@brightbeamai/chap-coordinator 0.3.3 → 0.3.5

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/canonical.ts","../src/catalogue.ts","../src/crypto.ts","../src/ids.ts","../src/jsonrpc.ts","../src/audit.ts","../src/patch.ts","../src/storage/store.ts","../src/tracked.ts","../src/api.ts","../src/types.ts","../src/profiles/audit_scitt.ts","../src/profiles/control.ts","../src/profiles/deliberation.ts","../src/profiles/handoff.ts","../src/profiles/routing.ts","../src/profiles/security_signed.ts","../src/profiles/whisper.ts","../src/coordinator.ts","../src/policy.ts","../src/transports/wrap.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator/canonical\n *\n * Deterministic JSON canonicalisation for CHAP. CHAP signs and hashes the\n * canonicalisation of envelopes.\n *\n * Follows RFC 8785 (JCS) for objects, arrays, strings, booleans, and null,\n * with one deliberate restriction on numbers. RFC 8785 mandates the\n * ECMAScript number-to-string algorithm, which is hard to reproduce\n * byte-identically across languages; a subtle mismatch would make a chain\n * written by one implementation fail verification against another. To make\n * cross-implementation agreement provable rather than approximate, a CHAP\n * canonical number MUST be an integer within the safe-integer range\n * (abs value <= Number.MAX_SAFE_INTEGER). Non-integers and larger\n * magnitudes are rejected: represent them as strings. The Python reference\n * enforces the identical rule.\n */\n\nimport { createHash } from \"node:crypto\";\n\nexport const ZERO_HASH = \"sha256:\" + \"0\".repeat(64);\n\nconst NON_INTEGER_ERROR =\n  'CHAP canonical numbers must be integers; represent decimals as strings ' +\n  '(e.g. \"8.2\") so the hash is deterministic across implementations.';\nconst NUMBER_RANGE_ERROR =\n  \"CHAP canonical integers must be within the safe-integer range \" +\n  \"(abs value <= Number.MAX_SAFE_INTEGER); represent larger numbers as strings.\";\n\nconst LONE_SURROGATE_ERROR =\n  \"CHAP canonical strings must be valid Unicode (I-JSON / RFC 7493); \" +\n  \"unpaired UTF-16 surrogates are not permitted.\";\n\nfunction assertNoLoneSurrogate(s: string): void {\n  for (let i = 0; i < s.length; i++) {\n    const c = s.charCodeAt(i);\n    if (c >= 0xd800 && c <= 0xdbff) {\n      const next = i + 1 < s.length ? s.charCodeAt(i + 1) : 0;\n      if (next < 0xdc00 || next > 0xdfff) throw new Error(LONE_SURROGATE_ERROR);\n      i++;\n    } else if (c >= 0xdc00 && c <= 0xdfff) {\n      throw new Error(LONE_SURROGATE_ERROR);\n    }\n  }\n}\n\nfunction canonicalString(s: string): string {\n  assertNoLoneSurrogate(s);\n  return JSON.stringify(s);\n}\n\nfunction canonicalNumber(n: number): string {\n  if (!Number.isFinite(n)) {\n    throw new Error(\n      \"Non-finite numbers are not permitted in a CHAP canonical value\",\n    );\n  }\n  if (!Number.isInteger(n)) {\n    throw new Error(NON_INTEGER_ERROR);\n  }\n  if (Math.abs(n) > Number.MAX_SAFE_INTEGER) {\n    throw new Error(NUMBER_RANGE_ERROR);\n  }\n  // A safe integer's toString() is always plain decimal digits (no\n  // exponent), byte-identical to Python's str(int(...)).\n  return n.toString();\n}\n\nfunction canon(value: unknown): string {\n  if (value === null) return \"null\";\n  if (value === true) return \"true\";\n  if (value === false) return \"false\";\n  if (typeof value === \"string\") return canonicalString(value);\n  if (typeof value === \"number\") return canonicalNumber(value);\n  if (Array.isArray(value)) {\n    return \"[\" + value.map(canon).join(\",\") + \"]\";\n  }\n  if (typeof value === \"object\") {\n    const obj = value as Record<string, unknown>;\n    const keys = Object.keys(obj).sort();\n    const parts: string[] = [];\n    for (const key of keys) {\n      parts.push(canonicalString(key) + \":\" + canon(obj[key]));\n    }\n    return \"{\" + parts.join(\",\") + \"}\";\n  }\n  throw new TypeError(`Cannot canonicalise value of type ${typeof value}`);\n}\n\n/** Return the JCS canonical UTF-8 bytes for a JSON-compatible value. */\nexport function canonicalize(value: unknown): Buffer {\n  return Buffer.from(canon(value), \"utf-8\");\n}\n\n/** Return ``sha256:<64-hex>`` digest of bytes. */\nexport function sha256Hex(data: Buffer | string): string {\n  const h = createHash(\"sha256\");\n  h.update(typeof data === \"string\" ? Buffer.from(data, \"utf-8\") : data);\n  return \"sha256:\" + h.digest(\"hex\");\n}\n\n/** Convenience: content hash for an artefact payload via JCS. */\nexport function contentHash(content: unknown): string {\n  return sha256Hex(canonicalize(content));\n}\n","// Generated by scripts/sync-method-catalogue.mjs. Do not edit.\n// Source: schemas/profiles/chap-methods.schema.json\n/**\n * Which profile owns which method, and which methods are never gated.\n *\n * SPECIFICATION 15.4: a Coordinator refuses a method whose owning profile the\n * workspace does not advertise.\n * The rule applies to each method, since a namespace can span profiles: audit\n * spans audit-scitt and core; escalate spans review and routing; review spans\n * review and routing; task spans core and routing.\n */\n\n/** The profile that introduces each method the references implement. */\nexport const OWNING_PROFILE: Readonly<Record<string, string>> = Object.freeze({\n  \"abstain.declare\":         \"review/1.0\",\n  \"audit.read\":              \"core/1.0\",\n  \"audit.submit_to_scitt\":   \"audit-scitt/1.0\",\n  \"audit.verify_chain\":      \"audit-scitt/1.0\",\n  \"audit.verify_receipt\":    \"audit-scitt/1.0\",\n  \"control.cancel\":          \"control/1.0\",\n  \"control.pause\":           \"control/1.0\",\n  \"control.resume\":          \"control/1.0\",\n  \"control.rollback\":        \"control/1.0\",\n  \"control.set_mode_ceiling\":\"control/1.0\",\n  \"control.snapshot\":        \"control/1.0\",\n  \"control.supersede\":       \"control/1.0\",\n  \"decide.approve\":          \"review/1.0\",\n  \"decide.override\":         \"review/1.0\",\n  \"decide.reject\":           \"review/1.0\",\n  \"deliberate.close\":        \"deliberation/1.0\",\n  \"deliberate.comment\":      \"deliberation/1.0\",\n  \"deliberate.open\":         \"deliberation/1.0\",\n  \"deliberate.vote\":         \"deliberation/1.0\",\n  \"escalate.auto\":           \"routing/1.0\",\n  \"escalate.raise\":          \"review/1.0\",\n  \"handoff.accept\":          \"handoff/1.0\",\n  \"handoff.decline\":         \"handoff/1.0\",\n  \"handoff.propose\":         \"handoff/1.0\",\n  \"participant.join\":        \"core/1.0\",\n  \"participant.leave\":       \"core/1.0\",\n  \"participant.revoke_key\":  \"core/1.0\",\n  \"participant.rotate_key\":  \"core/1.0\",\n  \"review.depth\":            \"routing/1.0\",\n  \"review.request\":          \"review/1.0\",\n  \"task.complete\":           \"core/1.0\",\n  \"task.create\":             \"core/1.0\",\n  \"task.route\":              \"routing/1.0\",\n  \"task.update\":             \"core/1.0\",\n  \"whisper.answer\":          \"whisper/1.0\",\n  \"whisper.ask\":             \"whisper/1.0\",\n  \"workspace.create\":        \"core/1.0\",\n  \"workspace.describe\":      \"core/1.0\",\n  \"workspace.set_profiles\":  \"core/1.0\",\n});\n\n/**\n * Callable whatever the workspace advertises.\n *\n * Reads, because a workspace must always be able to ask what it is and to\n * check its own chain. Not the coordinator's read-only set: that holds\n * audit.submit_to_scitt, which reaches a transparency service and is a real\n * audit-scitt/1.0 capability.\n */\nexport const ALWAYS_AVAILABLE: ReadonlySet<string> = new Set([\n  \"workspace.describe\",\n  \"audit.read\",\n  \"audit.verify_chain\",\n  \"audit.verify_receipt\",\n]);\n","/**\n * @brightbeamai/chap-coordinator/crypto\n *\n * Ed25519 signing/verification for the security-signed/1.0 profile.\n *\n * Uses Node's built-in crypto (no external dependencies). Keys are\n * represented as RFC 7517 JWKs with kty=OKP, crv=Ed25519.\n */\n\nimport {\n  createPrivateKey,\n  createPublicKey,\n  KeyObject,\n  sign as nodeSign,\n  verify as nodeVerify,\n  randomBytes,\n  createHash,\n} from \"node:crypto\";\n\nconst ED25519_OID = Buffer.from(\"302a300506032b6570032100\", \"hex\");\n\nfunction b64urlNoPad(buf: Buffer): string {\n  return buf.toString(\"base64\").replace(/=+$/, \"\").replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n}\n\nfunction b64urlDecode(s: string): Buffer {\n  const pad = \"=\".repeat((4 - (s.length % 4)) % 4);\n  return Buffer.from(s.replace(/-/g, \"+\").replace(/_/g, \"/\") + pad, \"base64\");\n}\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  d?:  string;\n  use?: string;\n  alg?: string;\n}\n\n/**\n * Deterministically derive a 32-byte Ed25519 seed from a participant URI.\n * Demo / test only. production deployments supply real keys.\n */\nexport function deriveSeed(uri: string): Buffer {\n  return createHash(\"sha256\").update(\"chap:\" + uri).digest();\n}\n\n/**\n * Build a Node KeyObject (private key) from a raw 32-byte Ed25519 seed.\n */\nexport function privateKeyFromSeed(seed: Buffer): KeyObject {\n  if (seed.length !== 32) {\n    throw new Error(\"Ed25519 seed must be 32 bytes\");\n  }\n  // PKCS#8 DER for Ed25519: SEQ(SEQ(OID), OCTET(OCTET(seed)))\n  const pkcs8 = Buffer.concat([\n    Buffer.from(\"302e020100300506032b657004220420\", \"hex\"),\n    seed,\n  ]);\n  return createPrivateKey({ key: pkcs8, format: \"der\", type: \"pkcs8\" });\n}\n\n/** Public key bytes (32 bytes) from a private key. */\nexport function publicKeyBytes(privateKey: KeyObject): Buffer {\n  const pub = createPublicKey(privateKey);\n  const der = pub.export({ format: \"der\", type: \"spki\" }) as Buffer;\n  // SPKI for Ed25519 is the OID prefix + 32-byte raw public key\n  return der.subarray(der.length - 32);\n}\n\n/** Public KeyObject from raw 32-byte Ed25519 public key. */\nexport function publicKeyFromRaw(raw: Buffer): KeyObject {\n  if (raw.length !== 32) {\n    throw new Error(\"Ed25519 public key must be 32 bytes\");\n  }\n  const der = Buffer.concat([ED25519_OID, raw]);\n  return createPublicKey({ key: der, format: \"der\", type: \"spki\" });\n}\n\n/** Render a JWK from a Node private KeyObject. */\nexport function jwkFromPrivateKey(uri: string, key: KeyObject): Jwk {\n  const pub = publicKeyBytes(key);\n  return {\n    kty: \"OKP\",\n    crv: \"Ed25519\",\n    kid: createHash(\"sha256\").update(uri).digest(\"hex\").slice(0, 16),\n    use: \"sig\",\n    alg: \"EdDSA\",\n    x:   b64urlNoPad(pub),\n  };\n}\n\n/** Sign canonical bytes; return ``ed25519:<kid>:<base64>``. */\nexport function signEnvelope(canonical: Buffer, privateKey: KeyObject, kid: string): string {\n  const sig = nodeSign(null, canonical, privateKey);\n  return `ed25519:${kid}:${sig.toString(\"base64\")}`;\n}\n\n/** Verify a CHAP sig string against canonical bytes and a public key. */\nexport function verifyEnvelope(canonical: Buffer, sigTag: string, publicKey: KeyObject): boolean {\n  if (!sigTag.startsWith(\"ed25519:\")) return false;\n  const parts = sigTag.split(\":\");\n  if (parts.length < 2) return false;\n  const sigB64 = parts[parts.length - 1];\n  try {\n    const sig = Buffer.from(sigB64, \"base64\");\n    return nodeVerify(null, canonical, publicKey, sig);\n  } catch {\n    return false;\n  }\n}\n\n/** Parse a JWK x (base64url) into a Node public KeyObject. */\nexport function publicKeyFromJwk(jwk: Jwk): KeyObject {\n  return publicKeyFromRaw(b64urlDecode(jwk.x));\n}\n\n/** Demo helper: build a deterministic keypair + JWK for a URI. */\nexport function deriveKeypair(uri: string): { privateKey: KeyObject; jwk: Jwk } {\n  const seed = deriveSeed(uri);\n  const privateKey = privateKeyFromSeed(seed);\n  return { privateKey, jwk: jwkFromPrivateKey(uri, privateKey) };\n}\n\nexport { b64urlNoPad, b64urlDecode };\n","/**\n * @brightbeamai/chap-coordinator/ids\n *\n * ULID-format identifier generation. Supports a deterministic mode\n * for tests/demos so byte-for-byte replay works.\n */\n\nconst ALPHABET = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";  // Crockford\n\nfunction encode(value: bigint, length: number): string {\n  let out = \"\";\n  for (let i = 0; i < length; i++) {\n    const idx = Number(value & 31n);\n    out = ALPHABET[idx] + out;\n    value >>= 5n;\n  }\n  return out;\n}\n\nexport class IdFactory {\n  private counter: bigint;\n  private clockMs: number;\n\n  constructor(\n    public readonly deterministic: boolean = false,\n    seed: bigint = 0n,\n    startMs: number = 1_700_000_000_000,\n  ) {\n    this.counter = seed;\n    this.clockMs = startMs;\n  }\n\n  nowMs(): number {\n    if (this.deterministic) {\n      this.clockMs += 1;\n      return this.clockMs;\n    }\n    return Date.now();\n  }\n\n  private randomness(): bigint {\n    if (this.deterministic) {\n      this.counter += 1n;\n      return (this.counter * 0x9E3779B97F4A7C15n) & ((1n << 80n) - 1n);\n    }\n    // 80 bits of randomness. `globalThis.crypto` is standard from Node 19\n    // and present in every other supported runtime, so there is no fallback\n    // path: the previous one called `require`, which does not exist in an\n    // ES module and so threw on any runtime without the global.\n    const buf = new Uint8Array(10);\n    crypto.getRandomValues(buf);\n    let n = 0n;\n    for (const b of buf) n = (n << 8n) | BigInt(b);\n    return n;\n  }\n\n  ulid(): string {\n    const ts = BigInt(this.nowMs()) & ((1n << 48n) - 1n);\n    const rand = this.randomness();\n    return encode(ts, 10) + encode(rand, 16);\n  }\n\n  envelopeId():     string { return this.ulid(); }\n  taskId():         string { return \"tsk_\" + this.ulid(); }\n  artefactId():     string { return \"art_\" + this.ulid(); }\n  logicalId():      string { return \"lgl_\" + this.ulid(); }\n  workspaceId():    string { return \"wsp_\" + this.ulid(); }\n  deliberationId(): string { return \"dlb_\" + this.ulid(); }\n  handoffId():      string { return \"hnd_\" + this.ulid(); }\n  snapshotId():     string { return \"snp_\" + this.ulid(); }\n}\n","/**\n * @brightbeamai/chap-coordinator/jsonrpc\n *\n * Error codes (JSON-RPC standard + CHAP private range) and helpers.\n *\n * Error code allocations come directly from each profile spec. See\n * profiles/*.md for the authoritative definitions.\n */\n\nexport const E = {\n  // JSON-RPC 2.0 standard\n  PARSE:    -32700,\n  REQUEST:  -32600,\n  METHOD:   -32601,\n  PARAMS:   -32602,\n  INTERNAL: -32603,\n\n  // review/1.0 profile\n  NOT_REVIEWABLE: -32010,\n  NOT_AUTHORISED: -32011,\n  PATCH_FAILED:   -32012,\n  REVIEW_LAPSED:  -32013,\n  REVIEW_ALREADY_OPEN: -32014,\n\n  // whisper/1.0 profile (profiles/whisper.md S6)\n  WHISPER_ALREADY_ANSWERED:    -32020,\n  WHISPER_LAPSED:              -32021,\n  WHISPER_OPTION_NOT_IN_SET:   -32022,\n\n  // deliberation/1.0 profile (profiles/deliberation.md S5)\n  DELIB_VOTER_NOT_IN_LIST: -32030,\n  DELIB_ALREADY_VOTED:     -32031,\n  DELIB_CLOSED_OR_LAPSED:  -32032,\n  DELIB_UNKNOWN_RULE:      -32033,\n\n  // modes/1.0 profile (profiles/modes.md S6)\n  MODE_CEILING_EXCEEDED:   -32040,\n  MODE_STEP_UP_REQUIRED:   -32041,\n\n  // handoff/1.0 profile (profiles/handoff.md S6)\n  HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER: -32050,\n  HANDOFF_ALREADY_RESOLVED:               -32051,\n  HANDOFF_RECIPIENT_NOT_MEMBER:           -32052,\n\n  // control/1.0 profile (profiles/control.md S6)\n  CONTROL_STEP_UP_REQUIRED:    -32060,\n  CONTROL_NOT_AUTHORISED:      -32061,\n  CONTROL_SNAPSHOT_NOT_FOUND:  -32062,\n  CONTROL_WORKSPACE_PAUSED:    -32063,\n\n  // security-signed/1.0 profile (profiles/security-signed.md S7)\n  SIG_VERIFY_FAILED:         -32070,\n  SIG_KEY_NOT_FOUND:         -32071,\n  SIG_KEY_REVOKED:           -32072,\n  SIG_ROTATION_KEY_MISMATCH: -32073,\n  SIG_ARTEFACT_DIGEST_MISMATCH: -32074,\n\n  // audit-scitt/1.0 profile (profiles/audit-scitt.md S8)\n  SCITT_UNREACHABLE:        -32080,\n  SCITT_STATEMENT_REJECTED: -32081,\n  SCITT_RECEIPT_INVALID:    -32082,\n\n  // identity-oidc/1.0 profile (profiles/identity-oidc.md S8)\n  OIDC_STEP_UP_REQUIRED: -32402,\n  OIDC_TOKEN_INVALID:    -32403,\n  OIDC_CNF_MISMATCH:     -32404,\n  OIDC_SCOPE_MISSING:    -32405,\n\n  // identity-vc/1.0 profile (profiles/identity-vc.md S8)\n  VC_VP_INVALID:             -32410,\n  VC_HOLDER_BINDING_INVALID: -32411,\n  VC_CREDENTIAL_REVOKED:     -32412,\n  VC_SCHEMA_UNKNOWN:         -32413,\n\n  // routing/1.0 profile (profiles/routing.md S3-S5)\n  ROUTING_NO_ELIGIBLE_ASSIGNEE:   -32510,\n  ROUTING_POLICY_VIOLATION:       -32511,\n  ROUTING_AUTO_ESCALATION_TRIGGERED: -32512,\n  ROUTING_CANDIDATES_EMPTY:       -32513,\n  ROUTING_DEPTH_NOT_APPLICABLE:   -32514,\n  ROUTING_POLICY_UNREACHABLE:     -32515,\n  ROUTING_ESC_TARGET_UNAVAILABLE: -32516,\n} as const;\n\nexport function rpcError(code: number, message: string, data?: unknown) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\nexport function isValidEnvelope(env: unknown): boolean {\n  if (typeof env !== \"object\" || env === null) return false;\n  const e = env as Record<string, unknown>;\n  return e.jsonrpc === \"2.0\";\n}\n","/**\n * @brightbeamai/chap-coordinator/audit\n *\n * Audit entries, the chain link over them, and the rule for recording a\n * refusal (SPECIFICATION 10.1).\n *\n * An accepted call is recorded under `envelope`. A refused call that the rule\n * names is recorded under `request`, with an `outcome` beside it, so a reader\n * keyed on `envelope` passes it by instead of replaying it as effective. The\n * chain link hashes what the entry records: the envelope of an accepted call,\n * and the outcome together with the request of a refusal. Altering either\n * half of a refusal breaks the chain, moving its record under `envelope` fails\n * the shape check, and an entry with no outcome hashes exactly as it always\n * has, so every existing chain still verifies.\n */\nimport { canonicalize, sha256Hex } from \"./canonical.js\";\nimport { E } from \"./jsonrpc.js\";\nimport type { AuditEntry, Envelope } from \"./types.js\";\n\n/** The value an entry's chain link hashes. */\nexport function entryRecord(entry: AuditEntry): unknown {\n  if (entry.outcome != null) return { outcome: entry.outcome, request: entry.request };\n  return entry.envelope;\n}\n\n/** The call an entry records, whether it took effect or was refused. */\nexport function entryCall(entry: AuditEntry): Envelope | undefined {\n  return entry.envelope ?? entry.request ?? undefined;\n}\n\n/** True when an entry records a refused call. */\nexport function isRefusal(entry: AuditEntry): boolean {\n  return entry.outcome != null;\n}\n\n/** A JSON-RPC call: an object with `jsonrpc` \"2.0\" and a string `method`. */\nfunction isCall(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\n/**\n * An entry is well formed when it records an accepted call alone, under\n * `envelope`, or a refused call alone, under `request`, with an outcome of\n * status `refused` and an integer code. Requiring a JSON-RPC call on either\n * side is what stops a refusal's record being moved under `envelope`, where it\n * would hash to the same bytes and read as a call that took effect.\n */\nexport function entryIsWellFormed(entry: AuditEntry): boolean {\n  const accepted = entry.envelope != null;\n  const refused = entry.request != null;\n  if (accepted === refused) return false;\n  if (accepted) return isCall(entry.envelope) && entry.outcome == null;\n  const o = entry.outcome as unknown as Record<string, unknown> | null | undefined;\n  return isCall(entry.request) && o != null && typeof o === \"object\"\n    && o.status === \"refused\" && Number.isInteger(o.code);\n}\n\n/** Whether a call carries a top-level signature (security-signed/1.0). */\nexport function isSigned(call: unknown): boolean {\n  return call !== null && typeof call === \"object\" && typeof (call as { sig?: unknown }).sig === \"string\";\n}\n\n/**\n * The digest that identifies a signed call by what its sender signed: SHA-256\n * of the JCS of the call without its `sig`. Two encodings of one signature\n * give the same digest, so re-encoding a signature does not make a new call.\n */\nexport function signedDigest(call: Envelope): string {\n  const signed: Record<string, unknown> = { ...call };\n  delete signed.sig;\n  return sha256Hex(canonicalize(signed));\n}\n\n/** chain_head = SHA-256( JCS(record) || prev_hash ). */\nexport function linkHash(record: unknown, prev: string): string {\n  return sha256Hex(Buffer.concat([canonicalize(record), Buffer.from(prev, \"utf-8\")]));\n}\n\n/**\n * Refusals the log never records: a call that was malformed or invalid, a\n * fault in the Coordinator, and a call whose signature or key did not check\n * out.\n */\nconst UNRECORDED_CODES: ReadonlySet<number> = new Set([\n  E.PARSE, E.REQUEST, E.PARAMS, E.INTERNAL,\n  E.SIG_VERIFY_FAILED, E.SIG_KEY_NOT_FOUND, E.SIG_KEY_REVOKED, E.SIG_ROTATION_KEY_MISMATCH,\n]);\n\n/**\n * Methods whose refusals are never recorded. They run before the caller is\n * established as a member and are exempt from signature checks, so a refusal\n * of one proves nothing about who sent it.\n */\nconst UNRECORDED_METHODS: ReadonlySet<string> = new Set([\"workspace.create\", \"participant.join\"]);\n\n/**\n * Whether a refusal with this error is one the log records, before the test\n * that the caller is a member.\n *\n * `-32601` is recorded only when the profile gate refused a privileged method,\n * which is an attempt to pull an emergency brake the workspace has switched\n * off. The gate refusing an ordinary method, and a method that does not\n * exist, are not recorded.\n */\nexport function refusalIsRecorded(\n  method: string,\n  error: { code: number; data?: unknown },\n  privileged: ReadonlySet<string>,\n): boolean {\n  if (!Number.isInteger(error.code)) return false;\n  if (UNRECORDED_METHODS.has(method)) return false;\n  if (UNRECORDED_CODES.has(error.code)) return false;\n  if (error.code === E.METHOD) {\n    const data = error.data as { profile?: unknown } | undefined;\n    return typeof data?.profile === \"string\" && privileged.has(method);\n  }\n  return true;\n}\n","/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\n// The JSON type name of a value. Python and JavaScript name their own types\n// differently (dict against object, list against object, str against string).\n// The refusal names the JSON type, which both references and the\n// specification share.\nfunction jsonType(value: unknown): string {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  switch (typeof value) {\n    case \"object\":  return \"object\";\n    case \"string\":  return \"string\";\n    case \"number\":  return \"number\";\n    case \"boolean\": return \"boolean\";\n    default:        return \"null\";\n  }\n}\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value; // replace whole document\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      if (key === \"-\") {\n        parent.push(op.value);\n      } else {\n        const idx = key as number;\n        if (idx < 0 || idx > parent.length) {\n          throw new PatchError(`Index out of range for add: ${path}`);\n        }\n        parent.splice(idx, 0, op.value);\n      }\n    } else if (parent !== null && typeof parent === \"object\") {\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot add into ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    if (parts.length === 0) return op.value;\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names the position after the last element, which no\n      // element occupies, so only \"add\" can use it. Left as a string it slips\n      // through a numeric range check and writes a \"-\" property on the array.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[idx] = op.value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      parent[key as string] = op.value;\n    } else {\n      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    const parts = splitPath(path);\n    if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names no existing element, so it cannot be removed.\n      // Left as a string it passes the numeric range check and then splice\n      // coerces it to zero, removing the first element instead.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Index out of range for remove: ${path}`);\n      }\n      parent.splice(idx, 1);\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for remove: ${path}`);\n      }\n      delete parent[key as string];\n    } else {\n      throw new PatchError(`Cannot remove from ${jsonType(parent)}`);\n    }\n    return doc;\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    const value = clone(getAt(doc, src));\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    const value = clone(getAt(doc, src));\n    doc = applyOne(doc, { op: \"remove\", path: src });\n    return applyOne(doc, { op: \"add\", path, value });\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\nfunction nodeCount(value: unknown): number {\n  if (Array.isArray(value)) {\n    let n = 1;\n    for (const v of value) n += nodeCount(v);\n    return n;\n  }\n  if (value !== null && typeof value === \"object\") {\n    let n = 1;\n    for (const v of Object.values(value as Record<string, unknown>)) n += nodeCount(v);\n    return n;\n  }\n  return 1;\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[]): unknown {\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  for (const op of ops) {\n    out = applyOne(out, op);\n    if (nodeCount(out) > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n","/**\n * Pluggable persistence for the Coordinator.\n *\n * A Store keeps workspace state between process restarts. The Coordinator\n * calls `store.load()` once at start, and writes after every call that adds\n * to a workspace's audit log.\n *\n * How the Coordinator writes depends on what the store implements:\n *\n *   - `apply(change)`: the Coordinator sends what the call changed: the new\n *     audit entries, the objects it touched and the workspace's own fields.\n *     The cost of a write stays flat as the log grows; it grows with the\n *     objects a call changes, such as a task with a long history. MemoryStore\n *     and SqliteStore implement it.\n *   - `save(record)` alone: the Coordinator sends the whole workspace on every\n *     write, as releases before 0.3.2 did, so the cost of a write grows with\n *     the log. Stores written for earlier releases keep working this way.\n *\n * MemoryStore is the default and keeps nothing across processes. SqliteStore\n * keeps state in a SQLite file through better-sqlite3. Third-party stores\n * (Postgres, Redis and so on) implement this interface.\n *\n * Concurrency model\n * -----------------\n *\n * A Coordinator is a **single-writer** component: dispatch is serial,\n * workspace state is held in memory, and each chain link is computed from the\n * head the instance holds. Run one Coordinator per workspace.\n *\n * Every change names the number of audit entries the Coordinator expects the\n * store to hold already (`base`). MemoryStore and SqliteStore refuse a change\n * whose base differs from what they hold: they throw a StoreConflictError and\n * write nothing. A second Coordinator writing the same workspace is refused\n * and reported, and the entries already stored stay as they are. The refused\n * instance's memory no longer matches the store; restart it to reload.\n *\n * `save` makes no such check: it replaces what the store holds for the\n * workspace. A store that implements only `save` therefore still loses\n * entries silently when two instances write one workspace.\n *\n * To run more than one instance, partition workspaces so that no workspace is\n * ever written by two, or hold an external lock. See SPECIFICATION.md 10.3.\n *\n * Production deployments that need rich queries over the log can project it\n * into their own analytics store with the `onAudit` listener.\n */\n\n/** The workspace maps a store keeps object by object. */\nexport const COLLECTIONS = [\n  \"members\", \"tasks\", \"overrides\", \"whispers\",\n  \"deliberations\", \"handoffs\", \"snapshots\", \"route_decisions\",\n] as const;\n\n/** task.create idempotency keys, kept as one more collection of key to task id. */\nexport const IDEMPOTENCY_KEYS = \"idempotency_keys\";\n\nexport interface WorkspaceRecord {\n  /** Workspace identifier. */\n  id: string;\n  /** JSON-serialisable payload in the shape `Coordinator.snapshot()` produces. */\n  data: unknown;\n  /**\n   * For `save`, a counter the Coordinator increments on each write. For a\n   * record a store loads after `apply`, the number of audit entries. Recorded\n   * for diagnostics; `save` does not check it.\n   */\n  version: number;\n  /** Wall-clock timestamp of the last write, ISO-8601. */\n  updated_at: string;\n}\n\n/** One write to one workspace: what one or more calls changed. */\nexport interface StoreChange {\n  /** Workspace identifier. */\n  id: string;\n  /**\n   * Audit entries the store must already hold for this workspace. A store\n   * that holds a different number refuses the change with a\n   * StoreConflictError and writes nothing. Not checked when `replace` is set.\n   */\n  base: number;\n  /** Audit entries the store holds after the change: `base + entries.length`. */\n  version: number;\n  /** Wall-clock timestamp of the write, ISO-8601. */\n  updated_at: string;\n  /** The workspace's own fields: everything except its collections and log. */\n  meta: Record<string, unknown>;\n  /** New audit entries in order. The first has seq `base`. */\n  entries: unknown[];\n  /**\n   * Objects written, by collection and then by key. A null value removes the\n   * object. The collections are those in COLLECTIONS and IDEMPOTENCY_KEYS.\n   */\n  objects: Record<string, Record<string, unknown>>;\n  /**\n   * Replace everything the store holds for this workspace with this change,\n   * which then carries the whole workspace from seq 0.\n   */\n  replace?: boolean;\n}\n\n/**\n * A change whose base does not match the audit entries the store holds.\n * Usually a second Coordinator writing the same workspace.\n */\nexport class StoreConflictError extends Error {\n  readonly workspace: string;\n  /** Audit entries the store holds. */\n  readonly held: number;\n  /** Audit entries the change expected. */\n  readonly base: number;\n\n  constructor(workspace: string, held: number, base: number) {\n    super(\n      `The store holds ${held} audit entries for workspace ${workspace} and ` +\n      `this write expected ${base}, so nothing was written. Another ` +\n      `coordinator may be writing to this workspace, the store may have been ` +\n      `changed outside this coordinator, or this coordinator could not load ` +\n      `the workspace when it started. Restart this coordinator to reload.`,\n    );\n    this.name = \"StoreConflictError\";\n    this.workspace = workspace;\n    this.held = held;\n    this.base = base;\n  }\n\n  /**\n   * Matched by name, so `instanceof` holds across the package's entry points,\n   * each of which is bundled with its own copy of this class.\n   */\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return value instanceof Error && value.name === \"StoreConflictError\";\n  }\n}\n\nexport interface Store {\n  /** Load all workspace records. Called once when the Coordinator starts. */\n  load(): Promise<WorkspaceRecord[]> | WorkspaceRecord[];\n\n  /**\n   * Replace what the store holds for one workspace. The Coordinator calls it\n   * after every write when the store has no `apply`.\n   */\n  save(record: WorkspaceRecord): Promise<void> | void;\n\n  /**\n   * Write one change. Optional; when present the Coordinator calls it in\n   * place of `save`. It must be atomic: the whole change is written, or\n   * nothing is. The change refers to the Coordinator's live objects, so\n   * serialise or copy everything before returning, including in an async\n   * store. Refuse a change whose `base` differs from the entries held, unless\n   * `replace` is set, by throwing (or rejecting with) a StoreConflictError.\n   */\n  apply?(change: StoreChange): Promise<void> | void;\n\n  /** Remove one workspace. */\n  delete(id: string): Promise<void> | void;\n\n  /** Release resources. Idempotent. */\n  close?(): Promise<void> | void;\n}\n\nfunction isCollection(name: string): boolean {\n  return (COLLECTIONS as readonly string[]).includes(name);\n}\n\n/** The key an object is stored under in its collection. */\nexport function objectKey(collection: string, item: unknown): string | undefined {\n  if (item === null || typeof item !== \"object\") return undefined;\n  const o = item as Record<string, unknown>;\n  const key = collection === \"members\" ? (o.uri ?? o.id) : (o.id ?? o.uri);\n  return typeof key === \"string\" ? key : undefined;\n}\n\n/**\n * A collection as a snapshot holds it, keyed. The TypeScript snapshot holds\n * arrays and the Python snapshot holds objects keyed by id; both are read.\n */\nfunction keyed(collection: string, value: unknown): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      const key = objectKey(collection, item);\n      if (key !== undefined) out[key] = item;\n    }\n  } else if (value !== null && typeof value === \"object\") {\n    Object.assign(out, value);\n  }\n  return out;\n}\n\n/** A whole-workspace snapshot as a change that replaces what the store holds. */\nexport function changeFromRecord(record: WorkspaceRecord): StoreChange {\n  const data = (record.data !== null && typeof record.data === \"object\"\n    ? record.data : {}) as Record<string, unknown>;\n  const meta: Record<string, unknown> = {};\n  const objects: Record<string, Record<string, unknown>> = {};\n  let entries: unknown[] = [];\n  for (const [name, value] of Object.entries(data)) {\n    if (name === \"audit\") entries = Array.isArray(value) ? value : [];\n    else if (name === IDEMPOTENCY_KEYS || isCollection(name)) objects[name] = keyed(name, value);\n    else meta[name] = value;\n  }\n  if (meta.id === undefined) meta.id = record.id;\n  return {\n    id: record.id, base: 0, version: record.version, updated_at: record.updated_at,\n    meta, entries, objects, replace: true,\n  };\n}\n\n/**\n * Rows read back from a store, assembled into the snapshot shape\n * `Coordinator.restore()` reads: arrays for the collections, an object for\n * the idempotency keys, and the log in seq order.\n */\nexport function assembleSnapshot(\n  meta: Record<string, unknown>,\n  entries: unknown[],\n  objects: Iterable<[collection: string, key: string, value: unknown]>,\n): Record<string, unknown> {\n  const data: Record<string, unknown> = { ...meta };\n  for (const name of COLLECTIONS) data[name] = [];\n  const keys: Record<string, unknown> = {};\n  data[IDEMPOTENCY_KEYS] = keys;\n  for (const [collection, key, value] of objects) {\n    if (collection === IDEMPOTENCY_KEYS) {\n      keys[key] = value;\n    } else {\n      const list = (Array.isArray(data[collection]) ? data[collection] : (data[collection] = [])) as unknown[];\n      list.push(value);\n    }\n  }\n  data.audit = entries;\n  return data;\n}\n\ninterface Held {\n  meta: string;\n  version: number;\n  updated_at: string;\n  entries: string[];\n  objects: Map<string, Map<string, string>>;\n}\n\n/**\n * In-memory store. The default: it keeps nothing across processes. Like a\n * database it keeps each row as JSON text, so a Coordinator restarted on it\n * sees what was written and nothing changed later.\n */\nexport class MemoryStore implements Store {\n  private held = new Map<string, Held>();\n\n  load(): WorkspaceRecord[] {\n    const out: WorkspaceRecord[] = [];\n    for (const [id, h] of this.held) {\n      const objects: Array<[string, string, unknown]> = [];\n      for (const [collection, items] of h.objects) {\n        for (const [key, value] of items) objects.push([collection, key, JSON.parse(value)]);\n      }\n      out.push({\n        id,\n        data: assembleSnapshot(JSON.parse(h.meta), h.entries.map(e => JSON.parse(e)), objects),\n        version: h.version,\n        updated_at: h.updated_at,\n      });\n    }\n    return out;\n  }\n\n  save(record: WorkspaceRecord): void {\n    this.apply(changeFromRecord(record));\n  }\n\n  apply(change: StoreChange): void {\n    // Serialised before anything is held, so a change that cannot be written\n    // leaves the store as it was.\n    const meta = JSON.stringify(change.meta);\n    const entries = change.entries.map(e => JSON.stringify(e));\n    const objects = Object.entries(change.objects).map(([collection, items]) =>\n      [collection, Object.entries(items).map(([key, value]) =>\n        [key, value === null || value === undefined ? null : JSON.stringify(value)] as const)] as const);\n    let h = this.held.get(change.id);\n    if (!change.replace) {\n      const holds = h ? h.entries.length : 0;\n      if (holds !== change.base) throw new StoreConflictError(change.id, holds, change.base);\n    }\n    if (!h || change.replace) {\n      h = { meta: \"{}\", version: 0, updated_at: \"\", entries: [], objects: new Map() };\n    }\n    for (const entry of entries) h.entries.push(entry);\n    for (const [collection, items] of objects) {\n      let held = h.objects.get(collection);\n      if (!held) h.objects.set(collection, (held = new Map()));\n      for (const [key, value] of items) {\n        if (value === null) held.delete(key);\n        else held.set(key, value);\n      }\n    }\n    h.meta = meta;\n    h.version = change.version;\n    h.updated_at = change.updated_at;\n    this.held.set(change.id, h);\n  }\n\n  delete(id: string): void {\n    this.held.delete(id);\n  }\n}\n","/**\n * Change tracking for a workspace's maps.