"active\",\n        profiles: (w.profiles as string[]) ?? [],\n        mode: (w.mode as Mode) ?? \"trial\",\n        mode_ceiling: (w.mode_ceiling as Mode) ?? \"production\",\n        routing_policy_uri: w.routing_policy_uri as string | undefined,\n        step_up_window_sec: (w.step_up_window_sec as number) ?? 300,\n        min_acr: w.min_acr as string | undefined,\n        members: new Map(),\n        tasks: new Map(),\n        overrides: new Map(),\n        whispers: new Map(),\n        deliberations: new Map(),\n        handoffs: new Map(),\n        snapshots: new Map(),\n        route_decisions: new Map(),\n        idempotency_keys: (w.idempotency_keys as Record<string, string>) ?? {},\n        audit: (w.audit as AuditEntry[]) ?? [],\n        chain_head: w.chain_head as string | undefined,\n        chain_enabled: !!w.chain_enabled,\n      };\n      for (const m of (w.members as Member[]) ?? []) {\n        // Defensive: ensure required collections exist even on older snapshots.\n        if (!Array.isArray(m.keys)) m.keys = [];\n        if (m.paused === undefined) m.paused = false;\n        ws.members.set(m.uri, m);\n      }\n      for (const t of (w.tasks as Task[]) ?? []) ws.tasks.set(t.id, t);\n      for (const o of (w.overrides as OverrideArtefact[]) ?? []) ws.overrides.set(o.id, o);\n      // The dynamic profile collections may not be present on legacy snapshots.\n      for (const x of (w.whispers as Array<{ id: string } & Record<string, unknown>>) ?? [])\n        ws.whispers.set(x.id, x as never);\n      for (const x of (w.deliberations as Array<{ id: string } & Record<string, unknown>>) ?? [])\n        ws.deliberations.set(x.id, x as never);\n      for (const x of (w.handoffs as Array<{ id: string } & Record<string, unknown>>) ?? [])\n        ws.handoffs.set(x.id, x as never);\n      for (const x of (w.snapshots as Array<{ id: string } & Record<string, unknown>>) ?? []) {\n        // Normalize the former flat store representation only on restore.\n        // New snapshots are stored and emitted in the canonical wire shape.\n        const content = structuredClone((x.content ?? {\n          workspace: x.workspace, audit_seq: x.audit_seq,\n          include: x.include, state: x.state,\n          ...(x.label ? { label: x.label } : {}),\n        }) as SnapshotArtefact[\"content\"]);\n        if (!x.content) {\n          // Legacy in-memory projections can contain undefined optional\n          // fields; full bodies from older stores are not snapshot slices.\n          const oldState = content.state;\n          const state: Record<string, unknown> = {};\n          for (const key of [\"mode_ceiling\", \"routing_policy_uri\", \"audit_seq\"]) {\n            if (oldState[key] != null && oldState[key] !== \"\") state[key] = oldState[key];\n          }\n          for (const [key, fields] of [\n            [\"members\", [\"uri\", \"type\", \"role\", \"scopes\"]],\n            [\"open_tasks\", [\"id\", \"kind\", \"state\", \"assignee\"]],\n          ] as const) {\n            const items = oldState[key];\n            if (Array.isArray(items) && items.length) {\n              state[key] = items.map(item => Object.fromEntries(fields\n                .filter(field => item[field] != null && item[field] !== \"\"\n                  && (!Array.isArray(item[field]) || item[field].length > 0))\n                .map(field => [field, item[field]])));\n            }\n          }\n          content.state = state;\n        }\n        ws.snapshots.set(x.id, {\n          id: x.id, kind: \"snapshot\",\n          produced_by: (x.produced_by ?? x.by) as string,\n          produced_at: (x.produced_at ?? x.ts) as string,\n          content_hash: (x.content_hash as string | undefined) ?? contentHash(content),\n          content,\n        });\n      }\n      for (const x of (w.route_decisions as Array<{ id: string } & Record<string, unknown>>) ?? [])\n        ws.route_decisions.set(x.id, x as never);\n      this.workspaces.set(ws.id, ws);\n    }\n  }\n\n  // -- dispatch ------------------------------------------------------\n\n  dispatch(envelope: Envelope): Envelope {\n    this.frozenNow = this.advanceClock();\n    try {\n      const response = this._dispatch(envelope);\n      if (response.error) this.recordRefusal(envelope, response.error);\n      return response;\n    } finally {\n      this.frozenNow = undefined;\n    }\n  }\n\n  private _dispatch(envelope: Envelope): Envelope {\n    // SPECIFICATION 10.1 fixes the order of the checks below, because which\n    // refusal a call receives decides whether it is recorded. First the\n    // request itself, none of whose refusals is recorded.\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\" || !envelope.method) {\n      return reply(envelope, { error: rpcError(E.REQUEST, \"Invalid JSON-RPC 2.0 request\") });\n    }\n    if (!withinNesting(envelope, MAX_NESTING)) {\n      return reply(envelope, { error: rpcError(E.REQUEST, `Envelope nests deeper than ${MAX_NESTING} levels`) });\n    }\n    const maxBytes = this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES;\n    // Canonicalised once: the length is what the size limit measures, and a\n    // request that cannot be canonicalised is refused below, once its method\n    // is known to exist.\n    let size = 0;\n    let canonicalError: unknown;\n    try { size = canonicalize(envelope).length; } catch (e) { canonicalError = e; }\n    if (size > maxBytes) {\n      return reply(envelope, { error: rpcError(E.REQUEST,\n        `Envelope exceeds max_envelope_bytes (${size} > ${maxBytes})`) });\n    }\n    const method = envelope.method;\n    // JSON-RPC params, when present, must be a structured value (object).\n    // CHAP methods use by-name params; reject non-object params cleanly as\n    // Invalid params for parity with the Python reference.\n    const rawParams = envelope.params;\n    if (\n      rawParams !== undefined &&\n      rawParams !== null &&\n      (typeof rawParams !== \"object\" || Array.isArray(rawParams))\n    ) {\n      return reply(envelope, { error: rpcError(E.PARAMS, \"Invalid params: expected an object\") });\n    }\n    const params = (rawParams ?? {}) as Record<string, unknown>;\n    const handler = this.handlers.get(method);\n    if (!handler) {\n      return reply(envelope, { error: rpcError(E.METHOD, `Unknown method: ${method}`) });\n    }\n    if (canonicalError !== undefined) {\n      const msg = canonicalError instanceof Error ? canonicalError.message : String(canonicalError);\n      return reply(envelope, { error: rpcError(E.PARAMS, msg) });\n    }\n\n    // SPECIFICATION 10.1: a signed request whose signed content matches a\n    // recorded refusal is answered with that refusal and not evaluated again.\n    // The log publishes a refused request, signature and all, so without this\n    // anyone who can read the log could send it again once whatever refused\n    // it had changed, and it would take effect in its signer's name.\n    if (isSigned(envelope)) {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const prior = this.signedIndex(ws).refused.get(signedDigest(envelope));\n        if (prior) {\n          return reply(envelope, { error: rpcError(prior.code,\n            `Refused at seq ${prior.seq}; a refused request is not evaluated again`,\n            { refused_at_seq: prior.seq }) });\n        }\n      }\n    }\n\n    // security-signed/1.0: verify top-level sig if required.\n    // participant.join and workspace.create are bootstrap operations that\n    // run before any signing key is registered for the actor, so they cannot\n    // be signature-verified; every other method must verify.\n    if (this.options.requireSignatures && method !== \"participant.join\" && method !== \"workspace.create\") {\n      const sigErr = this.verifySignature(envelope);\n      if (sigErr) return reply(envelope, { error: sigErr });\n      if (method === \"participant.rotate_key\") {\n        const signingKid = (envelope.sig as string).split(\":\")[1];\n        const oldKid = params.old_kid as string | undefined;\n        if (oldKid !== undefined && signingKid !== oldKid) {\n          return reply(envelope, { error: rpcError(E.SIG_ROTATION_KEY_MISMATCH,\n            \"Rotation must be signed with the old key\") });\n        }\n      }\n    }\n\n    // identity-oidc/1.0: step-up freshness on privileged methods.\n    if (this.options.enforceStepUp && PRIVILEGED_METHODS.has(method)) {\n      const stale = this.checkStepUp(params);\n      if (stale) return reply(envelope, { error: stale });\n    }\n\n    // SPECIFICATION 15.4: refuse a method whose owning profile the workspace\n    // does not advertise. The refusal is -32601, the same answer a coordinator\n    // that never implemented the method would give, so a deployment cannot\n    // tell from outside which of the two it is talking to. The detail rides in\n    // `data` for an operator reading the log.\n    {\n      const gate = this.profileGate(method, params);\n      if (gate) return reply(envelope, { error: gate });\n    }\n\n    // control/1.0 and deliberation/1.0: these operations are privileged and\n    // MUST be performed by a workspace member. Control is the governance\n    // \"emergency brake\"; deliberation open/close set the vote parameters and\n    // finalize the tally. Without this floor a non-member could resume a\n    // paused workspace, raise the mode ceiling, or open and close a\n    // deliberation to finalize an outcome early. (The per-voter eligibility\n    // check in deliberate.vote is separate and still applies. A stricter role\n    // gate than membership is layered on top via an identity-* profile.)\n    // The routing methods and participant.leave sit under the same floor\n    // (SPECIFICATION 6.3.1): without it a non-member could reassign a task\n    // with task.route, or write a leave to the log under any name.\n    if (method.startsWith(\"control.\") || method.startsWith(\"deliberate.\") || method.startsWith(\"handoff.\") || method.startsWith(\"whisper.\") || MEMBER_ONLY_METHODS.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const notMember = this.requireMember(ws, params.from);\n        if (notMember) return reply(envelope, { error: notMember.error });\n      }\n    }\n\n    // control/1.0 workspace-paused gate (S6 -32063).\n    const exempt = new Set([\"workspace.create\", \"workspace.describe\",\n                            \"control.resume\", \"audit.read\",\n                            \"participant.join\", \"participant.leave\"]);\n    if (!exempt.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      if (typeof wsId === \"string\") {\n        const ws = this.workspaces.get(wsId);\n        if (ws && ws.state === \"paused\") {\n          return reply(envelope, { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Workspace ${wsId} is paused`) });\n        }\n      }\n    }\n\n    // task.create idempotency: a repeat carrying a seen idempotency_key returns\n    // the original task rather than creating (or recording) a duplicate -- safe\n    // for at-least-once redelivery.\n    if (method === \"task.create\") {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      const key = params.idempotency_key;\n      if (ws && typeof key === \"string\") {\n        const existingId = ws.idempotency_keys[key];\n        const task = existingId ? ws.tasks.get(existingId) : undefined;\n        if (task) return reply(envelope, { result: { task_id: existingId, state: task.state } });\n      }\n    }\n\n    let out: { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n    try {\n      out = handler(params);\n    } catch (e) {\n      // Keep the wire message generic; a handler exception may carry internal\n      // detail that should not be disclosed to callers. Specifics stay in the\n      // data field for operators.\n      const msg = e instanceof Error ? e.message : String(e);\n      return reply(envelope, { error: rpcError(E.INTERNAL, \"Internal error\", { detail: msg }) });\n    }\n    if (out.error) return reply(envelope, { error: out.error });\n\n    // Record audit on success. A refusal is weighed in dispatch(), once this\n    // returns, against the rule in SPECIFICATION 10.1.\n    const wsId = params.workspace as string | undefined;\n    if (typeof wsId === \"string\" && !READ_ONLY_METHODS.has(method)) {\n      const ws = this.workspaces.get(wsId);\n      if (ws) this.recordAudit(ws, envelope);\n    }\n    return reply(envelope, { result: out.result });\n  }\n\n  // -- audit ---------------------------------------------------------\n\n  recordAudit(ws: Workspace, envelope: Envelope): void {\n    this.appendEntry(ws, { envelope: JSON.parse(JSON.stringify(envelope)) as Envelope });\n  }\n\n  /**\n   * SPECIFICATION 10.1: record a refused call when it is a governed attempt.\n   * The caller must be a member of an existing workspace, the call must be a\n   * JSON-RPC call for a method that is not a read, and the refusal must be one\n   * `refusalIsRecorded` names. The request is kept as it arrived, so a\n   * signature on it still verifies. Every call that reaches a recorded refusal\n   * has passed the canonical check, so it can be hashed into the chain.\n   */\n  private recordRefusal(envelope: Envelope, error: { code: number; data?: unknown }): void {\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\") return;\n    const method = envelope.method;\n    if (READ_ONLY_METHODS.has(method)) return;\n    if (!refusalIsRecorded(method, error, PRIVILEGED_METHODS)) return;\n    const raw = envelope.params;\n    if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return;\n    const params = raw as Record<string, unknown>;\n    const ws = typeof params.workspace === \"string\" ? this.workspaces.get(params.workspace) : undefined;\n    if (!ws || typeof params.from !== \"string\" || !ws.members.has(params.from)) return;\n    // A signed copy of a call already on the log is not a new attempt by its\n    // signer. A copy of a refusal was answered with it, and a copy of a call\n    // that took effect repeats a call its signer made once. Anyone who can\n    // read the log can send either.\n    if (isSigned(envelope)) {\n      const index = this.signedIndex(ws);\n      const digest = signedDigest(envelope);\n      if (index.refused.has(digest) || index.accepted.has(digest)) return;\n    }\n    this.appendEntry(ws, {\n      request: JSON.parse(JSON.stringify(envelope)) as Envelope,\n      outcome: { status: \"refused\", code: error.code },\n    });\n  }\n\n  /** The signed calls on this workspace's log, built from the log when missing. */\n  private signedIndex(ws: Workspace): SignedIndex {\n    let index = this.signedIndexes.get(ws);\n    if (!index) {\n      index = { refused: new Map(), accepted: new Set() };\n      for (const entry of ws.audit) indexSigned(index, entry);\n      this.signedIndexes.set(ws, index);\n    }\n    return index;\n  }\n\n  private appendEntry(ws: Workspace, record: Pick<AuditEntry, \"envelope\" | \"request\" | \"outcome\">): void {\n    const entry: AuditEntry = { seq: ws.audit.length, arrived: this.now(), ...record };\n    if (ws.chain_enabled || this.options.enableChain) {\n      const prev = ws.chain_head ?? ZERO_HASH;\n      entry.prev_hash = prev;\n      ws.chain_head = linkHash(entryRecord(entry), prev);\n    }\n    ws.audit.push(entry);\n    const index = this.signedIndexes.get(ws);\n    if (index) indexSigned(index, entry);\n    for (const l of this.auditListeners) {\n      try { l(ws, entry); } catch { /* listeners never break dispatch */ }\n    }\n    // Persistence: only meaningful when a non-Memory store is configured;\n    // MemoryStore.save() is a no-op for the dispatcher's perspective.\n    this.persist(ws);\n  }\n\n  // -- signature verification (security-signed/1.0) -----------------\n\n  private verifySignature(envelope: Envelope): { code: number; message: string; data?: unknown } | null {\n    const sig = envelope.sig;\n    if (!sig || typeof sig !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Missing top-level `sig` field\");\n    }\n    const parts = sig.split(\":\");\n    if (parts.length !== 3 || parts[0] !== \"ed25519\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Malformed signature tag\");\n    }\n    const kid = parts[1];\n    const params = (envelope.params ?? {}) as Record<string, unknown>;\n    const sender = params.from;\n    const wsId = params.workspace;\n    const rawTs = params.ts;\n    // Fail closed: a signature is present and requireSignatures is on, so it\n    // must verify. If we cannot resolve the context needed to verify it,\n    // reject rather than skip -- a signature we cannot check must never be\n    // treated as valid. A `from` or `workspace` that is not a string names\n    // nothing, so it counts as missing.\n    if (typeof sender !== \"string\" || !sender || typeof wsId !== \"string\" || !wsId) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: missing from/workspace\");\n    }\n    // The key is chosen by the time the sender gives. A `ts` that is not a\n    // string gives no time, so no key can be chosen for it.\n    if (rawTs !== undefined && rawTs !== null && typeof rawTs !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: ts must be a string\");\n    }\n    const ts = (rawTs as string | null | undefined) ?? this.now();\n    const ws = this.workspaces.get(wsId);\n    if (!ws) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: unknown workspace\");\n    }\n    const member = ws.members.get(sender);\n    if (!member) return rpcError(E.SIG_KEY_NOT_FOUND, `No member: ${sender}`);\n\n    // Revocation is present-tense: a revoked key must be rejected for any\n    // live request regardless of the envelope's self-asserted `ts`. Checking\n    // against `ts` alone lets a holder of a revoked key backdate `ts` to\n    // before the revocation and still be accepted. Use the coordinator's\n    // trusted clock for the revocation decision.\n    const now = this.now();\n    if (member.keys.some(k => k.kid === kid && k.revoked_at !== undefined && now >= k.revoked_at)) {\n      return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n    }\n    // Expiry is present-tense for the same reason: a rotated-out key\n    // (valid_until set to the rotation time, but never explicitly revoked) must\n    // not sign live requests. Selecting it by the self-asserted `ts` alone lets\n    // its holder backdate `ts` to before valid_until and keep using it. Judge\n    // expiry by the trusted clock.\n    if (member.keys.some(k => k.kid === kid && k.valid_until !== undefined && now >= k.valid_until)) {\n      return rpcError(E.SIG_KEY_NOT_FOUND, `Key ${kid} is no longer valid`);\n    }\n\n    const key = this.lookupKey(member, kid, ts);\n    if (!key) {\n      const revoked = member.keys.find(k => k.kid === kid && k.revoked_at);\n      if (revoked) return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n      return rpcError(E.SIG_KEY_NOT_FOUND, `No key ${kid} valid at ${ts} for ${sender}`);\n    }\n\n    // Verify\n    try {\n      const stripped: Envelope = JSON.parse(JSON.stringify(envelope));\n      delete stripped.sig;\n      const canonical = canonicalize(stripped);\n      const pub = publicKeyFromJwk(key.jwk);\n      if (!verifyEnvelope(canonical, sig, pub)) {\n        return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n      }\n      return null;\n    } catch {\n      // An exception here (malformed key or signature bytes) means the\n      // signature cannot be verified: fail closed with the same generic code\n      // as the Python reference, and do not leak the exception detail.\n      return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n    }\n  }\n\n  /** Lookup the key valid for a given participant at a given time. */\n  lookupKey(member: Member, kid: string, ts: string): KeyRecord | null {\n    for (const k of member.keys) {\n      if (k.kid !== kid) continue;\n      if (k.revoked_at !== undefined && ts >= k.revoked_at) continue;\n      if (ts < k.valid_from) continue;\n      if (k.valid_until !== undefined && ts >= k.valid_until) continue;\n      return k;\n    }\n    return null;\n  }\n\n  // -- step-up (identity-oidc/1.0) -----------------------------------\n\n  /**\n   * The SPECIFICATION 15.4 check, per method rather than per namespace.\n   *\n   * Core is always present, so a core method is never gated. The reads in\n   * ALWAYS_AVAILABLE are never gated either: a workspace must be able to ask\n   * what it is and to check its own chain, and `audit.verify_chain` belongs to\n   * `audit-scitt/1.0` while chaining also turns on through an option, so\n   * gating it would let a workspace write a hash-linked chain it is refused\n   * permission to verify.\n   */\n  private profileGate(method: string, params: Record<string, unknown>) {\n    const owner = OWNING_PROFILE[method];\n    if (owner === undefined || owner === \"core/1.0\" || ALWAYS_AVAILABLE.has(method)) return undefined;\n    const wsId = params.workspace as string | undefined;\n    const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n    if (!ws) return undefined;\n    // Match on the profile name, so a workspace advertising a later minor\n    // version of the owning profile still carries its methods.\n    const name = owner.split(\"/\")[0];\n    if (ws.profiles.some(p => p === name || p.startsWith(name + \"/\"))) return undefined;\n    return rpcError(E.METHOD, `Unknown method: ${method}`,\n                    { profile: owner, advertised: [...ws.profiles] });\n  }\n\n  private checkStepUp(params: Record<string, unknown>): { code: number; message: string; data?: unknown } | null {\n    // A `from` or `workspace` that is not a string names no member to hold to\n    // step-up; the membership check answers such a call.\n    const wsId = params.workspace;\n    const sender = params.from;\n    if (typeof wsId !== \"string\" || typeof sender !== \"string\" || !wsId || !sender) return null;\n    const ws = this.workspaces.get(wsId);\n    if (!ws) return null;\n    const member = ws.members.get(sender);\n    if (!member) return null;\n    // Step-up applies to OIDC actors -- humans, or any member with an OIDC\n    // binding. Agents and services authenticate out of band (SPIFFE/X.509),\n    // so they are not held to an auth_time window here.\n    if (member.type !== \"human\" && member.oidc_sub === undefined) return null;\n    if (member.oidc_auth_time === undefined) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec,\n      });\n    }\n    const nowSec = Math.floor(Date.now() / 1000);\n    const age = nowSec - member.oidc_auth_time;\n    if (age > ws.step_up_window_sec) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec, age_sec: age,\n      });\n    }\n    if (ws.min_acr !== undefined && member.oidc_acr !== ws.min_acr) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up required: acr below the workspace minimum\", {\n        required_acr: ws.min_acr, acr: member.oidc_acr,\n      });\n    }\n    return null;\n  }\n\n  // ==========================================================\n  //   Registration\n  // ==========================================================\n\n  private registerCoreHandlers(): void {\n    this.handlers.set(\"workspace.create\",       p => this.opWorkspaceCreate(p));\n    this.handlers.set(\"workspace.describe\",     p => this.opWorkspaceDescribe(p));\n    this.handlers.set(\"workspace.set_profiles\", p => this.opWorkspaceSetProfiles(p));\n    this.handlers.set(\"participant.join\",       p => this.opParticipantJoin(p));\n    this.handlers.set(\"participant.leave\",      p => this.opParticipantLeave(p));\n    this.handlers.set(\"task.create\",            p => this.opTaskCreate(p));\n    this.handlers.set(\"task.update\",            p => this.opTaskUpdate(p));\n    this.handlers.set(\"task.complete\",          p => this.opTaskComplete(p));\n    this.handlers.set(\"audit.read\",             p => this.opAuditRead(p));\n    this.handlers.set(\"review.request\",         p => this.opReviewRequest(p));\n    this.handlers.set(\"decide.approve\",         p => this.opDecide(p, \"approve\"));\n    this.handlers.set(\"decide.reject\",          p => this.opDecide(p, \"reject\"));\n    this.handlers.set(\"decide.override\",        p => this.opDecideOverride(p));\n    this.handlers.set(\"abstain.declare\",        p => this.opAbstainDeclare(p));\n    this.handlers.set(\"escalate.raise\",         p => this.opEscalateRaise(p));\n  }\n\n  private registerProfileHandlers(): void {\n    // Profiles register themselves by mutating this.handlers\n    registerWhisper(this);\n    registerDeliberation(this);\n    registerHandoff(this);\n    registerControl(this);\n    registerRouting(this);\n    registerSecuritySigned(this);\n    registerAuditScitt(this);\n  }\n\n  // ==========================================================\n  //   Core method handlers\n  // ==========================================================\n\n  private opWorkspaceCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const id = (p.workspace as string) || this.ids.workspaceId();\n    if (typeof id !== \"string\") return { error: rpcError(E.PARAMS, \"workspace must be a string id\") };\n    if (this.workspaces.has(id)) return { error: rpcError(E.PARAMS, `workspace already exists: ${id}`) };\n    const profiles: string[] = Array.isArray(p.profiles) ? [...(p.profiles as string[])] : [...(this.options.defaultProfiles ?? [\"core/1.0\", \"review/1.0\"])];\n\n    // SPECIFICATION 15.4: the descriptor and the enforcement agree, and the\n    // workspace boundary is where a disagreement surfaces.\n    //\n    // Advertising a security profile does not turn its enforcement on: that\n    // would break every workspace advertising it today without signing, and\n    // break it at the second call rather than at configuration time. The rule\n    // runs the other way, where it costs nothing. Enforcement on adds the\n    // profile, so the descriptor never understates what is enforced; the\n    // profile advertised with enforcement off is a configuration error.\n    for (const [profile, enforced, option] of [\n      [\"security-signed/1.0\", !!this.options.requireSignatures, \"requireSignatures\"],\n      [\"identity-oidc/1.0\", this.options.verifyOidcToken !== undefined, \"verifyOidcToken\"],\n    ] as [string, boolean, string][]) {\n      const name = profile.split(\"/\")[0];\n      const advertised = profiles.some(x => x === name || x.startsWith(name + \"/\"));\n      if (enforced && !advertised) profiles.push(profile);\n      else if (advertised && !enforced) {\n        return { error: rpcError(E.PARAMS,\n          `${profile} is advertised but ${option} is not configured. ` +\n          `A workspace that advertises it and does not enforce it ` +\n          `describes a guarantee it does not give.`) };\n      }\n    }\n\n    const chainEnabled = profiles.includes(\"audit-scitt/1.0\") || !!this.options.enableChain;\n    const ws: Workspace = {\n      id,\n      created: this.now(),\n      state: \"active\",\n      profiles,\n      mode: (p.mode as Mode) ?? \"trial\",\n      mode_ceiling: (p.mode_ceiling as Mode) ?? \"production\",\n      routing_policy_uri: p.routing_policy_uri as string | undefined,\n      step_up_window_sec: typeof p.step_up_window_sec === \"number\" ? p.step_up_window_sec : 300,\n      min_acr: p.min_acr as string | undefined,\n      members: new Map(),\n      tasks: new Map(),\n      overrides: new Map(),\n      whispers: new Map(),\n      deliberations: new Map(),\n      handoffs: new Map(),\n      snapshots: new Map(),\n      route_decisions: new Map(),\n      idempotency_keys: {},\n      audit: [],\n      chain_enabled: chainEnabled,\n      chain_head: chainEnabled ? ZERO_HASH : undefined,\n    };\n    this.workspaces.set(id, ws);\n    return { result: { workspace: id, created: ws.created } };\n  }\n\n  private opWorkspaceDescribe(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, `Unknown workspace: ${p.workspace}`) };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    return { result: {\n      id: ws.id,\n      created: ws.created,\n      state: ws.state,\n      mode: ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      max_envelope_bytes: this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES,\n      step_up_window_sec: ws.step_up_window_sec,\n      profiles: ws.profiles,\n      members: Array.from(ws.members.values()).map(memberToDict),\n      audit_count: ws.audit.length,\n      task_count: ws.tasks.size,\n      override_count: ws.overrides.size,\n      // Omitted where the workspace has no chain, which is what the Python\n      // reference now sends too: JSON.stringify drops an undefined value, so\n      // the two answered the same call differently on the wire.\n      ...(ws.chain_head ? { evidence_head: ws.chain_head } : {}),\n      ...(ws.routing_policy_uri ? { routing_policy_uri: ws.routing_policy_uri } : {}),\n    }};\n  }\n\n  private opWorkspaceSetProfiles(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"profiles\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    if (ws.members.get(p.from as string)!.role !== \"admin\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"workspace.set_profiles requires the admin role\") };\n    }\n    const newProfiles = [...(p.profiles as string[])];\n    if (!newProfiles.some(pr => pr.startsWith(\"core/\"))) newProfiles.push(\"core/1.0\");\n    ws.profiles = newProfiles;\n    if (newProfiles.includes(\"audit-scitt/1.0\") && !ws.chain_enabled) {\n      ws.chain_enabled = true;\n      ws.chain_head = ZERO_HASH;\n    }\n    return { result: { profiles: ws.profiles } };\n  }\n\n  private opParticipantJoin(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"type\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    let ws = this.workspaces.get(p.workspace as string);\n    if (!ws) {\n      const create = this.opWorkspaceCreate({ workspace: p.workspace });\n      if (create.error) return create;\n      ws = this.workspaces.get(p.workspace as string)!;\n    }\n    const uri = p.from as ParticipantUri;\n    const now = this.now();\n    const existing = ws.members.get(uri);\n    let tokenVerified = false;\n\n    const member: Member = {\n      uri,\n      type: p.type as Member[\"type\"],\n      role: (p.role as string) || \"participant\",\n      joined: now,\n      display_name: p.display_name as string | undefined,\n      capabilities: p.capabilities as Record<string, unknown> | undefined,\n      scopes: p.scopes as string[] | undefined,\n      keys: [],\n      paused: false,\n    };\n\n    // identity-oidc/1.0\n    if (this.options.verifyOidcToken && typeof p.oidc_token === \"string\") {\n      const claims = this.options.verifyOidcToken(p.oidc_token);\n      if (claims === null) return { error: rpcError(E.OIDC_TOKEN_INVALID, \"OIDC token invalid\") };\n      // A token binds only to the participant it belongs to. One naming\n      // another participant is refused, and a join under an existing member's\n      // name must carry a token for that member: the same subject, or, for a\n      // member with no verified subject yet, a token naming the member.\n      const boundUri = claims.chap_participant_uri;\n      const sub = typeof claims.sub === \"string\" && claims.sub !== \"\" ? claims.sub : undefined;\n      if (boundUri != null && boundUri !== uri) {\n        return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token is bound to another participant\") };\n      }\n      if (existing) {\n        if (existing.oidc_sub != null) {\n          if (sub !== existing.oidc_sub) {\n            return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token subject does not match the member\") };\n          }\n        } else if (boundUri !== uri) {\n          return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token does not name this member\") };\n        }\n      }\n      member.oidc_sub = sub;\n      tokenVerified = true;\n      const at = claims.auth_time;\n      if (typeof at === \"number\") member.oidc_auth_time = at;\n      member.oidc_acr = typeof claims.acr === \"string\" ? claims.acr : undefined;\n      const cnf = claims.cnf as Record<string, unknown> | undefined;\n      const cnfJwk = cnf?.jwk as Record<string, unknown> | undefined;\n      if (cnfJwk && typeof cnfJwk.kid === \"string\") {\n        member.keys.push({ jwk: cnfJwk as unknown as KeyRecord[\"jwk\"], kid: cnfJwk.kid as string, valid_from: now });\n      }\n    }\n    // identity-vc/1.0\n    if (this.options.verifyVc && typeof p.vc_presentation === \"object\" && p.vc_presentation !== null\n        && !Array.isArray(p.vc_presentation)) {\n      const subject = this.options.verifyVc(p.vc_presentation as Record<string, unknown>);\n      if (subject === null) return { error: rpcError(E.VC_VP_INVALID, \"VC presentation invalid\") };\n      const holder = [subject.holder, subject.id].find(\n        (h): h is string => typeof h === \"string\" && h !== \"\");\n      // A join under an existing member's name binds a presentation only from\n      // the member's own holder.\n      if (existing && (existing.vc_holder == null || holder !== existing.vc_holder)) {\n        return { error: rpcError(E.VC_HOLDER_BINDING_INVALID, \"Presentation holder does not match the member\") };\n      }\n      member.vc_holder = holder;\n      const vpJwk = subject.cnf_jwk as Record<string, unknown> | undefined;\n      if (vpJwk && typeof vpJwk.kid === \"string\") {\n        member.keys.push({ jwk: vpJwk as unknown as KeyRecord[\"jwk\"], kid: vpJwk.kid as string, valid_from: now });\n      }\n    }\n\n    const attested = [...member.keys];\n\n    // Self-asserted JWKs are ignored for an identity-bound participant: the\n    // verifier-pinned cnf.jwk / vp_jwk is the signing key (proof of possession).\n    const jwks = p.jwks as { keys?: Array<{ kid: string; [k: string]: unknown }> } | undefined;\n    if (jwks?.keys && attested.length === 0) {\n      for (const j of jwks.keys) {\n        if (j.kid && !member.keys.some(k => k.kid === j.kid)) {\n          member.keys.push({ jwk: j as unknown as KeyRecord[\"jwk\"], kid: j.kid, valid_from: now });\n        }\n      }\n    }\n\n    if (existing) {\n      if (member.oidc_sub !== undefined) existing.oidc_sub = member.oidc_sub;\n      if (member.oidc_auth_time !== undefined) existing.oidc_auth_time = member.oidc_auth_time;\n      if (member.oidc_acr !== undefined) existing.oidc_acr = member.oidc_acr;\n      if (tokenVerified) existing.oidc_acr = member.oidc_acr;\n      if (member.vc_holder !== undefined) existing.vc_holder = member.vc_holder;\n      for (const k of attested) {\n        if (!existing.keys.some(x => x.kid === k.kid)) existing.keys.push(k);\n      }\n      return { result: { joined: true, as: uri } };\n    }\n    ws.members.set(uri, member);\n    return { result: { joined: true, as: uri } };\n  }\n\n  private opParticipantLeave(p: Record<string, unknown>): ReturnType<Handler> {\n    // Self-removal: deletes the caller's own `from`. Under requireSignatures the\n    // signature binds `from`, so a member can only remove itself; evicting\n    // another member is an admin operation, not this. Unsigned, a spoofed\n    // `from` is the transport's responsibility.\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    ws.members.delete(p.from as string);\n    return { result: { left: true } };\n  }\n\n  private opTaskCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"kind\", \"input\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const assignee = (p.assignee as string) || (p.to as string);\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Assignee not in workspace\") };\n    }\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n\n    // modes/1.0 ceiling check. A mode or review_required of the wrong type is\n    // refused, so both references read the same task from the same call.\n    if (p.mode !== undefined && p.mode !== null && typeof p.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"mode must be a string\") };\n    }\n    const requestedMode = ((p.mode as Mode) || ws.mode);\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (p.review_required !== undefined && p.review_required !== null && typeof p.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"review_required must be a boolean\") };\n    }\n\n    const taskId = this.ids.taskId();\n    const now = this.now();\n    const task: Task = {\n      id: taskId,\n      kind: p.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: p.input as Record<string, unknown>,\n      created_at: now,\n      updated_at: now,\n      deadline: p.deadline as string | undefined,\n      mode: requestedMode,\n      routing_hints: p.routing_hints as Task[\"routing_hints\"],\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\" }],\n      paused: false,\n    };\n\n    // modes/1.0: trial mode forces review\n    // modes/1.0: trial forces review, but only when the workspace opted into\n    // modes/1.0. mode is inert without the profile.\n    if (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && task.mode === \"trial\") task.review_required = true;\n    else if (\"review_required\" in p) task.review_required = !!p.review_required;\n\n    ws.tasks.set(taskId, task);\n    if (typeof p.idempotency_key === \"string\") {\n      ws.idempotency_keys[p.idempotency_key] = taskId;\n      const keys = Object.keys(ws.idempotency_keys);\n      if (keys.length > MAX_IDEMPOTENCY_KEYS) delete ws.idempotency_keys[keys[0]];\n    }\n    return { result: { task_id: taskId, state: \"created\" } };\n  }\n\n  private opTaskUpdate(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const newState = p.state as Task[\"state\"];\n    // Pausing and resuming both belong to control/1.0. A Core-only workspace\n    // that could pause through task.update would hold a task nothing it\n    // advertises can lift. A review opens with review.request, or with\n    // task.complete on a task that requires one: task.update into\n    // review_requested would leave the task under review with no review for a\n    // decision to act on.\n    const legal: Record<string, string[]> = {\n      created:          [\"in_progress\", \"declined\"],\n      in_progress:      [\"in_progress\", \"completed\", \"declined\"],\n      review_requested: [\"in_progress\"],\n      paused:           [\"cancelled\"],\n    };\n    if (!legal[task.state]?.includes(newState)) {\n      return { error: rpcError(E.PARAMS, `Illegal transition ${task.state} -> ${newState}`) };\n    }\n    // task.complete opens a review rather than completing when one is required.\n    // task.update reaches the same state by another route and carries no\n    // output, so completing here would record a finished task with nothing\n    // reviewed and no decision on the chain.\n    if (newState === \"completed\" && task.review_required) {\n      return { error: rpcError(E.PARAMS,\n        \"This task requires review. Submit the output with task.complete, which opens the review; a reviewer decision completes it.\") };\n    }\n    task.state = newState;\n    task.updated_at = this.now();\n    task.history.push({\n      ts: task.updated_at, from: p.from as ParticipantUri,\n      state: newState, note: p.progress_note as string | undefined,\n    });\n    return { result: { state: newState } };\n  }\n\n  private opTaskComplete(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // Completion is only legal from an active, non-terminal, non-paused state.\n    // An allowlist (rather than a denylist of terminal states) is safer: any\n    // state not listed -- cancelled, superseded, paused, already\n    // completed/declined, abstained, escalated -- is rejected, so completion\n    // can neither revive a terminated task nor bypass a pause.\n    if (task.state !== \"created\" && task.state !== \"in_progress\") {\n      return { error: rpcError(E.PARAMS, `Cannot complete task in state: ${task.state}`) };\n    }\n    // review/1.0 S3.1: task.complete on a task whose review is required opens a\n    // review implicitly rather than completing. The submitted output becomes the\n    // artefact under review; only a reviewer decision (decide.*) then takes the\n    // task to completed. Without this a review_required task would reach\n    // completed with unreviewed output and no decision.\n    if (task.review_required) {\n      const now = this.now();\n      if (!task.review) {\n        // review_required means a person has to see this. The producer must\n        // not satisfy its own review, and neither must another agent: an agent\n        // approving an agent leaves a decide.approve on the chain that reads\n        // as human oversight and is not. So the implicit review is addressed\n        // to the human members other than the completer and the assignee, and\n        // where there are none the completion is refused rather than opening a\n        // review no person can decide. An explicit review.request keeps its\n        // own `to`, so a deliberate agent-reviews-agent flow is still\n        // available.\n        const producer = p.from as string;\n        const eligible = [...ws.members.entries()]\n          .filter(([uri, member]) => uri !== producer && uri !== task.assignee && member.type === \"human\")\n          .map(([uri]) => uri);\n        if (eligible.length === 0) {\n          return { error: rpcError(E.NOT_AUTHORISED,\n            \"Task requires review but has no eligible human reviewer (needs a human member other than its assignee and completer)\") };\n        }\n        task.review = { requested_at: now, requested_to: eligible as ParticipantUri[], rule: \"any_one_approves\", decisions: [] };\n      }\n      task.pending_artefact = p.output;\n      task.state = \"review_requested\";\n      task.updated_at = now;\n      task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\",\n                          note: \"review required; opened on task.complete\" });\n      return { result: { state: \"review_requested\", review_id: task.id } };\n    }\n    task.output = p.output;\n    if (typeof p.confidence === \"number\" || typeof p.confidence === \"string\") task.confidence = p.confidence;\n    task.state = \"completed\";\n    task.updated_at = this.now();\n    task.history.push({ ts: task.updated_at, from: p.from as ParticipantUri, state: \"completed\" });\n    return { result: { state: \"completed\" } };\n  }\n\n  private opAuditRead(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const filter = (p.filter as {\n      method?: string; from?: string; task_id?: string; outcome?: unknown;\n    } | undefined) ?? {};\n    if (filter.outcome != null && filter.outcome !== \"accepted\" && filter.outcome !== \"refused\") {\n      return { error: rpcError(E.PARAMS, \"filter.outcome must be 'accepted' or 'refused'\") };\n    }\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const out: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      // Filters read the call an entry records, accepted or refused, and\n      // `outcome` narrows to one kind.\n      const refused = entry.outcome != null;\n      if (filter.outcome === \"accepted\" && refused) continue;\n      if (filter.outcome === \"refused\" && !refused) continue;\n      const call = entryCall(entry) ?? ({} as Envelope);\n      const ep = (call.params ?? {}) as Record<string, unknown>;\n      if (filter.method && call.method !== filter.method) continue;\n      if (filter.from && ep.from !== filter.from) continue;\n      if (filter.task_id) {\n        let taskId = ep.task_id;\n        if (call.method === \"whisper.answer\") {\n          const prompt = ws.whispers.get(ep.whisper_id as string);\n          taskId = prompt ? (prompt as { task_id?: string }).task_id : undefined;\n        }\n        if (taskId !== filter.task_id) continue;\n      }\n      const item: Record<string, unknown> = { seq: entry.seq, arrived: entry.arrived };\n      if (refused) {\n        item.request = entry.request;\n        item.outcome = entry.outcome;\n      } else {\n        item.envelope = entry.envelope;\n      }\n      if (entry.prev_hash) item.prev_hash = entry.prev_hash;\n      out.push(item);\n    }\n    // The next entry to read: the end of the range, or the end of the log\n    // where the range runs past it, so a reader paging forward meets the\n    // entries written after this read.\n    return { result: { entries: out, next_seq: Math.min(toSeq, ws.audit.length) } };\n  }\n\n  // ==========================================================\n  //   review/1.0 handlers\n  // ==========================================================\n\n  private opReviewRequest(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"artefact\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // task.complete refuses a task that has been stopped, so that a completion\n    // \"can neither revive a terminated task nor bypass a pause\". review.request\n    // creates the same kind of state and had no such check, so it revived\n    // cancelled and superseded tasks and pulled paused ones back into play. The\n    // same three states are refused here.\n    //\n    // `completed` is deliberately still allowed. Requesting review on a\n    // completed task is how every framework bridge submits a draft, and\n    // 0.2.12's `review_required` is the route away from that, not this.\n    if (REVIEW_REQUEST_STOPPED.includes(task.state)) {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Cannot request review for task in state: ${task.state}`) };\n    }\n    const to = p.to;\n    const reviewers: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!reviewers.length) return { error: rpcError(E.PARAMS, \"review.request needs 'to'\") };\n    const now = this.now();\n    const declaredRule = p.rule as string | undefined;\n    const rule = declaredRule || \"any_one_approves\";\n    if (!reviewRuleSupported(rule)) {\n      return { error: rpcError(E.PARAMS, `Unsupported review rule ${JSON.stringify(rule)}: review/1.0 supports any_one_approves, all_approve, quorum:<n>`) };\n    }\n\n    // A review already open on this task. Replacing the artefact underneath\n    // it would let a reviewer decide on content they never saw, and would\n    // discard decisions already cast while their envelopes remain in the\n    // audit log, so a quorum could appear to have been assembled across two\n    // different artefacts. Re-requesting the *same* artefact is a different\n    // thing: it widens the reviewer set on an open review, which is legitimate\n    // and preserves what has been decided so far.\n    if (task.state === \"review_requested\" && task.review) {\n      if (contentHash(task.pending_artefact) !== contentHash(p.artefact)) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          \"A review is already open on this task with different content. \" +\n          \"Decide, abstain, escalate or cancel it before requesting review of a new artefact.\",\n        ) };\n      }\n      // Only a rule the caller actually supplied can be a change. Comparing\n      // the resolved default instead refused the documented\n      // widen-the-reviewer-set request whenever `rule` was omitted.\n      if (declaredRule !== undefined && declaredRule !== task.review.rule) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          `Cannot change the decision rule of an open review (currently ${task.review.rule})`,\n        ) };\n      }\n      // Union, preserving order and the decisions already recorded.\n      for (const r of reviewers) {\n        if (!task.review.requested_to.includes(r)) task.review.requested_to.push(r);\n      }\n      if (p.deadline !== undefined) task.review.deadline = p.deadline as string;\n      task.updated_at = now;\n      return { result: {\n        state: \"review_requested\",\n        review_id: task.id,\n        amended: true,\n        requested_to: [...task.review.requested_to],\n      } };\n    }\n\n    task.state = \"review_requested\";\n    task.updated_at = now;\n    task.review = {\n      requested_at: now,\n      requested_to: reviewers,\n      rule,\n      deadline: p.deadline as string | undefined,\n      decisions: [],\n    };\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\" });\n    task.pending_artefact = p.artefact;\n    return { result: { state: \"review_requested\", review_id: task.id } };\n  }\n\n  /**\n   * Verify an optional `approved_artefact_digest` against the artefact under\n   * review (review/1.0 S3.2).\n   *\n   * The digest sits in params, so it is inside whatever the envelope signature\n   * covers: the decision then attests the content the reviewer saw rather than\n   * a task reference, and a relying party can check it without trusting the\n   * Coordinator that produced it. Absent, behaviour is exactly as before.\n   *\n   * On mismatch nothing is recorded and no state changes, so a client that\n   * computes the wrong digest refuses only its own decision.\n   */\n  private checkArtefactDigest(p: Record<string, unknown>, task: Task): ReturnType<Handler> | null {\n    const declared = p.approved_artefact_digest;\n    if (declared === undefined || declared === null) return null;\n    if (typeof declared !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"approved_artefact_digest must be a string\") };\n    }\n    if (task.pending_artefact === undefined) {\n      return { error: rpcError(E.PARAMS, \"No artefact under review to bind a digest to\") };\n    }\n    const actual = contentHash(task.pending_artefact);\n    if (declared !== actual) {\n      return { error: rpcError(\n        E.SIG_ARTEFACT_DIGEST_MISMATCH,\n        \"approved_artefact_digest does not match the artefact under review\",\n        { declared, actual },\n      ) };\n    }\n    return null;\n  }\n\n  private opDecide(p: Record<string, unknown>, kind: \"approve\" | \"reject\"): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const badTags = tagsError(p);\n    if (badTags) return badTags;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind,\n      ts: now,\n      comment: p.comment as string | undefined,\n      tags: p.tags as string[] | undefined,\n    });\n    if (kind === \"approve\") {\n      // Complete only when the rule's approval predicate is met; otherwise the\n      // approval is recorded and the task stays review_requested.\n      if (reviewSatisfied(task.review!)) {\n        task.output = task.pending_artefact;\n        task.state = \"completed\";\n      }\n    } else {\n      task.state = p.request_revision ? \"in_progress\" : \"declined\";\n    }\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: task.state });\n    return { result: { state: task.state } };\n  }\n\n  private opDecideOverride(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"diff\", \"rationale\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const badTags = tagsError(p);\n    if (badTags) return badTags;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    // The override is of the artefact under review; use the coordinator's\n    // record, not a caller-supplied \"before\" that could be fabricated.\n    const base = task.pending_artefact;\n    if (base === undefined) return { error: rpcError(E.PARAMS, \"No base artefact for override\") };\n    let applied: unknown;\n    try {\n      applied = applyJsonPatch(base, p.diff as never);\n    } catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.PATCH_FAILED, msg) };\n    }\n    const now = this.now();\n    const id = this.ids.artefactId();\n    const override: OverrideArtefact = {\n      id,\n      task_id: task.id,\n      reviewer: p.from as ParticipantUri,\n      based_on_artefact: base,\n      diff: p.diff as never,\n      result: applied,\n      rationale: p.rationale as string,\n      tags: (p.tags as string[]) ?? [],\n      policy_refs: (p.policy_refs as string[]) ?? [],\n      ts: now,\n      logical_id: p.logical_id as string | undefined,\n      instance_id: p.instance_id as string | undefined,\n      intent_preserved: p.intent_preserved as boolean | undefined,\n    };\n    ws.overrides.set(id, override);\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"override\",\n      ts: now,\n      tags: override.tags,\n      override_artefact_id: id,\n    });\n    task.output = applied;\n    task.state = \"completed\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"completed\", note: \"override applied\" });\n    return { result: { state: \"completed\", override_artefact_id: id, applied } };\n  }\n\n  private opAbstainDeclare(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"reason\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"abstain\",\n      ts: now,\n      comment: p.reason as string,\n      abstain_category: (p.category as string) || \"other\",\n    });\n    task.state = \"abstained\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"abstained\", note: p.reason as string });\n    return { result: { state: \"abstained\" } };\n  }\n\n  private opEscalateRaise(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"original_task_id\", \"new_task\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const origId = p.original_task_id;\n    const orig = typeof origId === \"string\" ? ws.tasks.get(origId) : undefined;\n    if (!orig) return { error: rpcError(E.PARAMS, \"Unknown original task\") };\n    if (orig.state === \"completed\" || orig.state === \"cancelled\" || orig.state === \"superseded\") {\n      return { error: rpcError(E.PARAMS, `Cannot escalate a terminal task: ${orig.state}`) };\n    }\n    if (p.new_task === null || typeof p.new_task !== \"object\" || Array.isArray(p.new_task)) {\n      return { error: rpcError(E.PARAMS, \"new_task must be an object\") };\n    }\n    const nt = p.new_task as Record<string, unknown>;\n    const assignee = nt.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Escalation assignee not in workspace\") };\n    }\n    const named = nt.mode;\n    if (named !== undefined && named !== null && typeof named !