\n *\n * When the store implements `apply`, the Coordinator writes only the objects\n * a call changed. A TrackedMap records which keys may hold a changed object\n * since the last write: every key set or deleted, and, while a call is being\n * handled, every key read with `get` or reached by iterating, because a\n * handler changes an object in place after reading it. Reads outside a call,\n * such as an application listing tasks, record nothing.\n */\n\nexport interface Tracker {\n  /** Whether anything is recorded: true when the store implements `apply`. */\n  enabled: boolean;\n  /** Calls being handled. Reads are recorded while it is above zero. */\n  depth: number;\n}\n\nexport class TrackedMap<K, V> extends Map<K, V> {\n  /** Keys whose objects may have changed since the last write. */\n  readonly dirty = new Set<K>();\n  readonly tracker: Tracker;\n\n  constructor(tracker: Tracker) {\n    super();\n    this.tracker = tracker;\n  }\n\n  private reading(): boolean {\n    return this.tracker.enabled && this.tracker.depth > 0;\n  }\n\n  private touchAll(): void {\n    if (this.reading()) for (const key of super.keys()) this.dirty.add(key);\n  }\n\n  override get(key: K): V | undefined {\n    const value = super.get(key);\n    if (value !== undefined && this.reading()) this.dirty.add(key);\n    return value;\n  }\n\n  override set(key: K, value: V): this {\n    if (this.tracker.enabled) this.dirty.add(key);\n    return super.set(key, value);\n  }\n\n  override delete(key: K): boolean {\n    const had = super.delete(key);\n    if (had && this.tracker.enabled) this.dirty.add(key);\n    return had;\n  }\n\n  override clear(): void {\n    if (this.tracker.enabled) for (const key of super.keys()) this.dirty.add(key);\n    super.clear();\n  }\n\n  override values(): MapIterator<V> {\n    this.touchAll();\n    return super.values();\n  }\n\n  override entries(): MapIterator<[K, V]> {\n    this.touchAll();\n    return super.entries();\n  }\n\n  override [Symbol.iterator](): MapIterator<[K, V]> {\n    this.touchAll();\n    return super[Symbol.iterator]();\n  }\n\n  override forEach(callback: (value: V, key: K, map: Map<K, V>) => void, thisArg?: unknown): void {\n    this.touchAll();\n    super.forEach(callback, thisArg);\n  }\n\n  /** Read one value without recording it. */\n  peek(key: K): V | undefined {\n    return super.get(key);\n  }\n}\n\n/** Every value of a map, read without recording, whatever kind of map it is. */\nexport function rawValues<V>(map: Map<unknown, V>): IterableIterator<V> {\n  return Map.prototype.values.call(map) as IterableIterator<V>;\n}\n\n/** Every entry of a map, read without recording, whatever kind of map it is. */\nexport function rawEntries<K, V>(map: Map<K, V>): IterableIterator<[K, V]> {\n  return Map.prototype.entries.call(map) as IterableIterator<[K, V]>;\n}\n","/**\n * Typed method facade for the Coordinator.\n *\n * Replaces the verbose dispatch pattern:\n *\n *   const env = await coord.dispatch({\n *     jsonrpc: \"2.0\", id: \"x\",\n *     method: \"task.create\",\n *     params: { workspace, from, kind, input }\n *   });\n *   const taskId = env.result.task_id;\n *\n * with namespace-grouped calls that autocomplete and type-check:\n *\n *   const { task_id } = coord.api.task.create({ workspace, from, kind, input });\n *\n * Every method on the facade calls `dispatch(envelope)` internally with\n * an auto-generated envelope id, so the audit chain semantics, profile\n * gates, and signature checks all run identically.\n *\n * On dispatch error, the facade throws a `CoordinatorError` carrying the\n * JSON-RPC error code and message. Callers expecting `error` objects on\n * the wire can still use `dispatch()` directly.\n */\n\nimport type { Coordinator } from \"./coordinator.js\";\nimport type { Envelope } from \"./types.js\";\nimport type {\n  MethodName, MethodParams, MethodResult,\n} from \"./methods.js\";\n\nexport class CoordinatorError extends Error {\n  readonly code: number;\n  readonly data?: unknown;\n  constructor(code: number, message: string, data?: unknown) {\n    super(message);\n    this.name = \"CoordinatorError\";\n    this.code = code;\n    this.data = data;\n  }\n}\n\n/**\n * Single-call helper. Type-safe wrapper around `coord.dispatch()`.\n * Throws CoordinatorError if dispatch returns an error response.\n */\nexport function call<M extends MethodName>(\n  coord: Coordinator,\n  method: M,\n  params: MethodParams<M>,\n): MethodResult<M> {\n  const envelope: Envelope = {\n    jsonrpc: \"2.0\",\n    id: coord.ids.envelopeId(),\n    method,\n    params: params as unknown as Record<string, unknown>,\n  };\n  const out = coord.dispatch(envelope);\n  if (out.error) {\n    throw new CoordinatorError(out.error.code, out.error.message, out.error.data);\n  }\n  return out.result as MethodResult<M>;\n}\n\n// ============================================================\n//   Namespace-grouped facades\n// ============================================================\n//\n// Each namespace facade is a small object exposing one method per\n// CHAP verb. Implementations are one-liners that delegate to call().\n// The pattern is verbose but autocompletes well and type-checks\n// param shape and result shape from one declaration in methods.ts.\n\nexport function makeApi(coord: Coordinator) {\n  const c = <M extends MethodName>(m: M, p: MethodParams<M>) => call(coord, m, p);\n\n  return {\n    workspace: {\n      create:       (p: MethodParams<\"workspace.create\">)       => c(\"workspace.create\", p),\n      describe:     (p: MethodParams<\"workspace.describe\">)     => c(\"workspace.describe\", p),\n      set_profiles: (p: MethodParams<\"workspace.set_profiles\">) => c(\"workspace.set_profiles\", p),\n    },\n    participant: {\n      join:       (p: MethodParams<\"participant.join\">)       => c(\"participant.join\", p),\n      leave:      (p: MethodParams<\"participant.leave\">)      => c(\"participant.leave\", p),\n      rotate_key: (p: MethodParams<\"participant.rotate_key\">) => c(\"participant.rotate_key\", p),\n      revoke_key: (p: MethodParams<\"participant.revoke_key\">) => c(\"participant.revoke_key\", p),\n    },\n    task: {\n      create:   (p: MethodParams<\"task.create\">)   => c(\"task.create\", p),\n      update:   (p: MethodParams<\"task.update\">)   => c(\"task.update\", p),\n      complete: (p: MethodParams<\"task.complete\">) => c(\"task.complete\", p),\n      route:    (p: MethodParams<\"task.route\">)    => c(\"task.route\", p),\n    },\n    review: {\n      request: (p: MethodParams<\"review.request\">) => c(\"review.request\", p),\n      depth:   (p: MethodParams<\"review.depth\">)   => c(\"review.depth\", p),\n    },\n    decide: {\n      approve:  (p: MethodParams<\"decide.approve\">)  => c(\"decide.approve\", p),\n      reject:   (p: MethodParams<\"decide.reject\">)   => c(\"decide.reject\", p),\n      override: (p: MethodParams<\"decide.override\">) => c(\"decide.override\", p),\n    },\n    abstain: {\n      declare: (p: MethodParams<\"abstain.declare\">) => c(\"abstain.declare\", p),\n    },\n    escalate: {\n      raise: (p: MethodParams<\"escalate.raise\">) => c(\"escalate.raise\", p),\n      auto:  (p: MethodParams<\"escalate.auto\">)  => c(\"escalate.auto\", p),\n    },\n    whisper: {\n      ask:    (p: MethodParams<\"whisper.ask\">)    => c(\"whisper.ask\", p),\n      answer: (p: MethodParams<\"whisper.answer\">) => c(\"whisper.answer\", p),\n    },\n    deliberate: {\n      open:    (p: MethodParams<\"deliberate.open\">)    => c(\"deliberate.open\", p),\n      comment: (p: MethodParams<\"deliberate.comment\">) => c(\"deliberate.comment\", p),\n      vote:    (p: MethodParams<\"deliberate.vote\">)    => c(\"deliberate.vote\", p),\n      close:   (p: MethodParams<\"deliberate.close\">)   => c(\"deliberate.close\", p),\n    },\n    handoff: {\n      propose: (p: MethodParams<\"handoff.propose\">) => c(\"handoff.propose\", p),\n      accept:  (p: MethodParams<\"handoff.accept\">)  => c(\"handoff.accept\", p),\n      decline: (p: MethodParams<\"handoff.decline\">) => c(\"handoff.decline\", p),\n    },\n    control: {\n      pause:             (p: MethodParams<\"control.pause\">)             => c(\"control.pause\", p),\n      resume:            (p: MethodParams<\"control.resume\">)            => c(\"control.resume\", p),\n      cancel:            (p: MethodParams<\"control.cancel\">)            => c(\"control.cancel\", p),\n      supersede:         (p: MethodParams<\"control.supersede\">)         => c(\"control.supersede\", p),\n      snapshot:          (p: MethodParams<\"control.snapshot\">)          => c(\"control.snapshot\", p),\n      rollback:          (p: MethodParams<\"control.rollback\">)          => c(\"control.rollback\", p),\n      set_mode_ceiling:  (p: MethodParams<\"control.set_mode_ceiling\">)  => c(\"control.set_mode_ceiling\", p),\n    },\n    audit: {\n      read:            (p: MethodParams<\"audit.read\">)            => c(\"audit.read\", p),\n      submit_to_scitt: (p: MethodParams<\"audit.submit_to_scitt\">) => c(\"audit.submit_to_scitt\", p),\n      verify_receipt:  (p: MethodParams<\"audit.verify_receipt\">)  => c(\"audit.verify_receipt\", p),\n      verify_chain:    (p: MethodParams<\"audit.verify_chain\">)    => c(\"audit.verify_chain\", p),\n    },\n  };\n}\n\nexport type CoordinatorApi = ReturnType<typeof makeApi>;\n","/**\n * @brightbeamai/chap-coordinator. type vocabulary\n *\n * Wire-shape and in-memory types for the Coordinator. The schemas at\n * schemas/ are the normative wire types; these mirror them in\n * TypeScript for in-process use.\n */\n\nexport type ParticipantUri = string;\nexport type WorkspaceId    = string;\nexport type TaskId         = string;\nexport type ArtefactId     = string;\n\nexport type ParticipantType = \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n\nexport interface Envelope {\n  jsonrpc: \"2.0\";\n  id?:     string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?:  { code: number; message: string; data?: unknown };\n  /** security-signed/1.0: top-level signature, signed over JCS of the\n   *  envelope with this field removed. Form: ``ed25519:<kid>:<b64>``. */\n  sig?: string;\n}\n\nexport type Mode = \"shadow\" | \"trial\" | \"production\";\nexport type WorkspaceState = \"active\" | \"paused\" | \"closed\";\nexport type PauseScope = \"task\" | \"participant\" | \"workspace\";\n\nexport type TaskState =\n  | \"created\"\n  | \"in_progress\"\n  | \"review_requested\"\n  | \"completed\"\n  | \"declined\"\n  | \"abstained\"\n  | \"escalated\"\n  | \"superseded\"\n  | \"paused\"\n  | \"cancelled\";\n\n// ============================================================\n//   Key records (security-signed/1.0)\n// ============================================================\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  use?: string;\n  alg?: string;\n}\n\n/** A participant's JWK plus the validity window. Lookup by\n *  (participant, kid, ts) so historical envelopes verify across\n *  rotation per security-signed/1.0 S3-S5. */\nexport interface KeyRecord {\n  jwk:         Jwk;\n  kid:         string;\n  valid_from:  string;            // ISO timestamp; inclusive\n  valid_until?: string;           // ISO timestamp; exclusive; absent = unbounded\n  revoked_at?: string;\n  revoked_reason?: string;\n}\n\n// ============================================================\n//   Participants\n// ============================================================\n\nexport interface Member {\n  uri:    ParticipantUri;\n  type:   ParticipantType;\n  role:   string;\n  joined: string;\n  display_name?: string;\n  capabilities?: Record<string, unknown>;\n  scopes?:       string[];\n  keys:          KeyRecord[];\n  paused:        boolean;         // control.pause scope=participant\n  oidc_sub?:     string;\n  oidc_auth_time?: number;        // unix seconds\n  oidc_acr?:     string;\n  vc_holder?:    string;\n}\n\n// ============================================================\n//   Routing hints\n// ============================================================\n\nexport interface TaskRoutingHints {\n  criticality?: \"low\" | \"medium\" | \"high\" | \"critical\";\n  deadline?:    string;\n  max_cost_usd?: number;\n  risk_tier?:   string;\n  [extra: string]: unknown;\n}\n\nexport interface ArtefactRoutingHints {\n  confidence?:        number | string;\n  model_id?:          string;\n  cost_consumed_usd?: number;\n  latency_ms?:        number;\n  [extra: string]:    unknown;\n}\n\n// ============================================================\n//   JSON Patch (RFC 6902)\n// ============================================================\n\nexport interface JsonPatchOp {\n  op:    \"add\" | \"replace\" | \"remove\" | \"copy\" | \"move\" | \"test\";\n  path:  string;\n  value?: unknown;\n  from?: string;\n}\n\n// ============================================================\n//   Override artefact (review/1.0)\n// ============================================================\n\nexport interface OverrideArtefact {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  reviewer:          ParticipantUri;\n  based_on_artefact: unknown;\n  diff:              JsonPatchOp[];\n  result:            unknown;\n  rationale:         string;\n  tags:              string[];\n  policy_refs:       string[];\n  ts:                string;\n  logical_id?:       string;\n  instance_id?:      string;\n  intent_preserved?: boolean;\n}\n\n// ============================================================\n//   Route decision artefact (routing/1.0)\n// ============================================================\n\nexport interface RouteDecisionArtefact {\n  id:             ArtefactId;\n  kind:           \"route_decision\";\n  decision_type:  \"task.route\" | \"review.depth\" | \"escalate.auto\";\n  outcome:        unknown;\n  produced_by:    ParticipantUri;\n  produced_at:    string;\n  task?:          TaskId;\n  policy_id?:     string;\n  hints_observed: Record<string, unknown>;\n  rationale:      string;\n  // Auxiliary fields per decision_type:\n  // task.route:     alternatives_considered\n  // review.depth:   sampling_probability\n  // escalate.auto:  escalation_target\n  [extra: string]: unknown;\n}\n\n// ============================================================\n//   Snapshot artefact (control/1.0)\n// ============================================================\n\nexport interface SnapshotArtefact {\n  id:           ArtefactId;\n  kind:         \"snapshot\";\n  produced_at:  string;\n  produced_by:  ParticipantUri;\n  content_hash: string;\n  content: {\n    workspace: WorkspaceId;\n    audit_seq: number;\n    label?:    string;\n    include:   string[];\n    state:     Record<string, unknown>;\n  };\n}\n\n// ============================================================\n//   Whisper (whisper/1.0)\n// ============================================================\n\nexport interface WhisperPrompt {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  asker:             ParticipantUri;\n  askee:             ParticipantUri[];\n  question:          string;\n  options?:          Array<{ id: string; label?: string }>;\n  asked_at:          string;\n  deadline_ms:       number;\n  default_if_lapsed: unknown;\n  urgency:           \"low\" | \"medium\" | \"high\";\n  state:             \"pending\" | \"answered\" | \"lapsed\";\n  answered_at?:      string;\n  answered_by?:      ParticipantUri;\n  answer_option?:    string;\n  answer_text?:      string;\n  comment?:          string;\n  default_applied?:  unknown;\n}\n\n// ============================================================\n//   Deliberation (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberationVote {\n  ts:            string;\n  voter:         ParticipantUri;\n  vote:          \"yea\" | \"nay\" | \"abstain\";\n  weight?:       number;\n  comment?:      string;\n  veto_invoked?: boolean;\n}\n\nexport interface Deliberation {\n  id:           string;\n  task_id?:     TaskId;\n  opener:       ParticipantUri;\n  participants: ParticipantUri[];\n  rule:         string;        // raw rule string\n  question?:    string;\n  weights?:     Record<ParticipantUri, number>;\n  veto?:        Record<ParticipantUri, boolean>;\n  deadline?:    string;\n  state:        \"open\" | \"closed\" | \"lapsed\";\n  comments:     { ts: string; from: ParticipantUri; text: string }[];\n  votes:        DeliberationVote[];\n  outcome?:     {\n    outcome:  \"approved\" | \"rejected\" | \"error\";\n    rule:     string;\n    tally?:   { yea: number; nay: number };\n    vetoes?:  ParticipantUri[];\n    reason?:  string;\n  };\n  opened_at:    string;\n}\n\n// ============================================================\n//   Handoff (handoff/1.0)\n// ============================================================\n\nexport interface HandoffTaskItem {\n  task_id:         TaskId;\n  title?:          string;\n  status_summary?: string;\n  next_action?:    string;\n  blockers?:       string[];\n}\n\nexport interface Handoff {\n  id:           string;\n  proposer:     ParticipantUri;\n  recipient:    ParticipantUri;     // single URI or \"group:...\"\n  proposed_at:  string;\n  tasks:        HandoffTaskItem[];\n  summary?:     string;\n  context_links: string[];\n  state:        \"proposed\" | \"accepted\" | \"declined\";\n  resolved_at?: string;\n  accepted_by?: ParticipantUri;\n  accepted_task_ids?: TaskId[];\n  accept_comment?:    string;\n  decline_reason?:    string;\n  decline_suggested_target?: ParticipantUri;\n}\n\n// ============================================================\n//   Review decision (review/1.0)\n// ============================================================\n\nexport interface ReviewDecision {\n  reviewer: ParticipantUri;\n  kind:     \"approve\" | \"reject\" | \"override\" | \"abstain\";\n  ts:       string;\n  comment?: string;\n  tags?:    string[];\n  override_artefact_id?: ArtefactId;\n  abstain_category?:     string;\n}\n\n// ============================================================\n//   Task\n// ============================================================\n\nexport interface Task {\n  id:           TaskId;\n  kind:         string;\n  state:        TaskState;\n  assignee:     ParticipantUri;\n  delegator:    ParticipantUri;\n  input:        Record<string, unknown>;\n  output?:      unknown;\n  confidence?:  number | string;\n  deadline?:    string;\n  created_at:   string;\n  updated_at:   string;\n  mode:         Mode;\n  review_required?: boolean;\n  routing_hints?:           TaskRoutingHints;\n  artefact_routing_hints?:  ArtefactRoutingHints;\n  review?: {\n    requested_at: string;\n    requested_to: ParticipantUri[];\n    rule:         string;\n    deadline?:    string;\n    decisions:    ReviewDecision[];\n  };\n  history:      { ts: string; from: ParticipantUri; state: TaskState; note?: string }[];\n  supersedes?:  TaskId;\n  superseded_by?: TaskId;\n  parent?:      TaskId;\n  paused:       boolean;\n  paused_from?: TaskState;\n  /** Transient: holds the artefact passed to review.request so\n   *  decide.override can use it as the patch base. */\n  pending_artefact?: unknown;\n}\n\n// ============================================================\n//   Audit\n// ============================================================\n\nexport interface AuditEntry {\n  seq:      number;\n  arrived:  string;\n  /** The accepted call. Absent on a refusal entry. */\n  envelope?: Envelope;\n  /**\n   * The refused call, as received. Present only on a refusal entry, and held\n   * here rather than under `envelope` so a reader keyed on `envelope` passes\n   * the refusal by instead of replaying it (SPECIFICATION 10.1).\n   */\n  request?:  Envelope;\n  /** Present only on a refusal entry. */\n  outcome?:  RefusalOutcome;\n  prev_hash?: string;\n}\n\n/** Why a recorded call did not take effect. */\nexport interface RefusalOutcome {\n  status: \"refused\";\n  /** The error code the caller was answered with. */\n  code:   number;\n}\n\n// ============================================================\n//   Workspace\n// ============================================================\n\nexport interface Workspace {\n  id:           WorkspaceId;\n  created:      string;\n  state:        WorkspaceState;\n  profiles:     string[];\n  mode:         Mode;\n  mode_ceiling: Mode;\n  routing_policy_uri?: string;\n  step_up_window_sec: number;\n  min_acr?: string;\n  members:         Map<ParticipantUri, Member>;\n  tasks:           Map<TaskId, Task>;\n  overrides:       Map<ArtefactId, OverrideArtefact>;\n  whispers:        Map<string, WhisperPrompt>;\n  deliberations:   Map<string, Deliberation>;\n  handoffs:        Map<string, Handoff>;\n  snapshots:       Map<ArtefactId, SnapshotArtefact>;\n  route_decisions: Map<ArtefactId, RouteDecisionArtefact>;\n  // task.create idempotency: caller-supplied key -> task_id.\n  idempotency_keys: Record<string, TaskId>;\n  audit:           AuditEntry[];\n  chain_head?:     string;\n  chain_enabled:   boolean;\n}\n\n/**\n * Listener callback invoked synchronously when an envelope is appended\n * to the workspace audit log.\n */\nexport type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;\n\n/** True iff mode `a` is <= ceiling. */\nexport function modeLE(a: Mode, ceiling: Mode): boolean {\n  const order: Record<Mode, number> = { shadow: 0, trial: 1, production: 2 };\n  return order[a] <= order[ceiling];\n}\n","/**\n * audit-scitt/1.0 profile (profiles/audit-scitt.md).\n *\n * Methods:\n *   - audit.submit_to_scitt   -> build COSE_Sign1-shaped statements, pass to submitter\n *   - audit.verify_receipt    -> delegate to deployment hook\n *   - audit.verify_chain      -> replay local prev_hash chain\n *\n * External SCITT integration is the deployment's job; the Coordinator\n * builds the statement shape and routes through CoordinatorOptions.scittSubmitter.\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { entryIsWellFormed, entryRecord, linkHash } from \"../audit.js\";\nimport { canonicalize, ZERO_HASH } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\n\n/** The head after a malformed entry, which no stored head can match. */\nconst MALFORMED = \"sha256:malformed\";\n\n/**\n * A statement's payload is what the entry's chain link hashes: the envelope\n * of an accepted call, or the outcome together with the request of a refusal.\n */\nfunction buildStatement(workspaceId: string, record: unknown, issuer: string): Record<string, unknown> {\n  return {\n    protected: {\n      alg: -8,  // Ed25519 per COSE\n      iss: issuer,\n      kid: \"scitt-issuer\",\n      cwt_claims: { sub: workspaceId, iat: null },\n      \"content-type\": \"application/chap+json;version=0.3\",\n    },\n    payload: canonicalize(record).toString(\"utf-8\"),\n    signature: \"<deployment-supplied>\",\n  };\n}\n\nexport function registerAuditScitt(coord: Coordinator): void {\n  coord.handlers.set(\"audit.submit_to_scitt\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const issuer = (p.issuer as string) ?? \"service:coordinator\";\n\n    if (!coord.options.scittSubmitter) {\n      const statements = ws.audit.slice(fromSeq, toSeq).map(e =>\n        buildStatement(ws.id, entryRecord(e), issuer));\n      return { result: {\n        statements,\n        note: \"No scittSubmitter configured; submit these out-of-band\",\n      }};\n    }\n    const receipts: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      const statement = buildStatement(ws.id, entryRecord(entry), issuer);\n      let receipt: Record<string, unknown> | null;\n      try {\n        receipt = coord.options.scittSubmitter(statement);\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_UNREACHABLE, `SCITT submission error: ${msg}`) };\n      }\n      if (receipt === null) {\n        return { error: rpcError(E.SCITT_STATEMENT_REJECTED,\n          `Statement rejected at seq ${entry.seq}`) };\n      }\n      receipts.push({ seq: entry.seq, receipt });\n    }\n    return { result: { receipts } };\n  });\n\n  coord.handlers.set(\"audit.verify_receipt\", (p) => {\n    const receipt = p.receipt;\n    if (typeof receipt !== \"object\" || receipt === null) {\n      return { error: rpcError(E.PARAMS, \"receipt must be an object\") };\n    }\n    if (coord.options.verifyScittReceipt) {\n      let ok: boolean;\n      try { ok = !!coord.options.verifyScittReceipt(receipt as Record<string, unknown>); }\n      catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_RECEIPT_INVALID, `verify error: ${msg}`) };\n      }\n      if (!ok) return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"Receipt did not verify\") };\n      return { result: { verified: true } };\n    }\n    return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"No verifyScittReceipt hook configured; receipt not verified\") };\n  });\n\n  coord.handlers.set(\"audit.verify_chain\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (!(ws.chain_enabled || coord.options.enableChain)) {\n      return { error: rpcError(E.PARAMS, \"Chain not enabled for this workspace\") };\n    }\n    // Range verification is not implemented. Accepting the parameters and\n    // replaying the whole log anyway would answer a wider question than the\n    // caller asked while reporting counts scoped to the whole log, which is\n    // the failure this method was just fixed to stop making.\n    if (p.from_seq !== undefined || p.to_seq !== undefined) {\n      return { error: rpcError(\n        E.PARAMS,\n        \"Range verification is not implemented; omit from_seq and to_seq to \" +\n        \"verify the whole log.\",\n      ) };\n    }\n    // Coverage begins at the first entry carrying a prev_hash. A workspace\n    // may enable chaining part-way through its life, in which case every\n    // earlier entry is outside the chain and cannot be evaluated against\n    // anything. Those entries are not evidence of tampering and not\n    // evidence of integrity: they were never checked, and the verdict\n    // below has to say so rather than pass over them.\n    let start = ws.audit.findIndex(e => e.prev_hash != null);\n    if (start < 0) start = ws.audit.length;\n    const errors: string[] = [];\n    let prev = ZERO_HASH;\n    let resync = false;\n    for (const e of ws.audit.slice(start)) {\n      // After a malformed entry the next link is taken as stored, so the\n      // entries after it are judged on their own links. The chain is\n      // reported broken either way.\n      const expectedPrev = resync && typeof e.prev_hash === \"string\" ? e.prev_hash : prev;\n      resync = false;\n      // A chain-enabled workspace must have prev_hash on every entry; a\n      // missing value is a defect, not a reason to skip the check.\n      if (e.prev_hash !== expectedPrev) {\n        errors.push(`seq ${e.seq}: prev_hash mismatch`);\n      }\n      // An entry that records neither one accepted envelope nor one refused\n      // request with its outcome has been altered, and cannot be linked.\n      if (!entryIsWellFormed(e)) {\n        errors.push(`seq ${e.seq}: malformed entry`);\n        prev = MALFORMED;\n        resync = true;\n        continue;\n      }\n      prev = linkHash(entryRecord(e), expectedPrev);\n    }\n    // The recomputed head must match the stored head; this is what makes\n    // the final entry tamper-evident.\n    // Explicit null/undefined check, matching Python. A falsy-but-present\n    // head must not be silently replaced with ZERO_HASH, or the two\n    // implementations return different verdicts for the same state.\n    const storedHead = (ws.chain_head === undefined || ws.chain_head === null)\n      ? ZERO_HASH : ws.chain_head;\n    if (prev !== storedHead) {\n      errors.push(\"chain_head mismatch: replay does not match stored head\");\n    }\n    if (errors.length) {\n      return { error: rpcError(E.PARAMS, errors.join(\"; \")) };\n    }\n    const entriesTotal     = ws.audit.length;\n    const entriesChecked   = entriesTotal - start;\n    const entriesUnchecked = start;\n    // Three terminal verdicts, mutually exclusive: a broken chain returned\n    // above as an error, an unevaluated range here, and a pass only when\n    // coverage is complete. `not_evaluated` never rides alongside ok:true;\n    // a reader that looks at ok alone fails closed rather than reading a\n    // pass over entries nothing was checked against.\n    if (entriesUnchecked > 0) {\n      return { result: {\n        status:            \"not_evaluated\",\n        ok:                false,\n        reason:            \"unchained_prefix\",\n        entries_total:     entriesTotal,\n        entries_checked:   entriesChecked,\n        entries_unchecked: entriesUnchecked,\n        checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n        chain_head:        storedHead,\n      }};\n    }\n    return { result: {\n      status:            \"verified\",\n      ok:                true,\n      entries_total:     entriesTotal,\n      entries_checked:   entriesChecked,\n      entries_unchecked: 0,\n      checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n      chain_head:        storedHead,\n    }};\n  });\n}\n","/**\n * control/1.0 profile (profiles/control.md).\n *\n * Methods:\n *   - control.pause / control.resume   (scope: task|participant|workspace)\n *   - control.cancel\n *   - control.snapshot                  (returns art_... id)\n *   - control.rollback                  (to_snapshot_artefact_id + what_to_restore)\n *   - control.supersede                 (creates successor in one shot)\n *   - control.set_mode_ceiling\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { contentHash } from \"../canonical.js\";\nimport { rawValues } from \"../tracked.js\";\nimport { modeLE } from \"../types.js\";\nimport type { Mode, SnapshotArtefact, Task, TaskState } from \"../types.js\";\n\nconst VALID_MODES = new Set<Mode>([\"shadow\", \"trial\", \"production\"]);\nconst VALID_SCOPES = new Set([\"task\", \"participant\", \"workspace\"]);\n\nexport function registerControl(coord: Coordinator): void {\n  coord.handlers.set(\"control.pause\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, `scope must be task/participant/workspace`) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot pause ${task.state} task`) };\n      }\n      task.paused = true;\n      const prior = task.state;\n      if (prior !== \"paused\") task.paused_from = prior;\n      task.state = \"paused\";\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: \"paused\", note: `was ${prior}` });\n      return { result: { scope: \"task\", task_id: task.id, state: \"paused\" } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri || !ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = true;\n      return { result: {\n        scope: \"participant\", participant_uri: uri, paused: true,\n        in_flight_policy: (p.in_flight_policy as string) || \"allow_to_complete\",\n      }};\n    }\n    // workspace\n    ws.state = \"paused\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"paused\" } };\n  });\n\n  coord.handlers.set(\"control.resume\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, `scope must be task/participant/workspace`) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state !== \"paused\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot resume ${task.state} task`) };\n      }\n      task.paused = false;\n      const restored: TaskState = task.paused_from ?? \"in_progress\";\n      task.paused_from = undefined;\n      task.state = restored;\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: restored });\n      return { result: { scope: \"task\", task_id: task.id, state: restored } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri || !ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = false;\n      return { result: { scope: \"participant\", participant_uri: uri, paused: false } };\n    }\n    ws.state = \"active\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"active\" } };\n  });\n\n  coord.handlers.set(\"control.cancel\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n      return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot cancel ${task.state} task`) };\n    }\n    task.state = \"cancelled\";\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: p.from as string, state: \"cancelled\", note: p.reason as string | undefined });\n    return { result: { state: \"cancelled\" } };\n  });\n\n  coord.handlers.set(\"control.snapshot\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (Array.isArray(p.include) && p.include.length === 0) {\n      return { error: rpcError(E.PARAMS, \"include must not be empty\") };\n    }\n    const include: string[] = Array.isArray(p.include)\n      ? [...p.include as string[]]\n      : [\"members\", \"open_tasks\", \"mode_ceiling\"];\n    const state: Record<string, unknown> = {};\n    if (include.includes(\"members\")) {\n      // Read-only projections: read without recording a change.\n      const members = Array.from(rawValues(ws.members)).map(m => ({\n        uri: m.uri, type: m.type,\n        ...(m.role ? { role: m.role } : {}),\n        ...(m.scopes?.length ? { scopes: m.scopes } : {}),\n      }));\n      if (members.length) state.members = members;\n    }\n    if (include.includes(\"open_tasks\")) {\n      const tasks = Array.from(rawValues(ws.tasks))\n        .filter(t => t.state !== \"completed\" && t.state !== \"declined\" && t.state !== \"cancelled\" && t.state !== \"superseded\")\n        .map(t => ({ id: t.id, kind: t.kind, state: t.state,\n          ...(t.assignee ? { assignee: t.assignee } : {}),\n        }));\n      if (tasks.length) state.open_tasks = tasks;\n    }\n    if (include.includes(\"mode_ceiling\")) state.mode_ceiling = ws.mode_ceiling;\n    if (include.includes(\"policy\") && ws.routing_policy_uri) state.routing_policy_uri = ws.routing_policy_uri;\n    if (include.includes(\"audit\") || include.includes(\"all\")) state.audit_seq = ws.audit.length;\n\n    // Store the same canonical artefact that is emitted on the wire. Copies\n    // belong to this explicit capture boundary, never Coordinator.snapshot().\n    const content: SnapshotArtefact[\"content\"] = structuredClone({\n      workspace: ws.id,\n      audit_seq: ws.audit.length,\n      include,\n      state,\n      ...(p.label ? { label: p.label as string } : {}),\n    });\n    const snapId = coord.ids.artefactId();\n    const snap: SnapshotArtefact = {\n      id: snapId,\n      kind: \"snapshot\",\n      produced_at: coord.now(),\n      produced_by: p.from as string,\n      content_hash: contentHash(content),\n      content,\n    };\n    ws.snapshots.set(snapId, snap);\n    return {\n      result: {\n        snapshot_artefact_id: snapId,\n        audit_seq: snap.content.audit_seq,\n        artefact: structuredClone(snap),\n      },\n    };\n  });\n\n  coord.handlers.set(\"control.rollback\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const snapId = (p.to_snapshot_artefact_id as string)\n                 || (p.snapshot_artefact_id as string)\n                 || (p.snapshot_id as string);\n    if (!snapId) return { error: rpcError(E.PARAMS, \"to_snapshot_artefact_id is required\") };\n    const snap = ws.snapshots.get(snapId);\n    if (!snap) return { error: rpcError(E.CONTROL_SNAPSHOT_NOT_FOUND, `Unknown snapshot: ${snapId}`) };\n    if (Array.isArray(p.what_to_restore) && p.what_to_restore.length === 0) {\n      return { error: rpcError(E.PARAMS, \"what_to_restore must not be empty\") };\n    }\n    const what: string[] = (p.what_to_restore as string[]) ?? snap.content.include;\n    const restored: string[] = [];\n    if (what.includes(\"mode_ceiling\") && snap.content.state.mode_ceiling) {\n      ws.mode_ceiling = snap.content.state.mode_ceiling as Mode;\n      restored.push(\"mode_ceiling\");\n    }\n    if (what.includes(\"members\") && Array.isArray(snap.content.state.members)) {\n      const snapByUri = new Map<string, Record<string, unknown>>();\n      for (const m of snap.content.state.members as Array<Record<string, unknown>>) {\n        snapByUri.set(m.uri as string, m);\n      }\n      for (const [uri, snapM] of snapByUri) {\n        if (ws.members.has(uri)) {\n          const cur = ws.members.get(uri)!;\n          cur.role = (snapM.role as string) ?? cur.role;\n          cur.scopes = Array.isArray(snapM.scopes) ? [...snapM.scopes as string[]] : undefined;\n        }\n      }\n      restored.push(\"members\");\n    }\n    return { result: {\n      rolled_back_to: snapId, audit_seq: snap.content.audit_seq, restored,\n      ...(p.reason ? { reason: p.reason as string } : {}),\n    }};\n  });\n\n  coord.handlers.set(\"control.supersede\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const oldId = p.task_id as string;\n    const old = ws.tasks.get(oldId);\n    if (!old) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const newSpec = (p.successor_task as Record<string, unknown>) ?? {};\n    if (!newSpec.kind) {\n      return { error: rpcError(E.PARAMS, \"successor_task must include kind\") };\n    }\n    const assignee = (newSpec.assignee as string) || old.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"successor assignee not in workspace\") };\n    }\n    // The successor is a created task, so the participant-paused check\n    // task.create applies has to apply here too. Without it, superseding is a\n    // way to hand work to a participant whose work was stopped.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    // The successor is a created task, so it is bound by the same modes/1.0\n    // invariants as task.create: it must not exceed the workspace ceiling, and\n    // a trial-mode task forces review on regardless of its own setting.\n    if (newSpec.mode !== undefined && newSpec.mode !== null && typeof newSpec.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.mode must be a string\") };\n    }\n    const requestedMode = (newSpec.mode as Mode) || old.mode;\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (newSpec.review_required !== undefined && newSpec.review_required !== null\n        && typeof newSpec.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.review_required must be a boolean\") };\n    }\n    const now = coord.now();\n    const newId = coord.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: newSpec.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as string,\n      input: (newSpec.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode: requestedMode,\n      supersedes: old.id,\n      history: [{ ts: now, from: p.from as string, state: \"created\",\n                  note: `supersedes ${old.id}: ${(p.reason as string) || \"\"}` }],\n      paused: false,\n    };\n    // A successor keeps the review requirement of the task it replaces, so\n    // superseding never removes a required review. Trial forces review only\n    // when the workspace opted into modes/1.0, matching task.create, since\n    // mode is inert without the profile. Otherwise the spec's own setting\n    // applies.\n    if (old.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    } else if (\"review_required\" in newSpec) {\n      newTask.review_required = !!newSpec.review_required;\n    }\n    ws.tasks.set(newId, newTask);\n    old.state = \"superseded\";\n    old.superseded_by = newId;\n    old.updated_at = now;\n    old.history.push({ ts: now, from: p.from as string, state: \"superseded\",\n                       note: `-> ${newId}: ${(p.reason as string) || \"\"}` });\n    return { result: { superseded_task_id: old.id, new_task_id: newId, reason: p.reason as string | undefined } };\n  });\n\n  coord.handlers.set(\"control.set_mode_ceiling\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const m = (p.new_ceiling as Mode) ?? (p.mode_ceiling as Mode);\n    if (!VALID_MODES.has(m)) {\n      return { error: rpcError(E.PARAMS, `new_ceiling must be shadow/trial/production`) };\n    }\n    ws.mode_ceiling = m;\n    return { result: { mode_ceiling: ws.mode_ceiling, reason: p.reason as string | undefined } };\n  });\n}\n","/**\n * deliberation/1.0 profile (profiles/deliberation.md).\n *\n * Methods:\n *   - deliberate.open\n *   - deliberate.comment\n *   - deliberate.vote\n *   - deliberate.close\n *\n * Rules: any_one_approves | all_approve | quorum:N |\n *        weighted_vote:T | weighted_vote_with_veto:T\n *\n * Error codes (spec S5):\n *   -32030 voter not in participant list\n *   -32031 already voted\n *   -32032 closed or lapsed\n *   -32033 unknown rule\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { Deliberation } from \"../types.js\";\n\nfunction parseRule(rule: string): { kind: string; params: Record<string, number> } {\n  if (rule.includes(\":\")) {\n    const [kind, arg] = rule.split(\":\", 2);\n    if (kind === \"quorum\") return { kind, params: { n: parseInt(arg, 10) } };\n    if (kind === \"weighted_vote\" || kind === \"weighted_vote_with_veto\") {\n      return { kind, params: { threshold: parseFloat(arg) } };\n    }\n  }\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return { kind: rule, params: {} };\n  throw new Error(`Unknown rule: ${rule}`);\n}\n\nfunction computeOutcome(delib: Deliberation): Deliberation[\"outcome\"] {\n  const parsed = parseRule(delib.rule);\n  const yea = delib.votes.filter(v => v.vote === \"yea\");\n  const nay = delib.votes.filter(v => v.vote === \"nay\");\n  const vetoes = delib.votes.filter(v => v.veto_invoked && (delib.veto ?? {})[v.voter]);\n  const weights = delib.weights ?? {};\n\n  const weighted = (vs: typeof yea) =>\n    vs.reduce((s, v) => s + (weights[v.voter] ?? 1.0), 0);\n\n  if (parsed.kind === \"any_one_approves\") {\n    return {\n      outcome: yea.length >= 1 ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"all_approve\") {\n    const passed = yea.length === delib.participants.length && nay.length === 0;\n    return {\n      outcome: passed ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"quorum\") {\n    const n = parsed.params.n;\n    const cast = yea.length + nay.length;\n    if (cast < n) {\n      return {\n        outcome: \"rejected\", reason: \"quorum not met\", rule: delib.rule,\n        tally: { yea: yea.length, nay: nay.length }, vetoes: [],\n      };\n    }\n    return {\n      outcome: yea.length > nay.length ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote\") {\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote_with_veto\") {\n    if (vetoes.length) {\n      return {\n        outcome: \"rejected\", rule: delib.rule,\n        tally: { yea: 0, nay: 0 },\n        vetoes: vetoes.map(v => v.voter),\n      };\n    }\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  return { outcome: \"error\", rule: delib.rule, reason: `unsupported rule ${parsed.kind}` };\n}\n\nexport function registerDeliberation(coord: Coordinator): void {\n  coord.handlers.set(\"deliberate.open\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"rule\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const to = p.to ?? p.participants;\n    const participants: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!participants.length) {\n      return { error: rpcError(E.PARAMS, \"deliberate.open needs 'to' (participants list)\") };\n    }\n    try { parseRule(p.rule as string); }\n    catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.DELIB_UNKNOWN_RULE, msg) };\n    }\n    const id = (p.deliberation_id as string) || coord.ids.deliberationId();\n    const delib: Deliberation = {\n      id,\n      task_id: p.task_id as string | undefined,\n      opener: p.from as string,\n      participants,\n      rule: p.rule as string,\n      question: p.question as string | undefined,\n      weights: p.weights as Deliberation[\"weights\"],\n      veto: p.veto as Deliberation[\"veto\"],\n      deadline: p.deadline as string | undefined,\n      state: \"open\",\n      comments: [],\n      votes: [],\n      opened_at: coord.now(),\n    };\n    ws.deliberations.set(id, delib);\n    return { result: { deliberation_id: id, state: \"open\" } };\n  });\n\n  coord.handlers.set(\"deliberate.comment\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    delib.comments.push({\n      ts: coord.now(),\n      from: p.from as string,\n      text: (p.comment as string) || (p.text as string) || \"\",\n    });\n    return { result: { accepted: true } };\n  });\n\n  coord.handlers.set(\"deliberate.vote\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    for (const f of [\"from\", \"vote\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const v = p.vote as string;\n    if (v !== \"yea\" && v !== \"nay\" && v !== \"abstain\") {\n      return { error: rpcError(E.PARAMS, \"vote must be yea/nay/abstain\") };\n    }\n    const voter = p.from as string;\n    if (!delib.participants.includes(voter)) {\n      return { error: rpcError(E.DELIB_VOTER_NOT_IN_LIST,\n        `Voter ${voter} not in participant list`) };\n    }\n    if (delib.votes.some(x => x.voter === voter)) {\n      return { error: rpcError(E.DELIB_ALREADY_VOTED, `Voter ${voter} has already voted`) };\n    }\n    delib.votes.push({\n      ts: coord.now(),\n      voter,\n      vote: v as \"yea\" | \"nay\" | \"abstain\",\n      weight: p.weight as number | undefined,\n      comment: p.comment as string | undefined,\n      veto_invoked: !!p.veto_invoked,\n    });\n    return { result: { recorded: true } };\n  });\n\n  coord.handlers.set(\"deliberate.close\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state === \"closed\") return { result: delib.outcome! };\n    delib.state = \"closed\";\n    delib.outcome = computeOutcome(delib);\n    return { result: delib.outcome };\n  });\n}\n","/**\n * handoff/1.0 profile (profiles/handoff.md).\n *\n * Carries multiple tasks. Recipient is a single URI or a group:... URI.\n *\n * Error codes (spec S6):\n *   -32050 tasks not assigned to proposer\n *   -32051 already resolved\n *   -32052 recipient not a workspace member\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { Handoff, HandoffTaskItem } from \"../types.js\";\n\nexport function registerHandoff(coord: Coordinator): void {\n  coord.handlers.set(\"handoff.propose\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"tasks\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const proposer = p.from as string;\n    const recipient = p.to as string;\n    if (typeof recipient === \"string\" && !recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(recipient)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          `Recipient ${recipient} is not a member`) };\n      }\n    }\n    const tasksIn = p.tasks;\n    if (!Array.isArray(tasksIn) || !tasksIn.length) {\n      return { error: rpcError(E.PARAMS, \"tasks must be a non-empty list\") };\n    }\n    const proposed: HandoffTaskItem[] = [];\n    for (const t of tasksIn as Array<Record<string, unknown>>) {\n      const tid = t.task_id as string;\n      if (!tid || !ws.tasks.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Unknown task in handoff: ${tid}`) };\n      }\n      const task = ws.tasks.get(tid)!;\n      if (task.assignee !== proposer) {\n        return { error: rpcError(E.HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER,\n          `Task ${tid} is not currently assigned to ${proposer}`) };\n      }\n      proposed.push({\n        task_id: tid,\n        title: t.title as string | undefined,\n        status_summary: t.status_summary as string | undefined,\n        next_action: t.next_action as string | undefined,\n        blockers: (t.blockers as string[] | undefined) ?? [],\n      });\n    }\n    const id = (p.handoff_id as string) || coord.ids.handoffId();\n    const ho: Handoff = {\n      id,\n      proposer,\n      recipient,\n      proposed_at: coord.now(),\n      tasks: proposed,\n      summary: p.summary as string | undefined,\n      context_links: (p.context_links as string[] | undefined) ?? [],\n      state: \"proposed\",\n    };\n    ws.handoffs.set(id, ho);\n    return { result: { handoff_id: id, state: \"proposed\", task_ids: proposed.map(t => t.task_id) } };\n  });\n\n  coord.handlers.set(\"handoff.accept\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const acceptor = p.from as string;\n    if (ho.recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    } else {\n      if (acceptor !== ho.recipient) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not the named recipient\") };\n      }\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    }\n    // Accepting makes the acceptor the assignee. A paused participant is\n    // assigned no new tasks (control/1.0), so it cannot take tasks this way.\n    if (ws.members.get(acceptor)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Acceptor ${acceptor} is paused`) };\n    }\n    // Omission accepts all proposed tasks; an empty selection is not a handoff.\n    if (Array.isArray(p.accepted_task_ids) && p.accepted_task_ids.length === 0) {\n      return { error: rpcError(E.PARAMS, \"accepted_task_ids must not be empty\") };\n    }\n    const validIds = new Set(ho.tasks.map(t => t.task_id));\n    const acceptedIds: string[] = Array.isArray(p.accepted_task_ids)\n      ? [...p.accepted_task_ids as string[]]\n      : ho.tasks.map(t => t.task_id);\n    for (const tid of acceptedIds) {\n      if (!validIds.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Task ${tid} not in this handoff`) };\n      }\n    }\n    const now = coord.now();\n    for (const tid of acceptedIds) {\n      const task = ws.tasks.get(tid)!;\n      task.assignee = acceptor;\n      task.updated_at = now;\n      task.history.push({\n        ts: now, from: acceptor, state: task.state,\n        note: `handoff accepted from ${ho.proposer}`,\n      });\n    }\n    ho.state = \"accepted\";\n    ho.accepted_by = acceptor;\n    ho.accepted_task_ids = [...acceptedIds];\n    ho.accept_comment = p.comment as string | undefined;\n    ho.resolved_at = now;\n    return { result: { accepted: true, task_ids: [...acceptedIds], assignee: acceptor } };\n  });\n\n  coord.handlers.set(\"handoff.decline\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const decliner = p.from as string;\n    ho.decline_reason = p.reason as string | undefined;\n    ho.decline_suggested_target = p.suggested_target as string | undefined;\n    if (!ho.recipient.startsWith(\"group:\") && decliner === ho.recipient) {\n      ho.state = \"declined\";\n      ho.resolved_at = coord.now();\n    }\n    return { result: { recorded: true, state: ho.state } };\n  });\n}\n","/**\n * routing/1.0 profile (profiles/routing.md).\n *\n * Three methods, each emits a route_decision artefact:\n *   - task.route      -> pick assignee + update task.assignee\n *   - review.depth    -> skip / spot_check / full + sampling_probability\n *   - escalate.auto   -> evaluate auto-escalation\n *\n * Error codes:\n *   -32510 no eligible assignee\n *   -32513 candidates_empty\n *   -32514 depth_not_applicable\n *   -32515 policy_unreachable\n *   -32516 escalation target unavailable\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { RouteDecisionArtefact, Task } from \"../types.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\n\nfunction defaultDepth(hints: Record<string, unknown>): {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling?: number;\n  summary: string;\n} {\n  const crit = (hints.criticality as string) ?? \"medium\";\n  let conf = 1.0;\n  try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n  if (isNaN(conf)) conf = 1.0;\n  const r = CRIT[crit] ?? 1;\n  if (r >= 3) return { depth: \"full\", summary: \"criticality=critical: full review\" };\n  if (r === 2 && conf < 0.7) return { depth: \"full\", summary: \"criticality=high and confidence<0.7: full review\" };\n  if (r === 0 && conf >= 0.95) return { depth: \"skip\", summary: \"very low criticality + very high confidence: skip\" };\n  if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling: 0.10, summary: \"low criticality + high confidence: 10% sample\" };\n  return { depth: \"spot_check\", sampling: 0.25, summary: \"default mid-confidence: 25% sample\" };\n}\n\nexport function registerRouting(coord: Coordinator): void {\n  coord.handlers.set(\"task.route\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (p.candidates !== undefined && p.candidates !== null && !Array.isArray(p.candidates)) {\n      return { error: rpcError(E.PARAMS, \"candidates must be a list\") };\n    }\n    const candidates = (p.candidates as string[] | null | undefined) ?? [];\n    if (!candidates.length) {\n      return { error: rpcError(E.ROUTING_CANDIDATES_EMPTY, \"candidates array was empty\") };\n    }\n    let selected: string;\n    let rationale: Record<string, unknown>;\n    if (coord.options.routingPolicy) {\n      try {\n        const d = coord.options.routingPolicy(task, [...candidates]);\n        selected = d.selected;\n        rationale = d.rationale;\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `routing policy error: ${msg}`) };\n      }\n    } else {\n      // A paused participant is assigned no new tasks (control/1.0), so the\n      // default policy passes over one as it passes over a non-member, and\n      // names it among the alternatives with that reason.\n      const memberOf = (c: unknown) => (typeof c === \"string\" ? ws.members.get(c) : undefined);\n      const eligible = candidates.filter(c => { const m = memberOf(c); return !!m && !m.paused; });\n      if (!eligible.length) {\n        return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE, \"No candidate is a workspace member who is not paused\") };\n      }\n      selected = eligible[0];\n      const alternatives: Array<{ candidate: string; reason_excluded: string }> = [];\n      let chosen = false;\n      for (const c of candidates) {\n        const m = memberOf(c);\n        if (!m) continue;\n        if (m.paused) alternatives.push({ candidate: c, reason_excluded: \"paused\" });\n        else if (!chosen) chosen = true;\n        else alternatives.push({ candidate: c, reason_excluded: \"not first eligible\" });\n      }\n      rationale = {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: alternatives,\n      };\n    }\n    if (!ws.members.has(selected)) {\n      return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE,\n        `Selected ${JSON.stringify(selected)} is not a member`) };\n    }\n    // An operator policy can pick a paused participant. Routing to one would\n    // assign a task to a participant whose work was stopped, so it is refused\n    // as task.create refuses a paused assignee.\n    if (ws.members.get(selected)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${selected} is paused`) };\n    }\n    task.assignee = selected;\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: \"service:coordinator\",\n                        state: task.state, note: `routed to ${selected}` });\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"task.route\", outcome: selected,\n      produced_by: \"service:coordinator\", produced_at: task.updated_at,\n      task: task.id,\n      policy_id: rationale.policy_id as string | undefined,\n      hints_observed: { ...(task.routing_hints ?? {}) },\n      rationale: (rationale.summary as string) ?? \"\",\n      alternatives_considered: rationale.alternatives_considered,\n    };\n    ws.route_decisions.set(artId, artefact);\n    return { result: { selected, decision_artefact: artId, rationale } };\n  });\n\n  coord.handlers.set(\"review.depth\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const hints: Record<string, unknown> = { ...(task.routing_hints ?? {}),\n                                              ...((p.artefact_routing_hints as Record<string, unknown>) ?? {}) };\n    if (!Object.keys(hints).length) {\n      return { error: rpcError(E.ROUTING_DEPTH_NOT_APPLICABLE, \"No routing_hints to consult\") };\n    }\n    let depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n    let sampling: number | undefined;\n    let summary: string;\n    let policyId: string;\n    if (coord.options.reviewDepthPolicy) {\n      try {\n        const d = coord.options.reviewDepthPolicy(task, hints);\n        depth = d.depth;\n        sampling = d.sampling_probability;\n        summary = (d.rationale.summary as string) ?? \"operator policy\";\n        policyId = (d.rationale.policy_id as string) ?? \"operator\";\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `depth policy error: ${msg}`) };\n      }\n    } else {\n      const d = defaultDepth(hints);\n      depth = d.depth; sampling = d.sampling; summary = d.summary;\n      policyId = \"default\";\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"review.depth\", outcome: depth,\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id, policy_id: policyId,\n      hints_observed: hints, rationale: summary,\n      ...(sampling !== undefined ? { sampling_probability: sampling } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    const result: Record<string, unknown> = {\n      depth, decision_artefact: artId,\n      rationale: { policy_id: policyId, hints_used: Object.keys(hints), summary },\n    };\n    if (sampling !== undefined) result.sampling_probability = sampling;\n    return { result };\n  });\n\n  coord.handlers.set(\"escalate.auto\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const hints = { ...(task.routing_hints ?? {}) };\n    let escalate: boolean, to: string | undefined, rule: Record<string, unknown>;\n    if (coord.options.escalationPolicy) {\n      try {\n        const d = coord.options.escalationPolicy(task, hints);\n        escalate = !!d.escalate;\n        to = d.to;\n        rule = d.triggered_rule ?? {};\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `escalation policy error: ${msg}`) };\n      }\n    } else {\n      const crit = (hints.criticality as string) ?? \"medium\";\n      let conf = 1.0;\n      try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n      if (isNaN(conf)) conf = 1.0;\n      const r = CRIT[crit] ?? 1;\n      escalate = r >= 3 || (r >= 2 && conf < 0.6);\n      to = p.default_escalation_target as string | undefined;\n      rule = {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      };\n    }\n    if (escalate) {\n      if (!to) return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n        \"Escalation triggered but no target available\") };\n      if (!to.startsWith(\"group:\") && !ws.members.has(to)) {\n        return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n          `Escalation target ${to} is not a member or group`) };\n      }\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"escalate.auto\",\n      outcome: escalate ? { escalate: true, to } : { escalate: false },\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id,\n      policy_id: rule.rule_id as string | undefined,\n      hints_observed: hints,\n      rationale: (rule.summary as string) ?? \"\",\n      ...(escalate ? { escalation_target: to } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    if (escalate) {\n      if (coord.options.onAutoEscalate && to) {\n        try { coord.options.onAutoEscalate(task, to); } catch { /* */ }\n      }\n      return { result: { escalate: true, to, decision_artefact: artId, triggered_rule: rule } };\n    }\n    return { result: { escalate: false, decision_artefact: artId } };\n  });\n}\n","/**\n * security-signed/1.0 profile (profiles/security-signed.md).\n *\n * Top-level `sig` field on every envelope: ed25519:<kid>:<base64>.\n * Verification happens at dispatch (see Coordinator.verifySignature).\n *\n * Methods:\n *   - participant.rotate_key\n *   - participant.revoke_key\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { KeyRecord } from \"../types.js\";\n\nexport function registerSecuritySigned(coord: Coordinator): void {\n  coord.handlers.set(\"participant.rotate_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"old_kid\", \"new_jwk\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const member = ws.members.get(p.from as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown participant: ${p.from}`) };\n    const oldKid = p.old_kid as string;\n    const oldKey = member.keys.find(k => k.kid === oldKid);\n    if (!oldKey) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${oldKid} for ${p.from}`) };\n    if (oldKey.revoked_at) return { error: rpcError(E.SIG_KEY_REVOKED, `Key ${oldKid} is revoked`) };\n\n    const newJwk = p.new_jwk as Record<string, unknown>;\n    if (!newJwk || typeof newJwk.kid !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_jwk must include kid\") };\n    }\n    const now = coord.now();\n    oldKey.valid_until = now;\n    member.keys.push({\n      jwk: newJwk as unknown as KeyRecord[\"jwk\"],\n      kid: newJwk.kid as string,\n      valid_from: now,\n    });\n    return { result: { rotated: true, old_kid: oldKid, new_kid: newJwk.kid, valid_from: now } };\n  });\n\n  coord.handlers.set(\"participant.revoke_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"target_uri\", \"kid\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const sender = p.from as string | undefined;\n    if (sender !== p.target_uri) {\n      const caller = sender ? ws.members.get(sender) : undefined;\n      if (!caller || caller.role !== \"admin\") {\n        return { error: rpcError(E.NOT_AUTHORISED,\n          \"Revoking another member's key requires the admin role\") };\n      }\n    }\n    const member = ws.members.get(p.target_uri as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown target: ${p.target_uri}`) };\n    const key = member.keys.find(k => k.kid === p.kid);\n    if (!key) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${p.kid} for target`) };\n    const now = coord.now();\n    key.revoked_at = now;\n    key.revoked_reason = (p.reason as string) || \"unspecified\";\n    return { result: { revoked: true, kid: key.kid, revoked_at: now, reason: key.revoked_reason } };\n  });\n}\n","/**\n * whisper/1.0 profile (profiles/whisper.md).\n *\n * Methods:\n *   - whisper.ask     -> pose a deadline-bound question with options + default\n *   - whisper.answer  -> answer a whisper\n *\n * Lapse handling: coordinator.checkWhisperLapses(workspaceId, now?) is\n * registered on the Coordinator instance for deployments to call from a\n * scheduler.\n *\n * Error codes (per spec S6):\n *   -32020 WHISPER_ALREADY_ANSWERED\n *   -32021 WHISPER_LAPSED\n *   -32022 WHISPER_OPTION_NOT_IN_SET\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { canonicalize } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport type { WhisperPrompt, Envelope } from \"../types.js\";\n\nfunction parseIso(ts: string): number { return new Date(ts).getTime(); }\n\n/**\n * Whether an answer field holds anything, read as Python reads a value's\n * truth, so both references agree that an empty answer is no answer.\n */\nfunction present(v: unknown): boolean {\n  if (v === undefined || v === null || v === false || v === 0 || v === \"\") return false;\n  if (Array.isArray(v)) return v.length > 0;\n  if (typeof v === \"object\") return Object.keys(v as object).length > 0;\n  return true;\n}\n\nexport function registerWhisper(coord: Coordinator): void {\n  coord.handlers.set(\"whisper.ask\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"task_id\", \"question\", \"deadline_ms\", \"default_if_lapsed\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    if (!ws.tasks.has(p.task_id as string)) {\n      return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    }\n    if (p.options !== undefined && p.options !== null && !Array.isArray(p.options)) {\n      return { error: rpcError(E.PARAMS, \"options must be a list\") };\n    }\n    const to = p.to;\n    const askee: string[] = Array.isArray(to) ? (to as string[]) : [to as string];\n    const id = (p.whisper_id as string) || coord.ids.artefactId();\n    const prompt: WhisperPrompt = {\n      id,\n      task_id: p.task_id as string,\n      asker: p.from as string,\n      askee,\n      question: p.question as string,\n      options: p.options as WhisperPrompt[\"options\"],\n      asked_at: coord.now(),\n      deadline_ms: Number(p.deadline_ms),\n      default_if_lapsed: p.default_if_lapsed,\n      urgency: (p.urgency as WhisperPrompt[\"urgency\"]) || \"low\",\n      state: \"pending\",\n    };\n    ws.whispers.set(id, prompt);\n    return { result: { whisper_id: id, deadline_ms: prompt.deadline_ms } };\n  });\n\n  coord.handlers.set(\"whisper.answer\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"whisper_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const prompt = ws.whispers.get(p.whisper_id as string);\n    if (!prompt) return { error: rpcError(E.PARAMS, \"Unknown whisper id\") };\n    // Only a participant the whisper was addressed to may answer it. A\n    // broadcast scope (workspace:/group:) is satisfied by any member; the\n    // coordinator does not model group membership (see SPECIFICATION.md).\n    const answerer = p.from as string;\n    const broadcast = prompt.askee.some((a) => typeof a === \"string\" && (a.startsWith(\"workspace:\") || a.startsWith(\"group:\")));\n    if (broadcast) {\n      if (!ws.members.has(answerer)) {\n        return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${answerer}`) };\n      }\n    } else if (!prompt.askee.includes(answerer)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Whisper was not addressed to ${answerer}`) };\n    }\n    if (prompt.state === \"answered\") {\n      return { error: rpcError(E.WHISPER_ALREADY_ANSWERED, \"Whisper already answered\") };\n    }\n    if (prompt.state === \"lapsed\") {\n      return { error: rpcError(E.WHISPER_LAPSED, \"Whisper already lapsed\") };\n    }\n\n    // A null option is no option, and an empty answer no answer, as in Python.\n    const answerOption = p.answer_option as string | undefined;\n    const hasOption = answerOption !== undefined && answerOption !== null;\n    const answerText = (present(p.answer) ? p.answer : p.answer_text) as string | undefined;\n    if (prompt.options && prompt.options.length) {\n      if (!hasOption) {\n        return { error: rpcError(E.PARAMS, \"answer_option is required when options are defined\") };\n      }\n      const valid = new Set(prompt.options.map(o => o.id));\n      if (!valid.has(answerOption)) {\n        return { error: rpcError(E.WHISPER_OPTION_NOT_IN_SET,\n          `Answer option ${canonicalize(answerOption as never).toString(\"utf-8\")} not in option set`) };\n      }\n    } else if (!present(answerText) && !hasOption) {\n      return { error: rpcError(E.PARAMS, \"answer or answer_option required\") };\n    }\n\n    prompt.state = \"answered\";\n    prompt.answered_at = coord.now();\n    prompt.answered_by = p.from as string;\n    prompt.answer_option = answerOption;\n    prompt.answer_text = answerText;\n    prompt.comment = p.comment as string | undefined;\n    return { result: { answered: true, whisper_id: prompt.id, task_id: prompt.task_id } };\n  });\n\n  // Expose the lapse-check function on the coordinator instance.\n  coord.checkWhisperLapses = (workspaceId: string, now?: string): Envelope[] => {\n    const ws = coord.workspaces.get(workspaceId);\n    if (!ws) return [];\n    const cutoff = parseIso(now ?? coord.now());\n    const emitted: Envelope[] = [];\n    for (const prompt of ws.whispers.values()) {\n      if (prompt.state !== \"pending\") continue;\n      const asked = parseIso(prompt.asked_at);\n      const deadline = asked + prompt.deadline_ms;\n      if (cutoff < deadline) continue;\n      prompt.state = \"lapsed\";\n      prompt.default_applied = prompt.default_if_lapsed;\n      // Set again so the change is written: a lapse check runs outside any\n      // call, where reading the prompt records nothing.\n      ws.whispers.set(prompt.id, prompt);\n      const notify: Envelope = {\n        jsonrpc: \"2.0\",\n        method: \"notify.message\",\n        params: {\n          workspace: ws.id,\n          from: \"service:coordinator\",\n          to: [prompt.asker, ...prompt.askee],\n          ts: coord.now(),\n          kind: \"whisper_lapsed\",\n          whisper_id: prompt.id,\n          // Carry the task so a task-filtered audit.read surfaces the\n          // lapse. A lapsed whisper applies its default with no human\n          // input, so it is the case most in need of being visible on\n          // the task's thread.\n          task_id: prompt.task_id,\n          default_applied: prompt.default_if_lapsed,\n        },\n      };\n      coord.recordAudit(ws, notify);\n      emitted.push(notify);\n    }\n    return emitted;\n  };\n}\n","/**\n * @brightbeamai/chap-coordinator/coordinator\n *\n * The Coordinator class. CHAP protocol logic, packaged as a library\n * rather than a CLI server. Applications instantiate one, call\n * `dispatch(envelope)`, subscribe to audit events, and persist via\n * the provided hooks.\n *\n * Coverage:\n *   - Core (9 methods)\n *   - review/1.0 (6 methods)\n *   - whisper/1.0 (2 methods + lapse handling)\n *   - deliberation/1.0 (4 methods)\n *   - modes/1.0 (mode handling at task.create; trial forces review)\n *   - handoff/1.0 (3 methods with multi-task and group support)\n *   - control/1.0 (7 methods with task/participant/workspace scopes)\n *   - routing/1.0 (3 methods producing route_decision artefacts)\n *   - security-signed/1.0 (top-level `sig` field; key history)\n *   - audit-scitt/1.0 (statement assembly + local chain linkage)\n *   - identity-oidc/1.0 + identity-vc/1.0 (binding hooks at join)\n */\n\nimport { canonicalize, contentHash, ZERO_HASH } from \"./canonical.js\";\nimport { ALWAYS_AVAILABLE, OWNING_PROFILE } from \"./catalogue.js\";\nimport { publicKeyFromJwk, verifyEnvelope } from \"./crypto.js\";\nimport { IdFactory } from \"./ids.js\";\nimport { E, isValidEnvelope, rpcError } from \"./jsonrpc.js\";\nimport { entryCall, entryRecord, isSigned, linkHash, refusalIsRecorded, signedDigest } from \"./audit.js\";\nimport { applyJsonPatch } from \"./patch.js\";\nimport type { Store, StoreChange, WorkspaceRecord } from \"./storage/store.js\";\nimport { COLLECTIONS, IDEMPOTENCY_KEYS, MemoryStore } from \"./storage/store.js\";\nimport { TrackedMap, rawEntries, rawValues, type Tracker } from \"./tracked.js\";\nimport { makeApi, type CoordinatorApi } from \"./api.js\";\nimport type {\n  ArtefactId,\n  AuditEntry,\n  AuditListener,\n  Envelope,\n  KeyRecord,\n  Member,\n  Mode,\n  OverrideArtefact,\n  ParticipantUri,\n  SnapshotArtefact,\n  Task,\n  TaskId,\n  Workspace,\n  WorkspaceId,\n} from \"./types.js\";\nimport { modeLE } from \"./types.js\";\nimport { registerAuditScitt } from \"./profiles/audit_scitt.js\";\nimport { registerControl } from \"./profiles/control.js\";\nimport { registerDeliberation } from \"./profiles/deliberation.js\";\nimport { registerHandoff } from \"./profiles/handoff.js\";\nimport { registerRouting } from \"./profiles/routing.js\";\nimport { registerSecuritySigned } from \"./profiles/security_signed.js\";\nimport { registerWhisper } from \"./profiles/whisper.js\";\n\n// ============================================================\n//   Options\n// ============================================================\n\nexport type TokenVerifier = (token: string) => Record<string, unknown> | null;\nexport type CredentialVerifier = (presentation: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittSubmitter = (statement: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittReceiptVerifier = (receipt: Record<string, unknown>) => boolean;\nexport type RoutingPolicyFn = (task: Task, candidates: ParticipantUri[]) => {\n  selected: ParticipantUri;\n  rationale: Record<string, unknown>;\n};\nexport type ReviewDepthPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling_probability?: number;\n  rationale: Record<string, unknown>;\n};\nexport type EscalationPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  escalate: boolean;\n  to?: ParticipantUri;\n  triggered_rule?: Record<string, unknown>;\n};\n\n/** Methods classified as privileged for step-up auth. */\nexport const PRIVILEGED_METHODS = new Set<string>([\n  \"control.pause\", \"control.resume\", \"control.cancel\", \"control.supersede\",\n  \"control.snapshot\", \"control.rollback\", \"control.set_mode_ceiling\",\n  \"workspace.set_profiles\",\n  \"participant.rotate_key\", \"participant.revoke_key\",\n]);\n\n// Methods outside the control, deliberate, handoff and whisper namespaces that\n// dispatch holds to the membership floor before the handler runs.\nconst MEMBER_ONLY_METHODS = new Set<string>([\n  \"task.route\", \"review.depth\", \"escalate.auto\", \"participant.leave\",\n]);\n\n// Read-only methods return workspace state but do not mutate it, so they are not\n// recorded in the audit chain -- recording a read would grow and re-link it.\nconst READ_ONLY_METHODS = new Set<string>([\n  \"workspace.describe\", \"audit.read\", \"audit.verify_chain\", \"audit.verify_receipt\",\n  // Submitting the chain to a transparency service reads it and sends it\n  // onward. Recording the submission would append to the very log being\n  // submitted, so the receipt would attest a chain one entry shorter.\n  \"audit.submit_to_scitt\",\n]);\n\n// Cap on a workspace's task.create idempotency map. Older keys are evicted, so\n// the dedup window is bounded rather than growing unbounded in a long-lived\n// workspace; a redelivery beyond this many intervening creates is not deduped.\nconst MAX_IDEMPOTENCY_KEYS = 10_000;\n\n// Largest envelope accepted, published in the workspace descriptor (SPEC S4.4).\nconst DEFAULT_MAX_ENVELOPE_BYTES = 1_048_576;\n\n// How deeply a request may nest, counting the envelope as level one. The\n// reference HTTP servers refuse deeper bodies before dispatch; the same limit\n// here means an in-process caller cannot send what the canonicaliser, the\n// copy of a recorded call and the two references handle differently.\nconst MAX_NESTING = 64;\n\nfunction withinNesting(value: unknown, limit: number): boolean {\n  const stack: Array<[unknown, number]> = [[value, 1]];\n  while (stack.length) {\n    const [node, depth] = stack.pop()!;\n    if (depth > limit) return false;\n    if (Array.isArray(node)) {\n      for (const v of node) stack.push([v, depth + 1]);\n    } else if (node !== null && typeof node === \"object\") {\n      for (const v of Object.values(node as Record<string, unknown>)) stack.push([v, depth + 1]);\n    }\n  }\n  return true;\n}\n\nexport interface CoordinatorOptions {\n  deterministicIds?: boolean;\n  deterministicClock?: boolean;\n  enableChain?: boolean;\n  requireSignatures?: boolean;\n  enforceStepUp?: boolean;\n  requireReadMembership?: boolean;\n  /** Largest envelope accepted (default 1 MiB), published in the descriptor. */\n  maxEnvelopeBytes?: number;\n  onAudit?: AuditListener;\n  onAutoEscalate?: (task: Task, to: ParticipantUri) => void;\n  /**\n   * Called when a write to the store fails, with the workspace and the\n   * version the write would have reached. When unset, the failure is written\n   * to stderr. The call itself has already succeeded in memory; the next\n   * write to the workspace carries what this one did not.\n   */\n  onStoreError?: (err: unknown, record: { id: string; version: number }) => void;\n  verifyOidcToken?: TokenVerifier;\n  verifyVc?: CredentialVerifier;\n  scittSubmitter?: ScittSubmitter;\n  verifyScittReceipt?: ScittReceiptVerifier;\n  routingPolicy?: RoutingPolicyFn;\n  reviewDepthPolicy?: ReviewDepthPolicyFn;\n  escalationPolicy?: EscalationPolicyFn;\n  defaultProfiles?: string[];\n  /**\n   * Persistence backend. Defaults to MemoryStore (no persistence).\n   * Pass SqliteStore or any other Store implementation to persist\n   * workspaces between process restarts. The Coordinator calls\n   * `store.load()` once when it starts, and after each call that adds to a\n   * workspace's log it calls `store.apply()` with what changed, or\n   * `store.save()` with the whole workspace when the store has no `apply`.