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_task.mode must be a string\") };\n    }\n    // The successor is a created task, so it meets the checks task.create and\n    // control.supersede apply: its assignee must not be paused, and its mode,\n    // the one new_task names or else the original's, must be within the\n    // ceiling in force now. Naming a lower mode is how work is escalated\n    // after the ceiling has been lowered.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    const mode = ((named as Mode | null | undefined) || orig.mode) as Mode;\n    if (!modeLE(mode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${mode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    const now = this.now();\n    const newId = this.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: (nt.kind as string) || orig.kind,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: (nt.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode,\n      supersedes: orig.id,\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\", note: `escalated from ${orig.id}` }],\n      paused: false,\n    };\n    // Escalating hands the work on and keeps its review requirement. The\n    // successor requires review when the original did, and a trial task\n    // forces review under modes/1.0 as it does at task.create.\n    if (orig.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    }\n    ws.tasks.set(newId, newTask);\n    orig.state = \"escalated\";\n    orig.updated_at = now;\n    orig.superseded_by = newId;\n    orig.history.push({ ts: now, from: p.from as ParticipantUri, state: \"escalated\", note: `-> ${newId}` });\n    return { result: { new_task_id: newId, escalated_from: orig.id } };\n  }\n}\n\nfunction memberToDict(m: Member): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    uri: m.uri, type: m.type, role: m.role, joined: m.joined,\n  };\n  if (m.display_name) out.display_name = m.display_name;\n  if (m.capabilities) out.capabilities = m.capabilities;\n  if (m.scopes) out.scopes = m.scopes;\n  if (m.keys.length) {\n    out.jwks = { keys: m.keys.filter(k => !k.revoked_at && !k.valid_until).map(k => k.jwk) };\n    out.key_history = m.keys;\n  }\n  if (m.paused) out.paused = true;\n  if (m.oidc_sub) out.oidc_sub = m.oidc_sub;\n  if (m.vc_holder) out.vc_holder = m.vc_holder;\n  return out;\n}\n","/**\n * Default routing policy factory.\n *\n * Returns a partial CoordinatorOptions configured with the three\n * routing hooks (routingPolicy, reviewDepthPolicy, escalationPolicy)\n * that the playground and demo use out of the box. Operators can\n * override individual hooks by passing their own functions in\n * CoordinatorOptions.\n *\n * The defaults shipped with the Coordinator (in profiles/routing.ts)\n * apply the same review-depth and escalation rules. Routing differs: this\n * routing policy takes the first candidate as given, so a first candidate\n * who is not a member is refused with -32510 and one who is paused with\n * -32063, where the built-in default passes over both. This factory exists\n * so that the legacy call site can keep using:\n *\n *   new Coordinator({ ...makeDefaultPolicy(SENIOR_URI), ... })\n *\n * The seniorTarget argument is the URI auto-escalation routes to\n * when no other target is supplied.\n */\nimport type {\n  EscalationPolicyFn,\n  ReviewDepthPolicyFn,\n  RoutingPolicyFn,\n  CoordinatorOptions,\n} from \"./coordinator.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\n\nexport function makeDefaultPolicy(seniorTarget: string): Pick<CoordinatorOptions,\n  \"routingPolicy\" | \"reviewDepthPolicy\" | \"escalationPolicy\"> {\n\n  const routingPolicy: RoutingPolicyFn = (task, candidates) => {\n    const eligible = candidates;  // delegate elig check to coordinator\n    return {\n      selected: eligible[0],\n      rationale: {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: eligible.slice(1).map(c => ({\n          candidate: c, reason_excluded: \"not first eligible\",\n        })),\n      },\n    };\n  };\n\n  const reviewDepthPolicy: ReviewDepthPolicyFn = (_task, hints) => {\n    const crit = (hints.criticality as string) ?? \"medium\";\n    let conf = 1.0;\n    try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n    if (isNaN(conf)) conf = 1.0;\n    const r = CRIT[crit] ?? 1;\n    if (r >= 3) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=critical: full review\" }};\n    if (r === 2 && conf < 0.7) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=high and confidence<0.7: full review\" }};\n    if (r === 0 && conf >= 0.95) return { depth: \"skip\",\n      rationale: { policy_id: \"default\", summary: \"very low criticality + very high confidence: skip\" }};\n    if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling_probability: 0.10,\n      rationale: { policy_id: \"default\", summary: \"low criticality + high confidence: 10% sample\" }};\n    return { depth: \"spot_check\", sampling_probability: 0.25,\n      rationale: { policy_id: \"default\", summary: \"default mid-confidence: 25% sample\" }};\n  };\n\n  const escalationPolicy: EscalationPolicyFn = (_task, hints) => {\n    const crit = (hints.criticality as string) ?? \"medium\";\n    let conf = 1.0;\n    try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n    if (isNaN(conf)) conf = 1.0;\n    const r = CRIT[crit] ?? 1;\n    const escalate = (r >= 3) || (r >= 2 && conf < 0.6);\n    return {\n      escalate,\n      to: escalate ? seniorTarget : undefined,\n      triggered_rule: {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      },\n    };\n  };\n\n  return { routingPolicy, reviewDepthPolicy, escalationPolicy };\n}\n","/**\n * @brightbeamai/chap-coordinator/transports/wrap\n *\n * Inward integration helpers: turn an external tool/agent event into\n * a CHAP envelope landing in a workspace's audit log. Library\n * counterpart to the patterns described in\n * ``integrations/CHAP-with-MCP.md`` and ``integrations/CHAP-with-A2A.md``.\n *\n * The outward transports let external clients drive a CHAP workspace.\n * These helpers go the other direction: when work has already\n * happened outside CHAP, wrap it so the audit log carries a faithful,\n * citable record.\n *\n * Spec target: CHAP 0.3. MCP 2026-07-28. A2A 1.0.\n */\n\nimport { contentHash } from \"../canonical.js\";\nimport type { Coordinator } from \"../coordinator.js\";\n\nexport { contentHash } from \"../canonical.js\";\n\nexport interface WrapMcpToolCallOptions {\n  /** Participant URI making the call. Must already be a workspace member. */\n  caller: string;\n  /** MCP tool name, e.g. ``\"github.create_issue\"``. */\n  tool: string;\n  /** Arguments passed to the MCP tool. */\n  args: Record<string, unknown>;\n  /** Return value from the MCP tool. */\n  result: unknown;\n  /** Optional MCP server identifier, e.g. \"github\". */\n  server?: string;\n  /** Override the default task kind ``\"mcp_call:<tool>\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the CHAP task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this call fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapResult {\n  task_id:     string;\n  input_hash:  string;\n  output_hash: string;\n}\n\n/**\n * Wrap a completed MCP tool call as a CHAP task pair.\n *\n * Emits ``task.create`` + ``task.complete`` envelopes into the\n * workspace so the MCP call shows up as a first-class audit entry.\n * The result artefact is the MCP tool's return value, plus a\n * ``citations[]`` entry with the input/output hashes per\n * ``integrations/CHAP-with-MCP.md`` §2.\n */\nexport function wrapMcpToolCall(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapMcpToolCallOptions,\n): WrapResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.caller) throw new Error(\"caller is required\");\n  if (!options.tool) throw new Error(\"tool is required\");\n\n  const inputHash = contentHash(options.args);\n  const outputHash = contentHash(options.result);\n  const kind = options.taskKind ?? `mcp_call:${options.tool}`;\n\n  const citations = [{\n    kind:         \"mcp_tool_call\" as const,\n    server:       options.server ?? \"unknown\",\n    tool:         options.tool,\n    input_hash:   inputHash,\n    output_hash:  outputHash,\n  }];\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    kind,\n    assignee: options.caller,\n    input:    options.args,\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-create`,\n    method:  \"task.create\",\n    params:  createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-update`,\n    method:  \"task.update\",\n    params:  { workspace, from: options.caller, task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { result: options.result, citations };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    task_id:  taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-complete`,\n    method:  \"task.complete\",\n    params:  completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, input_hash: inputHash, output_hash: outputHash };\n}\n\n// ============================================================\n\nexport interface WrapA2aExchangeOptions {\n  /** URI of the local bridge participant. Must be a workspace member. */\n  bridgeUri: string;\n  /** Identifier of the remote A2A agent. Recorded in the citation. */\n  remoteAgent: string;\n  /** The A2A message body sent outbound. */\n  sent: Record<string, unknown>;\n  /** The A2A message body received in response. */\n  received: Record<string, unknown>;\n  /** CHAP task kind. Default ``\"a2a_exchange\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this exchange fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapA2aResult {\n  task_id:       string;\n  sent_hash:     string;\n  received_hash: string;\n}\n\n/**\n * Wrap a completed A2A message exchange as a CHAP task pair.\n *\n * Implements the bridge-participant pattern from\n * ``integrations/CHAP-with-A2A.md`` §3 as a library helper.\n */\nexport function wrapA2aMessageExchange(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapA2aExchangeOptions,\n): WrapA2aResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.bridgeUri) throw new Error(\"bridgeUri is required\");\n  if (!options.remoteAgent) throw new Error(\"remoteAgent is required\");\n\n  const sentHash = contentHash(options.sent);\n  const receivedHash = contentHash(options.received);\n  const kind = options.taskKind ?? \"a2a_exchange\";\n\n  const citation = {\n    kind:           \"a2a_exchange\" as const,\n    remote_agent:   options.remoteAgent,\n    sent_hash:      sentHash,\n    received_hash:  receivedHash,\n  };\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.bridgeUri,\n    kind,\n    assignee: options.bridgeUri,\n    input:    { remote_agent: options.remoteAgent, sent: options.sent },\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-create\",\n    method: \"task.create\", params: createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-update\",\n    method: \"task.update\",\n    params: { workspace, from: options.bridgeUri,\n              task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { received: options.received, citations: [citation] };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace, from: options.bridgeUri, task_id: taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-complete\",\n    method: \"task.complete\", params: completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, sent_hash: sentHash, received_hash: receivedHash };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBA,yBAA2B;AAEpB,IAAM,YAAY,YAAY,IAAI,OAAO,EAAE;AAElD,IAAM,oBACJ;AAEF,IAAM,qBACJ;AAGF,IAAM,uBACJ;AAGF,SAAS,sBAAsB,GAAiB;AAC9C,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,UAAM,IAAI,EAAE,WAAW,CAAC;AACxB,QAAI,KAAK,SAAU,KAAK,OAAQ;AAC9B,YAAM,OAAO,IAAI,IAAI,EAAE,SAAS,EAAE,WAAW,IAAI,CAAC,IAAI;AACtD,UAAI,OAAO,SAAU,OAAO,MAAQ,OAAM,IAAI,MAAM,oBAAoB;AACxE;AAAA,IACF,WAAW,KAAK,SAAU,KAAK,OAAQ;AACrC,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,wBAAsB,CAAC;AACvB,SAAO,KAAK,UAAU,CAAC;AACzB;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACA,MAAI,KAAK,IAAI,CAAC,IAAI,OAAO,kBAAkB;AACzC,UAAM,IAAI,MAAM,kBAAkB;AAAA,EACpC;AAGA,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,MAAM,OAAwB;AACrC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,MAAM,IAAI,KAAK,EAAE,KAAK,GAAG,IAAI;AAAA,EAC5C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,gBAAgB,GAAG,IAAI,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC;AAAA,IACzD;AACA,WAAO,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,EACjC;AACA,QAAM,IAAI,UAAU,qCAAqC,OAAO,KAAK,EAAE;AACzE;AAGO,SAAS,aAAa,OAAwB;AACnD,SAAO,OAAO,KAAK,MAAM,KAAK,GAAG,OAAO;AAC1C;AAGO,SAAS,UAAU,MAA+B;AACvD,QAAM,QAAI,+BAAW,QAAQ;AAC7B,IAAE,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,OAAO,IAAI,IAAI;AACrE,SAAO,YAAY,EAAE,OAAO,KAAK;AACnC;AAGO,SAAS,YAAY,SAA0B;AACpD,SAAO,UAAU,aAAa,OAAO,CAAC;AACxC;;;AC3FO,IAAM,iBAAmD,OAAO,OAAO;AAAA,EAC5E,mBAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,yBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,wBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,4BAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,gBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,0BAA2B;AAC7B,CAAC;AAUM,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AC3DD,IAAAA,sBAQO;AAEP,IAAM,cAAc,OAAO,KAAK,4BAA4B,KAAK;AAEjE,SAAS,YAAY,KAAqB;AACxC,SAAO,IAAI,SAAS,QAAQ,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACzF;AAEA,SAAS,aAAa,GAAmB;AACvC,QAAM,MAAM,IAAI,QAAQ,IAAK,EAAE,SAAS,KAAM,CAAC;AAC/C,SAAO,OAAO,KAAK,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,KAAK,QAAQ;AAC5E;AAgBO,SAAS,WAAW,KAAqB;AAC9C,aAAO,gCAAW,QAAQ,EAAE,OAAO,UAAU,GAAG,EAAE,OAAO;AAC3D;AAKO,SAAS,mBAAmB,MAAyB;AAC1D,MAAI,KAAK,WAAW,IAAI;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAEA,QAAM,QAAQ,OAAO,OAAO;AAAA,IAC1B,OAAO,KAAK,oCAAoC,KAAK;AAAA,IACrD;AAAA,EACF,CAAC;AACD,aAAO,sCAAiB,EAAE,KAAK,OAAO,QAAQ,OAAO,MAAM,QAAQ,CAAC;AACtE;AAGO,SAAS,eAAe,YAA+B;AAC5D,QAAM,UAAM,qCAAgB,UAAU;AACtC,QAAM,MAAM,IAAI,OAAO,EAAE,QAAQ,OAAO,MAAM,OAAO,CAAC;AAEtD,SAAO,IAAI,SAAS,IAAI,SAAS,EAAE;AACrC;AAGO,SAAS,iBAAiB,KAAwB;AACvD,MAAI,IAAI,WAAW,IAAI;AACrB,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,QAAM,MAAM,OAAO,OAAO,CAAC,aAAa,GAAG,CAAC;AAC5C,aAAO,qCAAgB,EAAE,KAAK,KAAK,QAAQ,OAAO,MAAM,OAAO,CAAC;AAClE;AAGO,SAAS,kBAAkB,KAAa,KAAqB;AAClE,QAAM,MAAM,eAAe,GAAG;AAC9B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,SAAK,gCAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA,IAC/D,KAAK;AAAA,IACL,KAAK;AAAA,IACL,GAAK,YAAY,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,aAAa,WAAmB,YAAuB,KAAqB;AAC1F,QAAM,UAAM,oBAAAC,MAAS,MAAM,WAAW,UAAU;AAChD,SAAO,WAAW,GAAG,IAAI,IAAI,SAAS,QAAQ,CAAC;AACjD;AAGO,SAAS,eAAe,WAAmB,QAAgB,WAA+B;AAC/F,MAAI,CAAC,OAAO,WAAW,UAAU,EAAG,QAAO;AAC3C,QAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,MAAI,MAAM,SAAS,EAAG,QAAO;AAC7B,QAAM,SAAS,MAAM,MAAM,SAAS,CAAC;AACrC,MAAI;AACF,UAAM,MAAM,OAAO,KAAK,QAAQ,QAAQ;AACxC,eAAO,oBAAAC,QAAW,MAAM,WAAW,WAAW,GAAG;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,KAAqB;AACpD,SAAO,iBAAiB,aAAa,IAAI,CAAC,CAAC;AAC7C;AAGO,SAAS,cAAc,KAAkD;AAC9E,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,aAAa,mBAAmB,IAAI;AAC1C,SAAO,EAAE,YAAY,KAAK,kBAAkB,KAAK,UAAU,EAAE;AAC/D;;;ACpHA,IAAM,WAAW;AAEjB,SAAS,OAAO,OAAe,QAAwB;AACrD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,UAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,UAAM,SAAS,GAAG,IAAI;AACtB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YACkB,gBAAyB,OACzC,OAAe,IACf,UAAkB,OAClB;AAHgB;AAIhB,SAAK,UAAU;AACf,SAAK,UAAU;AAAA,EACjB;AAAA,EANkB;AAAA,EAJV;AAAA,EACA;AAAA,EAWR,QAAgB;AACd,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAO,KAAK;AAAA,IACd;AACA,WAAO,KAAK,IAAI;AAAA,EAClB;AAAA,EAEQ,aAAqB;AAC3B,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAQ,KAAK,UAAU,uBAAyB,MAAM,OAAO;AAAA,IAC/D;AAKA,UAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,WAAO,gBAAgB,GAAG;AAC1B,QAAI,IAAI;AACR,eAAW,KAAK,IAAK,KAAK,KAAK,KAAM,OAAO,CAAC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,OAAe;AACb,UAAM,KAAK,OAAO,KAAK,MAAM,CAAC,KAAM,MAAM,OAAO;AACjD,UAAM,OAAO,KAAK,WAAW;AAC7B,WAAO,OAAO,IAAI,EAAE,IAAI,OAAO,MAAM,EAAE;AAAA,EACzC;AAAA,EAEA,aAAyB;AAAE,WAAO,KAAK,KAAK;AAAA,EAAG;AAAA,EAC/C,SAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,cAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,iBAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAC1D;;;AC7DO,IAAM,IAAI;AAAA;AAAA,EAEf,OAAU;AAAA,EACV,SAAU;AAAA,EACV,QAAU;AAAA,EACV,QAAU;AAAA,EACV,UAAU;AAAA;AAAA,EAGV,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,cAAgB;AAAA,EAChB,eAAgB;AAAA,EAChB,qBAAqB;AAAA;AAAA,EAGrB,0BAA6B;AAAA,EAC7B,gBAA6B;AAAA,EAC7B,2BAA6B;AAAA;AAAA,EAG7B,yBAAyB;AAAA,EACzB,qBAAyB;AAAA,EACzB,wBAAyB;AAAA,EACzB,oBAAyB;AAAA;AAAA,EAGzB,uBAAyB;AAAA,EACzB,uBAAyB;AAAA;AAAA,EAGzB,wCAAwC;AAAA,EACxC,0BAAwC;AAAA,EACxC,8BAAwC;AAAA;AAAA,EAGxC,0BAA6B;AAAA,EAC7B,wBAA6B;AAAA,EAC7B,4BAA6B;AAAA,EAC7B,0BAA6B;AAAA;AAAA,EAG7B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,8BAA8B;AAAA;AAAA,EAG9B,mBAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,uBAA0B;AAAA;AAAA,EAG1B,uBAAuB;AAAA,EACvB,oBAAuB;AAAA,EACvB,mBAAuB;AAAA,EACvB,oBAAuB;AAAA;AAAA,EAGvB,eAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,uBAA2B;AAAA,EAC3B,mBAA2B;AAAA;AAAA,EAG3B,8BAAgC;AAAA,EAChC,0BAAgC;AAAA,EAChC,mCAAmC;AAAA,EACnC,0BAAgC;AAAA,EAChC,8BAAgC;AAAA,EAChC,4BAAgC;AAAA,EAChC,gCAAgC;AAClC;AAEO,SAAS,SAAS,MAAc,SAAiB,MAAgB;AACtE,SAAO,EAAE,MAAM,SAAS,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC,EAAG;AAClE;AAEO,SAAS,gBAAgB,KAAuB;AACrD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,IAAI;AACV,SAAO,EAAE,YAAY;AACvB;;;ACxEO,SAAS,YAAY,OAA4B;AACtD,MAAI,MAAM,WAAW,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,SAAS,MAAM,QAAQ;AACnF,SAAO,MAAM;AACf;AAGO,SAAS,UAAU,OAAyC;AACjE,SAAO,MAAM,YAAY,MAAM,WAAW;AAC5C;AAGO,SAAS,UAAU,OAA4B;AACpD,SAAO,MAAM,WAAW;AAC1B;AAGA,SAAS,OAAO,OAAyB;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,IAAI;AACV,SAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AASO,SAAS,kBAAkB,OAA4B;AAC5D,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,aAAa,QAAS,QAAO;AACjC,MAAI,SAAU,QAAO,OAAO,MAAM,QAAQ,KAAK,MAAM,WAAW;AAChE,QAAM,IAAI,MAAM;AAChB,SAAO,OAAO,MAAM,OAAO,KAAK,KAAK,QAAQ,OAAO,MAAM,YACrD,EAAE,WAAW,aAAa,OAAO,UAAU,EAAE,IAAI;AACxD;AAGO,SAAS,SAASC,OAAwB;AAC/C,SAAOA,UAAS,QAAQ,OAAOA,UAAS,YAAY,OAAQA,MAA2B,QAAQ;AACjG;AAOO,SAAS,aAAaA,OAAwB;AACnD,QAAM,SAAkC,EAAE,GAAGA,MAAK;AAClD,SAAO,OAAO;AACd,SAAO,UAAU,aAAa,MAAM,CAAC;AACvC;AAGO,SAAS,SAAS,QAAiB,MAAsB;AAC9D,SAAO,UAAU,OAAO,OAAO,CAAC,aAAa,MAAM,GAAG,OAAO,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC;AACpF;AAOA,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EACpD,EAAE;AAAA,EAAO,EAAE;AAAA,EAAS,EAAE;AAAA,EAAQ,EAAE;AAAA,EAChC,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAiB,EAAE;AACjE,CAAC;AAOD,IAAM,qBAA0C,oBAAI,IAAI,CAAC,oBAAoB,kBAAkB,CAAC;AAWzF,SAAS,kBACd,QACA,OACA,YACS;AACT,MAAI,CAAC,OAAO,UAAU,MAAM,IAAI,EAAG,QAAO;AAC1C,MAAI,mBAAmB,IAAI,MAAM,EAAG,QAAO;AAC3C,MAAI,iBAAiB,IAAI,MAAM,IAAI,EAAG,QAAO;AAC7C,MAAI,MAAM,SAAS,EAAE,QAAQ;AAC3B,UAAM,OAAO,MAAM;AACnB,WAAO,OAAO,MAAM,YAAY,YAAY,WAAW,IAAI,MAAM;AAAA,EACnE;AACA,SAAO;AACT;;;ACtGO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAMvB,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO;AACjC,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB;AAAgB,aAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,SAAS,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IAC5F;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;;;AC9PO,IAAM,cAAN,MAAmC;AAAA,EAChC,UAAU,oBAAI,IAA6B;AAAA,EAEnD,OAA0B;AACxB,WAAO,MAAM,KAAK,KAAK,QAAQ,OAAO,CAAC;AAAA,EACzC;AAAA,EAEA,KAAK,QAA+B;AAClC,SAAK,QAAQ,IAAI,OAAO,IAAI,MAAM;AAAA,EACpC;AAAA,EAEA,OAAO,IAAkB;AACvB,SAAK,QAAQ,OAAO,EAAE;AAAA,EACxB;AAAA,EAEA,QAAc;AACZ,SAAK,QAAQ,MAAM;AAAA,EACrB;AACF;;;AC9DO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EACA;AAAA,EACT,YAAY,MAAc,SAAiB,MAAgB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAMO,SAAS,KACd,OACA,QACA,QACiB;AACjB,QAAM,WAAqB;AAAA,IACzB,SAAS;AAAA,IACT,IAAI,MAAM,IAAI,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACA,QAAM,MAAM,MAAM,SAAS,QAAQ;AACnC,MAAI,IAAI,OAAO;AACb,UAAM,IAAI,iBAAiB,IAAI,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI;AAAA,EAC9E;AACA,SAAO,IAAI;AACb;AAWO,SAAS,QAAQ,OAAoB;AAC1C,QAAM,IAAI,CAAuB,GAAM,MAAuB,KAAK,OAAO,GAAG,CAAC;AAE9E,SAAO;AAAA,IACL,WAAW;AAAA,MACT,QAAc,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MACpF,UAAc,CAAC,MAA8C,EAAE,sBAAsB,CAAC;AAAA,MACtF,cAAc,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,MACX,MAAY,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MAClF,OAAY,CAAC,MAA8C,EAAE,qBAAqB,CAAC;AAAA,MACnF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,MACxF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC1F;AAAA,IACA,MAAM;AAAA,MACJ,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,UAAU,CAAC,MAAqC,EAAE,iBAAiB,CAAC;AAAA,MACpE,OAAU,CAAC,MAAqC,EAAE,cAAc,CAAC;AAAA,IACnE;AAAA,IACA,QAAQ;AAAA,MACN,SAAS,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACrE,OAAS,CAAC,MAAsC,EAAE,gBAAgB,CAAC;AAAA,IACrE;AAAA,IACA,QAAQ;AAAA,MACN,SAAU,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACvE,QAAU,CAAC,MAAuC,EAAE,iBAAiB,CAAC;AAAA,MACtE,UAAU,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IAC1E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,OAAO,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACnE,MAAO,CAAC,MAAsC,EAAE,iBAAiB,CAAC;AAAA,IACpE;AAAA,IACA,SAAS;AAAA,MACP,KAAQ,CAAC,MAAsC,EAAE,eAAe,CAAC;AAAA,MACjE,QAAQ,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,IACtE;AAAA,IACA,YAAY;AAAA,MACV,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,SAAS,CAAC,MAA0C,EAAE,sBAAsB,CAAC;AAAA,MAC7E,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,OAAS,CAAC,MAA0C,EAAE,oBAAoB,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,MACvE,QAAS,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACtE,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,SAAS;AAAA,MACP,OAAmB,CAAC,MAAiD,EAAE,iBAAiB,CAAC;AAAA,MACzF,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,WAAmB,CAAC,MAAiD,EAAE,qBAAqB,CAAC;AAAA,MAC7F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,kBAAmB,CAAC,MAAiD,EAAE,4BAA4B,CAAC;AAAA,IACtG;AAAA,IACA,OAAO;AAAA,MACL,MAAiB,CAAC,MAA6C,EAAE,cAAc,CAAC;AAAA,MAChF,iBAAiB,CAAC,MAA6C,EAAE,yBAAyB,CAAC;AAAA,MAC3F,gBAAiB,CAAC,MAA6C,EAAE,wBAAwB,CAAC;AAAA,MAC1F,cAAiB,CAAC,MAA6C,EAAE,sBAAsB,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;;;ACmPO,SAAS,OAAO,GAAS,SAAwB;AACtD,QAAM,QAA8B,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,EAAE;AACzE,SAAO,MAAM,CAAC,KAAK,MAAM,OAAO;AAClC;;;AClXA,IAAM,YAAY;AAMlB,SAAS,eAAe,aAAqB,QAAiB,QAAyC;AACrG,SAAO;AAAA,IACL,WAAW;AAAA,MACT,KAAK;AAAA;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,YAAY,EAAE,KAAK,aAAa,KAAK,KAAK;AAAA,MAC1C,gBAAgB;AAAA,IAClB;AAAA,IACA,SAAS,aAAa,MAAM,EAAE,SAAS,OAAO;AAAA,IAC9C,WAAW;AAAA,EACb;AACF;AAEO,SAAS,mBAAmB,OAA0B;AAC3D,QAAM,SAAS,IAAI,yBAAyB,CAAC,MAAM;AACjD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,SAAU,EAAE,UAAqB;AAEvC,QAAI,CAAC,MAAM,QAAQ,gBAAgB;AACjC,YAAM,aAAa,GAAG,MAAM,MAAM,SAAS,KAAK,EAAE,IAAI,OACpD,eAAe,GAAG,IAAI,YAAY,CAAC,GAAG,MAAM,CAAC;AAC/C,aAAO,EAAE,QAAQ;AAAA,QACf;AAAA,QACA,MAAM;AAAA,MACR,EAAC;AAAA,IACH;AACA,UAAM,WAAsB,CAAC;AAC7B,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAClD,YAAM,YAAY,eAAe,GAAG,IAAI,YAAY,KAAK,GAAG,MAAM;AAClE,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,QAAQ,eAAe,SAAS;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,2BAA2B,GAAG,EAAE,EAAE;AAAA,MAClF;AACA,UAAI,YAAY,MAAM;AACpB,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,6BAA6B,MAAM,GAAG;AAAA,QAAE,EAAE;AAAA,MAC9C;AACA,eAAS,KAAK,EAAE,KAAK,MAAM,KAAK,QAAQ,CAAC;AAAA,IAC3C;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;AAAA,EAChC,CAAC;AAED,QAAM,SAAS,IAAI,wBAAwB,CAAC,MAAM;AAChD,UAAM,UAAU,EAAE;AAClB,QAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,MAAM,QAAQ,oBAAoB;AACpC,UAAI;AACJ,UAAI;AAAE,aAAK,CAAC,CAAC,MAAM,QAAQ,mBAAmB,OAAkC;AAAA,MAAG,SAC5E,GAAG;AACR,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,iBAAiB,GAAG,EAAE,EAAE;AAAA,MAC5E;AACA,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,wBAAwB,EAAE;AACrF,aAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,IACtC;AACA,WAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,6DAA6D,EAAE;AAAA,EACnH,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,EAAE,GAAG,iBAAiB,MAAM,QAAQ,cAAc;AACpD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AAKA,QAAI,EAAE,aAAa,UAAa,EAAE,WAAW,QAAW;AACtD,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,MAEF,EAAE;AAAA,IACJ;AAOA,QAAI,QAAQ,GAAG,MAAM,UAAU,OAAK,EAAE,aAAa,IAAI;AACvD,QAAI,QAAQ,EAAG,SAAQ,GAAG,MAAM;AAChC,UAAM,SAAmB,CAAC;AAC1B,QAAI,OAAO;AACX,QAAI,SAAS;AACb,eAAW,KAAK,GAAG,MAAM,MAAM,KAAK,GAAG;AAIrC,YAAM,eAAe,UAAU,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC/E,eAAS;AAGT,UAAI,EAAE,cAAc,cAAc;AAChC,eAAO,KAAK,OAAO,EAAE,GAAG,sBAAsB;AAAA,MAChD;AAGA,UAAI,CAAC,kBAAkB,CAAC,GAAG;AACzB,eAAO,KAAK,OAAO,EAAE,GAAG,mBAAmB;AAC3C,eAAO;AACP,iBAAS;AACT;AAAA,MACF;AACA,aAAO,SAAS,YAAY,CAAC,GAAG,YAAY;AAAA,IAC9C;AAMA,UAAM,aAAc,GAAG,eAAe,UAAa,GAAG,eAAe,OACjE,YAAY,GAAG;AACnB,QAAI,SAAS,YAAY;AACvB,aAAO,KAAK,wDAAwD;AAAA,IACtE;AACA,QAAI,OAAO,QAAQ;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IACxD;AACA,UAAM,eAAmB,GAAG,MAAM;AAClC,UAAM,iBAAmB,eAAe;AACxC,UAAM,mBAAmB;AAMzB,QAAI,mBAAmB,GAAG;AACxB,aAAO,EAAE,QAAQ;AAAA,QACf,QAAmB;AAAA,QACnB,IAAmB;AAAA,QACnB,QAAmB;AAAA,QACnB,eAAmB;AAAA,QACnB,iBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,QAC9D,YAAmB;AAAA,MACrB,EAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,QAAmB;AAAA,MACnB,IAAmB;AAAA,MACnB,eAAmB;AAAA,MACnB,iBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,MAC9D,YAAmB;AAAA,IACrB,EAAC;AAAA,EACH,CAAC;AACH;;;ACtKA,IAAM,cAAc,oBAAI,IAAU,CAAC,UAAU,SAAS,YAAY,CAAC;AACnE,IAAM,eAAe,oBAAI,IAAI,CAAC,QAAQ,eAAe,WAAW,CAAC;AAE1D,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,gBAAgB,KAAK,KAAK,OAAO,EAAE;AAAA,MACxF;AACA,WAAK,SAAS;AACd,YAAM,QAAQ,KAAK;AACnB,UAAI,UAAU,SAAU,MAAK,cAAc;AAC3C,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,UAAU,MAAM,OAAO,KAAK,GAAG,CAAC;AACxG,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AACpG,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QAAe,iBAAiB;AAAA,QAAK,QAAQ;AAAA,QACpD,kBAAmB,EAAE,oBAA+B;AAAA,MACtD,EAAC;AAAA,IACH;AAEA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,UAAU;AAC3B,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,MACzF;AACA,WAAK,SAAS;AACd,YAAM,WAAsB,KAAK,eAAe;AAChD,WAAK,cAAc;AACnB,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,SAAS,CAAC;AAClF,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AACpG,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ,EAAE,OAAO,eAAe,iBAAiB,KAAK,QAAQ,MAAM,EAAE;AAAA,IACjF;AACA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,IACzF;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,aAAa,MAAM,EAAE,OAA6B,CAAC;AAC3H,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,WAAW,GAAG;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,UAAoB,MAAM,QAAQ,EAAE,OAAO,IAC7C,CAAC,GAAG,EAAE,OAAmB,IACzB,CAAC,WAAW,cAAc,cAAc;AAC5C,UAAM,QAAiC,CAAC;AACxC,QAAI,QAAQ,SAAS,SAAS,GAAG;AAC/B,YAAM,UAAU,MAAM,KAAK,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,QAAM;AAAA,QACxD,KAAK,EAAE;AAAA,QAAK,MAAM,EAAE;AAAA,QACpB,GAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,QACjC,GAAI,EAAE,QAAQ,SAAS,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,MACjD,EAAE;AACF,UAAI,QAAQ,OAAQ,OAAM,UAAU;AAAA,IACtC;AACA,QAAI,QAAQ,SAAS,YAAY,GAAG;AAClC,YAAM,QAAQ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EACvC,OAAO,OAAK,EAAE,UAAU,eAAe,EAAE,UAAU,cAAc,EAAE,UAAU,eAAe,EAAE,UAAU,YAAY,EACpH,IAAI,QAAM;AAAA,QAAE,IAAI,EAAE;AAAA,QAAI,MAAM,EAAE;AAAA,QAAM,OAAO,EAAE;AAAA,QAC5C,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,EAAE;AACJ,UAAI,MAAM,OAAQ,OAAM,aAAa;AAAA,IACvC;AACA,QAAI,QAAQ,SAAS,cAAc,EAAG,OAAM,eAAe,GAAG;AAC9D,QAAI,QAAQ,SAAS,QAAQ,KAAK,GAAG,mBAAoB,OAAM,qBAAqB,GAAG;AACvF,QAAI,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,KAAK,EAAG,OAAM,YAAY,GAAG,MAAM;AAIrF,UAAM,UAAuC,gBAAgB;AAAA,MAC3D,WAAW,GAAG;AAAA,MACd,WAAW,GAAG,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAgB,IAAI,CAAC;AAAA,IAChD,CAAC;AACD,UAAM,SAAS,MAAM,IAAI,WAAW;AACpC,UAAM,OAAyB;AAAA,MAC7B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa,MAAM,IAAI;AAAA,MACvB,aAAa,EAAE;AAAA,MACf,cAAc,YAAY,OAAO;AAAA,MACjC;AAAA,IACF;AACA,OAAG,UAAU,IAAI,QAAQ,IAAI;AAC7B,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,sBAAsB;AAAA,QACtB,WAAW,KAAK,QAAQ;AAAA,QACxB,UAAU,gBAAgB,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,SAAU,EAAE,2BACD,EAAE,wBACF,EAAE;AACnB,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AACvF,UAAM,OAAO,GAAG,UAAU,IAAI,MAAM;AACpC,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,qBAAqB,MAAM,EAAE,EAAE;AACjG,QAAI,MAAM,QAAQ,EAAE,eAAe,KAAK,EAAE,gBAAgB,WAAW,GAAG;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAkB,EAAE,mBAAgC,KAAK,QAAQ;AACvE,UAAM,WAAqB,CAAC;AAC5B,QAAI,KAAK,SAAS,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc;AACpE,SAAG,eAAe,KAAK,QAAQ,MAAM;AACrC,eAAS,KAAK,cAAc;AAAA,IAC9B;AACA,QAAI,KAAK,SAAS,SAAS,KAAK,MAAM,QAAQ,KAAK,QAAQ,MAAM,OAAO,GAAG;AACzE,YAAM,YAAY,oBAAI,IAAqC;AAC3D,iBAAW,KAAK,KAAK,QAAQ,MAAM,SAA2C;AAC5E,kBAAU,IAAI,EAAE,KAAe,CAAC;AAAA,MAClC;AACA,iBAAW,CAAC,KAAK,KAAK,KAAK,WAAW;AACpC,YAAI,GAAG,QAAQ,IAAI,GAAG,GAAG;AACvB,gBAAM,MAAM,GAAG,QAAQ,IAAI,GAAG;AAC9B,cAAI,OAAQ,MAAM,QAAmB,IAAI;AACzC,cAAI,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,MAAkB,IAAI;AAAA,QAC7E;AAAA,MACF;AACA,eAAS,KAAK,SAAS;AAAA,IACzB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,gBAAgB;AAAA,MAAQ,WAAW,KAAK,QAAQ;AAAA,MAAW;AAAA,MAC3D,GAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAiB,IAAI,CAAC;AAAA,IACnD,EAAC;AAAA,EACH,CAAC;AAED,QAAM,SAAS,IAAI,qBAAqB,CAAC,MAAM;AAC7C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,EAAE;AAChB,UAAM,MAAM,GAAG,MAAM,IAAI,KAAK;AAC9B,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC7D,UAAM,UAAW,EAAE,kBAA8C,CAAC;AAClE,QAAI,CAAC,QAAQ,MAAM;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AACA,UAAM,WAAY,QAAQ,YAAuB,IAAI;AACrD,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,gBAAiB,QAAQ,QAAiB,IAAI;AACpD,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,QAAQ,oBAAoB,UAAa,QAAQ,oBAAoB,QAClE,OAAO,QAAQ,oBAAoB,WAAW;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kDAAkD,EAAE;AAAA,IACzF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,UAAM,QAAQ,MAAM,IAAI,OAAO;AAC/B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAM,QAAQ;AAAA,MACd,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,QAAQ,SAAqC,CAAC;AAAA,MACtD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,YAAY,IAAI;AAAA,MAChB,SAAS,CAAC;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAgB,OAAO;AAAA,QACxC,MAAM,cAAc,IAAI,EAAE,KAAM,EAAE,UAAqB,EAAE;AAAA,MAAG,CAAC;AAAA,MACzE,QAAQ;AAAA,IACV;AAMA,QAAI,IAAI,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACxG,cAAQ,kBAAkB;AAAA,IAC5B,WAAW,qBAAqB,SAAS;AACvC,cAAQ,kBAAkB,CAAC,CAAC,QAAQ;AAAA,IACtC;AACA,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,QAAI,QAAQ;AACZ,QAAI,gBAAgB;AACpB,QAAI,aAAa;AACjB,QAAI,QAAQ,KAAK;AAAA,MAAE,IAAI;AAAA,MAAK,MAAM,EAAE;AAAA,MAAgB,OAAO;AAAA,MACxC,MAAM,MAAM,KAAK,KAAM,EAAE,UAAqB,EAAE;AAAA,IAAG,CAAC;AACvE,WAAO,EAAE,QAAQ,EAAE,oBAAoB,IAAI,IAAI,aAAa,OAAO,QAAQ,EAAE,OAA6B,EAAE;AAAA,EAC9G,CAAC;AAED,QAAM,SAAS,IAAI,4BAA4B,CAAC,MAAM;AACpD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,IAAK,EAAE,eAAyB,EAAE;AACxC,QAAI,CAAC,YAAY,IAAI,CAAC,GAAG;AACvB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6CAA6C,EAAE;AAAA,IACpF;AACA,OAAG,eAAe;AAClB,WAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,cAAc,QAAQ,EAAE,OAA6B,EAAE;AAAA,EAC7F,CAAC;AACH;;;AChQA,SAAS,UAAU,MAAgE;AACjF,MAAI,KAAK,SAAS,GAAG,GAAG;AACtB,UAAM,CAAC,MAAM,GAAG,IAAI,KAAK,MAAM,KAAK,CAAC;AACrC,QAAI,SAAS,SAAU,QAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,SAAS,KAAK,EAAE,EAAE,EAAE;AACvE,QAAI,SAAS,mBAAmB,SAAS,2BAA2B;AAClE,aAAO,EAAE,MAAM,QAAQ,EAAE,WAAW,WAAW,GAAG,EAAE,EAAE;AAAA,IACxD;AAAA,EACF;AACA,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO,EAAE,MAAM,MAAM,QAAQ,CAAC,EAAE;AAC3F,QAAM,IAAI,MAAM,iBAAiB,IAAI,EAAE;AACzC;AAEA,SAAS,eAAe,OAA8C;AACpE,QAAM,SAAS,UAAU,MAAM,IAAI;AACnC,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,SAAS,MAAM,MAAM,OAAO,OAAK,EAAE,iBAAiB,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;AACpF,QAAM,UAAU,MAAM,WAAW,CAAC;AAElC,QAAM,WAAW,CAAC,OAChB,GAAG,OAAO,CAAC,GAAG,MAAM,KAAK,QAAQ,EAAE,KAAK,KAAK,IAAM,CAAC;AAEtD,MAAI,OAAO,SAAS,oBAAoB;AACtC,WAAO;AAAA,MACL,SAAS,IAAI,UAAU,IAAI,aAAa;AAAA,MACxC,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,eAAe;AACjC,UAAM,SAAS,IAAI,WAAW,MAAM,aAAa,UAAU,IAAI,WAAW;AAC1E,WAAO;AAAA,MACL,SAAS,SAAS,aAAa;AAAA,MAC/B,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,IAAI,OAAO,OAAO;AACxB,UAAM,OAAO,IAAI,SAAS,IAAI;AAC9B,QAAI,OAAO,GAAG;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,QAAQ;AAAA,QAAkB,MAAM,MAAM;AAAA,QAC3D,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,QAAG,QAAQ,CAAC;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,MACL,SAAS,IAAI,SAAS,IAAI,SAAS,aAAa;AAAA,MAChD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,MAAI,OAAO,SAAS,iBAAiB;AACnC,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,MAAI,OAAO,SAAS,2BAA2B;AAC7C,QAAI,OAAO,QAAQ;AACjB,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,MAAM,MAAM;AAAA,QACjC,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE;AAAA,QACxB,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,MACjC;AAAA,IACF;AACA,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO,EAAE,SAAS,SAAS,MAAM,MAAM,MAAM,QAAQ,oBAAoB,OAAO,IAAI,GAAG;AACzF;AAEO,SAAS,qBAAqB,OAA0B;AAC7D,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,EAAE,MAAM,EAAE;AACrB,UAAM,eAAyB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACvG,QAAI,CAAC,aAAa,QAAQ;AACxB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,QAAI;AAAE,gBAAU,EAAE,IAAc;AAAA,IAAG,SAC5B,GAAG;AACR,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,GAAG,EAAE;AAAA,IACtD;AACA,UAAM,KAAM,EAAE,mBAA8B,MAAM,IAAI,eAAe;AACrE,UAAM,QAAsB;AAAA,MAC1B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,QAAQ,EAAE;AAAA,MACV;AAAA,MACA,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,OAAO;AAAA,MACP,UAAU,CAAC;AAAA,MACX,OAAO,CAAC;AAAA,MACR,WAAW,MAAM,IAAI;AAAA,IACvB;AACA,OAAG,cAAc,IAAI,IAAI,KAAK;AAC9B,WAAO,EAAE,QAAQ,EAAE,iBAAiB,IAAI,OAAO,OAAO,EAAE;AAAA,EAC1D,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,UAAM,SAAS,KAAK;AAAA,MAClB,IAAI,MAAM,IAAI;AAAA,MACd,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,WAAuB,EAAE,QAAmB;AAAA,IACvD,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,IAAI,EAAE;AACZ,QAAI,MAAM,SAAS,MAAM,SAAS,MAAM,WAAW;AACjD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8BAA8B,EAAE;AAAA,IACrE;AACA,UAAM,QAAQ,EAAE;AAChB,QAAI,CAAC,MAAM,aAAa,SAAS,KAAK,GAAG;AACvC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,SAAS,KAAK;AAAA,MAA0B,EAAE;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM,KAAK,OAAK,EAAE,UAAU,KAAK,GAAG;AAC5C,aAAO,EAAE,OAAO,SAAS,EAAE,qBAAqB,SAAS,KAAK,oBAAoB,EAAE;AAAA,IACtF;AACA,UAAM,MAAM,KAAK;AAAA,MACf,IAAI,MAAM,IAAI;AAAA,MACd;AAAA,MACA,MAAM;AAAA,MACN,QAAQ,EAAE;AAAA,MACV,SAAS,EAAE;AAAA,MACX,cAAc,CAAC,CAAC,EAAE;AAAA,IACpB,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,SAAU,QAAO,EAAE,QAAQ,MAAM,QAAS;AAC9D,UAAM,QAAQ;AACd,UAAM,UAAU,eAAe,KAAK;AACpC,WAAO,EAAE,QAAQ,MAAM,QAAQ;AAAA,EACjC,CAAC;AACH;;;AC1LO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,OAAO,GAAG;AACvC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,EAAE;AACpB,QAAI,OAAO,cAAc,YAAY,CAAC,UAAU,WAAW,QAAQ,GAAG;AACpE,UAAI,CAAC,GAAG,QAAQ,IAAI,SAAS,GAAG;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,aAAa,SAAS;AAAA,QAAkB,EAAE;AAAA,MAC9C;AAAA,IACF;AACA,UAAM,UAAU,EAAE;AAClB,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,CAAC,QAAQ,QAAQ;AAC9C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AACA,UAAM,WAA8B,CAAC;AACrC,eAAW,KAAK,SAA2C;AACzD,YAAM,MAAM,EAAE;AACd,UAAI,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,GAAG;AAC9B,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,GAAG,EAAE,EAAE;AAAA,MACxE;AACA,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,UAAI,KAAK,aAAa,UAAU;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,QAAQ,GAAG,iCAAiC,QAAQ;AAAA,QAAE,EAAE;AAAA,MAC5D;AACA,eAAS,KAAK;AAAA,QACZ,SAAS;AAAA,QACT,OAAO,EAAE;AAAA,QACT,gBAAgB,EAAE;AAAA,QAClB,aAAa,EAAE;AAAA,QACf,UAAW,EAAE,YAAqC,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AACA,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,UAAU;AAC3D,UAAM,KAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,MAAM,IAAI;AAAA,MACvB,OAAO;AAAA,MACP,SAAS,EAAE;AAAA,MACX,eAAgB,EAAE,iBAA0C,CAAC;AAAA,MAC7D,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,EAAE;AACtB,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,YAAY,UAAU,SAAS,IAAI,OAAK,EAAE,OAAO,EAAE,EAAE;AAAA,EACjG,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,QAAI,GAAG,UAAU,WAAW,QAAQ,GAAG;AACrC,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF,OAAO;AACL,UAAI,aAAa,GAAG,WAAW;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAqC,EAAE;AAAA,MAC3C;AACA,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF;AAGA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAEA,QAAI,MAAM,QAAQ,EAAE,iBAAiB,KAAK,EAAE,kBAAkB,WAAW,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AACA,UAAM,WAAW,IAAI,IAAI,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO,CAAC;AACrD,UAAM,cAAwB,MAAM,QAAQ,EAAE,iBAAiB,IAC3D,CAAC,GAAG,EAAE,iBAA6B,IACnC,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO;AAC/B,eAAW,OAAO,aAAa;AAC7B,UAAI,CAAC,SAAS,IAAI,GAAG,GAAG;AACtB,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,QAAQ,GAAG,sBAAsB,EAAE;AAAA,MACxE;AAAA,IACF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,eAAW,OAAO,aAAa;AAC7B,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,WAAK,WAAW;AAChB,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAChB,IAAI;AAAA,QAAK,MAAM;AAAA,QAAU,OAAO,KAAK;AAAA,QACrC,MAAM,yBAAyB,GAAG,QAAQ;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,OAAG,QAAQ;AACX,OAAG,cAAc;AACjB,OAAG,oBAAoB,CAAC,GAAG,WAAW;AACtC,OAAG,iBAAiB,EAAE;AACtB,OAAG,cAAc;AACjB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,UAAU,CAAC,GAAG,WAAW,GAAG,UAAU,SAAS,EAAE;AAAA,EACtF,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,OAAG,iBAAiB,EAAE;AACtB,OAAG,2BAA2B,EAAE;AAChC,QAAI,CAAC,GAAG,UAAU,WAAW,QAAQ,KAAK,aAAa,GAAG,WAAW;AACnE,SAAG,QAAQ;AACX,SAAG,cAAc,MAAM,IAAI;AAAA,IAC7B;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,GAAG,MAAM,EAAE;AAAA,EACvD,CAAC;AACH;;;ACnIA,IAAM,OAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAE/E,SAAS,aAAa,OAIpB;AACA,QAAM,OAAQ,MAAM,eAA0B;AAC9C,MAAI,OAAO;AACX,MAAI;AAAE,WAAO,OAAO,MAAM,cAAc,CAAG;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAK;AACpE,MAAI,MAAM,IAAI,EAAG,QAAO;AACxB,QAAM,IAAI,KAAK,IAAI,KAAK;AACxB,MAAI,KAAK,EAAG,QAAO,EAAE,OAAO,QAAQ,SAAS,oCAAoC;AACjF,MAAI,MAAM,KAAK,OAAO,IAAK,QAAO,EAAE,OAAO,QAAQ,SAAS,mDAAmD;AAC/G,MAAI,MAAM,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,QAAQ,SAAS,oDAAoD;AAClH,MAAI,KAAK,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,cAAc,UAAU,KAAM,SAAS,gDAAgD;AACnI,SAAO,EAAE,OAAO,cAAc,UAAU,MAAM,SAAS,qCAAqC;AAC9F;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,cAAc,CAAC,MAAM;AACtC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,EAAE,eAAe,UAAa,EAAE,eAAe,QAAQ,CAAC,MAAM,QAAQ,EAAE,UAAU,GAAG;AACvF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,aAAc,EAAE,cAA8C,CAAC;AACrE,QAAI,CAAC,WAAW,QAAQ;AACtB,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,4BAA4B,EAAE;AAAA,IACrF;AACA,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,eAAe;AAC/B,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,cAAc,MAAM,CAAC,GAAG,UAAU,CAAC;AAC3D,mBAAW,EAAE;AACb,oBAAY,EAAE;AAAA,MAChB,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,yBAAyB,GAAG,EAAE,EAAE;AAAA,MACzF;AAAA,IACF,OAAO;AAIL,YAAM,WAAW,CAAC,MAAgB,OAAO,MAAM,WAAW,GAAG,QAAQ,IAAI,CAAC,IAAI;AAC9E,YAAM,WAAW,WAAW,OAAO,OAAK;AAAE,cAAM,IAAI,SAAS,CAAC;AAAG,eAAO,CAAC,CAAC,KAAK,CAAC,EAAE;AAAA,MAAQ,CAAC;AAC3F,UAAI,CAAC,SAAS,QAAQ;AACpB,eAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,sDAAsD,EAAE;AAAA,MACnH;AACA,iBAAW,SAAS,CAAC;AACrB,YAAM,eAAsE,CAAC;AAC7E,UAAI,SAAS;AACb,iBAAW,KAAK,YAAY;AAC1B,cAAM,IAAI,SAAS,CAAC;AACpB,YAAI,CAAC,EAAG;AACR,YAAI,EAAE,OAAQ,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,SAAS,CAAC;AAAA,iBAClE,CAAC,OAAQ,UAAS;AAAA,YACtB,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,qBAAqB,CAAC;AAAA,MAChF;AACA,kBAAY;AAAA,QACV,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,YAAY,KAAK,UAAU,QAAQ,CAAC;AAAA,MAAkB,EAAE;AAAA,IAC5D;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,SAAK,WAAW;AAChB,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK;AAAA,MAAE,IAAI,KAAK;AAAA,MAAY,MAAM;AAAA,MAC3B,OAAO,KAAK;AAAA,MAAO,MAAM,aAAa,QAAQ;AAAA,IAAG,CAAC;AACtE,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAc,SAAS;AAAA,MACtC,aAAa;AAAA,MAAuB,aAAa,KAAK;AAAA,MACtD,MAAM,KAAK;AAAA,MACX,WAAW,UAAU;AAAA,MACrB,gBAAgB,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAAA,MAChD,WAAY,UAAU,WAAsB;AAAA,MAC5C,yBAAyB,UAAU;AAAA,IACrC;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,WAAO,EAAE,QAAQ,EAAE,UAAU,mBAAmB,OAAO,UAAU,EAAE;AAAA,EACrE,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,CAAC,MAAM;AACxC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,QAAiC;AAAA,MAAE,GAAI,KAAK,iBAAiB,CAAC;AAAA,MAC1B,GAAK,EAAE,0BAAsD,CAAC;AAAA,IAAG;AAC3G,QAAI,CAAC,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,6BAA6B,EAAE;AAAA,IAC1F;AACA,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,mBAAmB;AACnC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,kBAAkB,MAAM,KAAK;AACrD,gBAAQ,EAAE;AACV,mBAAW,EAAE;AACb,kBAAW,EAAE,UAAU,WAAsB;AAC7C,mBAAY,EAAE,UAAU,aAAwB;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,uBAAuB,GAAG,EAAE,EAAE;AAAA,MACvF;AAAA,IACF,OAAO;AACL,YAAM,IAAI,aAAa,KAAK;AAC5B,cAAQ,EAAE;AAAO,iBAAW,EAAE;AAAU,gBAAU,EAAE;AACpD,iBAAW;AAAA,IACb;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAgB,SAAS;AAAA,MACxC,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MAAI,WAAW;AAAA,MAC1B,gBAAgB;AAAA,MAAO,WAAW;AAAA,MAClC,GAAI,aAAa,SAAY,EAAE,sBAAsB,SAAS,IAAI,CAAC;AAAA,IACrE;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,UAAM,SAAkC;AAAA,MACtC;AAAA,MAAO,mBAAmB;AAAA,MAC1B,WAAW,EAAE,WAAW,UAAU,YAAY,OAAO,KAAK,KAAK,GAAG,QAAQ;AAAA,IAC5E;AACA,QAAI,aAAa,OAAW,QAAO,uBAAuB;AAC1D,WAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AAED,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,QAAQ,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAC9C,QAAI,UAAmB,IAAwB;AAC/C,QAAI,MAAM,QAAQ,kBAAkB;AAClC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,iBAAiB,MAAM,KAAK;AACpD,mBAAW,CAAC,CAAC,EAAE;AACf,aAAK,EAAE;AACP,eAAO,EAAE,kBAAkB,CAAC;AAAA,MAC9B,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,4BAA4B,GAAG,EAAE,EAAE;AAAA,MAC5F;AAAA,IACF,OAAO;AACL,YAAM,OAAQ,MAAM,eAA0B;AAC9C,UAAI,OAAO;AACX,UAAI;AAAE,eAAO,OAAO,MAAM,cAAc,CAAG;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAK;AACpE,UAAI,MAAM,IAAI,EAAG,QAAO;AACxB,YAAM,IAAI,KAAK,IAAI,KAAK;AACxB,iBAAW,KAAK,KAAM,KAAK,KAAK,OAAO;AACvC,WAAK,EAAE;AACP,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AACA,QAAI,UAAU;AACZ,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QAClC;AAAA,MAA8C,EAAE;AAClD,UAAI,CAAC,GAAG,WAAW,QAAQ,KAAK,CAAC,GAAG,QAAQ,IAAI,EAAE,GAAG;AACnD,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,qBAAqB,EAAE;AAAA,QAA2B,EAAE;AAAA,MACxD;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MACf,SAAS,WAAW,EAAE,UAAU,MAAM,GAAG,IAAI,EAAE,UAAU,MAAM;AAAA,MAC/D,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,MAChB,gBAAgB;AAAA,MAChB,WAAY,KAAK,WAAsB;AAAA,MACvC,GAAI,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;AAAA,IAC9C;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,QAAI,UAAU;AACZ,UAAI,MAAM,QAAQ,kBAAkB,IAAI;AACtC,YAAI;AAAE,gBAAM,QAAQ,eAAe,MAAM,EAAE;AAAA,QAAG,QAAQ;AAAA,QAAQ;AAAA,MAChE;AACA,aAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,IAAI,mBAAmB,OAAO,gBAAgB,KAAK,EAAE;AAAA,IAC1F;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,mBAAmB,MAAM,EAAE;AAAA,EACjE,CAAC;AACH;;;ACnNO,SAAS,uBAAuB,OAA0B;AAC/D,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,WAAW,SAAS,GAAG;AAC9C,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,IAAc;AAC9C,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,wBAAwB,EAAE,IAAI,EAAE,EAAE;AAC7F,UAAM,SAAS,EAAE;AACjB,UAAM,SAAS,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,MAAM;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,MAAM,QAAQ,EAAE,IAAI,EAAE,EAAE;AAC7F,QAAI,OAAO,WAAY,QAAO,EAAE,OAAO,SAAS,EAAE,iBAAiB,OAAO,MAAM,aAAa,EAAE;AAE/F,UAAM,SAAS,EAAE;AACjB,QAAI,CAAC,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0BAA0B,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,WAAO,cAAc;AACrB,WAAO,KAAK,KAAK;AAAA,MACf,KAAK;AAAA,MACL,KAAK,OAAO;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,SAAS,QAAQ,SAAS,OAAO,KAAK,YAAY,IAAI,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,cAAc,KAAK,GAAG;AACrC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,EAAE;AACjB,QAAI,WAAW,EAAE,YAAY;AAC3B,YAAM,SAAS,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI;AACjD,UAAI,CAAC,UAAU,OAAO,SAAS,SAAS;AACtC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAuD,EAAE;AAAA,MAC7D;AAAA,IACF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,UAAoB;AACpD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,mBAAmB,EAAE,UAAU,EAAE,EAAE;AAC9F,UAAM,MAAM,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG;AACjD,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,EAAE,GAAG,aAAa,EAAE;AACtF,UAAM,MAAM,MAAM,IAAI;AACtB,QAAI,aAAa;AACjB,QAAI,iBAAkB,EAAE,UAAqB;AAC7C,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,KAAK,IAAI,KAAK,YAAY,KAAK,QAAQ,IAAI,eAAe,EAAE;AAAA,EAChG,CAAC;AACH;;;AC5CA,SAAS,SAAS,IAAoB;AAAE,SAAO,IAAI,KAAK,EAAE,EAAE,QAAQ;AAAG;AAMvE,SAAS,QAAQ,GAAqB;AACpC,MAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAK,MAAM,GAAI,QAAO;AAChF,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,SAAS;AACxC,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,KAAK,CAAW,EAAE,SAAS;AACpE,SAAO;AACT;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,eAAe,CAAC,MAAM;AACvC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,WAAW,YAAY,eAAe,mBAAmB,GAAG;AACzF,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,QAAI,CAAC,GAAG,MAAM,IAAI,EAAE,OAAiB,GAAG;AACtC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAAA,IACrD;AACA,QAAI,EAAE,YAAY,UAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,QAAQ,EAAE,OAAO,GAAG;AAC9E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,EAAE;AAAA,IAC/D;AACA,UAAM,KAAK,EAAE;AACb,UAAM,QAAkB,MAAM,QAAQ,EAAE,IAAK,KAAkB,CAAC,EAAY;AAC5E,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,WAAW;AAC5D,UAAM,SAAwB;AAAA,MAC5B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,OAAO,EAAE;AAAA,MACT;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,UAAU,MAAM,IAAI;AAAA,MACpB,aAAa,OAAO,EAAE,WAAW;AAAA,MACjC,mBAAmB,EAAE;AAAA,MACrB,SAAU,EAAE,WAAwC;AAAA,MACpD,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,aAAa,OAAO,YAAY,EAAE;AAAA,EACvE,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,SAAS,IAAI,EAAE,UAAoB;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oBAAoB,EAAE;AAItE,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,OAAO,MAAM,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AAC1H,QAAI,WAAW;AACb,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,QAAQ,EAAE,EAAE;AAAA,MACpF;AAAA,IACF,WAAW,CAAC,OAAO,MAAM,SAAS,QAAQ,GAAG;AAC3C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gCAAgC,QAAQ,EAAE,EAAE;AAAA,IACzF;AACA,QAAI,OAAO,UAAU,YAAY;AAC/B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,0BAA0B,EAAE;AAAA,IACnF;AACA,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,wBAAwB,EAAE;AAAA,IACvE;AAGA,UAAM,eAAe,EAAE;AACvB,UAAM,YAAY,iBAAiB,UAAa,iBAAiB;AACjE,UAAM,aAAc,QAAQ,EAAE,MAAM,IAAI,EAAE,SAAS,EAAE;AACrD,QAAI,OAAO,WAAW,OAAO,QAAQ,QAAQ;AAC3C,UAAI,CAAC,WAAW;AACd,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oDAAoD,EAAE;AAAA,MAC3F;AACA,YAAM,QAAQ,IAAI,IAAI,OAAO,QAAQ,IAAI,OAAK,EAAE,EAAE,CAAC;AACnD,UAAI,CAAC,MAAM,IAAI,YAAY,GAAG;AAC5B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,iBAAiB,aAAa,YAAqB,EAAE,SAAS,OAAO,CAAC;AAAA,QAAoB,EAAE;AAAA,MAChG;AAAA,IACF,WAAW,CAAC,QAAQ,UAAU,KAAK,CAAC,WAAW;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AAEA,WAAO,QAAQ;AACf,WAAO,cAAc,MAAM,IAAI;AAC/B,WAAO,cAAc,EAAE;AACvB,WAAO,gBAAgB;AACvB,WAAO,cAAc;AACrB,WAAO,UAAU,EAAE;AACnB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,YAAY,OAAO,IAAI,SAAS,OAAO,QAAQ,EAAE;AAAA,EACtF,CAAC;AAGD,QAAM,qBAAqB,CAAC,aAAqB,QAA6B;AAC5E,UAAM,KAAK,MAAM,WAAW,IAAI,WAAW;AAC3C,QAAI,CAAC,GAAI,QAAO,CAAC;AACjB,UAAM,SAAS,SAAS,OAAO,MAAM,IAAI,CAAC;AAC1C,UAAM,UAAsB,CAAC;AAC7B,eAAW,UAAU,GAAG,SAAS,OAAO,GAAG;AACzC,UAAI,OAAO,UAAU,UAAW;AAChC,YAAM,QAAQ,SAAS,OAAO,QAAQ;AACtC,YAAM,WAAW,QAAQ,OAAO;AAChC,UAAI,SAAS,SAAU;AACvB,aAAO,QAAQ;AACf,aAAO,kBAAkB,OAAO;AAChC,YAAM,SAAmB;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,WAAW,GAAG;AAAA,UACd,MAAM;AAAA,UACN,IAAI,CAAC,OAAO,OAAO,GAAG,OAAO,KAAK;AAAA,UAClC,IAAI,MAAM,IAAI;AAAA,UACd,MAAM;AAAA,UACN,YAAY,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,UAKnB,SAAS,OAAO;AAAA,UAChB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AACA,YAAM,YAAY,IAAI,MAAM;AAC5B,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACF;;;AC3EO,IAAM,qBAAqB,oBAAI,IAAY;AAAA,EAChD;AAAA,EAAiB;AAAA,EAAkB;AAAA,EAAkB;AAAA,EACrD;AAAA,EAAoB;AAAA,EAAoB;AAAA,EACxC;AAAA,EACA;AAAA,EAA0B;AAC5B,CAAC;AAID,IAAM,sBAAsB,oBAAI,IAAY;AAAA,EAC1C;AAAA,EAAc;AAAA,EAAgB;AAAA,EAAiB;AACjD,CAAC;AAID,IAAM,oBAAoB,oBAAI,IAAY;AAAA,EACxC;AAAA,EAAsB;AAAA,EAAc;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA,EAI1D;AACF,CAAC;AAKD,IAAM,uBAAuB;AAG7B,IAAM,6BAA6B;AAMnC,IAAM,cAAc;AAEpB,SAAS,cAAc,OAAgB,OAAwB;AAC7D,QAAM,QAAkC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,SAAO,MAAM,QAAQ;AACnB,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,IAAI;AAChC,QAAI,QAAQ,MAAO,QAAO;AAC1B,QAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,iBAAW,KAAK,KAAM,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IACjD,WAAW,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpD,iBAAW,KAAK,OAAO,OAAO,IAA+B,EAAG,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IAC3F;AAAA,EACF;AACA,SAAO;AACT;AAoCA,SAAS,OAAO,SAA0B;AACxC,QAAM,IAAI,YAAY,SAAY,oBAAI,KAAK,IAAI,IAAI,KAAK,OAAO;AAC/D,SAAO,EAAE,YAAY,EAAE,QAAQ,eAAe,MAAM;AACtD;AAEA,SAAS,QAAQ,QAAiC,QAAiC;AACjF,aAAW,KAAK,OAAQ,KAAI,EAAE,KAAK,QAAS,QAAO;AACnD,SAAO;AACT;AAEA,SAAS,UAAU,GAA2E;AAC5F,QAAM,OAAO,EAAE;AACf,MAAI,SAAS,WAAc,CAAC,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AAC7F,WAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,EACvE;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAAuB;AAClD,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO;AAClE,MAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,UAAM,MAAM,KAAK,MAAM,UAAU,MAAM;AACvC,WAAO,WAAW,KAAK,GAAG,KAAK,SAAS,KAAK,EAAE,KAAK;AAAA,EACtD;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAA4G;AACnI,QAAM,YAAY,IAAI,IAAI,OAAO,UAAU,OAAO,OAAK,EAAE,SAAS,SAAS,EAAE,IAAI,OAAK,EAAE,QAAQ,CAAC;AACjG,QAAM,OAAO,OAAO,QAAQ;AAC5B,MAAI,SAAS,eAAe;AAG1B,UAAM,QAAQ,OAAO,aAAa,OAAO,OAAK,EAAE,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AACrG,QAAI,MAAM,WAAW,EAAG,QAAO,UAAU,QAAQ;AACjD,WAAO,MAAM,MAAM,OAAK,UAAU,IAAI,CAAC,CAAC;AAAA,EAC1C;AACA,MAAI,KAAK,WAAW,SAAS,EAAG,QAAO,UAAU,QAAQ,SAAS,KAAK,MAAM,UAAU,MAAM,GAAG,EAAE;AAClG,SAAO,UAAU,QAAQ;AAC3B;AAEA,SAAS,MAAM,KAAe,MAAiG;AAC7H,QAAM,MAAgB,EAAE,SAAS,OAAO,IAAI,IAAI,GAAG;AACnD,MAAI,KAAK,UAAU,OAAW,KAAI,QAAQ,KAAK;AAAA,MAC1C,KAAI,SAAS,KAAK;AACvB,SAAO;AACT;AAQA,SAAS,YAAY,OAAoB,OAAyB;AAChE,QAAMC,QAAO,UAAU,KAAK;AAC5B,MAAI,CAAC,SAASA,KAAI,EAAG;AACrB,MAAI;AACJ,MAAI;AAAE,aAAS,aAAaA,KAAgB;AAAA,EAAG,QACzC;AAAE;AAAA,EAAyF;AACjG,MAAI,MAAM,WAAW,KAAM,OAAM,QAAQ,IAAI,QAAQ,EAAE,KAAK,MAAM,KAAK,MAAM,MAAM,QAAQ,KAAK,CAAC;AAAA,MAC5F,OAAM,SAAS,IAAI,MAAM;AAChC;AAeA,IAAM,yBAAmC,CAAC,aAAa,cAAc,QAAQ;AAEtE,IAAM,cAAN,MAAkB;AAAA,EACd,aAAa,oBAAI,IAA4B;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACD,aAAa,oBAAI,IAAyB;AAAA,EAC1C,aAAa,oBAAI,IAAgC;AAAA,EACjD;AAAA,EACA;AAAA,EACA,iBAAkC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,gBAAgB,oBAAI,QAAgC;AAAA;AAAA,EAEnD,WAAW,oBAAI,IAAqB;AAAA;AAAA,EAE7C;AAAA;AAAA,EAES;AAAA;AAAA,EAED;AAAA,EAER,YAAY,UAA8B,CAAC,GAAG;AAC5C,SAAK,UAAU;AACf,SAAK,QAAQ,QAAQ,SAAS,IAAI,YAAY;AAC9C,SAAK,MAAM,IAAI,UAAU,CAAC,CAAC,QAAQ,kBAAkB,IAAI,KAAiB;AAC1E,QAAI,QAAQ,mBAAoB,MAAK,UAAU;AAC/C,QAAI,QAAQ,QAAS,MAAK,eAAe,KAAK,QAAQ,OAAO;AAE7D,SAAK,qBAAqB;AAC1B,SAAK,wBAAwB;AAI7B,WAAO,eAAe,MAAM,OAAO;AAAA,MACjC,KAAK,MAAM;AACT,YAAI,CAAC,KAAK,KAAM,MAAK,OAAO,QAAQ,IAAI;AACxC,eAAO,KAAK;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AAKD,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,UAAI,EAAE,kBAAkB,UAAU;AAChC,aAAK,aAAa,MAAM;AAAA,MAC1B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAC3B,UAAM,UAAU,MAAM,KAAK,MAAM,KAAK;AACtC,SAAK,aAAa,OAAO;AAAA,EAC3B;AAAA,EAEQ,aAAa,SAAkC;AAGrD,SAAK,WAAW,MAAM;AACtB,SAAK,QAAQ,QAAQ,IAAI,OAAK,EAAE,IAAI,CAAC;AACrC,eAAW,KAAK,QAAS,MAAK,WAAW,IAAI,EAAE,IAAI,EAAE,OAAO;AAAA,EAC9D;AAAA;AAAA,EAGQ,QAAQ,IAAqB;AACnC,UAAM,QAAQ,KAAK,WAAW,IAAI,GAAG,EAAE,KAAK,KAAK;AACjD,SAAK,WAAW,IAAI,GAAG,IAAI,IAAI;AAC/B,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK,SAAS;AAC1B,YAAM,OAAO,IAAI,KAAK,OAAK,EAAE,OAAO,GAAG,EAAE;AACzC,UAAI,CAAC,KAAM;AACX,eAAS,EAAE,IAAI,GAAG,IAAI,MAAM,SAAS,MAAM,YAAY,KAAK,IAAI,EAAE;AAAA,IACpE,QAAQ;AACN;AAAA,IACF;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AACX,WAAK,UAAU,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC,GAAG,MAAM;AAClE;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,KAAK,MAAM;AAAA,IACjC,SAAS,KAAK;AACZ,WAAK,iBAAiB,KAAK,MAAM;AACjC;AAAA,IACF;AACA,QAAI,kBAAkB,SAAS;AAC7B,WAAK,UAAU,QAAQ,MAAM;AAAA,IAC/B;AAAA,EACF;AAAA,EAEQ,UAAU,MAAqB,QAA+B;AACpE,UAAM,UAAU,KAAK,MAAM,SAAO,KAAK,iBAAiB,KAAK,MAAM,CAAC;AACpE,SAAK,WAAW,IAAI,OAAO,IAAI,OAAO;AACtC,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,OAAO,EAAE,MAAM,SAAS;AAC9C,aAAK,WAAW,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,iBAAiB,KAAc,QAA+B;AACpE,QAAI,KAAK,QAAQ,cAAc;AAC7B,UAAI;AACF,aAAK,QAAQ,aAAa,KAAK,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,QAAQ,CAAC;AAAA,MAC3E,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAA4B;AAChC,WAAO,KAAK,WAAW,MAAM;AAC3B,YAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,CAAC;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAIQ,eAAuB;AAC7B,QAAI,KAAK,YAAY,QAAW;AAC9B,WAAK,WAAW;AAChB,aAAO,OAAO,KAAK,OAAO;AAAA,IAC5B;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc;AACZ,WAAO,KAAK,aAAa,KAAK,aAAa;AAAA,EAC7C;AAAA,EAEA,QAAQ,UAAqC;AAC3C,SAAK,eAAe,KAAK,QAAQ;AACjC,WAAO,MAAM;AACX,YAAM,IAAI,KAAK,eAAe,QAAQ,QAAQ;AAC9C,UAAI,KAAK,EAAG,MAAK,eAAe,OAAO,GAAG,CAAC;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA,EAGA,aAAa,IAAwC;AACnD,WAAO,KAAK,WAAW,IAAI,EAAE;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,cAAc,IAAe,QAAgE;AAGnG,QAAI,OAAO,WAAW,UAAU;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,uDAAuD,EAAE;AAAA,IACtG;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,MAAM,EAAE,EAAE;AAAA,IAClF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,gBAAgB,MAAY,QAAgE;AAClG,UAAM,SAAS,KAAK;AACpB,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,OAAO,aAAa,WAAW,GAAG;AAGvE,aAAO;AAAA,IACT;AAOA,QAAI,OAAO,aAAa,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE,GAAG;AACpH,aAAO;AAAA,IACT;AACA,QAAI,OAAO,WAAW,YAAY,CAAC,OAAO,aAAa,SAAS,MAAwB,GAAG;AACzF,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,OAAO,MAAM,CAAC,EAAE,EAAE;AAAA,IAC3G;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,WAAoB;AAClB,UAAM,MAAsC,CAAC;AAC7C,eAAW,MAAM,KAAK,WAAW,OAAO,GAAG;AACzC,UAAI,KAAK;AAAA,QACP,IAAc,GAAG;AAAA,QACjB,SAAc,GAAG;AAAA,QACjB,OAAc,GAAG;AAAA,QACjB,UAAc,GAAG;AAAA,QACjB,MAAc,GAAG;AAAA,QACjB,cAAc,GAAG;AAAA,QACjB,oBAAoB,GAAG;AAAA,QACvB,oBAAoB,GAAG;AAAA,QACvB,SAAiB,GAAG;AAAA,QACpB,SAAiB,MAAM,KAAK,GAAG,QAAQ,OAAO,CAAC;AAAA,QAC/C,OAAiB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;AAAA,QAC7C,WAAiB,MAAM,KAAK,GAAG,UAAU,OAAO,CAAC;AAAA,QACjD,UAAiB,MAAM,KAAK,GAAG,SAAS,OAAO,CAAC;AAAA,QAChD,eAAiB,MAAM,KAAK,GAAG,cAAc,OAAO,CAAC;AAAA,QACrD,UAAiB,MAAM,KAAK,GAAG,SAAS,OAAO,CAAC;AAAA,QAChD,WAAiB,MAAM,KAAK,GAAG,UAAU,OAAO,CAAC;AAAA,QACjD,iBAAiB,MAAM,KAAK,GAAG,gBAAgB,OAAO,CAAC;AAAA,QACvD,kBAAkB,GAAG;AAAA,QACrB,OAAiB,GAAG;AAAA,QACpB,YAAiB,GAAG;AAAA,QACpB,eAAiB,GAAG;AAAA,MACtB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,QAAQ,MAAqB;AAC3B,SAAK,WAAW,MAAM;AACtB,QAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,eAAW,KAAK,MAAwC;AACtD,YAAM,KAAgB;AAAA,QACpB,IAAI,EAAE;AAAA,QACN,SAAS,EAAE;AAAA,QACX,OAAQ,EAAE,SAAgC;AAAA,QAC1C,UAAW,EAAE,YAAyB,CAAC;AAAA,QACvC,MAAO,EAAE,QAAiB;AAAA,QAC1B,cAAe,EAAE,gBAAyB;AAAA,QAC1C,oBAAoB,EAAE;AAAA,QACtB,oBAAqB,EAAE,sBAAiC;AAAA,QACxD,SAAS,EAAE;AAAA,QACX,SAAS,oBAAI,IAAI;AAAA,QACjB,OAAO,oBAAI,IAAI;AAAA,QACf,WAAW,oBAAI,IAAI;AAAA,QACnB,UAAU,oBAAI,IAAI;AAAA,QAClB,eAAe,oBAAI,IAAI;AAAA,QACvB,UAAU,oBAAI,IAAI;AAAA,QAClB,WAAW,oBAAI,IAAI;AAAA,QACnB,iBAAiB,oBAAI,IAAI;AAAA,QACzB,kBAAmB,EAAE,oBAA+C,CAAC;AAAA,QACrE,OAAQ,EAAE,SAA0B,CAAC;AAAA,QACrC,YAAY,EAAE;AAAA,QACd,eAAe,CAAC,CAAC,EAAE;AAAA,MACrB;AACA,iBAAW,KAAM,EAAE,WAAwB,CAAC,GAAG;AAE7C,YAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,EAAG,GAAE,OAAO,CAAC;AACtC,YAAI,EAAE,WAAW,OAAW,GAAE,SAAS;AACvC,WAAG,QAAQ,IAAI,EAAE,KAAK,CAAC;AAAA,MACzB;AACA,iBAAW,KAAM,EAAE,SAAoB,CAAC,EAAG,IAAG,MAAM,IAAI,EAAE,IAAI,CAAC;AAC/D,iBAAW,KAAM,EAAE,aAAoC,CAAC,EAAG,IAAG,UAAU,IAAI,EAAE,IAAI,CAAC;AAEnF,iBAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,WAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,iBAAW,KAAM,EAAE,iBAAqE,CAAC;AACvF,WAAG,cAAc,IAAI,EAAE,IAAI,CAAU;AACvC,iBAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,WAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,iBAAW,KAAM,EAAE,aAAiE,CAAC,GAAG;AAGtF,cAAM,UAAU,gBAAiB,EAAE,WAAW;AAAA,UAC5C,WAAW,EAAE;AAAA,UAAW,WAAW,EAAE;AAAA,UACrC,SAAS,EAAE;AAAA,UAAS,OAAO,EAAE;AAAA,UAC7B,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,QACtC,CAAiC;AACjC,YAAI,CAAC,EAAE,SAAS;AAGd,gBAAM,WAAW,QAAQ;AACzB,gBAAM,QAAiC,CAAC;AACxC,qBAAW,OAAO,CAAC,gBAAgB,sBAAsB,WAAW,GAAG;AACrE,gBAAI,SAAS,GAAG,KAAK,QAAQ,SAAS,GAAG,MAAM,GAAI,OAAM,GAAG,IAAI,SAAS,GAAG;AAAA,UAC9E;AACA,qBAAW,CAAC,KAAK,MAAM,KAAK;AAAA,YAC1B,CAAC,WAAW,CAAC,OAAO,QAAQ,QAAQ,QAAQ,CAAC;AAAA,YAC7C,CAAC,cAAc,CAAC,MAAM,QAAQ,SAAS,UAAU,CAAC;AAAA,UACpD,GAAY;AACV,kBAAM,QAAQ,SAAS,GAAG;AAC1B,gBAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACxC,oBAAM,GAAG,IAAI,MAAM,IAAI,UAAQ,OAAO,YAAY,OAC/C,OAAO,WAAS,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,MAAM,OAClD,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,SAAS,EAAE,EAC3D,IAAI,WAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AAAA,YACxC;AAAA,UACF;AACA,kBAAQ,QAAQ;AAAA,QAClB;AACA,WAAG,UAAU,IAAI,EAAE,IAAI;AAAA,UACrB,IAAI,EAAE;AAAA,UAAI,MAAM;AAAA,UAChB,aAAc,EAAE,eAAe,EAAE;AAAA,UACjC,aAAc,EAAE,eAAe,EAAE;AAAA,UACjC,cAAe,EAAE,gBAAuC,YAAY,OAAO;AAAA,UAC3E;AAAA,QACF,CAAC;AAAA,MACH;AACA,iBAAW,KAAM,EAAE,mBAAuE,CAAC;AACzF,WAAG,gBAAgB,IAAI,EAAE,IAAI,CAAU;AACzC,WAAK,WAAW,IAAI,GAAG,IAAI,EAAE;AAAA,IAC/B;AAAA,EACF;AAAA;AAAA,EAIA,SAAS,UAA8B;AACrC,SAAK,YAAY,KAAK,aAAa;AACnC,QAAI;AACF,YAAM,WAAW,KAAK,UAAU,QAAQ;AACxC,UAAI,SAAS,MAAO,MAAK,cAAc,UAAU,SAAS,KAAK;AAC/D,aAAO;AAAA,IACT,UAAE;AACA,WAAK,YAAY;AAAA,IACnB;AAAA,EACF;AAAA,EAEQ,UAAU,UAA8B;AAI9C,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,YAAY,CAAC,SAAS,QAAQ;AACzF,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,EAAE,CAAC;AAAA,IACvF;AACA,QAAI,CAAC,cAAc,UAAU,WAAW,GAAG;AACzC,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,WAAW,SAAS,EAAE,CAAC;AAAA,IAC3G;AACA,UAAM,WAAW,KAAK,QAAQ,oBAAoB;AAIlD,QAAI,OAAO;AACX,QAAI;AACJ,QAAI;AAAE,aAAO,aAAa,QAAQ,EAAE;AAAA,IAAQ,SAAS,GAAG;AAAE,uBAAiB;AAAA,IAAG;AAC9E,QAAI,OAAO,UAAU;AACnB,aAAO,MAAM,UAAU,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzC,wCAAwC,IAAI,MAAM,QAAQ;AAAA,MAAG,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,SAAS,SAAS;AAIxB,UAAM,YAAY,SAAS;AAC3B,QACE,cAAc,UACd,cAAc,SACb,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,IACzD;AACA,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE,CAAC;AAAA,IAC5F;AACA,UAAM,SAAU,aAAa,CAAC;AAC9B,UAAM,UAAU,KAAK,SAAS,IAAI,MAAM;AACxC,QAAI,CAAC,SAAS;AACZ,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB,QAAW;AAChC,YAAM,MAAM,0BAA0B,QAAQ,eAAe,UAAU,OAAO,cAAc;AAC5F,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,EAAE,CAAC;AAAA,IAC3D;AAOA,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAMC,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,QAAQ,KAAK,YAAY,EAAE,EAAE,QAAQ,IAAI,aAAa,QAAQ,CAAC;AACrE,YAAI,OAAO;AACT,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,MAAM;AAAA,YAC7C,kBAAkB,MAAM,GAAG;AAAA,YAC3B,EAAE,gBAAgB,MAAM,IAAI;AAAA,UAAC,EAAE,CAAC;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AAMA,QAAI,KAAK,QAAQ,qBAAqB,WAAW,sBAAsB,WAAW,oBAAoB;AACpG,YAAM,SAAS,KAAK,gBAAgB,QAAQ;AAC5C,UAAI,OAAQ,QAAO,MAAM,UAAU,EAAE,OAAO,OAAO,CAAC;AACpD,UAAI,WAAW,0BAA0B;AACvC,cAAM,aAAc,SAAS,IAAe,MAAM,GAAG,EAAE,CAAC;AACxD,cAAM,SAAS,OAAO;AACtB,YAAI,WAAW,UAAa,eAAe,QAAQ;AACjD,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzC;AAAA,UAA0C,EAAE,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,KAAK,QAAQ,iBAAiB,mBAAmB,IAAI,MAAM,GAAG;AAChE,YAAM,QAAQ,KAAK,YAAY,MAAM;AACrC,UAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AAAA,IACpD;AAOA;AACE,YAAM,OAAO,KAAK,YAAY,QAAQ,MAAM;AAC5C,UAAI,KAAM,QAAO,MAAM,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,IAClD;AAaA,QAAI,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,aAAa,KAAK,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,UAAU,KAAK,oBAAoB,IAAI,MAAM,GAAG;AAC1K,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,YAAY,KAAK,cAAc,IAAI,OAAO,IAAI;AACpD,YAAI,UAAW,QAAO,MAAM,UAAU,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AAGA,UAAM,SAAS,oBAAI,IAAI;AAAA,MAAC;AAAA,MAAoB;AAAA,MACpB;AAAA,MAAkB;AAAA,MAClB;AAAA,MAAoB;AAAA,IAAmB,CAAC;AAChE,QAAI,CAAC,OAAO,IAAI,MAAM,GAAG;AACvB,YAAMA,QAAO,OAAO;AACpB,UAAI,OAAOA,UAAS,UAAU;AAC5B,cAAM,KAAK,KAAK,WAAW,IAAIA,KAAI;AACnC,YAAI,MAAM,GAAG,UAAU,UAAU;AAC/B,iBAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,0BAA0B,aAAaA,KAAI,YAAY,EAAE,CAAC;AAAA,QACvG;AAAA,MACF;AAAA,IACF;AAKA,QAAI,WAAW,eAAe;AAC5B,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,YAAM,MAAM,OAAO;AACnB,UAAI,MAAM,OAAO,QAAQ,UAAU;AACjC,cAAM,aAAa,GAAG,iBAAiB,GAAG;AAC1C,cAAM,OAAO,aAAa,GAAG,MAAM,IAAI,UAAU,IAAI;AACrD,YAAI,KAAM,QAAO,MAAM,UAAU,EAAE,QAAQ,EAAE,SAAS,YAAY,OAAO,KAAK,MAAM,EAAE,CAAC;AAAA,MACzF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,YAAM,QAAQ,MAAM;AAAA,IACtB,SAAS,GAAG;AAIV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,UAAU,kBAAkB,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;AAAA,IAC3F;AACA,QAAI,IAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC;AAI1D,UAAM,OAAO,OAAO;AACpB,QAAI,OAAO,SAAS,YAAY,CAAC,kBAAkB,IAAI,MAAM,GAAG;AAC9D,YAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,UAAI,GAAI,MAAK,YAAY,IAAI,QAAQ;AAAA,IACvC;AACA,WAAO,MAAM,UAAU,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,EAC/C;AAAA;AAAA,EAIA,YAAY,IAAe,UAA0B;AACnD,SAAK,YAAY,IAAI,EAAE,UAAU,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC,EAAc,CAAC;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,UAAoB,OAA+C;AACvF,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,SAAU;AACvE,UAAM,SAAS,SAAS;AACxB,QAAI,kBAAkB,IAAI,MAAM,EAAG;AACnC,QAAI,CAAC,kBAAkB,QAAQ,OAAO,kBAAkB,EAAG;AAC3D,UAAM,MAAM,SAAS;AACrB,QAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AACnE,UAAM,SAAS;AACf,UAAM,KAAK,OAAO,OAAO,cAAc,WAAW,KAAK,WAAW,IAAI,OAAO,SAAS,IAAI;AAC1F,QAAI,CAAC,MAAM,OAAO,OAAO,SAAS,YAAY,CAAC,GAAG,QAAQ,IAAI,OAAO,IAAI,EAAG;AAK5E,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAM,QAAQ,KAAK,YAAY,EAAE;AACjC,YAAM,SAAS,aAAa,QAAQ;AACpC,UAAI,MAAM,QAAQ,IAAI,MAAM,KAAK,MAAM,SAAS,IAAI,MAAM,EAAG;AAAA,IAC/D;AACA,SAAK,YAAY,IAAI;AAAA,MACnB,SAAS,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAAA,MAC5C,SAAS,EAAE,QAAQ,WAAW,MAAM,MAAM,KAAK;AAAA,IACjD,CAAC;AAAA,EACH;AAAA;AAAA,EAGQ,YAAY,IAA4B;AAC9C,QAAI,QAAQ,KAAK,cAAc,IAAI,EAAE;AACrC,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,SAAS,oBAAI,IAAI,GAAG,UAAU,oBAAI,IAAI,EAAE;AAClD,iBAAW,SAAS,GAAG,MAAO,aAAY,OAAO,KAAK;AACtD,WAAK,cAAc,IAAI,IAAI,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,YAAY,IAAe,QAAoE;AACrG,UAAM,QAAoB,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,KAAK,IAAI,GAAG,GAAG,OAAO;AACjF,QAAI,GAAG,iBAAiB,KAAK,QAAQ,aAAa;AAChD,YAAM,OAAO,GAAG,cAAc;AAC9B,YAAM,YAAY;AAClB,SAAG,aAAa,SAAS,YAAY,KAAK,GAAG,IAAI;AAAA,IACnD;AACA,OAAG,MAAM,KAAK,KAAK;AACnB,UAAM,QAAQ,KAAK,cAAc,IAAI,EAAE;AACvC,QAAI,MAAO,aAAY,OAAO,KAAK;AACnC,eAAW,KAAK,KAAK,gBAAgB;AACnC,UAAI;AAAE,UAAE,IAAI,KAAK;AAAA,MAAG,QAAQ;AAAA,MAAuC;AAAA,IACrE;AAGA,SAAK,QAAQ,EAAE;AAAA,EACjB;AAAA;AAAA,EAIQ,gBAAgB,UAA8E;AACpG,UAAM,MAAM,SAAS;AACrB,QAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AACA,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,QAAI,MAAM,WAAW,KAAK,MAAM,CAAC,MAAM,WAAW;AAChD,aAAO,SAAS,EAAE,mBAAmB,yBAAyB;AAAA,IAChE;AACA,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,SAAU,SAAS,UAAU,CAAC;AACpC,UAAM,SAAS,OAAO;AACtB,UAAM,OAAO,OAAO;AACpB,UAAM,QAAQ,OAAO;AAMrB,QAAI,OAAO,WAAW,YAAY,CAAC,UAAU,OAAO,SAAS,YAAY,CAAC,MAAM;AAC9E,aAAO,SAAS,EAAE,mBAAmB,iDAAiD;AAAA,IACxF;AAGA,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,SAAS,EAAE,mBAAmB,8CAA8C;AAAA,IACrF;AACA,UAAM,KAAM,SAAuC,KAAK,IAAI;AAC5D,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,IAAI;AACP,aAAO,SAAS,EAAE,mBAAmB,4CAA4C;AAAA,IACnF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO,SAAS,EAAE,mBAAmB,cAAc,MAAM,EAAE;AAOxE,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,eAAe,UAAa,OAAO,EAAE,UAAU,GAAG;AAC7F,aAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AAAA,IAC5D;AAMA,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,gBAAgB,UAAa,OAAO,EAAE,WAAW,GAAG;AAC/F,aAAO,SAAS,EAAE,mBAAmB,OAAO,GAAG,qBAAqB;AAAA,IACtE;AAEA,UAAM,MAAM,KAAK,UAAU,QAAQ,KAAK,EAAE;AAC1C,QAAI,CAAC,KAAK;AACR,YAAM,UAAU,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,UAAU;AACnE,UAAI,QAAS,QAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AACvE,aAAO,SAAS,EAAE,mBAAmB,UAAU,GAAG,aAAa,EAAE,QAAQ,MAAM,EAAE;AAAA,IACnF;AAGA,QAAI;AACF,YAAM,WAAqB,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAC9D,aAAO,SAAS;AAChB,YAAM,YAAY,aAAa,QAAQ;AACvC,YAAM,MAAM,iBAAiB,IAAI,GAAG;AACpC,UAAI,CAAC,eAAe,WAAW,KAAK,GAAG,GAAG;AACxC,eAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,MACtE;AACA,aAAO;AAAA,IACT,QAAQ;AAIN,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AAAA,EACF;AAAA;AAAA,EAGA,UAAU,QAAgB,KAAa,IAA8B;AACnE,eAAW,KAAK,OAAO,MAAM;AAC3B,UAAI,EAAE,QAAQ,IAAK;AACnB,UAAI,EAAE,eAAe,UAAa,MAAM,EAAE,WAAY;AACtD,UAAI,KAAK,EAAE,WAAY;AACvB,UAAI,EAAE,gBAAgB,UAAa,MAAM,EAAE,YAAa;AACxD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,YAAY,QAAgB,QAAiC;AACnE,UAAM,QAAQ,eAAe,MAAM;AACnC,QAAI,UAAU,UAAa,UAAU,cAAc,iBAAiB,IAAI,MAAM,EAAG,QAAO;AACxF,UAAM,OAAO,OAAO;AACpB,UAAM,KAAK,OAAO,SAAS,WAAW,KAAK,WAAW,IAAI,IAAI,IAAI;AAClE,QAAI,CAAC,GAAI,QAAO;AAGhB,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,GAAG,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC,EAAG,QAAO;AAC1E,WAAO;AAAA,MAAS,EAAE;AAAA,MAAQ,mBAAmB,MAAM;AAAA,MACnC,EAAE,SAAS,OAAO,YAAY,CAAC,GAAG,GAAG,QAAQ,EAAE;AAAA,IAAC;AAAA,EAClE;AAAA,EAEQ,YAAY,QAA2F;AAG7G,UAAM,OAAO,OAAO;AACpB,UAAM,SAAS,OAAO;AACtB,QAAI,OAAO,SAAS,YAAY,OAAO,WAAW,YAAY,CAAC,QAAQ,CAAC,OAAQ,QAAO;AACvF,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO;AAIpB,QAAI,OAAO,SAAS,WAAW,OAAO,aAAa,OAAW,QAAO;AACrE,QAAI,OAAO,mBAAmB,QAAW;AACvC,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,MACjB,CAAC;AAAA,IACH;AACA,UAAM,SAAS,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC3C,UAAM,MAAM,SAAS,OAAO;AAC5B,QAAI,MAAM,GAAG,oBAAoB;AAC/B,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,QAAoB,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,QAAI,GAAG,YAAY,UAAa,OAAO,aAAa,GAAG,SAAS;AAC9D,aAAO,SAAS,EAAE,uBAAuB,qDAAqD;AAAA,QAC5F,cAAc,GAAG;AAAA,QAAS,KAAK,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMQ,uBAA6B;AACnC,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,sBAA0B,OAAK,KAAK,oBAAoB,CAAC,CAAC;AAC5E,SAAK,SAAS,IAAI,0BAA0B,OAAK,KAAK,uBAAuB,CAAC,CAAC;AAC/E,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,qBAA0B,OAAK,KAAK,mBAAmB,CAAC,CAAC;AAC3E,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,eAAe,CAAC,CAAC;AACvE,SAAK,SAAS,IAAI,cAA0B,OAAK,KAAK,YAAY,CAAC,CAAC;AACpE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AACxE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,SAAS,GAAG,SAAS,CAAC;AAC5E,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,SAAS,GAAG,QAAQ,CAAC;AAC3E,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AAAA,EAC1E;AAAA,EAEQ,0BAAgC;AAEtC,oBAAgB,IAAI;AACpB,yBAAqB,IAAI;AACzB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,2BAAuB,IAAI;AAC3B,uBAAmB,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,GAAiD;AACzE,UAAM,KAAM,EAAE,aAAwB,KAAK,IAAI,YAAY;AAC3D,QAAI,OAAO,OAAO,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAChG,QAAI,KAAK,WAAW,IAAI,EAAE,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE,EAAE,EAAE;AACnG,UAAM,WAAqB,MAAM,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAI,EAAE,QAAqB,IAAI,CAAC,GAAI,KAAK,QAAQ,mBAAmB,CAAC,YAAY,YAAY,CAAE;AAWvJ,eAAW,CAAC,SAAS,UAAU,MAAM,KAAK;AAAA,MACxC,CAAC,uBAAuB,CAAC,CAAC,KAAK,QAAQ,mBAAmB,mBAAmB;AAAA,MAC7E,CAAC,qBAAqB,KAAK,QAAQ,oBAAoB,QAAW,iBAAiB;AAAA,IACrF,GAAkC;AAChC,YAAM,OAAO,QAAQ,MAAM,GAAG,EAAE,CAAC;AACjC,YAAM,aAAa,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC;AAC5E,UAAI,YAAY,CAAC,WAAY,UAAS,KAAK,OAAO;AAAA,eACzC,cAAc,CAAC,UAAU;AAChC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,GAAG,OAAO,sBAAsB,MAAM;AAAA,QAEG,EAAE;AAAA,MAC/C;AAAA,IACF;AAEA,UAAM,eAAe,SAAS,SAAS,iBAAiB,KAAK,CAAC,CAAC,KAAK,QAAQ;AAC5E,UAAM,KAAgB;AAAA,MACpB;AAAA,MACA,SAAS,KAAK,IAAI;AAAA,MAClB,OAAO;AAAA,MACP;AAAA,MACA,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA,MAC1C,oBAAoB,EAAE;AAAA,MACtB,oBAAoB,OAAO,EAAE,uBAAuB,WAAW,EAAE,qBAAqB;AAAA,MACtF,SAAS,EAAE;AAAA,MACX,SAAS,oBAAI,IAAI;AAAA,MACjB,OAAO,oBAAI,IAAI;AAAA,MACf,WAAW,oBAAI,IAAI;AAAA,MACnB,UAAU,oBAAI,IAAI;AAAA,MAClB,eAAe,oBAAI,IAAI;AAAA,MACvB,UAAU,oBAAI,IAAI;AAAA,MAClB,WAAW,oBAAI,IAAI;AAAA,MACnB,iBAAiB,oBAAI,IAAI;AAAA,MACzB,kBAAkB,CAAC;AAAA,MACnB,OAAO,CAAC;AAAA,MACR,eAAe;AAAA,MACf,YAAY,eAAe,YAAY;AAAA,IACzC;AACA,SAAK,WAAW,IAAI,IAAI,EAAE;AAC1B,WAAO,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,GAAG,QAAQ,EAAE;AAAA,EAC1D;AAAA,EAEQ,oBAAoB,GAAiD;AAC3E,UAAM,OAAO,QAAQ,GAAG,CAAC,WAAW,CAAC;AACrC,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE,SAAS,EAAE,EAAE;AACjF,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,IAAI,GAAG;AAAA,MACP,SAAS,GAAG;AAAA,MACZ,OAAO,GAAG;AAAA,MACV,MAAM,GAAG;AAAA,MACT,cAAc,GAAG;AAAA,MACjB,oBAAoB,KAAK,QAAQ,oBAAoB;AAAA,MACrD,oBAAoB,GAAG;AAAA,MACvB,UAAU,GAAG;AAAA,MACb,SAAS,MAAM,KAAK,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,YAAY;AAAA,MACzD,aAAa,GAAG,MAAM;AAAA,MACtB,YAAY,GAAG,MAAM;AAAA,MACrB,gBAAgB,GAAG,UAAU;AAAA;AAAA;AAAA;AAAA,MAI7B,GAAI,GAAG,aAAa,EAAE,eAAe,GAAG,WAAW,IAAI,CAAC;AAAA,MACxD,GAAI,GAAG,qBAAqB,EAAE,oBAAoB,GAAG,mBAAmB,IAAI,CAAC;AAAA,IAC/E,EAAC;AAAA,EACH;AAAA,EAEQ,uBAAuB,GAAiD;AAC9E,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,UAAU,CAAC;AACzD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,QAAI,GAAG,QAAQ,IAAI,EAAE,IAAc,EAAG,SAAS,SAAS;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gDAAgD,EAAE;AAAA,IAC/F;AACA,UAAM,cAAc,CAAC,GAAI,EAAE,QAAqB;AAChD,QAAI,CAAC,YAAY,KAAK,QAAM,GAAG,WAAW,OAAO,CAAC,EAAG,aAAY,KAAK,UAAU;AAChF,OAAG,WAAW;AACd,QAAI,YAAY,SAAS,iBAAiB,KAAK,CAAC,GAAG,eAAe;AAChE,SAAG,gBAAgB;AACnB,SAAG,aAAa;AAAA,IAClB;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,SAAS,EAAE;AAAA,EAC7C;AAAA,EAEQ,kBAAkB,GAAiD;AACzE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,MAAM,CAAC;AACrD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,QAAI,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAClD,QAAI,CAAC,IAAI;AACP,YAAM,SAAS,KAAK,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC;AAChE,UAAI,OAAO,MAAO,QAAO;AACzB,WAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAAA,IAChD;AACA,UAAM,MAAM,EAAE;AACd,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,WAAW,GAAG,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB;AAEpB,UAAM,SAAiB;AAAA,MACrB;AAAA,MACA,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,QAAmB;AAAA,MAC5B,QAAQ;AAAA,MACR,cAAc,EAAE;AAAA,MAChB,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE;AAAA,MACV,MAAM,CAAC;AAAA,MACP,QAAQ;AAAA,IACV;AAGA,QAAI,KAAK,QAAQ,mBAAmB,OAAO,EAAE,eAAe,UAAU;AACpE,YAAM,SAAS,KAAK,QAAQ,gBAAgB,EAAE,UAAU;AACxD,UAAI,WAAW,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,oBAAoB,EAAE;AAK1F,YAAM,WAAW,OAAO;AACxB,YAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM;AAC/E,UAAI,YAAY,QAAQ,aAAa,KAAK;AACxC,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,4CAA4C,EAAE;AAAA,MAC9F;AACA,UAAI,UAAU;AACZ,YAAI,SAAS,YAAY,MAAM;AAC7B,cAAI,QAAQ,SAAS,UAAU;AAC7B,mBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,8CAA8C,EAAE;AAAA,UAChG;AAAA,QACF,WAAW,aAAa,KAAK;AAC3B,iBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,sCAAsC,EAAE;AAAA,QACxF;AAAA,MACF;AACA,aAAO,WAAW;AAClB,sBAAgB;AAChB,YAAM,KAAK,OAAO;AAClB,UAAI,OAAO,OAAO,SAAU,QAAO,iBAAiB;AACpD,aAAO,WAAW,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAChE,YAAM,MAAM,OAAO;AACnB,YAAM,SAAS,KAAK;AACpB,UAAI,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC5C,eAAO,KAAK,KAAK,EAAE,KAAK,QAAuC,KAAK,OAAO,KAAe,YAAY,IAAI,CAAC;AAAA,MAC7G;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,YAAY,OAAO,EAAE,oBAAoB,YAAY,EAAE,oBAAoB,QACrF,CAAC,MAAM,QAAQ,EAAE,eAAe,GAAG;AACxC,YAAM,UAAU,KAAK,QAAQ,SAAS,EAAE,eAA0C;AAClF,UAAI,YAAY,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,eAAe,yBAAyB,EAAE;AAC3F,YAAM,SAAS,CAAC,QAAQ,QAAQ,QAAQ,EAAE,EAAE;AAAA,QAC1C,CAAC,MAAmB,OAAO,MAAM,YAAY,MAAM;AAAA,MAAE;AAGvD,UAAI,aAAa,SAAS,aAAa,QAAQ,WAAW,SAAS,YAAY;AAC7E,eAAO,EAAE,OAAO,SAAS,EAAE,2BAA2B,+CAA+C,EAAE;AAAA,MACzG;AACA,aAAO,YAAY;AACnB,YAAM,QAAQ,QAAQ;AACtB,UAAI,SAAS,OAAO,MAAM,QAAQ,UAAU;AAC1C,eAAO,KAAK,KAAK,EAAE,KAAK,OAAsC,KAAK,MAAM,KAAe,YAAY,IAAI,CAAC;AAAA,MAC3G;AAAA,IACF;AAEA,UAAM,WAAW,CAAC,GAAG,OAAO,IAAI;AAIhC,UAAM,OAAO,EAAE;AACf,QAAI,MAAM,QAAQ,SAAS,WAAW,GAAG;AACvC,iBAAW,KAAK,KAAK,MAAM;AACzB,YAAI,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,GAAG;AACpD,iBAAO,KAAK,KAAK,EAAE,KAAK,GAAkC,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,OAAO,mBAAmB,OAAW,UAAS,iBAAiB,OAAO;AAC1E,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,cAAe,UAAS,WAAW,OAAO;AAC9C,UAAI,OAAO,cAAc,OAAW,UAAS,YAAY,OAAO;AAChE,iBAAW,KAAK,UAAU;AACxB,YAAI,CAAC,SAAS,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,EAAG,UAAS,KAAK,KAAK,CAAC;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,IAC7C;AACA,OAAG,QAAQ,IAAI,KAAK,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,EAC7C;AAAA,EAEQ,mBAAmB,GAAiD;AAK1E,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,OAAG,QAAQ,OAAO,EAAE,IAAc;AAClC,WAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE;AAAA,EAClC;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,QAAQ,OAAO,CAAC;AAC9D,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,WAAY,EAAE,YAAwB,EAAE;AAC9C,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,EAAE,SAAS,UAAa,EAAE,SAAS,QAAQ,OAAO,EAAE,SAAS,UAAU;AACzE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AAAA,IAC9D;AACA,UAAM,gBAAkB,EAAE,QAAiB,GAAG;AAC9C,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,EAAE,oBAAoB,UAAa,EAAE,oBAAoB,QAAQ,OAAO,EAAE,oBAAoB,WAAW;AAC3G,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AAEA,UAAM,SAAS,KAAK,IAAI,OAAO;AAC/B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAa;AAAA,MACjB,IAAI;AAAA,MACJ,MAAM,EAAE;AAAA,MACR,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAO,EAAE;AAAA,MACT,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,eAAe,EAAE;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,UAAU,CAAC;AAAA,MACvE,QAAQ;AAAA,IACV;AAKA,QAAI,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,KAAK,SAAS,QAAS,MAAK,kBAAkB;AAAA,aAC5F,qBAAqB,EAAG,MAAK,kBAAkB,CAAC,CAAC,EAAE;AAE5D,OAAG,MAAM,IAAI,QAAQ,IAAI;AACzB,QAAI,OAAO,EAAE,oBAAoB,UAAU;AACzC,SAAG,iBAAiB,EAAE,eAAe,IAAI;AACzC,YAAM,OAAO,OAAO,KAAK,GAAG,gBAAgB;AAC5C,UAAI,KAAK,SAAS,qBAAsB,QAAO,GAAG,iBAAiB,KAAK,CAAC,CAAC;AAAA,IAC5E;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,QAAQ,OAAO,UAAU,EAAE;AAAA,EACzD;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,WAAW,EAAE;AAOnB,UAAM,QAAkC;AAAA,MACtC,SAAkB,CAAC,eAAe,UAAU;AAAA,MAC5C,aAAkB,CAAC,eAAe,aAAa,UAAU;AAAA,MACzD,kBAAkB,CAAC,aAAa;AAAA,MAChC,QAAkB,CAAC,WAAW;AAAA,IAChC;AACA,QAAI,CAAC,MAAM,KAAK,KAAK,GAAG,SAAS,QAAQ,GAAG;AAC1C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,KAAK,KAAK,OAAO,QAAQ,EAAE,EAAE;AAAA,IACxF;AAKA,QAAI,aAAa,eAAe,KAAK,iBAAiB;AACpD,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA4H,EAAE;AAAA,IAClI;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK;AAAA,MAChB,IAAI,KAAK;AAAA,MAAY,MAAM,EAAE;AAAA,MAC7B,OAAO;AAAA,MAAU,MAAM,EAAE;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,OAAO,SAAS,EAAE;AAAA,EACvC;AAAA,EAEQ,eAAe,GAAiD;AACtE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAM9D,QAAI,KAAK,UAAU,aAAa,KAAK,UAAU,eAAe;AAC5D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,KAAK,KAAK,EAAE,EAAE;AAAA,IACrF;AAMA,QAAI,KAAK,iBAAiB;AACxB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,CAAC,KAAK,QAAQ;AAUhB,cAAM,WAAW,EAAE;AACnB,cAAM,WAAW,CAAC,GAAG,GAAG,QAAQ,QAAQ,CAAC,EACtC,OAAO,CAAC,CAAC,KAAK,MAAM,MAAM,QAAQ,YAAY,QAAQ,KAAK,YAAY,OAAO,SAAS,OAAO,EAC9F,IAAI,CAAC,CAAC,GAAG,MAAM,GAAG;AACrB,YAAI,SAAS,WAAW,GAAG;AACzB,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB;AAAA,UAAsH,EAAE;AAAA,QAC5H;AACA,aAAK,SAAS,EAAE,cAAc,KAAK,cAAc,UAA8B,MAAM,oBAAoB,WAAW,CAAC,EAAE;AAAA,MACzH;AACA,WAAK,mBAAmB,EAAE;AAC1B,WAAK,QAAQ;AACb,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAwB,OAAO;AAAA,QAChD,MAAM;AAAA,MAA2C,CAAC;AACtE,aAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,IACrE;AACA,SAAK,SAAS,EAAE;AAChB,QAAI,OAAO,EAAE,eAAe,YAAY,OAAO,EAAE,eAAe,SAAU,MAAK,aAAa,EAAE;AAC9F,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAwB,OAAO,YAAY,CAAC;AAC7F,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,YAAY,GAAiD;AACnE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,SAAU,EAAE,UAEA,CAAC;AACnB,QAAI,OAAO,WAAW,QAAQ,OAAO,YAAY,cAAc,OAAO,YAAY,WAAW;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,MAAiB,CAAC;AACxB,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAGlD,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,OAAO,YAAY,cAAc,QAAS;AAC9C,UAAI,OAAO,YAAY,aAAa,CAAC,QAAS;AAC9C,YAAMD,QAAO,UAAU,KAAK,KAAM,CAAC;AACnC,YAAM,KAAMA,MAAK,UAAU,CAAC;AAC5B,UAAI,OAAO,UAAUA,MAAK,WAAW,OAAO,OAAQ;AACpD,UAAI,OAAO,QAAQ,GAAG,SAAS,OAAO,KAAM;AAC5C,UAAI,OAAO,SAAS;AAClB,YAAI,SAAS,GAAG;AAChB,YAAIA,MAAK,WAAW,kBAAkB;AACpC,gBAAM,SAAS,GAAG,SAAS,IAAI,GAAG,UAAoB;AACtD,mBAAS,SAAU,OAAgC,UAAU;AAAA,QAC/D;AACA,YAAI,WAAW,OAAO,QAAS;AAAA,MACjC;AACA,YAAM,OAAgC,EAAE,KAAK,MAAM,KAAK,SAAS,MAAM,QAAQ;AAC/E,UAAI,SAAS;AACX,aAAK,UAAU,MAAM;AACrB,aAAK,UAAU,MAAM;AAAA,MACvB,OAAO;AACL,aAAK,WAAW,MAAM;AAAA,MACxB;AACA,UAAI,MAAM,UAAW,MAAK,YAAY,MAAM;AAC5C,UAAI,KAAK,IAAI;AAAA,IACf;AAIA,WAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,UAAU,KAAK,IAAI,OAAO,GAAG,MAAM,MAAM,EAAE,EAAE;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,UAAU,CAAC;AACpE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAU9D,QAAI,uBAAuB,SAAS,KAAK,KAAK,GAAG;AAC/C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,KAAK,KAAK,EAAE,EAAE;AAAA,IACvG;AACA,UAAM,KAAK,EAAE;AACb,UAAM,YAAsB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACpG,QAAI,CAAC,UAAU,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AACvF,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,EAAE;AACvB,UAAM,OAAO,gBAAgB;AAC7B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,KAAK,UAAU,IAAI,CAAC,iEAAiE,EAAE;AAAA,IACvJ;AASA,QAAI,KAAK,UAAU,sBAAsB,KAAK,QAAQ;AACpD,UAAI,YAAY,KAAK,gBAAgB,MAAM,YAAY,EAAE,QAAQ,GAAG;AAClE,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF;AAAA,QAEF,EAAE;AAAA,MACJ;AAIA,UAAI,iBAAiB,UAAa,iBAAiB,KAAK,OAAO,MAAM;AACnE,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF,gEAAgE,KAAK,OAAO,IAAI;AAAA,QAClF,EAAE;AAAA,MACJ;AAEA,iBAAW,KAAK,WAAW;AACzB,YAAI,CAAC,KAAK,OAAO,aAAa,SAAS,CAAC,EAAG,MAAK,OAAO,aAAa,KAAK,CAAC;AAAA,MAC5E;AACA,UAAI,EAAE,aAAa,OAAW,MAAK,OAAO,WAAW,EAAE;AACvD,WAAK,aAAa;AAClB,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QACP,WAAW,KAAK;AAAA,QAChB,SAAS;AAAA,QACT,cAAc,CAAC,GAAG,KAAK,OAAO,YAAY;AAAA,MAC5C,EAAE;AAAA,IACJ;AAEA,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,SAAS;AAAA,MACZ,cAAc;AAAA,MACd,cAAc;AAAA,MACd;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,WAAW,CAAC;AAAA,IACd;AACA,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,mBAAmB,CAAC;AACxF,SAAK,mBAAmB,EAAE;AAC1B,WAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,oBAAoB,GAA4B,MAAwC;AAC9F,UAAM,WAAW,EAAE;AACnB,QAAI,aAAa,UAAa,aAAa,KAAM,QAAO;AACxD,QAAI,OAAO,aAAa,UAAU;AAChC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2CAA2C,EAAE;AAAA,IAClF;AACA,QAAI,KAAK,qBAAqB,QAAW;AACvC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8CAA8C,EAAE;AAAA,IACrF;AACA,UAAM,SAAS,YAAY,KAAK,gBAAgB;AAChD,QAAI,aAAa,QAAQ;AACvB,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,QACA,EAAE,UAAU,OAAO;AAAA,MACrB,EAAE;AAAA,IACJ;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,SAAS,GAA4B,MAAiD;AAC5F,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,SAAS,CAAC;AACxD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,UAAU,UAAU,CAAC;AAC3B,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ;AAAA,MACA,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,IACV,CAAC;AACD,QAAI,SAAS,WAAW;AAGtB,UAAI,gBAAgB,KAAK,MAAO,GAAG;AACjC,aAAK,SAAS,KAAK;AACnB,aAAK,QAAQ;AAAA,MACf;AAAA,IACF,OAAO;AACL,WAAK,QAAQ,EAAE,mBAAmB,gBAAgB;AAAA,IACpD;AACA,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,KAAK,MAAM,CAAC;AAChF,WAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,EAAE;AAAA,EACzC;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,WAAW,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,UAAU,UAAU,CAAC;AAC3B,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AAGxB,UAAM,OAAO,KAAK;AAClB,QAAI,SAAS,OAAW,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAC5F,QAAI;AACJ,QAAI;AACF,gBAAU,eAAe,MAAM,EAAE,IAAa;AAAA,IAChD,SAAS,GAAG;AACV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,cAAc,GAAG,EAAE;AAAA,IAChD;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,KAAK,IAAI,WAAW;AAC/B,UAAM,WAA6B;AAAA,MACjC;AAAA,MACA,SAAS,KAAK;AAAA,MACd,UAAU,EAAE;AAAA,MACZ,mBAAmB;AAAA,MACnB,MAAM,EAAE;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,EAAE;AAAA,MACb,MAAO,EAAE,QAAqB,CAAC;AAAA,MAC/B,aAAc,EAAE,eAA4B,CAAC;AAAA,MAC7C,IAAI;AAAA,MACJ,YAAY,EAAE;AAAA,MACd,aAAa,EAAE;AAAA,MACf,kBAAkB,EAAE;AAAA,IACtB;AACA,OAAG,UAAU,IAAI,IAAI,QAAQ;AAC7B,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,MAAM,SAAS;AAAA,MACf,sBAAsB;AAAA,IACxB,CAAC;AACD,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,sBAAsB,IAAI,QAAQ,EAAE;AAAA,EAC7E;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,CAAC;AAClE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,kBAAmB,EAAE,YAAuB;AAAA,IAC9C,CAAC;AACD,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,EAAE,OAAiB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,oBAAoB,UAAU,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,SAAS,EAAE;AACjB,UAAM,OAAO,OAAO,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,IAAI;AACjE,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AACvE,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,KAAK,KAAK,EAAE,EAAE;AAAA,IACvF;AACA,QAAI,EAAE,aAAa,QAAQ,OAAO,EAAE,aAAa,YAAY,MAAM,QAAQ,EAAE,QAAQ,GAAG;AACtF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,EAAE;AAAA,IACnE;AACA,UAAM,KAAK,EAAE;AACb,UAAM,WAAW,GAAG;AACpB,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,QAAQ,GAAG;AACjB,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AAMA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,UAAM,OAAS,SAAqC,KAAK;AACzD,QAAI,CAAC,OAAO,MAAM,GAAG,YAAY,GAAG;AAClC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,IAAI,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,QAAQ,KAAK,IAAI,OAAO;AAC9B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAO,GAAG,QAAmB,KAAK;AAAA,MAClC,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,GAAG,SAAqC,CAAC;AAAA,MACjD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY,KAAK;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,WAAW,MAAM,kBAAkB,KAAK,EAAE,GAAG,CAAC;AAAA,MAC1G,QAAQ;AAAA,IACV;AAIA,QAAI,KAAK,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACzG,cAAQ,kBAAkB;AAAA,IAC5B;AACA,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,MAAM,KAAK,GAAG,CAAC;AACtG,WAAO,EAAE,QAAQ,EAAE,aAAa,OAAO,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,aAAa,GAAoC;AACxD,QAAM,MAA+B;AAAA,IACnC,KAAK,EAAE;AAAA,IAAK,MAAM,EAAE;AAAA,IAAM,MAAM,EAAE;AAAA,IAAM,QAAQ,EAAE;AAAA,EACpD;AACA,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,OAAQ,KAAI,SAAS,EAAE;AAC7B,MAAI,EAAE,KAAK,QAAQ;AACjB,QAAI,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,OAAK,CAAC,EAAE,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,OAAK,EAAE,GAAG,EAAE;AACvF,QAAI,cAAc,EAAE;AAAA,EACtB;AACA,MAAI,EAAE,OAAQ,KAAI,SAAS;AAC3B,MAAI,EAAE,SAAU,KAAI,WAAW,EAAE;AACjC,MAAI,EAAE,UAAW,KAAI,YAAY,EAAE;AACnC,SAAO;AACT;;;ACztDA,IAAME,QAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAExE,SAAS,kBAAkB,cAC4B;AAE5D,QAAM,gBAAiC,CAAC,MAAM,eAAe;AAC3D,UAAM,WAAW;AACjB,WAAO;AAAA,MACL,UAAU,SAAS,CAAC;AAAA,MACpB,WAAW;AAAA,QACT,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB,SAAS,MAAM,CAAC,EAAE,IAAI,QAAM;AAAA,UACnD,WAAW;AAAA,UAAG,iBAAiB;AAAA,QACjC,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,QAAM,oBAAyC,CAAC,OAAO,UAAU;AAC/D,UAAM,OAAQ,MAAM,eAA0B;AAC9C,QAAI,OAAO;AACX,QAAI;AAAE,aAAO,OAAO,MAAM,cAAc,CAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAK;AACpE,QAAI,MAAM,IAAI,EAAG,QAAO;AACxB,UAAM,IAAIA,MAAK,IAAI,KAAK;AACxB,QAAI,KAAK,EAAG,QAAO;AAAA,MAAE,OAAO;AAAA,MAC1B,WAAW,EAAE,WAAW,WAAW,SAAS,oCAAoC;AAAA,IAAC;AACnF,QAAI,MAAM,KAAK,OAAO,IAAK,QAAO;AAAA,MAAE,OAAO;AAAA,MACzC,WAAW,EAAE,WAAW,WAAW,SAAS,mDAAmD;AAAA,IAAC;AAClG,QAAI,MAAM,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAC3C,WAAW,EAAE,WAAW,WAAW,SAAS,oDAAoD;AAAA,IAAC;AACnG,QAAI,KAAK,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAC9E,WAAW,EAAE,WAAW,WAAW,SAAS,gDAAgD;AAAA,IAAC;AAC/F,WAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAClD,WAAW,EAAE,WAAW,WAAW,SAAS,qCAAqC;AAAA,IAAC;AAAA,EACtF;AAEA,QAAM,mBAAuC,CAAC,OAAO,UAAU;AAC7D,UAAM,OAAQ,MAAM,eAA0B;AAC9C,QAAI,OAAO;AACX,QAAI;AAAE,aAAO,OAAO,MAAM,cAAc,CAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAK;AACpE,QAAI,MAAM,IAAI,EAAG,QAAO;AACxB,UAAM,IAAIA,MAAK,IAAI,KAAK;AACxB,UAAM,WAAY,KAAK,KAAO,KAAK,KAAK,OAAO;AAC/C,WAAO;AAAA,MACL;AAAA,MACA,IAAI,WAAW,eAAe;AAAA,MAC9B,gBAAgB;AAAA,QACd,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,eAAe,mBAAmB,iBAAiB;AAC9D;;;AC5BO,SAAS,gBACd,OACA,WACA,SACY;AACZ,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,OAAQ,OAAM,IAAI,MAAM,oBAAoB;AACzD,MAAI,CAAC,QAAQ,KAAM,OAAM,IAAI,MAAM,kBAAkB;AAErD,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,QAAM,aAAa,YAAY,QAAQ,MAAM;AAC7C,QAAM,OAAO,QAAQ,YAAY,YAAY,QAAQ,IAAI;AAEzD,QAAM,YAAY,CAAC;AAAA,IACjB,MAAc;AAAA,IACd,QAAc,QAAQ,UAAU;AAAA,IAChC,MAAc,QAAQ;AAAA,IACtB,YAAc;AAAA,IACd,aAAc;AAAA,EAChB,CAAC;AAED,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,QAAQ;AAAA,EACpB;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS,EAAE,WAAW,MAAM,QAAQ,QAAQ,SAAS,QAAQ,OAAO,cAAc;AAAA,EACpF,CAAC;AAED,QAAM,SAAkC,EAAE,QAAQ,QAAQ,QAAQ,UAAU;AAC5E,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB,SAAU;AAAA,IACV;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,YAAY,WAAW,aAAa,WAAW;AAC3E;AAmCO,SAAS,uBACd,OACA,WACA,SACe;AACf,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,MAAI,CAAC,QAAQ,YAAa,OAAM,IAAI,MAAM,yBAAyB;AAEnE,QAAM,WAAW,YAAY,QAAQ,IAAI;AACzC,QAAM,eAAe,YAAY,QAAQ,QAAQ;AACjD,QAAM,OAAO,QAAQ,YAAY;AAEjC,QAAM,WAAW;AAAA,IACf,MAAgB;AAAA,IAChB,cAAgB,QAAQ;AAAA,IACxB,WAAgB;AAAA,IAChB,eAAgB;AAAA,EAClB;AAEA,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,EAAE,cAAc,QAAQ,aAAa,MAAM,QAAQ,KAAK;AAAA,EACpE;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAe,QAAQ;AAAA,EACjC,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IACR,QAAQ;AAAA,MAAE;AAAA,MAAW,MAAM,QAAQ;AAAA,MACzB,SAAS;AAAA,MAAQ,OAAO;AAAA,IAAc;AAAA,EAClD,CAAC;AAED,QAAM,SAAkC,EAAE,UAAU,QAAQ,UAAU,WAAW,CAAC,QAAQ,EAAE;AAC5F,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IAAW,MAAM,QAAQ;AAAA,IAAW,SAAS;AAAA,IAC7C;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAiB,QAAQ;AAAA,EACnC,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,WAAW,UAAU,eAAe,aAAa;AAC7E;","names":["import_node_crypto","nodeSign","nodeVerify","call","call","wsId","CRIT"]}
+{"version":3,"sources":["../src/index.ts","../src/canonical.ts","../src/catalogue.ts","../src/crypto.ts","../src/ids.ts","../src/jsonrpc.ts","../src/audit.ts","../src/patch.ts","../src/storage/store.ts","../src/tracked.ts","../src/api.ts","../src/types.ts","../src/profiles/audit_scitt.ts","../src/profiles/control.ts","../src/profiles/deliberation.ts","../src/profiles/handoff.ts","../src/profiles/routing.ts","../src/profiles/security_signed.ts","../src/profiles/whisper.ts","../src/coordinator.ts","../src/policy.ts","../src/transports/wrap.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator\n *\n * Public entry point. Re-exports the Coordinator class and the\n * supporting types so consumers can `import { Coordinator } from \"@brightbeamai/chap-coordinator\"`.\n *\n * Architecture:\n *\n *   coordinator.ts   The Coordinator class with Core + review/1.0 handlers\n *                    and the dispatch/registration infrastructure.\n *   profiles/*.ts    One module per optional profile, each registers its\n *                    method handlers on a Coordinator instance.\n *   canonical.ts     JCS canonicalisation (RFC 8785).\n *   crypto.ts        Ed25519 signing/verification (Node built-ins).\n *   ids.ts           ULID-format id generation.\n *   jsonrpc.ts       Error codes and helpers.\n *   patch.ts         RFC 6902 JSON Patch.\n *   types.ts         Wire and in-memory types.\n */\n\nexport { Coordinator, PRIVILEGED_METHODS } from \"./coordinator.js\";\nexport type {\n  CoordinatorOptions,\n  Handler,\n  TokenVerifier,\n  CredentialVerifier,\n  ScittSubmitter,\n  ScittReceiptVerifier,\n  RoutingPolicyFn,\n  ReviewDepthPolicyFn,\n  EscalationPolicyFn,\n} from \"./coordinator.js\";\n\nexport { call, makeApi, CoordinatorError } from \"./api.js\";\nexport type { CoordinatorApi } from \"./api.js\";\nexport type {\n  MethodName,\n  MethodParams,\n  MethodResult,\n  MethodTable,\n} from \"./methods.js\";\n\nexport { entryCall, entryRecord, isRefusal, linkHash } from \"./audit.js\";\n\nexport { MemoryStore, StoreConflictError } from \"./storage/store.js\";\nexport type { Store, StoreChange, WorkspaceRecord } from \"./storage/store.js\";\n\nexport * from \"./types.js\";\nexport * from \"./jsonrpc.js\";\nexport * from \"./patch.js\";\nexport {\n  canonicalize, sha256Hex, contentHash, ZERO_HASH,\n} from \"./canonical.js\";\nexport {\n  deriveKeypair, deriveSeed, jwkFromPrivateKey,\n  publicKeyBytes, publicKeyFromJwk, publicKeyFromRaw,\n  signEnvelope, verifyEnvelope,\n} from \"./crypto.js\";\nexport type { Jwk as CryptoJwk } from \"./crypto.js\";\nexport { IdFactory } from \"./ids.js\";\nexport { makeDefaultPolicy } from \"./policy.js\";\n\nexport {\n  wrapMcpToolCall,\n  wrapA2aMessageExchange,\n} from \"./transports/wrap.js\";\nexport type {\n  WrapMcpToolCallOptions,\n  WrapA2aExchangeOptions,\n  WrapResult,\n  WrapA2aResult,\n} from \"./transports/wrap.js\";\n","/**\n * @brightbeamai/chap-coordinator/canonical\n *\n * Deterministic JSON canonicalisation for CHAP. CHAP signs and hashes the\n * canonicalisation of envelopes.\n *\n * Follows RFC 8785 (JCS) for objects, arrays, strings, booleans, and null,\n * with one deliberate restriction on numbers. RFC 8785 mandates the\n * ECMAScript number-to-string algorithm, which is hard to reproduce\n * byte-identically across languages; a subtle mismatch would make a chain\n * written by one implementation fail verification against another. To make\n * cross-implementation agreement provable rather than approximate, a CHAP\n * canonical number MUST be an integer within the safe-integer range\n * (abs value <= Number.MAX_SAFE_INTEGER). Non-integers and larger\n * magnitudes are rejected: represent them as strings. The Python reference\n * enforces the identical rule.\n */\n\nimport { createHash } from \"node:crypto\";\n\nexport const ZERO_HASH = \"sha256:\" + \"0\".repeat(64);\n\nconst NON_INTEGER_ERROR =\n  'CHAP canonical numbers must be integers; represent decimals as strings ' +\n  '(e.g. \"8.2\") so the hash is deterministic across implementations.';\nconst NUMBER_RANGE_ERROR =\n  \"CHAP canonical integers must be within the safe-integer range \" +\n  \"(abs value <= Number.MAX_SAFE_INTEGER); represent larger numbers as strings.\";\n\nconst LONE_SURROGATE_ERROR =\n  \"CHAP canonical strings must be valid Unicode (I-JSON / RFC 7493); \" +\n  \"unpaired UTF-16 surrogates are not permitted.\";\n\nfunction assertNoLoneSurrogate(s: string): void {\n  for (let i = 0; i < s.length; i++) {\n    const c = s.charCodeAt(i);\n    if (c >= 0xd800 && c <= 0xdbff) {\n      const next = i + 1 < s.length ? s.charCodeAt(i + 1) : 0;\n      if (next < 0xdc00 || next > 0xdfff) throw new Error(LONE_SURROGATE_ERROR);\n      i++;\n    } else if (c >= 0xdc00 && c <= 0xdfff) {\n      throw new Error(LONE_SURROGATE_ERROR);\n    }\n  }\n}\n\nfunction canonicalString(s: string): string {\n  assertNoLoneSurrogate(s);\n  return JSON.stringify(s);\n}\n\nfunction canonicalNumber(n: number): string {\n  if (!Number.isFinite(n)) {\n    throw new Error(\n      \"Non-finite numbers are not permitted in a CHAP canonical value\",\n    );\n  }\n  if (!Number.isInteger(n)) {\n    throw new Error(NON_INTEGER_ERROR);\n  }\n  if (Math.abs(n) > Number.MAX_SAFE_INTEGER) {\n    throw new Error(NUMBER_RANGE_ERROR);\n  }\n  // A safe integer's toString() is always plain decimal digits (no\n  // exponent), byte-identical to Python's str(int(...)).\n  return n.toString();\n}\n\nfunction canon(value: unknown): string {\n  if (value === null) return \"null\";\n  if (value === true) return \"true\";\n  if (value === false) return \"false\";\n  if (typeof value === \"string\") return canonicalString(value);\n  if (typeof value === \"number\") return canonicalNumber(value);\n  if (Array.isArray(value)) {\n    return \"[\" + value.map(canon).join(\",\") + \"]\";\n  }\n  if (typeof value === \"object\") {\n    const obj = value as Record<string, unknown>;\n    const keys = Object.keys(obj).sort();\n    const parts: string[] = [];\n    for (const key of keys) {\n      parts.push(canonicalString(key) + \":\" + canon(obj[key]));\n    }\n    return \"{\" + parts.join(\",\") + \"}\";\n  }\n  throw new TypeError(`Cannot canonicalise value of type ${typeof value}`);\n}\n\n/** Return the JCS canonical UTF-8 bytes for a JSON-compatible value. */\nexport function canonicalize(value: unknown): Buffer {\n  return Buffer.from(canon(value), \"utf-8\");\n}\n\n/** Return ``sha256:<64-hex>`` digest of bytes. */\nexport function sha256Hex(data: Buffer | string): string {\n  const h = createHash(\"sha256\");\n  h.update(typeof data === \"string\" ? Buffer.from(data, \"utf-8\") : data);\n  return \"sha256:\" + h.digest(\"hex\");\n}\n\n/** Convenience: content hash for an artefact payload via JCS. */\nexport function contentHash(content: unknown): string {\n  return sha256Hex(canonicalize(content));\n}\n","// Generated by scripts/sync-method-catalogue.mjs. Do not edit.\n// Source: schemas/profiles/chap-methods.schema.json\n/**\n * Which profile owns which method, and which methods are never gated.\n *\n * SPECIFICATION 15.4: a Coordinator refuses a method whose owning profile the\n * workspace does not advertise.\n * The rule applies to each method, since a namespace can span profiles: audit\n * spans audit-scitt and core; escalate spans review and routing; review spans\n * review and routing; task spans core and routing.\n */\n\n/** The profile that introduces each method the references implement. */\nexport const OWNING_PROFILE: Readonly<Record<string, string>> = Object.freeze({\n  \"abstain.declare\":         \"review/1.0\",\n  \"audit.read\":              \"core/1.0\",\n  \"audit.submit_to_scitt\":   \"audit-scitt/1.0\",\n  \"audit.verify_chain\":      \"audit-scitt/1.0\",\n  \"audit.verify_receipt\":    \"audit-scitt/1.0\",\n  \"control.cancel\":          \"control/1.0\",\n  \"control.pause\":           \"control/1.0\",\n  \"control.resume\":          \"control/1.0\",\n  \"control.rollback\":        \"control/1.0\",\n  \"control.set_mode_ceiling\":\"control/1.0\",\n  \"control.snapshot\":        \"control/1.0\",\n  \"control.supersede\":       \"control/1.0\",\n  \"decide.approve\":          \"review/1.0\",\n  \"decide.override\":         \"review/1.0\",\n  \"decide.reject\":           \"review/1.0\",\n  \"deliberate.close\":        \"deliberation/1.0\",\n  \"deliberate.comment\":      \"deliberation/1.0\",\n  \"deliberate.open\":         \"deliberation/1.0\",\n  \"deliberate.vote\":         \"deliberation/1.0\",\n  \"escalate.auto\":           \"routing/1.0\",\n  \"escalate.raise\":          \"review/1.0\",\n  \"handoff.accept\":          \"handoff/1.0\",\n  \"handoff.decline\":         \"handoff/1.0\",\n  \"handoff.propose\":         \"handoff/1.0\",\n  \"participant.join\":        \"core/1.0\",\n  \"participant.leave\":       \"core/1.0\",\n  \"participant.revoke_key\":  \"core/1.0\",\n  \"participant.rotate_key\":  \"core/1.0\",\n  \"review.depth\":            \"routing/1.0\",\n  \"review.request\":          \"review/1.0\",\n  \"task.complete\":           \"core/1.0\",\n  \"task.create\":             \"core/1.0\",\n  \"task.route\":              \"routing/1.0\",\n  \"task.update\":             \"core/1.0\",\n  \"whisper.answer\":          \"whisper/1.0\",\n  \"whisper.ask\":             \"whisper/1.0\",\n  \"workspace.create\":        \"core/1.0\",\n  \"workspace.describe\":      \"core/1.0\",\n  \"workspace.set_profiles\":  \"core/1.0\",\n});\n\n/**\n * Callable whatever the workspace advertises.\n *\n * Reads, because a workspace must always be able to ask what it is and to\n * check its own chain. Not the coordinator's read-only set: that holds\n * audit.submit_to_scitt, which reaches a transparency service and is a real\n * audit-scitt/1.0 capability.\n */\nexport const ALWAYS_AVAILABLE: ReadonlySet<string> = new Set([\n  \"workspace.describe\",\n  \"audit.read\",\n  \"audit.verify_chain\",\n  \"audit.verify_receipt\",\n]);\n","/**\n * @brightbeamai/chap-coordinator/crypto\n *\n * Ed25519 signing/verification for the security-signed/1.0 profile.\n *\n * Uses Node's built-in crypto (no external dependencies). Keys are\n * represented as RFC 7517 JWKs with kty=OKP, crv=Ed25519.\n */\n\nimport {\n  createPrivateKey,\n  createPublicKey,\n  KeyObject,\n  sign as nodeSign,\n  verify as nodeVerify,\n  randomBytes,\n  createHash,\n} from \"node:crypto\";\n\nconst ED25519_OID = Buffer.from(\"302a300506032b6570032100\", \"hex\");\n\nfunction b64urlNoPad(buf: Buffer): string {\n  return buf.toString(\"base64\").replace(/=+$/, \"\").replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n}\n\nfunction b64urlDecode(s: string): Buffer {\n  const pad = \"=\".repeat((4 - (s.length % 4)) % 4);\n  return Buffer.from(s.replace(/-/g, \"+\").replace(/_/g, \"/\") + pad, \"base64\");\n}\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  d?:  string;\n  use?: string;\n  alg?: string;\n}\n\n/**\n * Deterministically derive a 32-byte Ed25519 seed from a participant URI.\n * Demo / test only. production deployments supply real keys.\n */\nexport function deriveSeed(uri: string): Buffer {\n  return createHash(\"sha256\").update(\"chap:\" + uri).digest();\n}\n\n/**\n * Build a Node KeyObject (private key) from a raw 32-byte Ed25519 seed.\n */\nexport function privateKeyFromSeed(seed: Buffer): KeyObject {\n  if (seed.length !== 32) {\n    throw new Error(\"Ed25519 seed must be 32 bytes\");\n  }\n  // PKCS#8 DER for Ed25519: SEQ(SEQ(OID), OCTET(OCTET(seed)))\n  const pkcs8 = Buffer.concat([\n    Buffer.from(\"302e020100300506032b657004220420\", \"hex\"),\n    seed,\n  ]);\n  return createPrivateKey({ key: pkcs8, format: \"der\", type: \"pkcs8\" });\n}\n\n/** Public key bytes (32 bytes) from a private key. */\nexport function publicKeyBytes(privateKey: KeyObject): Buffer {\n  const pub = createPublicKey(privateKey);\n  const der = pub.export({ format: \"der\", type: \"spki\" }) as Buffer;\n  // SPKI for Ed25519 is the OID prefix + 32-byte raw public key\n  return der.subarray(der.length - 32);\n}\n\n/** Public KeyObject from raw 32-byte Ed25519 public key. */\nexport function publicKeyFromRaw(raw: Buffer): KeyObject {\n  if (raw.length !== 32) {\n    throw new Error(\"Ed25519 public key must be 32 bytes\");\n  }\n  const der = Buffer.concat([ED25519_OID, raw]);\n  return createPublicKey({ key: der, format: \"der\", type: \"spki\" });\n}\n\n/** Render a JWK from a Node private KeyObject. */\nexport function jwkFromPrivateKey(uri: string, key: KeyObject): Jwk {\n  const pub = publicKeyBytes(key);\n  return {\n    kty: \"OKP\",\n    crv: \"Ed25519\",\n    kid: createHash(\"sha256\").update(uri).digest(\"hex\").slice(0, 16),\n    use: \"sig\",\n    alg: \"EdDSA\",\n    x:   b64urlNoPad(pub),\n  };\n}\n\n/** Sign canonical bytes; return ``ed25519:<kid>:<base64>``. */\nexport function signEnvelope(canonical: Buffer, privateKey: KeyObject, kid: string): string {\n  const sig = nodeSign(null, canonical, privateKey);\n  return `ed25519:${kid}:${sig.toString(\"base64\")}`;\n}\n\n/** Verify a CHAP sig string against canonical bytes and a public key. */\nexport function verifyEnvelope(canonical: Buffer, sigTag: string, publicKey: KeyObject): boolean {\n  if (!sigTag.startsWith(\"ed25519:\")) return false;\n  const parts = sigTag.split(\":\");\n  if (parts.length < 2) return false;\n  const sigB64 = parts[parts.length - 1];\n  try {\n    const sig = Buffer.from(sigB64, \"base64\");\n    return nodeVerify(null, canonical, publicKey, sig);\n  } catch {\n    return false;\n  }\n}\n\n/** Parse a JWK x (base64url) into a Node public KeyObject. */\nexport function publicKeyFromJwk(jwk: Jwk): KeyObject {\n  return publicKeyFromRaw(b64urlDecode(jwk.x));\n}\n\n/** Demo helper: build a deterministic keypair + JWK for a URI. */\nexport function deriveKeypair(uri: string): { privateKey: KeyObject; jwk: Jwk } {\n  const seed = deriveSeed(uri);\n  const privateKey = privateKeyFromSeed(seed);\n  return { privateKey, jwk: jwkFromPrivateKey(uri, privateKey) };\n}\n\nexport { b64urlNoPad, b64urlDecode };\n","/**\n * @brightbeamai/chap-coordinator/ids\n *\n * ULID-format identifier generation. Supports a deterministic mode\n * for tests/demos so byte-for-byte replay works.\n */\n\nconst ALPHABET = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";  // Crockford\n\nfunction encode(value: bigint, length: number): string {\n  let out = \"\";\n  for (let i = 0; i < length; i++) {\n    const idx = Number(value & 31n);\n    out = ALPHABET[idx] + out;\n    value >>= 5n;\n  }\n  return out;\n}\n\nexport class IdFactory {\n  private counter: bigint;\n  private clockMs: number;\n\n  constructor(\n    public readonly deterministic: boolean = false,\n    seed: bigint = 0n,\n    startMs: number = 1_700_000_000_000,\n  ) {\n    this.counter = seed;\n    this.clockMs = startMs;\n  }\n\n  nowMs(): number {\n    if (this.deterministic) {\n      this.clockMs += 1;\n      return this.clockMs;\n    }\n    return Date.now();\n  }\n\n  private randomness(): bigint {\n    if (this.deterministic) {\n      this.counter += 1n;\n      return (this.counter * 0x9E3779B97F4A7C15n) & ((1n << 80n) - 1n);\n    }\n    // 80 bits of randomness. `globalThis.crypto` is standard from Node 19\n    // and present in every other supported runtime, so there is no fallback\n    // path: the previous one called `require`, which does not exist in an\n    // ES module and so threw on any runtime without the global.\n    const buf = new Uint8Array(10);\n    crypto.getRandomValues(buf);\n    let n = 0n;\n    for (const b of buf) n = (n << 8n) | BigInt(b);\n    return n;\n  }\n\n  ulid(): string {\n    const ts = BigInt(this.nowMs()) & ((1n << 48n) - 1n);\n    const rand = this.randomness();\n    return encode(ts, 10) + encode(rand, 16);\n  }\n\n  envelopeId():     string { return this.ulid(); }\n  taskId():         string { return \"tsk_\" + this.ulid(); }\n  artefactId():     string { return \"art_\" + this.ulid(); }\n  logicalId():      string { return \"lgl_\" + this.ulid(); }\n  workspaceId():    string { return \"wsp_\" + this.ulid(); }\n  deliberationId(): string { return \"dlb_\" + this.ulid(); }\n  handoffId():      string { return \"hnd_\" + this.ulid(); }\n  snapshotId():     string { return \"snp_\" + this.ulid(); }\n}\n","/**\n * @brightbeamai/chap-coordinator/jsonrpc\n *\n * Error codes (JSON-RPC standard + CHAP private range) and helpers.\n *\n * Error code allocations come directly from each profile spec. See\n * profiles/*.md for the authoritative definitions.\n */\n\nexport const E = {\n  // JSON-RPC 2.0 standard\n  PARSE:    -32700,\n  REQUEST:  -32600,\n  METHOD:   -32601,\n  PARAMS:   -32602,\n  INTERNAL: -32603,\n\n  // review/1.0 profile\n  NOT_REVIEWABLE: -32010,\n  NOT_AUTHORISED: -32011,\n  PATCH_FAILED:   -32012,\n  REVIEW_LAPSED:  -32013,\n  REVIEW_ALREADY_OPEN: -32014,\n\n  // whisper/1.0 profile (profiles/whisper.md S6)\n  WHISPER_ALREADY_ANSWERED:    -32020,\n  WHISPER_LAPSED:              -32021,\n  WHISPER_OPTION_NOT_IN_SET:   -32022,\n\n  // deliberation/1.0 profile (profiles/deliberation.md S5)\n  DELIB_VOTER_NOT_IN_LIST: -32030,\n  DELIB_ALREADY_VOTED:     -32031,\n  DELIB_CLOSED_OR_LAPSED:  -32032,\n  DELIB_UNKNOWN_RULE:      -32033,\n\n  // modes/1.0 profile (profiles/modes.md S6)\n  MODE_CEILING_EXCEEDED:   -32040,\n  MODE_STEP_UP_REQUIRED:   -32041,\n\n  // handoff/1.0 profile (profiles/handoff.md S6)\n  HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER: -32050,\n  HANDOFF_ALREADY_RESOLVED:               -32051,\n  HANDOFF_RECIPIENT_NOT_MEMBER:           -32052,\n\n  // control/1.0 profile (profiles/control.md S6)\n  CONTROL_STEP_UP_REQUIRED:    -32060,\n  CONTROL_NOT_AUTHORISED:      -32061,\n  CONTROL_SNAPSHOT_NOT_FOUND:  -32062,\n  CONTROL_WORKSPACE_PAUSED:    -32063,\n\n  // security-signed/1.0 profile (profiles/security-signed.md S7)\n  SIG_VERIFY_FAILED:         -32070,\n  SIG_KEY_NOT_FOUND:         -32071,\n  SIG_KEY_REVOKED:           -32072,\n  SIG_ROTATION_KEY_MISMATCH: -32073,\n  SIG_ARTEFACT_DIGEST_MISMATCH: -32074,\n\n  // audit-scitt/1.0 profile (profiles/audit-scitt.md S8)\n  SCITT_UNREACHABLE:        -32080,\n  SCITT_STATEMENT_REJECTED: -32081,\n  SCITT_RECEIPT_INVALID:    -32082,\n\n  // identity-oidc/1.0 profile (profiles/identity-oidc.md S8)\n  OIDC_STEP_UP_REQUIRED: -32402,\n  OIDC_TOKEN_INVALID:    -32403,\n  OIDC_CNF_MISMATCH:     -32404,\n  OIDC_SCOPE_MISSING:    -32405,\n\n  // identity-vc/1.0 profile (profiles/identity-vc.md S8)\n  VC_VP_INVALID:             -32410,\n  VC_HOLDER_BINDING_INVALID: -32411,\n  VC_CREDENTIAL_REVOKED:     -32412,\n  VC_SCHEMA_UNKNOWN:         -32413,\n\n  // routing/1.0 profile (profiles/routing.md S3-S5)\n  ROUTING_NO_ELIGIBLE_ASSIGNEE:   -32510,\n  ROUTING_POLICY_VIOLATION:       -32511,\n  ROUTING_AUTO_ESCALATION_TRIGGERED: -32512,\n  ROUTING_CANDIDATES_EMPTY:       -32513,\n  ROUTING_DEPTH_NOT_APPLICABLE:   -32514,\n  ROUTING_POLICY_UNREACHABLE:     -32515,\n  ROUTING_ESC_TARGET_UNAVAILABLE: -32516,\n} as const;\n\nexport function rpcError(code: number, message: string, data?: unknown) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\nexport function isValidEnvelope(env: unknown): boolean {\n  if (typeof env !== \"object\" || env === null) return false;\n  const e = env as Record<string, unknown>;\n  return e.jsonrpc === \"2.0\";\n}\n","/**\n * @brightbeamai/chap-coordinator/audit\n *\n * Audit entries, the chain link over them, and the rule for recording a\n * refusal (SPECIFICATION 10.1).\n *\n * An accepted call is recorded under `envelope`. A refused call that the rule\n * names is recorded under `request`, with an `outcome` beside it, so a reader\n * keyed on `envelope` passes it by instead of replaying it as effective. The\n * chain link hashes what the entry records: the envelope of an accepted call,\n * and the outcome together with the request of a refusal. Altering either\n * half of a refusal breaks the chain, moving its record under `envelope` fails\n * the shape check, and an entry with no outcome hashes exactly as it always\n * has, so every existing chain still verifies.