\n   */\n  store?: Store;\n}\n\n// ============================================================\n//   Helpers\n// ============================================================\n\nfunction nowIso(clockMs?: number): string {\n  const d = clockMs === undefined ? new Date() : new Date(clockMs);\n  return d.toISOString().replace(/\\.(\\d{3})Z$/, \".$1Z\");\n}\n\nfunction missing(params: Record<string, unknown>, fields: string[]): string | null {\n  for (const f of fields) if (!(f in params)) return f;\n  return null;\n}\n\nfunction tagsError(p: Record<string, unknown>): { error: ReturnType<typeof rpcError> } | null {\n  const tags = p.tags;\n  if (tags !== undefined && (!Array.isArray(tags) || !tags.every((t) => typeof t === \"string\"))) {\n    return { error: rpcError(E.PARAMS, \"tags must be a list of strings\") };\n  }\n  return null;\n}\n\nfunction reviewRuleSupported(rule: string): boolean {\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return true;\n  if (rule.startsWith(\"quorum:\")) {\n    const arg = rule.slice(\"quorum:\".length);\n    return /^[0-9]+$/.test(arg) && parseInt(arg, 10) >= 1;\n  }\n  return false;\n}\n\nfunction reviewSatisfied(review: { requested_to: string[]; rule: string; decisions: { kind: string; reviewer: string }[] }): boolean {\n  const approvers = new Set(review.decisions.filter(d => d.kind === \"approve\").map(d => d.reviewer));\n  const rule = review.rule || \"any_one_approves\";\n  if (rule === \"all_approve\") {\n    // A broadcast-only review has no bounded reviewer set to wait on, so it\n    // degrades to first-approve.\n    const named = review.requested_to.filter(r => !(r.startsWith(\"workspace:\") || r.startsWith(\"group:\")));\n    if (named.length === 0) return approvers.size >= 1;\n    return named.every(r => approvers.has(r));\n  }\n  if (rule.startsWith(\"quorum:\")) return approvers.size >= parseInt(rule.slice(\"quorum:\".length), 10);\n  return approvers.size >= 1;  // any_one_approves (and the default)\n}\n\nfunction reply(env: Envelope, body: { result?: unknown; error?: { code: number; message: string; data?: unknown } }): Envelope {\n  const out: Envelope = { jsonrpc: \"2.0\", id: env.id };\n  if (body.error !== undefined) out.error = body.error;\n  else out.result = body.result;\n  return out;\n}\n\n/** The signed calls on a log, keyed by `signedDigest`. */\ninterface SignedIndex {\n  refused: Map<string, { seq: number; code: number }>;\n  accepted: Set<string>;\n}\n\nfunction indexSigned(index: SignedIndex, entry: AuditEntry): void {\n  const call = entryCall(entry);\n  if (!isSigned(call)) return;\n  let digest: string;\n  try { digest = signedDigest(call as Envelope); }\n  catch { return; /* an entry that cannot be canonicalised was altered; verify_chain reports it */ }\n  if (entry.outcome != null) index.refused.set(digest, { seq: entry.seq, code: entry.outcome.code });\n  else index.accepted.add(digest);\n}\n\n// ============================================================\n//   Handler type for profile modules\n// ============================================================\n\nexport type Handler = (params: Record<string, unknown>) => { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n\n// ============================================================\n//   Coordinator\n// ============================================================\n\nfunction isThenable(value: unknown): value is PromiseLike<void> {\n  return typeof (value as PromiseLike<void> | undefined)?.then === \"function\";\n}\n\n/** A deep copy where the value can be cloned, else the value itself. */\nfunction ownCopy<T>(value: T): T {\n  try {\n    return structuredClone(value);\n  } catch {\n    return value;\n  }\n}\n\n// States in which a task has been deliberately stopped. review.request and\n// task.complete both refuse these, so neither can revive a terminated task nor\n// bypass a pause.\nconst REVIEW_REQUEST_STOPPED: string[] = [\"cancelled\", \"superseded\", \"paused\"];\n\n/** What the store holds of one workspace, as far as a Coordinator knows. */\ninterface Persisted {\n  /** Audit entries the store holds. */\n  seq: number;\n  /** Write the whole workspace next: the store's copy is unknown. */\n  replace: boolean;\n  /** Idempotency keys written or removed since the last write. */\n  keys: Set<string>;\n  /** The time to stamp on the next write. */\n  updatedAt?: string;\n}\n\nexport class Coordinator {\n  readonly workspaces = new Map<WorkspaceId, Workspace>();\n  readonly options: CoordinatorOptions;\n  readonly ids: IdFactory;\n  readonly store: Store;\n  private wsVersions = new Map<WorkspaceId, number>();\n  private saveChains = new Map<WorkspaceId, Promise<void>>();\n  /** Records which objects change, for stores that implement `apply`. */\n  private readonly tracker: Tracker;\n  /** What the store holds of each workspace, as far as this instance knows. */\n  private persisted = new WeakMap<Workspace, Persisted>();\n  /** Workspaces with entries not yet written in the call being handled. */\n  private unflushed = new Set<Workspace>();\n  /** Workspaces with a write queued behind an async write in flight. */\n  private flushQueued = new Set<Workspace>();\n  private clockMs?: number;\n  private frozenNow?: string;\n  private auditListeners: AuditListener[] = [];\n  /**\n   * The signed calls on each workspace's log, by what their senders signed:\n   * recorded refusals with their seq and code, and accepted calls. Rebuilt\n   * from the log when missing, so a snapshot never carries it.\n   */\n  private signedIndexes = new WeakMap<Workspace, SignedIndex>();\n  /** Method handler registry; profiles plug into this. */\n  readonly handlers = new Map<string, Handler>();\n  /** Custom lapse-check function (whisper/1.0). Set by the whisper profile. */\n  checkWhisperLapses?: (workspaceId: string, now?: string) => Envelope[];\n  /** Typed method facade. Defined via getter in the constructor. */\n  readonly api!: CoordinatorApi;\n  /** @internal cached facade instance */\n  private _api?: CoordinatorApi;\n\n  constructor(options: CoordinatorOptions = {}) {\n    this.options = options;\n    this.store = options.store ?? new MemoryStore();\n    this.tracker = { enabled: typeof this.store.apply === \"function\", depth: 0 };\n    this.ids = new IdFactory(!!options.deterministicIds, 0n, 1_700_000_000_000);\n    if (options.deterministicClock) this.clockMs = 1_700_000_000_000;\n    if (options.onAudit) this.auditListeners.push(options.onAudit);\n\n    this.registerCoreHandlers();\n    this.registerProfileHandlers();\n\n    // Lazily-initialised typed facade. Constructed on first access so\n    // tests that don't use it pay nothing.\n    Object.defineProperty(this, \"api\", {\n      get: () => {\n        if (!this._api) this._api = makeApi(this);\n        return this._api;\n      },\n      enumerable: false,\n      configurable: true,\n    });\n\n    // Rehydrate any persisted state synchronously. Async stores can\n    // call `start()` instead; this fallback covers the common\n    // synchronous Memory/Sqlite path with no async setup needed.\n    try {\n      const loaded = this.store.load();\n      if (!isThenable(loaded)) {\n        this.applyRecords(loaded as WorkspaceRecord[]);\n      }\n    } catch {\n      /* fall through; caller must invoke start() */\n    }\n  }\n\n  /**\n   * Asynchronously hydrate workspaces from the store. Required only for\n   * stores whose `load()` returns a Promise. Idempotent.\n   */\n  async start(): Promise<void> {\n    const records = await this.store.load();\n    this.applyRecords(records);\n  }\n\n  private applyRecords(records: WorkspaceRecord[]): void {\n    // One restore for every record: restore replaces the workspaces it\n    // holds, so restoring record by record kept only the last.\n    this.wsVersions.clear();\n    this.restore(records.map(r => r.data));\n    for (const r of records) this.wsVersions.set(r.id, r.version);\n    // What was just loaded is what the store holds.\n    for (const ws of this.workspaces.values()) this.markWritten(ws);\n  }\n\n  /** A map for a workspace collection, tracked for stores that implement `apply`. */\n  private newMap<K, V>(): Map<K, V> {\n    return new TrackedMap<K, V>(this.tracker);\n  }\n\n  /** Record that the store holds this workspace exactly as it is in memory. */\n  private markWritten(ws: Workspace): void {\n    for (const name of COLLECTIONS) {\n      const map = ws[name];\n      if (map instanceof TrackedMap) map.dirty.clear();\n    }\n    this.persisted.set(ws, { seq: ws.audit.length, replace: false, keys: new Set() });\n  }\n\n  /**\n   * What the store holds of a workspace. A workspace this instance did not\n   * create or load, such as one an application put in `workspaces` itself,\n   * or one whose maps an application replaced, is tracked from here on and\n   * written whole once.\n   */\n  private persistedOf(ws: Workspace): Persisted {\n    let p = this.persisted.get(ws);\n    let untracked = false;\n    for (const name of COLLECTIONS) {\n      const map = ws[name] as Map<string, unknown>;\n      if (map instanceof TrackedMap && map.tracker === this.tracker) continue;\n      untracked = true;\n      const tracked = new TrackedMap<string, unknown>(this.tracker);\n      for (const [key, value] of Map.prototype.entries.call(map) as IterableIterator<[string, unknown]>) {\n        tracked.set(key, value);\n      }\n      (ws as unknown as Record<string, unknown>)[name] = tracked;\n    }\n    if (!p || untracked) {\n      p = { seq: p?.seq ?? 0, replace: true, keys: new Set(), updatedAt: p?.updatedAt };\n      this.persisted.set(ws, p);\n    }\n    return p;\n  }\n\n  /** Record that a task.create idempotency key was written or removed. */\n  private markKey(ws: Workspace, key: string): void {\n    if (this.tracker.enabled) this.persistedOf(ws).keys.add(key);\n  }\n\n  /** After an entry is appended: write now, or when the call being handled ends. */\n  private persist(ws: Workspace): void {\n    if (!this.tracker.enabled) {\n      this.persistSnapshot(ws);\n      return;\n    }\n    // One clock reading per entry, where earlier releases read it to stamp\n    // the snapshot, so a deterministic clock gives the same times as before.\n    this.persistedOf(ws).updatedAt = this.now();\n    if (this.tracker.depth > 0) this.unflushed.add(ws);\n    else this.flush(ws);\n  }\n\n  private flushUnflushed(): void {\n    if (!this.unflushed.size) return;\n    const list = [...this.unflushed];\n    this.unflushed.clear();\n    for (const ws of list) this.flush(ws);\n  }\n\n  /** Write what changed in one workspace since its last write. */\n  private flush(ws: Workspace): void {\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      // An async write is in flight. One more write follows it, built when it\n      // runs, so it carries everything that changed until then.\n      if (this.flushQueued.has(ws)) return;\n      this.flushQueued.add(ws);\n      this.chainWrite(ws.id, pending.then(() => {\n        this.flushQueued.delete(ws);\n        return this.writeChange(ws);\n      }));\n      return;\n    }\n    const result = this.writeChange(ws);\n    if (result) this.chainWrite(ws.id, result);\n  }\n\n  private chainWrite(id: WorkspaceId, work: Promise<void>): void {\n    // writeChange reports its own failures; this only keeps the chain alive.\n    const guarded = work.catch(() => undefined);\n    this.saveChains.set(id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(id) === guarded) this.saveChains.delete(id);\n    });\n  }\n\n  private writeChange(ws: Workspace): Promise<void> | void {\n    const p = this.persistedOf(ws);\n    let change: StoreChange | undefined;\n    try {\n      change = this.takeChange(ws, p);\n    } catch (err) {\n      // What was taken is unknown, so the next write carries the whole workspace.\n      p.replace = true;\n      this.reportStoreError(err, { id: ws.id, version: ws.audit.length });\n      return;\n    }\n    if (!change) return;\n    const taken = change;\n    const done = () => {\n      p.seq = taken.version;\n      if (taken.replace) p.replace = false;\n    };\n    const failed = (err: unknown) => {\n      this.giveBack(ws, p, taken);\n      this.reportStoreError(err, { id: taken.id, version: taken.version });\n    };\n    let result: PromiseLike<void> | void;\n    try {\n      result = this.store.apply!(taken);\n    } catch (err) {\n      failed(err);\n      return;\n    }\n    if (isThenable(result)) return Promise.resolve(result).then(done, failed);\n    done();\n  }\n\n  /** The change since the last write, taking the recorded keys with it. */\n  private takeChange(ws: Workspace, p: Persisted): StoreChange | undefined {\n    const replace = p.replace;\n    const objects: Record<string, Record<string, unknown>> = {};\n    for (const name of COLLECTIONS) {\n      const map = ws[name] as unknown as TrackedMap<string, unknown>;\n      if (replace) {\n        const all: Record<string, unknown> = {};\n        for (const [key, value] of Map.prototype.entries.call(map) as IterableIterator<[string, unknown]>) {\n          all[key] = value;\n        }\n        objects[name] = all;\n      } else if (map.dirty.size) {\n        const changed: Record<string, unknown> = {};\n        for (const key of map.dirty) changed[key] = map.peek(key) ?? null;\n        objects[name] = changed;\n      }\n      map.dirty.clear();\n    }\n    if (replace) {\n      objects[IDEMPOTENCY_KEYS] = { ...ws.idempotency_keys };\n    } else if (p.keys.size) {\n      const changed: Record<string, unknown> = {};\n      for (const key of p.keys) changed[key] = ws.idempotency_keys[key] ?? null;\n      objects[IDEMPOTENCY_KEYS] = changed;\n    }\n    p.keys.clear();\n    const entries = ws.audit.slice(replace ? 0 : p.seq);\n    if (!replace && !entries.length && !Object.keys(objects).length) return undefined;\n    return {\n      id: ws.id,\n      base: replace ? 0 : p.seq,\n      version: ws.audit.length,\n      updated_at: p.updatedAt ?? ws.audit[ws.audit.length - 1]?.arrived ?? ws.created,\n      meta: this.metaOf(ws),\n      entries,\n      objects,\n      ...(replace ? { replace: true } : {}),\n    };\n  }\n\n  /** A failed write's keys go back, so the next write carries them again. */\n  private giveBack(ws: Workspace, p: Persisted, change: StoreChange): void {\n    if (change.replace) {\n      p.replace = true;\n      return;\n    }\n    for (const [name, items] of Object.entries(change.objects)) {\n      if (name === IDEMPOTENCY_KEYS) {\n        for (const key of Object.keys(items)) p.keys.add(key);\n        continue;\n      }\n      const map = (ws as unknown as Record<string, unknown>)[name];\n      if (map instanceof TrackedMap) for (const key of Object.keys(items)) map.dirty.add(key);\n    }\n  }\n\n  /** Persist the whole workspace, for a store that implements only `save`. */\n  private persistSnapshot(ws: Workspace): void {\n    const next = (this.wsVersions.get(ws.id) ?? 0) + 1;\n    this.wsVersions.set(ws.id, next);\n    let record: WorkspaceRecord;\n    try {\n      record = { id: ws.id, data: this.snapshotOf(ws), version: next, updated_at: this.now() };\n    } catch (err) {\n      // Nothing was written. The next save builds the whole workspace again.\n      this.reportStoreError(err, { id: ws.id, version: next });\n      return;\n    }\n\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      this.trackSave(pending.then(() => this.store.save(record)), record);\n      return;\n    }\n    let result: PromiseLike<void> | void;\n    try {\n      result = this.store.save(record);\n    } catch (err) {\n      this.reportStoreError(err, record);\n      return;\n    }\n    if (isThenable(result)) {\n      this.trackSave(Promise.resolve(result), record);\n    }\n  }\n\n  private trackSave(save: Promise<void>, record: WorkspaceRecord): void {\n    const guarded = save.catch(err => this.reportStoreError(err, record));\n    this.saveChains.set(record.id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(record.id) === guarded) {\n        this.saveChains.delete(record.id);\n      }\n    });\n  }\n\n  private reportStoreError(err: unknown, record: { id: string; version: number }): void {\n    if (this.options.onStoreError) {\n      try {\n        this.options.onStoreError(err, { id: record.id, version: record.version });\n      } catch {\n        void 0;\n      }\n      return;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    console.error(`chap coordinator: writing workspace ${record.id} to the store failed: ${message}`);\n  }\n\n  async drainSaves(): Promise<void> {\n    while (this.saveChains.size) {\n      await Promise.allSettled([...this.saveChains.values()]);\n    }\n  }\n\n  // -- lifecycle -----------------------------------------------------\n\n  private advanceClock(): string {\n    if (this.clockMs !== undefined) {\n      this.clockMs += 1000;\n      return nowIso(this.clockMs);\n    }\n    return nowIso();\n  }\n\n  now(): string {\n    return this.frozenNow ?? this.advanceClock();\n  }\n\n  onAudit(listener: AuditListener): () => void {\n    this.auditListeners.push(listener);\n    return () => {\n      const i = this.auditListeners.indexOf(listener);\n      if (i >= 0) this.auditListeners.splice(i, 1);\n    };\n  }\n\n  /** Convenience: get a workspace by id, or undefined. */\n  getWorkspace(id: WorkspaceId): Workspace | undefined {\n    return this.workspaces.get(id);\n  }\n\n  // ----- authorisation preconditions -----\n\n  /**\n   * Assert that `sender` is a joined member of `ws`. Returns an error\n   * fragment if not, else null. Every actor-action method runs this on\n   * its `from` so a decision, completion, or review request can never\n   * be attributed to a participant who never joined. See\n   * SPECIFICATION.md S6.3 and the `unknown_participant` condition in\n   * S13.3. (The published spec assigns -32403; the reference\n   * implementations use NOT_AUTHORISED -32011 because -32403 already\n   * denotes OIDC_TOKEN_INVALID in their private range. The spec/impl\n   * error-table divergence is tracked separately.)\n   */\n  private requireMember(ws: Workspace, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    // A `from` that is not a string names nobody. It is answered in fixed\n    // words, so both references refuse it alike whatever was sent.\n    if (typeof sender !== \"string\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"Not a workspace member: from is not a participant URI\") };\n    }\n    if (!ws.members.has(sender)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${sender}`) };\n    }\n    return null;\n  }\n\n  /**\n   * Assert that `sender` was addressed in the task's review. Applied to\n   * review-decision methods (decide.* and abstain.declare): to act on a\n   * review you must be one of the reviewers it was addressed to (the\n   * `to` set on review.request). Membership is the floor; this is the\n   * eligibility ceiling for decisions. Returns an error fragment if not\n   * eligible, else null.\n   */\n  private requireReviewer(task: Task, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    const review = task.review;\n    if (!review || !review.requested_to || review.requested_to.length === 0) {\n      // No recorded reviewer set: fall back to the membership floor,\n      // which the caller has already enforced.\n      return null;\n    }\n    // A broadcast-scoped reviewer (workspace:/group: URI) is satisfied by\n    // any workspace member; the membership floor already passed. Note the\n    // coordinator does not model group membership: a group: target means\n    // \"any member\", not \"any member of that group\" (deployments needing\n    // true group restriction enforce it externally). Keeps the documented\n    // `to: workspace:<id>` broadcast pattern working.\n    if (review.requested_to.some((r) => typeof r === \"string\" && (r.startsWith(\"workspace:\") || r.startsWith(\"group:\")))) {\n      return null;\n    }\n    if (typeof sender !== \"string\" || !review.requested_to.includes(sender as ParticipantUri)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not an addressed reviewer for this task: ${String(sender)}`) };\n    }\n    return null;\n  }\n\n  /** Serialise all workspaces to a JSON-safe structure for persistence. */\n  snapshot(): unknown {\n    const out: Array<Record<string, unknown>> = [];\n    for (const ws of this.workspaces.values()) out.push(this.snapshotOf(ws));\n    return out;\n  }\n\n  /** The workspace's own fields: everything except its collections and log. */\n  private metaOf(ws: Workspace): Record<string, unknown> {\n    return {\n      id:           ws.id,\n      created:      ws.created,\n      state:        ws.state,\n      profiles:     ws.profiles,\n      mode:         ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      routing_policy_uri: ws.routing_policy_uri,\n      step_up_window_sec: ws.step_up_window_sec,\n      min_acr:      ws.min_acr,\n      chain_head:   ws.chain_head,\n      chain_enabled: ws.chain_enabled,\n    };\n  }\n\n  /** One workspace as `snapshot()` holds it. Reads nothing as a change. */\n  private snapshotOf(ws: Workspace): Record<string, unknown> {\n    const { chain_head, chain_enabled, ...own } = this.metaOf(ws);\n    return {\n      ...own,\n      members:         Array.from(rawValues(ws.members)),\n      tasks:           Array.from(rawValues(ws.tasks)),\n      overrides:       Array.from(rawValues(ws.overrides)),\n      whispers:        Array.from(rawValues(ws.whispers)),\n      deliberations:   Array.from(rawValues(ws.deliberations)),\n      handoffs:        Array.from(rawValues(ws.handoffs)),\n      snapshots:       Array.from(rawValues(ws.snapshots)),\n      route_decisions: Array.from(rawValues(ws.route_decisions)),\n      idempotency_keys: { ...ws.idempotency_keys },\n      audit:           ws.audit,\n      chain_head,\n      chain_enabled,\n    };\n  }\n\n  /** Restore from a snapshot produced by ``snapshot()``. Replaces\n   *  any existing in-memory workspaces. */\n  restore(data: unknown): void {\n    this.workspaces.clear();\n    this.unflushed.clear();\n    if (!Array.isArray(data)) return;\n    for (const w of data as Array<Record<string, unknown>>) {\n      // One workspace that cannot be rebuilt is skipped, with a warning, so\n      // the others still load.\n      let ws: Workspace;\n      try {\n        ws = this.rebuild(w);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        console.warn(`chap coordinator: workspace ${String(w?.id)} could not be restored: ${message}`);\n        continue;\n      }\n      this.workspaces.set(ws.id, ws);\n      // Restored from data the store may not hold: the next write replaces\n      // the store's copy whole. Loading from the store marks it written.\n      for (const name of COLLECTIONS) (ws[name] as TrackedMap<unknown, unknown>).dirty.clear();\n      this.persisted.set(ws, { seq: 0, replace: true, keys: new Set() });\n    }\n  }\n\n  /** One workspace from a snapshot entry, its maps tracked. */\n  private rebuild(w: Record<string, unknown>): Workspace {\n    const ws: Workspace = {\n      id: w.id as WorkspaceId,\n      created: w.created as string,\n      state: (w.state as Workspace[\"state\"]) ?? \"active\",\n      profiles: (w.profiles as string[]) ?? [],\n      mode: (w.mode as Mode) ?? \"trial\",\n      mode_ceiling: (w.mode_ceiling as Mode) ?? \"production\",\n      routing_policy_uri: w.routing_policy_uri as string | undefined,\n      step_up_window_sec: (w.step_up_window_sec as number) ?? 300,\n      min_acr: w.min_acr as string | undefined,\n      members: this.newMap(),\n      tasks: this.newMap(),\n      overrides: this.newMap(),\n      whispers: this.newMap(),\n      deliberations: this.newMap(),\n      handoffs: this.newMap(),\n      snapshots: this.newMap(),\n      route_decisions: this.newMap(),\n      idempotency_keys: (w.idempotency_keys as Record<string, string>) ?? {},\n      audit: (w.audit as AuditEntry[]) ?? [],\n      chain_head: w.chain_head as string | undefined,\n      chain_enabled: !!w.chain_enabled,\n    };\n    for (const m of (w.members as Member[]) ?? []) {\n      // Defensive: ensure required collections exist even on older snapshots.\n      if (!Array.isArray(m.keys)) m.keys = [];\n      if (m.paused === undefined) m.paused = false;\n      ws.members.set(m.uri, m);\n    }\n    for (const t of (w.tasks as Task[]) ?? []) ws.tasks.set(t.id, t);\n    for (const o of (w.overrides as OverrideArtefact[]) ?? []) ws.overrides.set(o.id, o);\n    // The dynamic profile collections may not be present on legacy snapshots.\n    for (const x of (w.whispers as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.whispers.set(x.id, x as never);\n    for (const x of (w.deliberations as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.deliberations.set(x.id, x as never);\n    for (const x of (w.handoffs as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.handoffs.set(x.id, x as never);\n    for (const x of (w.snapshots as Array<{ id: string } & Record<string, unknown>>) ?? []) {\n      // Normalize the former flat store representation only on restore.\n      // New snapshots are stored and emitted in the canonical wire shape.\n      const content = structuredClone((x.content ?? {\n        workspace: x.workspace, audit_seq: x.audit_seq,\n        include: x.include, state: x.state,\n        ...(x.label ? { label: x.label } : {}),\n      }) as SnapshotArtefact[\"content\"]);\n      if (!x.content) {\n        // Legacy in-memory projections can contain undefined optional\n        // fields; full bodies from older stores are not snapshot slices.\n        const oldState = content.state;\n        const state: Record<string, unknown> = {};\n        for (const key of [\"mode_ceiling\", \"routing_policy_uri\", \"audit_seq\"]) {\n          if (oldState[key] != null && oldState[key] !== \"\") state[key] = oldState[key];\n        }\n        for (const [key, fields] of [\n          [\"members\", [\"uri\", \"type\", \"role\", \"scopes\"]],\n          [\"open_tasks\", [\"id\", \"kind\", \"state\", \"assignee\"]],\n        ] as const) {\n          const items = oldState[key];\n          if (Array.isArray(items) && items.length) {\n            state[key] = items.map(item => Object.fromEntries(fields\n              .filter(field => item[field] != null && item[field] !== \"\"\n                && (!Array.isArray(item[field]) || item[field].length > 0))\n              .map(field => [field, item[field]])));\n          }\n        }\n        content.state = state;\n      }\n      ws.snapshots.set(x.id, {\n        id: x.id, kind: \"snapshot\",\n        produced_by: (x.produced_by ?? x.by) as string,\n        produced_at: (x.produced_at ?? x.ts) as string,\n        content_hash: (x.content_hash as string | undefined) ?? contentHash(content),\n        content,\n      });\n    }\n    for (const x of (w.route_decisions as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.route_decisions.set(x.id, x as never);\n    return ws;\n  }\n\n  // -- dispatch ------------------------------------------------------\n\n  dispatch(envelope: Envelope): Envelope {\n    this.frozenNow = this.advanceClock();\n    this.tracker.depth++;\n    try {\n      const response = this._dispatch(envelope);\n      if (response.error) this.recordRefusal(envelope, response.error);\n      return response;\n    } finally {\n      // One write per call, with everything the call changed, made before\n      // dispatch returns.\n      if (--this.tracker.depth === 0) this.flushUnflushed();\n      this.frozenNow = undefined;\n    }\n  }\n\n  private _dispatch(envelope: Envelope): Envelope {\n    // SPECIFICATION 10.1 fixes the order of the checks below, because which\n    // refusal a call receives decides whether it is recorded. First the\n    // request itself, none of whose refusals is recorded.\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\" || !envelope.method) {\n      return reply(envelope, { error: rpcError(E.REQUEST, \"Invalid JSON-RPC 2.0 request\") });\n    }\n    if (!withinNesting(envelope, MAX_NESTING)) {\n      return reply(envelope, { error: rpcError(E.REQUEST, `Envelope nests deeper than ${MAX_NESTING} levels`) });\n    }\n    const maxBytes = this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES;\n    // Canonicalised once: the length is what the size limit measures, and a\n    // request that cannot be canonicalised is refused below, once its method\n    // is known to exist.\n    let size = 0;\n    let canonicalError: unknown;\n    try { size = canonicalize(envelope).length; } catch (e) { canonicalError = e; }\n    if (size > maxBytes) {\n      return reply(envelope, { error: rpcError(E.REQUEST,\n        `Envelope exceeds max_envelope_bytes (${size} > ${maxBytes})`) });\n    }\n    const method = envelope.method;\n    // JSON-RPC params, when present, must be a structured value (object).\n    // CHAP methods use by-name params; reject non-object params cleanly as\n    // Invalid params for parity with the Python reference.\n    const rawParams = envelope.params;\n    if (\n      rawParams !== undefined &&\n      rawParams !== null &&\n      (typeof rawParams !== \"object\" || Array.isArray(rawParams))\n    ) {\n      return reply(envelope, { error: rpcError(E.PARAMS, \"Invalid params: expected an object\") });\n    }\n    const params = (rawParams ?? {}) as Record<string, unknown>;\n    const handler = this.handlers.get(method);\n    if (!handler) {\n      return reply(envelope, { error: rpcError(E.METHOD, `Unknown method: ${method}`) });\n    }\n    if (canonicalError !== undefined) {\n      const msg = canonicalError instanceof Error ? canonicalError.message : String(canonicalError);\n      return reply(envelope, { error: rpcError(E.PARAMS, msg) });\n    }\n\n    // SPECIFICATION 10.1: a signed request whose signed content matches a\n    // recorded refusal is answered with that refusal and not evaluated again.\n    // The log publishes a refused request, signature and all, so without this\n    // anyone who can read the log could send it again once whatever refused\n    // it had changed, and it would take effect in its signer's name.\n    if (isSigned(envelope)) {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const prior = this.signedIndex(ws).refused.get(signedDigest(envelope));\n        if (prior) {\n          return reply(envelope, { error: rpcError(prior.code,\n            `Refused at seq ${prior.seq}; a refused request is not evaluated again`,\n            { refused_at_seq: prior.seq }) });\n        }\n      }\n    }\n\n    // security-signed/1.0: verify top-level sig if required.\n    // participant.join and workspace.create are bootstrap operations that\n    // run before any signing key is registered for the actor, so they cannot\n    // be signature-verified; every other method must verify.\n    if (this.options.requireSignatures && method !== \"participant.join\" && method !== \"workspace.create\") {\n      const sigErr = this.verifySignature(envelope);\n      if (sigErr) return reply(envelope, { error: sigErr });\n      if (method === \"participant.rotate_key\") {\n        const signingKid = (envelope.sig as string).split(\":\")[1];\n        const oldKid = params.old_kid as string | undefined;\n        if (oldKid !== undefined && signingKid !== oldKid) {\n          return reply(envelope, { error: rpcError(E.SIG_ROTATION_KEY_MISMATCH,\n            \"Rotation must be signed with the old key\") });\n        }\n      }\n    }\n\n    // identity-oidc/1.0: step-up freshness on privileged methods.\n    if (this.options.enforceStepUp && PRIVILEGED_METHODS.has(method)) {\n      const stale = this.checkStepUp(params);\n      if (stale) return reply(envelope, { error: stale });\n    }\n\n    // SPECIFICATION 15.4: refuse a method whose owning profile the workspace\n    // does not advertise. The refusal is -32601, the same answer a coordinator\n    // that never implemented the method would give, so a deployment cannot\n    // tell from outside which of the two it is talking to. The detail rides in\n    // `data` for an operator reading the log.\n    {\n      const gate = this.profileGate(method, params);\n      if (gate) return reply(envelope, { error: gate });\n    }\n\n    // control/1.0 and deliberation/1.0: these operations are privileged and\n    // MUST be performed by a workspace member. Control is the governance\n    // \"emergency brake\"; deliberation open/close set the vote parameters and\n    // finalize the tally. Without this floor a non-member could resume a\n    // paused workspace, raise the mode ceiling, or open and close a\n    // deliberation to finalize an outcome early. (The per-voter eligibility\n    // check in deliberate.vote is separate and still applies. A stricter role\n    // gate than membership is layered on top via an identity-* profile.)\n    // The routing methods and participant.leave sit under the same floor\n    // (SPECIFICATION 6.3.1): without it a non-member could reassign a task\n    // with task.route, or write a leave to the log under any name.\n    if (method.startsWith(\"control.\") || method.startsWith(\"deliberate.\") || method.startsWith(\"handoff.\") || method.startsWith(\"whisper.\") || MEMBER_ONLY_METHODS.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const notMember = this.requireMember(ws, params.from);\n        if (notMember) return reply(envelope, { error: notMember.error });\n      }\n    }\n\n    // control/1.0 workspace-paused gate (S6 -32063).\n    const exempt = new Set([\"workspace.create\", \"workspace.describe\",\n                            \"control.resume\", \"audit.read\",\n                            \"participant.join\", \"participant.leave\"]);\n    if (!exempt.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      if (typeof wsId === \"string\") {\n        const ws = this.workspaces.get(wsId);\n        if (ws && ws.state === \"paused\") {\n          return reply(envelope, { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Workspace ${wsId} is paused`) });\n        }\n      }\n    }\n\n    // task.create idempotency: a repeat carrying a seen idempotency_key returns\n    // the original task rather than creating (or recording) a duplicate -- safe\n    // for at-least-once redelivery.\n    if (method === \"task.create\") {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      const key = params.idempotency_key;\n      if (ws && typeof key === \"string\") {\n        const existingId = ws.idempotency_keys[key];\n        const task = existingId ? ws.tasks.get(existingId) : undefined;\n        if (task) return reply(envelope, { result: { task_id: existingId, state: task.state } });\n      }\n    }\n\n    let out: { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n    try {\n      // The handler works on its own copy of what the caller sent, and the\n      // caller gets a copy of the result, so no object is shared between the\n      // workspace and the caller. A caller that reused or changed one later\n      // would change the workspace outside any call, where no change is\n      // recorded for the store.\n      out = handler(ownCopy(params));\n    } catch (e) {\n      // Keep the wire message generic; a handler exception may carry internal\n      // detail that should not be disclosed to callers. Specifics stay in the\n      // data field for operators.\n      const msg = e instanceof Error ? e.message : String(e);\n      return reply(envelope, { error: rpcError(E.INTERNAL, \"Internal error\", { detail: msg }) });\n    }\n    if (out.error) return reply(envelope, { error: out.error });\n\n    // Record audit on success. A refusal is weighed in dispatch(), once this\n    // returns, against the rule in SPECIFICATION 10.1.\n    const wsId = params.workspace as string | undefined;\n    if (typeof wsId === \"string\" && !READ_ONLY_METHODS.has(method)) {\n      const ws = this.workspaces.get(wsId);\n      if (ws) this.recordAudit(ws, envelope);\n    }\n    return reply(envelope, { result: ownCopy(out.result) });\n  }\n\n  // -- audit ---------------------------------------------------------\n\n  recordAudit(ws: Workspace, envelope: Envelope): void {\n    this.appendEntry(ws, { envelope: JSON.parse(JSON.stringify(envelope)) as Envelope });\n  }\n\n  /**\n   * SPECIFICATION 10.1: record a refused call when it is a governed attempt.\n   * The caller must be a member of an existing workspace, the call must be a\n   * JSON-RPC call for a method that is not a read, and the refusal must be one\n   * `refusalIsRecorded` names. The request is kept as it arrived, so a\n   * signature on it still verifies. Every call that reaches a recorded refusal\n   * has passed the canonical check, so it can be hashed into the chain.\n   */\n  private recordRefusal(envelope: Envelope, error: { code: number; data?: unknown }): void {\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\") return;\n    const method = envelope.method;\n    if (READ_ONLY_METHODS.has(method)) return;\n    if (!refusalIsRecorded(method, error, PRIVILEGED_METHODS)) return;\n    const raw = envelope.params;\n    if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return;\n    const params = raw as Record<string, unknown>;\n    const ws = typeof params.workspace === \"string\" ? this.workspaces.get(params.workspace) : undefined;\n    if (!ws || typeof params.from !== \"string\" || !ws.members.has(params.from)) return;\n    // A signed copy of a call already on the log is not a new attempt by its\n    // signer. A copy of a refusal was answered with it, and a copy of a call\n    // that took effect repeats a call its signer made once. Anyone who can\n    // read the log can send either.\n    if (isSigned(envelope)) {\n      const index = this.signedIndex(ws);\n      const digest = signedDigest(envelope);\n      if (index.refused.has(digest) || index.accepted.has(digest)) return;\n    }\n    this.appendEntry(ws, {\n      request: JSON.parse(JSON.stringify(envelope)) as Envelope,\n      outcome: { status: \"refused\", code: error.code },\n    });\n  }\n\n  /** The signed calls on this workspace's log, built from the log when missing. */\n  private signedIndex(ws: Workspace): SignedIndex {\n    let index = this.signedIndexes.get(ws);\n    if (!index) {\n      index = { refused: new Map(), accepted: new Set() };\n      for (const entry of ws.audit) indexSigned(index, entry);\n      this.signedIndexes.set(ws, index);\n    }\n    return index;\n  }\n\n  private appendEntry(ws: Workspace, record: Pick<AuditEntry, \"envelope\" | \"request\" | \"outcome\">): void {\n    const entry: AuditEntry = { seq: ws.audit.length, arrived: this.now(), ...record };\n    if (ws.chain_enabled || this.options.enableChain) {\n      const prev = ws.chain_head ?? ZERO_HASH;\n      entry.prev_hash = prev;\n      ws.chain_head = linkHash(entryRecord(entry), prev);\n    }\n    ws.audit.push(entry);\n    const index = this.signedIndexes.get(ws);\n    if (index) indexSigned(index, entry);\n    for (const l of this.auditListeners) {\n      try { l(ws, entry); } catch { /* listeners never break dispatch */ }\n    }\n    this.persist(ws);\n  }\n\n  // -- signature verification (security-signed/1.0) -----------------\n\n  private verifySignature(envelope: Envelope): { code: number; message: string; data?: unknown } | null {\n    const sig = envelope.sig;\n    if (!sig || typeof sig !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Missing top-level `sig` field\");\n    }\n    const parts = sig.split(\":\");\n    if (parts.length !== 3 || parts[0] !== \"ed25519\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Malformed signature tag\");\n    }\n    const kid = parts[1];\n    const params = (envelope.params ?? {}) as Record<string, unknown>;\n    const sender = params.from;\n    const wsId = params.workspace;\n    const rawTs = params.ts;\n    // Fail closed: a signature is present and requireSignatures is on, so it\n    // must verify. If we cannot resolve the context needed to verify it,\n    // reject rather than skip -- a signature we cannot check must never be\n    // treated as valid. A `from` or `workspace` that is not a string names\n    // nothing, so it counts as missing.\n    if (typeof sender !== \"string\" || !sender || typeof wsId !== \"string\" || !wsId) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: missing from/workspace\");\n    }\n    // The key is chosen by the time the sender gives. A `ts` that is not a\n    // string gives no time, so no key can be chosen for it.\n    if (rawTs !== undefined && rawTs !== null && typeof rawTs !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: ts must be a string\");\n    }\n    const ts = (rawTs as string | null | undefined) ?? this.now();\n    const ws = this.workspaces.get(wsId);\n    if (!ws) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: unknown workspace\");\n    }\n    const member = ws.members.get(sender);\n    if (!member) return rpcError(E.SIG_KEY_NOT_FOUND, `No member: ${sender}`);\n\n    // Revocation is present-tense: a revoked key must be rejected for any\n    // live request regardless of the envelope's self-asserted `ts`. Checking\n    // against `ts` alone lets a holder of a revoked key backdate `ts` to\n    // before the revocation and still be accepted. Use the coordinator's\n    // trusted clock for the revocation decision.\n    const now = this.now();\n    if (member.keys.some(k => k.kid === kid && k.revoked_at !== undefined && now >= k.revoked_at)) {\n      return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n    }\n    // Expiry is present-tense for the same reason: a rotated-out key\n    // (valid_until set to the rotation time, but never explicitly revoked) must\n    // not sign live requests. Selecting it by the self-asserted `ts` alone lets\n    // its holder backdate `ts` to before valid_until and keep using it. Judge\n    // expiry by the trusted clock.\n    if (member.keys.some(k => k.kid === kid && k.valid_until !== undefined && now >= k.valid_until)) {\n      return rpcError(E.SIG_KEY_NOT_FOUND, `Key ${kid} is no longer valid`);\n    }\n\n    const key = this.lookupKey(member, kid, ts);\n    if (!key) {\n      const revoked = member.keys.find(k => k.kid === kid && k.revoked_at);\n      if (revoked) return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n      return rpcError(E.SIG_KEY_NOT_FOUND, `No key ${kid} valid at ${ts} for ${sender}`);\n    }\n\n    // Verify\n    try {\n      const stripped: Envelope = JSON.parse(JSON.stringify(envelope));\n      delete stripped.sig;\n      const canonical = canonicalize(stripped);\n      const pub = publicKeyFromJwk(key.jwk);\n      if (!verifyEnvelope(canonical, sig, pub)) {\n        return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n      }\n      return null;\n    } catch {\n      // An exception here (malformed key or signature bytes) means the\n      // signature cannot be verified: fail closed with the same generic code\n      // as the Python reference, and do not leak the exception detail.\n      return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n    }\n  }\n\n  /** Lookup the key valid for a given participant at a given time. */\n  lookupKey(member: Member, kid: string, ts: string): KeyRecord | null {\n    for (const k of member.keys) {\n      if (k.kid !== kid) continue;\n      if (k.revoked_at !== undefined && ts >= k.revoked_at) continue;\n      if (ts < k.valid_from) continue;\n      if (k.valid_until !== undefined && ts >= k.valid_until) continue;\n      return k;\n    }\n    return null;\n  }\n\n  // -- step-up (identity-oidc/1.0) -----------------------------------\n\n  /**\n   * The SPECIFICATION 15.4 check, per method rather than per namespace.\n   *\n   * Core is always present, so a core method is never gated. The reads in\n   * ALWAYS_AVAILABLE are never gated either: a workspace must be able to ask\n   * what it is and to check its own chain, and `audit.verify_chain` belongs to\n   * `audit-scitt/1.0` while chaining also turns on through an option, so\n   * gating it would let a workspace write a hash-linked chain it is refused\n   * permission to verify.\n   */\n  private profileGate(method: string, params: Record<string, unknown>) {\n    const owner = OWNING_PROFILE[method];\n    if (owner === undefined || owner === \"core/1.0\" || ALWAYS_AVAILABLE.has(method)) return undefined;\n    const wsId = params.workspace as string | undefined;\n    const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n    if (!ws) return undefined;\n    // Match on the profile name, so a workspace advertising a later minor\n    // version of the owning profile still carries its methods.\n    const name = owner.split(\"/\")[0];\n    if (ws.profiles.some(p => p === name || p.startsWith(name + \"/\"))) return undefined;\n    return rpcError(E.METHOD, `Unknown method: ${method}`,\n                    { profile: owner, advertised: [...ws.profiles] });\n  }\n\n  private checkStepUp(params: Record<string, unknown>): { code: number; message: string; data?: unknown } | null {\n    // A `from` or `workspace` that is not a string names no member to hold to\n    // step-up; the membership check answers such a call.\n    const wsId = params.workspace;\n    const sender = params.from;\n    if (typeof wsId !== \"string\" || typeof sender !== \"string\" || !wsId || !sender) return null;\n    const ws = this.workspaces.get(wsId);\n    if (!ws) return null;\n    const member = ws.members.get(sender);\n    if (!member) return null;\n    // Step-up applies to OIDC actors -- humans, or any member with an OIDC\n    // binding. Agents and services authenticate out of band (SPIFFE/X.509),\n    // so they are not held to an auth_time window here.\n    if (member.type !== \"human\" && member.oidc_sub === undefined) return null;\n    if (member.oidc_auth_time === undefined) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec,\n      });\n    }\n    const nowSec = Math.floor(Date.now() / 1000);\n    const age = nowSec - member.oidc_auth_time;\n    if (age > ws.step_up_window_sec) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec, age_sec: age,\n      });\n    }\n    if (ws.min_acr !== undefined && member.oidc_acr !== ws.min_acr) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up required: acr below the workspace minimum\", {\n        required_acr: ws.min_acr, acr: member.oidc_acr,\n      });\n    }\n    return null;\n  }\n\n  // ==========================================================\n  //   Registration\n  // ==========================================================\n\n  private registerCoreHandlers(): void {\n    this.handlers.set(\"workspace.create\",       p => this.opWorkspaceCreate(p));\n    this.handlers.set(\"workspace.describe\",     p => this.opWorkspaceDescribe(p));\n    this.handlers.set(\"workspace.set_profiles\", p => this.opWorkspaceSetProfiles(p));\n    this.handlers.set(\"participant.join\",       p => this.opParticipantJoin(p));\n    this.handlers.set(\"participant.leave\",      p => this.opParticipantLeave(p));\n    this.handlers.set(\"task.create\",            p => this.opTaskCreate(p));\n    this.handlers.set(\"task.update\",            p => this.opTaskUpdate(p));\n    this.handlers.set(\"task.complete\",          p => this.opTaskComplete(p));\n    this.handlers.set(\"audit.read\",             p => this.opAuditRead(p));\n    this.handlers.set(\"review.request\",         p => this.opReviewRequest(p));\n    this.handlers.set(\"decide.approve\",         p => this.opDecide(p, \"approve\"));\n    this.handlers.set(\"decide.reject\",          p => this.opDecide(p, \"reject\"));\n    this.handlers.set(\"decide.override\",        p => this.opDecideOverride(p));\n    this.handlers.set(\"abstain.declare\",        p => this.opAbstainDeclare(p));\n    this.handlers.set(\"escalate.raise\",         p => this.opEscalateRaise(p));\n  }\n\n  private registerProfileHandlers(): void {\n    // Profiles register themselves by mutating this.handlers\n    registerWhisper(this);\n    registerDeliberation(this);\n    registerHandoff(this);\n    registerControl(this);\n    registerRouting(this);\n    registerSecuritySigned(this);\n    registerAuditScitt(this);\n  }\n\n  // ==========================================================\n  //   Core method handlers\n  // ==========================================================\n\n  private opWorkspaceCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const id = (p.workspace as string) || this.ids.workspaceId();\n    if (typeof id !== \"string\") return { error: rpcError(E.PARAMS, \"workspace must be a string id\") };\n    if (this.workspaces.has(id)) return { error: rpcError(E.PARAMS, `workspace already exists: ${id}`) };\n    const profiles: string[] = Array.isArray(p.profiles) ? [...(p.profiles as string[])] : [...(this.options.defaultProfiles ?? [\"core/1.0\", \"review/1.0\"])];\n\n    // SPECIFICATION 15.4: the descriptor and the enforcement agree, and the\n    // workspace boundary is where a disagreement surfaces.\n    //\n    // Advertising a security profile does not turn its enforcement on: that\n    // would break every workspace advertising it today without signing, and\n    // break it at the second call rather than at configuration time. The rule\n    // runs the other way, where it costs nothing. Enforcement on adds the\n    // profile, so the descriptor never understates what is enforced; the\n    // profile advertised with enforcement off is a configuration error.\n    for (const [profile, enforced, option] of [\n      [\"security-signed/1.0\", !!this.options.requireSignatures, \"requireSignatures\"],\n      [\"identity-oidc/1.0\", this.options.verifyOidcToken !== undefined, \"verifyOidcToken\"],\n    ] as [string, boolean, string][]) {\n      const name = profile.split(\"/\")[0];\n      const advertised = profiles.some(x => x === name || x.startsWith(name + \"/\"));\n      if (enforced && !advertised) profiles.push(profile);\n      else if (advertised && !enforced) {\n        return { error: rpcError(E.PARAMS,\n          `${profile} is advertised but ${option} is not configured. ` +\n          `A workspace that advertises it and does not enforce it ` +\n          `describes a guarantee it does not give.`) };\n      }\n    }\n\n    const chainEnabled = profiles.includes(\"audit-scitt/1.0\") || !!this.options.enableChain;\n    const ws: Workspace = {\n      id,\n      created: this.now(),\n      state: \"active\",\n      profiles,\n      mode: (p.mode as Mode) ?? \"trial\",\n      mode_ceiling: (p.mode_ceiling as Mode) ?? \"production\",\n      routing_policy_uri: p.routing_policy_uri as string | undefined,\n      step_up_window_sec: typeof p.step_up_window_sec === \"number\" ? p.step_up_window_sec : 300,\n      min_acr: p.min_acr as string | undefined,\n      members: this.newMap(),\n      tasks: this.newMap(),\n      overrides: this.newMap(),\n      whispers: this.newMap(),\n      deliberations: this.newMap(),\n      handoffs: this.newMap(),\n      snapshots: this.newMap(),\n      route_decisions: this.newMap(),\n      idempotency_keys: {},\n      audit: [],\n      chain_enabled: chainEnabled,\n      chain_head: chainEnabled ? ZERO_HASH : undefined,\n    };\n    this.workspaces.set(id, ws);\n    // New here, so the store holds nothing of it yet.\n    this.persisted.set(ws, { seq: 0, replace: false, keys: new Set() });\n    return { result: { workspace: id, created: ws.created } };\n  }\n\n  private opWorkspaceDescribe(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, `Unknown workspace: ${p.workspace}`) };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    return { result: {\n      id: ws.id,\n      created: ws.created,\n      state: ws.state,\n      mode: ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      max_envelope_bytes: this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES,\n      step_up_window_sec: ws.step_up_window_sec,\n      profiles: ws.profiles,\n      members: Array.from(rawValues(ws.members)).map(memberToDict),\n      audit_count: ws.audit.length,\n      task_count: ws.tasks.size,\n      override_count: ws.overrides.size,\n      // Omitted where the workspace has no chain, which is what the Python\n      // reference now sends too: JSON.stringify drops an undefined value, so\n      // the two answered the same call differently on the wire.\n      ...(ws.chain_head ? { evidence_head: ws.chain_head } : {}),\n      ...(ws.routing_policy_uri ? { routing_policy_uri: ws.routing_policy_uri } : {}),\n    }};\n  }\n\n  private opWorkspaceSetProfiles(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"profiles\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    if (ws.members.get(p.from as string)!.role !== \"admin\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"workspace.set_profiles requires the admin role\") };\n    }\n    const newProfiles = [...(p.profiles as string[])];\n    if (!newProfiles.some(pr => pr.startsWith(\"core/\"))) newProfiles.push(\"core/1.0\");\n    ws.profiles = newProfiles;\n    if (newProfiles.includes(\"audit-scitt/1.0\") && !ws.chain_enabled) {\n      ws.chain_enabled = true;\n      ws.chain_head = ZERO_HASH;\n    }\n    return { result: { profiles: ws.profiles } };\n  }\n\n  private opParticipantJoin(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"type\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    let ws = this.workspaces.get(p.workspace as string);\n    if (!ws) {\n      const create = this.opWorkspaceCreate({ workspace: p.workspace });\n      if (create.error) return create;\n      ws = this.workspaces.get(p.workspace as string)!;\n    }\n    const uri = p.from as ParticipantUri;\n    const now = this.now();\n    const existing = ws.members.get(uri);\n    let tokenVerified = false;\n\n    const member: Member = {\n      uri,\n      type: p.type as Member[\"type\"],\n      role: (p.role as string) || \"participant\",\n      joined: now,\n      display_name: p.display_name as string | undefined,\n      capabilities: p.capabilities as Record<string, unknown> | undefined,\n      scopes: p.scopes as string[] | undefined,\n      keys: [],\n      paused: false,\n    };\n\n    // identity-oidc/1.0\n    if (this.options.verifyOidcToken && typeof p.oidc_token === \"string\") {\n      const claims = this.options.verifyOidcToken(p.oidc_token);\n      if (claims === null) return { error: rpcError(E.OIDC_TOKEN_INVALID, \"OIDC token invalid\") };\n      // A token binds only to the participant it belongs to. One naming\n      // another participant is refused, and a join under an existing member's\n      // name must carry a token for that member: the same subject, or, for a\n      // member with no verified subject yet, a token naming the member.\n      const boundUri = claims.chap_participant_uri;\n      const sub = typeof claims.sub === \"string\" && claims.sub !== \"\" ? claims.sub : undefined;\n      if (boundUri != null && boundUri !== uri) {\n        return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token is bound to another participant\") };\n      }\n      if (existing) {\n        if (existing.oidc_sub != null) {\n          if (sub !== existing.oidc_sub) {\n            return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token subject does not match the member\") };\n          }\n        } else if (boundUri !== uri) {\n          return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token does not name this member\") };\n        }\n      }\n      member.oidc_sub = sub;\n      tokenVerified = true;\n      const at = claims.auth_time;\n      if (typeof at === \"number\") member.oidc_auth_time = at;\n      member.oidc_acr = typeof claims.acr === \"string\" ? claims.acr : undefined;\n      const cnf = claims.cnf as Record<string, unknown> | undefined;\n      const cnfJwk = cnf?.jwk as Record<string, unknown> | undefined;\n      if (cnfJwk && typeof cnfJwk.kid === \"string\") {\n        member.keys.push({ jwk: cnfJwk as unknown as KeyRecord[\"jwk\"], kid: cnfJwk.kid as string, valid_from: now });\n      }\n    }\n    // identity-vc/1.0\n    if (this.options.verifyVc && typeof p.vc_presentation === \"object\" && p.vc_presentation !== null\n        && !Array.isArray(p.vc_presentation)) {\n      const subject = this.options.verifyVc(p.vc_presentation as Record<string, unknown>);\n      if (subject === null) return { error: rpcError(E.VC_VP_INVALID, \"VC presentation invalid\") };\n      const holder = [subject.holder, subject.id].find(\n        (h): h is string => typeof h === \"string\" && h !== \"\");\n      // A join under an existing member's name binds a presentation only from\n      // the member's own holder.\n      if (existing && (existing.vc_holder == null || holder !== existing.vc_holder)) {\n        return { error: rpcError(E.VC_HOLDER_BINDING_INVALID, \"Presentation holder does not match the member\") };\n      }\n      member.vc_holder = holder;\n      const vpJwk = subject.cnf_jwk as Record<string, unknown> | undefined;\n      if (vpJwk && typeof vpJwk.kid === \"string\") {\n        member.keys.push({ jwk: vpJwk as unknown as KeyRecord[\"jwk\"], kid: vpJwk.kid as string, valid_from: now });\n      }\n    }\n\n    const attested = [...member.keys];\n\n    // Self-asserted JWKs are ignored for an identity-bound participant: the\n    // verifier-pinned cnf.jwk / vp_jwk is the signing key (proof of possession).\n    const jwks = p.jwks as { keys?: Array<{ kid: string; [k: string]: unknown }> } | undefined;\n    if (jwks?.keys && attested.length === 0) {\n      for (const j of jwks.keys) {\n        if (j.kid && !member.keys.some(k => k.kid === j.kid)) {\n          member.keys.push({ jwk: j as unknown as KeyRecord[\"jwk\"], kid: j.kid, valid_from: now });\n        }\n      }\n    }\n\n    if (existing) {\n      if (member.oidc_sub !== undefined) existing.oidc_sub = member.oidc_sub;\n      if (member.oidc_auth_time !== undefined) existing.oidc_auth_time = member.oidc_auth_time;\n      if (member.oidc_acr !== undefined) existing.oidc_acr = member.oidc_acr;\n      if (tokenVerified) existing.oidc_acr = member.oidc_acr;\n      if (member.vc_holder !== undefined) existing.vc_holder = member.vc_holder;\n      for (const k of attested) {\n        if (!existing.keys.some(x => x.kid === k.kid)) existing.keys.push(k);\n      }\n      return { result: { joined: true, as: uri } };\n    }\n    ws.members.set(uri, member);\n    return { result: { joined: true, as: uri } };\n  }\n\n  private opParticipantLeave(p: Record<string, unknown>): ReturnType<Handler> {\n    // Self-removal: deletes the caller's own `from`. Under requireSignatures the\n    // signature binds `from`, so a member can only remove itself; evicting\n    // another member is an admin operation, not this. Unsigned, a spoofed\n    // `from` is the transport's responsibility.\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    ws.members.delete(p.from as string);\n    return { result: { left: true } };\n  }\n\n  private opTaskCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"kind\", \"input\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const assignee = (p.assignee as string) || (p.to as string);\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Assignee not in workspace\") };\n    }\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n\n    // modes/1.0 ceiling check. A mode or review_required of the wrong type is\n    // refused, so both references read the same task from the same call.\n    if (p.mode !== undefined && p.mode !== null && typeof p.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"mode must be a string\") };\n    }\n    const requestedMode = ((p.mode as Mode) || ws.mode);\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (p.review_required !== undefined && p.review_required !== null && typeof p.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"review_required must be a boolean\") };\n    }\n\n    const taskId = this.ids.taskId();\n    const now = this.now();\n    const task: Task = {\n      id: taskId,\n      kind: p.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: p.input as Record<string, unknown>,\n      created_at: now,\n      updated_at: now,\n      deadline: p.deadline as string | undefined,\n      mode: requestedMode,\n      routing_hints: p.routing_hints as Task[\"routing_hints\"],\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\" }],\n      paused: false,\n    };\n\n    // modes/1.0: trial mode forces review\n    // modes/1.0: trial forces review, but only when the workspace opted into\n    // modes/1.0. mode is inert without the profile.\n    if (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && task.mode === \"trial\") task.review_required = true;\n    else if (\"review_required\" in p) task.review_required = !!p.review_required;\n\n    ws.tasks.set(taskId, task);\n    if (typeof p.idempotency_key === \"string\") {\n      ws.idempotency_keys[p.idempotency_key] = taskId;\n      this.markKey(ws, p.idempotency_key);\n      const keys = Object.keys(ws.idempotency_keys);\n      if (keys.length > MAX_IDEMPOTENCY_KEYS) {\n        delete ws.idempotency_keys[keys[0]];\n        this.markKey(ws, keys[0]);\n      }\n    }\n    return { result: { task_id: taskId, state: \"created\" } };\n  }\n\n  private opTaskUpdate(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const newState = p.state as Task[\"state\"];\n    // Pausing and resuming both belong to control/1.0. A Core-only workspace\n    // that could pause through task.update would hold a task nothing it\n    // advertises can lift. A review opens with review.request, or with\n    // task.complete on a task that requires one: task.update into\n    // review_requested would leave the task under review with no review for a\n    // decision to act on.\n    const legal: Record<string, string[]> = {\n      created:          [\"in_progress\", \"declined\"],\n      in_progress:      [\"in_progress\", \"completed\", \"declined\"],\n      review_requested: [\"in_progress\"],\n      paused:           [\"cancelled\"],\n    };\n    if (!legal[task.state]?.includes(newState)) {\n      return { error: rpcError(E.PARAMS, `Illegal transition ${task.state} -> ${newState}`) };\n    }\n    // task.complete opens a review rather than completing when one is required.\n    // task.update reaches the same state by another route and carries no\n    // output, so completing here would record a finished task with nothing\n    // reviewed and no decision on the chain.\n    if (newState === \"completed\" && task.review_required) {\n      return { error: rpcError(E.PARAMS,\n        \"This task requires review. Submit the output with task.complete, which opens the review; a reviewer decision completes it.\") };\n    }\n    task.state = newState;\n    task.updated_at = this.now();\n    task.history.push({\n      ts: task.updated_at, from: p.from as ParticipantUri,\n      state: newState, note: p.progress_note as string | undefined,\n    });\n    return { result: { state: newState } };\n  }\n\n  private opTaskComplete(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // Completion is only legal from an active, non-terminal, non-paused state.\n    // An allowlist (rather than a denylist of terminal states) is safer: any\n    // state not listed -- cancelled, superseded, paused, already\n    // completed/declined, abstained, escalated -- is rejected, so completion\n    // can neither revive a terminated task nor bypass a pause.\n    if (task.state !== \"created\" && task.state !== \"in_progress\") {\n      return { error: rpcError(E.PARAMS, `Cannot complete task in state: ${task.state}`) };\n    }\n    // review/1.0 S3.1: task.complete on a task whose review is required opens a\n    // review implicitly rather than completing. The submitted output becomes the\n    // artefact under review; only a reviewer decision (decide.*) then takes the\n    // task to completed. Without this a review_required task would reach\n    // completed with unreviewed output and no decision.\n    if (task.review_required) {\n      const now = this.now();\n      if (!task.review) {\n        // review_required means a person has to see this. The producer must\n        // not satisfy its own review, and neither must another agent: an agent\n        // approving an agent leaves a decide.approve on the chain that reads\n        // as human oversight and is not. So the implicit review is addressed\n        // to the human members other than the completer and the assignee, and\n        // where there are none the completion is refused rather than opening a\n        // review no person can decide. An explicit review.request keeps its\n        // own `to`, so a deliberate agent-reviews-agent flow is still\n        // available.\n        const producer = p.from as string;\n        const eligible = [...rawEntries(ws.members)]\n          .filter(([uri, member]) => uri !== producer && uri !== task.assignee && member.type === \"human\")\n          .map(([uri]) => uri);\n        if (eligible.length === 0) {\n          return { error: rpcError(E.NOT_AUTHORISED,\n            \"Task requires review but has no eligible human reviewer (needs a human member other than its assignee and completer)\") };\n        }\n        task.review = { requested_at: now, requested_to: eligible as ParticipantUri[], rule: \"any_one_approves\", decisions: [] };\n      }\n      task.pending_artefact = p.output;\n      task.state = \"review_requested\";\n      task.updated_at = now;\n      task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\",\n                          note: \"review required; opened on task.complete\" });\n      return { result: { state: \"review_requested\", review_id: task.id } };\n    }\n    task.output = p.output;\n    if (typeof p.confidence === \"number\" || typeof p.confidence === \"string\") task.confidence = p.confidence;\n    task.state = \"completed\";\n    task.updated_at = this.now();\n    task.history.push({ ts: task.updated_at, from: p.from as ParticipantUri, state: \"completed\" });\n    return { result: { state: \"completed\" } };\n  }\n\n  private opAuditRead(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const filter = (p.filter as {\n      method?: string; from?: string; task_id?: string; outcome?: unknown;\n    } | undefined) ?? {};\n    if (filter.outcome != null && filter.outcome !== \"accepted\" && filter.outcome !== \"refused\") {\n      return { error: rpcError(E.PARAMS, \"filter.outcome must be 'accepted' or 'refused'\") };\n    }\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const out: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      // Filters read the call an entry records, accepted or refused, and\n      // `outcome` narrows to one kind.\n      const refused = entry.outcome != null;\n      if (filter.outcome === \"accepted\" && refused) continue;\n      if (filter.outcome === \"refused\" && !refused) continue;\n      const call = entryCall(entry) ?? ({} as Envelope);\n      const ep = (call.params ?? {}) as Record<string, unknown>;\n      if (filter.method && call.method !== filter.method) continue;\n      if (filter.from && ep.from !== filter.from) continue;\n      if (filter.task_id) {\n        let taskId = ep.task_id;\n        if (call.method === \"whisper.answer\") {\n          const prompt = ws.whispers.get(ep.whisper_id as string);\n          taskId = prompt ? (prompt as { task_id?: string }).task_id : undefined;\n        }\n        if (taskId !== filter.task_id) continue;\n      }\n      const item: Record<string, unknown> = { seq: entry.seq, arrived: entry.arrived };\n      if (refused) {\n        item.request = entry.request;\n        item.outcome = entry.outcome;\n      } else {\n        item.envelope = entry.envelope;\n      }\n      if (entry.prev_hash) item.prev_hash = entry.prev_hash;\n      out.push(item);\n    }\n    // The next entry to read: the end of the range, or the end of the log\n    // where the range runs past it, so a reader paging forward meets the\n    // entries written after this read.\n    return { result: { entries: out, next_seq: Math.min(toSeq, ws.audit.length) } };\n  }\n\n  // ==========================================================\n  //   review/1.0 handlers\n  // ==========================================================\n\n  private opReviewRequest(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"artefact\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // task.complete refuses a task that has been stopped, so that a completion\n    // \"can neither revive a terminated task nor bypass a pause\". review.request\n    // creates the same kind of state and had no such check, so it revived\n    // cancelled and superseded tasks and pulled paused ones back into play. The\n    // same three states are refused here.\n    //\n    // `completed` is deliberately still allowed. Requesting review on a\n    // completed task is how every framework bridge submits a draft, and\n    // 0.2.12's `review_required` is the route away from that, not this.\n    if (REVIEW_REQUEST_STOPPED.includes(task.state)) {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Cannot request review for task in state: ${task.state}`) };\n    }\n    const to = p.to;\n    const reviewers: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!reviewers.length) return { error: rpcError(E.PARAMS, \"review.request needs 'to'\") };\n    const now = this.now();\n    const declaredRule = p.rule as string | undefined;\n    const rule = declaredRule || \"any_one_approves\";\n    if (!reviewRuleSupported(rule)) {\n      return { error: rpcError(E.PARAMS, `Unsupported review rule ${JSON.stringify(rule)}: review/1.0 supports any_one_approves, all_approve, quorum:<n>`) };\n    }\n\n    // A review already open on this task. Replacing the artefact underneath\n    // it would let a reviewer decide on content they never saw, and would\n    // discard decisions already cast while their envelopes remain in the\n    // audit log, so a quorum could appear to have been assembled across two\n    // different artefacts. Re-requesting the *same* artefact is a different\n    // thing: it widens the reviewer set on an open review, which is legitimate\n    // and preserves what has been decided so far.\n    if (task.state === \"review_requested\" && task.review) {\n      if (contentHash(task.pending_artefact) !== contentHash(p.artefact)) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          \"A review is already open on this task with different content. \" +\n          \"Decide, abstain, escalate or cancel it before requesting review of a new artefact.\",\n        ) };\n      }\n      // Only a rule the caller actually supplied can be a change. Comparing\n      // the resolved default instead refused the documented\n      // widen-the-reviewer-set request whenever `rule` was omitted.\n      if (declaredRule !== undefined && declaredRule !== task.review.rule) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          `Cannot change the decision rule of an open review (currently ${task.review.rule})`,\n        ) };\n      }\n      // Union, preserving order and the decisions already recorded.\n      for (const r of reviewers) {\n        if (!task.review.requested_to.includes(r)) task.review.requested_to.push(r);\n      }\n      if (p.deadline !== undefined) task.review.deadline = p.deadline as string;\n      task.updated_at = now;\n      return { result: {\n        state: \"review_requested\",\n        review_id: task.id,\n        amended: true,\n        requested_to: [...task.review.requested_to],\n      } };\n    }\n\n    task.state = \"review_requested\";\n    task.updated_at = now;\n    task.review = {\n      requested_at: now,\n      requested_to: reviewers,\n      rule,\n      deadline: p.deadline as string | undefined,\n      decisions: [],\n    };\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\" });\n    task.pending_artefact = p.artefact;\n    return { result: { state: \"review_requested\", review_id: task.id } };\n  }\n\n  /**\n   * Verify an optional `approved_artefact_digest` against the artefact under\n   * review (review/1.0 S3.2).\n   *\n   * The digest sits in params, so it is inside whatever the envelope signature\n   * covers: the decision then attests the content the reviewer saw rather than\n   * a task reference, and a relying party can check it without trusting the\n   * Coordinator that produced it. Absent, behaviour is exactly as before.\n   *\n   * On mismatch nothing is recorded and no state changes, so a client that\n   * computes the wrong digest refuses only its own decision.\n   */\n  private checkArtefactDigest(p: Record<string, unknown>, task: Task): ReturnType<Handler> | null {\n    const declared = p.approved_artefact_digest;\n    if (declared === undefined || declared === null) return null;\n    if (typeof declared !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"approved_artefact_digest must be a string\") };\n    }\n    if (task.pending_artefact === undefined) {\n      return { error: rpcError(E.PARAMS, \"No artefact under review to bind a digest to\") };\n    }\n    const actual = contentHash(task.pending_artefact);\n    if (declared !== actual) {\n      return { error: rpcError(\n        E.SIG_ARTEFACT_DIGEST_MISMATCH,\n        \"approved_artefact_digest does not match the artefact under review\",\n        { declared, actual },\n      ) };\n    }\n    return null;\n  }\n\n  private opDecide(p: Record<string, unknown>, kind: \"approve\" | \"reject\"): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const badTags = tagsError(p);\n    if (badTags) return badTags;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind,\n      ts: now,\n      comment: p.comment as string | undefined,\n      tags: p.tags as string[] | undefined,\n    });\n    if (kind === \"approve\") {\n      // Complete only when the rule's approval predicate is met; otherwise the\n      // approval is recorded and the task stays review_requested.\n      if (reviewSatisfied(task.review!)) {\n        task.output = task.pending_artefact;\n        task.state = \"completed\";\n      }\n    } else {\n      task.state = p.request_revision ? \"in_progress\" : \"declined\";\n    }\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: task.state });\n    return { result: { state: task.state } };\n  }\n\n  private opDecideOverride(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"diff\", \"rationale\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const badTags = tagsError(p);\n    if (badTags) return badTags;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    // The override is of the artefact under review; use the coordinator's\n    // record, not a caller-supplied \"before\" that could be fabricated.