\n */\nimport { canonicalize, sha256Hex } from \"./canonical.js\";\nimport { E } from \"./jsonrpc.js\";\nimport type { AuditEntry, Envelope } from \"./types.js\";\n\n/** The value an entry's chain link hashes. */\nexport function entryRecord(entry: AuditEntry): unknown {\n  if (entry.outcome != null) return { outcome: entry.outcome, request: entry.request };\n  return entry.envelope;\n}\n\n/** The call an entry records, whether it took effect or was refused. */\nexport function entryCall(entry: AuditEntry): Envelope | undefined {\n  return entry.envelope ?? entry.request ?? undefined;\n}\n\n/** True when an entry records a refused call. */\nexport function isRefusal(entry: AuditEntry): boolean {\n  return entry.outcome != null;\n}\n\n/** A JSON-RPC call: an object with `jsonrpc` \"2.0\" and a string `method`. */\nfunction isCall(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\n/**\n * An entry is well formed when it records an accepted call alone, under\n * `envelope`, or a refused call alone, under `request`, with an outcome of\n * status `refused` and an integer code. Requiring a JSON-RPC call on either\n * side is what stops a refusal's record being moved under `envelope`, where it\n * would hash to the same bytes and read as a call that took effect.\n */\nexport function entryIsWellFormed(entry: AuditEntry): boolean {\n  const accepted = entry.envelope != null;\n  const refused = entry.request != null;\n  if (accepted === refused) return false;\n  if (accepted) return isCall(entry.envelope) && entry.outcome == null;\n  const o = entry.outcome as unknown as Record<string, unknown> | null | undefined;\n  return isCall(entry.request) && o != null && typeof o === \"object\"\n    && o.status === \"refused\" && Number.isInteger(o.code);\n}\n\n/** Whether a call carries a top-level signature (security-signed/1.0). */\nexport function isSigned(call: unknown): boolean {\n  return call !== null && typeof call === \"object\" && typeof (call as { sig?: unknown }).sig === \"string\";\n}\n\n/**\n * The digest that identifies a signed call by what its sender signed: SHA-256\n * of the JCS of the call without its `sig`. Two encodings of one signature\n * give the same digest, so re-encoding a signature does not make a new call.\n */\nexport function signedDigest(call: Envelope): string {\n  const signed: Record<string, unknown> = { ...call };\n  delete signed.sig;\n  return sha256Hex(canonicalize(signed));\n}\n\n/** chain_head = SHA-256( JCS(record) || prev_hash ). */\nexport function linkHash(record: unknown, prev: string): string {\n  return sha256Hex(Buffer.concat([canonicalize(record), Buffer.from(prev, \"utf-8\")]));\n}\n\n/**\n * Refusals the log never records: a call that was malformed or invalid, a\n * fault in the Coordinator, and a call whose signature or key did not check\n * out.\n */\nconst UNRECORDED_CODES: ReadonlySet<number> = new Set([\n  E.PARSE, E.REQUEST, E.PARAMS, E.INTERNAL,\n  E.SIG_VERIFY_FAILED, E.SIG_KEY_NOT_FOUND, E.SIG_KEY_REVOKED, E.SIG_ROTATION_KEY_MISMATCH,\n]);\n\n/**\n * Methods whose refusals are never recorded. They run before the caller is\n * established as a member and are exempt from signature checks, so a refusal\n * of one proves nothing about who sent it.\n */\nconst UNRECORDED_METHODS: ReadonlySet<string> = new Set([\"workspace.create\", \"participant.join\"]);\n\n/**\n * Whether a refusal with this error is one the log records, before the test\n * that the caller is a member.\n *\n * `-32601` is recorded only when the profile gate refused a privileged method,\n * which is an attempt to pull an emergency brake the workspace has switched\n * off. The gate refusing an ordinary method, and a method that does not\n * exist, are not recorded.\n */\nexport function refusalIsRecorded(\n  method: string,\n  error: { code: number; data?: unknown },\n  privileged: ReadonlySet<string>,\n): boolean {\n  if (!Number.isInteger(error.code)) return false;\n  if (UNRECORDED_METHODS.has(method)) return false;\n  if (UNRECORDED_CODES.has(error.code)) return false;\n  if (error.code === E.METHOD) {\n    const data = error.data as { profile?: unknown } | undefined;\n    return typeof data?.profile === \"string\" && privileged.has(method);\n  }\n  return true;\n}\n","/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\n// The JSON type name of a value. Python and JavaScript name their own types\n// differently (dict against object, list against object, str against string).\n// The refusal names the JSON type, which both references and the\n// specification share.\nfunction jsonType(value: unknown): string {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  switch (typeof value) {\n    case \"object\":  return \"object\";\n    case \"string\":  return \"string\";\n    case \"number\":  return \"number\";\n    case \"boolean\": return \"boolean\";\n    default:        return \"null\";\n  }\n}\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names the position after the last element, which no\n      // element occupies, so only \"add\" can use it. Left as a string it slips\n      // through a numeric range check and writes a \"-\" property on the array.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names no existing element, so it cannot be removed.\n      // Left as a string it passes the numeric range check and then splice\n      // coerces it to zero, removing the first element instead.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n","/**\n * Pluggable persistence for the Coordinator.\n *\n * A Store keeps workspace state between process restarts. The Coordinator\n * calls `store.load()` once at start, and writes after every call that adds\n * to a workspace's audit log.\n *\n * How the Coordinator writes depends on what the store implements:\n *\n *   - `apply(change)`: the Coordinator sends what the call changed: the new\n *     audit entries, the objects it touched and the workspace's own fields.\n *     The cost of a write stays flat as the log grows; it grows with the\n *     objects a call changes, such as a task with a long history. MemoryStore\n *     and SqliteStore implement it.\n *   - `save(record)` alone: the Coordinator sends the whole workspace on every\n *     write, as releases before 0.3.2 did, so the cost of a write grows with\n *     the log. Stores written for earlier releases keep working this way.\n *\n * MemoryStore is the default and keeps nothing across processes. SqliteStore\n * keeps state in a SQLite file through better-sqlite3. Third-party stores\n * (Postgres, Redis and so on) implement this interface.\n *\n * Concurrency model\n * -----------------\n *\n * A Coordinator is a **single-writer** component: dispatch is serial,\n * workspace state is held in memory, and each chain link is computed from the\n * head the instance holds. Run one Coordinator per workspace.\n *\n * Every change names the number of audit entries the Coordinator expects the\n * store to hold already (`base`). MemoryStore and SqliteStore refuse a change\n * whose base differs from what they hold: they throw a StoreConflictError and\n * write nothing. A second Coordinator writing the same workspace is refused\n * and reported, and the entries already stored stay as they are. The refused\n * instance's memory no longer matches the store; restart it to reload.\n *\n * `save` makes no such check: it replaces what the store holds for the\n * workspace. A store that implements only `save` therefore still loses\n * entries silently when two instances write one workspace.\n *\n * To run more than one instance, partition workspaces so that no workspace is\n * ever written by two, or hold an external lock. See SPECIFICATION.md 10.3.\n *\n * Production deployments that need rich queries over the log can project it\n * into their own analytics store with the `onAudit` listener.\n */\n\n/** The workspace maps a store keeps object by object. */\nexport const COLLECTIONS = [\n  \"members\", \"tasks\", \"overrides\", \"whispers\",\n  \"deliberations\", \"handoffs\", \"snapshots\", \"route_decisions\",\n] as const;\n\n/** task.create idempotency keys, kept as one more collection of key to task id. */\nexport const IDEMPOTENCY_KEYS = \"idempotency_keys\";\n\nexport interface WorkspaceRecord {\n  /** Workspace identifier. */\n  id: string;\n  /** JSON-serialisable payload in the shape `Coordinator.snapshot()` produces. */\n  data: unknown;\n  /**\n   * For `save`, a counter the Coordinator increments on each write. For a\n   * record a store loads after `apply`, the number of audit entries. Recorded\n   * for diagnostics; `save` does not check it.\n   */\n  version: number;\n  /** Wall-clock timestamp of the last write, ISO-8601. */\n  updated_at: string;\n}\n\n/** One write to one workspace: what one or more calls changed. */\nexport interface StoreChange {\n  /** Workspace identifier. */\n  id: string;\n  /**\n   * Audit entries the store must already hold for this workspace. A store\n   * that holds a different number refuses the change with a\n   * StoreConflictError and writes nothing. Not checked when `replace` is set.\n   */\n  base: number;\n  /** Audit entries the store holds after the change: `base + entries.length`. */\n  version: number;\n  /** Wall-clock timestamp of the write, ISO-8601. */\n  updated_at: string;\n  /** The workspace's own fields: everything except its collections and log. */\n  meta: Record<string, unknown>;\n  /** New audit entries in order. The first has seq `base`. */\n  entries: unknown[];\n  /**\n   * Objects written, by collection and then by key. A null value removes the\n   * object. The collections are those in COLLECTIONS and IDEMPOTENCY_KEYS.\n   */\n  objects: Record<string, Record<string, unknown>>;\n  /**\n   * Replace everything the store holds for this workspace with this change,\n   * which then carries the whole workspace from seq 0.\n   */\n  replace?: boolean;\n}\n\n/**\n * A change whose base does not match the audit entries the store holds.\n * Usually a second Coordinator writing the same workspace.\n */\nexport class StoreConflictError extends Error {\n  readonly workspace: string;\n  /** Audit entries the store holds. */\n  readonly held: number;\n  /** Audit entries the change expected. */\n  readonly base: number;\n\n  constructor(workspace: string, held: number, base: number) {\n    super(\n      `The store holds ${held} audit entries for workspace ${workspace} and ` +\n      `this write expected ${base}, so nothing was written. Another ` +\n      `coordinator may be writing to this workspace, the store may have been ` +\n      `changed outside this coordinator, or this coordinator could not load ` +\n      `the workspace when it started. Restart this coordinator to reload.`,\n    );\n    this.name = \"StoreConflictError\";\n    this.workspace = workspace;\n    this.held = held;\n    this.base = base;\n  }\n\n  /**\n   * Matched by name, so `instanceof` holds across the package's entry points,\n   * each of which is bundled with its own copy of this class.\n   */\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return value instanceof Error && value.name === \"StoreConflictError\";\n  }\n}\n\nexport interface Store {\n  /** Load all workspace records. Called once when the Coordinator starts. */\n  load(): Promise<WorkspaceRecord[]> | WorkspaceRecord[];\n\n  /**\n   * Replace what the store holds for one workspace. The Coordinator calls it\n   * after every write when the store has no `apply`.\n   */\n  save(record: WorkspaceRecord): Promise<void> | void;\n\n  /**\n   * Write one change. Optional; when present the Coordinator calls it in\n   * place of `save`. It must be atomic: the whole change is written, or\n   * nothing is. The change refers to the Coordinator's live objects, so\n   * serialise or copy everything before returning, including in an async\n   * store. Refuse a change whose `base` differs from the entries held, unless\n   * `replace` is set, by throwing (or rejecting with) a StoreConflictError.\n   */\n  apply?(change: StoreChange): Promise<void> | void;\n\n  /** Remove one workspace. */\n  delete(id: string): Promise<void> | void;\n\n  /** Release resources. Idempotent. */\n  close?(): Promise<void> | void;\n}\n\nfunction isCollection(name: string): boolean {\n  return (COLLECTIONS as readonly string[]).includes(name);\n}\n\n/** The key an object is stored under in its collection. */\nexport function objectKey(collection: string, item: unknown): string | undefined {\n  if (item === null || typeof item !== \"object\") return undefined;\n  const o = item as Record<string, unknown>;\n  const key = collection === \"members\" ? (o.uri ?? o.id) : (o.id ?? o.uri);\n  return typeof key === \"string\" ? key : undefined;\n}\n\n/**\n * A collection as a snapshot holds it, keyed. The TypeScript snapshot holds\n * arrays and the Python snapshot holds objects keyed by id; both are read.\n */\nfunction keyed(collection: string, value: unknown): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      const key = objectKey(collection, item);\n      if (key !== undefined) out[key] = item;\n    }\n  } else if (value !== null && typeof value === \"object\") {\n    Object.assign(out, value);\n  }\n  return out;\n}\n\n/** A whole-workspace snapshot as a change that replaces what the store holds. */\nexport function changeFromRecord(record: WorkspaceRecord): StoreChange {\n  const data = (record.data !== null && typeof record.data === \"object\"\n    ? record.data : {}) as Record<string, unknown>;\n  const meta: Record<string, unknown> = {};\n  const objects: Record<string, Record<string, unknown>> = {};\n  let entries: unknown[] = [];\n  for (const [name, value] of Object.entries(data)) {\n    if (name === \"audit\") entries = Array.isArray(value) ? value : [];\n    else if (name === IDEMPOTENCY_KEYS || isCollection(name)) objects[name] = keyed(name, value);\n    else meta[name] = value;\n  }\n  if (meta.id === undefined) meta.id = record.id;\n  return {\n    id: record.id, base: 0, version: record.version, updated_at: record.updated_at,\n    meta, entries, objects, replace: true,\n  };\n}\n\n/**\n * Rows read back from a store, assembled into the snapshot shape\n * `Coordinator.restore()` reads: arrays for the collections, an object for\n * the idempotency keys, and the log in seq order.\n */\nexport function assembleSnapshot(\n  meta: Record<string, unknown>,\n  entries: unknown[],\n  objects: Iterable<[collection: string, key: string, value: unknown]>,\n): Record<string, unknown> {\n  const data: Record<string, unknown> = { ...meta };\n  for (const name of COLLECTIONS) data[name] = [];\n  const keys: Record<string, unknown> = {};\n  data[IDEMPOTENCY_KEYS] = keys;\n  for (const [collection, key, value] of objects) {\n    if (collection === IDEMPOTENCY_KEYS) {\n      keys[key] = value;\n    } else {\n      const list = (Array.isArray(data[collection]) ? data[collection] : (data[collection] = [])) as unknown[];\n      list.push(value);\n    }\n  }\n  data.audit = entries;\n  return data;\n}\n\ninterface Held {\n  meta: string;\n  version: number;\n  updated_at: string;\n  entries: string[];\n  objects: Map<string, Map<string, string>>;\n}\n\n/**\n * In-memory store. The default: it keeps nothing across processes. Like a\n * database it keeps each row as JSON text, so a Coordinator restarted on it\n * sees what was written and nothing changed later.\n */\nexport class MemoryStore implements Store {\n  private held = new Map<string, Held>();\n\n  load(): WorkspaceRecord[] {\n    const out: WorkspaceRecord[] = [];\n    for (const [id, h] of this.held) {\n      const objects: Array<[string, string, unknown]> = [];\n      for (const [collection, items] of h.objects) {\n        for (const [key, value] of items) objects.push([collection, key, JSON.parse(value)]);\n      }\n      out.push({\n        id,\n        data: assembleSnapshot(JSON.parse(h.meta), h.entries.map(e => JSON.parse(e)), objects),\n        version: h.version,\n        updated_at: h.updated_at,\n      });\n    }\n    return out;\n  }\n\n  save(record: WorkspaceRecord): void {\n    this.apply(changeFromRecord(record));\n  }\n\n  apply(change: StoreChange): void {\n    // Serialised before anything is held, so a change that cannot be written\n    // leaves the store as it was.\n    const meta = JSON.stringify(change.meta);\n    const entries = change.entries.map(e => JSON.stringify(e));\n    const objects = Object.entries(change.objects).map(([collection, items]) =>\n      [collection, Object.entries(items).map(([key, value]) =>\n        [key, value === null || value === undefined ? null : JSON.stringify(value)] as const)] as const);\n    let h = this.held.get(change.id);\n    if (!change.replace) {\n      const holds = h ? h.entries.length : 0;\n      if (holds !== change.base) throw new StoreConflictError(change.id, holds, change.base);\n    }\n    if (!h || change.replace) {\n      h = { meta: \"{}\", version: 0, updated_at: \"\", entries: [], objects: new Map() };\n    }\n    for (const entry of entries) h.entries.push(entry);\n    for (const [collection, items] of objects) {\n      let held = h.objects.get(collection);\n      if (!held) h.objects.set(collection, (held = new Map()));\n      for (const [key, value] of items) {\n        if (value === null) held.delete(key);\n        else held.set(key, value);\n      }\n    }\n    h.meta = meta;\n    h.version = change.version;\n    h.updated_at = change.updated_at;\n    this.held.set(change.id, h);\n  }\n\n  delete(id: string): void {\n    this.held.delete(id);\n  }\n}\n","/**\n * Change tracking for a workspace's maps.\n *\n * When the store implements `apply`, the Coordinator writes only the objects\n * a call changed. A TrackedMap records which keys may hold a changed object\n * since the last write: every key set or deleted, and, while a call is being\n * handled, every key read with `get` or reached by iterating, because a\n * handler changes an object in place after reading it. Reads outside a call,\n * such as an application listing tasks, record nothing.\n */\n\nexport interface Tracker {\n  /** Whether anything is recorded: true when the store implements `apply`. */\n  enabled: boolean;\n  /** Calls being handled. Reads are recorded while it is above zero. */\n  depth: number;\n}\n\nexport class TrackedMap<K, V> extends Map<K, V> {\n  /** Keys whose objects may have changed since the last write. */\n  readonly dirty = new Set<K>();\n  readonly tracker: Tracker;\n\n  constructor(tracker: Tracker) {\n    super();\n    this.tracker = tracker;\n  }\n\n  private reading(): boolean {\n    return this.tracker.enabled && this.tracker.depth > 0;\n  }\n\n  private touchAll(): void {\n    if (this.reading()) for (const key of super.keys()) this.dirty.add(key);\n  }\n\n  override get(key: K): V | undefined {\n    const value = super.get(key);\n    if (value !== undefined && this.reading()) this.dirty.add(key);\n    return value;\n  }\n\n  override set(key: K, value: V): this {\n    if (this.tracker.enabled) this.dirty.add(key);\n    return super.set(key, value);\n  }\n\n  override delete(key: K): boolean {\n    const had = super.delete(key);\n    if (had && this.tracker.enabled) this.dirty.add(key);\n    return had;\n  }\n\n  override clear(): void {\n    if (this.tracker.enabled) for (const key of super.keys()) this.dirty.add(key);\n    super.clear();\n  }\n\n  override values(): MapIterator<V> {\n    this.touchAll();\n    return super.values();\n  }\n\n  override entries(): MapIterator<[K, V]> {\n    this.touchAll();\n    return super.entries();\n  }\n\n  override [Symbol.iterator](): MapIterator<[K, V]> {\n    this.touchAll();\n    return super[Symbol.iterator]();\n  }\n\n  override forEach(callback: (value: V, key: K, map: Map<K, V>) => void, thisArg?: unknown): void {\n    this.touchAll();\n    super.forEach(callback, thisArg);\n  }\n\n  /** Read one value without recording it. */\n  peek(key: K): V | undefined {\n    return super.get(key);\n  }\n}\n\n/** Every value of a map, read without recording, whatever kind of map it is. */\nexport function rawValues<V>(map: Map<unknown, V>): IterableIterator<V> {\n  return Map.prototype.values.call(map) as IterableIterator<V>;\n}\n\n/** Every entry of a map, read without recording, whatever kind of map it is. */\nexport function rawEntries<K, V>(map: Map<K, V>): IterableIterator<[K, V]> {\n  return Map.prototype.entries.call(map) as IterableIterator<[K, V]>;\n}\n","/**\n * Typed method facade for the Coordinator.\n *\n * Replaces the verbose dispatch pattern:\n *\n *   const env = await coord.dispatch({\n *     jsonrpc: \"2.0\", id: \"x\",\n *     method: \"task.create\",\n *     params: { workspace, from, kind, input }\n *   });\n *   const taskId = env.result.task_id;\n *\n * with namespace-grouped calls that autocomplete and type-check:\n *\n *   const { task_id } = coord.api.task.create({ workspace, from, kind, input });\n *\n * Every method on the facade calls `dispatch(envelope)` internally with\n * an auto-generated envelope id, so the audit chain semantics, profile\n * gates, and signature checks all run identically.\n *\n * On dispatch error, the facade throws a `CoordinatorError` carrying the\n * JSON-RPC error code and message. Callers expecting `error` objects on\n * the wire can still use `dispatch()` directly.\n */\n\nimport type { Coordinator } from \"./coordinator.js\";\nimport type { Envelope } from \"./types.js\";\nimport type {\n  MethodName, MethodParams, MethodResult,\n} from \"./methods.js\";\n\nexport class CoordinatorError extends Error {\n  readonly code: number;\n  readonly data?: unknown;\n  constructor(code: number, message: string, data?: unknown) {\n    super(message);\n    this.name = \"CoordinatorError\";\n    this.code = code;\n    this.data = data;\n  }\n}\n\n/**\n * Single-call helper. Type-safe wrapper around `coord.dispatch()`.\n * Throws CoordinatorError if dispatch returns an error response.\n */\nexport function call<M extends MethodName>(\n  coord: Coordinator,\n  method: M,\n  params: MethodParams<M>,\n): MethodResult<M> {\n  const envelope: Envelope = {\n    jsonrpc: \"2.0\",\n    id: coord.ids.envelopeId(),\n    method,\n    params: params as unknown as Record<string, unknown>,\n  };\n  const out = coord.dispatch(envelope);\n  if (out.error) {\n    throw new CoordinatorError(out.error.code, out.error.message, out.error.data);\n  }\n  return out.result as MethodResult<M>;\n}\n\n// ============================================================\n//   Namespace-grouped facades\n// ============================================================\n//\n// Each namespace facade is a small object exposing one method per\n// CHAP verb. Implementations are one-liners that delegate to call().\n// The pattern is verbose but autocompletes well and type-checks\n// param shape and result shape from one declaration in methods.ts.\n\nexport function makeApi(coord: Coordinator) {\n  const c = <M extends MethodName>(m: M, p: MethodParams<M>) => call(coord, m, p);\n\n  return {\n    workspace: {\n      create:       (p: MethodParams<\"workspace.create\">)       => c(\"workspace.create\", p),\n      describe:     (p: MethodParams<\"workspace.describe\">)     => c(\"workspace.describe\", p),\n      set_profiles: (p: MethodParams<\"workspace.set_profiles\">) => c(\"workspace.set_profiles\", p),\n    },\n    participant: {\n      join:       (p: MethodParams<\"participant.join\">)       => c(\"participant.join\", p),\n      leave:      (p: MethodParams<\"participant.leave\">)      => c(\"participant.leave\", p),\n      rotate_key: (p: MethodParams<\"participant.rotate_key\">) => c(\"participant.rotate_key\", p),\n      revoke_key: (p: MethodParams<\"participant.revoke_key\">) => c(\"participant.revoke_key\", p),\n    },\n    task: {\n      create:   (p: MethodParams<\"task.create\">)   => c(\"task.create\", p),\n      update:   (p: MethodParams<\"task.update\">)   => c(\"task.update\", p),\n      complete: (p: MethodParams<\"task.complete\">) => c(\"task.complete\", p),\n      route:    (p: MethodParams<\"task.route\">)    => c(\"task.route\", p),\n    },\n    review: {\n      request: (p: MethodParams<\"review.request\">) => c(\"review.request\", p),\n      depth:   (p: MethodParams<\"review.depth\">)   => c(\"review.depth\", p),\n    },\n    decide: {\n      approve:  (p: MethodParams<\"decide.approve\">)  => c(\"decide.approve\", p),\n      reject:   (p: MethodParams<\"decide.reject\">)   => c(\"decide.reject\", p),\n      override: (p: MethodParams<\"decide.override\">) => c(\"decide.override\", p),\n    },\n    abstain: {\n      declare: (p: MethodParams<\"abstain.declare\">) => c(\"abstain.declare\", p),\n    },\n    escalate: {\n      raise: (p: MethodParams<\"escalate.raise\">) => c(\"escalate.raise\", p),\n      auto:  (p: MethodParams<\"escalate.auto\">)  => c(\"escalate.auto\", p),\n    },\n    whisper: {\n      ask:    (p: MethodParams<\"whisper.ask\">)    => c(\"whisper.ask\", p),\n      answer: (p: MethodParams<\"whisper.answer\">) => c(\"whisper.answer\", p),\n    },\n    deliberate: {\n      open:    (p: MethodParams<\"deliberate.open\">)    => c(\"deliberate.open\", p),\n      comment: (p: MethodParams<\"deliberate.comment\">) => c(\"deliberate.comment\", p),\n      vote:    (p: MethodParams<\"deliberate.vote\">)    => c(\"deliberate.vote\", p),\n      close:   (p: MethodParams<\"deliberate.close\">)   => c(\"deliberate.close\", p),\n    },\n    handoff: {\n      propose: (p: MethodParams<\"handoff.propose\">) => c(\"handoff.propose\", p),\n      accept:  (p: MethodParams<\"handoff.accept\">)  => c(\"handoff.accept\", p),\n      decline: (p: MethodParams<\"handoff.decline\">) => c(\"handoff.decline\", p),\n    },\n    control: {\n      pause:             (p: MethodParams<\"control.pause\">)             => c(\"control.pause\", p),\n      resume:            (p: MethodParams<\"control.resume\">)            => c(\"control.resume\", p),\n      cancel:            (p: MethodParams<\"control.cancel\">)            => c(\"control.cancel\", p),\n      supersede:         (p: MethodParams<\"control.supersede\">)         => c(\"control.supersede\", p),\n      snapshot:          (p: MethodParams<\"control.snapshot\">)          => c(\"control.snapshot\", p),\n      rollback:          (p: MethodParams<\"control.rollback\">)          => c(\"control.rollback\", p),\n      set_mode_ceiling:  (p: MethodParams<\"control.set_mode_ceiling\">)  => c(\"control.set_mode_ceiling\", p),\n    },\n    audit: {\n      read:            (p: MethodParams<\"audit.read\">)            => c(\"audit.read\", p),\n      submit_to_scitt: (p: MethodParams<\"audit.submit_to_scitt\">) => c(\"audit.submit_to_scitt\", p),\n      verify_receipt:  (p: MethodParams<\"audit.verify_receipt\">)  => c(\"audit.verify_receipt\", p),\n      verify_chain:    (p: MethodParams<\"audit.verify_chain\">)    => c(\"audit.verify_chain\", p),\n    },\n  };\n}\n\nexport type CoordinatorApi = ReturnType<typeof makeApi>;\n","/**\n * @brightbeamai/chap-coordinator. type vocabulary\n *\n * Wire-shape and in-memory types for the Coordinator. The schemas at\n * schemas/ are the normative wire types; these mirror them in\n * TypeScript for in-process use.\n */\n\nexport type ParticipantUri = string;\nexport type WorkspaceId    = string;\nexport type TaskId         = string;\nexport type ArtefactId     = string;\n\nexport type ParticipantType = \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n\nexport interface Envelope {\n  jsonrpc: \"2.0\";\n  id?:     string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?:  { code: number; message: string; data?: unknown };\n  /** security-signed/1.0: top-level signature, signed over JCS of the\n   *  envelope with this field removed. Form: ``ed25519:<kid>:<b64>``. */\n  sig?: string;\n}\n\nexport type Mode = \"shadow\" | \"trial\" | \"production\";\nexport type WorkspaceState = \"active\" | \"paused\" | \"closed\";\nexport type PauseScope = \"task\" | \"participant\" | \"workspace\";\n\nexport type TaskState =\n  | \"created\"\n  | \"in_progress\"\n  | \"review_requested\"\n  | \"completed\"\n  | \"declined\"\n  | \"abstained\"\n  | \"escalated\"\n  | \"superseded\"\n  | \"paused\"\n  | \"cancelled\";\n\n// ============================================================\n//   Key records (security-signed/1.0)\n// ============================================================\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  use?: string;\n  alg?: string;\n}\n\n/** A participant's JWK plus the validity window. Lookup by\n *  (participant, kid, ts) so historical envelopes verify across\n *  rotation per security-signed/1.0 S3-S5. */\nexport interface KeyRecord {\n  jwk:         Jwk;\n  kid:         string;\n  valid_from:  string;            // ISO timestamp; inclusive\n  valid_until?: string;           // ISO timestamp; exclusive; absent = unbounded\n  revoked_at?: string;\n  revoked_reason?: string;\n}\n\n// ============================================================\n//   Participants\n// ============================================================\n\nexport interface Member {\n  uri:    ParticipantUri;\n  type:   ParticipantType;\n  role:   string;\n  joined: string;\n  display_name?: string;\n  capabilities?: Record<string, unknown>;\n  scopes?:       string[];\n  keys:          KeyRecord[];\n  paused:        boolean;         // control.pause scope=participant\n  oidc_sub?:     string;\n  oidc_auth_time?: number;        // unix seconds\n  oidc_acr?:     string;\n  vc_holder?:    string;\n}\n\n// ============================================================\n//   Routing hints\n// ============================================================\n\nexport interface TaskRoutingHints {\n  criticality?: \"low\" | \"medium\" | \"high\" | \"critical\";\n  deadline?:    string;\n  max_cost_usd?: number;\n  risk_tier?:   string;\n  [extra: string]: unknown;\n}\n\nexport interface ArtefactRoutingHints {\n  confidence?:        number | string;\n  model_id?:          string;\n  cost_consumed_usd?: number;\n  latency_ms?:        number;\n  [extra: string]:    unknown;\n}\n\n// ============================================================\n//   JSON Patch (RFC 6902)\n// ============================================================\n\nexport interface JsonPatchOp {\n  op:    \"add\" | \"replace\" | \"remove\" | \"copy\" | \"move\" | \"test\";\n  path:  string;\n  value?: unknown;\n  from?: string;\n}\n\n// ============================================================\n//   Override artefact (review/1.0)\n// ============================================================\n\nexport interface OverrideArtefact {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  reviewer:          ParticipantUri;\n  based_on_artefact: unknown;\n  diff:              JsonPatchOp[];\n  result:            unknown;\n  rationale:         string;\n  tags:              string[];\n  policy_refs:       string[];\n  ts:                string;\n  logical_id?:       string;\n  instance_id?:      string;\n  intent_preserved?: boolean;\n}\n\n// ============================================================\n//   Route decision artefact (routing/1.0)\n// ============================================================\n\nexport interface RouteDecisionArtefact {\n  id:             ArtefactId;\n  kind:           \"route_decision\";\n  decision_type:  \"task.route\" | \"review.depth\" | \"escalate.auto\";\n  outcome:        unknown;\n  produced_by:    ParticipantUri;\n  produced_at:    string;\n  task?:          TaskId;\n  policy_id?:     string;\n  hints_observed: Record<string, unknown>;\n  rationale:      string;\n  // Auxiliary fields per decision_type:\n  // task.route:     alternatives_considered\n  // review.depth:   sampling_probability\n  // escalate.auto:  escalation_target\n  [extra: string]: unknown;\n}\n\n// ============================================================\n//   Snapshot artefact (control/1.0)\n// ============================================================\n\nexport interface SnapshotArtefact {\n  id:           ArtefactId;\n  kind:         \"snapshot\";\n  produced_at:  string;\n  produced_by:  ParticipantUri;\n  content_hash: string;\n  content: {\n    workspace: WorkspaceId;\n    audit_seq: number;\n    label?:    string;\n    include:   string[];\n    state:     Record<string, unknown>;\n  };\n}\n\n// ============================================================\n//   Whisper (whisper/1.0)\n// ============================================================\n\nexport interface WhisperPrompt {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  asker:             ParticipantUri;\n  askee:             ParticipantUri[];\n  question:          string;\n  options?:          Array<{ id: string; label?: string }>;\n  asked_at:          string;\n  deadline_ms:       number;\n  default_if_lapsed: unknown;\n  urgency:           \"low\" | \"medium\" | \"high\";\n  state:             \"pending\" | \"answered\" | \"lapsed\";\n  answered_at?:      string;\n  answered_by?:      ParticipantUri;\n  answer_option?:    string;\n  answer_text?:      string;\n  comment?:          string;\n  default_applied?:  unknown;\n}\n\n// ============================================================\n//   Deliberation (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberationVote {\n  ts:            string;\n  voter:         ParticipantUri;\n  vote:          \"yea\" | \"nay\" | \"abstain\";\n  weight?:       number;\n  comment?:      string;\n  veto_invoked?: boolean;\n}\n\nexport interface Deliberation {\n  id:           string;\n  task_id?:     TaskId;\n  opener:       ParticipantUri;\n  participants: ParticipantUri[];\n  rule:         string;        // raw rule string\n  question?:    string;\n  weights?:     Record<ParticipantUri, number>;\n  veto?:        Record<ParticipantUri, boolean>;\n  deadline?:    string;\n  state:        \"open\" | \"closed\" | \"lapsed\";\n  comments:     { ts: string; from: ParticipantUri; text: string }[];\n  votes:        DeliberationVote[];\n  outcome?:     {\n    outcome:  \"approved\" | \"rejected\" | \"error\";\n    rule:     string;\n    tally?:   { yea: number; nay: number };\n    vetoes?:  ParticipantUri[];\n    reason?:  string;\n  };\n  opened_at:    string;\n}\n\n// ============================================================\n//   Handoff (handoff/1.0)\n// ============================================================\n\nexport interface HandoffTaskItem {\n  task_id:         TaskId;\n  title?:          string;\n  status_summary?: string;\n  next_action?:    string;\n  blockers?:       string[];\n}\n\nexport interface Handoff {\n  id:           string;\n  proposer:     ParticipantUri;\n  recipient:    ParticipantUri;     // single URI or \"group:...\"\n  proposed_at:  string;\n  tasks:        HandoffTaskItem[];\n  summary?:     string;\n  context_links: string[];\n  state:        \"proposed\" | \"accepted\" | \"declined\";\n  resolved_at?: string;\n  accepted_by?: ParticipantUri;\n  accepted_task_ids?: TaskId[];\n  accept_comment?:    string;\n  decline_reason?:    string;\n  decline_suggested_target?: ParticipantUri;\n}\n\n// ============================================================\n//   Review decision (review/1.0)\n// ============================================================\n\nexport interface ReviewDecision {\n  reviewer: ParticipantUri;\n  kind:     \"approve\" | \"reject\" | \"override\" | \"abstain\";\n  ts:       string;\n  comment?: string;\n  tags?:    string[];\n  override_artefact_id?: ArtefactId;\n  abstain_category?:     string;\n}\n\n// ============================================================\n//   Task\n// ============================================================\n\nexport interface Task {\n  id:           TaskId;\n  kind:         string;\n  state:        TaskState;\n  assignee:     ParticipantUri;\n  delegator:    ParticipantUri;\n  input:        Record<string, unknown>;\n  output?:      unknown;\n  confidence?:  number | string;\n  deadline?:    string;\n  created_at:   string;\n  updated_at:   string;\n  mode:         Mode;\n  review_required?: boolean;\n  routing_hints?:           TaskRoutingHints;\n  artefact_routing_hints?:  ArtefactRoutingHints;\n  review?: {\n    requested_at: string;\n    requested_to: ParticipantUri[];\n    rule:         string;\n    deadline?:    string;\n    decisions:    ReviewDecision[];\n  };\n  history:      { ts: string; from: ParticipantUri; state: TaskState; note?: string }[];\n  supersedes?:  TaskId;\n  superseded_by?: TaskId;\n  parent?:      TaskId;\n  paused:       boolean;\n  paused_from?: TaskState;\n  /** Transient: holds the artefact passed to review.request so\n   *  decide.override can use it as the patch base. */\n  pending_artefact?: unknown;\n}\n\n// ============================================================\n//   Audit\n// ============================================================\n\nexport interface AuditEntry {\n  seq:      number;\n  arrived:  string;\n  /** The accepted call. Absent on a refusal entry. */\n  envelope?: Envelope;\n  /**\n   * The refused call, as received. Present only on a refusal entry, and held\n   * here rather than under `envelope` so a reader keyed on `envelope` passes\n   * the refusal by instead of replaying it (SPECIFICATION 10.1).\n   */\n  request?:  Envelope;\n  /** Present only on a refusal entry. */\n  outcome?:  RefusalOutcome;\n  prev_hash?: string;\n}\n\n/** Why a recorded call did not take effect. */\nexport interface RefusalOutcome {\n  status: \"refused\";\n  /** The error code the caller was answered with. */\n  code:   number;\n}\n\n// ============================================================\n//   Workspace\n// ============================================================\n\nexport interface Workspace {\n  id:           WorkspaceId;\n  created:      string;\n  state:        WorkspaceState;\n  profiles:     string[];\n  mode:         Mode;\n  mode_ceiling: Mode;\n  routing_policy_uri?: string;\n  step_up_window_sec: number;\n  min_acr?: string;\n  members:         Map<ParticipantUri, Member>;\n  tasks:           Map<TaskId, Task>;\n  overrides:       Map<ArtefactId, OverrideArtefact>;\n  whispers:        Map<string, WhisperPrompt>;\n  deliberations:   Map<string, Deliberation>;\n  handoffs:        Map<string, Handoff>;\n  snapshots:       Map<ArtefactId, SnapshotArtefact>;\n  route_decisions: Map<ArtefactId, RouteDecisionArtefact>;\n  // task.create idempotency: caller-supplied key -> task_id.\n  idempotency_keys: Record<string, TaskId>;\n  audit:           AuditEntry[];\n  chain_head?:     string;\n  chain_enabled:   boolean;\n}\n\n/**\n * Listener callback invoked synchronously when an envelope is appended\n * to the workspace audit log.\n */\nexport type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;\n\n/** True iff mode `a` is <= ceiling. */\nexport function modeLE(a: Mode, ceiling: Mode): boolean {\n  const order: Record<Mode, number> = { shadow: 0, trial: 1, production: 2 };\n  return order[a] <= order[ceiling];\n}\n","/**\n * audit-scitt/1.0 profile (profiles/audit-scitt.md).\n *\n * Methods:\n *   - audit.submit_to_scitt   -> build COSE_Sign1-shaped statements, pass to submitter\n *   - audit.verify_receipt    -> delegate to deployment hook\n *   - audit.verify_chain      -> replay local prev_hash chain\n *\n * External SCITT integration is the deployment's job; the Coordinator\n * builds the statement shape and routes through CoordinatorOptions.scittSubmitter.\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { entryIsWellFormed, entryRecord, linkHash } from \"../audit.js\";\nimport { canonicalize, ZERO_HASH } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\n\n/** The head after a malformed entry, which no stored head can match. */\nconst MALFORMED = \"sha256:malformed\";\n\n/**\n * A statement's payload is what the entry's chain link hashes: the envelope\n * of an accepted call, or the outcome together with the request of a refusal.\n */\nfunction buildStatement(workspaceId: string, record: unknown, issuer: string): Record<string, unknown> {\n  return {\n    protected: {\n      alg: -8,  // Ed25519 per COSE\n      iss: issuer,\n      kid: \"scitt-issuer\",\n      cwt_claims: { sub: workspaceId, iat: null },\n      \"content-type\": \"application/chap+json;version=0.3\",\n    },\n    payload: canonicalize(record).toString(\"utf-8\"),\n    signature: \"<deployment-supplied>\",\n  };\n}\n\nexport function registerAuditScitt(coord: Coordinator): void {\n  coord.handlers.set(\"audit.submit_to_scitt\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const issuer = (p.issuer as string) ?? \"service:coordinator\";\n\n    if (!coord.options.scittSubmitter) {\n      const statements = ws.audit.slice(fromSeq, toSeq).map(e =>\n        buildStatement(ws.id, entryRecord(e), issuer));\n      return { result: {\n        statements,\n        note: \"No scittSubmitter configured; submit these out-of-band\",\n      }};\n    }\n    const receipts: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      const statement = buildStatement(ws.id, entryRecord(entry), issuer);\n      let receipt: Record<string, unknown> | null;\n      try {\n        receipt = coord.options.scittSubmitter(statement);\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_UNREACHABLE, `SCITT submission error: ${msg}`) };\n      }\n      if (receipt === null) {\n        return { error: rpcError(E.SCITT_STATEMENT_REJECTED,\n          `Statement rejected at seq ${entry.seq}`) };\n      }\n      receipts.push({ seq: entry.seq, receipt });\n    }\n    return { result: { receipts } };\n  });\n\n  coord.handlers.set(\"audit.verify_receipt\", (p) => {\n    const receipt = p.receipt;\n    if (typeof receipt !== \"object\" || receipt === null) {\n      return { error: rpcError(E.PARAMS, \"receipt must be an object\") };\n    }\n    if (coord.options.verifyScittReceipt) {\n      let ok: boolean;\n      try { ok = !!coord.options.verifyScittReceipt(receipt as Record<string, unknown>); }\n      catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_RECEIPT_INVALID, `verify error: ${msg}`) };\n      }\n      if (!ok) return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"Receipt did not verify\") };\n      return { result: { verified: true } };\n    }\n    return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"No verifyScittReceipt hook configured; receipt not verified\") };\n  });\n\n  coord.handlers.set(\"audit.verify_chain\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (!(ws.chain_enabled || coord.options.enableChain)) {\n      return { error: rpcError(E.PARAMS, \"Chain not enabled for this workspace\") };\n    }\n    // Range verification is not implemented. Accepting the parameters and\n    // replaying the whole log anyway would answer a wider question than the\n    // caller asked while reporting counts scoped to the whole log, which is\n    // the failure this method was just fixed to stop making.\n    if (p.from_seq !== undefined || p.to_seq !== undefined) {\n      return { error: rpcError(\n        E.PARAMS,\n        \"Range verification is not implemented; omit from_seq and to_seq to \" +\n        \"verify the whole log.\",\n      ) };\n    }\n    // Coverage begins at the first entry carrying a prev_hash. A workspace\n    // may enable chaining part-way through its life, in which case every\n    // earlier entry is outside the chain and cannot be evaluated against\n    // anything. Those entries are not evidence of tampering and not\n    // evidence of integrity: they were never checked, and the verdict\n    // below has to say so rather than pass over them.\n    let start = ws.audit.findIndex(e => e.prev_hash != null);\n    if (start < 0) start = ws.audit.length;\n    const errors: string[] = [];\n    let prev = ZERO_HASH;\n    let resync = false;\n    for (const e of ws.audit.slice(start)) {\n      // After a malformed entry the next link is taken as stored, so the\n      // entries after it are judged on their own links. The chain is\n      // reported broken either way.\n      const expectedPrev = resync && typeof e.prev_hash === \"string\" ? e.prev_hash : prev;\n      resync = false;\n      // A chain-enabled workspace must have prev_hash on every entry; a\n      // missing value is a defect, not a reason to skip the check.\n      if (e.prev_hash !== expectedPrev) {\n        errors.push(`seq ${e.seq}: prev_hash mismatch`);\n      }\n      // An entry that records neither one accepted envelope nor one refused\n      // request with its outcome has been altered, and cannot be linked.\n      if (!entryIsWellFormed(e)) {\n        errors.push(`seq ${e.seq}: malformed entry`);\n        prev = MALFORMED;\n        resync = true;\n        continue;\n      }\n      prev = linkHash(entryRecord(e), expectedPrev);\n    }\n    // The recomputed head must match the stored head; this is what makes\n    // the final entry tamper-evident.\n    // Explicit null/undefined check, matching Python. A falsy-but-present\n    // head must not be silently replaced with ZERO_HASH, or the two\n    // implementations return different verdicts for the same state.\n    const storedHead = (ws.chain_head === undefined || ws.chain_head === null)\n      ? ZERO_HASH : ws.chain_head;\n    if (prev !== storedHead) {\n      errors.push(\"chain_head mismatch: replay does not match stored head\");\n    }\n    if (errors.length) {\n      return { error: rpcError(E.PARAMS, errors.join(\"; \")) };\n    }\n    const entriesTotal     = ws.audit.length;\n    const entriesChecked   = entriesTotal - start;\n    const entriesUnchecked = start;\n    // Three terminal verdicts, mutually exclusive: a broken chain returned\n    // above as an error, an unevaluated range here, and a pass only when\n    // coverage is complete. `not_evaluated` never rides alongside ok:true;\n    // a reader that looks at ok alone fails closed rather than reading a\n    // pass over entries nothing was checked against.\n    if (entriesUnchecked > 0) {\n      return { result: {\n        status:            \"not_evaluated\",\n        ok:                false,\n        reason:            \"unchained_prefix\",\n        entries_total:     entriesTotal,\n        entries_checked:   entriesChecked,\n        entries_unchecked: entriesUnchecked,\n        checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n        chain_head:        storedHead,\n      }};\n    }\n    return { result: {\n      status:            \"verified\",\n      ok:                true,\n      entries_total:     entriesTotal,\n      entries_checked:   entriesChecked,\n      entries_unchecked: 0,\n      checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n      chain_head:        storedHead,\n    }};\n  });\n}\n","/**\n * control/1.0 profile (profiles/control.md).\n *\n * Methods:\n *   - control.pause / control.resume   (scope: task|participant|workspace)\n *   - control.cancel\n *   - control.snapshot                  (returns art_... id)\n *   - control.rollback                  (to_snapshot_artefact_id + what_to_restore)\n *   - control.supersede                 (creates successor in one shot)\n *   - control.set_mode_ceiling\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { contentHash } from \"../canonical.js\";\nimport { rawValues } from \"../tracked.js\";\nimport { modeLE } from \"../types.js\";\nimport type { Mode, SnapshotArtefact, Task, TaskState } from \"../types.js\";\n\nconst VALID_MODES = new Set<Mode>([\"shadow\", \"trial\", \"production\"]);\nconst VALID_SCOPES = new Set([\"task\", \"participant\", \"workspace\"]);\n\nexport function registerControl(coord: Coordinator): void {\n  coord.handlers.set(\"control.pause\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, `scope must be task/participant/workspace`) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot pause ${task.state} task`) };\n      }\n      task.paused = true;\n      const prior = task.state;\n      if (prior !== \"paused\") task.paused_from = prior;\n      task.state = \"paused\";\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: \"paused\", note: `was ${prior}` });\n      return { result: { scope: \"task\", task_id: task.id, state: \"paused\" } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri || !ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = true;\n      return { result: {\n        scope: \"participant\", participant_uri: uri, paused: true,\n        in_flight_policy: (p.in_flight_policy as string) || \"allow_to_complete\",\n      }};\n    }\n    // workspace\n    ws.state = \"paused\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"paused\" } };\n  });\n\n  coord.handlers.set(\"control.resume\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, `scope must be task/participant/workspace`) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state !== \"paused\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot resume ${task.state} task`) };\n      }\n      task.paused = false;\n      const restored: TaskState = task.paused_from ?? \"in_progress\";\n      task.paused_from = undefined;\n      task.state = restored;\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: restored });\n      return { result: { scope: \"task\", task_id: task.id, state: restored } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri || !ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = false;\n      return { result: { scope: \"participant\", participant_uri: uri, paused: false } };\n    }\n    ws.state = \"active\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"active\" } };\n  });\n\n  coord.handlers.set(\"control.cancel\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n      return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot cancel ${task.state} task`) };\n    }\n    task.state = \"cancelled\";\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: p.from as string, state: \"cancelled\", note: p.reason as string | undefined });\n    return { result: { state: \"cancelled\" } };\n  });\n\n  coord.handlers.set(\"control.snapshot\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (Array.isArray(p.include) && p.include.length === 0) {\n      return { error: rpcError(E.PARAMS, \"include must not be empty\") };\n    }\n    const include: string[] = Array.isArray(p.include)\n      ? [...p.include as string[]]\n      : [\"members\", \"open_tasks\", \"mode_ceiling\"];\n    const state: Record<string, unknown> = {};\n    if (include.includes(\"members\")) {\n      // Read-only projections: read without recording a change.\n      const members = Array.from(rawValues(ws.members)).map(m => ({\n        uri: m.uri, type: m.type,\n        ...(m.role ? { role: m.role } : {}),\n        ...(m.scopes?.length ? { scopes: m.scopes } : {}),\n      }));\n      if (members.length) state.members = members;\n    }\n    if (include.includes(\"open_tasks\")) {\n      const tasks = Array.from(rawValues(ws.tasks))\n        .filter(t => t.state !== \"completed\" && t.state !== \"declined\" && t.state !== \"cancelled\" && t.state !== \"superseded\")\n        .map(t => ({ id: t.id, kind: t.kind, state: t.state,\n          ...(t.assignee ? { assignee: t.assignee } : {}),\n        }));\n      if (tasks.length) state.open_tasks = tasks;\n    }\n    if (include.includes(\"mode_ceiling\")) state.mode_ceiling = ws.mode_ceiling;\n    if (include.includes(\"policy\") && ws.routing_policy_uri) state.routing_policy_uri = ws.routing_policy_uri;\n    if (include.includes(\"audit\") || include.includes(\"all\")) state.audit_seq = ws.audit.length;\n\n    // Store the same canonical artefact that is emitted on the wire. Copies\n    // belong to this explicit capture boundary, never Coordinator.snapshot().\n    const content: SnapshotArtefact[\"content\"] = structuredClone({\n      workspace: ws.id,\n      audit_seq: ws.audit.length,\n      include,\n      state,\n      ...(p.label ? { label: p.label as string } : {}),\n    });\n    const snapId = coord.ids.artefactId();\n    const snap: SnapshotArtefact = {\n      id: snapId,\n      kind: \"snapshot\",\n      produced_at: coord.now(),\n      produced_by: p.from as string,\n      content_hash: contentHash(content),\n      content,\n    };\n    ws.snapshots.set(snapId, snap);\n    return {\n      result: {\n        snapshot_artefact_id: snapId,\n        audit_seq: snap.content.audit_seq,\n        artefact: structuredClone(snap),\n      },\n    };\n  });\n\n  coord.handlers.set(\"control.rollback\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const snapId = (p.to_snapshot_artefact_id as string)\n                 || (p.snapshot_artefact_id as string)\n                 || (p.snapshot_id as string);\n    if (!snapId) return { error: rpcError(E.PARAMS, \"to_snapshot_artefact_id is required\") };\n    const snap = ws.snapshots.get(snapId);\n    if (!snap) return { error: rpcError(E.CONTROL_SNAPSHOT_NOT_FOUND, `Unknown snapshot: ${snapId}`) };\n    if (Array.isArray(p.what_to_restore) && p.what_to_restore.length === 0) {\n      return { error: rpcError(E.PARAMS, \"what_to_restore must not be empty\") };\n    }\n    const what: string[] = (p.what_to_restore as string[]) ?? snap.content.include;\n    const restored: string[] = [];\n    if (what.includes(\"mode_ceiling\") && snap.content.state.mode_ceiling) {\n      ws.mode_ceiling = snap.content.state.mode_ceiling as Mode;\n      restored.push(\"mode_ceiling\");\n    }\n    if (what.includes(\"members\") && Array.isArray(snap.content.state.members)) {\n      const snapByUri = new Map<string, Record<string, unknown>>();\n      for (const m of snap.content.state.members as Array<Record<string, unknown>>) {\n        snapByUri.set(m.uri as string, m);\n      }\n      for (const [uri, snapM] of snapByUri) {\n        if (ws.members.has(uri)) {\n          const cur = ws.members.get(uri)!;\n          cur.role = (snapM.role as string) ?? cur.role;\n          cur.scopes = Array.isArray(snapM.scopes) ? [...snapM.scopes as string[]] : undefined;\n        }\n      }\n      restored.push(\"members\");\n    }\n    return { result: {\n      rolled_back_to: snapId, audit_seq: snap.content.audit_seq, restored,\n      ...(p.reason ? { reason: p.reason as string } : {}),\n    }};\n  });\n\n  coord.handlers.set(\"control.supersede\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const oldId = p.task_id as string;\n    const old = ws.tasks.get(oldId);\n    if (!old) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const newSpec = (p.successor_task as Record<string, unknown>) ?? {};\n    if (!newSpec.kind) {\n      return { error: rpcError(E.PARAMS, \"successor_task must include kind\") };\n    }\n    const assignee = (newSpec.assignee as string) || old.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"successor assignee not in workspace\") };\n    }\n    // The successor is a created task, so the participant-paused check\n    // task.create applies has to apply here too. Without it, superseding is a\n    // way to hand work to a participant whose work was stopped.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    // The successor is a created task, so it is bound by the same modes/1.0\n    // invariants as task.create: it must not exceed the workspace ceiling, and\n    // a trial-mode task forces review on regardless of its own setting.\n    if (newSpec.mode !== undefined && newSpec.mode !== null && typeof newSpec.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.mode must be a string\") };\n    }\n    const requestedMode = (newSpec.mode as Mode) || old.mode;\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (newSpec.review_required !== undefined && newSpec.review_required !== null\n        && typeof newSpec.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.review_required must be a boolean\") };\n    }\n    const now = coord.now();\n    const newId = coord.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: newSpec.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as string,\n      input: (newSpec.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode: requestedMode,\n      supersedes: old.id,\n      history: [{ ts: now, from: p.from as string, state: \"created\",\n                  note: `supersedes ${old.id}: ${(p.reason as string) || \"\"}` }],\n      paused: false,\n    };\n    // A successor keeps the review requirement of the task it replaces, so\n    // superseding never removes a required review. Trial forces review only\n    // when the workspace opted into modes/1.0, matching task.create, since\n    // mode is inert without the profile. Otherwise the spec's own setting\n    // applies.\n    if (old.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    } else if (\"review_required\" in newSpec) {\n      newTask.review_required = !!newSpec.review_required;\n    }\n    ws.tasks.set(newId, newTask);\n    old.state = \"superseded\";\n    old.superseded_by = newId;\n    old.updated_at = now;\n    old.history.push({ ts: now, from: p.from as string, state: \"superseded\",\n                       note: `-> ${newId}: ${(p.reason as string) || \"\"}` });\n    return { result: { superseded_task_id: old.id, new_task_id: newId, reason: p.reason as string | undefined } };\n  });\n\n  coord.handlers.set(\"control.set_mode_ceiling\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const m = (p.new_ceiling as Mode) ?? (p.mode_ceiling as Mode);\n    if (!VALID_MODES.has(m)) {\n      return { error: rpcError(E.PARAMS, `new_ceiling must be shadow/trial/production`) };\n    }\n    ws.mode_ceiling = m;\n    return { result: { mode_ceiling: ws.mode_ceiling, reason: p.reason as string | undefined } };\n  });\n}\n","/**\n * deliberation/1.0 profile (profiles/deliberation.md).\n *\n * Methods:\n *   - deliberate.open\n *   - deliberate.comment\n *   - deliberate.vote\n *   - deliberate.close\n *\n * Rules: any_one_approves | all_approve | quorum:N |\n *        weighted_vote:T | weighted_vote_with_veto:T\n *\n * Error codes (spec S5):\n *   -32030 voter not in participant list\n *   -32031 already voted\n *   -32032 closed or lapsed\n *   -32033 unknown rule\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { Deliberation } from \"../types.js\";\n\nfunction parseRule(rule: string): { kind: string; params: Record<string, number> } {\n  if (rule.includes(\":\")) {\n    const [kind, arg] = rule.split(\":\", 2);\n    if (kind === \"quorum\") return { kind, params: { n: parseInt(arg, 10) } };\n    if (kind === \"weighted_vote\" || kind === \"weighted_vote_with_veto\") {\n      return { kind, params: { threshold: parseFloat(arg) } };\n    }\n  }\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return { kind: rule, params: {} };\n  throw new Error(`Unknown rule: ${rule}`);\n}\n\nfunction computeOutcome(delib: Deliberation): Deliberation[\"outcome\"] {\n  const parsed = parseRule(delib.rule);\n  const yea = delib.votes.filter(v => v.vote === \"yea\");\n  const nay = delib.votes.filter(v => v.vote === \"nay\");\n  const vetoes = delib.votes.filter(v => v.veto_invoked && (delib.veto ?? {})[v.voter]);\n  const weights = delib.weights ?? {};\n\n  const weighted = (vs: typeof yea) =>\n    vs.reduce((s, v) => s + (weights[v.voter] ?? 1.0), 0);\n\n  if (parsed.kind === \"any_one_approves\") {\n    return {\n      outcome: yea.length >= 1 ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"all_approve\") {\n    const passed = yea.length === delib.participants.length && nay.length === 0;\n    return {\n      outcome: passed ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"quorum\") {\n    const n = parsed.params.n;\n    const cast = yea.length + nay.length;\n    if (cast < n) {\n      return {\n        outcome: \"rejected\", reason: \"quorum not met\", rule: delib.rule,\n        tally: { yea: yea.length, nay: nay.length }, vetoes: [],\n      };\n    }\n    return {\n      outcome: yea.length > nay.length ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote\") {\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote_with_veto\") {\n    if (vetoes.length) {\n      return {\n        outcome: \"rejected\", rule: delib.rule,\n        tally: { yea: 0, nay: 0 },\n        vetoes: vetoes.map(v => v.voter),\n      };\n    }\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  return { outcome: \"error\", rule: delib.rule, reason: `unsupported rule ${parsed.kind}` };\n}\n\nexport function registerDeliberation(coord: Coordinator): void {\n  coord.handlers.set(\"deliberate.open\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"rule\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const to = p.to ?? p.participants;\n    const participants: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!participants.length) {\n      return { error: rpcError(E.PARAMS, \"deliberate.open needs 'to' (participants list)\") };\n    }\n    try { parseRule(p.rule as string); }\n    catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.DELIB_UNKNOWN_RULE, msg) };\n    }\n    const id = (p.deliberation_id as string) || coord.ids.deliberationId();\n    const delib: Deliberation = {\n      id,\n      task_id: p.task_id as string | undefined,\n      opener: p.from as string,\n      participants,\n      rule: p.rule as string,\n      question: p.question as string | undefined,\n      weights: p.weights as Deliberation[\"weights\"],\n      veto: p.veto as Deliberation[\"veto\"],\n      deadline: p.deadline as string | undefined,\n      state: \"open\",\n      comments: [],\n      votes: [],\n      opened_at: coord.now(),\n    };\n    ws.deliberations.set(id, delib);\n    return { result: { deliberation_id: id, state: \"open\" } };\n  });\n\n  coord.handlers.set(\"deliberate.comment\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    delib.comments.push({\n      ts: coord.now(),\n      from: p.from as string,\n      text: (p.comment as string) || (p.text as string) || \"\",\n    });\n    return { result: { accepted: true } };\n  });\n\n  coord.handlers.set(\"deliberate.vote\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    for (const f of [\"from\", \"vote\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const v = p.vote as string;\n    if (v !== \"yea\" && v !== \"nay\" && v !== \"abstain\") {\n      return { error: rpcError(E.PARAMS, \"vote must be yea/nay/abstain\") };\n    }\n    const voter = p.from as string;\n    if (!delib.participants.includes(voter)) {\n      return { error: rpcError(E.DELIB_VOTER_NOT_IN_LIST,\n        `Voter ${voter} not in participant list`) };\n    }\n    if (delib.votes.some(x => x.voter === voter)) {\n      return { error: rpcError(E.DELIB_ALREADY_VOTED, `Voter ${voter} has already voted`) };\n    }\n    delib.votes.push({\n      ts: coord.now(),\n      voter,\n      vote: v as \"yea\" | \"nay\" | \"abstain\",\n      weight: p.weight as number | undefined,\n      comment: p.comment as string | undefined,\n      veto_invoked: !!p.veto_invoked,\n    });\n    return { result: { recorded: true } };\n  });\n\n  coord.handlers.set(\"deliberate.close\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state === \"closed\") return { result: delib.outcome! };\n    delib.state = \"closed\";\n    delib.outcome = computeOutcome(delib);\n    return { result: delib.outcome };\n  });\n}\n","/**\n * handoff/1.0 profile (profiles/handoff.md).\n *\n * Carries multiple tasks. Recipient is a single URI or a group:... URI.\n *\n * Error codes (spec S6):\n *   -32050 tasks not assigned to proposer\n *   -32051 already resolved\n *   -32052 recipient not a workspace member\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { Handoff, HandoffTaskItem } from \"../types.js\";\n\nexport function registerHandoff(coord: Coordinator): void {\n  coord.handlers.set(\"handoff.propose\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"tasks\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const proposer = p.from as string;\n    const recipient = p.to as string;\n    if (typeof recipient === \"string\" && !recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(recipient)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          `Recipient ${recipient} is not a member`) };\n      }\n    }\n    const tasksIn = p.tasks;\n    if (!Array.isArray(tasksIn) || !tasksIn.length) {\n      return { error: rpcError(E.PARAMS, \"tasks must be a non-empty list\") };\n    }\n    const proposed: HandoffTaskItem[] = [];\n    for (const t of tasksIn as Array<Record<string, unknown>>) {\n      const tid = t.task_id as string;\n      if (!tid || !ws.tasks.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Unknown task in handoff: ${tid}`) };\n      }\n      const task = ws.tasks.get(tid)!;\n      if (task.assignee !== proposer) {\n        return { error: rpcError(E.HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER,\n          `Task ${tid} is not currently assigned to ${proposer}`) };\n      }\n      proposed.push({\n        task_id: tid,\n        title: t.title as string | undefined,\n        status_summary: t.status_summary as string | undefined,\n        next_action: t.next_action as string | undefined,\n        blockers: (t.blockers as string[] | undefined) ?? [],\n      });\n    }\n    const id = (p.handoff_id as string) || coord.ids.handoffId();\n    const ho: Handoff = {\n      id,\n      proposer,\n      recipient,\n      proposed_at: coord.now(),\n      tasks: proposed,\n      summary: p.summary as string | undefined,\n      context_links: (p.context_links as string[] | undefined) ?? [],\n      state: \"proposed\",\n    };\n    ws.handoffs.set(id, ho);\n    return { result: { handoff_id: id, state: \"proposed\", task_ids: proposed.map(t => t.task_id) } };\n  });\n\n  coord.handlers.set(\"handoff.accept\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const acceptor = p.from as string;\n    if (ho.recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    } else {\n      if (acceptor !== ho.recipient) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not the named recipient\") };\n      }\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    }\n    // Accepting makes the acceptor the assignee. A paused participant is\n    // assigned no new tasks (control/1.0), so it cannot take tasks this way.\n    if (ws.members.get(acceptor)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Acceptor ${acceptor} is paused`) };\n    }\n    // Omission accepts all proposed tasks; an empty selection is not a handoff.\n    if (Array.isArray(p.accepted_task_ids) && p.accepted_task_ids.length === 0) {\n      return { error: rpcError(E.PARAMS, \"accepted_task_ids must not be empty\") };\n    }\n    const validIds = new Set(ho.tasks.map(t => t.task_id));\n    const acceptedIds: string[] = Array.isArray(p.accepted_task_ids)\n      ? [...p.accepted_task_ids as string[]]\n      : ho.tasks.map(t => t.task_id);\n    for (const tid of acceptedIds) {\n      if (!validIds.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Task ${tid} not in this handoff`) };\n      }\n    }\n    const now = coord.now();\n    for (const tid of acceptedIds) {\n      const task = ws.tasks.get(tid)!;\n      task.assignee = acceptor;\n      task.updated_at = now;\n      task.history.push({\n        ts: now, from: acceptor, state: task.state,\n        note: `handoff accepted from ${ho.proposer}`,\n      });\n    }\n    ho.state = \"accepted\";\n    ho.accepted_by = acceptor;\n    ho.accepted_task_ids = [...acceptedIds];\n    ho.accept_comment = p.comment as string | undefined;\n    ho.resolved_at = now;\n    return { result: { accepted: true, task_ids: [...acceptedIds], assignee: acceptor } };\n  });\n\n  coord.handlers.set(\"handoff.decline\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const decliner = p.from as string;\n    ho.decline_reason = p.reason as string | undefined;\n    ho.decline_suggested_target = p.suggested_target as string | undefined;\n    if (!ho.recipient.startsWith(\"group:\") && decliner === ho.recipient) {\n      ho.state = \"declined\";\n      ho.resolved_at = coord.now();\n    }\n    return { result: { recorded: true, state: ho.state } };\n  });\n}\n","/**\n * routing/1.0 profile (profiles/routing.md).\n *\n * Three methods, each emits a route_decision artefact:\n *   - task.route      -> pick assignee + update task.assignee\n *   - review.depth    -> skip / spot_check / full + sampling_probability\n *   - escalate.auto   -> evaluate auto-escalation\n *\n * Error codes:\n *   -32510 no eligible assignee\n *   -32513 candidates_empty\n *   -32514 depth_not_applicable\n *   -32515 policy_unreachable\n *   -32516 escalation target unavailable\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { RouteDecisionArtefact, Task } from \"../types.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\n\nfunction defaultDepth(hints: Record<string, unknown>): {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling?: number;\n  summary: string;\n} {\n  const crit = (hints.criticality as string) ?? \"medium\";\n  let conf = 1.0;\n  try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n  if (isNaN(conf)) conf = 1.0;\n  const r = CRIT[crit] ?? 1;\n  if (r >= 3) return { depth: \"full\", summary: \"criticality=critical: full review\" };\n  if (r === 2 && conf < 0.7) return { depth: \"full\", summary: \"criticality=high and confidence<0.7: full review\" };\n  if (r === 0 && conf >= 0.95) return { depth: \"skip\", summary: \"very low criticality + very high confidence: skip\" };\n  if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling: 0.10, summary: \"low criticality + high confidence: 10% sample\" };\n  return { depth: \"spot_check\", sampling: 0.25, summary: \"default mid-confidence: 25% sample\" };\n}\n\nexport function registerRouting(coord: Coordinator): void {\n  coord.handlers.set(\"task.route\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (p.candidates !== undefined && p.candidates !== null && !Array.isArray(p.candidates)) {\n      return { error: rpcError(E.PARAMS, \"candidates must be a list\") };\n    }\n    const candidates = (p.candidates as string[] | null | undefined) ?? [];\n    if (!candidates.length) {\n      return { error: rpcError(E.ROUTING_CANDIDATES_EMPTY, \"candidates array was empty\") };\n    }\n    let selected: string;\n    let rationale: Record<string, unknown>;\n    if (coord.options.routingPolicy) {\n      try {\n        const d = coord.options.routingPolicy(task, [...candidates]);\n        selected = d.selected;\n        rationale = d.rationale;\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `routing policy error: ${msg}`) };\n      }\n    } else {\n      // A paused participant is assigned no new tasks (control/1.0), so the\n      // default policy passes over one as it passes over a non-member, and\n      // names it among the alternatives with that reason.\n      const memberOf = (c: unknown) => (typeof c === \"string\" ? ws.members.get(c) : undefined);\n      const eligible = candidates.filter(c => { const m = memberOf(c); return !!m && !m.paused; });\n      if (!eligible.length) {\n        return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE, \"No candidate is a workspace member who is not paused\") };\n      }\n      selected = eligible[0];\n      const alternatives: Array<{ candidate: string; reason_excluded: string }> = [];\n      let chosen = false;\n      for (const c of candidates) {\n        const m = memberOf(c);\n        if (!m) continue;\n        if (m.paused) alternatives.push({ candidate: c, reason_excluded: \"paused\" });\n        else if (!chosen) chosen = true;\n        else alternatives.push({ candidate: c, reason_excluded: \"not first eligible\" });\n      }\n      rationale = {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: alternatives,\n      };\n    }\n    if (!ws.members.has(selected)) {\n      return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE,\n        `Selected ${JSON.stringify(selected)} is not a member`) };\n    }\n    // An operator policy can pick a paused participant. Routing to one would\n    // assign a task to a participant whose work was stopped, so it is refused\n    // as task.create refuses a paused assignee.\n    if (ws.members.get(selected)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${selected} is paused`) };\n    }\n    task.assignee = selected;\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: \"service:coordinator\",\n                        state: task.state, note: `routed to ${selected}` });\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"task.route\", outcome: selected,\n      produced_by: \"service:coordinator\", produced_at: task.updated_at,\n      task: task.id,\n      policy_id: rationale.policy_id as string | undefined,\n      hints_observed: { ...(task.routing_hints ?? {}) },\n      rationale: (rationale.summary as string) ?? \"\",\n      alternatives_considered: rationale.alternatives_considered,\n    };\n    ws.route_decisions.set(artId, artefact);\n    return { result: { selected, decision_artefact: artId, rationale } };\n  });\n\n  coord.handlers.set(\"review.depth\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const hints: Record<string, unknown> = { ...(task.routing_hints ?? {}),\n                                              ...((p.artefact_routing_hints as Record<string, unknown>) ?? {}) };\n    if (!Object.keys(hints).length) {\n      return { error: rpcError(E.ROUTING_DEPTH_NOT_APPLICABLE, \"No routing_hints to consult\") };\n    }\n    let depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n    let sampling: number | undefined;\n    let summary: string;\n    let policyId: string;\n    if (coord.options.reviewDepthPolicy) {\n      try {\n        const d = coord.options.reviewDepthPolicy(task, hints);\n        depth = d.depth;\n        sampling = d.sampling_probability;\n        summary = (d.rationale.summary as string) ?? \"operator policy\";\n        policyId = (d.rationale.policy_id as string) ?? \"operator\";\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `depth policy error: ${msg}`) };\n      }\n    } else {\n      const d = defaultDepth(hints);\n      depth = d.depth; sampling = d.sampling; summary = d.summary;\n      policyId = \"default\";\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"review.depth\", outcome: depth,\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id, policy_id: policyId,\n      hints_observed: hints, rationale: summary,\n      ...(sampling !== undefined ? { sampling_probability: sampling } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    const result: Record<string, unknown> = {\n      depth, decision_artefact: artId,\n      rationale: { policy_id: policyId, hints_used: Object.keys(hints), summary },\n    };\n    if (sampling !== undefined) result.sampling_probability = sampling;\n    return { result };\n  });\n\n  coord.handlers.set(\"escalate.auto\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const hints = { ...(task.routing_hints ?? {}) };\n    let escalate: boolean, to: string | undefined, rule: Record<string, unknown>;\n    if (coord.options.escalationPolicy) {\n      try {\n        const d = coord.options.escalationPolicy(task, hints);\n        escalate = !!d.escalate;\n        to = d.to;\n        rule = d.triggered_rule ?? {};\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `escalation policy error: ${msg}`) };\n      }\n    } else {\n      const crit = (hints.criticality as string) ?? \"medium\";\n      let conf = 1.0;\n      try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n      if (isNaN(conf)) conf = 1.0;\n      const r = CRIT[crit] ?? 1;\n      escalate = r >= 3 || (r >= 2 && conf < 0.6);\n      to = p.default_escalation_target as string | undefined;\n      rule = {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      };\n    }\n    if (escalate) {\n      if (!to) return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n        \"Escalation triggered but no target available\") };\n      if (!to.startsWith(\"group:\") && !ws.members.has(to)) {\n        return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n          `Escalation target ${to} is not a member or group`) };\n      }\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"escalate.auto\",\n      outcome: escalate ? { escalate: true, to } : { escalate: false },\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id,\n      policy_id: rule.rule_id as string | undefined,\n      hints_observed: hints,\n      rationale: (rule.summary as string) ?? \"\",\n      ...(escalate ? { escalation_target: to } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    if (escalate) {\n      if (coord.options.onAutoEscalate && to) {\n        try { coord.options.onAutoEscalate(task, to); } catch { /* */ }\n      }\n      return { result: { escalate: true, to, decision_artefact: artId, triggered_rule: rule } };\n    }\n    return { result: { escalate: false, decision_artefact: artId } };\n  });\n}\n","/**\n * security-signed/1.0 profile (profiles/security-signed.md).\n *\n * Top-level `sig` field on every envelope: ed25519:<kid>:<base64>.\n * Verification happens at dispatch (see Coordinator.verifySignature).\n *\n * Methods:\n *   - participant.rotate_key\n *   - participant.revoke_key\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { KeyRecord } from \"../types.js\";\n\nexport function registerSecuritySigned(coord: Coordinator): void {\n  coord.handlers.set(\"participant.rotate_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"old_kid\", \"new_jwk\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const member = ws.members.get(p.from as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown participant: ${p.from}`) };\n    const oldKid = p.old_kid as string;\n    const oldKey = member.keys.find(k => k.kid === oldKid);\n    if (!oldKey) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${oldKid} for ${p.from}`) };\n    if (oldKey.revoked_at) return { error: rpcError(E.SIG_KEY_REVOKED, `Key ${oldKid} is revoked`) };\n\n    const newJwk = p.new_jwk as Record<string, unknown>;\n    if (!newJwk || typeof newJwk.kid !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_jwk must include kid\") };\n    }\n    const now = coord.now();\n    oldKey.valid_until = now;\n    member.keys.push({\n      jwk: newJwk as unknown as KeyRecord[\"jwk\"],\n      kid: newJwk.kid as string,\n      valid_from: now,\n    });\n    return { result: { rotated: true, old_kid: oldKid, new_kid: newJwk.kid, valid_from: now } };\n  });\n\n  coord.handlers.set(\"participant.revoke_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"target_uri\", \"kid\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const sender = p.from as string | undefined;\n    if (sender !== p.target_uri) {\n      const caller = sender ? ws.members.get(sender) : undefined;\n      if (!caller || caller.role !== \"admin\") {\n        return { error: rpcError(E.NOT_AUTHORISED,\n          \"Revoking another member's key requires the admin role\") };\n      }\n    }\n    const member = ws.members.get(p.target_uri as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown target: ${p.target_uri}`) };\n    const key = member.keys.find(k => k.kid === p.kid);\n    if (!key) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${p.kid} for target`) };\n    const now = coord.now();\n    key.revoked_at = now;\n    key.revoked_reason = (p.reason as string) || \"unspecified\";\n    return { result: { revoked: true, kid: key.kid, revoked_at: now, reason: key.revoked_reason } };\n  });\n}\n","/**\n * whisper/1.0 profile (profiles/whisper.md).\n *\n * Methods:\n *   - whisper.ask     -> pose a deadline-bound question with options + default\n *   - whisper.answer  -> answer a whisper\n *\n * Lapse handling: coordinator.checkWhisperLapses(workspaceId, now?) is\n * registered on the Coordinator instance for deployments to call from a\n * scheduler.\n *\n * Error codes (per spec S6):\n *   -32020 WHISPER_ALREADY_ANSWERED\n *   -32021 WHISPER_LAPSED\n *   -32022 WHISPER_OPTION_NOT_IN_SET\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { canonicalize } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { WhisperPrompt, Envelope } from \"../types.js\";\n\nfunction parseIso(ts: string): number { return new Date(ts).getTime(); }\n\n/**\n * Whether an answer field holds anything, read as Python reads a value's\n * truth, so both references agree that an empty answer is no answer.\n */\nfunction present(v: unknown): boolean {\n  if (v === undefined || v === null || v === false || v === 0 || v === \"\") return false;\n  if (Array.isArray(v)) return v.length > 0;\n  if (typeof v === \"object\") return Object.keys(v as object).length > 0;\n  return true;\n}\n\nexport function registerWhisper(coord: Coordinator): void {\n  coord.handlers.set(\"whisper.ask\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"task_id\", \"question\", \"deadline_ms\", \"default_if_lapsed\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    if (!ws.tasks.has(p.task_id as string)) {\n      return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    }\n    if (p.options !== undefined && p.options !== null && !Array.isArray(p.options)) {\n      return { error: rpcError(E.PARAMS, \"options must be a list\") };\n    }\n    const to = p.to;\n    const askee: string[] = Array.isArray(to) ? (to as string[]) : [to as string];\n    const id = (p.whisper_id as string) || coord.ids.artefactId();\n    const prompt: WhisperPrompt = {\n      id,\n      task_id: p.task_id as string,\n      asker: p.from as string,\n      askee,\n      question: p.question as string,\n      options: p.options as WhisperPrompt[\"options\"],\n      asked_at: coord.now(),\n      deadline_ms: Number(p.deadline_ms),\n      default_if_lapsed: p.default_if_lapsed,\n      urgency: (p.urgency as WhisperPrompt[\"urgency\"]) || \"low\",\n      state: \"pending\",\n    };\n    ws.whispers.set(id, prompt);\n    return { result: { whisper_id: id, deadline_ms: prompt.deadline_ms } };\n  });\n\n  coord.handlers.set(\"whisper.answer\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"whisper_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const prompt = ws.whispers.get(p.whisper_id as string);\n    if (!prompt) return { error: rpcError(E.PARAMS, \"Unknown whisper id\") };\n    // Only a participant the whisper was addressed to may answer it. A\n    // broadcast scope (workspace:/group:) is satisfied by any member; the\n    // coordinator does not model group membership (see SPECIFICATION.md).\n    const answerer = p.from as string;\n    const broadcast = prompt.askee.some((a) => typeof a === \"string\" && (a.startsWith(\"workspace:\") || a.startsWith(\"group:\")));\n    if (broadcast) {\n      if (!ws.members.has(answerer)) {\n        return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${answerer}`) };\n      }\n    } else if (!prompt.askee.includes(answerer)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Whisper was not addressed to ${answerer}`) };\n    }\n    if (prompt.state === \"answered\") {\n      return { error: rpcError(E.WHISPER_ALREADY_ANSWERED, \"Whisper already answered\") };\n    }\n    if (prompt.state === \"lapsed\") {\n      return { error: rpcError(E.WHISPER_LAPSED, \"Whisper already lapsed\") };\n    }\n\n    // A null option is no option, and an empty answer no answer, as in Python.\n    const answerOption = p.answer_option as string | undefined;\n    const hasOption = answerOption !== undefined && answerOption !== null;\n    const answerText = (present(p.answer) ? p.answer : p.answer_text) as string | undefined;\n    if (prompt.options && prompt.options.length) {\n      if (!hasOption) {\n        return { error: rpcError(E.PARAMS, \"answer_option is required when options are defined\") };\n      }\n      const valid = new Set(prompt.options.map(o => o.id));\n      if (!valid.has(answerOption)) {\n        return { error: rpcError(E.WHISPER_OPTION_NOT_IN_SET,\n          `Answer option ${canonicalize(answerOption as never).toString(\"utf-8\")} not in option set`) };\n      }\n    } else if (!present(answerText) && !hasOption) {\n      return { error: rpcError(E.PARAMS, \"answer or answer_option required\") };\n    }\n\n    prompt.state = \"answered\";\n    prompt.answered_at = coord.now();\n    prompt.answered_by = p.from as string;\n    prompt.answer_option = answerOption;\n    prompt.answer_text = answerText;\n    prompt.comment = p.comment as string | undefined;\n    return { result: { answered: true, whisper_id: prompt.id, task_id: prompt.task_id } };\n  });\n\n  // Expose the lapse-check function on the coordinator instance.\n  coord.checkWhisperLapses = (workspaceId: string, now?: string): Envelope[] => {\n    const ws = coord.workspaces.get(workspaceId);\n    if (!ws) return [];\n    const cutoff = parseIso(now ?? coord.now());\n    const emitted: Envelope[] = [];\n    for (const prompt of ws.whispers.values()) {\n      if (prompt.state !== \"pending\") continue;\n      const asked = parseIso(prompt.asked_at);\n      const deadline = asked + prompt.deadline_ms;\n      if (cutoff < deadline) continue;\n      prompt.state = \"lapsed\";\n      prompt.default_applied = prompt.default_if_lapsed;\n      // Set again so the change is written: a lapse check runs outside any\n      // call, where reading the prompt records nothing.\n      ws.whispers.set(prompt.id, prompt);\n      const notify: Envelope = {\n        jsonrpc: \"2.0\",\n        method: \"notify.message\",\n        params: {\n          workspace: ws.id,\n          from: \"service:coordinator\",\n          to: [prompt.asker, ...prompt.askee],\n          ts: coord.now(),\n          kind: \"whisper_lapsed\",\n          whisper_id: prompt.id,\n          // Carry the task so a task-filtered audit.read surfaces the\n          // lapse. A lapsed whisper applies its default with no human\n          // input, so it is the case most in need of being visible on\n          // the task's thread.\n          task_id: prompt.task_id,\n          default_applied: prompt.default_if_lapsed,\n        },\n      };\n      coord.recordAudit(ws, notify);\n      emitted.push(notify);\n    }\n    return emitted;\n  };\n}\n","/**\n * @brightbeamai/chap-coordinator/coordinator\n *\n * The Coordinator class. CHAP protocol logic, packaged as a library\n * rather than a CLI server. Applications instantiate one, call\n * `dispatch(envelope)`, subscribe to audit events, and persist via\n * the provided hooks.\n *\n * Coverage:\n *   - Core (9 methods)\n *   - review/1.0 (6 methods)\n *   - whisper/1.0 (2 methods + lapse handling)\n *   - deliberation/1.0 (4 methods)\n *   - modes/1.0 (mode handling at task.create; trial forces review)\n *   - handoff/1.0 (3 methods with multi-task and group support)\n *   - control/1.0 (7 methods with task/participant/workspace scopes)\n *   - routing/1.0 (3 methods producing route_decision artefacts)\n *   - security-signed/1.0 (top-level `sig` field; key history)\n *   - audit-scitt/1.0 (statement assembly + local chain linkage)\n *   - identity-oidc/1.0 + identity-vc/1.0 (binding hooks at join)\n */\n\nimport { canonicalize, contentHash, ZERO_HASH } from \"./canonical.js\";\nimport { ALWAYS_AVAILABLE, OWNING_PROFILE } from \"./catalogue.js\";\nimport { publicKeyFromJwk, verifyEnvelope } from \"./crypto.js\";\nimport { IdFactory } from \"./ids.js\";\nimport { E, isValidEnvelope, rpcError } from \"./jsonrpc.js\";\nimport { entryCall, entryRecord, isSigned, linkHash, refusalIsRecorded, signedDigest } from \"./audit.js\";\nimport { applyJsonPatch } from \"./patch.js\";\nimport type { Store, StoreChange, WorkspaceRecord } from \"./storage/store.js\";\nimport { COLLECTIONS, IDEMPOTENCY_KEYS, MemoryStore } from \"./storage/store.js\";\nimport { TrackedMap, rawEntries, rawValues, type Tracker } from \"./tracked.js\";\nimport { makeApi, type CoordinatorApi } from \"./api.js\";\nimport type {\n  ArtefactId,\n  AuditEntry,\n  AuditListener,\n  Envelope,\n  KeyRecord,\n  Member,\n  Mode,\n  OverrideArtefact,\n  ParticipantUri,\n  SnapshotArtefact,\n  Task,\n  TaskId,\n  Workspace,\n  WorkspaceId,\n} from \"./types.js\";\nimport { modeLE } from \"./types.js\";\nimport { registerAuditScitt } from \"./profiles/audit_scitt.js\";\nimport { registerControl } from \"./profiles/control.js\";\nimport { registerDeliberation } from \"./profiles/deliberation.js\";\nimport { registerHandoff } from \"./profiles/handoff.js\";\nimport { registerRouting } from \"./profiles/routing.js\";\nimport { registerSecuritySigned } from \"./profiles/security_signed.js\";\nimport { registerWhisper } from \"./profiles/whisper.js\";\n\n// ============================================================\n//   Options\n// ============================================================\n\nexport type TokenVerifier = (token: string) => Record<string, unknown> | null;\nexport type CredentialVerifier = (presentation: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittSubmitter = (statement: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittReceiptVerifier = (receipt: Record<string, unknown>) => boolean;\nexport type RoutingPolicyFn = (task: Task, candidates: ParticipantUri[]) => {\n  selected: ParticipantUri;\n  rationale: Record<string, unknown>;\n};\nexport type ReviewDepthPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling_probability?: number;\n  rationale: Record<string, unknown>;\n};\nexport type EscalationPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  escalate: boolean;\n  to?: ParticipantUri;\n  triggered_rule?: Record<string, unknown>;\n};\n\n/** Methods classified as privileged for step-up auth. */\nexport const PRIVILEGED_METHODS = new Set<string>([\n  \"control.pause\", \"control.resume\", \"control.cancel\", \"control.supersede\",\n  \"control.snapshot\", \"control.rollback\", \"control.set_mode_ceiling\",\n  \"workspace.set_profiles\",\n  \"participant.rotate_key\", \"participant.revoke_key\",\n]);\n\n// Methods outside the control, deliberate, handoff and whisper namespaces that\n// dispatch holds to the membership floor before the handler runs.\nconst MEMBER_ONLY_METHODS = new Set<string>([\n  \"task.route\", \"review.depth\", \"escalate.auto\", \"participant.leave\",\n]);\n\n// Read-only methods return workspace state but do not mutate it, so they are not\n// recorded in the audit chain -- recording a read would grow and re-link it.\nconst READ_ONLY_METHODS = new Set<string>([\n  \"workspace.describe\", \"audit.read\", \"audit.verify_chain\", \"audit.verify_receipt\",\n  // Submitting the chain to a transparency service reads it and sends it\n  // onward. Recording the submission would append to the very log being\n  // submitted, so the receipt would attest a chain one entry shorter.\n  \"audit.submit_to_scitt\",\n]);\n\n// Cap on a workspace's task.create idempotency map. Older keys are evicted, so\n// the dedup window is bounded rather than growing unbounded in a long-lived\n// workspace; a redelivery beyond this many intervening creates is not deduped.\nconst MAX_IDEMPOTENCY_KEYS = 10_000;\n\n// Largest envelope accepted, published in the workspace descriptor (SPEC S4.4).\nconst DEFAULT_MAX_ENVELOPE_BYTES = 1_048_576;\n\n// How deeply a request may nest, counting the envelope as level one. The\n// reference HTTP servers refuse deeper bodies before dispatch; the same limit\n// here means an in-process caller cannot send what the canonicaliser, the\n// copy of a recorded call and the two references handle differently.\nconst MAX_NESTING = 64;\n\nfunction withinNesting(value: unknown, limit: number): boolean {\n  const stack: Array<[unknown, number]> = [[value, 1]];\n  while (stack.length) {\n    const [node, depth] = stack.pop()!;\n    if (depth > limit) return false;\n    if (Array.isArray(node)) {\n      for (const v of node) stack.push([v, depth + 1]);\n    } else if (node !== null && typeof node === \"object\") {\n      for (const v of Object.values(node as Record<string, unknown>)) stack.push([v, depth + 1]);\n    }\n  }\n  return true;\n}\n\nexport interface CoordinatorOptions {\n  deterministicIds?: boolean;\n  deterministicClock?: boolean;\n  enableChain?: boolean;\n  requireSignatures?: boolean;\n  enforceStepUp?: boolean;\n  requireReadMembership?: boolean;\n  /** Largest envelope accepted (default 1 MiB), published in the descriptor. */\n  maxEnvelopeBytes?: number;\n  onAudit?: AuditListener;\n  onAutoEscalate?: (task: Task, to: ParticipantUri) => void;\n  /**\n   * Called when a write to the store fails, with the workspace and the\n   * version the write would have reached. When unset, the failure is written\n   * to stderr. The call itself has already succeeded in memory; the next\n   * write to the workspace carries what this one did not.\n   */\n  onStoreError?: (err: unknown, record: { id: string; version: number }) => void;\n  verifyOidcToken?: TokenVerifier;\n  verifyVc?: CredentialVerifier;\n  scittSubmitter?: ScittSubmitter;\n  verifyScittReceipt?: ScittReceiptVerifier;\n  routingPolicy?: RoutingPolicyFn;\n  reviewDepthPolicy?: ReviewDepthPolicyFn;\n  escalationPolicy?: EscalationPolicyFn;\n  defaultProfiles?: string[];\n  /**\n   * Persistence backend. Defaults to MemoryStore (no persistence).\n   * Pass SqliteStore or any other Store implementation to persist\n   * workspaces between process restarts. The Coordinator calls\n   * `store.load()` once when it starts, and after each call that adds to a\n   * workspace's log it calls `store.apply()` with what changed, or\n   * `store.save()` with the whole workspace when the store has no `apply`.\n   */\n  store?: Store;\n}\n\n// ============================================================\n//   Helpers\n// ============================================================\n\nfunction nowIso(clockMs?: number): string {\n  const d = clockMs === undefined ? new Date() : new Date(clockMs);\n  return d.toISOString().replace(/\\.(\\d{3})Z$/, \".$1Z\");\n}\n\nfunction missing(params: Record<string, unknown>, fields: string[]): string | null {\n  for (const f of fields) if (!(f in params)) return f;\n  return null;\n}\n\nfunction tagsError(p: Record<string, unknown>): { error: ReturnType<typeof rpcError> } | null {\n  const tags = p.tags;\n  if (tags !== undefined && (!Array.isArray(tags) || !tags.every((t) => typeof t === \"string\"))) {\n    return { error: rpcError(E.PARAMS, \"tags must be a list of strings\") };\n  }\n  return null;\n}\n\nfunction reviewRuleSupported(rule: string): boolean {\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return true;\n  if (rule.startsWith(\"quorum:\")) {\n    const arg = rule.slice(\"quorum:\".length);\n    return /^[0-9]+$/.test(arg) && parseInt(arg, 10) >= 1;\n  }\n  return false;\n}\n\nfunction reviewSatisfied(review: { requested_to: string[]; rule: string; decisions: { kind: string; reviewer: string }[] }): boolean {\n  const approvers = new Set(review.decisions.filter(d => d.kind === \"approve\").map(d => d.reviewer));\n  const rule = review.rule || \"any_one_approves\";\n  if (rule === \"all_approve\") {\n    // A broadcast-only review has no bounded reviewer set to wait on, so it\n    // degrades to first-approve.\n    const named = review.requested_to.filter(r => !(r.startsWith(\"workspace:\") || r.startsWith(\"group:\")));\n    if (named.length === 0) return approvers.size >= 1;\n    return named.every(r => approvers.has(r));\n  }\n  if (rule.startsWith(\"quorum:\")) return approvers.size >= parseInt(rule.slice(\"quorum:\".length), 10);\n  return approvers.size >= 1;  // any_one_approves (and the default)\n}\n\nfunction reply(env: Envelope, body: { result?: unknown; error?: { code: number; message: string; data?: unknown } }): Envelope {\n  const out: Envelope = { jsonrpc: \"2.0\", id: env.id };\n  if (body.error !== undefined) out.error = body.error;\n  else out.result = body.result;\n  return out;\n}\n\n/** The signed calls on a log, keyed by `signedDigest`. */\ninterface SignedIndex {\n  refused: Map<string, { seq: number; code: number }>;\n  accepted: Set<string>;\n}\n\nfunction indexSigned(index: SignedIndex, entry: AuditEntry): void {\n  const call = entryCall(entry);\n  if (!isSigned(call)) return;\n  let digest: string;\n  try { digest = signedDigest(call as Envelope); }\n  catch { return; /* an entry that cannot be canonicalised was altered; verify_chain reports it */ }\n  if (entry.outcome != null) index.refused.set(digest, { seq: entry.seq, code: entry.outcome.code });\n  else index.accepted.add(digest);\n}\n\n// ============================================================\n//   Handler type for profile modules\n// ============================================================\n\nexport type Handler = (params: Record<string, unknown>) => { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n\n// ============================================================\n//   Coordinator\n// ============================================================\n\nfunction isThenable(value: unknown): value is PromiseLike<void> {\n  return typeof (value as PromiseLike<void> | undefined)?.then === \"function\";\n}\n\n/** A deep copy where the value can be cloned, else the value itself. */\nfunction ownCopy<T>(value: T): T {\n  try {\n    return structuredClone(value);\n  } catch {\n    return value;\n  }\n}\n\n// States in which a task has been deliberately stopped. review.request and\n// task.complete both refuse these, so neither can revive a terminated task nor\n// bypass a pause.\nconst REVIEW_REQUEST_STOPPED: string[] = [\"cancelled\", \"superseded\", \"paused\"];\n\n/** What the store holds of one workspace, as far as a Coordinator knows. */\ninterface Persisted {\n  /** Audit entries the store holds. */\n  seq: number;\n  /** Write the whole workspace next: the store's copy is unknown. */\n  replace: boolean;\n  /** Idempotency keys written or removed since the last write. */\n  keys: Set<string>;\n  /** The time to stamp on the next write. */\n  updatedAt?: string;\n}\n\nexport class Coordinator {\n  readonly workspaces = new Map<WorkspaceId, Workspace>();\n  readonly options: CoordinatorOptions;\n  readonly ids: IdFactory;\n  readonly store: Store;\n  private wsVersions = new Map<WorkspaceId, number>();\n  private saveChains = new Map<WorkspaceId, Promise<void>>();\n  /** Records which objects change, for stores that implement `apply`. */\n  private readonly tracker: Tracker;\n  /** What the store holds of each workspace, as far as this instance knows. */\n  private persisted = new WeakMap<Workspace, Persisted>();\n  /** Workspaces with entries not yet written in the call being handled. */\n  private unflushed = new Set<Workspace>();\n  /** Workspaces with a write queued behind an async write in flight. */\n  private flushQueued = new Set<Workspace>();\n  private clockMs?: number;\n  private frozenNow?: string;\n  private auditListeners: AuditListener[] = [];\n  /**\n   * The signed calls on each workspace's log, by what their senders signed:\n   * recorded refusals with their seq and code, and accepted calls. Rebuilt\n   * from the log when missing, so a snapshot never carries it.\n   */\n  private signedIndexes = new WeakMap<Workspace, SignedIndex>();\n  /** Method handler registry; profiles plug into this. */\n  readonly handlers = new Map<string, Handler>();\n  /** Custom lapse-check function (whisper/1.0). Set by the whisper profile. */\n  checkWhisperLapses?: (workspaceId: string, now?: string) => Envelope[];\n  /** Typed method facade. Defined via getter in the constructor. */\n  readonly api!: CoordinatorApi;\n  /** @internal cached facade instance */\n  private _api?: CoordinatorApi;\n\n  constructor(options: CoordinatorOptions = {}) {\n    this.options = options;\n    this.store = options.store ?? new MemoryStore();\n    this.tracker = { enabled: typeof this.store.apply === \"function\", depth: 0 };\n    this.ids = new IdFactory(!!options.deterministicIds, 0n, 1_700_000_000_000);\n    if (options.deterministicClock) this.clockMs = 1_700_000_000_000;\n    if (options.onAudit) this.auditListeners.push(options.onAudit);\n\n    this.registerCoreHandlers();\n    this.registerProfileHandlers();\n\n    // Lazily-initialised typed facade. Constructed on first access so\n    // tests that don't use it pay nothing.\n    Object.defineProperty(this, \"api\", {\n      get: () => {\n        if (!this._api) this._api = makeApi(this);\n        return this._api;\n      },\n      enumerable: false,\n      configurable: true,\n    });\n\n    // Rehydrate any persisted state synchronously. Async stores can\n    // call `start()` instead; this fallback covers the common\n    // synchronous Memory/Sqlite path with no async setup needed.\n    try {\n      const loaded = this.store.load();\n      if (!isThenable(loaded)) {\n        this.applyRecords(loaded as WorkspaceRecord[]);\n      }\n    } catch {\n      /* fall through; caller must invoke start() */\n    }\n  }\n\n  /**\n   * Asynchronously hydrate workspaces from the store. Required only for\n   * stores whose `load()` returns a Promise. Idempotent.\n   */\n  async start(): Promise<void> {\n    const records = await this.store.load();\n    this.applyRecords(records);\n  }\n\n  private applyRecords(records: WorkspaceRecord[]): void {\n    // One restore for every record: restore replaces the workspaces it\n    // holds, so restoring record by record kept only the last.\n    this.wsVersions.clear();\n    this.restore(records.map(r => r.data));\n    for (const r of records) this.wsVersions.set(r.id, r.version);\n    // What was just loaded is what the store holds.\n    for (const ws of this.workspaces.values()) this.markWritten(ws);\n  }\n\n  /** A map for a workspace collection, tracked for stores that implement `apply`. */\n  private newMap<K, V>(): Map<K, V> {\n    return new TrackedMap<K, V>(this.tracker);\n  }\n\n  /** Record that the store holds this workspace exactly as it is in memory. */\n  private markWritten(ws: Workspace): void {\n    for (const name of COLLECTIONS) {\n      const map = ws[name];\n      if (map instanceof TrackedMap) map.dirty.clear();\n    }\n    this.persisted.set(ws, { seq: ws.audit.length, replace: false, keys: new Set() });\n  }\n\n  /**\n   * What the store holds of a workspace. A workspace this instance did not\n   * create or load, such as one an application put in `workspaces` itself,\n   * or one whose maps an application replaced, is tracked from here on and\n   * written whole once.\n   */\n  private persistedOf(ws: Workspace): Persisted {\n    let p = this.persisted.get(ws);\n    let untracked = false;\n    for (const name of COLLECTIONS) {\n      const map = ws[name] as Map<string, unknown>;\n      if (map instanceof TrackedMap && map.tracker === this.tracker) continue;\n      untracked = true;\n      const tracked = new TrackedMap<string, unknown>(this.tracker);\n      for (const [key, value] of Map.prototype.entries.call(map) as IterableIterator<[string, unknown]>) {\n        tracked.set(key, value);\n      }\n      (ws as unknown as Record<string, unknown>)[name] = tracked;\n    }\n    if (!p || untracked) {\n      p = { seq: p?.seq ?? 0, replace: true, keys: new Set(), updatedAt: p?.updatedAt };\n      this.persisted.set(ws, p);\n    }\n    return p;\n  }\n\n  /** Record that a task.create idempotency key was written or removed. */\n  private markKey(ws: Workspace, key: string): void {\n    if (this.tracker.enabled) this.persistedOf(ws).keys.add(key);\n  }\n\n  /** After an entry is appended: write now, or when the call being handled ends. */\n  private persist(ws: Workspace): void {\n    if (!this.tracker.enabled) {\n      this.persistSnapshot(ws);\n      return;\n    }\n    // One clock reading per entry, where earlier releases read it to stamp\n    // the snapshot, so a deterministic clock gives the same times as before.\n    this.persistedOf(ws).updatedAt = this.now();\n    if (this.tracker.depth > 0) this.unflushed.add(ws);\n    else this.flush(ws);\n  }\n\n  private flushUnflushed(): void {\n    if (!this.unflushed.size) return;\n    const list = [...this.unflushed];\n    this.unflushed.clear();\n    for (const ws of list) this.flush(ws);\n  }\n\n  /** Write what changed in one workspace since its last write. */\n  private flush(ws: Workspace): void {\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      // An async write is in flight. One more write follows it, built when it\n      // runs, so it carries everything that changed until then.\n      if (this.flushQueued.has(ws)) return;\n      this.flushQueued.add(ws);\n      this.chainWrite(ws.id, pending.then(() => {\n        this.flushQueued.delete(ws);\n        return this.writeChange(ws);\n      }));\n      return;\n    }\n    const result = this.writeChange(ws);\n    if (result) this.chainWrite(ws.id, result);\n  }\n\n  private chainWrite(id: WorkspaceId, work: Promise<void>): void {\n    // writeChange reports its own failures; this only keeps the chain alive.\n    const guarded = work.catch(() => undefined);\n    this.saveChains.set(id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(id) === guarded) this.saveChains.delete(id);\n    });\n  }\n\n  private writeChange(ws: Workspace): Promise<void> | void {\n    const p = this.persistedOf(ws);\n    let change: StoreChange | undefined;\n    try {\n      change = this.takeChange(ws, p);\n    } catch (err) {\n      // What was taken is unknown, so the next write carries the whole workspace.\n      p.replace = true;\n      this.reportStoreError(err, { id: ws.id, version: ws.audit.length });\n      return;\n    }\n    if (!change) return;\n    const taken = change;\n    const done = () => {\n      p.seq = taken.version;\n      if (taken.replace) p.replace = false;\n    };\n    const failed = (err: unknown) => {\n      this.giveBack(ws, p, taken);\n      this.reportStoreError(err, { id: taken.id, version: taken.version });\n    };\n    let result: PromiseLike<void> | void;\n    try {\n      result = this.store.apply!(taken);\n    } catch (err) {\n      failed(err);\n      return;\n    }\n    if (isThenable(result)) return Promise.resolve(result).then(done, failed);\n    done();\n  }\n\n  /** The change since the last write, taking the recorded keys with it. */\n  private takeChange(ws: Workspace, p: Persisted): StoreChange | undefined {\n    const replace = p.replace;\n    const objects: Record<string, Record<string, unknown>> = {};\n    for (const name of COLLECTIONS) {\n      const map = ws[name] as unknown as TrackedMap<string, unknown>;\n      if (replace) {\n        const all: Record<string, unknown> = {};\n        for (const [key, value] of Map.prototype.entries.call(map) as IterableIterator<[string, unknown]>) {\n          all[key] = value;\n        }\n        objects[name] = all;\n      } else if (map.dirty.size) {\n        const changed: Record<string, unknown> = {};\n        for (const key of map.dirty) changed[key] = map.peek(key) ?? null;\n        objects[name] = changed;\n      }\n      map.dirty.clear();\n    }\n    if (replace) {\n      objects[IDEMPOTENCY_KEYS] = { ...ws.idempotency_keys };\n    } else if (p.keys.size) {\n      const changed: Record<string, unknown> = {};\n      for (const key of p.keys) changed[key] = ws.idempotency_keys[key] ?? null;\n      objects[IDEMPOTENCY_KEYS] = changed;\n    }\n    p.keys.clear();\n    const entries = ws.audit.slice(replace ? 0 : p.seq);\n    if (!replace && !entries.length && !Object.keys(objects).length) return undefined;\n    return {\n      id: ws.id,\n      base: replace ? 0 : p.seq,\n      version: ws.audit.length,\n      updated_at: p.updatedAt ?? ws.audit[ws.audit.length - 1]?.arrived ?? ws.created,\n      meta: this.metaOf(ws),\n      entries,\n      objects,\n      ...