\n    const base = task.pending_artefact;\n    if (base === undefined) return { error: rpcError(E.PARAMS, \"No base artefact for override\") };\n    let applied: unknown;\n    try {\n      applied = applyJsonPatch(base, p.diff as never);\n    } catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.PATCH_FAILED, msg) };\n    }\n    const now = this.now();\n    const id = this.ids.artefactId();\n    const override: OverrideArtefact = {\n      id,\n      task_id: task.id,\n      reviewer: p.from as ParticipantUri,\n      based_on_artefact: base,\n      diff: p.diff as never,\n      result: applied,\n      rationale: p.rationale as string,\n      tags: (p.tags as string[]) ?? [],\n      policy_refs: (p.policy_refs as string[]) ?? [],\n      ts: now,\n      logical_id: p.logical_id as string | undefined,\n      instance_id: p.instance_id as string | undefined,\n      intent_preserved: p.intent_preserved as boolean | undefined,\n    };\n    ws.overrides.set(id, override);\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"override\",\n      ts: now,\n      tags: override.tags,\n      override_artefact_id: id,\n    });\n    task.output = applied;\n    task.state = \"completed\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"completed\", note: \"override applied\" });\n    return { result: { state: \"completed\", override_artefact_id: id, applied } };\n  }\n\n  private opAbstainDeclare(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"reason\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(task, p.from);\n    if (notReviewer) return notReviewer;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"abstain\",\n      ts: now,\n      comment: p.reason as string,\n      abstain_category: (p.category as string) || \"other\",\n    });\n    task.state = \"abstained\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"abstained\", note: p.reason as string });\n    return { result: { state: \"abstained\" } };\n  }\n\n  private opEscalateRaise(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"original_task_id\", \"new_task\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const origId = p.original_task_id;\n    const orig = typeof origId === \"string\" ? ws.tasks.get(origId) : undefined;\n    if (!orig) return { error: rpcError(E.PARAMS, \"Unknown original task\") };\n    if (orig.state === \"completed\" || orig.state === \"cancelled\" || orig.state === \"superseded\") {\n      return { error: rpcError(E.PARAMS, `Cannot escalate a terminal task: ${orig.state}`) };\n    }\n    if (p.new_task === null || typeof p.new_task !== \"object\" || Array.isArray(p.new_task)) {\n      return { error: rpcError(E.PARAMS, \"new_task must be an object\") };\n    }\n    const nt = p.new_task as Record<string, unknown>;\n    const assignee = nt.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Escalation assignee not in workspace\") };\n    }\n    const named = nt.mode;\n    if (named !== undefined && named !== null && typeof named !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_task.mode must be a string\") };\n    }\n    // The successor is a created task, so it meets the checks task.create and\n    // control.supersede apply: its assignee must not be paused, and its mode,\n    // the one new_task names or else the original's, must be within the\n    // ceiling in force now. Naming a lower mode is how work is escalated\n    // after the ceiling has been lowered.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    const mode = ((named as Mode | null | undefined) || orig.mode) as Mode;\n    if (!modeLE(mode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${mode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    const now = this.now();\n    const newId = this.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: (nt.kind as string) || orig.kind,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: (nt.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode,\n      supersedes: orig.id,\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\", note: `escalated from ${orig.id}` }],\n      paused: false,\n    };\n    // Escalating hands the work on and keeps its review requirement. The\n    // successor requires review when the original did, and a trial task\n    // forces review under modes/1.0 as it does at task.create.\n    if (orig.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    }\n    ws.tasks.set(newId, newTask);\n    orig.state = \"escalated\";\n    orig.updated_at = now;\n    orig.superseded_by = newId;\n    orig.history.push({ ts: now, from: p.from as ParticipantUri, state: \"escalated\", note: `-> ${newId}` });\n    return { result: { new_task_id: newId, escalated_from: orig.id } };\n  }\n}\n\nfunction memberToDict(m: Member): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    uri: m.uri, type: m.type, role: m.role, joined: m.joined,\n  };\n  if (m.display_name) out.display_name = m.display_name;\n  if (m.capabilities) out.capabilities = m.capabilities;\n  if (m.scopes) out.scopes = m.scopes;\n  if (m.keys.length) {\n    out.jwks = { keys: m.keys.filter(k => !k.revoked_at && !k.valid_until).map(k => k.jwk) };\n    out.key_history = m.keys;\n  }\n  if (m.paused) out.paused = true;\n  if (m.oidc_sub) out.oidc_sub = m.oidc_sub;\n  if (m.vc_holder) out.vc_holder = m.vc_holder;\n  return out;\n}\n","/**\n * Default routing policy factory.\n *\n * Returns a partial CoordinatorOptions configured with the three\n * routing hooks (routingPolicy, reviewDepthPolicy, escalationPolicy)\n * that the playground and demo use out of the box. Operators can\n * override individual hooks by passing their own functions in\n * CoordinatorOptions.\n *\n * The defaults shipped with the Coordinator (in profiles/routing.ts)\n * apply the same review-depth and escalation rules. Routing differs: this\n * routing policy takes the first candidate as given, so a first candidate\n * who is not a member is refused with -32510 and one who is paused with\n * -32063, where the built-in default passes over both. This factory exists\n * so that the legacy call site can keep using:\n *\n *   new Coordinator({ ...makeDefaultPolicy(SENIOR_URI), ... })\n *\n * The seniorTarget argument is the URI auto-escalation routes to\n * when no other target is supplied.\n */\nimport type {\n  EscalationPolicyFn,\n  ReviewDepthPolicyFn,\n  RoutingPolicyFn,\n  CoordinatorOptions,\n} from \"./coordinator.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\n\nexport function makeDefaultPolicy(seniorTarget: string): Pick<CoordinatorOptions,\n  \"routingPolicy\" | \"reviewDepthPolicy\" | \"escalationPolicy\"> {\n\n  const routingPolicy: RoutingPolicyFn = (task, candidates) => {\n    const eligible = candidates;  // delegate elig check to coordinator\n    return {\n      selected: eligible[0],\n      rationale: {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: eligible.slice(1).map(c => ({\n          candidate: c, reason_excluded: \"not first eligible\",\n        })),\n      },\n    };\n  };\n\n  const reviewDepthPolicy: ReviewDepthPolicyFn = (_task, hints) => {\n    const crit = (hints.criticality as string) ?? \"medium\";\n    let conf = 1.0;\n    try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n    if (isNaN(conf)) conf = 1.0;\n    const r = CRIT[crit] ?? 1;\n    if (r >= 3) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=critical: full review\" }};\n    if (r === 2 && conf < 0.7) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=high and confidence<0.7: full review\" }};\n    if (r === 0 && conf >= 0.95) return { depth: \"skip\",\n      rationale: { policy_id: \"default\", summary: \"very low criticality + very high confidence: skip\" }};\n    if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling_probability: 0.10,\n      rationale: { policy_id: \"default\", summary: \"low criticality + high confidence: 10% sample\" }};\n    return { depth: \"spot_check\", sampling_probability: 0.25,\n      rationale: { policy_id: \"default\", summary: \"default mid-confidence: 25% sample\" }};\n  };\n\n  const escalationPolicy: EscalationPolicyFn = (_task, hints) => {\n    const crit = (hints.criticality as string) ?? \"medium\";\n    let conf = 1.0;\n    try { conf = Number(hints.confidence ?? 1.0); } catch { conf = 1.0; }\n    if (isNaN(conf)) conf = 1.0;\n    const r = CRIT[crit] ?? 1;\n    const escalate = (r >= 3) || (r >= 2 && conf < 0.6);\n    return {\n      escalate,\n      to: escalate ? seniorTarget : undefined,\n      triggered_rule: {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      },\n    };\n  };\n\n  return { routingPolicy, reviewDepthPolicy, escalationPolicy };\n}\n","/**\n * @brightbeamai/chap-coordinator/transports/wrap\n *\n * Inward integration helpers: turn an external tool/agent event into\n * a CHAP envelope landing in a workspace's audit log. Library\n * counterpart to the patterns described in\n * ``integrations/CHAP-with-MCP.md`` and ``integrations/CHAP-with-A2A.md``.\n *\n * The outward transports let external clients drive a CHAP workspace.\n * These helpers go the other direction: when work has already\n * happened outside CHAP, wrap it so the audit log carries a faithful,\n * citable record.\n *\n * Spec target: CHAP 0.3. MCP 2026-07-28. A2A 1.0.\n */\n\nimport { contentHash } from \"../canonical.js\";\nimport type { Coordinator } from \"../coordinator.js\";\n\nexport { contentHash } from \"../canonical.js\";\n\nexport interface WrapMcpToolCallOptions {\n  /** Participant URI making the call. Must already be a workspace member. */\n  caller: string;\n  /** MCP tool name, e.g. ``\"github.create_issue\"``. */\n  tool: string;\n  /** Arguments passed to the MCP tool. */\n  args: Record<string, unknown>;\n  /** Return value from the MCP tool. */\n  result: unknown;\n  /** Optional MCP server identifier, e.g. \"github\". */\n  server?: string;\n  /** Override the default task kind ``\"mcp_call:<tool>\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the CHAP task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this call fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapResult {\n  task_id:     string;\n  input_hash:  string;\n  output_hash: string;\n}\n\n/**\n * Wrap a completed MCP tool call as a CHAP task pair.\n *\n * Emits ``task.create`` + ``task.complete`` envelopes into the\n * workspace so the MCP call shows up as a first-class audit entry.\n * The result artefact is the MCP tool's return value, plus a\n * ``citations[]`` entry with the input/output hashes per\n * ``integrations/CHAP-with-MCP.md`` §2.\n */\nexport function wrapMcpToolCall(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapMcpToolCallOptions,\n): WrapResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.caller) throw new Error(\"caller is required\");\n  if (!options.tool) throw new Error(\"tool is required\");\n\n  const inputHash = contentHash(options.args);\n  const outputHash = contentHash(options.result);\n  const kind = options.taskKind ?? `mcp_call:${options.tool}`;\n\n  const citations = [{\n    kind:         \"mcp_tool_call\" as const,\n    server:       options.server ?? \"unknown\",\n    tool:         options.tool,\n    input_hash:   inputHash,\n    output_hash:  outputHash,\n  }];\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    kind,\n    assignee: options.caller,\n    input:    options.args,\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-create`,\n    method:  \"task.create\",\n    params:  createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-update`,\n    method:  \"task.update\",\n    params:  { workspace, from: options.caller, task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { result: options.result, citations };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    task_id:  taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-complete`,\n    method:  \"task.complete\",\n    params:  completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, input_hash: inputHash, output_hash: outputHash };\n}\n\n// ============================================================\n\nexport interface WrapA2aExchangeOptions {\n  /** URI of the local bridge participant. Must be a workspace member. */\n  bridgeUri: string;\n  /** Identifier of the remote A2A agent. Recorded in the citation. */\n  remoteAgent: string;\n  /** The A2A message body sent outbound. */\n  sent: Record<string, unknown>;\n  /** The A2A message body received in response. */\n  received: Record<string, unknown>;\n  /** CHAP task kind. Default ``\"a2a_exchange\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this exchange fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapA2aResult {\n  task_id:       string;\n  sent_hash:     string;\n  received_hash: string;\n}\n\n/**\n * Wrap a completed A2A message exchange as a CHAP task pair.\n *\n * Implements the bridge-participant pattern from\n * ``integrations/CHAP-with-A2A.md`` §3 as a library helper.\n */\nexport function wrapA2aMessageExchange(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapA2aExchangeOptions,\n): WrapA2aResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.bridgeUri) throw new Error(\"bridgeUri is required\");\n  if (!options.remoteAgent) throw new Error(\"remoteAgent is required\");\n\n  const sentHash = contentHash(options.sent);\n  const receivedHash = contentHash(options.received);\n  const kind = options.taskKind ?? \"a2a_exchange\";\n\n  const citation = {\n    kind:           \"a2a_exchange\" as const,\n    remote_agent:   options.remoteAgent,\n    sent_hash:      sentHash,\n    received_hash:  receivedHash,\n  };\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.bridgeUri,\n    kind,\n    assignee: options.bridgeUri,\n    input:    { remote_agent: options.remoteAgent, sent: options.sent },\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-create\",\n    method: \"task.create\", params: createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-update\",\n    method: \"task.update\",\n    params: { workspace, from: options.bridgeUri,\n              task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { received: options.received, citations: [citation] };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace, from: options.bridgeUri, task_id: taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-complete\",\n    method: \"task.complete\", params: completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, sent_hash: sentHash, received_hash: receivedHash };\n}\n"],"mappings":";AAkBA,SAAS,kBAAkB;AAEpB,IAAM,YAAY,YAAY,IAAI,OAAO,EAAE;AAElD,IAAM,oBACJ;AAEF,IAAM,qBACJ;AAGF,IAAM,uBACJ;AAGF,SAAS,sBAAsB,GAAiB;AAC9C,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,UAAM,IAAI,EAAE,WAAW,CAAC;AACxB,QAAI,KAAK,SAAU,KAAK,OAAQ;AAC9B,YAAM,OAAO,IAAI,IAAI,EAAE,SAAS,EAAE,WAAW,IAAI,CAAC,IAAI;AACtD,UAAI,OAAO,SAAU,OAAO,MAAQ,OAAM,IAAI,MAAM,oBAAoB;AACxE;AAAA,IACF,WAAW,KAAK,SAAU,KAAK,OAAQ;AACrC,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,wBAAsB,CAAC;AACvB,SAAO,KAAK,UAAU,CAAC;AACzB;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACA,MAAI,KAAK,IAAI,CAAC,IAAI,OAAO,kBAAkB;AACzC,UAAM,IAAI,MAAM,kBAAkB;AAAA,EACpC;AAGA,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,MAAM,OAAwB;AACrC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,MAAM,IAAI,KAAK,EAAE,KAAK,GAAG,IAAI;AAAA,EAC5C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,gBAAgB,GAAG,IAAI,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC;AAAA,IACzD;AACA,WAAO,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,EACjC;AACA,QAAM,IAAI,UAAU,qCAAqC,OAAO,KAAK,EAAE;AACzE;AAGO,SAAS,aAAa,OAAwB;AACnD,SAAO,OAAO,KAAK,MAAM,KAAK,GAAG,OAAO;AAC1C;AAGO,SAAS,UAAU,MAA+B;AACvD,QAAM,IAAI,WAAW,QAAQ;AAC7B,IAAE,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,OAAO,IAAI,IAAI;AACrE,SAAO,YAAY,EAAE,OAAO,KAAK;AACnC;AAGO,SAAS,YAAY,SAA0B;AACpD,SAAO,UAAU,aAAa,OAAO,CAAC;AACxC;;;AC3FO,IAAM,iBAAmD,OAAO,OAAO;AAAA,EAC5E,mBAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,yBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,wBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,4BAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,gBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,0BAA2B;AAC7B,CAAC;AAUM,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AC3DD;AAAA,EACE;AAAA,EACA;AAAA,EAEA,QAAQ;AAAA,EACR,UAAU;AAAA,EAEV,cAAAA;AAAA,OACK;AAEP,IAAM,cAAc,OAAO,KAAK,4BAA4B,KAAK;AAEjE,SAAS,YAAY,KAAqB;AACxC,SAAO,IAAI,SAAS,QAAQ,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACzF;AAEA,SAAS,aAAa,GAAmB;AACvC,QAAM,MAAM,IAAI,QAAQ,IAAK,EAAE,SAAS,KAAM,CAAC;AAC/C,SAAO,OAAO,KAAK,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,KAAK,QAAQ;AAC5E;AAgBO,SAAS,WAAW,KAAqB;AAC9C,SAAOA,YAAW,QAAQ,EAAE,OAAO,UAAU,GAAG,EAAE,OAAO;AAC3D;AAKO,SAAS,mBAAmB,MAAyB;AAC1D,MAAI,KAAK,WAAW,IAAI;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAEA,QAAM,QAAQ,OAAO,OAAO;AAAA,IAC1B,OAAO,KAAK,oCAAoC,KAAK;AAAA,IACrD;AAAA,EACF,CAAC;AACD,SAAO,iBAAiB,EAAE,KAAK,OAAO,QAAQ,OAAO,MAAM,QAAQ,CAAC;AACtE;AAGO,SAAS,eAAe,YAA+B;AAC5D,QAAM,MAAM,gBAAgB,UAAU;AACtC,QAAM,MAAM,IAAI,OAAO,EAAE,QAAQ,OAAO,MAAM,OAAO,CAAC;AAEtD,SAAO,IAAI,SAAS,IAAI,SAAS,EAAE;AACrC;AAGO,SAAS,iBAAiB,KAAwB;AACvD,MAAI,IAAI,WAAW,IAAI;AACrB,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,QAAM,MAAM,OAAO,OAAO,CAAC,aAAa,GAAG,CAAC;AAC5C,SAAO,gBAAgB,EAAE,KAAK,KAAK,QAAQ,OAAO,MAAM,OAAO,CAAC;AAClE;AAGO,SAAS,kBAAkB,KAAa,KAAqB;AAClE,QAAM,MAAM,eAAe,GAAG;AAC9B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAKA,YAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA,IAC/D,KAAK;AAAA,IACL,KAAK;AAAA,IACL,GAAK,YAAY,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,aAAa,WAAmB,YAAuB,KAAqB;AAC1F,QAAM,MAAM,SAAS,MAAM,WAAW,UAAU;AAChD,SAAO,WAAW,GAAG,IAAI,IAAI,SAAS,QAAQ,CAAC;AACjD;AAGO,SAAS,eAAe,WAAmB,QAAgB,WAA+B;AAC/F,MAAI,CAAC,OAAO,WAAW,UAAU,EAAG,QAAO;AAC3C,QAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,MAAI,MAAM,SAAS,EAAG,QAAO;AAC7B,QAAM,SAAS,MAAM,MAAM,SAAS,CAAC;AACrC,MAAI;AACF,UAAM,MAAM,OAAO,KAAK,QAAQ,QAAQ;AACxC,WAAO,WAAW,MAAM,WAAW,WAAW,GAAG;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,KAAqB;AACpD,SAAO,iBAAiB,aAAa,IAAI,CAAC,CAAC;AAC7C;AAGO,SAAS,cAAc,KAAkD;AAC9E,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,aAAa,mBAAmB,IAAI;AAC1C,SAAO,EAAE,YAAY,KAAK,kBAAkB,KAAK,UAAU,EAAE;AAC/D;;;ACpHA,IAAM,WAAW;AAEjB,SAAS,OAAO,OAAe,QAAwB;AACrD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,UAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,UAAM,SAAS,GAAG,IAAI;AACtB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YACkB,gBAAyB,OACzC,OAAe,IACf,UAAkB,OAClB;AAHgB;AAIhB,SAAK,UAAU;AACf,SAAK,UAAU;AAAA,EACjB;AAAA,EANkB;AAAA,EAJV;AAAA,EACA;AAAA,EAWR,QAAgB;AACd,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAO,KAAK;AAAA,IACd;AACA,WAAO,KAAK,IAAI;AAAA,EAClB;AAAA,EAEQ,aAAqB;AAC3B,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAQ,KAAK,UAAU,uBAAyB,MAAM,OAAO;AAAA,IAC/D;AAKA,UAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,WAAO,gBAAgB,GAAG;AAC1B,QAAI,IAAI;AACR,eAAW,KAAK,IAAK,KAAK,KAAK,KAAM,OAAO,CAAC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,OAAe;AACb,UAAM,KAAK,OAAO,KAAK,MAAM,CAAC,KAAM,MAAM,OAAO;AACjD,UAAM,OAAO,KAAK,WAAW;AAC7B,WAAO,OAAO,IAAI,EAAE,IAAI,OAAO,MAAM,EAAE;AAAA,EACzC;AAAA,EAEA,aAAyB;AAAE,WAAO,KAAK,KAAK;AAAA,EAAG;AAAA,EAC/C,SAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,cAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,iBAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAC1D;;;AC7DO,IAAM,IAAI;AAAA;AAAA,EAEf,OAAU;AAAA,EACV,SAAU;AAAA,EACV,QAAU;AAAA,EACV,QAAU;AAAA,EACV,UAAU;AAAA;AAAA,EAGV,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,cAAgB;AAAA,EAChB,eAAgB;AAAA,EAChB,qBAAqB;AAAA;AAAA,EAGrB,0BAA6B;AAAA,EAC7B,gBAA6B;AAAA,EAC7B,2BAA6B;AAAA;AAAA,EAG7B,yBAAyB;AAAA,EACzB,qBAAyB;AAAA,EACzB,wBAAyB;AAAA,EACzB,oBAAyB;AAAA;AAAA,EAGzB,uBAAyB;AAAA,EACzB,uBAAyB;AAAA;AAAA,EAGzB,wCAAwC;AAAA,EACxC,0BAAwC;AAAA,EACxC,8BAAwC;AAAA;AAAA,EAGxC,0BAA6B;AAAA,EAC7B,wBAA6B;AAAA,EAC7B,4BAA6B;AAAA,EAC7B,0BAA6B;AAAA;AAAA,EAG7B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,8BAA8B;AAAA;AAAA,EAG9B,mBAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,uBAA0B;AAAA;AAAA,EAG1B,uBAAuB;AAAA,EACvB,oBAAuB;AAAA,EACvB,mBAAuB;AAAA,EACvB,oBAAuB;AAAA;AAAA,EAGvB,eAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,uBAA2B;AAAA,EAC3B,mBAA2B;AAAA;AAAA,EAG3B,8BAAgC;AAAA,EAChC,0BAAgC;AAAA,EAChC,mCAAmC;AAAA,EACnC,0BAAgC;AAAA,EAChC,8BAAgC;AAAA,EAChC,4BAAgC;AAAA,EAChC,gCAAgC;AAClC;AAEO,SAAS,SAAS,MAAc,SAAiB,MAAgB;AACtE,SAAO,EAAE,MAAM,SAAS,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC,EAAG;AAClE;AAEO,SAAS,gBAAgB,KAAuB;AACrD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,IAAI;AACV,SAAO,EAAE,YAAY;AACvB;;;ACxEO,SAAS,YAAY,OAA4B;AACtD,MAAI,MAAM,WAAW,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,SAAS,MAAM,QAAQ;AACnF,SAAO,MAAM;AACf;AAGO,SAAS,UAAU,OAAyC;AACjE,SAAO,MAAM,YAAY,MAAM,WAAW;AAC5C;AAGO,SAAS,UAAU,OAA4B;AACpD,SAAO,MAAM,WAAW;AAC1B;AAGA,SAAS,OAAO,OAAyB;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,IAAI;AACV,SAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AASO,SAAS,kBAAkB,OAA4B;AAC5D,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,aAAa,QAAS,QAAO;AACjC,MAAI,SAAU,QAAO,OAAO,MAAM,QAAQ,KAAK,MAAM,WAAW;AAChE,QAAM,IAAI,MAAM;AAChB,SAAO,OAAO,MAAM,OAAO,KAAK,KAAK,QAAQ,OAAO,MAAM,YACrD,EAAE,WAAW,aAAa,OAAO,UAAU,EAAE,IAAI;AACxD;AAGO,SAAS,SAASC,OAAwB;AAC/C,SAAOA,UAAS,QAAQ,OAAOA,UAAS,YAAY,OAAQA,MAA2B,QAAQ;AACjG;AAOO,SAAS,aAAaA,OAAwB;AACnD,QAAM,SAAkC,EAAE,GAAGA,MAAK;AAClD,SAAO,OAAO;AACd,SAAO,UAAU,aAAa,MAAM,CAAC;AACvC;AAGO,SAAS,SAAS,QAAiB,MAAsB;AAC9D,SAAO,UAAU,OAAO,OAAO,CAAC,aAAa,MAAM,GAAG,OAAO,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC;AACpF;AAOA,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EACpD,EAAE;AAAA,EAAO,EAAE;AAAA,EAAS,EAAE;AAAA,EAAQ,EAAE;AAAA,EAChC,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAiB,EAAE;AACjE,CAAC;AAOD,IAAM,qBAA0C,oBAAI,IAAI,CAAC,oBAAoB,kBAAkB,CAAC;AAWzF,SAAS,kBACd,QACA,OACA,YACS;AACT,MAAI,CAAC,OAAO,UAAU,MAAM,IAAI,EAAG,QAAO;AAC1C,MAAI,mBAAmB,IAAI,MAAM,EAAG,QAAO;AAC3C,MAAI,iBAAiB,IAAI,MAAM,IAAI,EAAG,QAAO;AAC7C,MAAI,MAAM,SAAS,EAAE,QAAQ;AAC3B,UAAM,OAAO,MAAM;AACnB,WAAO,OAAO,MAAM,YAAY,YAAY,WAAW,IAAI,MAAM;AAAA,EACnE;AACA,SAAO;AACT;;;ACtGO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAMvB,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO;AACjC,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB;AAAgB,aAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,SAAS,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IAC5F;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAsB;AAChD,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AACnE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,UAAI,QAAQ,KAAK;AACf,eAAO,KAAK,GAAG,KAAK;AAAA,MACtB,OAAO;AACL,cAAM,MAAM;AACZ,YAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,gBAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,QAC5D;AACA,eAAO,OAAO,KAAK,GAAG,GAAG,KAAK;AAAA,MAChC;AAAA,IACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,mBAAmB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,QAAO,GAAG;AAClC,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAG,IAAI,GAAG;AAAA,IACnB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,GAAa,IAAI,GAAG;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,UAAU,IAAI;AAC5B,QAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,MAC/D;AACA,aAAO,OAAO,KAAK,CAAC;AAAA,IACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,MAC3D;AACA,aAAO,OAAO,GAAa;AAAA,IAC7B,OAAO;AACL,YAAM,IAAI,WAAW,sBAAsB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AACA,UAAM,QAAQ,MAAM,MAAM,KAAK,GAAG,CAAC;AACnC,UAAM,SAAS,KAAK,EAAE,IAAI,UAAU,MAAM,IAAI,CAAC;AAC/C,WAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM,MAAM,CAAC;AAAA,EACjD;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAE3B,SAAS,UAAU,OAAwB;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,IAAI;AACR,eAAW,KAAK,MAAO,MAAK,UAAU,CAAC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,QAAI,IAAI;AACR,eAAW,KAAK,OAAO,OAAO,KAAgC,EAAG,MAAK,UAAU,CAAC;AACjF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,eAAe,KAAc,KAA6B;AACxE,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,EAAE;AACtB,QAAI,UAAU,GAAG,IAAI,oBAAoB;AACvC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;;;ACzRO,IAAM,cAAc;AAAA,EACzB;AAAA,EAAW;AAAA,EAAS;AAAA,EAAa;AAAA,EACjC;AAAA,EAAiB;AAAA,EAAY;AAAA,EAAa;AAC5C;AAGO,IAAM,mBAAmB;AAmDzB,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACnC;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA,EAET,YAAY,WAAmB,MAAc,MAAc;AACzD;AAAA,MACE,mBAAmB,IAAI,gCAAgC,SAAS,4BACzC,IAAI;AAAA,IAI7B;AACA,SAAK,OAAO;AACZ,SAAK,YAAY;AACjB,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAO,WAAW,EAAE,OAAyB;AACnD,WAAO,iBAAiB,SAAS,MAAM,SAAS;AAAA,EAClD;AACF;AA6BA,SAAS,aAAa,MAAuB;AAC3C,SAAQ,YAAkC,SAAS,IAAI;AACzD;AAGO,SAAS,UAAU,YAAoB,MAAmC;AAC/E,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,IAAI;AACV,QAAM,MAAM,eAAe,YAAa,EAAE,OAAO,EAAE,KAAO,EAAE,MAAM,EAAE;AACpE,SAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAMA,SAAS,MAAM,YAAoB,OAAyC;AAC1E,QAAM,MAA+B,CAAC;AACtC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAW,QAAQ,OAAO;AACxB,YAAM,MAAM,UAAU,YAAY,IAAI;AACtC,UAAI,QAAQ,OAAW,KAAI,GAAG,IAAI;AAAA,IACpC;AAAA,EACF,WAAW,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtD,WAAO,OAAO,KAAK,KAAK;AAAA,EAC1B;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAsC;AACrE,QAAM,OAAQ,OAAO,SAAS,QAAQ,OAAO,OAAO,SAAS,WACzD,OAAO,OAAO,CAAC;AACnB,QAAM,OAAgC,CAAC;AACvC,QAAM,UAAmD,CAAC;AAC1D,MAAI,UAAqB,CAAC;AAC1B,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAChD,QAAI,SAAS,QAAS,WAAU,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AAAA,aACvD,SAAS,oBAAoB,aAAa,IAAI,EAAG,SAAQ,IAAI,IAAI,MAAM,MAAM,KAAK;AAAA,QACtF,MAAK,IAAI,IAAI;AAAA,EACpB;AACA,MAAI,KAAK,OAAO,OAAW,MAAK,KAAK,OAAO;AAC5C,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IAAI,MAAM;AAAA,IAAG,SAAS,OAAO;AAAA,IAAS,YAAY,OAAO;AAAA,IACpE;AAAA,IAAM;AAAA,IAAS;AAAA,IAAS,SAAS;AAAA,EACnC;AACF;AAOO,SAAS,iBACd,MACA,SACA,SACyB;AACzB,QAAM,OAAgC,EAAE,GAAG,KAAK;AAChD,aAAW,QAAQ,YAAa,MAAK,IAAI,IAAI,CAAC;AAC9C,QAAM,OAAgC,CAAC;AACvC,OAAK,gBAAgB,IAAI;AACzB,aAAW,CAAC,YAAY,KAAK,KAAK,KAAK,SAAS;AAC9C,QAAI,eAAe,kBAAkB;AACnC,WAAK,GAAG,IAAI;AAAA,IACd,OAAO;AACL,YAAM,OAAQ,MAAM,QAAQ,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,IAAK,KAAK,UAAU,IAAI,CAAC;AACxF,WAAK,KAAK,KAAK;AAAA,IACjB;AAAA,EACF;AACA,OAAK,QAAQ;AACb,SAAO;AACT;AAeO,IAAM,cAAN,MAAmC;AAAA,EAChC,OAAO,oBAAI,IAAkB;AAAA,EAErC,OAA0B;AACxB,UAAM,MAAyB,CAAC;AAChC,eAAW,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM;AAC/B,YAAM,UAA4C,CAAC;AACnD,iBAAW,CAAC,YAAY,KAAK,KAAK,EAAE,SAAS;AAC3C,mBAAW,CAAC,KAAK,KAAK,KAAK,MAAO,SAAQ,KAAK,CAAC,YAAY,KAAK,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,MACrF;AACA,UAAI,KAAK;AAAA,QACP;AAAA,QACA,MAAM,iBAAiB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,QAAQ,IAAI,OAAK,KAAK,MAAM,CAAC,CAAC,GAAG,OAAO;AAAA,QACrF,SAAS,EAAE;AAAA,QACX,YAAY,EAAE;AAAA,MAChB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,QAA+B;AAClC,SAAK,MAAM,iBAAiB,MAAM,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,QAA2B;AAG/B,UAAM,OAAO,KAAK,UAAU,OAAO,IAAI;AACvC,UAAM,UAAU,OAAO,QAAQ,IAAI,OAAK,KAAK,UAAU,CAAC,CAAC;AACzD,UAAM,UAAU,OAAO,QAAQ,OAAO,OAAO,EAAE,IAAI,CAAC,CAAC,YAAY,KAAK,MACpE,CAAC,YAAY,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MACjD,CAAC,KAAK,UAAU,QAAQ,UAAU,SAAY,OAAO,KAAK,UAAU,KAAK,CAAC,CAAU,CAAC,CAAU;AACnG,QAAI,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE;AAC/B,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,QAAQ,IAAI,EAAE,QAAQ,SAAS;AACrC,UAAI,UAAU,OAAO,KAAM,OAAM,IAAI,mBAAmB,OAAO,IAAI,OAAO,OAAO,IAAI;AAAA,IACvF;AACA,QAAI,CAAC,KAAK,OAAO,SAAS;AACxB,UAAI,EAAE,MAAM,MAAM,SAAS,GAAG,YAAY,IAAI,SAAS,CAAC,GAAG,SAAS,oBAAI,IAAI,EAAE;AAAA,IAChF;AACA,eAAW,SAAS,QAAS,GAAE,QAAQ,KAAK,KAAK;AACjD,eAAW,CAAC,YAAY,KAAK,KAAK,SAAS;AACzC,UAAI,OAAO,EAAE,QAAQ,IAAI,UAAU;AACnC,UAAI,CAAC,KAAM,GAAE,QAAQ,IAAI,YAAa,OAAO,oBAAI,IAAI,CAAE;AACvD,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO;AAChC,YAAI,UAAU,KAAM,MAAK,OAAO,GAAG;AAAA,YAC9B,MAAK,IAAI,KAAK,KAAK;AAAA,MAC1B;AAAA,IACF;AACA,MAAE,OAAO;AACT,MAAE,UAAU,OAAO;AACnB,MAAE,aAAa,OAAO;AACtB,SAAK,KAAK,IAAI,OAAO,IAAI,CAAC;AAAA,EAC5B;AAAA,EAEA,OAAO,IAAkB;AACvB,SAAK,KAAK,OAAO,EAAE;AAAA,EACrB;AACF;;;ACjSO,IAAM,aAAN,cAA+B,IAAU;AAAA;AAAA,EAErC,QAAQ,oBAAI,IAAO;AAAA,EACnB;AAAA,EAET,YAAY,SAAkB;AAC5B,UAAM;AACN,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,UAAmB;AACzB,WAAO,KAAK,QAAQ,WAAW,KAAK,QAAQ,QAAQ;AAAA,EACtD;AAAA,EAEQ,WAAiB;AACvB,QAAI,KAAK,QAAQ,EAAG,YAAW,OAAO,MAAM,KAAK,EAAG,MAAK,MAAM,IAAI,GAAG;AAAA,EACxE;AAAA,EAES,IAAI,KAAuB;AAClC,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,UAAU,UAAa,KAAK,QAAQ,EAAG,MAAK,MAAM,IAAI,GAAG;AAC7D,WAAO;AAAA,EACT;AAAA,EAES,IAAI,KAAQ,OAAgB;AACnC,QAAI,KAAK,QAAQ,QAAS,MAAK,MAAM,IAAI,GAAG;AAC5C,WAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EAC7B;AAAA,EAES,OAAO,KAAiB;AAC/B,UAAM,MAAM,MAAM,OAAO,GAAG;AAC5B,QAAI,OAAO,KAAK,QAAQ,QAAS,MAAK,MAAM,IAAI,GAAG;AACnD,WAAO;AAAA,EACT;AAAA,EAES,QAAc;AACrB,QAAI,KAAK,QAAQ,QAAS,YAAW,OAAO,MAAM,KAAK,EAAG,MAAK,MAAM,IAAI,GAAG;AAC5E,UAAM,MAAM;AAAA,EACd;AAAA,EAES,SAAyB;AAChC,SAAK,SAAS;AACd,WAAO,MAAM,OAAO;AAAA,EACtB;AAAA,EAES,UAA+B;AACtC,SAAK,SAAS;AACd,WAAO,MAAM,QAAQ;AAAA,EACvB;AAAA,EAEA,CAAU,OAAO,QAAQ,IAAyB;AAChD,SAAK,SAAS;AACd,WAAO,MAAM,OAAO,QAAQ,EAAE;AAAA,EAChC;AAAA,EAES,QAAQ,UAAsD,SAAyB;AAC9F,SAAK,SAAS;AACd,UAAM,QAAQ,UAAU,OAAO;AAAA,EACjC;AAAA;AAAA,EAGA,KAAK,KAAuB;AAC1B,WAAO,MAAM,IAAI,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,UAAa,KAA2C;AACtE,SAAO,IAAI,UAAU,OAAO,KAAK,GAAG;AACtC;AAGO,SAAS,WAAiB,KAA0C;AACzE,SAAO,IAAI,UAAU,QAAQ,KAAK,GAAG;AACvC;;;AC7DO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EACA;AAAA,EACT,YAAY,MAAc,SAAiB,MAAgB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAMO,SAAS,KACd,OACA,QACA,QACiB;AACjB,QAAM,WAAqB;AAAA,IACzB,SAAS;AAAA,IACT,IAAI,MAAM,IAAI,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACA,QAAM,MAAM,MAAM,SAAS,QAAQ;AACnC,MAAI,IAAI,OAAO;AACb,UAAM,IAAI,iBAAiB,IAAI,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI;AAAA,EAC9E;AACA,SAAO,IAAI;AACb;AAWO,SAAS,QAAQ,OAAoB;AAC1C,QAAM,IAAI,CAAuB,GAAM,MAAuB,KAAK,OAAO,GAAG,CAAC;AAE9E,SAAO;AAAA,IACL,WAAW;AAAA,MACT,QAAc,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MACpF,UAAc,CAAC,MAA8C,EAAE,sBAAsB,CAAC;AAAA,MACtF,cAAc,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,MACX,MAAY,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MAClF,OAAY,CAAC,MAA8C,EAAE,qBAAqB,CAAC;AAAA,MACnF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,MACxF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC1F;AAAA,IACA,MAAM;AAAA,MACJ,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,UAAU,CAAC,MAAqC,EAAE,iBAAiB,CAAC;AAAA,MACpE,OAAU,CAAC,MAAqC,EAAE,cAAc,CAAC;AAAA,IACnE;AAAA,IACA,QAAQ;AAAA,MACN,SAAS,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACrE,OAAS,CAAC,MAAsC,EAAE,gBAAgB,CAAC;AAAA,IACrE;AAAA,IACA,QAAQ;AAAA,MACN,SAAU,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACvE,QAAU,CAAC,MAAuC,EAAE,iBAAiB,CAAC;AAAA,MACtE,UAAU,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IAC1E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,OAAO,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACnE,MAAO,CAAC,MAAsC,EAAE,iBAAiB,CAAC;AAAA,IACpE;AAAA,IACA,SAAS;AAAA,MACP,KAAQ,CAAC,MAAsC,EAAE,eAAe,CAAC;AAAA,MACjE,QAAQ,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,IACtE;AAAA,IACA,YAAY;AAAA,MACV,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,SAAS,CAAC,MAA0C,EAAE,sBAAsB,CAAC;AAAA,MAC7E,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,OAAS,CAAC,MAA0C,EAAE,oBAAoB,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,MACvE,QAAS,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACtE,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,SAAS;AAAA,MACP,OAAmB,CAAC,MAAiD,EAAE,iBAAiB,CAAC;AAAA,MACzF,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,WAAmB,CAAC,MAAiD,EAAE,qBAAqB,CAAC;AAAA,MAC7F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,kBAAmB,CAAC,MAAiD,EAAE,4BAA4B,CAAC;AAAA,IACtG;AAAA,IACA,OAAO;AAAA,MACL,MAAiB,CAAC,MAA6C,EAAE,cAAc,CAAC;AAAA,MAChF,iBAAiB,CAAC,MAA6C,EAAE,yBAAyB,CAAC;AAAA,MAC3F,gBAAiB,CAAC,MAA6C,EAAE,wBAAwB,CAAC;AAAA,MAC1F,cAAiB,CAAC,MAA6C,EAAE,sBAAsB,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;;;ACmPO,SAAS,OAAO,GAAS,SAAwB;AACtD,QAAM,QAA8B,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,EAAE;AACzE,SAAO,MAAM,CAAC,KAAK,MAAM,OAAO;AAClC;;;AClXA,IAAM,YAAY;AAMlB,SAAS,eAAe,aAAqB,QAAiB,QAAyC;AACrG,SAAO;AAAA,IACL,WAAW;AAAA,MACT,KAAK;AAAA;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,YAAY,EAAE,KAAK,aAAa,KAAK,KAAK;AAAA,MAC1C,gBAAgB;AAAA,IAClB;AAAA,IACA,SAAS,aAAa,MAAM,EAAE,SAAS,OAAO;AAAA,IAC9C,WAAW;AAAA,EACb;AACF;AAEO,SAAS,mBAAmB,OAA0B;AAC3D,QAAM,SAAS,IAAI,yBAAyB,CAAC,MAAM;AACjD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,SAAU,EAAE,UAAqB;AAEvC,QAAI,CAAC,MAAM,QAAQ,gBAAgB;AACjC,YAAM,aAAa,GAAG,MAAM,MAAM,SAAS,KAAK,EAAE,IAAI,OACpD,eAAe,GAAG,IAAI,YAAY,CAAC,GAAG,MAAM,CAAC;AAC/C,aAAO,EAAE,QAAQ;AAAA,QACf;AAAA,QACA,MAAM;AAAA,MACR,EAAC;AAAA,IACH;AACA,UAAM,WAAsB,CAAC;AAC7B,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAClD,YAAM,YAAY,eAAe,GAAG,IAAI,YAAY,KAAK,GAAG,MAAM;AAClE,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,QAAQ,eAAe,SAAS;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,2BAA2B,GAAG,EAAE,EAAE;AAAA,MAClF;AACA,UAAI,YAAY,MAAM;AACpB,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,6BAA6B,MAAM,GAAG;AAAA,QAAE,EAAE;AAAA,MAC9C;AACA,eAAS,KAAK,EAAE,KAAK,MAAM,KAAK,QAAQ,CAAC;AAAA,IAC3C;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;AAAA,EAChC,CAAC;AAED,QAAM,SAAS,IAAI,wBAAwB,CAAC,MAAM;AAChD,UAAM,UAAU,EAAE;AAClB,QAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,MAAM,QAAQ,oBAAoB;AACpC,UAAI;AACJ,UAAI;AAAE,aAAK,CAAC,CAAC,MAAM,QAAQ,mBAAmB,OAAkC;AAAA,MAAG,SAC5E,GAAG;AACR,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,iBAAiB,GAAG,EAAE,EAAE;AAAA,MAC5E;AACA,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,wBAAwB,EAAE;AACrF,aAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,IACtC;AACA,WAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,6DAA6D,EAAE;AAAA,EACnH,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,EAAE,GAAG,iBAAiB,MAAM,QAAQ,cAAc;AACpD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AAKA,QAAI,EAAE,aAAa,UAAa,EAAE,WAAW,QAAW;AACtD,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,MAEF,EAAE;AAAA,IACJ;AAOA,QAAI,QAAQ,GAAG,MAAM,UAAU,OAAK,EAAE,aAAa,IAAI;AACvD,QAAI,QAAQ,EAAG,SAAQ,GAAG,MAAM;AAChC,UAAM,SAAmB,CAAC;AAC1B,QAAI,OAAO;AACX,QAAI,SAAS;AACb,eAAW,KAAK,GAAG,MAAM,MAAM,KAAK,GAAG;AAIrC,YAAM,eAAe,UAAU,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC/E,eAAS;AAGT,UAAI,EAAE,cAAc,cAAc;AAChC,eAAO,KAAK,OAAO,EAAE,GAAG,sBAAsB;AAAA,MAChD;AAGA,UAAI,CAAC,kBAAkB,CAAC,GAAG;AACzB,eAAO,KAAK,OAAO,EAAE,GAAG,mBAAmB;AAC3C,eAAO;AACP,iBAAS;AACT;AAAA,MACF;AACA,aAAO,SAAS,YAAY,CAAC,GAAG,YAAY;AAAA,IAC9C;AAMA,UAAM,aAAc,GAAG,eAAe,UAAa,GAAG,eAAe,OACjE,YAAY,GAAG;AACnB,QAAI,SAAS,YAAY;AACvB,aAAO,KAAK,wDAAwD;AAAA,IACtE;AACA,QAAI,OAAO,QAAQ;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IACxD;AACA,UAAM,eAAmB,GAAG,MAAM;AAClC,UAAM,iBAAmB,eAAe;AACxC,UAAM,mBAAmB;AAMzB,QAAI,mBAAmB,GAAG;AACxB,aAAO,EAAE,QAAQ;AAAA,QACf,QAAmB;AAAA,QACnB,IAAmB;AAAA,QACnB,QAAmB;AAAA,QACnB,eAAmB;AAAA,QACnB,iBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,QAC9D,YAAmB;AAAA,MACrB,EAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,QAAmB;AAAA,MACnB,IAAmB;AAAA,MACnB,eAAmB;AAAA,MACnB,iBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,MAC9D,YAAmB;AAAA,IACrB,EAAC;AAAA,EACH,CAAC;AACH;;;ACrKA,IAAM,cAAc,oBAAI,IAAU,CAAC,UAAU,SAAS,YAAY,CAAC;AACnE,IAAM,eAAe,oBAAI,IAAI,CAAC,QAAQ,eAAe,WAAW,CAAC;AAE1D,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,gBAAgB,KAAK,KAAK,OAAO,EAAE;AAAA,MACxF;AACA,WAAK,SAAS;AACd,YAAM,QAAQ,KAAK;AACnB,UAAI,UAAU,SAAU,MAAK,cAAc;AAC3C,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,UAAU,MAAM,OAAO,KAAK,GAAG,CAAC;AACxG,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AACpG,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QAAe,iBAAiB;AAAA,QAAK,QAAQ;AAAA,QACpD,kBAAmB,EAAE,oBAA+B;AAAA,MACtD,EAAC;AAAA,IACH;AAEA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,UAAU;AAC3B,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,MACzF;AACA,WAAK,SAAS;AACd,YAAM,WAAsB,KAAK,eAAe;AAChD,WAAK,cAAc;AACnB,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,SAAS,CAAC;AAClF,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,OAAO,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AACpG,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ,EAAE,OAAO,eAAe,iBAAiB,KAAK,QAAQ,MAAM,EAAE;AAAA,IACjF;AACA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,IACzF;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,aAAa,MAAM,EAAE,OAA6B,CAAC;AAC3H,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,WAAW,GAAG;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,UAAoB,MAAM,QAAQ,EAAE,OAAO,IAC7C,CAAC,GAAG,EAAE,OAAmB,IACzB,CAAC,WAAW,cAAc,cAAc;AAC5C,UAAM,QAAiC,CAAC;AACxC,QAAI,QAAQ,SAAS,SAAS,GAAG;AAE/B,YAAM,UAAU,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,QAAM;AAAA,QAC1D,KAAK,EAAE;AAAA,QAAK,MAAM,EAAE;AAAA,QACpB,GAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,QACjC,GAAI,EAAE,QAAQ,SAAS,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,MACjD,EAAE;AACF,UAAI,QAAQ,OAAQ,OAAM,UAAU;AAAA,IACtC;AACA,QAAI,QAAQ,SAAS,YAAY,GAAG;AAClC,YAAM,QAAQ,MAAM,KAAK,UAAU,GAAG,KAAK,CAAC,EACzC,OAAO,OAAK,EAAE,UAAU,eAAe,EAAE,UAAU,cAAc,EAAE,UAAU,eAAe,EAAE,UAAU,YAAY,EACpH,IAAI,QAAM;AAAA,QAAE,IAAI,EAAE;AAAA,QAAI,MAAM,EAAE;AAAA,QAAM,OAAO,EAAE;AAAA,QAC5C,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,EAAE;AACJ,UAAI,MAAM,OAAQ,OAAM,aAAa;AAAA,IACvC;AACA,QAAI,QAAQ,SAAS,cAAc,EAAG,OAAM,eAAe,GAAG;AAC9D,QAAI,QAAQ,SAAS,QAAQ,KAAK,GAAG,mBAAoB,OAAM,qBAAqB,GAAG;AACvF,QAAI,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,KAAK,EAAG,OAAM,YAAY,GAAG,MAAM;AAIrF,UAAM,UAAuC,gBAAgB;AAAA,MAC3D,WAAW,GAAG;AAAA,MACd,WAAW,GAAG,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAgB,IAAI,CAAC;AAAA,IAChD,CAAC;AACD,UAAM,SAAS,MAAM,IAAI,WAAW;AACpC,UAAM,OAAyB;AAAA,MAC7B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa,MAAM,IAAI;AAAA,MACvB,aAAa,EAAE;AAAA,MACf,cAAc,YAAY,OAAO;AAAA,MACjC;AAAA,IACF;AACA,OAAG,UAAU,IAAI,QAAQ,IAAI;AAC7B,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,sBAAsB;AAAA,QACtB,WAAW,KAAK,QAAQ;AAAA,QACxB,UAAU,gBAAgB,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,SAAU,EAAE,2BACD,EAAE,wBACF,EAAE;AACnB,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AACvF,UAAM,OAAO,GAAG,UAAU,IAAI,MAAM;AACpC,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,qBAAqB,MAAM,EAAE,EAAE;AACjG,QAAI,MAAM,QAAQ,EAAE,eAAe,KAAK,EAAE,gBAAgB,WAAW,GAAG;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAkB,EAAE,mBAAgC,KAAK,QAAQ;AACvE,UAAM,WAAqB,CAAC;AAC5B,QAAI,KAAK,SAAS,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc;AACpE,SAAG,eAAe,KAAK,QAAQ,MAAM;AACrC,eAAS,KAAK,cAAc;AAAA,IAC9B;AACA,QAAI,KAAK,SAAS,SAAS,KAAK,MAAM,QAAQ,KAAK,QAAQ,MAAM,OAAO,GAAG;AACzE,YAAM,YAAY,oBAAI,IAAqC;AAC3D,iBAAW,KAAK,KAAK,QAAQ,MAAM,SAA2C;AAC5E,kBAAU,IAAI,EAAE,KAAe,CAAC;AAAA,MAClC;AACA,iBAAW,CAAC,KAAK,KAAK,KAAK,WAAW;AACpC,YAAI,GAAG,QAAQ,IAAI,GAAG,GAAG;AACvB,gBAAM,MAAM,GAAG,QAAQ,IAAI,GAAG;AAC9B,cAAI,OAAQ,MAAM,QAAmB,IAAI;AACzC,cAAI,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,MAAkB,IAAI;AAAA,QAC7E;AAAA,MACF;AACA,eAAS,KAAK,SAAS;AAAA,IACzB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,gBAAgB;AAAA,MAAQ,WAAW,KAAK,QAAQ;AAAA,MAAW;AAAA,MAC3D,GAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAiB,IAAI,CAAC;AAAA,IACnD,EAAC;AAAA,EACH,CAAC;AAED,QAAM,SAAS,IAAI,qBAAqB,CAAC,MAAM;AAC7C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,EAAE;AAChB,UAAM,MAAM,GAAG,MAAM,IAAI,KAAK;AAC9B,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC7D,UAAM,UAAW,EAAE,kBAA8C,CAAC;AAClE,QAAI,CAAC,QAAQ,MAAM;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AACA,UAAM,WAAY,QAAQ,YAAuB,IAAI;AACrD,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,gBAAiB,QAAQ,QAAiB,IAAI;AACpD,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,QAAQ,oBAAoB,UAAa,QAAQ,oBAAoB,QAClE,OAAO,QAAQ,oBAAoB,WAAW;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kDAAkD,EAAE;AAAA,IACzF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,UAAM,QAAQ,MAAM,IAAI,OAAO;AAC/B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAM,QAAQ;AAAA,MACd,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,QAAQ,SAAqC,CAAC;AAAA,MACtD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,YAAY,IAAI;AAAA,MAChB,SAAS,CAAC;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAgB,OAAO;AAAA,QACxC,MAAM,cAAc,IAAI,EAAE,KAAM,EAAE,UAAqB,EAAE;AAAA,MAAG,CAAC;AAAA,MACzE,QAAQ;AAAA,IACV;AAMA,QAAI,IAAI,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACxG,cAAQ,kBAAkB;AAAA,IAC5B,WAAW,qBAAqB,SAAS;AACvC,cAAQ,kBAAkB,CAAC,CAAC,QAAQ;AAAA,IACtC;AACA,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,QAAI,QAAQ;AACZ,QAAI,gBAAgB;AACpB,QAAI,aAAa;AACjB,QAAI,QAAQ,KAAK;AAAA,MAAE,IAAI;AAAA,MAAK,MAAM,EAAE;AAAA,MAAgB,OAAO;AAAA,MACxC,MAAM,MAAM,KAAK,KAAM,EAAE,UAAqB,EAAE;AAAA,IAAG,CAAC;AACvE,WAAO,EAAE,QAAQ,EAAE,oBAAoB,IAAI,IAAI,aAAa,OAAO,QAAQ,EAAE,OAA6B,EAAE;AAAA,EAC9G,CAAC;AAED,QAAM,SAAS,IAAI,4BAA4B,CAAC,MAAM;AACpD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,IAAK,EAAE,eAAyB,EAAE;AACxC,QAAI,CAAC,YAAY,IAAI,CAAC,GAAG;AACvB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6CAA6C,EAAE;AAAA,IACpF;AACA,OAAG,eAAe;AAClB,WAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,cAAc,QAAQ,EAAE,OAA6B,EAAE;AAAA,EAC7F,CAAC;AACH;;;AClQA,SAAS,UAAU,MAAgE;AACjF,MAAI,KAAK,SAAS,GAAG,GAAG;AACtB,UAAM,CAAC,MAAM,GAAG,IAAI,KAAK,MAAM,KAAK,CAAC;AACrC,QAAI,SAAS,SAAU,QAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,SAAS,KAAK,EAAE,EAAE,EAAE;AACvE,QAAI,SAAS,mBAAmB,SAAS,2BAA2B;AAClE,aAAO,EAAE,MAAM,QAAQ,EAAE,WAAW,WAAW,GAAG,EAAE,EAAE;AAAA,IACxD;AAAA,EACF;AACA,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO,EAAE,MAAM,MAAM,QAAQ,CAAC,EAAE;AAC3F,QAAM,IAAI,MAAM,iBAAiB,IAAI,EAAE;AACzC;AAEA,SAAS,eAAe,OAA8C;AACpE,QAAM,SAAS,UAAU,MAAM,IAAI;AACnC,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,SAAS,MAAM,MAAM,OAAO,OAAK,EAAE,iBAAiB,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;AACpF,QAAM,UAAU,MAAM,WAAW,CAAC;AAElC,QAAM,WAAW,CAAC,OAChB,GAAG,OAAO,CAAC,GAAG,MAAM,KAAK,QAAQ,EAAE,KAAK,KAAK,IAAM,CAAC;AAEtD,MAAI,OAAO,SAAS,oBAAoB;AACtC,WAAO;AAAA,MACL,SAAS,IAAI,UAAU,IAAI,aAAa;AAAA,MACxC,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,eAAe;AACjC,UAAM,SAAS,IAAI,WAAW,MAAM,aAAa,UAAU,IAAI,WAAW;AAC1E,WAAO;AAAA,MACL,SAAS,SAAS,aAAa;AAAA,MAC/B,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,IAAI,OAAO,OAAO;AACxB,UAAM,OAAO,IAAI,SAAS,IAAI;AAC9B,QAAI,OAAO,GAAG;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,QAAQ;AAAA,QAAkB,MAAM,MAAM;AAAA,QAC3D,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,QAAG,QAAQ,CAAC;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,MACL,SAAS,IAAI,SAAS,IAAI,SAAS,aAAa;AAAA,MAChD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,MAAI,OAAO,SAAS,iBAAiB;AACnC,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,MAAI,OAAO,SAAS,2BAA2B;AAC7C,QAAI,OAAO,QAAQ;AACjB,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,MAAM,MAAM;AAAA,QACjC,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE;AAAA,QACxB,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,MACjC;AAAA,IACF;AACA,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO,EAAE,SAAS,SAAS,MAAM,MAAM,MAAM,QAAQ,oBAAoB,OAAO,IAAI,GAAG;AACzF;AAEO,SAAS,qBAAqB,OAA0B;AAC7D,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,EAAE,MAAM,EAAE;AACrB,UAAM,eAAyB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACvG,QAAI,CAAC,aAAa,QAAQ;AACxB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,QAAI;AAAE,gBAAU,EAAE,IAAc;AAAA,IAAG,SAC5B,GAAG;AACR,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,GAAG,EAAE;AAAA,IACtD;AACA,UAAM,KAAM,EAAE,mBAA8B,MAAM,IAAI,eAAe;AACrE,UAAM,QAAsB;AAAA,MAC1B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,QAAQ,EAAE;AAAA,MACV;AAAA,MACA,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,OAAO;AAAA,MACP,UAAU,CAAC;AAAA,MACX,OAAO,CAAC;AAAA,MACR,WAAW,MAAM,IAAI;AAAA,IACvB;AACA,OAAG,cAAc,IAAI,IAAI,KAAK;AAC9B,WAAO,EAAE,QAAQ,EAAE,iBAAiB,IAAI,OAAO,OAAO,EAAE;AAAA,EAC1D,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,UAAM,SAAS,KAAK;AAAA,MAClB,IAAI,MAAM,IAAI;AAAA,MACd,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,WAAuB,EAAE,QAAmB;AAAA,IACvD,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,IAAI,EAAE;AACZ,QAAI,MAAM,SAAS,MAAM,SAAS,MAAM,WAAW;AACjD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8BAA8B,EAAE;AAAA,IACrE;AACA,UAAM,QAAQ,EAAE;AAChB,QAAI,CAAC,MAAM,aAAa,SAAS,KAAK,GAAG;AACvC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,SAAS,KAAK;AAAA,MAA0B,EAAE;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM,KAAK,OAAK,EAAE,UAAU,KAAK,GAAG;AAC5C,aAAO,EAAE,OAAO,SAAS,EAAE,qBAAqB,SAAS,KAAK,oBAAoB,EAAE;AAAA,IACtF;AACA,UAAM,MAAM,KAAK;AAAA,MACf,IAAI,MAAM,IAAI;AAAA,MACd;AAAA,MACA,MAAM;AAAA,MACN,QAAQ,EAAE;AAAA,MACV,SAAS,EAAE;AAAA,MACX,cAAc,CAAC,CAAC,EAAE;AAAA,IACpB,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,SAAU,QAAO,EAAE,QAAQ,MAAM,QAAS;AAC9D,UAAM,QAAQ;AACd,UAAM,UAAU,eAAe,KAAK;AACpC,WAAO,EAAE,QAAQ,MAAM,QAAQ;AAAA,EACjC,CAAC;AACH;;;AC1LO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,OAAO,GAAG;AACvC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,EAAE;AACpB,QAAI,OAAO,cAAc,YAAY,CAAC,UAAU,WAAW,QAAQ,GAAG;AACpE,UAAI,CAAC,GAAG,QAAQ,IAAI,SAAS,GAAG;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,aAAa,SAAS;AAAA,QAAkB,EAAE;AAAA,MAC9C;AAAA,IACF;AACA,UAAM,UAAU,EAAE;AAClB,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,CAAC,QAAQ,QAAQ;AAC9C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AACA,UAAM,WAA8B,CAAC;AACrC,eAAW,KAAK,SAA2C;AACzD,YAAM,MAAM,EAAE;AACd,UAAI,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,GAAG;AAC9B,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,GAAG,EAAE,EAAE;AAAA,MACxE;AACA,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,UAAI,KAAK,aAAa,UAAU;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,QAAQ,GAAG,iCAAiC,QAAQ;AAAA,QAAE,EAAE;AAAA,MAC5D;AACA,eAAS,KAAK;AAAA,QACZ,SAAS;AAAA,QACT,OAAO,EAAE;AAAA,QACT,gBAAgB,EAAE;AAAA,QAClB,aAAa,EAAE;AAAA,QACf,UAAW,EAAE,YAAqC,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AACA,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,UAAU;AAC3D,UAAM,KAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,MAAM,IAAI;AAAA,MACvB,OAAO;AAAA,MACP,SAAS,EAAE;AAAA,MACX,eAAgB,EAAE,iBAA0C,CAAC;AAAA,MAC7D,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,EAAE;AACtB,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,YAAY,UAAU,SAAS,IAAI,OAAK,EAAE,OAAO,EAAE,EAAE;AAAA,EACjG,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,QAAI,GAAG,UAAU,WAAW,QAAQ,GAAG;AACrC,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF,OAAO;AACL,UAAI,aAAa,GAAG,WAAW;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAqC,EAAE;AAAA,MAC3C;AACA,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF;AAGA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAEA,QAAI,MAAM,QAAQ,EAAE,iBAAiB,KAAK,EAAE,kBAAkB,WAAW,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AACA,UAAM,WAAW,IAAI,IAAI,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO,CAAC;AACrD,UAAM,cAAwB,MAAM,QAAQ,EAAE,iBAAiB,IAC3D,CAAC,GAAG,EAAE,iBAA6B,IACnC,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO;AAC/B,eAAW,OAAO,aAAa;AAC7B,UAAI,CAAC,SAAS,IAAI,GAAG,GAAG;AACtB,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,QAAQ,GAAG,sBAAsB,EAAE;AAAA,MACxE;AAAA,IACF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,eAAW,OAAO,aAAa;AAC7B,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,WAAK,WAAW;AAChB,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAChB,IAAI;AAAA,QAAK,MAAM;AAAA,QAAU,OAAO,KAAK;AAAA,QACrC,MAAM,yBAAyB,GAAG,QAAQ;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,OAAG,QAAQ;AACX,OAAG,cAAc;AACjB,OAAG,oBAAoB,CAAC,GAAG,WAAW;AACtC,OAAG,iBAAiB,EAAE;AACtB,OAAG,cAAc;AACjB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,UAAU,CAAC,GAAG,WAAW,GAAG,UAAU,SAAS,EAAE;AAAA,EACtF,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,OAAG,iBAAiB,EAAE;AACtB,OAAG,2BAA2B,EAAE;AAChC,QAAI,CAAC,GAAG,UAAU,WAAW,QAAQ,KAAK,aAAa,GAAG,WAAW;AACnE,SAAG,QAAQ;AACX,SAAG,cAAc,MAAM,IAAI;AAAA,IAC7B;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,GAAG,MAAM,EAAE;AAAA,EACvD,CAAC;AACH;;;ACnIA,IAAM,OAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAE/E,SAAS,aAAa,OAIpB;AACA,QAAM,OAAQ,MAAM,eAA0B;AAC9C,MAAI,OAAO;AACX,MAAI;AAAE,WAAO,OAAO,MAAM,cAAc,CAAG;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAK;AACpE,MAAI,MAAM,IAAI,EAAG,QAAO;AACxB,QAAM,IAAI,KAAK,IAAI,KAAK;AACxB,MAAI,KAAK,EAAG,QAAO,EAAE,OAAO,QAAQ,SAAS,oCAAoC;AACjF,MAAI,MAAM,KAAK,OAAO,IAAK,QAAO,EAAE,OAAO,QAAQ,SAAS,mDAAmD;AAC/G,MAAI,MAAM,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,QAAQ,SAAS,oDAAoD;AAClH,MAAI,KAAK,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,cAAc,UAAU,KAAM,SAAS,gDAAgD;AACnI,SAAO,EAAE,OAAO,cAAc,UAAU,MAAM,SAAS,qCAAqC;AAC9F;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,cAAc,CAAC,MAAM;AACtC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,EAAE,eAAe,UAAa,EAAE,eAAe,QAAQ,CAAC,MAAM,QAAQ,EAAE,UAAU,GAAG;AACvF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,aAAc,EAAE,cAA8C,CAAC;AACrE,QAAI,CAAC,WAAW,QAAQ;AACtB,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,4BAA4B,EAAE;AAAA,IACrF;AACA,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,eAAe;AAC/B,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,cAAc,MAAM,CAAC,GAAG,UAAU,CAAC;AAC3D,mBAAW,EAAE;AACb,oBAAY,EAAE;AAAA,MAChB,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,yBAAyB,GAAG,EAAE,EAAE;AAAA,MACzF;AAAA,IACF,OAAO;AAIL,YAAM,WAAW,CAAC,MAAgB,OAAO,MAAM,WAAW,GAAG,QAAQ,IAAI,CAAC,IAAI;AAC9E,YAAM,WAAW,WAAW,OAAO,OAAK;AAAE,cAAM,IAAI,SAAS,CAAC;AAAG,eAAO,CAAC,CAAC,KAAK,CAAC,EAAE;AAAA,MAAQ,CAAC;AAC3F,UAAI,CAAC,SAAS,QAAQ;AACpB,eAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,sDAAsD,EAAE;AAAA,MACnH;AACA,iBAAW,SAAS,CAAC;AACrB,YAAM,eAAsE,CAAC;AAC7E,UAAI,SAAS;AACb,iBAAW,KAAK,YAAY;AAC1B,cAAM,IAAI,SAAS,CAAC;AACpB,YAAI,CAAC,EAAG;AACR,YAAI,EAAE,OAAQ,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,SAAS,CAAC;AAAA,iBAClE,CAAC,OAAQ,UAAS;AAAA,YACtB,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,qBAAqB,CAAC;AAAA,MAChF;AACA,kBAAY;AAAA,QACV,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,YAAY,KAAK,UAAU,QAAQ,CAAC;AAAA,MAAkB,EAAE;AAAA,IAC5D;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,SAAK,WAAW;AAChB,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK;AAAA,MAAE,IAAI,KAAK;AAAA,MAAY,MAAM;AAAA,MAC3B,OAAO,KAAK;AAAA,MAAO,MAAM,aAAa,QAAQ;AAAA,IAAG,CAAC;AACtE,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAc,SAAS;AAAA,MACtC,aAAa;AAAA,MAAuB,aAAa,KAAK;AAAA,MACtD,MAAM,KAAK;AAAA,MACX,WAAW,UAAU;AAAA,MACrB,gBAAgB,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAAA,MAChD,WAAY,UAAU,WAAsB;AAAA,MAC5C,yBAAyB,UAAU;AAAA,IACrC;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,WAAO,EAAE,QAAQ,EAAE,UAAU,mBAAmB,OAAO,UAAU,EAAE;AAAA,EACrE,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,CAAC,MAAM;AACxC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,QAAiC;AAAA,MAAE,GAAI,KAAK,iBAAiB,CAAC;AAAA,MAC1B,GAAK,EAAE,0BAAsD,CAAC;AAAA,IAAG;AAC3G,QAAI,CAAC,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,6BAA6B,EAAE;AAAA,IAC1F;AACA,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,mBAAmB;AACnC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,kBAAkB,MAAM,KAAK;AACrD,gBAAQ,EAAE;AACV,mBAAW,EAAE;AACb,kBAAW,EAAE,UAAU,WAAsB;AAC7C,mBAAY,EAAE,UAAU,aAAwB;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,uBAAuB,GAAG,EAAE,EAAE;AAAA,MACvF;AAAA,IACF,OAAO;AACL,YAAM,IAAI,aAAa,KAAK;AAC5B,cAAQ,EAAE;AAAO,iBAAW,EAAE;AAAU,gBAAU,EAAE;AACpD,iBAAW;AAAA,IACb;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAgB,SAAS;AAAA,MACxC,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MAAI,WAAW;AAAA,MAC1B,gBAAgB;AAAA,MAAO,WAAW;AAAA,MAClC,GAAI,aAAa,SAAY,EAAE,sBAAsB,SAAS,IAAI,CAAC;AAAA,IACrE;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,UAAM,SAAkC;AAAA,MACtC;AAAA,MAAO,mBAAmB;AAAA,MAC1B,WAAW,EAAE,WAAW,UAAU,YAAY,OAAO,KAAK,KAAK,GAAG,QAAQ;AAAA,IAC5E;AACA,QAAI,aAAa,OAAW,QAAO,uBAAuB;AAC1D,WAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AAED,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,QAAQ,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAC9C,QAAI,UAAmB,IAAwB;AAC/C,QAAI,MAAM,QAAQ,kBAAkB;AAClC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,iBAAiB,MAAM,KAAK;AACpD,mBAAW,CAAC,CAAC,EAAE;AACf,aAAK,EAAE;AACP,eAAO,EAAE,kBAAkB,CAAC;AAAA,MAC9B,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,4BAA4B,GAAG,EAAE,EAAE;AAAA,MAC5F;AAAA,IACF,OAAO;AACL,YAAM,OAAQ,MAAM,eAA0B;AAC9C,UAAI,OAAO;AACX,UAAI;AAAE,eAAO,OAAO,MAAM,cAAc,CAAG;AAAA,MAAG,QAAQ;AAAE,eAAO;AAAA,MAAK;AACpE,UAAI,MAAM,IAAI,EAAG,QAAO;AACxB,YAAM,IAAI,KAAK,IAAI,KAAK;AACxB,iBAAW,KAAK,KAAM,KAAK,KAAK,OAAO;AACvC,WAAK,EAAE;AACP,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AACA,QAAI,UAAU;AACZ,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QAClC;AAAA,MAA8C,EAAE;AAClD,UAAI,CAAC,GAAG,WAAW,QAAQ,KAAK,CAAC,GAAG,QAAQ,IAAI,EAAE,GAAG;AACnD,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,qBAAqB,EAAE;AAAA,QAA2B,EAAE;AAAA,MACxD;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MACf,SAAS,WAAW,EAAE,UAAU,MAAM,GAAG,IAAI,EAAE,UAAU,MAAM;AAAA,MAC/D,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,MAChB,gBAAgB;AAAA,MAChB,WAAY,KAAK,WAAsB;AAAA,MACvC,GAAI,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;AAAA,IAC9C;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,QAAI,UAAU;AACZ,UAAI,MAAM,QAAQ,kBAAkB,IAAI;AACtC,YAAI;AAAE,gBAAM,QAAQ,eAAe,MAAM,EAAE;AAAA,QAAG,QAAQ;AAAA,QAAQ;AAAA,MAChE;AACA,aAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,IAAI,mBAAmB,OAAO,gBAAgB,KAAK,EAAE;AAAA,IAC1F;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,mBAAmB,MAAM,EAAE;AAAA,EACjE,CAAC;AACH;;;ACnNO,SAAS,uBAAuB,OAA0B;AAC/D,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,WAAW,SAAS,GAAG;AAC9C,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,IAAc;AAC9C,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,wBAAwB,EAAE,IAAI,EAAE,EAAE;AAC7F,UAAM,SAAS,EAAE;AACjB,UAAM,SAAS,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,MAAM;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,MAAM,QAAQ,EAAE,IAAI,EAAE,EAAE;AAC7F,QAAI,OAAO,WAAY,QAAO,EAAE,OAAO,SAAS,EAAE,iBAAiB,OAAO,MAAM,aAAa,EAAE;AAE/F,UAAM,SAAS,EAAE;AACjB,QAAI,CAAC,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0BAA0B,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,WAAO,cAAc;AACrB,WAAO,KAAK,KAAK;AAAA,MACf,KAAK;AAAA,MACL,KAAK,OAAO;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,SAAS,QAAQ,SAAS,OAAO,KAAK,YAAY,IAAI,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,cAAc,KAAK,GAAG;AACrC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,EAAE;AACjB,QAAI,WAAW,EAAE,YAAY;AAC3B,YAAM,SAAS,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI;AACjD,UAAI,CAAC,UAAU,OAAO,SAAS,SAAS;AACtC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAuD,EAAE;AAAA,MAC7D;AAAA,IACF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,UAAoB;AACpD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,mBAAmB,EAAE,UAAU,EAAE,EAAE;AAC9F,UAAM,MAAM,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG;AACjD,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,EAAE,GAAG,aAAa,EAAE;AACtF,UAAM,MAAM,MAAM,IAAI;AACtB,QAAI,aAAa;AACjB,QAAI,iBAAkB,EAAE,UAAqB;AAC7C,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,KAAK,IAAI,KAAK,YAAY,KAAK,QAAQ,IAAI,eAAe,EAAE;AAAA,EAChG,CAAC;AACH;;;AC5CA,SAAS,SAAS,IAAoB;AAAE,SAAO,IAAI,KAAK,EAAE,EAAE,QAAQ;AAAG;AAMvE,SAAS,QAAQ,GAAqB;AACpC,MAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAK,MAAM,GAAI,QAAO;AAChF,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,SAAS;AACxC,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,KAAK,CAAW,EAAE,SAAS;AACpE,SAAO;AACT;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,eAAe,CAAC,MAAM;AACvC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,WAAW,YAAY,eAAe,mBAAmB,GAAG;AACzF,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,QAAI,CAAC,GAAG,MAAM,IAAI,EAAE,OAAiB,GAAG;AACtC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAAA,IACrD;AACA,QAAI,EAAE,YAAY,UAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,QAAQ,EAAE,OAAO,GAAG;AAC9E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,EAAE;AAAA,IAC/D;AACA,UAAM,KAAK,EAAE;AACb,UAAM,QAAkB,MAAM,QAAQ,EAAE,IAAK,KAAkB,CAAC,EAAY;AAC5E,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,WAAW;AAC5D,UAAM,SAAwB;AAAA,MAC5B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,OAAO,EAAE;AAAA,MACT;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,UAAU,MAAM,IAAI;AAAA,MACpB,aAAa,OAAO,EAAE,WAAW;AAAA,MACjC,mBAAmB,EAAE;AAAA,MACrB,SAAU,EAAE,WAAwC;AAAA,MACpD,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,aAAa,OAAO,YAAY,EAAE;AAAA,EACvE,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,SAAS,IAAI,EAAE,UAAoB;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oBAAoB,EAAE;AAItE,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,OAAO,MAAM,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AAC1H,QAAI,WAAW;AACb,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,QAAQ,EAAE,EAAE;AAAA,MACpF;AAAA,IACF,WAAW,CAAC,OAAO,MAAM,SAAS,QAAQ,GAAG;AAC3C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gCAAgC,QAAQ,EAAE,EAAE;AAAA,IACzF;AACA,QAAI,OAAO,UAAU,YAAY;AAC/B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,0BAA0B,EAAE;AAAA,IACnF;AACA,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,wBAAwB,EAAE;AAAA,IACvE;AAGA,UAAM,eAAe,EAAE;AACvB,UAAM,YAAY,iBAAiB,UAAa,iBAAiB;AACjE,UAAM,aAAc,QAAQ,EAAE,MAAM,IAAI,EAAE,SAAS,EAAE;AACrD,QAAI,OAAO,WAAW,OAAO,QAAQ,QAAQ;AAC3C,UAAI,CAAC,WAAW;AACd,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oDAAoD,EAAE;AAAA,MAC3F;AACA,YAAM,QAAQ,IAAI,IAAI,OAAO,QAAQ,IAAI,OAAK,EAAE,EAAE,CAAC;AACnD,UAAI,CAAC,MAAM,IAAI,YAAY,GAAG;AAC5B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,iBAAiB,aAAa,YAAqB,EAAE,SAAS,OAAO,CAAC;AAAA,QAAoB,EAAE;AAAA,MAChG;AAAA,IACF,WAAW,CAAC,QAAQ,UAAU,KAAK,CAAC,WAAW;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AAEA,WAAO,QAAQ;AACf,WAAO,cAAc,MAAM,IAAI;AAC/B,WAAO,cAAc,EAAE;AACvB,WAAO,gBAAgB;AACvB,WAAO,cAAc;AACrB,WAAO,UAAU,EAAE;AACnB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,YAAY,OAAO,IAAI,SAAS,OAAO,QAAQ,EAAE;AAAA,EACtF,CAAC;AAGD,QAAM,qBAAqB,CAAC,aAAqB,QAA6B;AAC5E,UAAM,KAAK,MAAM,WAAW,IAAI,WAAW;AAC3C,QAAI,CAAC,GAAI,QAAO,CAAC;AACjB,UAAM,SAAS,SAAS,OAAO,MAAM,IAAI,CAAC;AAC1C,UAAM,UAAsB,CAAC;AAC7B,eAAW,UAAU,GAAG,SAAS,OAAO,GAAG;AACzC,UAAI,OAAO,UAAU,UAAW;AAChC,YAAM,QAAQ,SAAS,OAAO,QAAQ;AACtC,YAAM,WAAW,QAAQ,OAAO;AAChC,UAAI,SAAS,SAAU;AACvB,aAAO,QAAQ;AACf,aAAO,kBAAkB,OAAO;AAGhC,SAAG,SAAS,IAAI,OAAO,IAAI,MAAM;AACjC,YAAM,SAAmB;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,WAAW,GAAG;AAAA,UACd,MAAM;AAAA,UACN,IAAI,CAAC,OAAO,OAAO,GAAG,OAAO,KAAK;AAAA,UAClC,IAAI,MAAM,IAAI;AAAA,UACd,MAAM;AAAA,UACN,YAAY,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,UAKnB,SAAS,OAAO;AAAA,UAChB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AACA,YAAM,YAAY,IAAI,MAAM;AAC5B,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACF;;;AC7EO,IAAM,qBAAqB,oBAAI,IAAY;AAAA,EAChD;AAAA,EAAiB;AAAA,EAAkB;AAAA,EAAkB;AAAA,EACrD;AAAA,EAAoB;AAAA,EAAoB;AAAA,EACxC;AAAA,EACA;AAAA,EAA0B;AAC5B,CAAC;AAID,IAAM,sBAAsB,oBAAI,IAAY;AAAA,EAC1C;AAAA,EAAc;AAAA,EAAgB;AAAA,EAAiB;AACjD,CAAC;AAID,IAAM,oBAAoB,oBAAI,IAAY;AAAA,EACxC;AAAA,EAAsB;AAAA,EAAc;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA,EAI1D;AACF,CAAC;AAKD,IAAM,uBAAuB;AAG7B,IAAM,6BAA6B;AAMnC,IAAM,cAAc;AAEpB,SAAS,cAAc,OAAgB,OAAwB;AAC7D,QAAM,QAAkC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,SAAO,MAAM,QAAQ;AACnB,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,IAAI;AAChC,QAAI,QAAQ,MAAO,QAAO;AAC1B,QAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,iBAAW,KAAK,KAAM,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IACjD,WAAW,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpD,iBAAW,KAAK,OAAO,OAAO,IAA+B,EAAG,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IAC3F;AAAA,EACF;AACA,SAAO;AACT;AA2CA,SAAS,OAAO,SAA0B;AACxC,QAAM,IAAI,YAAY,SAAY,oBAAI,KAAK,IAAI,IAAI,KAAK,OAAO;AAC/D,SAAO,EAAE,YAAY,EAAE,QAAQ,eAAe,MAAM;AACtD;AAEA,SAAS,QAAQ,QAAiC,QAAiC;AACjF,aAAW,KAAK,OAAQ,KAAI,EAAE,KAAK,QAAS,QAAO;AACnD,SAAO;AACT;AAEA,SAAS,UAAU,GAA2E;AAC5F,QAAM,OAAO,EAAE;AACf,MAAI,SAAS,WAAc,CAAC,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AAC7F,WAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,EACvE;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAAuB;AAClD,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO;AAClE,MAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,UAAM,MAAM,KAAK,MAAM,UAAU,MAAM;AACvC,WAAO,WAAW,KAAK,GAAG,KAAK,SAAS,KAAK,EAAE,KAAK;AAAA,EACtD;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAA4G;AACnI,QAAM,YAAY,IAAI,IAAI,OAAO,UAAU,OAAO,OAAK,EAAE,SAAS,SAAS,EAAE,IAAI,OAAK,EAAE,QAAQ,CAAC;AACjG,QAAM,OAAO,OAAO,QAAQ;AAC5B,MAAI,SAAS,eAAe;AAG1B,UAAM,QAAQ,OAAO,aAAa,OAAO,OAAK,EAAE,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AACrG,QAAI,MAAM,WAAW,EAAG,QAAO,UAAU,QAAQ;AACjD,WAAO,MAAM,MAAM,OAAK,UAAU,IAAI,CAAC,CAAC;AAAA,EAC1C;AACA,MAAI,KAAK,WAAW,SAAS,EAAG,QAAO,UAAU,QAAQ,SAAS,KAAK,MAAM,UAAU,MAAM,GAAG,EAAE;AAClG,SAAO,UAAU,QAAQ;AAC3B;AAEA,SAAS,MAAM,KAAe,MAAiG;AAC7H,QAAM,MAAgB,EAAE,SAAS,OAAO,IAAI,IAAI,GAAG;AACnD,MAAI,KAAK,UAAU,OAAW,KAAI,QAAQ,KAAK;AAAA,MAC1C,KAAI,SAAS,KAAK;AACvB,SAAO;AACT;AAQA,SAAS,YAAY,OAAoB,OAAyB;AAChE,QAAMC,QAAO,UAAU,KAAK;AAC5B,MAAI,CAAC,SAASA,KAAI,EAAG;AACrB,MAAI;AACJ,MAAI;AAAE,aAAS,aAAaA,KAAgB;AAAA,EAAG,QACzC;AAAE;AAAA,EAAyF;AACjG,MAAI,MAAM,WAAW,KAAM,OAAM,QAAQ,IAAI,QAAQ,EAAE,KAAK,MAAM,KAAK,MAAM,MAAM,QAAQ,KAAK,CAAC;AAAA,MAC5F,OAAM,SAAS,IAAI,MAAM;AAChC;AAYA,SAAS,WAAW,OAA4C;AAC9D,SAAO,OAAQ,OAAyC,SAAS;AACnE;AAGA,SAAS,QAAW,OAAa;AAC/B,MAAI;AACF,WAAO,gBAAgB,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,IAAM,yBAAmC,CAAC,aAAa,cAAc,QAAQ;AActE,IAAM,cAAN,MAAkB;AAAA,EACd,aAAa,oBAAI,IAA4B;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACD,aAAa,oBAAI,IAAyB;AAAA,EAC1C,aAAa,oBAAI,IAAgC;AAAA;AAAA,EAExC;AAAA;AAAA,EAET,YAAY,oBAAI,QAA8B;AAAA;AAAA,EAE9C,YAAY,oBAAI,IAAe;AAAA;AAAA,EAE/B,cAAc,oBAAI,IAAe;AAAA,EACjC;AAAA,EACA;AAAA,EACA,iBAAkC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,gBAAgB,oBAAI,QAAgC;AAAA;AAAA,EAEnD,WAAW,oBAAI,IAAqB;AAAA;AAAA,EAE7C;AAAA;AAAA,EAES;AAAA;AAAA,EAED;AAAA,EAER,YAAY,UAA8B,CAAC,GAAG;AAC5C,SAAK,UAAU;AACf,SAAK,QAAQ,QAAQ,SAAS,IAAI,YAAY;AAC9C,SAAK,UAAU,EAAE,SAAS,OAAO,KAAK,MAAM,UAAU,YAAY,OAAO,EAAE;AAC3E,SAAK,MAAM,IAAI,UAAU,CAAC,CAAC,QAAQ,kBAAkB,IAAI,KAAiB;AAC1E,QAAI,QAAQ,mBAAoB,MAAK,UAAU;AAC/C,QAAI,QAAQ,QAAS,MAAK,eAAe,KAAK,QAAQ,OAAO;AAE7D,SAAK,qBAAqB;AAC1B,SAAK,wBAAwB;AAI7B,WAAO,eAAe,MAAM,OAAO;AAAA,MACjC,KAAK,MAAM;AACT,YAAI,CAAC,KAAK,KAAM,MAAK,OAAO,QAAQ,IAAI;AACxC,eAAO,KAAK;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AAKD,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,UAAI,CAAC,WAAW,MAAM,GAAG;AACvB,aAAK,aAAa,MAA2B;AAAA,MAC/C;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAC3B,UAAM,UAAU,MAAM,KAAK,MAAM,KAAK;AACtC,SAAK,aAAa,OAAO;AAAA,EAC3B;AAAA,EAEQ,aAAa,SAAkC;AAGrD,SAAK,WAAW,MAAM;AACtB,SAAK,QAAQ,QAAQ,IAAI,OAAK,EAAE,IAAI,CAAC;AACrC,eAAW,KAAK,QAAS,MAAK,WAAW,IAAI,EAAE,IAAI,EAAE,OAAO;AAE5D,eAAW,MAAM,KAAK,WAAW,OAAO,EAAG,MAAK,YAAY,EAAE;AAAA,EAChE;AAAA;AAAA,EAGQ,SAA0B;AAChC,WAAO,IAAI,WAAiB,KAAK,OAAO;AAAA,EAC1C;AAAA;AAAA,EAGQ,YAAY,IAAqB;AACvC,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,eAAe,WAAY,KAAI,MAAM,MAAM;AAAA,IACjD;AACA,SAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,OAAO,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,YAAY,IAA0B;AAC5C,QAAI,IAAI,KAAK,UAAU,IAAI,EAAE;AAC7B,QAAI,YAAY;AAChB,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,eAAe,cAAc,IAAI,YAAY,KAAK,QAAS;AAC/D,kBAAY;AACZ,YAAM,UAAU,IAAI,WAA4B,KAAK,OAAO;AAC5D,iBAAW,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,QAAQ,KAAK,GAAG,GAA0C;AACjG,gBAAQ,IAAI,KAAK,KAAK;AAAA,MACxB;AACA,MAAC,GAA0C,IAAI,IAAI;AAAA,IACrD;AACA,QAAI,CAAC,KAAK,WAAW;AACnB,UAAI,EAAE,KAAK,GAAG,OAAO,GAAG,SAAS,MAAM,MAAM,oBAAI,IAAI,GAAG,WAAW,GAAG,UAAU;AAChF,WAAK,UAAU,IAAI,IAAI,CAAC;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,QAAQ,IAAe,KAAmB;AAChD,QAAI,KAAK,QAAQ,QAAS,MAAK,YAAY,EAAE,EAAE,KAAK,IAAI,GAAG;AAAA,EAC7D;AAAA;AAAA,EAGQ,QAAQ,IAAqB;AACnC,QAAI,CAAC,KAAK,QAAQ,SAAS;AACzB,WAAK,gBAAgB,EAAE;AACvB;AAAA,IACF;AAGA,SAAK,YAAY,EAAE,EAAE,YAAY,KAAK,IAAI;AAC1C,QAAI,KAAK,QAAQ,QAAQ,EAAG,MAAK,UAAU,IAAI,EAAE;AAAA,QAC5C,MAAK,MAAM,EAAE;AAAA,EACpB;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,CAAC,KAAK,UAAU,KAAM;AAC1B,UAAM,OAAO,CAAC,GAAG,KAAK,SAAS;AAC/B,SAAK,UAAU,MAAM;AACrB,eAAW,MAAM,KAAM,MAAK,MAAM,EAAE;AAAA,EACtC;AAAA;AAAA,EAGQ,MAAM,IAAqB;AACjC,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AAGX,UAAI,KAAK,YAAY,IAAI,EAAE,EAAG;AAC9B,WAAK,YAAY,IAAI,EAAE;AACvB,WAAK,WAAW,GAAG,IAAI,QAAQ,KAAK,MAAM;AACxC,aAAK,YAAY,OAAO,EAAE;AAC1B,eAAO,KAAK,YAAY,EAAE;AAAA,MAC5B,CAAC,CAAC;AACF;AAAA,IACF;AACA,UAAM,SAAS,KAAK,YAAY,EAAE;AAClC,QAAI,OAAQ,MAAK,WAAW,GAAG,IAAI,MAAM;AAAA,EAC3C;AAAA,EAEQ,WAAW,IAAiB,MAA2B;AAE7D,UAAM,UAAU,KAAK,MAAM,MAAM,MAAS;AAC1C,SAAK,WAAW,IAAI,IAAI,OAAO;AAC/B,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,EAAE,MAAM,QAAS,MAAK,WAAW,OAAO,EAAE;AAAA,IACpE,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,IAAqC;AACvD,UAAM,IAAI,KAAK,YAAY,EAAE;AAC7B,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,WAAW,IAAI,CAAC;AAAA,IAChC,SAAS,KAAK;AAEZ,QAAE,UAAU;AACZ,WAAK,iBAAiB,KAAK,EAAE,IAAI,GAAG,IAAI,SAAS,GAAG,MAAM,OAAO,CAAC;AAClE;AAAA,IACF;AACA,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ;AACd,UAAM,OAAO,MAAM;AACjB,QAAE,MAAM,MAAM;AACd,UAAI,MAAM,QAAS,GAAE,UAAU;AAAA,IACjC;AACA,UAAM,SAAS,CAAC,QAAiB;AAC/B,WAAK,SAAS,IAAI,GAAG,KAAK;AAC1B,WAAK,iBAAiB,KAAK,EAAE,IAAI,MAAM,IAAI,SAAS,MAAM,QAAQ,CAAC;AAAA,IACrE;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,MAAO,KAAK;AAAA,IAClC,SAAS,KAAK;AACZ,aAAO,GAAG;AACV;AAAA,IACF;AACA,QAAI,WAAW,MAAM,EAAG,QAAO,QAAQ,QAAQ,MAAM,EAAE,KAAK,MAAM,MAAM;AACxE,SAAK;AAAA,EACP;AAAA;AAAA,EAGQ,WAAW,IAAe,GAAuC;AACvE,UAAM,UAAU,EAAE;AAClB,UAAM,UAAmD,CAAC;AAC1D,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,SAAS;AACX,cAAM,MAA+B,CAAC;AACtC,mBAAW,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,QAAQ,KAAK,GAAG,GAA0C;AACjG,cAAI,GAAG,IAAI;AAAA,QACb;AACA,gBAAQ,IAAI,IAAI;AAAA,MAClB,WAAW,IAAI,MAAM,MAAM;AACzB,cAAM,UAAmC,CAAC;AAC1C,mBAAW,OAAO,IAAI,MAAO,SAAQ,GAAG,IAAI,IAAI,KAAK,GAAG,KAAK;AAC7D,gBAAQ,IAAI,IAAI;AAAA,MAClB;AACA,UAAI,MAAM,MAAM;AAAA,IAClB;AACA,QAAI,SAAS;AACX,cAAQ,gBAAgB,IAAI,EAAE,GAAG,GAAG,iBAAiB;AAAA,IACvD,WAAW,EAAE,KAAK,MAAM;AACtB,YAAM,UAAmC,CAAC;AAC1C,iBAAW,OAAO,EAAE,KAAM,SAAQ,GAAG,IAAI,GAAG,iBAAiB,GAAG,KAAK;AACrE,cAAQ,gBAAgB,IAAI;AAAA,IAC9B;AACA,MAAE,KAAK,MAAM;AACb,UAAM,UAAU,GAAG,MAAM,MAAM,UAAU,IAAI,EAAE,GAAG;AAClD,QAAI,CAAC,WAAW,CAAC,QAAQ,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,OAAQ,QAAO;AACxE,WAAO;AAAA,MACL,IAAI,GAAG;AAAA,MACP,MAAM,UAAU,IAAI,EAAE;AAAA,MACtB,SAAS,GAAG,MAAM;AAAA,MAClB,YAAY,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,WAAW,GAAG;AAAA,MACxE,MAAM,KAAK,OAAO,EAAE;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,IACrC;AAAA,EACF;AAAA;AAAA,EAGQ,SAAS,IAAe,GAAc,QAA2B;AACvE,QAAI,OAAO,SAAS;AAClB,QAAE,UAAU;AACZ;AAAA,IACF;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,GAAG;AAC1D,UAAI,SAAS,kBAAkB;AAC7B,mBAAW,OAAO,OAAO,KAAK,KAAK,EAAG,GAAE,KAAK,IAAI,GAAG;AACpD;AAAA,MACF;AACA,YAAM,MAAO,GAA0C,IAAI;AAC3D,UAAI,eAAe,WAAY,YAAW,OAAO,OAAO,KAAK,KAAK,EAAG,KAAI,MAAM,IAAI,GAAG;AAAA,IACxF;AAAA,EACF;AAAA;AAAA,EAGQ,gBAAgB,IAAqB;AAC3C,UAAM,QAAQ,KAAK,WAAW,IAAI,GAAG,EAAE,KAAK,KAAK;AACjD,SAAK,WAAW,IAAI,GAAG,IAAI,IAAI;AAC/B,QAAI;AACJ,QAAI;AACF,eAAS,EAAE,IAAI,GAAG,IAAI,MAAM,KAAK,WAAW,EAAE,GAAG,SAAS,MAAM,YAAY,KAAK,IAAI,EAAE;AAAA,IACzF,SAAS,KAAK;AAEZ,WAAK,iBAAiB,KAAK,EAAE,IAAI,GAAG,IAAI,SAAS,KAAK,CAAC;AACvD;AAAA,IACF;AAEA,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AACX,WAAK,UAAU,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC,GAAG,MAAM;AAClE;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,KAAK,MAAM;AAAA,IACjC,SAAS,KAAK;AACZ,WAAK,iBAAiB,KAAK,MAAM;AACjC;AAAA,IACF;AACA,QAAI,WAAW,MAAM,GAAG;AACtB,WAAK,UAAU,QAAQ,QAAQ,MAAM,GAAG,MAAM;AAAA,IAChD;AAAA,EACF;AAAA,EAEQ,UAAU,MAAqB,QAA+B;AACpE,UAAM,UAAU,KAAK,MAAM,SAAO,KAAK,iBAAiB,KAAK,MAAM,CAAC;AACpE,SAAK,WAAW,IAAI,OAAO,IAAI,OAAO;AACtC,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,OAAO,EAAE,MAAM,SAAS;AAC9C,aAAK,WAAW,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,iBAAiB,KAAc,QAA+C;AACpF,QAAI,KAAK,QAAQ,cAAc;AAC7B,UAAI;AACF,aAAK,QAAQ,aAAa,KAAK,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,QAAQ,CAAC;AAAA,MAC3E,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAQ,MAAM,uCAAuC,OAAO,EAAE,yBAAyB,OAAO,EAAE;AAAA,EAClG;AAAA,EAEA,MAAM,aAA4B;AAChC,WAAO,KAAK,WAAW,MAAM;AAC3B,YAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,CAAC;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAIQ,eAAuB;AAC7B,QAAI,KAAK,YAAY,QAAW;AAC9B,WAAK,WAAW;AAChB,aAAO,OAAO,KAAK,OAAO;AAAA,IAC5B;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc;AACZ,WAAO,KAAK,aAAa,KAAK,aAAa;AAAA,EAC7C;AAAA,EAEA,QAAQ,UAAqC;AAC3C,SAAK,eAAe,KAAK,QAAQ;AACjC,WAAO,MAAM;AACX,YAAM,IAAI,KAAK,eAAe,QAAQ,QAAQ;AAC9C,UAAI,KAAK,EAAG,MAAK,eAAe,OAAO,GAAG,CAAC;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA,EAGA,aAAa,IAAwC;AACnD,WAAO,KAAK,WAAW,IAAI,EAAE;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,cAAc,IAAe,QAAgE;AAGnG,QAAI,OAAO,WAAW,UAAU;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,uDAAuD,EAAE;AAAA,IACtG;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,MAAM,EAAE,EAAE;AAAA,IAClF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,gBAAgB,MAAY,QAAgE;AAClG,UAAM,SAAS,KAAK;AACpB,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,OAAO,aAAa,WAAW,GAAG;AAGvE,aAAO;AAAA,IACT;AAOA,QAAI,OAAO,aAAa,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE,GAAG;AACpH,aAAO;AAAA,IACT;AACA,QAAI,OAAO,WAAW,YAAY,CAAC,OAAO,aAAa,SAAS,MAAwB,GAAG;AACzF,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,OAAO,MAAM,CAAC,EAAE,EAAE;AAAA,IAC3G;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,WAAoB;AAClB,UAAM,MAAsC,CAAC;AAC7C,eAAW,MAAM,KAAK,WAAW,OAAO,EAAG,KAAI,KAAK,KAAK,WAAW,EAAE,CAAC;AACvE,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,OAAO,IAAwC;AACrD,WAAO;AAAA,MACL,IAAc,GAAG;AAAA,MACjB,SAAc,GAAG;AAAA,MACjB,OAAc,GAAG;AAAA,MACjB,UAAc,GAAG;AAAA,MACjB,MAAc,GAAG;AAAA,MACjB,cAAc,GAAG;AAAA,MACjB,oBAAoB,GAAG;AAAA,MACvB,oBAAoB,GAAG;AAAA,MACvB,SAAc,GAAG;AAAA,MACjB,YAAc,GAAG;AAAA,MACjB,eAAe,GAAG;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,WAAW,IAAwC;AACzD,UAAM,EAAE,YAAY,eAAe,GAAG,IAAI,IAAI,KAAK,OAAO,EAAE;AAC5D,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAiB,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC;AAAA,MACjD,OAAiB,MAAM,KAAK,UAAU,GAAG,KAAK,CAAC;AAAA,MAC/C,WAAiB,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAAA,MACnD,UAAiB,MAAM,KAAK,UAAU,GAAG,QAAQ,CAAC;AAAA,MAClD,eAAiB,MAAM,KAAK,UAAU,GAAG,aAAa,CAAC;AAAA,MACvD,UAAiB,MAAM,KAAK,UAAU,GAAG,QAAQ,CAAC;AAAA,MAClD,WAAiB,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAAA,MACnD,iBAAiB,MAAM,KAAK,UAAU,GAAG,eAAe,CAAC;AAAA,MACzD,kBAAkB,EAAE,GAAG,GAAG,iBAAiB;AAAA,MAC3C,OAAiB,GAAG;AAAA,MACpB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIA,QAAQ,MAAqB;AAC3B,SAAK,WAAW,MAAM;AACtB,SAAK,UAAU,MAAM;AACrB,QAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,eAAW,KAAK,MAAwC;AAGtD,UAAI;AACJ,UAAI;AACF,aAAK,KAAK,QAAQ,CAAC;AAAA,MACrB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAQ,KAAK,+BAA+B,OAAO,GAAG,EAAE,CAAC,2BAA2B,OAAO,EAAE;AAC7F;AAAA,MACF;AACA,WAAK,WAAW,IAAI,GAAG,IAAI,EAAE;AAG7B,iBAAW,QAAQ,YAAa,CAAC,GAAG,IAAI,EAAmC,MAAM,MAAM;AACvF,WAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,SAAS,MAAM,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AAAA;AAAA,EAGQ,QAAQ,GAAuC;AACrD,UAAM,KAAgB;AAAA,MACpB,IAAI,EAAE;AAAA,MACN,SAAS,EAAE;AAAA,MACX,OAAQ,EAAE,SAAgC;AAAA,MAC1C,UAAW,EAAE,YAAyB,CAAC;AAAA,MACvC,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA,MAC1C,oBAAoB,EAAE;AAAA,MACtB,oBAAqB,EAAE,sBAAiC;AAAA,MACxD,SAAS,EAAE;AAAA,MACX,SAAS,KAAK,OAAO;AAAA,MACrB,OAAO,KAAK,OAAO;AAAA,MACnB,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU,KAAK,OAAO;AAAA,MACtB,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK,OAAO;AAAA,MACtB,WAAW,KAAK,OAAO;AAAA,MACvB,iBAAiB,KAAK,OAAO;AAAA,MAC7B,kBAAmB,EAAE,oBAA+C,CAAC;AAAA,MACrE,OAAQ,EAAE,SAA0B,CAAC;AAAA,MACrC,YAAY,EAAE;AAAA,MACd,eAAe,CAAC,CAAC,EAAE;AAAA,IACrB;AACA,eAAW,KAAM,EAAE,WAAwB,CAAC,GAAG;AAE7C,UAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,EAAG,GAAE,OAAO,CAAC;AACtC,UAAI,EAAE,WAAW,OAAW,GAAE,SAAS;AACvC,SAAG,QAAQ,IAAI,EAAE,KAAK,CAAC;AAAA,IACzB;AACA,eAAW,KAAM,EAAE,SAAoB,CAAC,EAAG,IAAG,MAAM,IAAI,EAAE,IAAI,CAAC;AAC/D,eAAW,KAAM,EAAE,aAAoC,CAAC,EAAG,IAAG,UAAU,IAAI,EAAE,IAAI,CAAC;AAEnF,eAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,SAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,eAAW,KAAM,EAAE,iBAAqE,CAAC;AACvF,SAAG,cAAc,IAAI,EAAE,IAAI,CAAU;AACvC,eAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,SAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,eAAW,KAAM,EAAE,aAAiE,CAAC,GAAG;AAGtF,YAAM,UAAU,gBAAiB,EAAE,WAAW;AAAA,QAC5C,WAAW,EAAE;AAAA,QAAW,WAAW,EAAE;AAAA,QACrC,SAAS,EAAE;AAAA,QAAS,OAAO,EAAE;AAAA,QAC7B,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MACtC,CAAiC;AACjC,UAAI,CAAC,EAAE,SAAS;AAGd,cAAM,WAAW,QAAQ;AACzB,cAAM,QAAiC,CAAC;AACxC,mBAAW,OAAO,CAAC,gBAAgB,sBAAsB,WAAW,GAAG;AACrE,cAAI,SAAS,GAAG,KAAK,QAAQ,SAAS,GAAG,MAAM,GAAI,OAAM,GAAG,IAAI,SAAS,GAAG;AAAA,QAC9E;AACA,mBAAW,CAAC,KAAK,MAAM,KAAK;AAAA,UAC1B,CAAC,WAAW,CAAC,OAAO,QAAQ,QAAQ,QAAQ,CAAC;AAAA,UAC7C,CAAC,cAAc,CAAC,MAAM,QAAQ,SAAS,UAAU,CAAC;AAAA,QACpD,GAAY;AACV,gBAAM,QAAQ,SAAS,GAAG;AAC1B,cAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACxC,kBAAM,GAAG,IAAI,MAAM,IAAI,UAAQ,OAAO,YAAY,OAC/C,OAAO,WAAS,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,MAAM,OAClD,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,SAAS,EAAE,EAC3D,IAAI,WAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AAAA,UACxC;AAAA,QACF;AACA,gBAAQ,QAAQ;AAAA,MAClB;AACA,SAAG,UAAU,IAAI,EAAE,IAAI;AAAA,QACrB,IAAI,EAAE;AAAA,QAAI,MAAM;AAAA,QAChB,aAAc,EAAE,eAAe,EAAE;AAAA,QACjC,aAAc,EAAE,eAAe,EAAE;AAAA,QACjC,cAAe,EAAE,gBAAuC,YAAY,OAAO;AAAA,QAC3E;AAAA,MACF,CAAC;AAAA,IACH;AACA,eAAW,KAAM,EAAE,mBAAuE,CAAC;AACzF,SAAG,gBAAgB,IAAI,EAAE,IAAI,CAAU;AACzC,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,SAAS,UAA8B;AACrC,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,QAAQ;AACb,QAAI;AACF,YAAM,WAAW,KAAK,UAAU,QAAQ;AACxC,UAAI,SAAS,MAAO,MAAK,cAAc,UAAU,SAAS,KAAK;AAC/D,aAAO;AAAA,IACT,UAAE;AAGA,UAAI,EAAE,KAAK,QAAQ,UAAU,EAAG,MAAK,eAAe;AACpD,WAAK,YAAY;AAAA,IACnB;AAAA,EACF;AAAA,EAEQ,UAAU,UAA8B;AAI9C,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,YAAY,CAAC,SAAS,QAAQ;AACzF,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,EAAE,CAAC;AAAA,IACvF;AACA,QAAI,CAAC,cAAc,UAAU,WAAW,GAAG;AACzC,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,WAAW,SAAS,EAAE,CAAC;AAAA,IAC3G;AACA,UAAM,WAAW,KAAK,QAAQ,oBAAoB;AAIlD,QAAI,OAAO;AACX,QAAI;AACJ,QAAI;AAAE,aAAO,aAAa,QAAQ,EAAE;AAAA,IAAQ,SAAS,GAAG;AAAE,uBAAiB;AAAA,IAAG;AAC9E,QAAI,OAAO,UAAU;AACnB,aAAO,MAAM,UAAU,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzC,wCAAwC,IAAI,MAAM,QAAQ;AAAA,MAAG,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,SAAS,SAAS;AAIxB,UAAM,YAAY,SAAS;AAC3B,QACE,cAAc,UACd,cAAc,SACb,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,IACzD;AACA,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE,CAAC;AAAA,IAC5F;AACA,UAAM,SAAU,aAAa,CAAC;AAC9B,UAAM,UAAU,KAAK,SAAS,IAAI,MAAM;AACxC,QAAI,CAAC,SAAS;AACZ,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB,QAAW;AAChC,YAAM,MAAM,0BAA0B,QAAQ,eAAe,UAAU,OAAO,cAAc;AAC5F,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,EAAE,CAAC;AAAA,IAC3D;AAOA,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAMC,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,QAAQ,KAAK,YAAY,EAAE,EAAE,QAAQ,IAAI,aAAa,QAAQ,CAAC;AACrE,YAAI,OAAO;AACT,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,MAAM;AAAA,YAC7C,kBAAkB,MAAM,GAAG;AAAA,YAC3B,EAAE,gBAAgB,MAAM,IAAI;AAAA,UAAC,EAAE,CAAC;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AAMA,QAAI,KAAK,QAAQ,qBAAqB,WAAW,sBAAsB,WAAW,oBAAoB;AACpG,YAAM,SAAS,KAAK,gBAAgB,QAAQ;AAC5C,UAAI,OAAQ,QAAO,MAAM,UAAU,EAAE,OAAO,OAAO,CAAC;AACpD,UAAI,WAAW,0BAA0B;AACvC,cAAM,aAAc,SAAS,IAAe,MAAM,GAAG,EAAE,CAAC;AACxD,cAAM,SAAS,OAAO;AACtB,YAAI,WAAW,UAAa,eAAe,QAAQ;AACjD,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzC;AAAA,UAA0C,EAAE,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,KAAK,QAAQ,iBAAiB,mBAAmB,IAAI,MAAM,GAAG;AAChE,YAAM,QAAQ,KAAK,YAAY,MAAM;AACrC,UAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AAAA,IACpD;AAOA;AACE,YAAM,OAAO,KAAK,YAAY,QAAQ,MAAM;AAC5C,UAAI,KAAM,QAAO,MAAM,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,IAClD;AAaA,QAAI,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,aAAa,KAAK,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,UAAU,KAAK,oBAAoB,IAAI,MAAM,GAAG;AAC1K,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,YAAY,KAAK,cAAc,IAAI,OAAO,IAAI;AACpD,YAAI,UAAW,QAAO,MAAM,UAAU,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