(replace ? { replace: true } : {}),\n    };\n  }\n\n  /** A failed write's keys go back, so the next write carries them again. */\n  private giveBack(ws: Workspace, p: Persisted, change: StoreChange): void {\n    if (change.replace) {\n      p.replace = true;\n      return;\n    }\n    for (const [name, items] of Object.entries(change.objects)) {\n      if (name === IDEMPOTENCY_KEYS) {\n        for (const key of Object.keys(items)) p.keys.add(key);\n        continue;\n      }\n      const map = (ws as unknown as Record<string, unknown>)[name];\n      if (map instanceof TrackedMap) for (const key of Object.keys(items)) map.dirty.add(key);\n    }\n  }\n\n  /** Persist the whole workspace, for a store that implements only `save`. */\n  private persistSnapshot(ws: Workspace): void {\n    const next = (this.wsVersions.get(ws.id) ?? 0) + 1;\n    this.wsVersions.set(ws.id, next);\n    let record: WorkspaceRecord;\n    try {\n      record = { id: ws.id, data: this.snapshotOf(ws), version: next, updated_at: this.now() };\n    } catch {\n      return;\n    }\n\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      this.trackSave(pending.then(() => this.store.save(record)), record);\n      return;\n    }\n    let result: PromiseLike<void> | void;\n    try {\n      result = this.store.save(record);\n    } catch (err) {\n      this.reportStoreError(err, record);\n      return;\n    }\n    if (isThenable(result)) {\n      this.trackSave(Promise.resolve(result), record);\n    }\n  }\n\n  private trackSave(save: Promise<void>, record: WorkspaceRecord): void {\n    const guarded = save.catch(err => this.reportStoreError(err, record));\n    this.saveChains.set(record.id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(record.id) === guarded) {\n        this.saveChains.delete(record.id);\n      }\n    });\n  }\n\n  private reportStoreError(err: unknown, record: { id: string; version: number }): void {\n    if (this.options.onStoreError) {\n      try {\n        this.options.onStoreError(err, { id: record.id, version: record.version });\n      } catch {\n        void 0;\n      }\n      return;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    console.error(`chap coordinator: writing workspace ${record.id} to the store failed: ${message}`);\n  }\n\n  async drainSaves(): Promise<void> {\n    while (this.saveChains.size) {\n      await Promise.allSettled([...this.saveChains.values()]);\n    }\n  }\n\n  // -- lifecycle -----------------------------------------------------\n\n  private advanceClock(): string {\n    if (this.clockMs !== undefined) {\n      this.clockMs += 1000;\n      return nowIso(this.clockMs);\n    }\n    return nowIso();\n  }\n\n  now(): string {\n    return this.frozenNow ?? this.advanceClock();\n  }\n\n  onAudit(listener: AuditListener): () => void {\n    this.auditListeners.push(listener);\n    return () => {\n      const i = this.auditListeners.indexOf(listener);\n      if (i >= 0) this.auditListeners.splice(i, 1);\n    };\n  }\n\n  /** Convenience: get a workspace by id, or undefined. */\n  getWorkspace(id: WorkspaceId): Workspace | undefined {\n    return this.workspaces.get(id);\n  }\n\n  // ----- authorisation preconditions -----\n\n  /**\n   * Assert that `sender` is a joined member of `ws`. Returns an error\n   * fragment if not, else null. Every actor-action method runs this on\n   * its `from` so a decision, completion, or review request can never\n   * be attributed to a participant who never joined. See\n   * SPECIFICATION.md S6.3 and the `unknown_participant` condition in\n   * S13.3. (The published spec assigns -32403; the reference\n   * implementations use NOT_AUTHORISED -32011 because -32403 already\n   * denotes OIDC_TOKEN_INVALID in their private range. The spec/impl\n   * error-table divergence is tracked separately.)\n   */\n  private requireMember(ws: Workspace, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    // A `from` that is not a string names nobody. It is answered in fixed\n    // words, so both references refuse it alike whatever was sent.\n    if (typeof sender !== \"string\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"Not a workspace member: from is not a participant URI\") };\n    }\n    if (!ws.members.has(sender)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${sender}`) };\n    }\n    return null;\n  }\n\n  /**\n   * Assert that `sender` was addressed in the task's review. Applied to\n   * review-decision methods (decide.* and abstain.declare): to act on a\n   * review you must be one of the reviewers it was addressed to (the\n   * `to` set on review.request). Membership is the floor; this is the\n   * eligibility ceiling for decisions. Returns an error fragment if not\n   * eligible, else null.\n   */\n  private requireReviewer(task: Task, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    const review = task.review;\n    if (!review || !review.requested_to || review.requested_to.length === 0) {\n      // No recorded reviewer set: fall back to the membership floor,\n      // which the caller has already enforced.\n      return null;\n    }\n    // A broadcast-scoped reviewer (workspace:/group: URI) is satisfied by\n    // any workspace member; the membership floor already passed. Note the\n    // coordinator does not model group membership: a group: target means\n    // \"any member\", not \"any member of that group\" (deployments needing\n    // true group restriction enforce it externally). Keeps the documented\n    // `to: workspace:<id>` broadcast pattern working.\n    if (review.requested_to.some((r) => typeof r === \"string\" && (r.startsWith(\"workspace:\") || r.startsWith(\"group:\")))) {\n      return null;\n    }\n    if (typeof sender !== \"string\" || !review.requested_to.includes(sender as ParticipantUri)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not an addressed reviewer for this task: ${String(sender)}`) };\n    }\n    return null;\n  }\n\n  /** Serialise all workspaces to a JSON-safe structure for persistence. */\n  snapshot(): unknown {\n    const out: Array<Record<string, unknown>> = [];\n    for (const ws of this.workspaces.values()) out.push(this.snapshotOf(ws));\n    return out;\n  }\n\n  /** The workspace's own fields: everything except its collections and log. */\n  private metaOf(ws: Workspace): Record<string, unknown> {\n    return {\n      id:           ws.id,\n      created:      ws.created,\n      state:        ws.state,\n      profiles:     ws.profiles,\n      mode:         ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      routing_policy_uri: ws.routing_policy_uri,\n      step_up_window_sec: ws.step_up_window_sec,\n      min_acr:      ws.min_acr,\n      chain_head:   ws.chain_head,\n      chain_enabled: ws.chain_enabled,\n    };\n  }\n\n  /** One workspace as `snapshot()` holds it. Reads nothing as a change. */\n  private snapshotOf(ws: Workspace): Record<string, unknown> {\n    const { chain_head, chain_enabled, ...own } = this.metaOf(ws);\n    return {\n      ...own,\n      members:         Array.from(rawValues(ws.members)),\n      tasks:           Array.from(rawValues(ws.tasks)),\n      overrides:       Array.from(rawValues(ws.overrides)),\n      whispers:        Array.from(rawValues(ws.whispers)),\n      deliberations:   Array.from(rawValues(ws.deliberations)),\n      handoffs:        Array.from(rawValues(ws.handoffs)),\n      snapshots:       Array.from(rawValues(ws.snapshots)),\n      route_decisions: Array.from(rawValues(ws.route_decisions)),\n      idempotency_keys: { ...ws.idempotency_keys },\n      audit:           ws.audit,\n      chain_head,\n      chain_enabled,\n    };\n  }\n\n  /** Restore from a snapshot produced by ``snapshot()``. Replaces\n   *  any existing in-memory workspaces. */\n  restore(data: unknown): void {\n    this.workspaces.clear();\n    this.unflushed.clear();\n    if (!Array.isArray(data)) return;\n    for (const w of data as Array<Record<string, unknown>>) {\n      // One workspace that cannot be rebuilt is skipped, with a warning, so\n      // the others still load.\n      let ws: Workspace;\n      try {\n        ws = this.rebuild(w);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        console.warn(`chap coordinator: workspace ${String(w?.id)} could not be restored: ${message}`);\n        continue;\n      }\n      this.workspaces.set(ws.id, ws);\n      // Restored from data the store may not hold: the next write replaces\n      // the store's copy whole. Loading from the store marks it written.\n      for (const name of COLLECTIONS) (ws[name] as TrackedMap<unknown, unknown>).dirty.clear();\n      this.persisted.set(ws, { seq: 0, replace: true, keys: new Set() });\n    }\n  }\n\n  /** One workspace from a snapshot entry, its maps tracked. */\n  private rebuild(w: Record<string, unknown>): Workspace {\n    const ws: Workspace = {\n      id: w.id as WorkspaceId,\n      created: w.created as string,\n      state: (w.state as Workspace[\"state\"]) ?? \"active\",\n      profiles: (w.profiles as string[]) ?? [],\n      mode: (w.mode as Mode) ?? \"trial\",\n      mode_ceiling: (w.mode_ceiling as Mode) ?? \"production\",\n      routing_policy_uri: w.routing_policy_uri as string | undefined,\n      step_up_window_sec: (w.step_up_window_sec as number) ?? 300,\n      min_acr: w.min_acr as string | undefined,\n      members: this.newMap(),\n      tasks: this.newMap(),\n      overrides: this.newMap(),\n      whispers: this.newMap(),\n      deliberations: this.newMap(),\n      handoffs: this.newMap(),\n      snapshots: this.newMap(),\n      route_decisions: this.newMap(),\n      idempotency_keys: (w.idempotency_keys as Record<string, string>) ?? {},\n      audit: (w.audit as AuditEntry[]) ?? [],\n      chain_head: w.chain_head as string | undefined,\n      chain_enabled: !!w.chain_enabled,\n    };\n    for (const m of (w.members as Member[]) ?? []) {\n      // Defensive: ensure required collections exist even on older snapshots.\n      if (!Array.isArray(m.keys)) m.keys = [];\n      if (m.paused === undefined) m.paused = false;\n      ws.members.set(m.uri, m);\n    }\n    for (const t of (w.tasks as Task[]) ?? []) ws.tasks.set(t.id, t);\n    for (const o of (w.overrides as OverrideArtefact[]) ?? []) ws.overrides.set(o.id, o);\n    // The dynamic profile collections may not be present on legacy snapshots.\n    for (const x of (w.whispers as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.whispers.set(x.id, x as never);\n    for (const x of (w.deliberations as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.deliberations.set(x.id, x as never);\n    for (const x of (w.handoffs as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.handoffs.set(x.id, x as never);\n    for (const x of (w.snapshots as Array<{ id: string } & Record<string, unknown>>) ?? []) {\n      // Normalize the former flat store representation only on restore.\n      // New snapshots are stored and emitted in the canonical wire shape.\n      const content = structuredClone((x.content ?? {\n        workspace: x.workspace, audit_seq: x.audit_seq,\n        include: x.include, state: x.state,\n        ...(x.label ? { label: x.label } : {}),\n      }) as SnapshotArtefact[\"content\"]);\n      if (!x.content) {\n        // Legacy in-memory projections can contain undefined optional\n        // fields; full bodies from older stores are not snapshot slices.\n        const oldState = content.state;\n        const state: Record<string, unknown> = {};\n        for (const key of [\"mode_ceiling\", \"routing_policy_uri\", \"audit_seq\"]) {\n          if (oldState[key] != null && oldState[key] !== \"\") state[key] = oldState[key];\n        }\n        for (const [key, fields] of [\n          [\"members\", [\"uri\", \"type\", \"role\", \"scopes\"]],\n          [\"open_tasks\", [\"id\", \"kind\", \"state\", \"assignee\"]],\n        ] as const) {\n          const items = oldState[key];\n          if (Array.isArray(items) && items.length) {\n            state[key] = items.map(item => Object.fromEntries(fields\n              .filter(field => item[field] != null && item[field] !== \"\"\n                && (!Array.isArray(item[field]) || item[field].length > 0))\n              .map(field => [field, item[field]])));\n          }\n        }\n        content.state = state;\n      }\n      ws.snapshots.set(x.id, {\n        id: x.id, kind: \"snapshot\",\n        produced_by: (x.produced_by ?? x.by) as string,\n        produced_at: (x.produced_at ?? x.ts) as string,\n        content_hash: (x.content_hash as string | undefined) ?? contentHash(content),\n        content,\n      });\n    }\n    for (const x of (w.route_decisions as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.route_decisions.set(x.id, x as never);\n    return ws;\n  }\n\n  // -- dispatch ------------------------------------------------------\n\n  dispatch(envelope: Envelope): Envelope {\n    this.frozenNow = this.advanceClock();\n    this.tracker.depth++;\n    try {\n      const response = this._dispatch(envelope);\n      if (response.error) this.recordRefusal(envelope, response.error);\n      return response;\n    } finally {\n      // One write per call, with everything the call changed, made before\n      // dispatch returns.\n      if (--this.tracker.depth === 0) this.flushUnflushed();\n      this.frozenNow = undefined;\n    }\n  }\n\n  private _dispatch(envelope: Envelope): Envelope {\n    // SPECIFICATION 10.1 fixes the order of the checks below, because which\n    // refusal a call receives decides whether it is recorded. First the\n    // request itself, none of whose refusals is recorded.\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\" || !envelope.method) {\n      return reply(envelope, { error: rpcError(E.REQUEST, \"Invalid JSON-RPC 2.0 request\") });\n    }\n    if (!withinNesting(envelope, MAX_NESTING)) {\n      return reply(envelope, { error: rpcError(E.REQUEST, `Envelope nests deeper than ${MAX_NESTING} levels`) });\n    }\n    const maxBytes = this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES;\n    // Canonicalised once: the length is what the size limit measures, and a\n    // request that cannot be canonicalised is refused below, once its method\n    // is known to exist.\n    let size = 0;\n    let canonicalError: unknown;\n    try { size = canonicalize(envelope).length; } catch (e) { canonicalError = e; }\n    if (size > maxBytes) {\n      return reply(envelope, { error: rpcError(E.REQUEST,\n        `Envelope exceeds max_envelope_bytes (${size} > ${maxBytes})`) });\n    }\n    const method = envelope.method;\n    // JSON-RPC params, when present, must be a structured value (object).\n    // CHAP methods use by-name params; reject non-object params cleanly as\n    // Invalid params for parity with the Python reference.\n    const rawParams = envelope.params;\n    if (\n      rawParams !== undefined &&\n      rawParams !== null &&\n      (typeof rawParams !== \"object\" || Array.isArray(rawParams))\n    ) {\n      return reply(envelope, { error: rpcError(E.PARAMS, \"Invalid params: expected an object\") });\n    }\n    const params = (rawParams ?? {}) as Record<string, unknown>;\n    const handler = this.handlers.get(method);\n    if (!handler) {\n      return reply(envelope, { error: rpcError(E.METHOD, `Unknown method: ${method}`) });\n    }\n    if (canonicalError !== undefined) {\n      const msg = canonicalError instanceof Error ? canonicalError.message : String(canonicalError);\n      return reply(envelope, { error: rpcError(E.PARAMS, msg) });\n    }\n\n    // SPECIFICATION 10.1: a signed request whose signed content matches a\n    // recorded refusal is answered with that refusal and not evaluated again.\n    // The log publishes a refused request, signature and all, so without this\n    // anyone who can read the log could send it again once whatever refused\n    // it had changed, and it would take effect in its signer's name.\n    if (isSigned(envelope)) {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const prior = this.signedIndex(ws).refused.get(signedDigest(envelope));\n        if (prior) {\n          return reply(envelope, { error: rpcError(prior.code,\n            `Refused at seq ${prior.seq}; a refused request is not evaluated again`,\n            { refused_at_seq: prior.seq }) });\n        }\n      }\n    }\n\n    // security-signed/1.0: verify top-level sig if required.\n    // participant.join and workspace.create are bootstrap operations that\n    // run before any signing key is registered for the actor, so they cannot\n    // be signature-verified; every other method must verify.\n    if (this.options.requireSignatures && method !== \"participant.join\" && method !== \"workspace.create\") {\n      const sigErr = this.verifySignature(envelope);\n      if (sigErr) return reply(envelope, { error: sigErr });\n      if (method === \"participant.rotate_key\") {\n        const signingKid = (envelope.sig as string).split(\":\")[1];\n        const oldKid = params.old_kid as string | undefined;\n        if (oldKid !== undefined && signingKid !== oldKid) {\n          return reply(envelope, { error: rpcError(E.SIG_ROTATION_KEY_MISMATCH,\n            \"Rotation must be signed with the old key\") });\n        }\n      }\n    }\n\n    // identity-oidc/1.0: step-up freshness on privileged methods.\n    if (this.options.enforceStepUp && PRIVILEGED_METHODS.has(method)) {\n      const stale = this.checkStepUp(params);\n      if (stale) return reply(envelope, { error: stale });\n    }\n\n    // SPECIFICATION 15.4: refuse a method whose owning profile the workspace\n    // does not advertise. The refusal is -32601, the same answer a coordinator\n    // that never implemented the method would give, so a deployment cannot\n    // tell from outside which of the two it is talking to. The detail rides in\n    // `data` for an operator reading the log.\n    {\n      const gate = this.profileGate(method, params);\n      if (gate) return reply(envelope, { error: gate });\n    }\n\n    // control/1.0 and deliberation/1.0: these operations are privileged and\n    // MUST be performed by a workspace member. Control is the governance\n    // \"emergency brake\"; deliberation open/close set the vote parameters and\n    // finalize the tally. Without this floor a non-member could resume a\n    // paused workspace, raise the mode ceiling, or open and close a\n    // deliberation to finalize an outcome early. (The per-voter eligibility\n    // check in deliberate.vote is separate and still applies. A stricter role\n    // gate than membership is layered on top via an identity-* profile.)\n    // The routing methods and participant.leave sit under the same floor\n    // (SPECIFICATION 6.3.1): without it a non-member could reassign a task\n    // with task.route, or write a leave to the log under any name.\n    if (method.startsWith(\"control.\") || method.startsWith(\"deliberate.\") || method.startsWith(\"handoff.\") || method.startsWith(\"whisper.\") || MEMBER_ONLY_METHODS.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const notMember = this.requireMember(ws, params.from);\n        if (notMember) return reply(envelope, { error: notMember.error });\n      }\n    }\n\n    // control/1.0 workspace-paused gate (S6 -32063).\n    const exempt = new Set([\"workspace.create\", \"workspace.describe\",\n                            \"control.resume\", \"audit.read\",\n                            \"participant.join\", \"participant.leave\"]);\n    if (!exempt.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      if (typeof wsId === \"string\") {\n        const ws = this.workspaces.get(wsId);\n        if (ws && ws.state === \"paused\") {\n          return reply(envelope, { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Workspace ${wsId} is paused`) });\n        }\n      }\n    }\n\n    // task.create idempotency: a repeat carrying a seen idempotency_key returns\n    // the original task rather than creating (or recording) a duplicate -- safe\n    // for at-least-once redelivery.\n    if (method === \"task.create\") {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      const key = params.idempotency_key;\n      if (ws && typeof key === \"string\") {\n        const existingId = ws.idempotency_keys[key];\n        const task = existingId ? ws.tasks.get(existingId) : undefined;\n        if (task) return reply(envelope, { result: { task_id: existingId, state: task.state } });\n      }\n    }\n\n    let out: { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n    try {\n      // The handler works on its own copy of what the caller sent, and the\n      // caller gets a copy of the result, so no object is shared between the\n      // workspace and the caller. A caller that reused or changed one later\n      // would change the workspace outside any call, where no change is\n      // recorded for the store.\n      out = handler(ownCopy(params));\n    } catch (e) {\n      // Keep the wire message generic; a handler exception may carry internal\n      // detail that should not be disclosed to callers. Specifics stay in the\n      // data field for operators.\n      const msg = e instanceof Error ? e.message : String(e);\n      return reply(envelope, { error: rpcError(E.INTERNAL, \"Internal error\", { detail: msg }) });\n    }\n    if (out.error) return reply(envelope, { error: out.error });\n\n    // Record audit on success. A refusal is weighed in dispatch(), once this\n    // returns, against the rule in SPECIFICATION 10.1.\n    const wsId = params.workspace as string | undefined;\n    if (typeof wsId === \"string\" && !READ_ONLY_METHODS.has(method)) {\n      const ws = this.workspaces.get(wsId);\n      if (ws) this.recordAudit(ws, envelope);\n    }\n    return reply(envelope, { result: ownCopy(out.result) });\n  }\n\n  // -- audit ---------------------------------------------------------\n\n  recordAudit(ws: Workspace, envelope: Envelope): void {\n    this.appendEntry(ws, { envelope: JSON.parse(JSON.stringify(envelope)) as Envelope });\n  }\n\n  /**\n   * SPECIFICATION 10.1: record a refused call when it is a governed attempt.\n   * The caller must be a member of an existing workspace, the call must be a\n   * JSON-RPC call for a method that is not a read, and the refusal must be one\n   * `refusalIsRecorded` names. The request is kept as it arrived, so a\n   * signature on it still verifies. Every call that reaches a recorded refusal\n   * has passed the canonical check, so it can be hashed into the chain.\n   */\n  private recordRefusal(envelope: Envelope, error: { code: number; data?: unknown }): void {\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\") return;\n    const method = envelope.method;\n    if (READ_ONLY_METHODS.has(method)) return;\n    if (!refusalIsRecorded(method, error, PRIVILEGED_METHODS)) return;\n    const raw = envelope.params;\n    if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return;\n    const params = raw as Record<string, unknown>;\n    const ws = typeof params.workspace === \"string\" ? this.workspaces.get(params.workspace) : undefined;\n    if (!ws || typeof params.from !== \"string\" || !ws.members.has(params.from)) return;\n    // A signed copy of a call already on the log is not a new attempt by its\n    // signer. A copy of a refusal was answered with it, and a copy of a call\n    // that took effect repeats a call its signer made once. Anyone who can\n    // read the log can send either.\n    if (isSigned(envelope)) {\n      const index = this.signedIndex(ws);\n      const digest = signedDigest(envelope);\n      if (index.refused.has(digest) || index.accepted.has(digest)) return;\n    }\n    this.appendEntry(ws, {\n      request: JSON.parse(JSON.stringify(envelope)) as Envelope,\n      outcome: { status: \"refused\", code: error.code },\n    });\n  }\n\n  /** The signed calls on this workspace's log, built from the log when missing. */\n  private signedIndex(ws: Workspace): SignedIndex {\n    let index = this.signedIndexes.get(ws);\n    if (!index) {\n      index = { refused: new Map(), accepted: new Set() };\n      for (const entry of ws.audit) indexSigned(index, entry);\n      this.signedIndexes.set(ws, index);\n    }\n    return index;\n  }\n\n  private appendEntry(ws: Workspace, record: Pick<AuditEntry, \"envelope\" | \"request\" | \"outcome\">): void {\n    const entry: AuditEntry = { seq: ws.audit.length, arrived: this.now(), ...record };\n    if (ws.chain_enabled || this.options.enableChain) {\n      const prev = ws.chain_head ?? ZERO_HASH;\n      entry.prev_hash = prev;\n      ws.chain_head = linkHash(entryRecord(entry), prev);\n    }\n    ws.audit.push(entry);\n    const index = this.signedIndexes.get(ws);\n    if (index) indexSigned(index, entry);\n    for (const l of this.auditListeners) {\n      try { l(ws, entry); } catch { /* listeners never break dispatch */ }\n    }\n    this.persist(ws);\n  }\n\n  // -- signature verification (security-signed/1.0) -----------------\n\n  private verifySignature(envelope: Envelope): { code: number; message: string; data?: unknown } | null {\n    const sig = envelope.sig;\n    if (!sig || typeof sig !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Missing top-level `sig` field\");\n    }\n    const parts = sig.split(\":\");\n    if (parts.length !== 3 || parts[0] !== \"ed25519\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Malformed signature tag\");\n    }\n    const kid = parts[1];\n    const params = (envelope.params ?? {}) as Record<string, unknown>;\n    const sender = params.from;\n    const wsId = params.workspace;\n    const rawTs = params.ts;\n    // Fail closed: a signature is present and requireSignatures is on, so it\n    // must verify. If we cannot resolve the context needed to verify it,\n    // reject rather than skip -- a signature we cannot check must never be\n    // treated as valid. A `from` or `workspace` that is not a string names\n    // nothing, so it counts as missing.\n    if (typeof sender !== \"string\" || !sender || typeof wsId !== \"string\" || !wsId) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: missing from/workspace\");\n    }\n    // The key is chosen by the time the sender gives. A `ts` that is not a\n    // string gives no time, so no key can be chosen for it.\n    if (rawTs !== undefined && rawTs !== null && typeof rawTs !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: ts must be a string\");\n    }\n    const ts = (rawTs as string | null | undefined) ?? this.now();\n    const ws = this.workspaces.get(wsId);\n    if (!ws) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: unknown workspace\");\n    }\n    const member = ws.members.get(sender);\n    if (!member) return rpcError(E.SIG_KEY_NOT_FOUND, `No member: ${sender}`);\n\n    // Revocation is present-tense: a revoked key must be rejected for any\n    // live request regardless of the envelope's self-asserted `ts`. Checking\n    // against `ts` alone lets a holder of a revoked key backdate `ts` to\n    // before the revocation and still be accepted. Use the coordinator's\n    // trusted clock for the revocation decision.\n    const now = this.now();\n    if (member.keys.some(k => k.kid === kid && k.revoked_at !== undefined && now >= k.revoked_at)) {\n      return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n    }\n    // Expiry is present-tense for the same reason: a rotated-out key\n    // (valid_until set to the rotation time, but never explicitly revoked) must\n    // not sign live requests. Selecting it by the self-asserted `ts` alone lets\n    // its holder backdate `ts` to before valid_until and keep using it. Judge\n    // expiry by the trusted clock.\n    if (member.keys.some(k => k.kid === kid && k.valid_until !== undefined && now >= k.valid_until)) {\n      return rpcError(E.SIG_KEY_NOT_FOUND, `Key ${kid} is no longer valid`);\n    }\n\n    const key = this.lookupKey(member, kid, ts);\n    if (!key) {\n      const revoked = member.keys.find(k => k.kid === kid && k.revoked_at);\n      if (revoked) return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n      return rpcError(E.SIG_KEY_NOT_FOUND, `No key ${kid} valid at ${ts} for ${sender}`);\n    }\n\n    // Verify\n    try {\n      const stripped: Envelope = JSON.parse(JSON.stringify(envelope));\n      delete stripped.sig;\n      const canonical = canonicalize(stripped);\n      const pub = publicKeyFromJwk(key.jwk);\n      if (!verifyEnvelope(canonical, sig, pub)) {\n        return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n      }\n      return null;\n    } catch {\n      // An exception here (malformed key or signature bytes) means the\n      // signature cannot be verified: fail closed with the same generic code\n      // as the Python reference, and do not leak the exception detail.\n      return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n    }\n  }\n\n  /** Lookup the key valid for a given participant at a given time. */\n  lookupKey(member: Member, kid: string, ts: string): KeyRecord | null {\n    for (const k of member.keys) {\n      if (k.kid !== kid) continue;\n      if (k.revoked_at !== undefined && ts >= k.revoked_at) continue;\n      if (ts < k.valid_from) continue;\n      if (k.valid_until !== undefined && ts >= k.valid_until) continue;\n      return k;\n    }\n    return null;\n  }\n\n  // -- step-up (identity-oidc/1.0) -----------------------------------\n\n  /**\n   * The SPECIFICATION 15.4 check, per method rather than per namespace.\n   *\n   * Core is always present, so a core method is never gated. The reads in\n   * ALWAYS_AVAILABLE are never gated either: a workspace must be able to ask\n   * what it is and to check its own chain, and `audit.verify_chain` belongs to\n   * `audit-scitt/1.0` while chaining also turns on through an option, so\n   * gating it would let a workspace write a hash-linked chain it is refused\n   * permission to verify.\n   */\n  private profileGate(method: string, params: Record<string, unknown>) {\n    const owner = OWNING_PROFILE[method];\n    if (owner === undefined || owner === \"core/1.0\" || ALWAYS_AVAILABLE.has(method)) return undefined;\n    const wsId = params.workspace as string | undefined;\n    const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n    if (!ws) return undefined;\n    // Match on the profile name, so a workspace advertising a later minor\n    // version of the owning profile still carries its methods.\n    const name = owner.split(\"/\")[0];\n    if (ws.profiles.some(p => p === name || p.startsWith(name + \"/\"))) return undefined;\n    return rpcError(E.METHOD, `Unknown method: ${method}`,\n                    { profile: owner, advertised: [...ws.profiles] });\n  }\n\n  private checkStepUp(params: Record<string, unknown>): { code: number; message: string; data?: unknown } | null {\n    // A `from` or `workspace` that is not a string names no member to hold to\n    // step-up; the membership check answers such a call.\n    const wsId = params.workspace;\n    const sender = params.from;\n    if (typeof wsId !== \"string\" || typeof sender !== \"string\" || !wsId || !sender) return null;\n    const ws = this.workspaces.get(wsId);\n    if (!ws) return null;\n    const member = ws.members.get(sender);\n    if (!member) return null;\n    // Step-up applies to OIDC actors -- humans, or any member with an OIDC\n    // binding. Agents and services authenticate out of band (SPIFFE/X.509),\n    // so they are not held to an auth_time window here.\n    if (member.type !== \"human\" && member.oidc_sub === undefined) return null;\n    if (member.oidc_auth_time === undefined) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec,\n      });\n    }\n    const nowSec = Math.floor(Date.now() / 1000);\n    const age = nowSec - member.oidc_auth_time;\n    if (age > ws.step_up_window_sec) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec, age_sec: age,\n      });\n    }\n    if (ws.min_acr !== undefined && member.oidc_acr !== ws.min_acr) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up required: acr below the workspace minimum\", {\n        required_acr: ws.min_acr, acr: member.oidc_acr,\n      });\n    }\n    return null;\n  }\n\n  // ==========================================================\n  //   Registration\n  // ==========================================================\n\n  private registerCoreHandlers(): void {\n    this.handlers.set(\"workspace.create\",       p => this.opWorkspaceCreate(p));\n    this.handlers.set(\"workspace.describe\",     p => this.opWorkspaceDescribe(p));\n    this.handlers.set(\"workspace.set_profiles\", p => this.opWorkspaceSetProfiles(p));\n    this.handlers.set(\"participant.join\",       p => this.opParticipantJoin(p));\n    this.handlers.set(\"participant.leave\",      p => this.opParticipantLeave(p));\n    this.handlers.set(\"task.create\",            p => this.opTaskCreate(p));\n    this.handlers.set(\"task.update\",            p => this.opTaskUpdate(p));\n    this.handlers.set(\"task.complete\",          p => this.opTaskComplete(p));\n    this.handlers.set(\"audit.read\",             p => this.opAuditRead(p));\n    this.handlers.set(\"review.request\",         p => this.opReviewRequest(p));\n    this.handlers.set(\"decide.approve\",         p => this.opDecide(p, \"approve\"));\n    this.handlers.set(\"decide.reject\",          p => this.opDecide(p, \"reject\"));\n    this.handlers.set(\"decide.override\",        p => this.opDecideOverride(p));\n    this.handlers.set(\"abstain.declare\",        p => this.opAbstainDeclare(p));\n    this.handlers.set(\"escalate.raise\",         p => this.opEscalateRaise(p));\n  }\n\n  private registerProfileHandlers(): void {\n    // Profiles register themselves by mutating this.handlers\n    registerWhisper(this);\n    registerDeliberation(this);\n    registerHandoff(this);\n    registerControl(this);\n    registerRouting(this);\n    registerSecuritySigned(this);\n    registerAuditScitt(this);\n  }\n\n  // ==========================================================\n  //   Core method handlers\n  // ==========================================================\n\n  private opWorkspaceCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const id = (p.workspace as string) || this.ids.workspaceId();\n    if (typeof id !== \"string\") return { error: rpcError(E.PARAMS, \"workspace must be a string id\") };\n    if (this.workspaces.has(id)) return { error: rpcError(E.PARAMS, `workspace already exists: ${id}`) };\n    const profiles: string[] = Array.isArray(p.profiles) ? [...(p.profiles as string[])] : [...(this.options.defaultProfiles ?? [\"core/1.0\", \"review/1.0\"])];\n\n    // SPECIFICATION 15.4: the descriptor and the enforcement agree, and the\n    // workspace boundary is where a disagreement surfaces.\n    //\n    // Advertising a security profile does not turn its enforcement on: that\n    // would break every workspace advertising it today without signing, and\n    // break it at the second call rather than at configuration time. The rule\n    // runs the other way, where it costs nothing. Enforcement on adds the\n    // profile, so the descriptor never understates what is enforced; the\n    // profile advertised with enforcement off is a configuration error.\n    for (const [profile, enforced, option] of [\n      [\"security-signed/1.0\", !!this.options.requireSignatures, \"requireSignatures\"],\n      [\"identity-oidc/1.0\", this.options.verifyOidcToken !== undefined, \"verifyOidcToken\"],\n    ] as [string, boolean, string][]) {\n      const name = profile.split(\"/\")[0];\n      const advertised = profiles.some(x => x === name || x.startsWith(name + \"/\"));\n      if (enforced && !advertised) profiles.push(profile);\n      else if (advertised && !enforced) {\n        return { error: rpcError(E.PARAMS,\n          `${profile} is advertised but ${option} is not configured. ` +\n          `A workspace that advertises it and does not enforce it ` +\n          `describes a guarantee it does not give.`) };\n      }\n    }\n\n    const chainEnabled = profiles.includes(\"audit-scitt/1.0\") || !!this.options.enableChain;\n    const ws: Workspace = {\n      id,\n      created: this.now(),\n      state: \"active\",\n      profiles,\n      mode: (p.mode as Mode) ?? \"trial\",\n      mode_ceiling: (p.mode_ceiling as Mode) ?? \"production\",\n      routing_policy_uri: p.routing_policy_uri as string | undefined,\n      step_up_window_sec: typeof p.step_up_window_sec === \"number\" ? p.step_up_window_sec : 300,\n      min_acr: p.min_acr as string | undefined,\n      members: this.newMap(),\n      tasks: this.newMap(),\n      overrides: this.newMap(),\n      whispers: this.newMap(),\n      deliberations: this.newMap(),\n      handoffs: this.newMap(),\n      snapshots: this.newMap(),\n      route_decisions: this.newMap(),\n      idempotency_keys: {},\n      audit: [],\n      chain_enabled: chainEnabled,\n      chain_head: chainEnabled ? ZERO_HASH : undefined,\n    };\n    this.workspaces.set(id, ws);\n    // New here, so the store holds nothing of it yet.\n    this.persisted.set(ws, { seq: 0, replace: false, keys: new Set() });\n    return { result: { workspace: id, created: ws.created } };\n  }\n\n  private opWorkspaceDescribe(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, `Unknown workspace: ${p.workspace}`) };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    return { result: {\n      id: ws.id,\n      created: ws.created,\n      state: ws.state,\n      mode: ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      max_envelope_bytes: this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES,\n      step_up_window_sec: ws.step_up_window_sec,\n      profiles: ws.profiles,\n      members: Array.from(rawValues(ws.members)).map(memberToDict),\n      audit_count: ws.audit.length,\n      task_count: ws.tasks.size,\n      override_count: ws.overrides.size,\n      // Omitted where the workspace has no chain, which is what the Python\n      // reference now sends too: JSON.stringify drops an undefined value, so\n      // the two answered the same call differently on the wire.\n      ...(ws.chain_head ? { evidence_head: ws.chain_head } : {}),\n      ...(ws.routing_policy_uri ? { routing_policy_uri: ws.routing_policy_uri } : {}),\n    }};\n  }\n\n  private opWorkspaceSetProfiles(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"profiles\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    if (ws.members.get(p.from as string)!.role !== \"admin\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"workspace.set_profiles requires the admin role\") };\n    }\n    const newProfiles = [...(p.profiles as string[])];\n    if (!newProfiles.some(pr => pr.startsWith(\"core/\"))) newProfiles.push(\"core/1.0\");\n    ws.profiles = newProfiles;\n    if (newProfiles.includes(\"audit-scitt/1.0\") && !ws.chain_enabled) {\n      ws.chain_enabled = true;\n      ws.chain_head = ZERO_HASH;\n    }\n    return { result: { profiles: ws.profiles } };\n  }\n\n  private opParticipantJoin(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"type\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    let ws = this.workspaces.get(p.workspace as string);\n    if (!ws) {\n      const create = this.opWorkspaceCreate({ workspace: p.workspace });\n      if (create.error) return create;\n      ws = this.workspaces.get(p.workspace as string)!;\n    }\n    const uri = p.from as ParticipantUri;\n    const now = this.now();\n    const existing = ws.members.get(uri);\n    let tokenVerified = false;\n\n    const member: Member = {\n      uri,\n      type: p.type as Member[\"type\"],\n      role: (p.role as string) || \"participant\",\n      joined: now,\n      display_name: p.display_name as string | undefined,\n      capabilities: p.capabilities as Record<string, unknown> | undefined,\n      scopes: p.scopes as string[] | undefined,\n      keys: [],\n      paused: false,\n    };\n\n    // identity-oidc/1.0\n    if (this.options.verifyOidcToken && typeof p.oidc_token === \"string\") {\n      const claims = this.options.verifyOidcToken(p.oidc_token);\n      if (claims === null) return { error: rpcError(E.OIDC_TOKEN_INVALID, \"OIDC token invalid\") };\n      // A token binds only to the participant it belongs to. One naming\n      // another participant is refused, and a join under an existing member's\n      // name must carry a token for that member: the same subject, or, for a\n      // member with no verified subject yet, a token naming the member.\n      const boundUri = claims.chap_participant_uri;\n      const sub = typeof claims.sub === \"string\" && claims.sub !== \"\" ? claims.sub : undefined;\n      if (boundUri != null && boundUri !== uri) {\n        return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token is bound to another participant\") };\n      }\n      if (existing) {\n        if (existing.oidc_sub != null) {\n          if (sub !== existing.oidc_sub) {\n            return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token subject does not match the member\") };\n          }\n        } else if (boundUri !== uri) {\n          return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token does not name this member\") };\n        }\n      }\n      member.oidc_sub = sub;\n      tokenVerified = true;\n      const at = claims.auth_time;\n      if (typeof at === \"number\") member.oidc_auth_time = at;\n      member.oidc_acr = typeof claims.acr === \"string\" ? claims.acr : undefined;\n      const cnf = claims.cnf as Record<string, unknown> | undefined;\n      const cnfJwk = cnf?.jwk as Record<string, unknown> | undefined;\n      if (cnfJwk && typeof cnfJwk.kid === \"string\") {\n        member.keys.push({ jwk: cnfJwk as unknown as KeyRecord[\"jwk\"], kid: cnfJwk.kid as string, valid_from: now });\n      }\n    }\n    // identity-vc/1.0\n    if (this.options.verifyVc && typeof p.vc_presentation === \"object\" && p.vc_presentation !== null\n        && !Array.isArray(p.vc_presentation)) {\n      const subject = this.options.verifyVc(p.vc_presentation as Record<string, unknown>);\n      if (subject === null) return { error: rpcError(E.VC_VP_INVALID, \"VC presentation invalid\") };\n      const holder = [subject.holder, subject.id].find(\n        (h): h is string => typeof h === \"string\" && h !== \"\");\n      // A join under an existing member's name binds a presentation only from\n      // the member's own holder.\n      if (existing && (existing.vc_holder == null || holder !== existing.vc_holder)) {\n        return { error: rpcError(E.VC_HOLDER_BINDING_INVALID, \"Presentation holder does not match the member\") };\n      }\n      member.vc_holder = holder;\n      const vpJwk = subject.cnf_jwk as Record<string, unknown> | undefined;\n      if (vpJwk && typeof vpJwk.kid === \"string\") {\n        member.keys.push({ jwk: vpJwk as unknown as KeyRecord[\"jwk\"], kid: vpJwk.kid as string, valid_from: now });\n      }\n    }\n\n    const attested = [...member.keys];\n\n    // Self-asserted JWKs are ignored for an identity-bound participant: the\n    // verifier-pinned cnf.jwk / vp_jwk is the signing key (proof of possession).\n    const jwks = p.jwks as { keys?: Array<{ kid: string; [k: string]: unknown }> } | undefined;\n    if (jwks?.keys && attested.length === 0) {\n      for (const j of jwks.keys) {\n        if (j.kid && !member.keys.some(k => k.kid === j.kid)) {\n          member.keys.push({ jwk: j as unknown as KeyRecord[\"jwk\"], kid: j.kid, valid_from: now });\n        }\n      }\n    }\n\n    if (existing) {\n      if (member.oidc_sub !== undefined) existing.oidc_sub = member.oidc_sub;\n      if (member.oidc_auth_time !== undefined) existing.oidc_auth_time = member.oidc_auth_time;\n      if (member.oidc_acr !== undefined) existing.oidc_acr = member.oidc_acr;\n      if (tokenVerified) existing.oidc_acr = member.oidc_acr;\n      if (member.vc_holder !== undefined) existing.vc_holder = member.vc_holder;\n      for (const k of attested) {\n        if (!existing.keys.some(x => x.kid === k.kid)) existing.keys.push(k);\n      }\n      return { result: { joined: true, as: uri } };\n    }\n    ws.members.set(uri, member);\n    return { result: { joined: true, as: uri } };\n  }\n\n  private opParticipantLeave(p: Record<string, unknown>): ReturnType<Handler> {\n    // Self-removal: deletes the caller's own `from`. Under requireSignatures the\n    // signature binds `from`, so a member can only remove itself; evicting\n    // another member is an admin operation, not this. Unsigned, a spoofed\n    // `from` is the transport's responsibility.\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    ws.members.delete(p.from as string);\n    return { result: { left: true } };\n  }\n\n  private opTaskCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"kind\", \"input\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const assignee = (p.assignee as string) || (p.to as string);\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Assignee not in workspace\") };\n    }\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n\n    // modes/1.0 ceiling check. A mode or review_required of the wrong type is\n    // refused, so both references read the same task from the same call.\n    if (p.mode !== undefined && p.mode !== null && typeof p.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"mode must be a string\") };\n    }\n    const requestedMode = ((p.mode as Mode) || ws.mode);\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (p.review_required !== undefined && p.review_required !== null && typeof p.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"review_required must be a boolean\") };\n    }\n\n    const taskId = this.ids.taskId();\n    const now = this.now();\n    const task: Task = {\n      id: taskId,\n      kind: p.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: p.input as Record<string, unknown>,\n      created_at: now,\n      updated_at: now,\n      deadline: p.deadline as string | undefined,\n      mode: requestedMode,\n      routing_hints: p.routing_hints as Task[\"routing_hints\"],\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\" }],\n      paused: false,\n    };\n\n    // modes/1.0: trial mode forces review\n    // modes/1.0: trial forces review, but only when the workspace opted into\n    // modes/1.0. mode is inert without the profile.\n    if (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && task.mode === \"trial\") task.review_required = true;\n    else if (\"review_required\" in p) task.review_required = !!p.review_required;\n\n    ws.tasks.set(taskId, task);\n    if (typeof p.idempotency_key === \"string\") {\n      ws.idempotency_keys[p.idempotency_key] = taskId;\n      this.markKey(ws, p.idempotency_key);\n      const keys = Object.keys(ws.idempotency_keys);\n      if (keys.length > MAX_IDEMPOTENCY_KEYS) {\n        delete ws.idempotency_keys[keys[0]];\n        this.markKey(ws, keys[0]);\n      }\n    }\n    return { result: { task_id: taskId, state: \"created\" } };\n  }\n\n  private opTaskUpdate(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const newState = p.state as Task[\"state\"];\n    // Pausing and resuming both belong to control/1.0. A Core-only workspace\n    // that could pause through task.update would hold a task nothing it\n    // advertises can lift. A review opens with review.request, or with\n    // task.complete on a task that requires one: task.update into\n    // review_requested would leave the task under review with no review for a\n    // decision to act on.\n    const legal: Record<string, string[]> = {\n      created:          [\"in_progress\", \"declined\"],\n      in_progress:      [\"in_progress\", \"completed\", \"declined\"],\n      review_requested: [\"in_progress\"],\n      paused:           [\"cancelled\"],\n    };\n    if (!legal[task.state]?.includes(newState)) {\n      return { error: rpcError(E.PARAMS, `Illegal transition ${task.state} -> ${newState}`) };\n    }\n    // task.complete opens a review rather than completing when one is required.\n    // task.update reaches the same state by another route and carries no\n    // output, so completing here would record a finished task with nothing\n    // reviewed and no decision on the chain.\n    if (newState === \"completed\" && task.review_required) {\n      return { error: rpcError(E.PARAMS,\n        \"This task requires review. Submit the output with task.complete, which opens the review; a reviewer decision completes it.\") };\n    }\n    task.state = newState;\n    task.updated_at = this.now();\n    task.history.push({\n      ts: task.updated_at, from: p.from as ParticipantUri,\n      state: newState, note: p.progress_note as string | undefined,\n    });\n    return { result: { state: newState } };\n  }\n\n  private opTaskComplete(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // Completion is only legal from an active, non-terminal, non-paused state.\n    // An allowlist (rather than a denylist of terminal states) is safer: any\n    // state not listed -- cancelled, superseded, paused, already\n    // completed/declined, abstained, escalated -- is rejected, so completion\n    // can neither revive a terminated task nor bypass a pause.\n    if (task.state !== \"created\" && task.state !== \"in_progress\") {\n      return { error: rpcError(E.PARAMS, `Cannot complete task in state: ${task.state}`) };\n    }\n    // review/1.0 S3.1: task.complete on a task whose review is required opens a\n    // review implicitly rather than completing. The submitted output becomes the\n    // artefact under review; only a reviewer decision (decide.*) then takes the\n    // task to completed. Without this a review_required task would reach\n    // completed with unreviewed output and no decision.\n    if (task.review_required) {\n      const now = this.now();\n      if (!task.review) {\n        // review_required means a person has to see this. The producer must\n        // not satisfy its own review, and neither must another agent: an agent\n        // approving an agent leaves a decide.approve on the chain that reads\n        // as human oversight and is not. So the implicit review is addressed\n        // to the human members other than the completer and the assignee, and\n        // where there are none the completion is refused rather than opening a\n        // review no person can decide. An explicit review.request keeps its\n        // own `to`, so a deliberate agent-reviews-agent flow is still\n        // available.\n        const producer = p.from as string;\n        const eligible = [...rawEntries(ws.members)]\n          .filter(([uri, member]) => uri !== producer && uri !== task.assignee && member.type === \"human\")\n          .map(([uri]) => uri);\n        if (eligible.length === 0) {\n          return { error: rpcError(E.NOT_AUTHORISED,\n            \"Task requires review but has no eligible human reviewer (needs a human member other than its assignee and completer)\") };\n        }\n        task.review = { requested_at: now, requested_to: eligible as ParticipantUri[], rule: \"any_one_approves\", decisions: [] };\n      }\n      task.pending_artefact = p.output;\n      task.state = \"review_requested\";\n      task.updated_at = now;\n      task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\",\n                          note: \"review required; opened on task.complete\" });\n      return { result: { state: \"review_requested\", review_id: task.id } };\n    }\n    task.output = p.output;\n    if (typeof p.confidence === \"number\" || typeof p.confidence === \"string\") task.confidence = p.confidence;\n    task.state = \"completed\";\n    task.updated_at = this.now();\n    task.history.push({ ts: task.updated_at, from: p.from as ParticipantUri, state: \"completed\" });\n    return { result: { state: \"completed\" } };\n  }\n\n  private opAuditRead(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const filter = (p.filter as {\n      method?: string; from?: string; task_id?: string; outcome?: unknown;\n    } | undefined) ?? {};\n    if (filter.outcome != null && filter.outcome !== \"accepted\" && filter.outcome !== \"refused\") {\n      return { error: rpcError(E.PARAMS, \"filter.outcome must be 'accepted' or 'refused'\") };\n    }\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const out: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      // Filters read the call an entry records, accepted or refused, and\n      // `outcome` narrows to one kind.\n      const refused = entry.outcome != null;\n      if (filter.outcome === \"accepted\" && refused) continue;\n      if (filter.outcome === \"refused\" && !refused) continue;\n      const call = entryCall(entry) ?? ({} as Envelope);\n      const ep = (call.params ?? {}) as Record<string, unknown>;\n      if (filter.method && call.method !== filter.method) continue;\n      if (filter.from && ep.from !== filter.from) continue;\n      if (filter.task_id) {\n        let taskId = ep.task_id;\n        if (call.method === \"whisper.answer\") {\n          const prompt = ws.whispers.get(ep.whisper_id as string);\n          taskId = prompt ? (prompt as { task_id?: string }).task_id : undefined;\n        }\n        if (taskId !== filter.task_id) continue;\n      }\n      const item: Record<string, unknown> = { seq: entry.seq, arrived: entry.arrived };\n      if (refused) {\n        item.request = entry.request;\n        item.outcome = entry.outcome;\n      } else {\n        item.envelope = entry.envelope;\n      }\n      if (entry.prev_hash) item.prev_hash = entry.prev_hash;\n      out.push(item);\n    }\n    // The next entry to read: the end of the range, or the end of the log\n    // where the range runs past it, so a reader paging forward meets the\n    // entries written after this read.\n    return { result: { entries: out, next_seq: Math.min(toSeq, ws.audit.length) } };\n  }\n\n  // ==========================================================\n  //   review/1.0 handlers\n  // ==========================================================\n\n  private opReviewRequest(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"artefact\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // task.complete refuses a task that has been stopped, so that a completion\n    // \"can neither revive a terminated task nor bypass a pause\". review.request\n    // creates the same kind of state and had no such check, so it revived\n    // cancelled and superseded tasks and pulled paused ones back into play. The\n    // same three states are refused here.\n    //\n    // `completed` is deliberately still allowed. Requesting review on a\n    // completed task is how every framework bridge submits a draft, and\n    // 0.2.12's `review_required` is the route away from that, not this.\n    if (REVIEW_REQUEST_STOPPED.includes(task.state)) {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Cannot request review for task in state: ${task.state}`) };\n    }\n    const to = p.to;\n    const reviewers: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!reviewers.length) return { error: rpcError(E.PARAMS, \"review.request needs 'to'\") };\n    const now = this.now();\n    const declaredRule = p.rule as string | undefined;\n    const rule = declaredRule || \"any_one_approves\";\n    if (!reviewRuleSupported(rule)) {\n      return { error: rpcError(E.PARAMS, `Unsupported review rule ${JSON.stringify(rule)}: review/1.0 supports any_one_approves, all_approve, quorum:<n>`) };\n    }\n\n    // A review already open on this task. Replacing the artefact underneath\n    // it would let a reviewer decide on content they never saw, and would\n    // discard decisions already cast while their envelopes remain in the\n    // audit log, so a quorum could appear to have been assembled across two\n    // different artefacts. Re-requesting the *same* artefact is a different\n    // thing: it widens the reviewer set on an open review, which is legitimate\n    // and preserves what has been decided so far.\n    if (task.state === \"review_requested\" && task.review) {\n      if (contentHash(task.pending_artefact) !== contentHash(p.artefact)) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          \"A review is already open on this task with different content. \" +\n          \"Decide, abstain, escalate or cancel it before requesting review of a new artefact.\",\n        ) };\n      }\n      // Only a rule the caller actually supplied can be a change. Comparing\n      // the resolved default instead refused the documented\n      // widen-the-reviewer-set request whenever `rule` was omitted.\n      if (declaredRule !== undefined && declaredRule !== task.review.rule) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          `Cannot change the decision rule of an open review (currently ${task.review.rule})`,\n        ) };\n      }\n      // Union, preserving order and the decisions already recorded.\n      for (const r of reviewers) {\n        if (!task.review.requested_to.includes(r)) task.review.requested_to.push(r);\n      }\n      if (p.deadline !== undefined) task.review.deadline = p.deadline as string;\n      task.updated_at = now;\n      return { result: {\n        state: \"review_requested\",\n        review_id: task.id,\n        amended: true,\n        requested_to: [...task.review.requested_to],\n      } };\n    }\n\n    task.state = \"review_requested\";\n    task.updated_at = now;\n    task.review = {\n      requested_at: now,\n      requested_to: reviewers,\n      rule,\n      deadline: p.deadline as string | undefined,\n      decisions: [],\n    };\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\" });\n    task.pending_artefact = p.artefact;\n    return { result: { state: \"review_requested\", review_id: task.id } };\n  }\n\n  /**\n   * Verify an optional `approved_artefact_digest` against the artefact under\n   * review (review/1.0 S3.2).\n   *\n   * The digest sits in params, so it is inside whatever the envelope signature\n   * covers: the decision then attests the content the reviewer saw rather than\n   * a task reference, and a relying party can check it without trusting the\n   * Coordinator that produced it. Absent, behaviour is exactly as before.\n   *\n   * On mismatch nothing is recorded and no state changes, so a client that\n   * computes the wrong digest refuses only its own decision.\n   */\n  private checkArtefactDigest(p: Record<string, unknown>, task: Task): ReturnType<Handler> | null {\n    const declared = p.approved_artefact_digest;\n    if (declared === undefined || declared === null) return null;\n    if (typeof declared !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"approved_artefact_digest must be a string\") };\n    }\n    if (task.pending_artefact === undefined) {\n      return { error: rpcError(E.PARAMS, \"No artefact under review to bind a digest to\") };\n    }\n    const actual = contentHash(task.pending_artefact);\n    if (declared !== actual) {\n      return { error: rpcError(\n        E.SIG_ARTEFACT_DIGEST_MISMATCH,\n        \"approved_artefact_digest does not match the artefact under review\",\n        { declared, actual },\n      ) };\n    }\n    return null;\n  }\n\n  private opDecide(p: Record<string, unknown>, kind: \"approve\" | \"reject\"): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const badTags = tagsError(p);\n    if (badTags) return badTags;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind,\n      ts: now,\n      comment: p.comment as string | undefined,\n      tags: p.tags as string[] | undefined,\n    });\n    if (kind === \"approve\") {\n      // Complete only when the rule's approval predicate is met; otherwise the\n      // approval is recorded and the task stays review_requested.\n      if (reviewSatisfied(task.review!)) {\n        task.output = task.pending_artefact;\n        task.state = \"completed\";\n      }\n    } else {\n      task.state = p.request_revision ? \"in_progress\" : \"declined\";\n    }\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: task.state });\n    return { result: { state: task.state } };\n  }\n\n  private opDecideOverride(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"diff\", \"rationale\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const badTags = tagsError(p);\n    if (badTags) return badTags;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    // The override is of the artefact under review; use the coordinator's\n    // record, not a caller-supplied \"before\" that could be fabricated.\n    const base = task.pending_artefact;\n    if (base === undefined) return { error: rpcError(E.PARAMS, \"No base artefact for override\") };\n    let applied: unknown;\n    try {\n      applied = applyJsonPatch(base, p.diff as never);\n    } catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.PATCH_FAILED, msg) };\n    }\n    const now = this.now();\n    const id = this.ids.artefactId();\n    const override: OverrideArtefact = {\n      id,\n      task_id: task.id,\n      reviewer: p.from as ParticipantUri,\n      based_on_artefact: base,\n      diff: p.diff as never,\n      result: applied,\n      rationale: p.rationale as string,\n      tags: (p.tags as string[]) ?? [],\n      policy_refs: (p.policy_refs as string[]) ?? [],\n      ts: now,\n      logical_id: p.logical_id as string | undefined,\n      instance_id: p.instance_id as string | undefined,\n      intent_preserved: p.intent_preserved as boolean | undefined,\n    };\n    ws.overrides.set(id, override);\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"override\",\n      ts: now,\n      tags: override.tags,\n      override_artefact_id: id,\n    });\n    task.output = applied;\n    task.state = \"completed\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"completed\", note: \"override applied\" });\n    return { result: { state: \"completed\", override_artefact_id: id, applied } };\n  }\n\n  private opAbstainDeclare(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"reason\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"abstain\",\n      ts: now,\n      comment: p.reason as string,\n      abstain_category: (p.category as string) || \"other\",\n    });\n    task.state = \"abstained\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"abstained\", note: p.reason as string });\n    return { result: { state: \"abstained\" } };\n  }\n\n  private opEscalateRaise(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"original_task_id\", \"new_task\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const origId = p.original_task_id;\n    const orig = typeof origId === \"string\" ? ws.tasks.get(origId) : undefined;\n    if (!orig) return { error: rpcError(E.PARAMS, \"Unknown original task\") };\n    if (orig.state === \"completed\" || orig.state === \"cancelled\" || orig.state === \"superseded\") {\n      return { error: rpcError(E.PARAMS, `Cannot escalate a terminal task: ${orig.state}`) };\n    }\n    if (p.new_task === null || typeof p.new_task !== \"object\" || Array.isArray(p.new_task)) {\n      return { error: rpcError(E.PARAMS, \"new_task must be an object\") };\n    }\n    const nt = p.new_task as Record<string, unknown>;\n    const assignee = nt.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Escalation assignee not in workspace\") };\n    }\n    const named = nt.mode;\n    if (named !== undefined && named !== null && typeof named !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_task.mode must be a string\") };\n    }\n    // The successor is a created task, so it meets the checks task.create and\n    // control.supersede apply: its assignee must not be paused, and its mode,\n    // the one new_task names or else the original's, must be within the\n    // ceiling in force now. Naming a lower mode is how work is escalated\n    // after the ceiling has been lowered.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    const mode = ((named as Mode | null | undefined) || orig.mode) as Mode;\n    if (!modeLE(mode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${mode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    const now = this.now();\n    const newId = this.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: (nt.kind as string) || orig.kind,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: (nt.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode,\n      supersedes: orig.id,\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\", note: `escalated from ${orig.id}` }],\n      paused: false,\n    };\n    // Escalating hands the work on and keeps its review requirement. The\n    // successor requires review when the original did, and a trial task\n    // forces review under modes/1.0 as it does at task.create.\n    if (orig.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    }\n    ws.tasks.set(newId, newTask);\n    orig.state = \"escalated\";\n    orig.updated_at = now;\n    orig.superseded_by = newId;\n    orig.history.push({ ts: now, from: p.from as ParticipantUri, state: \"escalated\", note: `-> ${newId}` });\n    return { result: { new_task_id: newId, escalated_from: orig.id } };\n  }\n}\n\nfunction memberToDict(m: Member): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    uri: m.uri, type: m.type, role: m.role, joined: m.joined,\n  };\n  if (m.display_name) out.display_name = m.display_name;\n  if (m.capabilities) out.capabilities = m.capabilities;\n  if (m.scopes) out.scopes = m.scopes;\n  if (m.keys.length) {\n    out.jwks = { keys: m.keys.filter(k => !k.revoked_at && !k.valid_until).map(k => k.jwk) };\n    out.key_history = m.keys;\n  }\n  if (m.paused) out.paused = true;\n  if (m.oidc_sub) out.oidc_sub = m.oidc_sub;\n  if (m.vc_holder) out.vc_holder = m.vc_holder;\n  return out;\n}\n","/**\n * Default routing policy factory.\n *\n * Returns a partial CoordinatorOptions configured with the three\n * routing hooks (routingPolicy, reviewDepthPolicy, escalationPolicy)\n * that the playground and demo use out of the box. Operators can\n * override individual hooks by passing their own functions in\n * CoordinatorOptions.\n *\n * The defaults shipped with the Coordinator (in profiles/routing.ts)\n * apply the same review-depth and escalation rules. Routing differs: this\n * routing policy takes the first candidate as given, so a first candidate\n * who is not a member is refused with -32510 and one who is paused with\n * -32063, where the built-in default passes over both. This factory exists\n * so that the legacy call site can keep using:\n *\n *   new Coordinator({ ...makeDefaultPolicy(SENIOR_URI), ... })\n *\n * The seniorTarget argument is the URI auto-escalation routes to\n * when no other target is supplied.\n */\nimport type {\n  EscalationPolicyFn,\n  ReviewDepthPolicyFn,\n  RoutingPolicyFn,\n  CoordinatorOptions,\n} from \"./coordinator.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\n\nexport function makeDefaultPolicy(seniorTarget: string): Pick<CoordinatorOptions,\n  \"routingPolicy\" | \"reviewDepthPolicy\" | \"escalationPolicy\"> {\n\n  const routingPolicy: RoutingPolicyFn = (task, candidates) => {\n    const eligible = candidates;  // delegate elig check to coordinator\n    return {\n      selected: eligible[0],\n      rationale: {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: eligible.slice(1).map(c => ({\n          candidate: c, reason_excluded: \"not first eligible\",\n        })),\n      },\n    };\n  };\n\n  const reviewDepthPolicy: ReviewDepthPolicyFn = (_task, hints) => {\n    const crit = (hints.criticality as string) ?? \"medium\";\n    let conf = 1.0;\n    try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n    if (isNaN(conf)) conf = 1.0;\n    const r = CRIT[crit] ?? 1;\n    if (r >= 3) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=critical: full review\" }};\n    if (r === 2 && conf < 0.7) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=high and confidence<0.7: full review\" }};\n    if (r === 0 && conf >= 0.95) return { depth: \"skip\",\n      rationale: { policy_id: \"default\", summary: \"very low criticality + very high confidence: skip\" }};\n    if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling_probability: 0.10,\n      rationale: { policy_id: \"default\", summary: \"low criticality + high confidence: 10% sample\" }};\n    return { depth: \"spot_check\", sampling_probability: 0.25,\n      rationale: { policy_id: \"default\", summary: \"default mid-confidence: 25% sample\" }};\n  };\n\n  const escalationPolicy: EscalationPolicyFn = (_task, hints) => {\n    const crit = (hints.criticality as string) ?? \"medium\";\n    let conf = 1.0;\n    try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n    if (isNaN(conf)) conf = 1.0;\n    const r = CRIT[crit] ?? 1;\n    const escalate = (r >= 3) || (r >= 2 && conf < 0.6);\n    return {\n      escalate,\n      to: escalate ? seniorTarget : undefined,\n      triggered_rule: {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      },\n    };\n  };\n\n  return { routingPolicy, reviewDepthPolicy, escalationPolicy };\n}\n","/**\n * @brightbeamai/chap-coordinator/transports/wrap\n *\n * Inward integration helpers: turn an external tool/agent event into\n * a CHAP envelope landing in a workspace's audit log. Library\n * counterpart to the patterns described in\n * ``integrations/CHAP-with-MCP.md`` and ``integrations/CHAP-with-A2A.md``.\n *\n * The outward transports let external clients drive a CHAP workspace.\n * These helpers go the other direction: when work has already\n * happened outside CHAP, wrap it so the audit log carries a faithful,\n * citable record.\n *\n * Spec target: CHAP 0.3. MCP 2026-07-28. A2A 1.0.\n */\n\nimport { contentHash } from \"../canonical.js\";\nimport type { Coordinator } from \"../coordinator.js\";\n\nexport { contentHash } from \"../canonical.js\";\n\nexport interface WrapMcpToolCallOptions {\n  /** Participant URI making the call. Must already be a workspace member. */\n  caller: string;\n  /** MCP tool name, e.g. ``\"github.create_issue\"``. */\n  tool: string;\n  /** Arguments passed to the MCP tool. */\n  args: Record<string, unknown>;\n  /** Return value from the MCP tool. */\n  result: unknown;\n  /** Optional MCP server identifier, e.g. \"github\". */\n  server?: string;\n  /** Override the default task kind ``\"mcp_call:<tool>\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the CHAP task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this call fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapResult {\n  task_id:     string;\n  input_hash:  string;\n  output_hash: string;\n}\n\n/**\n * Wrap a completed MCP tool call as a CHAP task pair.\n *\n * Emits ``task.create`` + ``task.complete`` envelopes into the\n * workspace so the MCP call shows up as a first-class audit entry.\n * The result artefact is the MCP tool's return value, plus a\n * ``citations[]`` entry with the input/output hashes per\n * ``integrations/CHAP-with-MCP.md`` §2.\n */\nexport function wrapMcpToolCall(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapMcpToolCallOptions,\n): WrapResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.caller) throw new Error(\"caller is required\");\n  if (!options.tool) throw new Error(\"tool is required\");\n\n  const inputHash = contentHash(options.args);\n  const outputHash = contentHash(options.result);\n  const kind = options.taskKind ?? `mcp_call:${options.tool}`;\n\n  const citations = [{\n    kind:         \"mcp_tool_call\" as const,\n    server:       options.server ?? \"unknown\",\n    tool:         options.tool,\n    input_hash:   inputHash,\n    output_hash:  outputHash,\n  }];\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    kind,\n    assignee: options.caller,\n    input:    options.args,\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-create`,\n    method:  \"task.create\",\n    params:  createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-update`,\n    method:  \"task.update\",\n    params:  { workspace, from: options.caller, task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { result: options.result, citations };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    task_id:  taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-complete`,\n    method:  \"task.complete\",\n    params:  completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, input_hash: inputHash, output_hash: outputHash };\n}\n\n// ============================================================\n\nexport interface WrapA2aExchangeOptions {\n  /** URI of the local bridge participant. Must be a workspace member. */\n  bridgeUri: string;\n  /** Identifier of the remote A2A agent. Recorded in the citation. */\n  remoteAgent: string;\n  /** The A2A message body sent outbound. */\n  sent: Record<string, unknown>;\n  /** The A2A message body received in response. */\n  received: Record<string, unknown>;\n  /** CHAP task kind. Default ``\"a2a_exchange\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this exchange fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapA2aResult {\n  task_id:       string;\n  sent_hash:     string;\n  received_hash: string;\n}\n\n/**\n * Wrap a completed A2A message exchange as a CHAP task pair.\n *\n * Implements the bridge-participant pattern from\n * ``integrations/CHAP-with-A2A.md`` §3 as a library helper.\n */\nexport function wrapA2aMessageExchange(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapA2aExchangeOptions,\n): WrapA2aResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.bridgeUri) throw new Error(\"bridgeUri is required\");\n  if (!options.remoteAgent) throw new Error(\"remoteAgent is required\");\n\n  const sentHash = contentHash(options.sent);\n  const receivedHash = contentHash(options.received);\n  const kind = options.taskKind ?? \"a2a_exchange\";\n\n  const citation = {\n    kind:           \"a2a_exchange\" as const,\n    remote_agent:   options.remoteAgent,\n    sent_hash:      sentHash,\n    received_hash:  receivedHash,\n  };\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.bridgeUri,\n    kind,\n    assignee: options.bridgeUri,\n    input:    { remote_agent: options.remoteAgent, sent: options.sent },\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-create\",\n    method: \"task.create\", params: createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-update\",\n    method: \"task.update\",\n    params: { workspace, from: options.bridgeUri,\n              task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { received: options.received, citations: [citation] };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace, from: options.bridgeUri, task_id: taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-complete\",\n    method: \"task.complete\", params: completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, sent_hash: sentHash, received_hash: receivedHash };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBA,yBAA2B;AAEpB,IAAM,YAAY,YAAY,IAAI,OAAO,EAAE;AAElD,IAAM,oBACJ;AAEF,IAAM,qBACJ;AAGF,IAAM,uBACJ;AAGF,SAAS,sBAAsB,GAAiB;AAC9C,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,UAAM,IAAI,EAAE,WAAW,CAAC;AACxB,QAAI,KAAK,SAAU,KAAK,OAAQ;AAC9B,YAAM,OAAO,IAAI,IAAI,EAAE,SAAS,EAAE,WAAW,IAAI,CAAC,IAAI;AACtD,UAAI,OAAO,SAAU,OAAO,MAAQ,OAAM,IAAI,MAAM,oBAAoB;AACxE;AAAA,IACF,WAAW,KAAK,SAAU,KAAK,OAAQ;AACrC,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,wBAAsB,CAAC;AACvB,SAAO,KAAK,UAAU,CAAC;AACzB;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACA,MAAI,KAAK,IAAI,CAAC,IAAI,OAAO,kBAAkB;AACzC,UAAM,IAAI,MAAM,kBAAkB;AAAA,EACpC;AAGA,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,MAAM,OAAwB;AACrC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,MAAM,IAAI,KAAK,EAAE,KAAK,GAAG,IAAI;AAAA,EAC5C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,gBAAgB,GAAG,IAAI,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC;AAAA,IACzD;AACA,WAAO,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,EACjC;AACA,QAAM,IAAI,UAAU,qCAAqC,OAAO,KAAK,EAAE;AACzE;AAGO,SAAS,aAAa,OAAwB;AACnD,SAAO,OAAO,KAAK,MAAM,KAAK,GAAG,OAAO;AAC1C;AAGO,SAAS,UAAU,MAA+B;AACvD,QAAM,QAAI,+BAAW,QAAQ;AAC7B,IAAE,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,OAAO,IAAI,IAAI;AACrE,SAAO,YAAY,EAAE,OAAO,KAAK;AACnC;AAGO,SAAS,YAAY,SAA0B;AACpD,SAAO,UAAU,aAAa,OAAO,CAAC;AACxC;;;AC3FO,IAAM,iBAAmD,OAAO,OAAO;AAAA,EAC5E,mBAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,yBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,wBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,4BAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,gBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,0BAA2B;AAC7B,CAAC;AAUM,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AC3DD,IAAAA,sBAQO;AAEP,IAAM,cAAc,OAAO,KAAK,4BAA4B,KAAK;AAEjE,SAAS,YAAY,KAAqB;AACxC,SAAO,IAAI,SAAS,QAAQ,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACzF;AAEA,SAAS,aAAa,GAAmB;AACvC,QAAM,MAAM,IAAI,QAAQ,IAAK,EAAE,SAAS,KAAM,CAAC;AAC/C,SAAO,OAAO,KAAK,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,KAAK,QAAQ;AAC5E;AAgBO,SAAS,WAAW,KAAqB;AAC9C,aAAO,gCAAW,QAAQ,EAAE,OAAO,UAAU,GAAG,EAAE,OAAO;AAC3D;AAKO,SAAS,mBAAmB,MAAyB;AAC1D,MAAI,KAAK,WAAW,IAAI;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAEA,QAAM,QAAQ,OAAO,OAAO;AAAA,IAC1B,OAAO,KAAK,oCAAoC,KAAK;AAAA,IACrD;AAAA,EACF,CAAC;AACD,aAAO,sCAAiB,EAAE,KAAK,OAAO,QAAQ,OAAO,MAAM,QAAQ,CAAC;AACtE;AAGO,SAAS,eAAe,YAA+B;AAC5D,QAAM,UAAM,qCAAgB,UAAU;AACtC,QAAM,MAAM,IAAI,OAAO,EAAE,QAAQ,OAAO,MAAM,OAAO,CAAC;AAEtD,SAAO,IAAI,SAAS,IAAI,SAAS,EAAE;AACrC;AAGO,SAAS,iBAAiB,KAAwB;AACvD,MAAI,IAAI,WAAW,IAAI;AACrB,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,QAAM,MAAM,OAAO,OAAO,CAAC,aAAa,GAAG,CAAC;AAC5C,aAAO,qCAAgB,EAAE,KAAK,KAAK,QAAQ,OAAO,MAAM,OAAO,CAAC;AAClE;AAGO,SAAS,kBAAkB,KAAa,KAAqB;AAClE,QAAM,MAAM,eAAe,GAAG;AAC9B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,SAAK,gCAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA,IAC/D,KAAK;AAAA,IACL,KAAK;AAAA,IACL,GAAK,YAAY,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,aAAa,WAAmB,YAAuB,KAAqB;AAC1F,QAAM,UAAM,oBAAAC,MAAS,MAAM,WAAW,UAAU;AAChD,SAAO,WAAW,GAAG,IAAI,IAAI,SAAS,QAAQ,CAAC;AACjD;AAGO,SAAS,eAAe,WAAmB,QAAgB,WAA+B;AAC/F,MAAI,CAAC,OAAO,WAAW,UAAU,EAAG,QAAO;AAC3C,QAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,MAAI,MAAM,SAAS,EAAG,QAAO;AAC7B,QAAM,SAAS,MAAM,MAAM,SAAS,CAAC;AACrC,MAAI;AACF,UAAM,MAAM,OAAO,KAAK,QAAQ,QAAQ;AACxC,eAAO,oBAAAC,QAAW,MAAM,WAAW,WAAW,GAAG;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,KAAqB;AACpD,SAAO,iBAAiB,aAAa,IAAI,CAAC,CAAC;AAC7C;AAGO,SAAS,cAAc,KAAkD;AAC9E,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,aAAa,mBAAmB,IAAI;AAC1C,SAAO,EAAE,YAAY,KAAK,kBAAkB,KAAK,UAAU,EAAE;AAC/D;;;ACpHA,IAAM,WAAW;AAEjB,SAAS,OAAO,OAAe,QAAwB;AACrD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,UAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,UAAM,SAAS,GAAG,IAAI;AACtB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YACkB,gBAAyB,OACzC,OAAe,IACf,UAAkB,OAClB;AAHgB;AAIhB,SAAK,UAAU;AACf,SAAK,UAAU;AAAA,EACjB;AAAA,EANkB;AAAA,EAJV;AAAA,EACA;AAAA,EAWR,QAAgB;AACd,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAO,KAAK;AAAA,IACd;AACA,WAAO,KAAK,IAAI;AAAA,EAClB;AAAA,EAEQ,aAAqB;AAC3B,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAQ,KAAK,UAAU,uBAAyB,MAAM,OAAO;AAAA,IAC/D;AAKA,UAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,WAAO,gBAAgB,GAAG;AAC1B,QAAI,IAAI;AACR,eAAW,KAAK,IAAK,KAAK,KAAK,KAAM,OAAO,CAAC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,OAAe;AACb,UAAM,KAAK,OAAO,KAAK,MAAM,CAAC,KAAM,MAAM,OAAO;AACjD,UAAM,OAAO,KAAK,WAAW;AAC7B,WAAO,OAAO,IAAI,EAAE,IAAI,OAAO,MAAM,EAAE;AAAA,EACzC;AAAA,EAEA,aAAyB;AAAE,WAAO,KAAK,KAAK;AAAA,EAAG;AAAA,EAC/C,SAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,cAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,iBAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAC1D;;;AC7DO,IAAM,IAAI;AAAA;AAAA,EAEf,OAAU;AAAA,EACV,SAAU;AAAA,EACV,QAAU;AAAA,EACV,QAAU;AAAA,EACV,UAAU;AAAA;AAAA,EAGV,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,cAAgB;AAAA,EAChB,eAAgB;AAAA,EAChB,qBAAqB;AAAA;AAAA,EAGrB,0BAA6B;AAAA,EAC7B,gBAA6B;AAAA,EAC7B,2BAA6B;AAAA;AAAA,EAG7B,yBAAyB;AAAA,EACzB,qBAAyB;AAAA,EACzB,wBAAyB;AAAA,EACzB,oBAAyB;AAAA;AAAA,EAGzB,uBAAyB;AAAA,EACzB,uBAAyB;AAAA;AAAA,EAGzB,wCAAwC;AAAA,EACxC,0BAAwC;AAAA,EACxC,8BAAwC;AAAA;AAAA,EAGxC,0BAA6B;AAAA,EAC7B,wBAA6B;AAAA,EAC7B,4BAA6B;AAAA,EAC7B,0BAA6B;AAAA;AAAA,EAG7B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,8BAA8B;AAAA;AAAA,EAG9B,mBAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,uBAA0B;AAAA;AAAA,EAG1B,uBAAuB;AAAA,EACvB,oBAAuB;AAAA,EACvB,mBAAuB;AAAA,EACvB,oBAAuB;AAAA;AAAA,EAGvB,eAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,uBAA2B;AAAA,EAC3B,mBAA2B;AAAA;AAAA,EAG3B,8BAAgC;AAAA,EAChC,0BAAgC;AAAA,EAChC,mCAAmC;AAAA,EACnC,0BAAgC;AAAA,EAChC,8BAAgC;AAAA,EAChC,4BAAgC;AAAA,EAChC,gCAAgC;AAClC;AAEO,SAAS,SAAS,MAAc,SAAiB,MAAgB;AACtE,SAAO,EAAE,MAAM,SAAS,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC,EAAG;AAClE;AAEO,SAAS,gBAAgB,KAAuB;AACrD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,IAAI;AACV,SAAO,EAAE,YAAY;AACvB;;;ACxEO,SAAS,YAAY,OAA4B;AACtD,MAAI,MAAM,WAAW,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,SAAS,MAAM,QAAQ;AACnF,SAAO,MAAM;AACf;AAGO,SAAS,UAAU,OAAyC;AACjE,SAAO,MAAM,YAAY,MAAM,WAAW;AAC5C;AAGO,SAAS,UAAU,OAA4B;AACpD,SAAO,MAAM,WAAW;AAC1B;AAGA,SAAS,OAAO,OAAyB;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,IAAI;AACV,SAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AASO,SAAS,kBAAkB,OAA4B;AAC5D,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,aAAa,QAAS,QAAO;AACjC,MAAI,SAAU,QAAO,OAAO,MAAM,QAAQ,KAAK,MAAM,WAAW;AAChE,QAAM,IAAI,MAAM;AAChB,SAAO,OAAO,MAAM,OAAO,KAAK,KAAK,QAAQ,OAAO,MAAM,YACrD,EAAE,WAAW,aAAa,OAAO,UAAU,EAAE,IAAI;AACxD;AAGO,SAAS,SAASC,OAAwB;AAC/C,SAAOA,UAAS,QAAQ,OAAOA,UAAS,YAAY,OAAQA,MAA2B,QAAQ;AACjG;AAOO,SAAS,aAAaA,OAAwB;AACnD,QAAM,SAAkC,EAAE,GAAGA,MAAK;AAClD,SAAO,OAAO;AACd,SAAO,UAAU,aAAa,MAAM,CAAC;AACvC;AAGO,SAAS,SAAS,QAAiB,MAAsB;AAC9D,SAAO,UAAU,OAAO,OAAO,CAAC,aAAa,MAAM,GAAG,OAAO,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC;AACpF;AAOA,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EACpD,EAAE;AAAA,EAAO,EAAE;AAAA,EAAS,EAAE;AAAA,EAAQ,EAAE;AAAA,EAChC,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAiB,EAAE;AACjE,CAAC;AAOD,IAAM,qBAA0C,oBAAI,IAAI,CAAC,oBAAoB,kBAAkB,CAAC;AAWzF,SAAS,kBACd,QACA,OACA,YACS;AACT,MAAI,CAAC,OAAO,UAAU,MAAM,IAAI,EAAG,QAAO;AAC1C,MAAI,mBAAmB,IAAI,MAAM,EAAG,QAAO;AAC3C,MAAI,iBAAiB,IAAI,MAAM,IAAI,EAAG,QAAO;AAC7C,MAAI,MAAM,SAAS,EAAE,QAAQ;AAC3B,UAAM,OAAO,MAAM;AACnB,WAAO,OAAO,MAAM,YAAY,YAAY,WAAW,IAAI,MAAM;AAAA,EACnE;AACA,SAAO;AACT;;;ACtGO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAMvB,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO;AACjC,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB;AAAgB,aAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,SAAS,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IAC5F;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;;;ACzRO,IAAM,cAAc;AAAA,EACzB;AAAA,EAAW;AAAA,EAAS;AAAA,EAAa;AAAA,EACjC;AAAA,EAAiB;AAAA,EAAY;AAAA,EAAa;AAC5C;AAGO,IAAM,mBAAmB;AAmDzB,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACnC;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA,EAET,YAAY,WAAmB,MAAc,MAAc;AACzD;AAAA,MACE,mBAAmB,IAAI,gCAAgC,SAAS,4BACzC,IAAI;AAAA,IAI7B;AACA,SAAK,OAAO;AACZ,SAAK,YAAY;AACjB,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAO,WAAW,EAAE,OAAyB;AACnD,WAAO,iBAAiB,SAAS,MAAM,SAAS;AAAA,EAClD;AACF;AA6BA,SAAS,aAAa,MAAuB;AAC3C,SAAQ,YAAkC,SAAS,IAAI;AACzD;AAGO,SAAS,UAAU,YAAoB,MAAmC;AAC/E,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,IAAI;AACV,QAAM,MAAM,eAAe,YAAa,EAAE,OAAO,EAAE,KAAO,EAAE,MAAM,EAAE;AACpE,SAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAMA,SAAS,MAAM,YAAoB,OAAyC;AAC1E,QAAM,MAA+B,CAAC;AACtC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAW,QAAQ,OAAO;AACxB,YAAM,MAAM,UAAU,YAAY,IAAI;AACtC,UAAI,QAAQ,OAAW,KAAI,GAAG,IAAI;AAAA,IACpC;AAAA,EACF,WAAW,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtD,WAAO,OAAO,KAAK,KAAK;AAAA,EAC1B;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAsC;AACrE,QAAM,OAAQ,OAAO,SAAS,QAAQ,OAAO,OAAO,SAAS,WACzD,OAAO,OAAO,CAAC;AACnB,QAAM,OAAgC,CAAC;AACvC,QAAM,UAAmD,CAAC;AAC1D,MAAI,UAAqB,CAAC;AAC1B,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAChD,QAAI,SAAS,QAAS,WAAU,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AAAA,aACvD,SAAS,oBAAoB,aAAa,IAAI,EAAG,SAAQ,IAAI,IAAI,MAAM,MAAM,KAAK;AAAA,QACtF,MAAK,IAAI,IAAI;AAAA,EACpB;AACA,MAAI,KAAK,OAAO,OAAW,MAAK,KAAK,OAAO;AAC5C,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IAAI,MAAM;AAAA,IAAG,SAAS,OAAO;AAAA,IAAS,YAAY,OAAO;AAAA,IACpE;AAAA,IAAM;AAAA,IAAS;AAAA,IAAS,SAAS;AAAA,EACnC;AACF;AAOO,SAAS,iBACd,MACA,SACA,SACyB;AACzB,QAAM,OAAgC,EAAE,GAAG,KAAK;AAChD,aAAW,QAAQ,YAAa,MAAK,IAAI,IAAI,CAAC;AAC9C,QAAM,OAAgC,CAAC;AACvC,OAAK,gBAAgB,IAAI;AACzB,aAAW,CAAC,YAAY,KAAK,KAAK,KAAK,SAAS;AAC9C,QAAI,eAAe,kBAAkB;AACnC,WAAK,GAAG,IAAI;AAAA,IACd,OAAO;AACL,YAAM,OAAQ,MAAM,QAAQ,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,IAAK,KAAK,UAAU,IAAI,CAAC;AACxF,WAAK,KAAK,KAAK;AAAA,IACjB;AAAA,EACF;AACA,OAAK,QAAQ;AACb,SAAO;AACT;AAeO,IAAM,cAAN,MAAmC;AAAA,EAChC,OAAO,oBAAI,IAAkB;AAAA,EAErC,OAA0B;AACxB,UAAM,MAAyB,CAAC;AAChC,eAAW,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM;AAC/B,YAAM,UAA4C,CAAC;AACnD,iBAAW,CAAC,YAAY,KAAK,KAAK,EAAE,SAAS;AAC3C,mBAAW,CAAC,KAAK,KAAK,KAAK,MAAO,SAAQ,KAAK,CAAC,YAAY,KAAK,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,MACrF;AACA,UAAI,KAAK;AAAA,QACP;AAAA,QACA,MAAM,iBAAiB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,QAAQ,IAAI,OAAK,KAAK,MAAM,CAAC,CAAC,GAAG,OAAO;AAAA,QACrF,SAAS,EAAE;AAAA,QACX,YAAY,EAAE;AAAA,MAChB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,QAA+B;AAClC,SAAK,MAAM,iBAAiB,MAAM,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,QAA2B;AAG/B,UAAM,OAAO,KAAK,UAAU,OAAO,IAAI;AACvC,UAAM,UAAU,OAAO,QAAQ,IAAI,OAAK,KAAK,UAAU,CAAC,CAAC;AACzD,UAAM,UAAU,OAAO,QAAQ,OAAO,OAAO,EAAE,IAAI,CAAC,CAAC,YAAY,KAAK,MACpE,CAAC,YAAY,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MACjD,CAAC,KAAK,UAAU,QAAQ,UAAU,SAAY,OAAO,KAAK,UAAU,KAAK,CAAC,CAAU,CAAC,CAAU;AACnG,QAAI,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE;AAC/B,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,QAAQ,IAAI,EAAE,QAAQ,SAAS;AACrC,UAAI,UAAU,OAAO,KAAM,OAAM,IAAI,mBAAmB,OAAO,IAAI,OAAO,OAAO,IAAI;AAAA,IACvF;AACA,QAAI,CAAC,KAAK,OAAO,SAAS;AACxB,UAAI,EAAE,MAAM,MAAM,SAAS,GAAG,YAAY,IAAI,SAAS,CAAC,GAAG,SAAS,oBAAI,IAAI,EAAE;AAAA,IAChF;AACA,eAAW,SAAS,QAAS,GAAE,QAAQ,KAAK,KAAK;AACjD,eAAW,CAAC,YAAY,KAAK,KAAK,SAAS;AACzC,UAAI,OAAO,EAAE,QAAQ,IAAI,UAAU;AACnC,UAAI,CAAC,KAAM,GAAE,QAAQ,IAAI,YAAa,OAAO,oBAAI,IAAI,CAAE;AACvD,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO;AAChC,YAAI,UAAU,KAAM,MAAK,OAAO,GAAG;AAAA,YAC9B,MAAK,IAAI,KAAK,KAAK;AAAA,MAC1B;AAAA,IACF;AACA,MAAE,OAAO;AACT,MAAE,UAAU,OAAO;AACnB,MAAE,aAAa,OAAO;AACtB,SAAK,KAAK,IAAI,OAAO,IAAI,CAAC;AAAA,EAC5B;AAAA,EAEA,OAAO,IAAkB;AACvB,SAAK,KAAK,OAAO,EAAE;AAAA,EACrB;AACF;;;ACjSO,IAAM,aAAN,cAA+B,IAAU;AAAA;AAAA,EAErC,QAAQ,oBAAI,IAAO;AAAA,EACnB;AAAA,EAET,YAAY,SAAkB;AAC5B,UAAM;AACN,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,UAAmB;AACzB,WAAO,KAAK,QAAQ,WAAW,KAAK,QAAQ,QAAQ;AAAA,EACtD;AAAA,EAEQ,WAAiB;AACvB,QAAI,KAAK,QAAQ,EAAG,YAAW,OAAO,MAAM,KAAK,EAAG,MAAK,MAAM,IAAI,GAAG;AAAA,EACxE;AAAA,EAES,IAAI,KAAuB;AAClC,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,UAAU,UAAa,KAAK,QAAQ,EAAG,MAAK,MAAM,IAAI,GAAG;AAC7D,WAAO;AAAA,EACT;AAAA,EAES,IAAI,KAAQ,OAAgB;AACnC,QAAI,KAAK,QAAQ,QAAS,MAAK,MAAM,IAAI,GAAG;AAC5C,WAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EAC7B;AAAA,EAES,OAAO,KAAiB;AAC/B,UAAM,MAAM,MAAM,OAAO,GAAG;AAC5B,QAAI,OAAO,KAAK,QAAQ,QAAS,MAAK,MAAM,IAAI,GAAG;AACnD,WAAO;AAAA,EACT;AAAA,EAES,QAAc;AACrB,QAAI,KAAK,QAAQ,QAAS,YAAW,OAAO,MAAM,KAAK,EAAG,MAAK,MAAM,IAAI,GAAG;AAC5E,UAAM,MAAM;AAAA,EACd;AAAA,EAES,SAAyB;AAChC,SAAK,SAAS;AACd,WAAO,MAAM,OAAO;AAAA,EACtB;AAAA,EAES,UAA+B;AACtC,SAAK,SAAS;AACd,WAAO,MAAM,QAAQ;AAAA,EACvB;AAAA,EAEA,CAAU,OAAO,QAAQ,IAAyB;AAChD,SAAK,SAAS;AACd,WAAO,MAAM,OAAO,QAAQ,EAAE;AAAA,EAChC;AAAA,EAES,QAAQ,UAAsD,SAAyB;AAC9F,SAAK,SAAS;AACd,UAAM,QAAQ,UAAU,OAAO;AAAA,EACjC;AAAA;AAAA,EAGA,KAAK,KAAuB;AAC1B,WAAO,MAAM,IAAI,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,UAAa,KAA2C;AACtE,SAAO,IAAI,UAAU,OAAO,KAAK,GAAG;AACtC;AAGO,SAAS,WAAiB,KAA0C;AACzE,SAAO,IAAI,UAAU,QAAQ,KAAK,GAAG;AACvC;;;AC7DO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EACA;AAAA,EACT,YAAY,MAAc,SAAiB,MAAgB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAMO,SAAS,KACd,OACA,QACA,QACiB;AACjB,QAAM,WAAqB;AAAA,IACzB,SAAS;AAAA,IACT,IAAI,MAAM,IAAI,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACA,QAAM,MAAM,MAAM,SAAS,QAAQ;AACnC,MAAI,IAAI,OAAO;AACb,UAAM,IAAI,iBAAiB,IAAI,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI;AAAA,EAC9E;AACA,SAAO,IAAI;AACb;AAWO,SAAS,QAAQ,OAAoB;AAC1C,QAAM,IAAI,CAAuB,GAAM,MAAuB,KAAK,OAAO,GAAG,CAAC;AAE9E,SAAO;AAAA,IACL,WAAW;AAAA,MACT,QAAc,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MACpF,UAAc,CAAC,MAA8C,EAAE,sBAAsB,CAAC;AAAA,MACtF,cAAc,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,MACX,MAAY,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MAClF,OAAY,CAAC,MAA8C,EAAE,qBAAqB,CAAC;AAAA,MACnF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,MACxF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC1F;AAAA,IACA,MAAM;AAAA,MACJ,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,UAAU,CAAC,MAAqC,EAAE,iBAAiB,CAAC;AAAA,MACpE,OAAU,CAAC,MAAqC,EAAE,cAAc,CAAC;AAAA,IACnE;AAAA,IACA,QAAQ;AAAA,MACN,SAAS,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACrE,OAAS,CAAC,MAAsC,EAAE,gBAAgB,CAAC;AAAA,IACrE;AAAA,IACA,QAAQ;AAAA,MACN,SAAU,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACvE,QAAU,CAAC,MAAuC,EAAE,iBAAiB,CAAC;AAAA,MACtE,UAAU,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IAC1E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,OAAO,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACnE,MAAO,CAAC,MAAsC,EAAE,iBAAiB,CAAC;AAAA,IACpE;AAAA,IACA,SAAS;AAAA,MACP,KAAQ,CAAC,MAAsC,EAAE,eAAe,CAAC;AAAA,MACjE,QAAQ,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,IACtE;AAAA,IACA,YAAY;AAAA,MACV,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,SAAS,CAAC,MAA0C,EAAE,sBAAsB,CAAC;AAAA,MAC7E,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,OAAS,CAAC,MAA0C,EAAE,oBAAoB,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,MACvE,QAAS,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACtE,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,SAAS;AAAA,MACP,OAAmB,CAAC,MAAiD,EAAE,iBAAiB,CAAC;AAAA,MACzF,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,WAAmB,CAAC,MAAiD,EAAE,qBAAqB,CAAC;AAAA,MAC7F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,kBAAmB,CAAC,MAAiD,EAAE,4BAA4B,CAAC;AAAA,IACtG;AAAA,IACA,OAAO;AAAA,MACL,MAAiB,CAAC,MAA6C,EAAE,cAAc,CAAC;AAAA,MAChF,iBAAiB,CAAC,MAA6C,EAAE,yBAAyB,CAAC;AAAA,MAC3F,gBAAiB,CAAC,MAA6C,EAAE,wBAAwB,CAAC;AAAA,MAC1F,cAAiB,CAAC,MAA6C,EAAE,sBAAsB,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;;;ACmPO,SAAS,OAAO,GAAS,SAAwB;AACtD,QAAM,QAA8B,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,EAAE;AACzE,SAAO,MAAM,CAAC,KAAK,MAAM,OAAO;AAClC;;;AClXA,IAAM,YAAY;AAMlB,SAAS,eAAe,aAAqB,QAAiB,QAAyC;AACrG,SAAO;AAAA,IACL,WAAW;AAAA,MACT,KAAK;AAAA;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,YAAY,EAAE,KAAK,aAAa,KAAK,KAAK;AAAA,MAC1C,gBAAgB;AAAA,IAClB;AAAA,IACA,SAAS,aAAa,MAAM,EAAE,SAAS,OAAO;AAAA,IAC9C,WAAW;AAAA,EACb;AACF;AAEO,SAAS,mBAAmB,OAA0B;AAC3D,QAAM,SAAS,IAAI,yBAAyB,CAAC,MAAM;AACjD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,SAAU,EAAE,UAAqB;AAEvC,QAAI,CAAC,MAAM,QAAQ,gBAAgB;AACjC,YAAM,aAAa,GAAG,MAAM,MAAM,SAAS,KAAK,EAAE,IAAI,OACpD,eAAe,GAAG,IAAI,YAAY,CAAC,GAAG,MAAM,CAAC;AAC/C,aAAO,EAAE,QAAQ;AAAA,QACf;AAAA,QACA,MAAM;AAAA,MACR,EAAC;AAAA,IACH;AACA,UAAM,WAAsB,CAAC;AAC7B,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAClD,YAAM,YAAY,eAAe,GAAG,IAAI,YAAY,KAAK,GAAG,MAAM;AAClE,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,QAAQ,eAAe,SAAS;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,2BAA2B,GAAG,EAAE,EAAE;AAAA,MAClF;AACA,UAAI,YAAY,MAAM;AACpB,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,6BAA6B,MAAM,GAAG;AAAA,QAAE,EAAE;AAAA,MAC9C;AACA,eAAS,KAAK,EAAE,KAAK,MAAM,KAAK,QAAQ,CAAC;AAAA,IAC3C;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;AAAA,EAChC,CAAC;AAED,QAAM,SAAS,IAAI,wBAAwB,CAAC,MAAM;AAChD,UAAM,UAAU,EAAE;AAClB,QAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,MAAM,QAAQ,oBAAoB;AACpC,UAAI;AACJ,UAAI;AAAE,aAAK,CAAC,CAAC,MAAM,QAAQ,mBAAmB,OAAkC;AAAA,MAAG,SAC5E,GAAG;AACR,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,iBAAiB,GAAG,EAAE,EAAE;AAAA,MAC5E;AACA,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,wBAAwB,EAAE;AACrF,aAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,IACtC;AACA,WAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,6DAA6D,EAAE;AAAA,EACnH,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,EAAE,GAAG,iBAAiB,MAAM,QAAQ,cAAc;AACpD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AAKA,QAAI,EAAE,aAAa,UAAa,EAAE,WAAW,QAAW;AACtD,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,MAEF,EAAE;AAAA,IACJ;AAOA,QAAI,QAAQ,GAAG,MAAM,UAAU,OAAK,EAAE,aAAa,IAAI;AACvD,QAAI,QAAQ,EAAG,SAAQ,GAAG,MAAM;AAChC,UAAM,SAAmB,CAAC;AAC1B,QAAI,OAAO;AACX,QAAI,SAAS;AACb,eAAW,KAAK,GAAG,MAAM,MAAM,KAAK,GAAG;AAIrC,YAAM,eAAe,UAAU,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC/E,eAAS;AAGT,UAAI,EAAE,cAAc,cAAc;AAChC,eAAO,KAAK,OAAO,EAAE,GAAG,sBAAsB;AAAA,MAChD;AAGA,UAAI,CAAC,kBAAkB,CAAC,GAAG;AACzB,eAAO,KAAK,OAAO,EAAE,GAAG,mBAAmB;AAC3C,eAAO;AACP,iBAAS;AACT;AAAA,MACF;AACA,aAAO,SAAS,YAAY,CAAC,GAAG,YAAY;AAAA,IAC9C;AAMA,UAAM,aAAc,GAAG,eAAe,UAAa,GAAG,eAAe,OACjE,YAAY,GAAG;AACnB,QAAI,SAAS,YAAY;AACvB,aAAO,KAAK,wDAAwD;AAAA,IACtE;AACA,QAAI,OAAO,QAAQ;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IACxD;AACA,UAAM,eAAmB,GAAG,MAAM;AAClC,UAAM,iBAAmB,eAAe;AACxC,UAAM,mBAAmB;AAMzB,QAAI,mBAAmB,GAAG;AACxB,aAAO,EAAE,QAAQ;AAAA,QACf,QAAmB;AAAA,QACnB,IAAmB;AAAA,QACnB,QAAmB;AAAA,QACnB,eAAmB;AAAA,QACnB,iBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,QAC9D,YAAmB;AAAA,MACrB,EAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,QAAmB;AAAA,MACnB,IAAmB;AAAA,MACnB,eAAmB;AAAA,MACnB,iBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,MAC9D,YAAmB;AAAA,IACrB,EAAC;AAAA,EACH,CAAC;AACH;;;ACrKA,IAAM,cAAc,oBAAI,IAAU,CAAC,UAAU,SAAS,YAAY,CAAC;AACnE,IAAM,eAAe,oBAAI,IAAI,CAAC,QAAQ,eAAe,WAAW,CAAC;AAE1D,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,gBAAgB,KAAK,KAAK,OAAO,EAAE;AAAA,MACxF;AACA,WAAK,SAAS;AACd,YAAM,QAAQ,KAAK;AACnB,UAAI,UAAU,SAAU,MAAK,cAAc;AAC3C,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,UAAU,MAAM,OAAO,KAAK,GAAG,CAAC;AACxG,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AACpG,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QAAe,iBAAiB;AAAA,QAAK,QAAQ;AAAA,QACpD,kBAAmB,EAAE,oBAA+B;AAAA,MACtD,EAAC;AAAA,IACH;AAEA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,UAAU;AAC3B,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,MACzF;AACA,WAAK,SAAS;AACd,YAAM,WAAsB,KAAK,eAAe;AAChD,WAAK,cAAc;AACnB,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,SAAS,CAAC;AAClF,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AACpG,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ,EAAE,OAAO,eAAe,iBAAiB,KAAK,QAAQ,MAAM,EAAE;AAAA,IACjF;AACA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,IACzF;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,aAAa,MAAM,EAAE,OAA6B,CAAC;AAC3H,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,WAAW,GAAG;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,UAAoB,MAAM,QAAQ,EAAE,OAAO,IAC7C,CAAC,GAAG,EAAE,OAAmB,IACzB,CAAC,WAAW,cAAc,cAAc;AAC5C,UAAM,QAAiC,CAAC;AACxC,QAAI,QAAQ,SAAS,SAAS,GAAG;AAE/B,YAAM,UAAU,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,QAAM;AAAA,QAC1D,KAAK,EAAE;AAAA,QAAK,MAAM,EAAE;AAAA,QACpB,GAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,QACjC,GAAI,EAAE,QAAQ,SAAS,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,MACjD,EAAE;AACF,UAAI,QAAQ,OAAQ,OAAM,UAAU;AAAA,IACtC;AACA,QAAI,QAAQ,SAAS,YAAY,GAAG;AAClC,YAAM,QAAQ,MAAM,KAAK,UAAU,GAAG,KAAK,CAAC,EACzC,OAAO,OAAK,EAAE,UAAU,eAAe,EAAE,UAAU,cAAc,EAAE,UAAU,eAAe,EAAE,UAAU,YAAY,EACpH,IAAI,QAAM;AAAA,QAAE,IAAI,EAAE;AAAA,QAAI,MAAM,EAAE;AAAA,QAAM,OAAO,EAAE;AAAA,QAC5C,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,EAAE;AACJ,UAAI,MAAM,OAAQ,OAAM,aAAa;AAAA,IACvC;AACA,QAAI,QAAQ,SAAS,cAAc,EAAG,OAAM,eAAe,GAAG;AAC9D,QAAI,QAAQ,SAAS,QAAQ,KAAK,GAAG,mBAAoB,OAAM,qBAAqB,GAAG;AACvF,QAAI,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,KAAK,EAAG,OAAM,YAAY,GAAG,MAAM;AAIrF,UAAM,UAAuC,gBAAgB;AAAA,MAC3D,WAAW,GAAG;AAAA,MACd,WAAW,GAAG,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAgB,IAAI,CAAC;AAAA,IAChD,CAAC;AACD,UAAM,SAAS,MAAM,IAAI,WAAW;AACpC,UAAM,OAAyB;AAAA,MAC7B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa,MAAM,IAAI;AAAA,MACvB,aAAa,EAAE;AAAA,MACf,cAAc,YAAY,OAAO;AAAA,MACjC;AAAA,IACF;AACA,OAAG,UAAU,IAAI,QAAQ,IAAI;AAC7B,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,sBAAsB;AAAA,QACtB,WAAW,KAAK,QAAQ;AAAA,QACxB,UAAU,gBAAgB,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,SAAU,EAAE,2BACD,EAAE,wBACF,EAAE;AACnB,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AACvF,UAAM,OAAO,GAAG,UAAU,IAAI,MAAM;AACpC,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,qBAAqB,MAAM,EAAE,EAAE;AACjG,QAAI,MAAM,QAAQ,EAAE,eAAe,KAAK,EAAE,gBAAgB,WAAW,GAAG;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAkB,EAAE,mBAAgC,KAAK,QAAQ;AACvE,UAAM,WAAqB,CAAC;AAC5B,QAAI,KAAK,SAAS,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc;AACpE,SAAG,eAAe,KAAK,QAAQ,MAAM;AACrC,eAAS,KAAK,cAAc;AAAA,IAC9B;AACA,QAAI,KAAK,SAAS,SAAS,KAAK,MAAM,QAAQ,KAAK,QAAQ,MAAM,OAAO,GAAG;AACzE,YAAM,YAAY,oBAAI,IAAqC;AAC3D,iBAAW,KAAK,KAAK,QAAQ,MAAM,SAA2C;AAC5E,kBAAU,IAAI,EAAE,KAAe,CAAC;AAAA,MAClC;AACA,iBAAW,CAAC,KAAK,KAAK,KAAK,WAAW;AACpC,YAAI,GAAG,QAAQ,IAAI,GAAG,GAAG;AACvB,gBAAM,MAAM,GAAG,QAAQ,IAAI,GAAG;AAC9B,cAAI,OAAQ,MAAM,QAAmB,IAAI;AACzC,cAAI,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,MAAkB,IAAI;AAAA,QAC7E;AAAA,MACF;AACA,eAAS,KAAK,SAAS;AAAA,IACzB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,gBAAgB;AAAA,MAAQ,WAAW,KAAK,QAAQ;AAAA,MAAW;AAAA,MAC3D,GAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAiB,IAAI,CAAC;AAAA,IACnD,EAAC;AAAA,EACH,CAAC;AAED,QAAM,SAAS,IAAI,qBAAqB,CAAC,MAAM;AAC7C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,EAAE;AAChB,UAAM,MAAM,GAAG,MAAM,IAAI,KAAK;AAC9B,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC7D,UAAM,UAAW,EAAE,kBAA8C,CAAC;AAClE,QAAI,CAAC,QAAQ,MAAM;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AACA,UAAM,WAAY,QAAQ,YAAuB,IAAI;AACrD,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,gBAAiB,QAAQ,QAAiB,IAAI;AACpD,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,QAAQ,oBAAoB,UAAa,QAAQ,oBAAoB,QAClE,OAAO,QAAQ,oBAAoB,WAAW;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kDAAkD,EAAE;AAAA,IACzF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,UAAM,QAAQ,MAAM,IAAI,OAAO;AAC/B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAM,QAAQ;AAAA,MACd,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,QAAQ,SAAqC,CAAC;AAAA,MACtD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,YAAY,IAAI;AAAA,MAChB,SAAS,CAAC;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAgB,OAAO;AAAA,QACxC,MAAM,cAAc,IAAI,EAAE,KAAM,EAAE,UAAqB,EAAE;AAAA,MAAG,CAAC;AAAA,MACzE,QAAQ;AAAA,IACV;AAMA,QAAI,IAAI,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACxG,cAAQ,kBAAkB;AAAA,IAC5B,WAAW,qBAAqB,SAAS;AACvC,cAAQ,kBAAkB,CAAC,CAAC,QAAQ;AAAA,IACtC;AACA,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,QAAI,QAAQ;AACZ,QAAI,gBAAgB;AACpB,QAAI,aAAa;AACjB,QAAI,QAAQ,KAAK;AAAA,MAAE,IAAI;AAAA,MAAK,MAAM,EAAE;AAAA,MAAgB,OAAO;AAAA,MACxC,MAAM,MAAM,KAAK,KAAM,EAAE,UAAqB,EAAE;AAAA,IAAG,CAAC;AACvE,WAAO,EAAE,QAAQ,EAAE,oBAAoB,IAAI,IAAI,aAAa,OAAO,QAAQ,EAAE,OAA6B,EAAE;AAAA,EAC9G,CAAC;AAED,QAAM,SAAS,IAAI,4BAA4B,CAAC,MAAM;AACpD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,IAAK,EAAE,eAAyB,EAAE;AACxC,QAAI,CAAC,YAAY,IAAI,CAAC,GAAG;AACvB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6CAA6C,EAAE;AAAA,IACpF;AACA,OAAG,eAAe;AAClB,WAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,cAAc,QAAQ,EAAE,OAA6B,EAAE;AAAA,EAC7F,CAAC;AACH;;;AClQA,SAAS,UAAU,MAAgE;AACjF,MAAI,KAAK,SAAS,GAAG,GAAG;AACtB,UAAM,CAAC,MAAM,GAAG,IAAI,KAAK,MAAM,KAAK,CAAC;AACrC,QAAI,SAAS,SAAU,QAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,SAAS,KAAK,EAAE,EAAE,EAAE;AACvE,QAAI,SAAS,mBAAmB,SAAS,2BAA2B;AAClE,aAAO,EAAE,MAAM,QAAQ,EAAE,WAAW,WAAW,GAAG,EAAE,EAAE;AAAA,IACxD;AAAA,EACF;AACA,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO,EAAE,MAAM,MAAM,QAAQ,CAAC,EAAE;AAC3F,QAAM,IAAI,MAAM,iBAAiB,IAAI,EAAE;AACzC;AAEA,SAAS,eAAe,OAA8C;AACpE,QAAM,SAAS,UAAU,MAAM,IAAI;AACnC,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,SAAS,MAAM,MAAM,OAAO,OAAK,EAAE,iBAAiB,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;AACpF,QAAM,UAAU,MAAM,WAAW,CAAC;AAElC,QAAM,WAAW,CAAC,OAChB,GAAG,OAAO,CAAC,GAAG,MAAM,KAAK,QAAQ,EAAE,KAAK,KAAK,IAAM,CAAC;AAEtD,MAAI,OAAO,SAAS,oBAAoB;AACtC,WAAO;AAAA,MACL,SAAS,IAAI,UAAU,IAAI,aAAa;AAAA,MACxC,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,eAAe;AACjC,UAAM,SAAS,IAAI,WAAW,MAAM,aAAa,UAAU,IAAI,WAAW;AAC1E,WAAO;AAAA,MACL,SAAS,SAAS,aAAa;AAAA,MAC/B,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,IAAI,OAAO,OAAO;AACxB,UAAM,OAAO,IAAI,SAAS,IAAI;AAC9B,QAAI,OAAO,GAAG;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,QAAQ;AAAA,QAAkB,MAAM,MAAM;AAAA,QAC3D,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,QAAG,QAAQ,CAAC;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,MACL,SAAS,IAAI,SAAS,IAAI,SAAS,aAAa;AAAA,MAChD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,MAAI,OAAO,SAAS,iBAAiB;AACnC,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,MAAI,OAAO,SAAS,2BAA2B;AAC7C,QAAI,OAAO,QAAQ;AACjB,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,MAAM,MAAM;AAAA,QACjC,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE;AAAA,QACxB,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,MACjC;AAAA,IACF;AACA,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO,EAAE,SAAS,SAAS,MAAM,MAAM,MAAM,QAAQ,oBAAoB,OAAO,IAAI,GAAG;AACzF;AAEO,SAAS,qBAAqB,OAA0B;AAC7D,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,EAAE,MAAM,EAAE;AACrB,UAAM,eAAyB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACvG,QAAI,CAAC,aAAa,QAAQ;AACxB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,QAAI;AAAE,gBAAU,EAAE,IAAc;AAAA,IAAG,SAC5B,GAAG;AACR,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,GAAG,EAAE;AAAA,IACtD;AACA,UAAM,KAAM,EAAE,mBAA8B,MAAM,IAAI,eAAe;AACrE,UAAM,QAAsB;AAAA,MAC1B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,QAAQ,EAAE;AAAA,MACV;AAAA,MACA,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,OAAO;AAAA,MACP,UAAU,CAAC;AAAA,MACX,OAAO,CAAC;AAAA,MACR,WAAW,MAAM,IAAI;AAAA,IACvB;AACA,OAAG,cAAc,IAAI,IAAI,KAAK;AAC9B,WAAO,EAAE,QAAQ,EAAE,iBAAiB,IAAI,OAAO,OAAO,EAAE;AAAA,EAC1D,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,UAAM,SAAS,KAAK;AAAA,MAClB,IAAI,MAAM,IAAI;AAAA,MACd,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,WAAuB,EAAE,QAAmB;AAAA,IACvD,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,IAAI,EAAE;AACZ,QAAI,MAAM,SAAS,MAAM,SAAS,MAAM,WAAW;AACjD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8BAA8B,EAAE;AAAA,IACrE;AACA,UAAM,QAAQ,EAAE;AAChB,QAAI,CAAC,MAAM,aAAa,SAAS,KAAK,GAAG;AACvC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,SAAS,KAAK;AAAA,MAA0B,EAAE;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM,KAAK,OAAK,EAAE,UAAU,KAAK,GAAG;AAC5C,aAAO,EAAE,OAAO,SAAS,EAAE,qBAAqB,SAAS,KAAK,oBAAoB,EAAE;AAAA,IACtF;AACA,UAAM,MAAM,KAAK;AAAA,MACf,IAAI,MAAM,IAAI;AAAA,MACd;AAAA,MACA,MAAM;AAAA,MACN,QAAQ,EAAE;AAAA,MACV,SAAS,EAAE;AAAA,MACX,cAAc,CAAC,CAAC,EAAE;AAAA,IACpB,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,SAAU,QAAO,EAAE,QAAQ,MAAM,QAAS;AAC9D,UAAM,QAAQ;AACd,UAAM,UAAU,eAAe,KAAK;AACpC,WAAO,EAAE,QAAQ,MAAM,QAAQ;AAAA,EACjC,CAAC;AACH;;;AC1LO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,OAAO,GAAG;AACvC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,EAAE;AACpB,QAAI,OAAO,cAAc,YAAY,CAAC,UAAU,WAAW,QAAQ,GAAG;AACpE,UAAI,CAAC,GAAG,QAAQ,IAAI,SAAS,GAAG;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,aAAa,SAAS;AAAA,QAAkB,EAAE;AAAA,MAC9C;AAAA,IACF;AACA,UAAM,UAAU,EAAE;AAClB,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,CAAC,QAAQ,QAAQ;AAC9C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AACA,UAAM,WAA8B,CAAC;AACrC,eAAW,KAAK,SAA2C;AACzD,YAAM,MAAM,EAAE;AACd,UAAI,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,GAAG;AAC9B,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,GAAG,EAAE,EAAE;AAAA,MACxE;AACA,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,UAAI,KAAK,aAAa,UAAU;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,QAAQ,GAAG,iCAAiC,QAAQ;AAAA,QAAE,EAAE;AAAA,MAC5D;AACA,eAAS,KAAK;AAAA,QACZ,SAAS;AAAA,QACT,OAAO,EAAE;AAAA,QACT,gBAAgB,EAAE;AAAA,QAClB,aAAa,EAAE;AAAA,QACf,UAAW,EAAE,YAAqC,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AACA,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,UAAU;AAC3D,UAAM,KAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,MAAM,IAAI;AAAA,MACvB,OAAO;AAAA,MACP,SAAS,EAAE;AAAA,MACX,eAAgB,EAAE,iBAA0C,CAAC;AAAA,MAC7D,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,EAAE;AACtB,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,YAAY,UAAU,SAAS,IAAI,OAAK,EAAE,OAAO,EAAE,EAAE;AAAA,EACjG,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,QAAI,GAAG,UAAU,WAAW,QAAQ,GAAG;AACrC,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF,OAAO;AACL,UAAI,aAAa,GAAG,WAAW;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAqC,EAAE;AAAA,MAC3C;AACA,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF;AAGA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAEA,QAAI,MAAM,QAAQ,EAAE,iBAAiB,KAAK,EAAE,kBAAkB,WAAW,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AACA,UAAM,WAAW,IAAI,IAAI,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO,CAAC;AACrD,UAAM,cAAwB,MAAM,QAAQ,EAAE,iBAAiB,IAC3D,CAAC,GAAG,EAAE,iBAA6B,IACnC,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO;AAC/B,eAAW,OAAO,aAAa;AAC7B,UAAI,CAAC,SAAS,IAAI,GAAG,GAAG;AACtB,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,QAAQ,GAAG,sBAAsB,EAAE;AAAA,MACxE;AAAA,IACF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,eAAW,OAAO,aAAa;AAC7B,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,WAAK,WAAW;AAChB,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAChB,IAAI;AAAA,QAAK,MAAM;AAAA,QAAU,OAAO,KAAK;AAAA,QACrC,MAAM,yBAAyB,GAAG,QAAQ;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,OAAG,QAAQ;AACX,OAAG,cAAc;AACjB,OAAG,oBAAoB,CAAC,GAAG,WAAW;AACtC,OAAG,iBAAiB,EAAE;AACtB,OAAG,cAAc;AACjB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,UAAU,CAAC,GAAG,WAAW,GAAG,UAAU,SAAS,EAAE;AAAA,EACtF,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,OAAG,iBAAiB,EAAE;AACtB,OAAG,2BAA2B,EAAE;AAChC,QAAI,CAAC,GAAG,UAAU,WAAW,QAAQ,KAAK,aAAa,GAAG,WAAW;AACnE,SAAG,QAAQ;AACX,SAAG,cAAc,MAAM,IAAI;AAAA,IAC7B;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,GAAG,MAAM,EAAE;AAAA,EACvD,CAAC;AACH;;;ACnIA,IAAM,OAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAE/E,SAAS,aAAa,OAIpB;AACA,QAAM,OAAQ,MAAM,eAA0B;AAC9C,MAAI,OAAO;AACX,MAAI;AAAE,WAAO,OAAO,MAAM,cAAc,CAAG;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAK;AACpE,MAAI,MAAM,IAAI,EAAG,QAAO;AACxB,QAAM,IAAI,KAAK,IAAI,KAAK;AACxB,MAAI,KAAK,EAAG,QAAO,EAAE,OAAO,QAAQ,SAAS,oCAAoC;AACjF,MAAI,MAAM,KAAK,OAAO,IAAK,QAAO,EAAE,OAAO,QAAQ,SAAS,mDAAmD;AAC/G,MAAI,MAAM,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,QAAQ,SAAS,oDAAoD;AAClH,MAAI,KAAK,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,cAAc,UAAU,KAAM,SAAS,gDAAgD;AACnI,SAAO,EAAE,OAAO,cAAc,UAAU,MAAM,SAAS,qCAAqC;AAC9F;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,cAAc,CAAC,MAAM;AACtC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,EAAE,eAAe,UAAa,EAAE,eAAe,QAAQ,CAAC,MAAM,QAAQ,EAAE,UAAU,GAAG;AACvF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,aAAc,EAAE,cAA8C,CAAC;AACrE,QAAI,CAAC,WAAW,QAAQ;AACtB,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,4BAA4B,EAAE;AAAA,IACrF;AACA,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,eAAe;AAC/B,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,cAAc,MAAM,CAAC,GAAG,UAAU,CAAC;AAC3D,mBAAW,EAAE;AACb,oBAAY,EAAE;AAAA,MAChB,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,yBAAyB,GAAG,EAAE,EAAE;AAAA,MACzF;AAAA,IACF,OAAO;AAIL,YAAM,WAAW,CAAC,MAAgB,OAAO,MAAM,WAAW,GAAG,QAAQ,IAAI,CAAC,IAAI;AAC9E,YAAM,WAAW,WAAW,OAAO,OAAK;AAAE,cAAM,IAAI,SAAS,CAAC;AAAG,eAAO,CAAC,CAAC,KAAK,CAAC,EAAE;AAAA,MAAQ,CAAC;AAC3F,UAAI,CAAC,SAAS,QAAQ;AACpB,eAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,sDAAsD,EAAE;AAAA,MACnH;AACA,iBAAW,SAAS,CAAC;AACrB,YAAM,eAAsE,CAAC;AAC7E,UAAI,SAAS;AACb,iBAAW,KAAK,YAAY;AAC1B,cAAM,IAAI,SAAS,CAAC;AACpB,YAAI,CAAC,EAAG;AACR,YAAI,EAAE,OAAQ,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,SAAS,CAAC;AAAA,iBAClE,CAAC,OAAQ,UAAS;AAAA,YACtB,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,qBAAqB,CAAC;AAAA,MAChF;AACA,kBAAY;AAAA,QACV,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,YAAY,KAAK,UAAU,QAAQ,CAAC;AAAA,MAAkB,EAAE;AAAA,IAC5D;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,SAAK,WAAW;AAChB,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK;AAAA,MAAE,IAAI,KAAK;AAAA,MAAY,MAAM;AAAA,MAC3B,OAAO,KAAK;AAAA,MAAO,MAAM,aAAa,QAAQ;AAAA,IAAG,CAAC;AACtE,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAc,SAAS;AAAA,MACtC,aAAa;AAAA,MAAuB,aAAa,KAAK;AAAA,MACtD,MAAM,KAAK;AAAA,MACX,WAAW,UAAU;AAAA,MACrB,gBAAgB,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAAA,MAChD,WAAY,UAAU,WAAsB;AAAA,MAC5C,yBAAyB,UAAU;AAAA,IACrC;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,WAAO,EAAE,QAAQ,EAAE,UAAU,mBAAmB,OAAO,UAAU,EAAE;AAAA,EACrE,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,CAAC,MAAM;AACxC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,QAAiC;AAAA,MAAE,GAAI,KAAK,iBAAiB,CAAC;AAAA,MAC1B,GAAK,EAAE,0BAAsD,CAAC;AAAA,IAAG;AAC3G,QAAI,CAAC,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,6BAA6B,EAAE;AAAA,IAC1F;AACA,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,mBAAmB;AACnC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,kBAAkB,MAAM,KAAK;AACrD,gBAAQ,EAAE;AACV,mBAAW,EAAE;AACb,kBAAW,EAAE,UAAU,WAAsB;AAC7C,mBAAY,EAAE,UAAU,aAAwB;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,uBAAuB,GAAG,EAAE,EAAE;AAAA,MACvF;AAAA,IACF,OAAO;AACL,YAAM,IAAI,aAAa,KAAK;AAC5B,cAAQ,EAAE;AAAO,iBAAW,EAAE;AAAU,gBAAU,EAAE;AACpD,iBAAW;AAAA,IACb;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAgB,SAAS;AAAA,MACxC,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MAAI,WAAW;AAAA,MAC1B,gBAAgB;AAAA,MAAO,WAAW;AAAA,MAClC,GAAI,aAAa,SAAY,EAAE,sBAAsB,SAAS,IAAI,CAAC;AAAA,IACrE;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,UAAM,SAAkC;AAAA,MACtC;AAAA,MAAO,mBAAmB;AAAA,MAC1B,WAAW,EAAE,WAAW,UAAU,YAAY,OAAO,KAAK,KAAK,GAAG,QAAQ;AAAA,IAC5E;AACA,QAAI,aAAa,OAAW,QAAO,uBAAuB;AAC1D,WAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AAED,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,QAAQ,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAC9C,QAAI,UAAmB,IAAwB;AAC/C,QAAI,MAAM,QAAQ,kBAAkB;AAClC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,iBAAiB,MAAM,KAAK;AACpD,mBAAW,CAAC,CAAC,EAAE;AACf,aAAK,EAAE;AACP,eAAO,EAAE,kBAAkB,CAAC;AAAA,MAC9B,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,4BAA4B,GAAG,EAAE,EAAE;AAAA,MAC5F;AAAA,IACF,OAAO;AACL,YAAM,OAAQ,MAAM,eAA0B;AAC9C,UAAI,OAAO;AACX,UAAI;AAAE,eAAO,OAAO,MAAM,cAAc,CAAG;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAK;AACpE,UAAI,MAAM,IAAI,EAAG,QAAO;AACxB,YAAM,IAAI,KAAK,IAAI,KAAK;AACxB,iBAAW,KAAK,KAAM,KAAK,KAAK,OAAO;AACvC,WAAK,EAAE;AACP,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AACA,QAAI,UAAU;AACZ,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QAClC;AAAA,MAA8C,EAAE;AAClD,UAAI,CAAC,GAAG,WAAW,QAAQ,KAAK,CAAC,GAAG,QAAQ,IAAI,EAAE,GAAG;AACnD,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,qBAAqB,EAAE;AAAA,QAA2B,EAAE;AAAA,MACxD;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MACf,SAAS,WAAW,EAAE,UAAU,MAAM,GAAG,IAAI,EAAE,UAAU,MAAM;AAAA,MAC/D,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,MAChB,gBAAgB;AAAA,MAChB,WAAY,KAAK,WAAsB;AAAA,MACvC,GAAI,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;AAAA,IAC9C;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,QAAI,UAAU;AACZ,UAAI,MAAM,QAAQ,kBAAkB,IAAI;AACtC,YAAI;AAAE,gBAAM,QAAQ,eAAe,MAAM,EAAE;AAAA,QAAG,QAAQ;AAAA,QAAQ;AAAA,MAChE;AACA,aAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,IAAI,mBAAmB,OAAO,gBAAgB,KAAK,EAAE;AAAA,IAC1F;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,mBAAmB,MAAM,EAAE;AAAA,EACjE,CAAC;AACH;;;ACnNO,SAAS,uBAAuB,OAA0B;AAC/D,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,WAAW,SAAS,GAAG;AAC9C,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,IAAc;AAC9C,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,wBAAwB,EAAE,IAAI,EAAE,EAAE;AAC7F,UAAM,SAAS,EAAE;AACjB,UAAM,SAAS,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,MAAM;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,MAAM,QAAQ,EAAE,IAAI,EAAE,EAAE;AAC7F,QAAI,OAAO,WAAY,QAAO,EAAE,OAAO,SAAS,EAAE,iBAAiB,OAAO,MAAM,aAAa,EAAE;AAE/F,UAAM,SAAS,EAAE;AACjB,QAAI,CAAC,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0BAA0B,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,WAAO,cAAc;AACrB,WAAO,KAAK,KAAK;AAAA,MACf,KAAK;AAAA,MACL,KAAK,OAAO;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,SAAS,QAAQ,SAAS,OAAO,KAAK,YAAY,IAAI,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,cAAc,KAAK,GAAG;AACrC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,EAAE;AACjB,QAAI,WAAW,EAAE,YAAY;AAC3B,YAAM,SAAS,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI;AACjD,UAAI,CAAC,UAAU,OAAO,SAAS,SAAS;AACtC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAuD,EAAE;AAAA,MAC7D;AAAA,IACF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,UAAoB;AACpD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,mBAAmB,EAAE,UAAU,EAAE,EAAE;AAC9F,UAAM,MAAM,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG;AACjD,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,EAAE,GAAG,aAAa,EAAE;AACtF,UAAM,MAAM,MAAM,IAAI;AACtB,QAAI,aAAa;AACjB,QAAI,iBAAkB,EAAE,UAAqB;AAC7C,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,KAAK,IAAI,KAAK,YAAY,KAAK,QAAQ,IAAI,eAAe,EAAE;AAAA,EAChG,CAAC;AACH;;;AC5CA,SAAS,SAAS,IAAoB;AAAE,SAAO,IAAI,KAAK,EAAE,EAAE,QAAQ;AAAG;AAMvE,SAAS,QAAQ,GAAqB;AACpC,MAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAK,MAAM,GAAI,QAAO;AAChF,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,SAAS;AACxC,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,KAAK,CAAW,EAAE,SAAS;AACpE,SAAO;AACT;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,eAAe,CAAC,MAAM;AACvC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,WAAW,YAAY,eAAe,mBAAmB,GAAG;AACzF,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,QAAI,CAAC,GAAG,MAAM,IAAI,EAAE,OAAiB,GAAG;AACtC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAAA,IACrD;AACA,QAAI,EAAE,YAAY,UAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,QAAQ,EAAE,OAAO,GAAG;AAC9E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,EAAE;AAAA,IAC/D;AACA,UAAM,KAAK,EAAE;AACb,UAAM,QAAkB,MAAM,QAAQ,EAAE,IAAK,KAAkB,CAAC,EAAY;AAC5E,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,WAAW;AAC5D,UAAM,SAAwB;AAAA,MAC5B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,OAAO,EAAE;AAAA,MACT;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,UAAU,MAAM,IAAI;AAAA,MACpB,aAAa,OAAO,EAAE,WAAW;AAAA,MACjC,mBAAmB,EAAE;AAAA,MACrB,SAAU,EAAE,WAAwC;AAAA,MACpD,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,aAAa,OAAO,YAAY,EAAE;AAAA,EACvE,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,SAAS,IAAI,EAAE,UAAoB;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oBAAoB,EAAE;AAItE,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,OAAO,MAAM,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AAC1H,QAAI,WAAW;AACb,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,QAAQ,EAAE,EAAE;AAAA,MACpF;AAAA,IACF,WAAW,CAAC,OAAO,MAAM,SAAS,QAAQ,GAAG;AAC3C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gCAAgC,QAAQ,EAAE,EAAE;AAAA,IACzF;AACA,QAAI,OAAO,UAAU,YAAY;AAC/B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,0BAA0B,EAAE;AAAA,IACnF;AACA,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,wBAAwB,EAAE;AAAA,IACvE;AAGA,UAAM,eAAe,EAAE;AACvB,UAAM,YAAY,iBAAiB,UAAa,iBAAiB;AACjE,UAAM,aAAc,QAAQ,EAAE,MAAM,IAAI,EAAE,SAAS,EAAE;AACrD,QAAI,OAAO,WAAW,OAAO,QAAQ,QAAQ;AAC3C,UAAI,CAAC,WAAW;AACd,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oDAAoD,EAAE;AAAA,MAC3F;AACA,YAAM,QAAQ,IAAI,IAAI,OAAO,QAAQ,IAAI,OAAK,EAAE,EAAE,CAAC;AACnD,UAAI,CAAC,MAAM,IAAI,YAAY,GAAG;AAC5B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,iBAAiB,aAAa,YAAqB,EAAE,SAAS,OAAO,CAAC;AAAA,QAAoB,EAAE;AAAA,MAChG;AAAA,IACF,WAAW,CAAC,QAAQ,UAAU,KAAK,CAAC,WAAW;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AAEA,WAAO,QAAQ;AACf,WAAO,cAAc,MAAM,IAAI;AAC/B,WAAO,cAAc,EAAE;AACvB,WAAO,gBAAgB;AACvB,WAAO,cAAc;AACrB,WAAO,UAAU,EAAE;AACnB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,YAAY,OAAO,IAAI,SAAS,OAAO,QAAQ,EAAE;AAAA,EACtF,CAAC;AAGD,QAAM,qBAAqB,CAAC,aAAqB,QAA6B;AAC5E,UAAM,KAAK,MAAM,WAAW,IAAI,WAAW;AAC3C,QAAI,CAAC,GAAI,QAAO,CAAC;AACjB,UAAM,SAAS,SAAS,OAAO,MAAM,IAAI,CAAC;AAC1C,UAAM,UAAsB,CAAC;AAC7B,eAAW,UAAU,GAAG,SAAS,OAAO,GAAG;AACzC,UAAI,OAAO,UAAU,UAAW;AAChC,YAAM,QAAQ,SAAS,OAAO,QAAQ;AACtC,YAAM,WAAW,QAAQ,OAAO;AAChC,UAAI,SAAS,SAAU;AACvB,aAAO,QAAQ;AACf,aAAO,kBAAkB,OAAO;AAGhC,SAAG,SAAS,IAAI,OAAO,IAAI,MAAM;AACjC,YAAM,SAAmB;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,WAAW,GAAG;AAAA,UACd,MAAM;AAAA,UACN,IAAI,CAAC,OAAO,OAAO,GAAG,OAAO,KAAK;AAAA,UAClC,IAAI,MAAM,IAAI;AAAA,UACd,MAAM;AAAA,UACN,YAAY,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,UAKnB,SAAS,OAAO;AAAA,UAChB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AACA,YAAM,YAAY,IAAI,MAAM;AAC5B,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACF;;;AC7EO,IAAM,qBAAqB,oBAAI,IAAY;AAAA,EAChD;AAAA,EAAiB;AAAA,EAAkB;AAAA,EAAkB;AAAA,EACrD;AAAA,EAAoB;AAAA,EAAoB;AAAA,EACxC;AAAA,EACA;AAAA,EAA0B;AAC5B,CAAC;AAID,IAAM,sBAAsB,oBAAI,IAAY;AAAA,EAC1C;AAAA,EAAc;AAAA,EAAgB;AAAA,EAAiB;AACjD,CAAC;AAID,IAAM,oBAAoB,oBAAI,IAAY;AAAA,EACxC;AAAA,EAAsB;AAAA,EAAc;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA,EAI1D;AACF,CAAC;AAKD,IAAM,uBAAuB;AAG7B,IAAM,6BAA6B;AAMnC,IAAM,cAAc;AAEpB,SAAS,cAAc,OAAgB,OAAwB;AAC7D,QAAM,QAAkC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,SAAO,MAAM,QAAQ;AACnB,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,IAAI;AAChC,QAAI,QAAQ,MAAO,QAAO;AAC1B,QAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,iBAAW,KAAK,KAAM,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IACjD,WAAW,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpD,iBAAW,KAAK,OAAO,OAAO,IAA+B,EAAG,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IAC3F;AAAA,EACF;AACA,SAAO;AACT;AA2CA,SAAS,OAAO,SAA0B;AACxC,QAAM,IAAI,YAAY,SAAY,oBAAI,KAAK,IAAI,IAAI,KAAK,OAAO;AAC/D,SAAO,EAAE,YAAY,EAAE,QAAQ,eAAe,MAAM;AACtD;AAEA,SAAS,QAAQ,QAAiC,QAAiC;AACjF,aAAW,KAAK,OAAQ,KAAI,EAAE,KAAK,QAAS,QAAO;AACnD,SAAO;AACT;AAEA,SAAS,UAAU,GAA2E;AAC5F,QAAM,OAAO,EAAE;AACf,MAAI,SAAS,WAAc,CAAC,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AAC7F,WAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,EACvE;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAAuB;AAClD,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO;AAClE,MAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,UAAM,MAAM,KAAK,MAAM,UAAU,MAAM;AACvC,WAAO,WAAW,KAAK,GAAG,KAAK,SAAS,KAAK,EAAE,KAAK;AAAA,EACtD;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAA4G;AACnI,QAAM,YAAY,IAAI,IAAI,OAAO,UAAU,OAAO,OAAK,EAAE,SAAS,SAAS,EAAE,IAAI,OAAK,EAAE,QAAQ,CAAC;AACjG,QAAM,OAAO,OAAO,QAAQ;AAC5B,MAAI,SAAS,eAAe;AAG1B,UAAM,QAAQ,OAAO,aAAa,OAAO,OAAK,EAAE,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AACrG,QAAI,MAAM,WAAW,EAAG,QAAO,UAAU,QAAQ;AACjD,WAAO,MAAM,MAAM,OAAK,UAAU,IAAI,CAAC,CAAC;AAAA,EAC1C;AACA,MAAI,KAAK,WAAW,SAAS,EAAG,QAAO,UAAU,QAAQ,SAAS,KAAK,MAAM,UAAU,MAAM,GAAG,EAAE;AAClG,SAAO,UAAU,QAAQ;AAC3B;AAEA,SAAS,MAAM,KAAe,MAAiG;AAC7H,QAAM,MAAgB,EAAE,SAAS,OAAO,IAAI,IAAI,GAAG;AACnD,MAAI,KAAK,UAAU,OAAW,KAAI,QAAQ,KAAK;AAAA,MAC1C,KAAI,SAAS,KAAK;AACvB,SAAO;AACT;AAQA,SAAS,YAAY,OAAoB,OAAyB;AAChE,QAAMC,QAAO,UAAU,KAAK;AAC5B,MAAI,CAAC,SAASA,KAAI,EAAG;AACrB,MAAI;AACJ,MAAI;AAAE,aAAS,aAAaA,KAAgB;AAAA,EAAG,QACzC;AAAE;AAAA,EAAyF;AACjG,MAAI,MAAM,WAAW,KAAM,OAAM,QAAQ,IAAI,QAAQ,EAAE,KAAK,MAAM,KAAK,MAAM,MAAM,QAAQ,KAAK,CAAC;AAAA,MAC5F,OAAM,SAAS,IAAI,MAAM;AAChC;AAYA,SAAS,WAAW,OAA4C;AAC9D,SAAO,OAAQ,OAAyC,SAAS;AACnE;AAGA,SAAS,QAAW,OAAa;AAC/B,MAAI;AACF,WAAO,gBAAgB,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,IAAM,yBAAmC,CAAC,aAAa,cAAc,QAAQ;AActE,IAAM,cAAN,MAAkB;AAAA,EACd,aAAa,oBAAI,IAA4B;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACD,aAAa,oBAAI,IAAyB;AAAA,EAC1C,aAAa,oBAAI,IAAgC;AAAA;AAAA,EAExC;AAAA;AAAA,EAET,YAAY,oBAAI,QAA8B;AAAA;AAAA,EAE9C,YAAY,oBAAI,IAAe;AAAA;AAAA,EAE/B,cAAc,oBAAI,IAAe;AAAA,EACjC;AAAA,EACA;AAAA,EACA,iBAAkC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,gBAAgB,oBAAI,QAAgC;AAAA;AAAA,EAEnD,WAAW,oBAAI,IAAqB;AAAA;AAAA,EAE7C;AAAA;AAAA,EAES;AAAA;AAAA,EAED;AAAA,EAER,YAAY,UAA8B,CAAC,GAAG;AAC5C,SAAK,UAAU;AACf,SAAK,QAAQ,QAAQ,SAAS,IAAI,YAAY;AAC9C,SAAK,UAAU,EAAE,SAAS,OAAO,KAAK,MAAM,UAAU,YAAY,OAAO,EAAE;AAC3E,SAAK,MAAM,IAAI,UAAU,CAAC,CAAC,QAAQ,kBAAkB,IAAI,KAAiB;AAC1E,QAAI,QAAQ,mBAAoB,MAAK,UAAU;AAC/C,QAAI,QAAQ,QAAS,MAAK,eAAe,KAAK,QAAQ,OAAO;AAE7D,SAAK,qBAAqB;AAC1B,SAAK,wBAAwB;AAI7B,WAAO,eAAe,MAAM,OAAO;AAAA,MACjC,KAAK,MAAM;AACT,YAAI,CAAC,KAAK,KAAM,MAAK,OAAO,QAAQ,IAAI;AACxC,eAAO,KAAK;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AAKD,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,UAAI,CAAC,WAAW,MAAM,GAAG;AACvB,aAAK,aAAa,MAA2B;AAAA,MAC/C;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAC3B,UAAM,UAAU,MAAM,KAAK,MAAM,KAAK;AACtC,SAAK,aAAa,OAAO;AAAA,EAC3B;AAAA,EAEQ,aAAa,SAAkC;AAGrD,SAAK,WAAW,MAAM;AACtB,SAAK,QAAQ,QAAQ,IAAI,OAAK,EAAE,IAAI,CAAC;AACrC,eAAW,KAAK,QAAS,MAAK,WAAW,IAAI,EAAE,IAAI,EAAE,OAAO;AAE5D,eAAW,MAAM,KAAK,WAAW,OAAO,EAAG,MAAK,YAAY,EAAE;AAAA,EAChE;AAAA;AAAA,EAGQ,SAA0B;AAChC,WAAO,IAAI,WAAiB,KAAK,OAAO;AAAA,EAC1C;AAAA;AAAA,EAGQ,YAAY,IAAqB;AACvC,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,eAAe,WAAY,KAAI,MAAM,MAAM;AAAA,IACjD;AACA,SAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,OAAO,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,YAAY,IAA0B;AAC5C,QAAI,IAAI,KAAK,UAAU,IAAI,EAAE;AAC7B,QAAI,YAAY;AAChB,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,eAAe,cAAc,IAAI,YAAY,KAAK,QAAS;AAC/D,kBAAY;AACZ,YAAM,UAAU,IAAI,WAA4B,KAAK,OAAO;AAC5D,iBAAW,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,QAAQ,KAAK,GAAG,GAA0C;AACjG,gBAAQ,IAAI,KAAK,KAAK;AAAA,MACxB;AACA,MAAC,GAA0C,IAAI,IAAI;AAAA,IACrD;AACA,QAAI,CAAC,KAAK,WAAW;AACnB,UAAI,EAAE,KAAK,GAAG,OAAO,GAAG,SAAS,MAAM,MAAM,oBAAI,IAAI,GAAG,WAAW,GAAG,UAAU;AAChF,WAAK,UAAU,IAAI,IAAI,CAAC;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,QAAQ,IAAe,KAAmB;AAChD,QAAI,KAAK,QAAQ,QAAS,MAAK,YAAY,EAAE,EAAE,KAAK,IAAI,GAAG;AAAA,EAC7D;AAAA;AAAA,EAGQ,QAAQ,IAAqB;AACnC,QAAI,CAAC,KAAK,QAAQ,SAAS;AACzB,WAAK,gBAAgB,EAAE;AACvB;AAAA,IACF;AAGA,SAAK,YAAY,EAAE,EAAE,YAAY,KAAK,IAAI;AAC1C,QAAI,KAAK,QAAQ,QAAQ,EAAG,MAAK,UAAU,IAAI,EAAE;AAAA,QAC5C,MAAK,MAAM,EAAE;AAAA,EACpB;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,CAAC,KAAK,UAAU,KAAM;AAC1B,UAAM,OAAO,CAAC,GAAG,KAAK,SAAS;AAC/B,SAAK,UAAU,MAAM;AACrB,eAAW,MAAM,KAAM,MAAK,MAAM,EAAE;AAAA,EACtC;AAAA;AAAA,EAGQ,MAAM,IAAqB;AACjC,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AAGX,UAAI,KAAK,YAAY,IAAI,EAAE,EAAG;AAC9B,WAAK,YAAY,IAAI,EAAE;AACvB,WAAK,WAAW,GAAG,IAAI,QAAQ,KAAK,MAAM;AACxC,aAAK,YAAY,OAAO,EAAE;AAC1B,eAAO,KAAK,YAAY,EAAE;AAAA,MAC5B,CAAC,CAAC;AACF;AAAA,IACF;AACA,UAAM,SAAS,KAAK,YAAY,EAAE;AAClC,QAAI,OAAQ,MAAK,WAAW,GAAG,IAAI,MAAM;AAAA,EAC3C;AAAA,EAEQ,WAAW,IAAiB,MAA2B;AAE7D,UAAM,UAAU,KAAK,MAAM,MAAM,MAAS;AAC1C,SAAK,WAAW,IAAI,IAAI,OAAO;AAC/B,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,EAAE,MAAM,QAAS,MAAK,WAAW,OAAO,EAAE;AAAA,IACpE,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,IAAqC;AACvD,UAAM,IAAI,KAAK,YAAY,EAAE;AAC7B,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,WAAW,IAAI,CAAC;AAAA,IAChC,SAAS,KAAK;AAEZ,QAAE,UAAU;AACZ,WAAK,iBAAiB,KAAK,EAAE,IAAI,GAAG,IAAI,SAAS,GAAG,MAAM,OAAO,CAAC;AAClE;AAAA,IACF;AACA,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ;AACd,UAAM,OAAO,MAAM;AACjB,QAAE,MAAM,MAAM;AACd,UAAI,MAAM,QAAS,GAAE,UAAU;AAAA,IACjC;AACA,UAAM,SAAS,CAAC,QAAiB;AAC/B,WAAK,SAAS,IAAI,GAAG,KAAK;AAC1B,WAAK,iBAAiB,KAAK,EAAE,IAAI,MAAM,IAAI,SAAS,MAAM,QAAQ,CAAC;AAAA,IACrE;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,MAAO,KAAK;AAAA,IAClC,SAAS,KAAK;AACZ,aAAO,GAAG;AACV;AAAA,IACF;AACA,QAAI,WAAW,MAAM,EAAG,QAAO,QAAQ,QAAQ,MAAM,EAAE,KAAK,MAAM,MAAM;AACxE,SAAK;AAAA,EACP;AAAA;AAAA,EAGQ,WAAW,IAAe,GAAuC;AACvE,UAAM,UAAU,EAAE;AAClB,UAAM,UAAmD,CAAC;AAC1D,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,SAAS;AACX,cAAM,MAA+B,CAAC;AACtC,mBAAW,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,QAAQ,KAAK,GAAG,GAA0C;AACjG,cAAI,GAAG,IAAI;AAAA,QACb;AACA,gBAAQ,IAAI,IAAI;AAAA,MAClB,WAAW,IAAI,MAAM,MAAM;AACzB,cAAM,UAAmC,CAAC;AAC1C,mBAAW,OAAO,IAAI,MAAO,SAAQ,GAAG,IAAI,IAAI,KAAK,GAAG,KAAK;AAC7D,gBAAQ,IAAI,IAAI;AAAA,MAClB;AACA,UAAI,MAAM,MAAM;AAAA,IAClB;AACA,QAAI,SAAS;AACX,cAAQ,gBAAgB,IAAI,EAAE,GAAG,GAAG,iBAAiB;AAAA,IACvD,WAAW,EAAE,KAAK,MAAM;AACtB,YAAM,UAAmC,CAAC;AAC1C,iBAAW,OAAO,EAAE,KAAM,SAAQ,GAAG,IAAI,GAAG,iBAAiB,GAAG,KAAK;AACrE,cAAQ,gBAAgB,IAAI;AAAA,IAC9B;AACA,MAAE,KAAK,MAAM;AACb,UAAM,UAAU,GAAG,MAAM,MAAM,UAAU,IAAI,EAAE,GAAG;AAClD,QAAI,CAAC,WAAW,CAAC,QAAQ,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,OAAQ,QAAO;AACxE,WAAO;AAAA,MACL,IAAI,GAAG;AAAA,MACP,MAAM,UAAU,IAAI,EAAE;AAAA,MACtB,SAAS,GAAG,MAAM;AAAA,MAClB,YAAY,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,WAAW,GAAG;AAAA,MACxE,MAAM,KAAK,OAAO,EAAE;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,IACrC;AAAA,EACF;AAAA;AAAA,EAGQ,SAAS,IAAe,GAAc,QAA2B;AACvE,QAAI,OAAO,SAAS;AAClB,QAAE,UAAU;AACZ;AAAA,IACF;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,GAAG;AAC1D,UAAI,SAAS,kBAAkB;AAC7B,mBAAW,OAAO,OAAO,KAAK,KAAK,EAAG,GAAE,KAAK,IAAI,GAAG;AACpD;AAAA,MACF;AACA,YAAM,MAAO,GAA0C,IAAI;AAC3D,UAAI,eAAe,WAAY,YAAW,OAAO,OAAO,KAAK,KAAK,EAAG,KAAI,MAAM,IAAI,GAAG;AAAA,IACxF;AAAA,EACF;AAAA;AAAA,EAGQ,gBAAgB,IAAqB;AAC3C,UAAM,QAAQ,KAAK,WAAW,IAAI,GAAG,EAAE,KAAK,KAAK;AACjD,SAAK,WAAW,IAAI,GAAG,IAAI,IAAI;AAC/B,QAAI;AACJ,QAAI;AACF,eAAS,EAAE,IAAI,GAAG,IAAI,MAAM,KAAK,WAAW,EAAE,GAAG,SAAS,MAAM,YAAY,KAAK,IAAI,EAAE;AAAA,IACzF,QAAQ;AACN;AAAA,IACF;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AACX,WAAK,UAAU,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC,GAAG,MAAM;AAClE;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,KAAK,MAAM;AAAA,IACjC,SAAS,KAAK;AACZ,WAAK,iBAAiB,KAAK,MAAM;AACjC;AAAA,IACF;AACA,QAAI,WAAW,MAAM,GAAG;AACtB,WAAK,UAAU,QAAQ,QAAQ,MAAM,GAAG,MAAM;AAAA,IAChD;AAAA,EACF;AAAA,EAEQ,UAAU,MAAqB,QAA+B;AACpE,UAAM,UAAU,KAAK,MAAM,SAAO,KAAK,iBAAiB,KAAK,MAAM,CAAC;AACpE,SAAK,WAAW,IAAI,OAAO,IAAI,OAAO;AACtC,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,OAAO,EAAE,MAAM,SAAS;AAC9C,aAAK,WAAW,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,iBAAiB,KAAc,QAA+C;AACpF,QAAI,KAAK,QAAQ,cAAc;AAC7B,UAAI;AACF,aAAK,QAAQ,aAAa,KAAK,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,QAAQ,CAAC;AAAA,MAC3E,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAQ,MAAM,uCAAuC,OAAO,EAAE,yBAAyB,OAAO,EAAE;AAAA,EAClG;AAAA,EAEA,MAAM,aAA4B;AAChC,WAAO,KAAK,WAAW,MAAM;AAC3B,YAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,CAAC;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAIQ,eAAuB;AAC7B,QAAI,KAAK,YAAY,QAAW;AAC9B,WAAK,WAAW;AAChB,aAAO,OAAO,KAAK,OAAO;AAAA,IAC5B;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc;AACZ,WAAO,KAAK,aAAa,KAAK,aAAa;AAAA,EAC7C;AAAA,EAEA,QAAQ,UAAqC;AAC3C,SAAK,eAAe,KAAK,QAAQ;AACjC,WAAO,MAAM;AACX,YAAM,IAAI,KAAK,eAAe,QAAQ,QAAQ;AAC9C,UAAI,KAAK,EAAG,MAAK,eAAe,OAAO,GAAG,CAAC;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA,EAGA,aAAa,IAAwC;AACnD,WAAO,KAAK,WAAW,IAAI,EAAE;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,cAAc,IAAe,QAAgE;AAGnG,QAAI,OAAO,WAAW,UAAU;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,uDAAuD,EAAE;AAAA,IACtG;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,MAAM,EAAE,EAAE;AAAA,IAClF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,gBAAgB,MAAY,QAAgE;AAClG,UAAM,SAAS,KAAK;AACpB,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,OAAO,aAAa,WAAW,GAAG;AAGvE,aAAO;AAAA,IACT;AAOA,QAAI,OAAO,aAAa,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE,GAAG;AACpH,aAAO;AAAA,IACT;AACA,QAAI,OAAO,WAAW,YAAY,CAAC,OAAO,aAAa,SAAS,MAAwB,GAAG;AACzF,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,OAAO,MAAM,CAAC,EAAE,EAAE;AAAA,IAC3G;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,WAAoB;AAClB,UAAM,MAAsC,CAAC;AAC7C,eAAW,MAAM,KAAK,WAAW,OAAO,EAAG,KAAI,KAAK,KAAK,WAAW,EAAE,CAAC;AACvE,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,OAAO,IAAwC;AACrD,WAAO;AAAA,MACL,IAAc,GAAG;AAAA,MACjB,SAAc,GAAG;AAAA,MACjB,OAAc,GAAG;AAAA,MACjB,UAAc,GAAG;AAAA,MACjB,MAAc,GAAG;AAAA,MACjB,cAAc,GAAG;AAAA,MACjB,oBAAoB,GAAG;AAAA,MACvB,oBAAoB,GAAG;AAAA,MACvB,SAAc,GAAG;AAAA,MACjB,YAAc,GAAG;AAAA,MACjB,eAAe,GAAG;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,WAAW,IAAwC;AACzD,UAAM,EAAE,YAAY,eAAe,GAAG,IAAI,IAAI,KAAK,OAAO,EAAE;AAC5D,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAiB,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC;AAAA,MACjD,OAAiB,MAAM,KAAK,UAAU,GAAG,KAAK,CAAC;AAAA,MAC/C,WAAiB,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAAA,MACnD,UAAiB,MAAM,KAAK,UAAU,GAAG,QAAQ,CAAC;AAAA,MAClD,eAAiB,MAAM,KAAK,UAAU,GAAG,aAAa,CAAC;AAAA,MACvD,UAAiB,MAAM,KAAK,UAAU,GAAG,QAAQ,CAAC;AAAA,MAClD,WAAiB,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAAA,MACnD,iBAAiB,MAAM,KAAK,UAAU,GAAG,eAAe,CAAC;AAAA,MACzD,kBAAkB,EAAE,GAAG,GAAG,iBAAiB;AAAA,MAC3C,OAAiB,GAAG;AAAA,MACpB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIA,QAAQ,MAAqB;AAC3B,SAAK,WAAW,MAAM;AACtB,SAAK,UAAU,MAAM;AACrB,QAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,eAAW,KAAK,MAAwC;AAGtD,UAAI;AACJ,UAAI;AACF,aAAK,KAAK,QAAQ,CAAC;AAAA,MACrB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAQ,KAAK,+BAA+B,OAAO,GAAG,EAAE,CAAC,2BAA2B,OAAO,EAAE;AAC7F;AAAA,MACF;AACA,WAAK,WAAW,IAAI,GAAG,IAAI,EAAE;AAG7B,iBAAW,QAAQ,YAAa,CAAC,GAAG,IAAI,EAAmC,MAAM,MAAM;AACvF,WAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,SAAS,MAAM,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AAAA;AAAA,EAGQ,QAAQ,GAAuC;AACrD,UAAM,KAAgB;AAAA,MACpB,IAAI,EAAE;AAAA,MACN,SAAS,EAAE;AAAA,MACX,OAAQ,EAAE,SAAgC;AAAA,MAC1C,UAAW,EAAE,YAAyB,CAAC;AAAA,MACvC,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA,MAC1C,oBAAoB,EAAE;AAAA,MACtB,oBAAqB,EAAE,sBAAiC;AAAA,MACxD,SAAS,EAAE;AAAA,MACX,SAAS,KAAK,OAAO;AAAA,MACrB,OAAO,KAAK,OAAO;AAAA,MACnB,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU,KAAK,OAAO;AAAA,MACtB,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK,OAAO;AAAA,MACtB,WAAW,KAAK,OAAO;AAAA,MACvB,iBAAiB,KAAK,OAAO;AAAA,MAC7B,kBAAmB,EAAE,oBAA+C,CAAC;AAAA,MACrE,OAAQ,EAAE,SAA0B,CAAC;AAAA,MACrC,YAAY,EAAE;AAAA,MACd,eAAe,CAAC,CAAC,EAAE;AAAA,IACrB;AACA,eAAW,KAAM,EAAE,WAAwB,CAAC,GAAG;AAE7C,UAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,EAAG,GAAE,OAAO,CAAC;AACtC,UAAI,EAAE,WAAW,OAAW,GAAE,SAAS;AACvC,SAAG,QAAQ,IAAI,EAAE,KAAK,CAAC;AAAA,IACzB;AACA,eAAW,KAAM,EAAE,SAAoB,CAAC,EAAG,IAAG,MAAM,IAAI,EAAE,IAAI,CAAC;AAC/D,eAAW,KAAM,EAAE,aAAoC,CAAC,EAAG,IAAG,UAAU,IAAI,EAAE,IAAI,CAAC;AAEnF,eAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,SAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,eAAW,KAAM,EAAE,iBAAqE,CAAC;AACvF,SAAG,cAAc,IAAI,EAAE,IAAI,CAAU;AACvC,eAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,SAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,eAAW,KAAM,EAAE,aAAiE,CAAC,GAAG;AAGtF,YAAM,UAAU,gBAAiB,EAAE,WAAW;AAAA,QAC5C,WAAW,EAAE;AAAA,QAAW,WAAW,EAAE;AAAA,QACrC,SAAS,EAAE;AAAA,QAAS,OAAO,EAAE;AAAA,QAC7B,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MACtC,CAAiC;AACjC,UAAI,CAAC,EAAE,SAAS;AAGd,cAAM,WAAW,QAAQ;AACzB,cAAM,QAAiC,CAAC;AACxC,mBAAW,OAAO,CAAC,gBAAgB,sBAAsB,WAAW,GAAG;AACrE,cAAI,SAAS,GAAG,KAAK,QAAQ,SAAS,GAAG,MAAM,GAAI,OAAM,GAAG,IAAI,SAAS,GAAG;AAAA,QAC9E;AACA,mBAAW,CAAC,KAAK,MAAM,KAAK;AAAA,UAC1B,CAAC,WAAW,CAAC,OAAO,QAAQ,QAAQ,QAAQ,CAAC;AAAA,UAC7C,CAAC,cAAc,CAAC,MAAM,QAAQ,SAAS,UAAU,CAAC;AAAA,QACpD,GAAY;AACV,gBAAM,QAAQ,SAAS,GAAG;AAC1B,cAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACxC,kBAAM,GAAG,IAAI,MAAM,IAAI,UAAQ,OAAO,YAAY,OAC/C,OAAO,WAAS,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,MAAM,OAClD,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,SAAS,EAAE,EAC3D,IAAI,WAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AAAA,UACxC;AAAA,QACF;AACA,gBAAQ,QAAQ;AAAA,MAClB;AACA,SAAG,UAAU,IAAI,EAAE,IAAI;AAAA,QACrB,IAAI,EAAE;AAAA,QAAI,MAAM;AAAA,QAChB,aAAc,EAAE,eAAe,EAAE;AAAA,QACjC,aAAc,EAAE,eAAe,EAAE;AAAA,QACjC,cAAe,EAAE,gBAAuC,YAAY,OAAO;AAAA,QAC3E;AAAA,MACF,CAAC;AAAA,IACH;AACA,eAAW,KAAM,EAAE,mBAAuE,CAAC;AACzF,SAAG,gBAAgB,IAAI,EAAE,IAAI,CAAU;AACzC,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,SAAS,UAA8B;AACrC,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,QAAQ;AACb,QAAI;AACF,YAAM,WAAW,KAAK,UAAU,QAAQ;AACxC,UAAI,SAAS,MAAO,MAAK,cAAc,UAAU,SAAS,KAAK;AAC/D,aAAO;AAAA,IACT,UAAE;AAGA,UAAI,EAAE,KAAK,QAAQ,UAAU,EAAG,MAAK,eAAe;AACpD,WAAK,YAAY;AAAA,IACnB;AAAA,EACF;AAAA,EAEQ,UAAU,UAA8B;AAI9C,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,YAAY,CAAC,SAAS,QAAQ;AACzF,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,EAAE,CAAC;AAAA,IACvF;AACA,QAAI,CAAC,cAAc,UAAU,WAAW,GAAG;AACzC,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,WAAW,SAAS,EAAE,CAAC;AAAA,IAC3G;AACA,UAAM,WAAW,KAAK,QAAQ,oBAAoB;AAIlD,QAAI,OAAO;AACX,QAAI;AACJ,QAAI;AAAE,aAAO,aAAa,QAAQ,EAAE;AAAA,IAAQ,SAAS,GAAG;AAAE,uBAAiB;AAAA,IAAG;AAC9E,QAAI,OAAO,UAAU;AACnB,aAAO,MAAM,UAAU,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzC,wCAAwC,IAAI,MAAM,QAAQ;AAAA,MAAG,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,SAAS,SAAS;AAIxB,UAAM,YAAY,SAAS;AAC3B,QACE,cAAc,UACd,cAAc,SACb,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,IACzD;AACA,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE,CAAC;AAAA,IAC5F;AACA,UAAM,SAAU,aAAa,CAAC;AAC9B,UAAM,UAAU,KAAK,SAAS,IAAI,MAAM;AACxC,QAAI,CAAC,SAAS;AACZ,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB,QAAW;AAChC,YAAM,MAAM,0BAA0B,QAAQ,eAAe,UAAU,OAAO,cAAc;AAC5F,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,EAAE,CAAC;AAAA,IAC3D;AAOA,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAMC,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,QAAQ,KAAK,YAAY,EAAE,EAAE,QAAQ,IAAI,aAAa,QAAQ,CAAC;AACrE,YAAI,OAAO;AACT,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,MAAM;AAAA,YAC7C,kBAAkB,MAAM,GAAG;AAAA,YAC3B,EAAE,gBAAgB,MAAM,IAAI;AAAA,UAAC,EAAE,CAAC;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AAMA,QAAI,KAAK,QAAQ,qBAAqB,WAAW,sBAAsB,WAAW,oBAAoB;AACpG,YAAM,SAAS,KAAK,gBAAgB,QAAQ;AAC5C,UAAI,OAAQ,QAAO,MAAM,UAAU,EAAE,OAAO,OAAO,CAAC;AACpD,UAAI,WAAW,0BAA0B;AACvC,cAAM,aAAc,SAAS,IAAe,MAAM,GAAG,EAAE,CAAC;AACxD,cAAM,SAAS,OAAO;AACtB,YAAI,WAAW,UAAa,eAAe,QAAQ;AACjD,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzC;AAAA,UAA0C,EAAE,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,KAAK,QAAQ,iBAAiB,mBAAmB,IAAI,MAAM,GAAG;AAChE,YAAM,QAAQ,KAAK,YAAY,MAAM;AACrC,UAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AAAA,IACpD;AAOA;AACE,YAAM,OAAO,KAAK,YAAY,QAAQ,MAAM;AAC5C,UAAI,KAAM,QAAO,MAAM,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,IAClD;AAaA,QAAI,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,aAAa,KAAK,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,UAAU,KAAK,oBAAoB,IAAI,MAAM,GAAG;AAC1K,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,YAAY,KAAK,cAAc,IAAI,OAAO,IAAI;AACpD,YAAI,UAAW,QAAO,MAAM,UAAU,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AAGA,UAAM,SAAS,oBAAI,IAAI;AAAA,MAAC;AAAA,MAAoB;AAAA,MACpB;AAAA,MAAkB;AAAA,MAClB;AAAA,MAAoB;AAAA,IAAmB,CAAC;AAChE,QAAI,CAAC,OAAO,IAAI,MAAM,GAAG;AACvB,YAAMA,QAAO,OAAO;AACpB,UAAI,OAAOA,UAAS,UAAU;AAC5B,cAAM,KAAK,KAAK,WAAW,IAAIA,KAAI;AACnC,YAAI,MAAM,GAAG,UAAU,UAAU;AAC/B,iBAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,0BAA0B,aAAaA,KAAI,YAAY,EAAE,CAAC;AAAA,QACvG;AAAA,MACF;AAAA,IACF;AAKA,QAAI,WAAW,eAAe;AAC5B,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,YAAM,MAAM,OAAO;AACnB,UAAI,MAAM,OAAO,QAAQ,UAAU;AACjC,cAAM,aAAa,GAAG,iBAAiB,GAAG;AAC1C,cAAM,OAAO,aAAa,GAAG,MAAM,IAAI,UAAU,IAAI;AACrD,YAAI,KAAM,QAAO,MAAM,UAAU,EAAE,QAAQ,EAAE,SAAS,YAAY,OAAO,KAAK,MAAM,EAAE,CAAC;AAAA,MACzF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AAMF,YAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,IAC/B,SAAS,GAAG;AAIV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,UAAU,kBAAkB,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;AAAA,IAC3F;AACA,QAAI,IAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC;AAI1D,UAAM,OAAO,OAAO;AACpB,QAAI,OAAO,SAAS,YAAY,CAAC,kBAAkB,IAAI,MAAM,GAAG;AAC9D,YAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,UAAI,GAAI,MAAK,YAAY,IAAI,QAAQ;AAAA,IACvC;AACA,WAAO,MAAM,UAAU,EAAE,QAAQ,QAAQ,IAAI,MAAM,EAAE,CAAC;AAAA,EACxD;AAAA;AAAA,EAIA,YAAY,IAAe,UAA0B;AACnD,SAAK,YAAY,IAAI,EAAE,UAAU,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC,EAAc,CAAC;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,UAAoB,OAA+C;AACvF,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,SAAU;AACvE,UAAM,SAAS,SAAS;AACxB,QAAI,kBAAkB,IAAI,MAAM,EAAG;AACnC,QAAI,CAAC,kBAAkB,QAAQ,OAAO,kBAAkB,EAAG;AAC3D,UAAM,MAAM,SAAS;AACrB,QAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AACnE,UAAM,SAAS;AACf,UAAM,KAAK,OAAO,OAAO,cAAc,WAAW,KAAK,WAAW,IAAI,OAAO,SAAS,IAAI;AAC1F,QAAI,CAAC,MAAM,OAAO,OAAO,SAAS,YAAY,CAAC,GAAG,QAAQ,IAAI,OAAO,IAAI,EAAG;AAK5E,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAM,QAAQ,KAAK,YAAY,EAAE;AACjC,YAAM,SAAS,aAAa,QAAQ;AACpC,UAAI,MAAM,QAAQ,IAAI,MAAM,KAAK,MAAM,SAAS,IAAI,MAAM,EAAG;AAAA,IAC/D;AACA,SAAK,YAAY,IAAI;AAAA,MACnB,SAAS,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAAA,MAC5C,SAAS,EAAE,QAAQ,WAAW,MAAM,MAAM,KAAK;AAAA,IACjD,CAAC;AAAA,EACH;AAAA;AAAA,EAGQ,YAAY,IAA4B;AAC9C,QAAI,QAAQ,KAAK,cAAc,IAAI,EAAE;AACrC,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,SAAS,oBAAI,IAAI,GAAG,UAAU,oBAAI,IAAI,EAAE;AAClD,iBAAW,SAAS,GAAG,MAAO,aAAY,OAAO,KAAK;AACtD,WAAK,cAAc,IAAI,IAAI,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,YAAY,IAAe,QAAoE;AACrG,UAAM,QAAoB,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,KAAK,IAAI,GAAG,GAAG,OAAO;AACjF,QAAI,GAAG,iBAAiB,KAAK,QAAQ,aAAa;AAChD,YAAM,OAAO,GAAG,cAAc;AAC9B,YAAM,YAAY;AAClB,SAAG,aAAa,SAAS,YAAY,KAAK,GAAG,IAAI;AAAA,IACnD;AACA,OAAG,MAAM,KAAK,KAAK;AACnB,UAAM,QAAQ,KAAK,cAAc,IAAI,EAAE;AACvC,QAAI,MAAO,aAAY,OAAO,KAAK;AACnC,eAAW,KAAK,KAAK,gBAAgB;AACnC,UAAI;AAAE,UAAE,IAAI,KAAK;AAAA,MAAG,QAAQ;AAAA,MAAuC;AAAA,IACrE;AACA,SAAK,QAAQ,EAAE;AAAA,EACjB;AAAA;AAAA,EAIQ,gBAAgB,UAA8E;AACpG,UAAM,MAAM,SAAS;AACrB,QAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AACA,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,QAAI,MAAM,WAAW,KAAK,MAAM,CAAC,MAAM,WAAW;AAChD,aAAO,SAAS,EAAE,mBAAmB,yBAAyB;AAAA,IAChE;AACA,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,SAAU,SAAS,UAAU,CAAC;AACpC,UAAM,SAAS,OAAO;AACtB,UAAM,OAAO,OAAO;AACpB,UAAM,QAAQ,OAAO;AAMrB,QAAI,OAAO,WAAW,YAAY,CAAC,UAAU,OAAO,SAAS,YAAY,CAAC,MAAM;AAC9E,aAAO,SAAS,EAAE,mBAAmB,iDAAiD;AAAA,IACxF;AAGA,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,SAAS,EAAE,mBAAmB,8CAA8C;AAAA,IACrF;AACA,UAAM,KAAM,SAAuC,KAAK,IAAI;AAC5D,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,IAAI;AACP,aAAO,SAAS,EAAE,mBAAmB,4CAA4C;AAAA,IACnF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO,SAAS,EAAE,mBAAmB,cAAc,MAAM,EAAE;AAOxE,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,eAAe,UAAa,OAAO,EAAE,UAAU,GAAG;AAC7F,aAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AAAA,IAC5D;AAMA,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,gBAAgB,UAAa,OAAO,EAAE,WAAW,GAAG;AAC/F,aAAO,SAAS,EAAE,mBAAmB,OAAO,GAAG,qBAAqB;AAAA,IACtE;AAEA,UAAM,MAAM,KAAK,UAAU,QAAQ,KAAK,EAAE;AAC1C,QAAI,CAAC,KAAK;AACR,YAAM,UAAU,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,UAAU;AACnE,UAAI,QAAS,QAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AACvE,aAAO,SAAS,EAAE,mBAAmB,UAAU,GAAG,aAAa,EAAE,QAAQ,MAAM,EAAE;AAAA,IACnF;AAGA,QAAI;AACF,YAAM,WAAqB,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAC9D,aAAO,SAAS;AAChB,YAAM,YAAY,aAAa,QAAQ;AACvC,YAAM,MAAM,iBAAiB,IAAI,GAAG;AACpC,UAAI,CAAC,eAAe,WAAW,KAAK,GAAG,GAAG;AACxC,eAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,MACtE;AACA,aAAO;AAAA,IACT,QAAQ;AAIN,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AAAA,EACF;AAAA;AAAA,EAGA,UAAU,QAAgB,KAAa,IAA8B;AACnE,eAAW,KAAK,OAAO,MAAM;AAC3B,UAAI,EAAE,QAAQ,IAAK;AACnB,UAAI,EAAE,eAAe,UAAa,MAAM,EAAE,WAAY;AACtD,UAAI,KAAK,EAAE,WAAY;AACvB,UAAI,EAAE,gBAAgB,UAAa,MAAM,EAAE,YAAa;AACxD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,YAAY,QAAgB,QAAiC;AACnE,UAAM,QAAQ,eAAe,MAAM;AACnC,QAAI,UAAU,UAAa,UAAU,cAAc,iBAAiB,IAAI,MAAM,EAAG,QAAO;AACxF,UAAM,OAAO,OAAO;AACpB,UAAM,KAAK,OAAO,SAAS,WAAW,KAAK,WAAW,IAAI,IAAI,IAAI;AAClE,QAAI,CAAC,GAAI,QAAO;AAGhB,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,GAAG,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC,EAAG,QAAO;AAC1E,WAAO;AAAA,MAAS,EAAE;AAAA,MAAQ,mBAAmB,MAAM;AAAA,MACnC,EAAE,SAAS,OAAO,YAAY,CAAC,GAAG,GAAG,QAAQ,EAAE;AAAA,IAAC;AAAA,EAClE;AAAA,EAEQ,YAAY,QAA2F;AAG7G,UAAM,OAAO,OAAO;AACpB,UAAM,SAAS,OAAO;AACtB,QAAI,OAAO,SAAS,YAAY,OAAO,WAAW,YAAY,CAAC,QAAQ,CAAC,OAAQ,QAAO;AACvF,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO;AAIpB,QAAI,OAAO,SAAS,WAAW,OAAO,aAAa,OAAW,QAAO;AACrE,QAAI,OAAO,mBAAmB,QAAW;AACvC,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,MACjB,CAAC;AAAA,IACH;AACA,UAAM,SAAS,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC3C,UAAM,MAAM,SAAS,OAAO;AAC5B,QAAI,MAAM,GAAG,oBAAoB;AAC/B,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,QAAoB,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,QAAI,GAAG,YAAY,UAAa,OAAO,aAAa,GAAG,SAAS;AAC9D,aAAO,SAAS,EAAE,uBAAuB,qDAAqD;AAAA,QAC5F,cAAc,GAAG;AAAA,QAAS,KAAK,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMQ,uBAA6B;AACnC,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,sBAA0B,OAAK,KAAK,oBAAoB,CAAC,CAAC;AAC5E,SAAK,SAAS,IAAI,0BAA0B,OAAK,KAAK,uBAAuB,CAAC,CAAC;AAC/E,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,qBAA0B,OAAK,KAAK,mBAAmB,CAAC,CAAC;AAC3E,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,eAAe,CAAC,CAAC;AACvE,SAAK,SAAS,IAAI,cAA0B,OAAK,KAAK,YAAY,CAAC,CAAC;AACpE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AACxE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,SAAS,GAAG,SAAS,CAAC;AAC5E,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,SAAS,GAAG,QAAQ,CAAC;AAC3E,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AAAA,EAC1E;AAAA,EAEQ,0BAAgC;AAEtC,oBAAgB,IAAI;AACpB,yBAAqB,IAAI;AACzB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,2BAAuB,IAAI;AAC3B,uBAAmB,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,GAAiD;AACzE,UAAM,KAAM,EAAE,aAAwB,KAAK,IAAI,YAAY;AAC3D,QAAI,OAAO,OAAO,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAChG,QAAI,KAAK,WAAW,IAAI,EAAE,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE,EAAE,EAAE;AACnG,UAAM,WAAqB,MAAM,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAI,EAAE,QAAqB,IAAI,CAAC,GAAI,KAAK,QAAQ,mBAAmB,CAAC,YAAY,YAAY,CAAE;AAWvJ,eAAW,CAAC,SAAS,UAAU,MAAM,KAAK;AAAA,MACxC,CAAC,uBAAuB,CAAC,CAAC,KAAK,QAAQ,mBAAmB,mBAAmB;AAAA,MAC7E,CAAC,qBAAqB,KAAK,QAAQ,oBAAoB,QAAW,iBAAiB;AAAA,IACrF,GAAkC;AAChC,YAAM,OAAO,QAAQ,MAAM,GAAG,EAAE,CAAC;AACjC,YAAM,aAAa,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC;AAC5E,UAAI,YAAY,CAAC,WAAY,UAAS,KAAK,OAAO;AAAA,eACzC,cAAc,CAAC,UAAU;AAChC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,GAAG,OAAO,sBAAsB,MAAM;AAAA,QAEG,EAAE;AAAA,MAC/C;AAAA,IACF;AAEA,UAAM,eAAe,SAAS,SAAS,iBAAiB,KAAK,CAAC,CAAC,KAAK,QAAQ;AAC5E,UAAM,KAAgB;AAAA,MACpB;AAAA,MACA,SAAS,KAAK,IAAI;AAAA,MAClB,OAAO;AAAA,MACP;AAAA,MACA,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA,MAC1C,oBAAoB,EAAE;AAAA,MACtB,oBAAoB,OAAO,EAAE,uBAAuB,WAAW,EAAE,qBAAqB;AAAA,MACtF,SAAS,EAAE;AAAA,MACX,SAAS,KAAK,OAAO;AAAA,MACrB,OAAO,KAAK,OAAO;AAAA,MACnB,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU,KAAK,OAAO;AAAA,MACtB,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK,OAAO;AAAA,MACtB,WAAW,KAAK,OAAO;AAAA,MACvB,iBAAiB,KAAK,OAAO;AAAA,MAC7B,kBAAkB,CAAC;AAAA,MACnB,OAAO,CAAC;AAAA,MACR,eAAe;AAAA,MACf,YAAY,eAAe,YAAY;AAAA,IACzC;AACA,SAAK,WAAW,IAAI,IAAI,EAAE;AAE1B,SAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,SAAS,OAAO,MAAM,oBAAI,IAAI,EAAE,CAAC;AAClE,WAAO,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,GAAG,QAAQ,EAAE;AAAA,EAC1D;AAAA,EAEQ,oBAAoB,GAAiD;AAC3E,UAAM,OAAO,QAAQ,GAAG,CAAC,WAAW,CAAC;AACrC,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE,SAAS,EAAE,EAAE;AACjF,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,IAAI,GAAG;AAAA,MACP,SAAS,GAAG;AAAA,MACZ,OAAO,GAAG;AAAA,MACV,MAAM,GAAG;AAAA,MACT,cAAc,GAAG;AAAA,MACjB,oBAAoB,KAAK,QAAQ,oBAAoB;AAAA,MACrD,oBAAoB,GAAG;AAAA,MACvB,UAAU,GAAG;AAAA,MACb,SAAS,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,YAAY;AAAA,MAC3D,aAAa,GAAG,MAAM;AAAA,MACtB,YAAY,GAAG,MAAM;AAAA,MACrB,gBAAgB,GAAG,UAAU;AAAA;AAAA;AAAA;AAAA,MAI7B,GAAI,GAAG,aAAa,EAAE,eAAe,GAAG,WAAW,IAAI,CAAC;AAAA,MACxD,GAAI,GAAG,qBAAqB,EAAE,oBAAoB,GAAG,mBAAmB,IAAI,CAAC;AAAA,IAC/E,EAAC;AAAA,EACH;AAAA,EAEQ,uBAAuB,GAAiD;AAC9E,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,UAAU,CAAC;AACzD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,QAAI,GAAG,QAAQ,IAAI,EAAE,IAAc,EAAG,SAAS,SAAS;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gDAAgD,EAAE;AAAA,IAC/F;AACA,UAAM,cAAc,CAAC,GAAI,EAAE,QAAqB;AAChD,QAAI,CAAC,YAAY,KAAK,QAAM,GAAG,WAAW,OAAO,CAAC,EAAG,aAAY,KAAK,UAAU;AAChF,OAAG,WAAW;AACd,QAAI,YAAY,SAAS,iBAAiB,KAAK,CAAC,GAAG,eAAe;AAChE,SAAG,gBAAgB;AACnB,SAAG,aAAa;AAAA,IAClB;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,SAAS,EAAE;AAAA,EAC7C;AAAA,EAEQ,kBAAkB,GAAiD;AACzE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,MAAM,CAAC;AACrD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,QAAI,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAClD,QAAI,CAAC,IAAI;AACP,YAAM,SAAS,KAAK,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC;AAChE,UAAI,OAAO,MAAO,QAAO;AACzB,WAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAAA,IAChD;AACA,UAAM,MAAM,EAAE;AACd,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,WAAW,GAAG,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB;AAEpB,UAAM,SAAiB;AAAA,MACrB;AAAA,MACA,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,QAAmB;AAAA,MAC5B,QAAQ;AAAA,MACR,cAAc,EAAE;AAAA,MAChB,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE;AAAA,MACV,MAAM,CAAC;AAAA,MACP,QAAQ;AAAA,IACV;AAGA,QAAI,KAAK,QAAQ,mBAAmB,OAAO,EAAE,eAAe,UAAU;AACpE,YAAM,SAAS,KAAK,QAAQ,gBAAgB,EAAE,UAAU;AACxD,UAAI,WAAW,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,oBAAoB,EAAE;AAK1F,YAAM,WAAW,OAAO;AACxB,YAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM;AAC/E,UAAI,YAAY,QAAQ,aAAa,KAAK;AACxC,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,4CAA4C,EAAE;AAAA,MAC9F;AACA,UAAI,UAAU;AACZ,YAAI,SAAS,YAAY,MAAM;AAC7B,cAAI,QAAQ,SAAS,UAAU;AAC7B,mBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,8CAA8C,EAAE;AAAA,UAChG;AAAA,QACF,WAAW,aAAa,KAAK;AAC3B,iBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,sCAAsC,EAAE;AAAA,QACxF;AAAA,MACF;AACA,aAAO,WAAW;AAClB,sBAAgB;AAChB,YAAM,KAAK,OAAO;AAClB,UAAI,OAAO,OAAO,SAAU,QAAO,iBAAiB;AACpD,aAAO,WAAW,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAChE,YAAM,MAAM,OAAO;AACnB,YAAM,SAAS,KAAK;AACpB,UAAI,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC5C,eAAO,KAAK,KAAK,EAAE,KAAK,QAAuC,KAAK,OAAO,KAAe,YAAY,IAAI,CAAC;AAAA,MAC7G;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,YAAY,OAAO,EAAE,oBAAoB,YAAY,EAAE,oBAAoB,QACrF,CAAC,MAAM,QAAQ,EAAE,eAAe,GAAG;AACxC,YAAM,UAAU,KAAK,QAAQ,SAAS,EAAE,eAA0C;AAClF,UAAI,YAAY,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,eAAe,yBAAyB,EAAE;AAC3F,YAAM,SAAS,CAAC,QAAQ,QAAQ,QAAQ,EAAE,EAAE;AAAA,QAC1C,CAAC,MAAmB,OAAO,MAAM,YAAY,MAAM;AAAA,MAAE;AAGvD,UAAI,aAAa,SAAS,aAAa,QAAQ,WAAW,SAAS,YAAY;AAC7E,eAAO,EAAE,OAAO,SAAS,EAAE,2BAA2B,+CAA+C,EAAE;AAAA,MACzG;AACA,aAAO,YAAY;AACnB,YAAM,QAAQ,QAAQ;AACtB,UAAI,SAAS,OAAO,MAAM,QAAQ,UAAU;AAC1C,eAAO,KAAK,KAAK,EAAE,KAAK,OAAsC,KAAK,MAAM,KAAe,YAAY,IAAI,CAAC;AAAA,MAC3G;AAAA,IACF;AAEA,UAAM,WAAW,CAAC,GAAG,OAAO,IAAI;AAIhC,UAAM,OAAO,EAAE;AACf,QAAI,MAAM,QAAQ,SAAS,WAAW,GAAG;AACvC,iBAAW,KAAK,KAAK,MAAM;AACzB,YAAI,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,GAAG;AACpD,iBAAO,KAAK,KAAK,EAAE,KAAK,GAAkC,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,OAAO,mBAAmB,OAAW,UAAS,iBAAiB,OAAO;AAC1E,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,cAAe,UAAS,WAAW,OAAO;AAC9C,UAAI,OAAO,cAAc,OAAW,UAAS,YAAY,OAAO;AAChE,iBAAW,KAAK,UAAU;AACxB,YAAI,CAAC,SAAS,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,EAAG,UAAS,KAAK,KAAK,CAAC;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,IAC7C;AACA,OAAG,QAAQ,IAAI,KAAK,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,EAC7C;AAAA,EAEQ,mBAAmB,GAAiD;AAK1E,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,OAAG,QAAQ,OAAO,EAAE,IAAc;AAClC,WAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE;AAAA,EAClC;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,QAAQ,OAAO,CAAC;AAC9D,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,WAAY,EAAE,YAAwB,EAAE;AAC9C,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,EAAE,SAAS,UAAa,EAAE,SAAS,QAAQ,OAAO,EAAE,SAAS,UAAU;AACzE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AAAA,IAC9D;AACA,UAAM,gBAAkB,EAAE,QAAiB,GAAG;AAC9C,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,EAAE,oBAAoB,UAAa,EAAE,oBAAoB,QAAQ,OAAO,EAAE,oBAAoB,WAAW;AAC3G,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AAEA,UAAM,SAAS,KAAK,IAAI,OAAO;AAC/B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAa;AAAA,MACjB,IAAI;AAAA,MACJ,MAAM,EAAE;AAAA,MACR,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAO,EAAE;AAAA,MACT,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,eAAe,EAAE;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,UAAU,CAAC;AAAA,MACvE,QAAQ;AAAA,IACV;AAKA,QAAI,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,KAAK,SAAS,QAAS,MAAK,kBAAkB;AAAA,aAC5F,qBAAqB,EAAG,MAAK,kBAAkB,CAAC,CAAC,EAAE;AAE5D,OAAG,MAAM,IAAI,QAAQ,IAAI;AACzB,QAAI,OAAO,EAAE,oBAAoB,UAAU;AACzC,SAAG,iBAAiB,EAAE,eAAe,IAAI;AACzC,WAAK,QAAQ,IAAI,EAAE,eAAe;AAClC,YAAM,OAAO,OAAO,KAAK,GAAG,gBAAgB;AAC5C,UAAI,KAAK,SAAS,sBAAsB;AACtC,eAAO,GAAG,iBAAiB,KAAK,CAAC,CAAC;AAClC,aAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,QAAQ,OAAO,UAAU,EAAE;AAAA,EACzD;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,WAAW,EAAE;AAOnB,UAAM,QAAkC;AAAA,MACtC,SAAkB,CAAC,eAAe,UAAU;AAAA,MAC5C,aAAkB,CAAC,eAAe,aAAa,UAAU;AAAA,MACzD,kBAAkB,CAAC,aAAa;AAAA,MAChC,QAAkB,CAAC,WAAW;AAAA,IAChC;AACA,QAAI,CAAC,MAAM,KAAK,KAAK,GAAG,SAAS,QAAQ,GAAG;AAC1C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,KAAK,KAAK,OAAO,QAAQ,EAAE,EAAE;AAAA,IACxF;AAKA,QAAI,aAAa,eAAe,KAAK,iBAAiB;AACpD,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA4H,EAAE;AAAA,IAClI;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK;AAAA,MAChB,IAAI,KAAK;AAAA,MAAY,MAAM,EAAE;AAAA,MAC7B,OAAO;AAAA,MAAU,MAAM,EAAE;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,OAAO,SAAS,EAAE;AAAA,EACvC;AAAA,EAEQ,eAAe,GAAiD;AACtE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAM9D,QAAI,KAAK,UAAU,aAAa,KAAK,UAAU,eAAe;AAC5D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,KAAK,KAAK,EAAE,EAAE;AAAA,IACrF;AAMA,QAAI,KAAK,iBAAiB;AACxB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,CAAC,KAAK,QAAQ;AAUhB,cAAM,WAAW,EAAE;AACnB,cAAM,WAAW,CAAC,GAAG,WAAW,GAAG,OAAO,CAAC,EACxC,OAAO,CAAC,CAAC,KAAK,MAAM,MAAM,QAAQ,YAAY,QAAQ,KAAK,YAAY,OAAO,SAAS,OAAO,EAC9F,IAAI,CAAC,CAAC,GAAG,MAAM,GAAG;AACrB,YAAI,SAAS,WAAW,GAAG;AACzB,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB;AAAA,UAAsH,EAAE;AAAA,QAC5H;AACA,aAAK,SAAS,EAAE,cAAc,KAAK,cAAc,UAA8B,MAAM,oBAAoB,WAAW,CAAC,EAAE;AAAA,MACzH;AACA,WAAK,mBAAmB,EAAE;AAC1B,WAAK,QAAQ;AACb,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAwB,OAAO;AAAA,QAChD,MAAM;AAAA,MAA2C,CAAC;AACtE,aAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,IACrE;AACA,SAAK,SAAS,EAAE;AAChB,QAAI,OAAO,EAAE,eAAe,YAAY,OAAO,EAAE,eAAe,SAAU,MAAK,aAAa,EAAE;AAC9F,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAwB,OAAO,YAAY,CAAC;AAC7F,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,YAAY,GAAiD;AACnE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,SAAU,EAAE,UAEA,CAAC;AACnB,QAAI,OAAO,WAAW,QAAQ,OAAO,YAAY,cAAc,OAAO,YAAY,WAAW;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,MAAiB,CAAC;AACxB,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAGlD,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,OAAO,YAAY,cAAc,QAAS;AAC9C,UAAI,OAAO,YAAY,aAAa,CAAC,QAAS;AAC9C,YAAMD,QAAO,UAAU,KAAK,KAAM,CAAC;AACnC,YAAM,KAAMA,MAAK,UAAU,CAAC;AAC5B,UAAI,OAAO,UAAUA,MAAK,WAAW,OAAO,OAAQ;AACpD,UAAI,OAAO,QAAQ,GAAG,SAAS,OAAO,KAAM;AAC5C,UAAI,OAAO,SAAS;AAClB,YAAI,SAAS,GAAG;AAChB,YAAIA,MAAK,WAAW,kBAAkB;AACpC,gBAAM,SAAS,GAAG,SAAS,IAAI,GAAG,UAAoB;AACtD,mBAAS,SAAU,OAAgC,UAAU;AAAA,QAC/D;AACA,YAAI,WAAW,OAAO,QAAS;AAAA,MACjC;AACA,YAAM,OAAgC,EAAE,KAAK,MAAM,KAAK,SAAS,MAAM,QAAQ;AAC/E,UAAI,SAAS;AACX,aAAK,UAAU,MAAM;AACrB,aAAK,UAAU,MAAM;AAAA,MACvB,OAAO;AACL,aAAK,WAAW,MAAM;AAAA,MACxB;AACA,UAAI,MAAM,UAAW,MAAK,YAAY,MAAM;AAC5C,UAAI,KAAK,IAAI;AAAA,IACf;AAIA,WAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,UAAU,KAAK,IAAI,OAAO,GAAG,MAAM,MAAM,EAAE,EAAE;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,UAAU,CAAC;AACpE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAU9D,QAAI,uBAAuB,SAAS,KAAK,KAAK,GAAG;AAC/C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,KAAK,KAAK,EAAE,EAAE;AAAA,IACvG;AACA,UAAM,KAAK,EAAE;AACb,UAAM,YAAsB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACpG,QAAI,CAAC,UAAU,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AACvF,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,EAAE;AACvB,UAAM,OAAO,gBAAgB;AAC7B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,KAAK,UAAU,IAAI,CAAC,iEAAiE,EAAE;AAAA,IACvJ;AASA,QAAI,KAAK,UAAU,sBAAsB,KAAK,QAAQ;AACpD,UAAI,YAAY,KAAK,gBAAgB,MAAM,YAAY,EAAE,QAAQ,GAAG;AAClE,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF;AAAA,QAEF,EAAE;AAAA,MACJ;AAIA,UAAI,iBAAiB,UAAa,iBAAiB,KAAK,OAAO,MAAM;AACnE,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF,gEAAgE,KAAK,OAAO,IAAI;AAAA,QAClF,EAAE;AAAA,MACJ;AAEA,iBAAW,KAAK,WAAW;AACzB,YAAI,CAAC,KAAK,OAAO,aAAa,SAAS,CAAC,EAAG,MAAK,OAAO,aAAa,KAAK,CAAC;AAAA,MAC5E;AACA,UAAI,EAAE,aAAa,OAAW,MAAK,OAAO,WAAW,EAAE;AACvD,WAAK,aAAa;AAClB,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QACP,WAAW,KAAK;AAAA,QAChB,SAAS;AAAA,QACT,cAAc,CAAC,GAAG,KAAK,OAAO,YAAY;AAAA,MAC5C,EAAE;AAAA,IACJ;AAEA,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,SAAS;AAAA,MACZ,cAAc;AAAA,MACd,cAAc;AAAA,MACd;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,WAAW,CAAC;AAAA,IACd;AACA,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,mBAAmB,CAAC;AACxF,SAAK,mBAAmB,EAAE;AAC1B,WAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,oBAAoB,GAA4B,MAAwC;AAC9F,UAAM,WAAW,EAAE;AACnB,QAAI,aAAa,UAAa,aAAa,KAAM,QAAO;AACxD,QAAI,OAAO,aAAa,UAAU;AAChC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2CAA2C,EAAE;AAAA,IAClF;AACA,QAAI,KAAK,qBAAqB,QAAW;AACvC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8CAA8C,EAAE;AAAA,IACrF;AACA,UAAM,SAAS,YAAY,KAAK,gBAAgB;AAChD,QAAI,aAAa,QAAQ;AACvB,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,QACA,EAAE,UAAU,OAAO;AAAA,MACrB,EAAE;AAAA,IACJ;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,SAAS,GAA4B,MAAiD;AAC5F,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,SAAS,CAAC;AACxD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,UAAU,UAAU,CAAC;AAC3B,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ;AAAA,MACA,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,IACV,CAAC;AACD,QAAI,SAAS,WAAW;AAGtB,UAAI,gBAAgB,KAAK,MAAO,GAAG;AACjC,aAAK,SAAS,KAAK;AACnB,aAAK,QAAQ;AAAA,MACf;AAAA,IACF,OAAO;AACL,WAAK,QAAQ,EAAE,mBAAmB,gBAAgB;AAAA,IACpD;AACA,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,KAAK,MAAM,CAAC;AAChF,WAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,EAAE;AAAA,EACzC;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,WAAW,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,UAAU,UAAU,CAAC;AAC3B,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AAGxB,UAAM,OAAO,KAAK;AAClB,QAAI,SAAS,OAAW,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAC5F,QAAI;AACJ,QAAI;AACF,gBAAU,eAAe,MAAM,EAAE,IAAa;AAAA,IAChD,SAAS,GAAG;AACV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,cAAc,GAAG,EAAE;AAAA,IAChD;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,KAAK,IAAI,WAAW;AAC/B,UAAM,WAA6B;AAAA,MACjC;AAAA,MACA,SAAS,KAAK;AAAA,MACd,UAAU,EAAE;AAAA,MACZ,mBAAmB;AAAA,MACnB,MAAM,EAAE;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,EAAE;AAAA,MACb,MAAO,EAAE,QAAqB,CAAC;AAAA,MAC/B,aAAc,EAAE,eAA4B,CAAC;AAAA,MAC7C,IAAI;AAAA,MACJ,YAAY,EAAE;AAAA,MACd,aAAa,EAAE;AAAA,MACf,kBAAkB,EAAE;AAAA,IACtB;AACA,OAAG,UAAU,IAAI,IAAI,QAAQ;AAC7B,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,MAAM,SAAS;AAAA,MACf,sBAAsB;AAAA,IACxB,CAAC;AACD,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,sBAAsB,IAAI,QAAQ,EAAE;AAAA,EAC7E;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,CAAC;AAClE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,kBAAmB,EAAE,YAAuB;AAAA,IAC9C,CAAC;AACD,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,EAAE,OAAiB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,oBAAoB,UAAU,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,SAAS,EAAE;AACjB,UAAM,OAAO,OAAO,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,IAAI;AACjE,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AACvE,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,KAAK,KAAK,EAAE,EAAE;AAAA,IACvF;AACA,QAAI,EAAE,aAAa,QAAQ,OAAO,EAAE,aAAa,YAAY,MAAM,QAAQ,EAAE,QAAQ,GAAG;AACtF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,EAAE;AAAA,IACnE;AACA,UAAM,KAAK,EAAE;AACb,UAAM,WAAW,GAAG;AACpB,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,QAAQ,GAAG;AACjB,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AAMA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,UAAM,OAAS,SAAqC,KAAK;AACzD,QAAI,CAAC,OAAO,MAAM,GAAG,YAAY,GAAG;AAClC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,IAAI,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,QAAQ,KAAK,IAAI,OAAO;AAC9B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAO,GAAG,QAAmB,KAAK;AAAA,MAClC,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,GAAG,SAAqC,CAAC;AAAA,MACjD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY,KAAK;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,WAAW,MAAM,kBAAkB,KAAK,EAAE,GAAG,CAAC;AAAA,MAC1G,QAAQ;AAAA,IACV;AAIA,QAAI,KAAK,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACzG,cAAQ,kBAAkB;AAAA,IAC5B;AACA,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,MAAM,KAAK,GAAG,CAAC;AACtG,WAAO,EAAE,QAAQ,EAAE,aAAa,OAAO,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,aAAa,GAAoC;AACxD,QAAM,MAA+B;AAAA,IACnC,KAAK,EAAE;AAAA,IAAK,MAAM,EAAE;AAAA,IAAM,MAAM,EAAE;AAAA,IAAM,QAAQ,EAAE;AAAA,EACpD;AACA,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,OAAQ,KAAI,SAAS,EAAE;AAC7B,MAAI,EAAE,KAAK,QAAQ;AACjB,QAAI,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,OAAK,CAAC,EAAE,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,OAAK,EAAE,GAAG,EAAE;AACvF,QAAI,cAAc,EAAE;AAAA,EACtB;AACA,MAAI,EAAE,OAAQ,KAAI,SAAS;AAC3B,MAAI,EAAE,SAAU,KAAI,WAAW,EAAE;AACjC,MAAI,EAAE,UAAW,KAAI,YAAY,EAAE;AACnC,SAAO;AACT;;;ACx+DA,IAAME,QAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAExE,SAAS,kBAAkB,cAC4B;AAE5D,QAAM,gBAAiC,CAAC,MAAM,eAAe;AAC3D,UAAM,WAAW;AACjB,WAAO;AAAA,MACL,UAAU,SAAS,CAAC;AAAA,MACpB,WAAW;AAAA,QACT,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB,SAAS,MAAM,CAAC,EAAE,IAAI,QAAM;AAAA,UACnD,WAAW;AAAA,UAAG,iBAAiB;AAAA,QACjC,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,QAAM,oBAAyC,CAAC,OAAO,UAAU;AAC/D,UAAM,OAAQ,MAAM,eAA0B;AAC9C,QAAI,OAAO;AACX,QAAI;AAAE,aAAO,OAAO,MAAM,cAAc,CAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAK;AACpE,QAAI,MAAM,IAAI,EAAG,QAAO;AACxB,UAAM,IAAIA,MAAK,IAAI,KAAK;AACxB,QAAI,KAAK,EAAG,QAAO;AAAA,MAAE,OAAO;AAAA,MAC1B,WAAW,EAAE,WAAW,WAAW,SAAS,oCAAoC;AAAA,IAAC;AACnF,QAAI,MAAM,KAAK,OAAO,IAAK,QAAO;AAAA,MAAE,OAAO;AAAA,MACzC,WAAW,EAAE,WAAW,WAAW,SAAS,mDAAmD;AAAA,IAAC;AAClG,QAAI,MAAM,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAC3C,WAAW,EAAE,WAAW,WAAW,SAAS,oDAAoD;AAAA,IAAC;AACnG,QAAI,KAAK,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAC9E,WAAW,EAAE,WAAW,WAAW,SAAS,gDAAgD;AAAA,IAAC;AAC/F,WAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAClD,WAAW,EAAE,WAAW,WAAW,SAAS,qCAAqC;AAAA,IAAC;AAAA,EACtF;AAEA,QAAM,mBAAuC,CAAC,OAAO,UAAU;AAC7D,UAAM,OAAQ,MAAM,eAA0B;AAC9C,QAAI,OAAO;AACX,QAAI;AAAE,aAAO,OAAO,MAAM,cAAc,CAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAK;AACpE,QAAI,MAAM,IAAI,EAAG,QAAO;AACxB,UAAM,IAAIA,MAAK,IAAI,KAAK;AACxB,UAAM,WAAY,KAAK,KAAO,KAAK,KAAK,OAAO;AAC/C,WAAO;AAAA,MACL;AAAA,MACA,IAAI,WAAW,eAAe;AAAA,MAC9B,gBAAgB;AAAA,QACd,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,eAAe,mBAAmB,iBAAiB;AAC9D;;;AC5BO,SAAS,gBACd,OACA,WACA,SACY;AACZ,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,OAAQ,OAAM,IAAI,MAAM,oBAAoB;AACzD,MAAI,CAAC,QAAQ,KAAM,OAAM,IAAI,MAAM,kBAAkB;AAErD,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,QAAM,aAAa,YAAY,QAAQ,MAAM;AAC7C,QAAM,OAAO,QAAQ,YAAY,YAAY,QAAQ,IAAI;AAEzD,QAAM,YAAY,CAAC;AAAA,IACjB,MAAc;AAAA,IACd,QAAc,QAAQ,UAAU;AAAA,IAChC,MAAc,QAAQ;AAAA,IACtB,YAAc;AAAA,IACd,aAAc;AAAA,EAChB,CAAC;AAED,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,QAAQ;AAAA,EACpB;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS,EAAE,WAAW,MAAM,QAAQ,QAAQ,SAAS,QAAQ,OAAO,cAAc;AAAA,EACpF,CAAC;AAED,QAAM,SAAkC,EAAE,QAAQ,QAAQ,QAAQ,UAAU;AAC5E,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB,SAAU;AAAA,IACV;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,YAAY,WAAW,aAAa,WAAW;AAC3E;AAmCO,SAAS,uBACd,OACA,WACA,SACe;AACf,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,MAAI,CAAC,QAAQ,YAAa,OAAM,IAAI,MAAM,yBAAyB;AAEnE,QAAM,WAAW,YAAY,QAAQ,IAAI;AACzC,QAAM,eAAe,YAAY,QAAQ,QAAQ;AACjD,QAAM,OAAO,QAAQ,YAAY;AAEjC,QAAM,WAAW;AAAA,IACf,MAAgB;AAAA,IAChB,cAAgB,QAAQ;AAAA,IACxB,WAAgB;AAAA,IAChB,eAAgB;AAAA,EAClB;AAEA,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,EAAE,cAAc,QAAQ,aAAa,MAAM,QAAQ,KAAK;AAAA,EACpE;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAe,QAAQ;AAAA,EACjC,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IACR,QAAQ;AAAA,MAAE;AAAA,MAAW,MAAM,QAAQ;AAAA,MACzB,SAAS;AAAA,MAAQ,OAAO;AAAA,IAAc;AAAA,EAClD,CAAC;AAED,QAAM,SAAkC,EAAE,UAAU,QAAQ,UAAU,WAAW,CAAC,QAAQ,EAAE;AAC5F,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IAAW,MAAM,QAAQ;AAAA,IAAW,SAAS;AAAA,IAC7C;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAiB,QAAQ;AAAA,EACnC,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,WAAW,UAAU,eAAe,aAAa;AAC7E;","names":["import_node_crypto","nodeSign","nodeVerify","call","call","wsId","CRIT"]}