AAGA,UAAM,SAAS,oBAAI,IAAI;AAAA,MAAC;AAAA,MAAoB;AAAA,MACpB;AAAA,MAAkB;AAAA,MAClB;AAAA,MAAoB;AAAA,IAAmB,CAAC;AAChE,QAAI,CAAC,OAAO,IAAI,MAAM,GAAG;AACvB,YAAMA,QAAO,OAAO;AACpB,UAAI,OAAOA,UAAS,UAAU;AAC5B,cAAM,KAAK,KAAK,WAAW,IAAIA,KAAI;AACnC,YAAI,MAAM,GAAG,UAAU,UAAU;AAC/B,iBAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,0BAA0B,aAAaA,KAAI,YAAY,EAAE,CAAC;AAAA,QACvG;AAAA,MACF;AAAA,IACF;AAKA,QAAI,WAAW,eAAe;AAC5B,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,YAAM,MAAM,OAAO;AACnB,UAAI,MAAM,OAAO,QAAQ,UAAU;AACjC,cAAM,aAAa,GAAG,iBAAiB,GAAG;AAC1C,cAAM,OAAO,aAAa,GAAG,MAAM,IAAI,UAAU,IAAI;AACrD,YAAI,KAAM,QAAO,MAAM,UAAU,EAAE,QAAQ,EAAE,SAAS,YAAY,OAAO,KAAK,MAAM,EAAE,CAAC;AAAA,MACzF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AAMF,YAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,IAC/B,SAAS,GAAG;AAIV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,UAAU,kBAAkB,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;AAAA,IAC3F;AACA,QAAI,IAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC;AAI1D,UAAM,OAAO,OAAO;AACpB,QAAI,OAAO,SAAS,YAAY,CAAC,kBAAkB,IAAI,MAAM,GAAG;AAC9D,YAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,UAAI,GAAI,MAAK,YAAY,IAAI,QAAQ;AAAA,IACvC;AACA,WAAO,MAAM,UAAU,EAAE,QAAQ,QAAQ,IAAI,MAAM,EAAE,CAAC;AAAA,EACxD;AAAA;AAAA,EAIA,YAAY,IAAe,UAA0B;AACnD,SAAK,YAAY,IAAI,EAAE,UAAU,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC,EAAc,CAAC;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,UAAoB,OAA+C;AACvF,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,SAAU;AACvE,UAAM,SAAS,SAAS;AACxB,QAAI,kBAAkB,IAAI,MAAM,EAAG;AACnC,QAAI,CAAC,kBAAkB,QAAQ,OAAO,kBAAkB,EAAG;AAC3D,UAAM,MAAM,SAAS;AACrB,QAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AACnE,UAAM,SAAS;AACf,UAAM,KAAK,OAAO,OAAO,cAAc,WAAW,KAAK,WAAW,IAAI,OAAO,SAAS,IAAI;AAC1F,QAAI,CAAC,MAAM,OAAO,OAAO,SAAS,YAAY,CAAC,GAAG,QAAQ,IAAI,OAAO,IAAI,EAAG;AAK5E,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAM,QAAQ,KAAK,YAAY,EAAE;AACjC,YAAM,SAAS,aAAa,QAAQ;AACpC,UAAI,MAAM,QAAQ,IAAI,MAAM,KAAK,MAAM,SAAS,IAAI,MAAM,EAAG;AAAA,IAC/D;AACA,SAAK,YAAY,IAAI;AAAA,MACnB,SAAS,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAAA,MAC5C,SAAS,EAAE,QAAQ,WAAW,MAAM,MAAM,KAAK;AAAA,IACjD,CAAC;AAAA,EACH;AAAA;AAAA,EAGQ,YAAY,IAA4B;AAC9C,QAAI,QAAQ,KAAK,cAAc,IAAI,EAAE;AACrC,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,SAAS,oBAAI,IAAI,GAAG,UAAU,oBAAI,IAAI,EAAE;AAClD,iBAAW,SAAS,GAAG,MAAO,aAAY,OAAO,KAAK;AACtD,WAAK,cAAc,IAAI,IAAI,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,YAAY,IAAe,QAAoE;AACrG,UAAM,QAAoB,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,KAAK,IAAI,GAAG,GAAG,OAAO;AACjF,QAAI,GAAG,iBAAiB,KAAK,QAAQ,aAAa;AAChD,YAAM,OAAO,GAAG,cAAc;AAC9B,YAAM,YAAY;AAClB,SAAG,aAAa,SAAS,YAAY,KAAK,GAAG,IAAI;AAAA,IACnD;AACA,OAAG,MAAM,KAAK,KAAK;AACnB,UAAM,QAAQ,KAAK,cAAc,IAAI,EAAE;AACvC,QAAI,MAAO,aAAY,OAAO,KAAK;AACnC,eAAW,KAAK,KAAK,gBAAgB;AACnC,UAAI;AAAE,UAAE,IAAI,KAAK;AAAA,MAAG,QAAQ;AAAA,MAAuC;AAAA,IACrE;AACA,SAAK,QAAQ,EAAE;AAAA,EACjB;AAAA;AAAA,EAIQ,gBAAgB,UAA8E;AACpG,UAAM,MAAM,SAAS;AACrB,QAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AACA,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,QAAI,MAAM,WAAW,KAAK,MAAM,CAAC,MAAM,WAAW;AAChD,aAAO,SAAS,EAAE,mBAAmB,yBAAyB;AAAA,IAChE;AACA,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,SAAU,SAAS,UAAU,CAAC;AACpC,UAAM,SAAS,OAAO;AACtB,UAAM,OAAO,OAAO;AACpB,UAAM,QAAQ,OAAO;AAMrB,QAAI,OAAO,WAAW,YAAY,CAAC,UAAU,OAAO,SAAS,YAAY,CAAC,MAAM;AAC9E,aAAO,SAAS,EAAE,mBAAmB,iDAAiD;AAAA,IACxF;AAGA,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,SAAS,EAAE,mBAAmB,8CAA8C;AAAA,IACrF;AACA,UAAM,KAAM,SAAuC,KAAK,IAAI;AAC5D,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,IAAI;AACP,aAAO,SAAS,EAAE,mBAAmB,4CAA4C;AAAA,IACnF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO,SAAS,EAAE,mBAAmB,cAAc,MAAM,EAAE;AAOxE,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,eAAe,UAAa,OAAO,EAAE,UAAU,GAAG;AAC7F,aAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AAAA,IAC5D;AAMA,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,gBAAgB,UAAa,OAAO,EAAE,WAAW,GAAG;AAC/F,aAAO,SAAS,EAAE,mBAAmB,OAAO,GAAG,qBAAqB;AAAA,IACtE;AAEA,UAAM,MAAM,KAAK,UAAU,QAAQ,KAAK,EAAE;AAC1C,QAAI,CAAC,KAAK;AACR,YAAM,UAAU,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,UAAU;AACnE,UAAI,QAAS,QAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AACvE,aAAO,SAAS,EAAE,mBAAmB,UAAU,GAAG,aAAa,EAAE,QAAQ,MAAM,EAAE;AAAA,IACnF;AAGA,QAAI;AACF,YAAM,WAAqB,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAC9D,aAAO,SAAS;AAChB,YAAM,YAAY,aAAa,QAAQ;AACvC,YAAM,MAAM,iBAAiB,IAAI,GAAG;AACpC,UAAI,CAAC,eAAe,WAAW,KAAK,GAAG,GAAG;AACxC,eAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,MACtE;AACA,aAAO;AAAA,IACT,QAAQ;AAIN,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AAAA,EACF;AAAA;AAAA,EAGA,UAAU,QAAgB,KAAa,IAA8B;AACnE,eAAW,KAAK,OAAO,MAAM;AAC3B,UAAI,EAAE,QAAQ,IAAK;AACnB,UAAI,EAAE,eAAe,UAAa,MAAM,EAAE,WAAY;AACtD,UAAI,KAAK,EAAE,WAAY;AACvB,UAAI,EAAE,gBAAgB,UAAa,MAAM,EAAE,YAAa;AACxD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,YAAY,QAAgB,QAAiC;AACnE,UAAM,QAAQ,eAAe,MAAM;AACnC,QAAI,UAAU,UAAa,UAAU,cAAc,iBAAiB,IAAI,MAAM,EAAG,QAAO;AACxF,UAAM,OAAO,OAAO;AACpB,UAAM,KAAK,OAAO,SAAS,WAAW,KAAK,WAAW,IAAI,IAAI,IAAI;AAClE,QAAI,CAAC,GAAI,QAAO;AAGhB,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,GAAG,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC,EAAG,QAAO;AAC1E,WAAO;AAAA,MAAS,EAAE;AAAA,MAAQ,mBAAmB,MAAM;AAAA,MACnC,EAAE,SAAS,OAAO,YAAY,CAAC,GAAG,GAAG,QAAQ,EAAE;AAAA,IAAC;AAAA,EAClE;AAAA,EAEQ,YAAY,QAA2F;AAG7G,UAAM,OAAO,OAAO;AACpB,UAAM,SAAS,OAAO;AACtB,QAAI,OAAO,SAAS,YAAY,OAAO,WAAW,YAAY,CAAC,QAAQ,CAAC,OAAQ,QAAO;AACvF,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO;AAIpB,QAAI,OAAO,SAAS,WAAW,OAAO,aAAa,OAAW,QAAO;AACrE,QAAI,OAAO,mBAAmB,QAAW;AACvC,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,MACjB,CAAC;AAAA,IACH;AACA,UAAM,SAAS,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC3C,UAAM,MAAM,SAAS,OAAO;AAC5B,QAAI,MAAM,GAAG,oBAAoB;AAC/B,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,QAAoB,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,QAAI,GAAG,YAAY,UAAa,OAAO,aAAa,GAAG,SAAS;AAC9D,aAAO,SAAS,EAAE,uBAAuB,qDAAqD;AAAA,QAC5F,cAAc,GAAG;AAAA,QAAS,KAAK,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMQ,uBAA6B;AACnC,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,sBAA0B,OAAK,KAAK,oBAAoB,CAAC,CAAC;AAC5E,SAAK,SAAS,IAAI,0BAA0B,OAAK,KAAK,uBAAuB,CAAC,CAAC;AAC/E,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,qBAA0B,OAAK,KAAK,mBAAmB,CAAC,CAAC;AAC3E,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,eAAe,CAAC,CAAC;AACvE,SAAK,SAAS,IAAI,cAA0B,OAAK,KAAK,YAAY,CAAC,CAAC;AACpE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AACxE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,SAAS,GAAG,SAAS,CAAC;AAC5E,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,SAAS,GAAG,QAAQ,CAAC;AAC3E,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AAAA,EAC1E;AAAA,EAEQ,0BAAgC;AAEtC,oBAAgB,IAAI;AACpB,yBAAqB,IAAI;AACzB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,2BAAuB,IAAI;AAC3B,uBAAmB,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,GAAiD;AACzE,UAAM,KAAM,EAAE,aAAwB,KAAK,IAAI,YAAY;AAC3D,QAAI,OAAO,OAAO,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAChG,QAAI,KAAK,WAAW,IAAI,EAAE,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE,EAAE,EAAE;AACnG,UAAM,WAAqB,MAAM,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAI,EAAE,QAAqB,IAAI,CAAC,GAAI,KAAK,QAAQ,mBAAmB,CAAC,YAAY,YAAY,CAAE;AAWvJ,eAAW,CAAC,SAAS,UAAU,MAAM,KAAK;AAAA,MACxC,CAAC,uBAAuB,CAAC,CAAC,KAAK,QAAQ,mBAAmB,mBAAmB;AAAA,MAC7E,CAAC,qBAAqB,KAAK,QAAQ,oBAAoB,QAAW,iBAAiB;AAAA,IACrF,GAAkC;AAChC,YAAM,OAAO,QAAQ,MAAM,GAAG,EAAE,CAAC;AACjC,YAAM,aAAa,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC;AAC5E,UAAI,YAAY,CAAC,WAAY,UAAS,KAAK,OAAO;AAAA,eACzC,cAAc,CAAC,UAAU;AAChC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,GAAG,OAAO,sBAAsB,MAAM;AAAA,QAEG,EAAE;AAAA,MAC/C;AAAA,IACF;AAEA,UAAM,eAAe,SAAS,SAAS,iBAAiB,KAAK,CAAC,CAAC,KAAK,QAAQ;AAC5E,UAAM,KAAgB;AAAA,MACpB;AAAA,MACA,SAAS,KAAK,IAAI;AAAA,MAClB,OAAO;AAAA,MACP;AAAA,MACA,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA,MAC1C,oBAAoB,EAAE;AAAA,MACtB,oBAAoB,OAAO,EAAE,uBAAuB,WAAW,EAAE,qBAAqB;AAAA,MACtF,SAAS,EAAE;AAAA,MACX,SAAS,KAAK,OAAO;AAAA,MACrB,OAAO,KAAK,OAAO;AAAA,MACnB,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU,KAAK,OAAO;AAAA,MACtB,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK,OAAO;AAAA,MACtB,WAAW,KAAK,OAAO;AAAA,MACvB,iBAAiB,KAAK,OAAO;AAAA,MAC7B,kBAAkB,CAAC;AAAA,MACnB,OAAO,CAAC;AAAA,MACR,eAAe;AAAA,MACf,YAAY,eAAe,YAAY;AAAA,IACzC;AACA,SAAK,WAAW,IAAI,IAAI,EAAE;AAE1B,SAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,SAAS,OAAO,MAAM,oBAAI,IAAI,EAAE,CAAC;AAClE,WAAO,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,GAAG,QAAQ,EAAE;AAAA,EAC1D;AAAA,EAEQ,oBAAoB,GAAiD;AAC3E,UAAM,OAAO,QAAQ,GAAG,CAAC,WAAW,CAAC;AACrC,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE,SAAS,EAAE,EAAE;AACjF,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,IAAI,GAAG;AAAA,MACP,SAAS,GAAG;AAAA,MACZ,OAAO,GAAG;AAAA,MACV,MAAM,GAAG;AAAA,MACT,cAAc,GAAG;AAAA,MACjB,oBAAoB,KAAK,QAAQ,oBAAoB;AAAA,MACrD,oBAAoB,GAAG;AAAA,MACvB,UAAU,GAAG;AAAA,MACb,SAAS,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,YAAY;AAAA,MAC3D,aAAa,GAAG,MAAM;AAAA,MACtB,YAAY,GAAG,MAAM;AAAA,MACrB,gBAAgB,GAAG,UAAU;AAAA;AAAA;AAAA;AAAA,MAI7B,GAAI,GAAG,aAAa,EAAE,eAAe,GAAG,WAAW,IAAI,CAAC;AAAA,MACxD,GAAI,GAAG,qBAAqB,EAAE,oBAAoB,GAAG,mBAAmB,IAAI,CAAC;AAAA,IAC/E,EAAC;AAAA,EACH;AAAA,EAEQ,uBAAuB,GAAiD;AAC9E,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,UAAU,CAAC;AACzD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,QAAI,GAAG,QAAQ,IAAI,EAAE,IAAc,EAAG,SAAS,SAAS;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gDAAgD,EAAE;AAAA,IAC/F;AACA,UAAM,cAAc,CAAC,GAAI,EAAE,QAAqB;AAChD,QAAI,CAAC,YAAY,KAAK,QAAM,GAAG,WAAW,OAAO,CAAC,EAAG,aAAY,KAAK,UAAU;AAChF,OAAG,WAAW;AACd,QAAI,YAAY,SAAS,iBAAiB,KAAK,CAAC,GAAG,eAAe;AAChE,SAAG,gBAAgB;AACnB,SAAG,aAAa;AAAA,IAClB;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,SAAS,EAAE;AAAA,EAC7C;AAAA,EAEQ,kBAAkB,GAAiD;AACzE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,MAAM,CAAC;AACrD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,QAAI,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAClD,QAAI,CAAC,IAAI;AACP,YAAM,SAAS,KAAK,kBAAkB,EAAE,WAAW,EAAE,UAAU,CAAC;AAChE,UAAI,OAAO,MAAO,QAAO;AACzB,WAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAAA,IAChD;AACA,UAAM,MAAM,EAAE;AACd,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,WAAW,GAAG,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB;AAEpB,UAAM,SAAiB;AAAA,MACrB;AAAA,MACA,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,QAAmB;AAAA,MAC5B,QAAQ;AAAA,MACR,cAAc,EAAE;AAAA,MAChB,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE;AAAA,MACV,MAAM,CAAC;AAAA,MACP,QAAQ;AAAA,IACV;AAGA,QAAI,KAAK,QAAQ,mBAAmB,OAAO,EAAE,eAAe,UAAU;AACpE,YAAM,SAAS,KAAK,QAAQ,gBAAgB,EAAE,UAAU;AACxD,UAAI,WAAW,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,oBAAoB,EAAE;AAK1F,YAAM,WAAW,OAAO;AACxB,YAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM;AAC/E,UAAI,YAAY,QAAQ,aAAa,KAAK;AACxC,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,4CAA4C,EAAE;AAAA,MAC9F;AACA,UAAI,UAAU;AACZ,YAAI,SAAS,YAAY,MAAM;AAC7B,cAAI,QAAQ,SAAS,UAAU;AAC7B,mBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,8CAA8C,EAAE;AAAA,UAChG;AAAA,QACF,WAAW,aAAa,KAAK;AAC3B,iBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,sCAAsC,EAAE;AAAA,QACxF;AAAA,MACF;AACA,aAAO,WAAW;AAClB,sBAAgB;AAChB,YAAM,KAAK,OAAO;AAClB,UAAI,OAAO,OAAO,SAAU,QAAO,iBAAiB;AACpD,aAAO,WAAW,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAChE,YAAM,MAAM,OAAO;AACnB,YAAM,SAAS,KAAK;AACpB,UAAI,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC5C,eAAO,KAAK,KAAK,EAAE,KAAK,QAAuC,KAAK,OAAO,KAAe,YAAY,IAAI,CAAC;AAAA,MAC7G;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,YAAY,OAAO,EAAE,oBAAoB,YAAY,EAAE,oBAAoB,QACrF,CAAC,MAAM,QAAQ,EAAE,eAAe,GAAG;AACxC,YAAM,UAAU,KAAK,QAAQ,SAAS,EAAE,eAA0C;AAClF,UAAI,YAAY,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,eAAe,yBAAyB,EAAE;AAC3F,YAAM,SAAS,CAAC,QAAQ,QAAQ,QAAQ,EAAE,EAAE;AAAA,QAC1C,CAAC,MAAmB,OAAO,MAAM,YAAY,MAAM;AAAA,MAAE;AAGvD,UAAI,aAAa,SAAS,aAAa,QAAQ,WAAW,SAAS,YAAY;AAC7E,eAAO,EAAE,OAAO,SAAS,EAAE,2BAA2B,+CAA+C,EAAE;AAAA,MACzG;AACA,aAAO,YAAY;AACnB,YAAM,QAAQ,QAAQ;AACtB,UAAI,SAAS,OAAO,MAAM,QAAQ,UAAU;AAC1C,eAAO,KAAK,KAAK,EAAE,KAAK,OAAsC,KAAK,MAAM,KAAe,YAAY,IAAI,CAAC;AAAA,MAC3G;AAAA,IACF;AAEA,UAAM,WAAW,CAAC,GAAG,OAAO,IAAI;AAIhC,UAAM,OAAO,EAAE;AACf,QAAI,MAAM,QAAQ,SAAS,WAAW,GAAG;AACvC,iBAAW,KAAK,KAAK,MAAM;AACzB,YAAI,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,GAAG;AACpD,iBAAO,KAAK,KAAK,EAAE,KAAK,GAAkC,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU;AACZ,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,OAAO,mBAAmB,OAAW,UAAS,iBAAiB,OAAO;AAC1E,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,cAAe,UAAS,WAAW,OAAO;AAC9C,UAAI,OAAO,cAAc,OAAW,UAAS,YAAY,OAAO;AAChE,iBAAW,KAAK,UAAU;AACxB,YAAI,CAAC,SAAS,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,EAAG,UAAS,KAAK,KAAK,CAAC;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,IAC7C;AACA,OAAG,QAAQ,IAAI,KAAK,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,EAC7C;AAAA,EAEQ,mBAAmB,GAAiD;AAK1E,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,OAAG,QAAQ,OAAO,EAAE,IAAc;AAClC,WAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE;AAAA,EAClC;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,QAAQ,OAAO,CAAC;AAC9D,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,WAAY,EAAE,YAAwB,EAAE;AAC9C,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,EAAE,SAAS,UAAa,EAAE,SAAS,QAAQ,OAAO,EAAE,SAAS,UAAU;AACzE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AAAA,IAC9D;AACA,UAAM,gBAAkB,EAAE,QAAiB,GAAG;AAC9C,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,EAAE,oBAAoB,UAAa,EAAE,oBAAoB,QAAQ,OAAO,EAAE,oBAAoB,WAAW;AAC3G,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AAEA,UAAM,SAAS,KAAK,IAAI,OAAO;AAC/B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAa;AAAA,MACjB,IAAI;AAAA,MACJ,MAAM,EAAE;AAAA,MACR,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAO,EAAE;AAAA,MACT,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,eAAe,EAAE;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,UAAU,CAAC;AAAA,MACvE,QAAQ;AAAA,IACV;AAKA,QAAI,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,KAAK,SAAS,QAAS,MAAK,kBAAkB;AAAA,aAC5F,qBAAqB,EAAG,MAAK,kBAAkB,CAAC,CAAC,EAAE;AAE5D,OAAG,MAAM,IAAI,QAAQ,IAAI;AACzB,QAAI,OAAO,EAAE,oBAAoB,UAAU;AACzC,SAAG,iBAAiB,EAAE,eAAe,IAAI;AACzC,WAAK,QAAQ,IAAI,EAAE,eAAe;AAClC,YAAM,OAAO,OAAO,KAAK,GAAG,gBAAgB;AAC5C,UAAI,KAAK,SAAS,sBAAsB;AACtC,eAAO,GAAG,iBAAiB,KAAK,CAAC,CAAC;AAClC,aAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,QAAQ,OAAO,UAAU,EAAE;AAAA,EACzD;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,WAAW,EAAE;AAOnB,UAAM,QAAkC;AAAA,MACtC,SAAkB,CAAC,eAAe,UAAU;AAAA,MAC5C,aAAkB,CAAC,eAAe,aAAa,UAAU;AAAA,MACzD,kBAAkB,CAAC,aAAa;AAAA,MAChC,QAAkB,CAAC,WAAW;AAAA,IAChC;AACA,QAAI,CAAC,MAAM,KAAK,KAAK,GAAG,SAAS,QAAQ,GAAG;AAC1C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,KAAK,KAAK,OAAO,QAAQ,EAAE,EAAE;AAAA,IACxF;AAKA,QAAI,aAAa,eAAe,KAAK,iBAAiB;AACpD,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA4H,EAAE;AAAA,IAClI;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK;AAAA,MAChB,IAAI,KAAK;AAAA,MAAY,MAAM,EAAE;AAAA,MAC7B,OAAO;AAAA,MAAU,MAAM,EAAE;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,OAAO,SAAS,EAAE;AAAA,EACvC;AAAA,EAEQ,eAAe,GAAiD;AACtE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAM9D,QAAI,KAAK,UAAU,aAAa,KAAK,UAAU,eAAe;AAC5D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,KAAK,KAAK,EAAE,EAAE;AAAA,IACrF;AAMA,QAAI,KAAK,iBAAiB;AACxB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,CAAC,KAAK,QAAQ;AAUhB,cAAM,WAAW,EAAE;AACnB,cAAM,WAAW,CAAC,GAAG,WAAW,GAAG,OAAO,CAAC,EACxC,OAAO,CAAC,CAAC,KAAK,MAAM,MAAM,QAAQ,YAAY,QAAQ,KAAK,YAAY,OAAO,SAAS,OAAO,EAC9F,IAAI,CAAC,CAAC,GAAG,MAAM,GAAG;AACrB,YAAI,SAAS,WAAW,GAAG;AACzB,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB;AAAA,UAAsH,EAAE;AAAA,QAC5H;AACA,aAAK,SAAS,EAAE,cAAc,KAAK,cAAc,UAA8B,MAAM,oBAAoB,WAAW,CAAC,EAAE;AAAA,MACzH;AACA,WAAK,mBAAmB,EAAE;AAC1B,WAAK,QAAQ;AACb,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAwB,OAAO;AAAA,QAChD,MAAM;AAAA,MAA2C,CAAC;AACtE,aAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,IACrE;AACA,SAAK,SAAS,EAAE;AAChB,QAAI,OAAO,EAAE,eAAe,YAAY,OAAO,EAAE,eAAe,SAAU,MAAK,aAAa,EAAE;AAC9F,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAwB,OAAO,YAAY,CAAC;AAC7F,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,YAAY,GAAiD;AACnE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,SAAU,EAAE,UAEA,CAAC;AACnB,QAAI,OAAO,WAAW,QAAQ,OAAO,YAAY,cAAc,OAAO,YAAY,WAAW;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,MAAiB,CAAC;AACxB,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAGlD,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,OAAO,YAAY,cAAc,QAAS;AAC9C,UAAI,OAAO,YAAY,aAAa,CAAC,QAAS;AAC9C,YAAMD,QAAO,UAAU,KAAK,KAAM,CAAC;AACnC,YAAM,KAAMA,MAAK,UAAU,CAAC;AAC5B,UAAI,OAAO,UAAUA,MAAK,WAAW,OAAO,OAAQ;AACpD,UAAI,OAAO,QAAQ,GAAG,SAAS,OAAO,KAAM;AAC5C,UAAI,OAAO,SAAS;AAClB,YAAI,SAAS,GAAG;AAChB,YAAIA,MAAK,WAAW,kBAAkB;AACpC,gBAAM,SAAS,GAAG,SAAS,IAAI,GAAG,UAAoB;AACtD,mBAAS,SAAU,OAAgC,UAAU;AAAA,QAC/D;AACA,YAAI,WAAW,OAAO,QAAS;AAAA,MACjC;AACA,YAAM,OAAgC,EAAE,KAAK,MAAM,KAAK,SAAS,MAAM,QAAQ;AAC/E,UAAI,SAAS;AACX,aAAK,UAAU,MAAM;AACrB,aAAK,UAAU,MAAM;AAAA,MACvB,OAAO;AACL,aAAK,WAAW,MAAM;AAAA,MACxB;AACA,UAAI,MAAM,UAAW,MAAK,YAAY,MAAM;AAC5C,UAAI,KAAK,IAAI;AAAA,IACf;AAIA,WAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,UAAU,KAAK,IAAI,OAAO,GAAG,MAAM,MAAM,EAAE,EAAE;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,UAAU,CAAC;AACpE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAU9D,QAAI,uBAAuB,SAAS,KAAK,KAAK,GAAG;AAC/C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,KAAK,KAAK,EAAE,EAAE;AAAA,IACvG;AACA,UAAM,KAAK,EAAE;AACb,UAAM,YAAsB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACpG,QAAI,CAAC,UAAU,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AACvF,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,EAAE;AACvB,UAAM,OAAO,gBAAgB;AAC7B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,KAAK,UAAU,IAAI,CAAC,iEAAiE,EAAE;AAAA,IACvJ;AASA,QAAI,KAAK,UAAU,sBAAsB,KAAK,QAAQ;AACpD,UAAI,YAAY,KAAK,gBAAgB,MAAM,YAAY,EAAE,QAAQ,GAAG;AAClE,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF;AAAA,QAEF,EAAE;AAAA,MACJ;AAIA,UAAI,iBAAiB,UAAa,iBAAiB,KAAK,OAAO,MAAM;AACnE,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF,gEAAgE,KAAK,OAAO,IAAI;AAAA,QAClF,EAAE;AAAA,MACJ;AAEA,iBAAW,KAAK,WAAW;AACzB,YAAI,CAAC,KAAK,OAAO,aAAa,SAAS,CAAC,EAAG,MAAK,OAAO,aAAa,KAAK,CAAC;AAAA,MAC5E;AACA,UAAI,EAAE,aAAa,OAAW,MAAK,OAAO,WAAW,EAAE;AACvD,WAAK,aAAa;AAClB,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QACP,WAAW,KAAK;AAAA,QAChB,SAAS;AAAA,QACT,cAAc,CAAC,GAAG,KAAK,OAAO,YAAY;AAAA,MAC5C,EAAE;AAAA,IACJ;AAEA,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,SAAS;AAAA,MACZ,cAAc;AAAA,MACd,cAAc;AAAA,MACd;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,WAAW,CAAC;AAAA,IACd;AACA,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,mBAAmB,CAAC;AACxF,SAAK,mBAAmB,EAAE;AAC1B,WAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,oBAAoB,GAA4B,MAAwC;AAC9F,UAAM,WAAW,EAAE;AACnB,QAAI,aAAa,UAAa,aAAa,KAAM,QAAO;AACxD,QAAI,OAAO,aAAa,UAAU;AAChC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2CAA2C,EAAE;AAAA,IAClF;AACA,QAAI,KAAK,qBAAqB,QAAW;AACvC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8CAA8C,EAAE;AAAA,IACrF;AACA,UAAM,SAAS,YAAY,KAAK,gBAAgB;AAChD,QAAI,aAAa,QAAQ;AACvB,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,QACA,EAAE,UAAU,OAAO;AAAA,MACrB,EAAE;AAAA,IACJ;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,SAAS,GAA4B,MAAiD;AAC5F,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,SAAS,CAAC;AACxD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,UAAU,UAAU,CAAC;AAC3B,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ;AAAA,MACA,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,IACV,CAAC;AACD,QAAI,SAAS,WAAW;AAGtB,UAAI,gBAAgB,KAAK,MAAO,GAAG;AACjC,aAAK,SAAS,KAAK;AACnB,aAAK,QAAQ;AAAA,MACf;AAAA,IACF,OAAO;AACL,WAAK,QAAQ,EAAE,mBAAmB,gBAAgB;AAAA,IACpD;AACA,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,KAAK,MAAM,CAAC;AAChF,WAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,EAAE;AAAA,EACzC;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,WAAW,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,UAAU,UAAU,CAAC;AAC3B,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AAGxB,UAAM,OAAO,KAAK;AAClB,QAAI,SAAS,OAAW,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAC5F,QAAI;AACJ,QAAI;AACF,gBAAU,eAAe,MAAM,EAAE,IAAa;AAAA,IAChD,SAAS,GAAG;AACV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,cAAc,GAAG,EAAE;AAAA,IAChD;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,KAAK,IAAI,WAAW;AAC/B,UAAM,WAA6B;AAAA,MACjC;AAAA,MACA,SAAS,KAAK;AAAA,MACd,UAAU,EAAE;AAAA,MACZ,mBAAmB;AAAA,MACnB,MAAM,EAAE;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,EAAE;AAAA,MACb,MAAO,EAAE,QAAqB,CAAC;AAAA,MAC/B,aAAc,EAAE,eAA4B,CAAC;AAAA,MAC7C,IAAI;AAAA,MACJ,YAAY,EAAE;AAAA,MACd,aAAa,EAAE;AAAA,MACf,kBAAkB,EAAE;AAAA,IACtB;AACA,OAAG,UAAU,IAAI,IAAI,QAAQ;AAC7B,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,MAAM,SAAS;AAAA,MACf,sBAAsB;AAAA,IACxB,CAAC;AACD,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,sBAAsB,IAAI,QAAQ,EAAE;AAAA,EAC7E;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,CAAC;AAClE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,MAAM,EAAE,IAAI;AACrD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,kBAAmB,EAAE,YAAuB;AAAA,IAC9C,CAAC;AACD,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,EAAE,OAAiB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,oBAAoB,UAAU,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,SAAS,EAAE;AACjB,UAAM,OAAO,OAAO,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,IAAI;AACjE,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AACvE,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,KAAK,KAAK,EAAE,EAAE;AAAA,IACvF;AACA,QAAI,EAAE,aAAa,QAAQ,OAAO,EAAE,aAAa,YAAY,MAAM,QAAQ,EAAE,QAAQ,GAAG;AACtF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,EAAE;AAAA,IACnE;AACA,UAAM,KAAK,EAAE;AACb,UAAM,WAAW,GAAG;AACpB,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,QAAQ,GAAG;AACjB,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AAMA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,UAAM,OAAS,SAAqC,KAAK;AACzD,QAAI,CAAC,OAAO,MAAM,GAAG,YAAY,GAAG;AAClC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,IAAI,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,QAAQ,KAAK,IAAI,OAAO;AAC9B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAO,GAAG,QAAmB,KAAK;AAAA,MAClC,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,GAAG,SAAqC,CAAC;AAAA,MACjD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY,KAAK;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,WAAW,MAAM,kBAAkB,KAAK,EAAE,GAAG,CAAC;AAAA,MAC1G,QAAQ;AAAA,IACV;AAIA,QAAI,KAAK,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACzG,cAAQ,kBAAkB;AAAA,IAC5B;AACA,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,MAAM,KAAK,GAAG,CAAC;AACtG,WAAO,EAAE,QAAQ,EAAE,aAAa,OAAO,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,aAAa,GAAoC;AACxD,QAAM,MAA+B;AAAA,IACnC,KAAK,EAAE;AAAA,IAAK,MAAM,EAAE;AAAA,IAAM,MAAM,EAAE;AAAA,IAAM,QAAQ,EAAE;AAAA,EACpD;AACA,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,OAAQ,KAAI,SAAS,EAAE;AAC7B,MAAI,EAAE,KAAK,QAAQ;AACjB,QAAI,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,OAAK,CAAC,EAAE,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,OAAK,EAAE,GAAG,EAAE;AACvF,QAAI,cAAc,EAAE;AAAA,EACtB;AACA,MAAI,EAAE,OAAQ,KAAI,SAAS;AAC3B,MAAI,EAAE,SAAU,KAAI,WAAW,EAAE;AACjC,MAAI,EAAE,UAAW,KAAI,YAAY,EAAE;AACnC,SAAO;AACT;;;AC1+DA,IAAME,QAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAExE,SAAS,kBAAkB,cAC4B;AAE5D,QAAM,gBAAiC,CAAC,MAAM,eAAe;AAC3D,UAAM,WAAW;AACjB,WAAO;AAAA,MACL,UAAU,SAAS,CAAC;AAAA,MACpB,WAAW;AAAA,QACT,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB,SAAS,MAAM,CAAC,EAAE,IAAI,QAAM;AAAA,UACnD,WAAW;AAAA,UAAG,iBAAiB;AAAA,QACjC,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,QAAM,oBAAyC,CAAC,OAAO,UAAU;AAC/D,UAAM,OAAQ,MAAM,eAA0B;AAC9C,QAAI,OAAO;AACX,QAAI;AAAE,aAAO,OAAO,MAAM,cAAc,CAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAK;AACpE,QAAI,MAAM,IAAI,EAAG,QAAO;AACxB,UAAM,IAAIA,MAAK,IAAI,KAAK;AACxB,QAAI,KAAK,EAAG,QAAO;AAAA,MAAE,OAAO;AAAA,MAC1B,WAAW,EAAE,WAAW,WAAW,SAAS,oCAAoC;AAAA,IAAC;AACnF,QAAI,MAAM,KAAK,OAAO,IAAK,QAAO;AAAA,MAAE,OAAO;AAAA,MACzC,WAAW,EAAE,WAAW,WAAW,SAAS,mDAAmD;AAAA,IAAC;AAClG,QAAI,MAAM,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAC3C,WAAW,EAAE,WAAW,WAAW,SAAS,oDAAoD;AAAA,IAAC;AACnG,QAAI,KAAK,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAC9E,WAAW,EAAE,WAAW,WAAW,SAAS,gDAAgD;AAAA,IAAC;AAC/F,WAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAClD,WAAW,EAAE,WAAW,WAAW,SAAS,qCAAqC;AAAA,IAAC;AAAA,EACtF;AAEA,QAAM,mBAAuC,CAAC,OAAO,UAAU;AAC7D,UAAM,OAAQ,MAAM,eAA0B;AAC9C,QAAI,OAAO;AACX,QAAI;AAAE,aAAO,OAAO,MAAM,cAAc,CAAG;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAK;AACpE,QAAI,MAAM,IAAI,EAAG,QAAO;AACxB,UAAM,IAAIA,MAAK,IAAI,KAAK;AACxB,UAAM,WAAY,KAAK,KAAO,KAAK,KAAK,OAAO;AAC/C,WAAO;AAAA,MACL;AAAA,MACA,IAAI,WAAW,eAAe;AAAA,MAC9B,gBAAgB;AAAA,QACd,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,eAAe,mBAAmB,iBAAiB;AAC9D;;;AC5BO,SAAS,gBACd,OACA,WACA,SACY;AACZ,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,OAAQ,OAAM,IAAI,MAAM,oBAAoB;AACzD,MAAI,CAAC,QAAQ,KAAM,OAAM,IAAI,MAAM,kBAAkB;AAErD,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,QAAM,aAAa,YAAY,QAAQ,MAAM;AAC7C,QAAM,OAAO,QAAQ,YAAY,YAAY,QAAQ,IAAI;AAEzD,QAAM,YAAY,CAAC;AAAA,IACjB,MAAc;AAAA,IACd,QAAc,QAAQ,UAAU;AAAA,IAChC,MAAc,QAAQ;AAAA,IACtB,YAAc;AAAA,IACd,aAAc;AAAA,EAChB,CAAC;AAED,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,QAAQ;AAAA,EACpB;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS,EAAE,WAAW,MAAM,QAAQ,QAAQ,SAAS,QAAQ,OAAO,cAAc;AAAA,EACpF,CAAC;AAED,QAAM,SAAkC,EAAE,QAAQ,QAAQ,QAAQ,UAAU;AAC5E,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB,SAAU;AAAA,IACV;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,YAAY,WAAW,aAAa,WAAW;AAC3E;AAmCO,SAAS,uBACd,OACA,WACA,SACe;AACf,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,MAAI,CAAC,QAAQ,YAAa,OAAM,IAAI,MAAM,yBAAyB;AAEnE,QAAM,WAAW,YAAY,QAAQ,IAAI;AACzC,QAAM,eAAe,YAAY,QAAQ,QAAQ;AACjD,QAAM,OAAO,QAAQ,YAAY;AAEjC,QAAM,WAAW;AAAA,IACf,MAAgB;AAAA,IAChB,cAAgB,QAAQ;AAAA,IACxB,WAAgB;AAAA,IAChB,eAAgB;AAAA,EAClB;AAEA,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,EAAE,cAAc,QAAQ,aAAa,MAAM,QAAQ,KAAK;AAAA,EACpE;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAe,QAAQ;AAAA,EACjC,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IACR,QAAQ;AAAA,MAAE;AAAA,MAAW,MAAM,QAAQ;AAAA,MACzB,SAAS;AAAA,MAAQ,OAAO;AAAA,IAAc;AAAA,EAClD,CAAC;AAED,QAAM,SAAkC,EAAE,UAAU,QAAQ,UAAU,WAAW,CAAC,QAAQ,EAAE;AAC5F,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IAAW,MAAM,QAAQ;AAAA,IAAW,SAAS;AAAA,IAC7C;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAiB,QAAQ;AAAA,EACnC,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,WAAW,UAAU,eAAe,aAAa;AAC7E;","names":["createHash","call","call","wsId","CRIT"]}
+{"version":3,"sources":["../src/canonical.ts","../src/catalogue.ts","../src/crypto.ts","../src/ids.ts","../src/jsonrpc.ts","../src/params.ts","../src/audit.ts","../src/patch.ts","../src/storage/store.ts","../src/tracked.ts","../src/api.ts","../src/types.ts","../src/profiles/audit_scitt.ts","../src/profiles/control.ts","../src/profiles/deliberation.ts","../src/profiles/handoff.ts","../src/profiles/routing.ts","../src/profiles/security_signed.ts","../src/profiles/whisper.ts","../src/coordinator.ts","../src/policy.ts","../src/transports/wrap.ts"],"sourcesContent":["/**\n * @brightbeamai/chap-coordinator/canonical\n *\n * Deterministic JSON canonicalisation for CHAP. CHAP signs and hashes the\n * canonicalisation of envelopes.\n *\n * Follows RFC 8785 (JCS) for objects, arrays, strings, booleans, and null,\n * with one deliberate restriction on numbers. RFC 8785 mandates the\n * ECMAScript number-to-string algorithm, which is hard to reproduce\n * byte-identically across languages; a subtle mismatch would make a chain\n * written by one implementation fail verification against another. To make\n * cross-implementation agreement provable rather than approximate, a CHAP\n * canonical number MUST be an integer within the safe-integer range\n * (abs value <= Number.MAX_SAFE_INTEGER). Non-integers and larger\n * magnitudes are rejected: represent them as strings. The Python reference\n * enforces the identical rule.\n */\n\nimport { createHash } from \"node:crypto\";\n\nexport const ZERO_HASH = \"sha256:\" + \"0\".repeat(64);\n\nconst NON_INTEGER_ERROR =\n  'CHAP canonical numbers must be integers; represent decimals as strings ' +\n  '(e.g. \"8.2\") so the hash is deterministic across implementations.';\nconst NUMBER_RANGE_ERROR =\n  \"CHAP canonical integers must be within the safe-integer range \" +\n  \"(abs value <= 2^53 - 1); represent larger numbers as strings.\";\n\nconst LONE_SURROGATE_ERROR =\n  \"CHAP canonical strings must be valid Unicode (I-JSON / RFC 7493); \" +\n  \"unpaired UTF-16 surrogates are not permitted.\";\n\nfunction assertNoLoneSurrogate(s: string): void {\n  for (let i = 0; i < s.length; i++) {\n    const c = s.charCodeAt(i);\n    if (c >= 0xd800 && c <= 0xdbff) {\n      const next = i + 1 < s.length ? s.charCodeAt(i + 1) : 0;\n      if (next < 0xdc00 || next > 0xdfff) throw new Error(LONE_SURROGATE_ERROR);\n      i++;\n    } else if (c >= 0xdc00 && c <= 0xdfff) {\n      throw new Error(LONE_SURROGATE_ERROR);\n    }\n  }\n}\n\nfunction canonicalString(s: string): string {\n  assertNoLoneSurrogate(s);\n  return JSON.stringify(s);\n}\n\nfunction canonicalNumber(n: number): string {\n  if (!Number.isFinite(n)) {\n    throw new Error(\n      \"Non-finite numbers are not permitted in a CHAP canonical value.\",\n    );\n  }\n  if (!Number.isInteger(n)) {\n    throw new Error(NON_INTEGER_ERROR);\n  }\n  if (Math.abs(n) > Number.MAX_SAFE_INTEGER) {\n    throw new Error(NUMBER_RANGE_ERROR);\n  }\n  // A safe integer's toString() is always plain decimal digits (no\n  // exponent), byte-identical to Python's str(int(...)).\n  return n.toString();\n}\n\nfunction canon(value: unknown): string {\n  if (value === null) return \"null\";\n  if (value === true) return \"true\";\n  if (value === false) return \"false\";\n  if (typeof value === \"string\") return canonicalString(value);\n  if (typeof value === \"number\") return canonicalNumber(value);\n  if (Array.isArray(value)) {\n    return \"[\" + value.map(canon).join(\",\") + \"]\";\n  }\n  if (typeof value === \"object\") {\n    const obj = value as Record<string, unknown>;\n    const keys = Object.keys(obj).sort();\n    const parts: string[] = [];\n    for (const key of keys) {\n      parts.push(canonicalString(key) + \":\" + canon(obj[key]));\n    }\n    return \"{\" + parts.join(\",\") + \"}\";\n  }\n  throw new TypeError(`Cannot canonicalise value of type ${typeof value}`);\n}\n\n/** Return the JCS canonical UTF-8 bytes for a JSON-compatible value. */\nexport function canonicalize(value: unknown): Buffer {\n  return Buffer.from(canon(value), \"utf-8\");\n}\n\n/** Return ``sha256:<64-hex>`` digest of bytes. */\nexport function sha256Hex(data: Buffer | string): string {\n  const h = createHash(\"sha256\");\n  h.update(typeof data === \"string\" ? Buffer.from(data, \"utf-8\") : data);\n  return \"sha256:\" + h.digest(\"hex\");\n}\n\n/** Convenience: content hash for an artefact payload via JCS. */\nexport function contentHash(content: unknown): string {\n  return sha256Hex(canonicalize(content));\n}\n","// Generated by scripts/sync-method-catalogue.mjs. Do not edit.\n// Source: schemas/profiles/chap-methods.schema.json\n/**\n * Which profile owns which method, and which methods are never gated.\n *\n * SPECIFICATION 15.4: a Coordinator refuses a method whose owning profile the\n * workspace does not advertise.\n * The rule applies to each method, since a namespace can span profiles: audit\n * spans audit-scitt and core; escalate spans review and routing; review spans\n * review and routing; task spans core and routing.\n */\n\n/** The profile that introduces each method the references implement. */\nexport const OWNING_PROFILE: Readonly<Record<string, string>> = Object.freeze({\n  \"abstain.declare\":         \"review/1.0\",\n  \"audit.read\":              \"core/1.0\",\n  \"audit.submit_to_scitt\":   \"audit-scitt/1.0\",\n  \"audit.verify_chain\":      \"audit-scitt/1.0\",\n  \"audit.verify_receipt\":    \"audit-scitt/1.0\",\n  \"control.cancel\":          \"control/1.0\",\n  \"control.pause\":           \"control/1.0\",\n  \"control.resume\":          \"control/1.0\",\n  \"control.rollback\":        \"control/1.0\",\n  \"control.set_mode_ceiling\":\"control/1.0\",\n  \"control.snapshot\":        \"control/1.0\",\n  \"control.supersede\":       \"control/1.0\",\n  \"decide.approve\":          \"review/1.0\",\n  \"decide.override\":         \"review/1.0\",\n  \"decide.reject\":           \"review/1.0\",\n  \"deliberate.close\":        \"deliberation/1.0\",\n  \"deliberate.comment\":      \"deliberation/1.0\",\n  \"deliberate.open\":         \"deliberation/1.0\",\n  \"deliberate.vote\":         \"deliberation/1.0\",\n  \"escalate.auto\":           \"routing/1.0\",\n  \"escalate.raise\":          \"review/1.0\",\n  \"handoff.accept\":          \"handoff/1.0\",\n  \"handoff.decline\":         \"handoff/1.0\",\n  \"handoff.propose\":         \"handoff/1.0\",\n  \"participant.join\":        \"core/1.0\",\n  \"participant.leave\":       \"core/1.0\",\n  \"participant.revoke_key\":  \"core/1.0\",\n  \"participant.rotate_key\":  \"core/1.0\",\n  \"review.acknowledge\":      \"review/1.0\",\n  \"review.depth\":            \"routing/1.0\",\n  \"review.request\":          \"review/1.0\",\n  \"task.complete\":           \"core/1.0\",\n  \"task.create\":             \"core/1.0\",\n  \"task.route\":              \"routing/1.0\",\n  \"task.update\":             \"core/1.0\",\n  \"whisper.answer\":          \"whisper/1.0\",\n  \"whisper.ask\":             \"whisper/1.0\",\n  \"workspace.create\":        \"core/1.0\",\n  \"workspace.describe\":      \"core/1.0\",\n  \"workspace.invite\":        \"core/1.0\",\n  \"workspace.set_profiles\":  \"core/1.0\",\n});\n\n/**\n * Callable whatever the workspace advertises.\n *\n * Reads, because a workspace must always be able to ask what it is and to\n * check its own chain. Not the coordinator's read-only set: that holds\n * audit.submit_to_scitt, which reaches a transparency service and is a real\n * audit-scitt/1.0 capability.\n */\nexport const ALWAYS_AVAILABLE: ReadonlySet<string> = new Set([\n  \"workspace.describe\",\n  \"audit.read\",\n  \"audit.verify_chain\",\n  \"audit.verify_receipt\",\n]);\n\n/**\n * The profiles a workspace may advertise, each at its current version. A\n * profile id names one of them at its major version (SPECIFICATION 6.5).\n */\nexport const PROFILE_VERSIONS: Readonly<Record<string, string>> = Object.freeze({\n  \"audit-scitt\": \"1.0\",\n  \"control\": \"1.0\",\n  \"core\": \"1.0\",\n  \"deliberation\": \"1.0\",\n  \"handoff\": \"1.0\",\n  \"identity-oidc\": \"1.0\",\n  \"identity-vc\": \"1.0\",\n  \"modes\": \"1.0\",\n  \"review\": \"1.0\",\n  \"routing\": \"1.0\",\n  \"security-signed\": \"1.0\",\n  \"whisper\": \"1.0\",\n});\n","/**\n * @brightbeamai/chap-coordinator/crypto\n *\n * Ed25519 signing/verification for the security-signed/1.0 profile, and\n * verification of WebAuthn assertions, the signatures a browser's\n * authenticator makes with a P-256 key.\n *\n * Uses Node's built-in crypto (no external dependencies). Keys are\n * represented as RFC 7517 JWKs.\n */\n\nimport {\n  createPrivateKey,\n  createPublicKey,\n  KeyObject,\n  sign as nodeSign,\n  verify as nodeVerify,\n  randomBytes,\n  createHash,\n} from \"node:crypto\";\nimport { canonicalize } from \"./canonical.js\";\n\nconst ED25519_OID = Buffer.from(\"302a300506032b6570032100\", \"hex\");\n\nfunction b64urlNoPad(buf: Buffer): string {\n  return buf.toString(\"base64\").replace(/=+$/, \"\").replace(/\\+/g, \"-\").replace(/\\//g, \"_\");\n}\n\nfunction b64urlDecode(s: string): Buffer {\n  const pad = \"=\".repeat((4 - (s.length % 4)) % 4);\n  return Buffer.from(s.replace(/-/g, \"+\").replace(/_/g, \"/\") + pad, \"base64\");\n}\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  d?:  string;\n  use?: string;\n  alg?: string;\n}\n\n/**\n * Deterministically derive a 32-byte Ed25519 seed from a participant URI.\n * Demo / test only. production deployments supply real keys.\n */\nexport function deriveSeed(uri: string): Buffer {\n  return createHash(\"sha256\").update(\"chap:\" + uri).digest();\n}\n\n/**\n * Build a Node KeyObject (private key) from a raw 32-byte Ed25519 seed.\n */\nexport function privateKeyFromSeed(seed: Buffer): KeyObject {\n  if (seed.length !== 32) {\n    throw new Error(\"Ed25519 seed must be 32 bytes\");\n  }\n  // PKCS#8 DER for Ed25519: SEQ(SEQ(OID), OCTET(OCTET(seed)))\n  const pkcs8 = Buffer.concat([\n    Buffer.from(\"302e020100300506032b657004220420\", \"hex\"),\n    seed,\n  ]);\n  return createPrivateKey({ key: pkcs8, format: \"der\", type: \"pkcs8\" });\n}\n\n/** Public key bytes (32 bytes) from a private key. */\nexport function publicKeyBytes(privateKey: KeyObject): Buffer {\n  const pub = createPublicKey(privateKey);\n  const der = pub.export({ format: \"der\", type: \"spki\" }) as Buffer;\n  // SPKI for Ed25519 is the OID prefix + 32-byte raw public key\n  return der.subarray(der.length - 32);\n}\n\n/** Public KeyObject from raw 32-byte Ed25519 public key. */\nexport function publicKeyFromRaw(raw: Buffer): KeyObject {\n  if (raw.length !== 32) {\n    throw new Error(\"Ed25519 public key must be 32 bytes\");\n  }\n  const der = Buffer.concat([ED25519_OID, raw]);\n  return createPublicKey({ key: der, format: \"der\", type: \"spki\" });\n}\n\n/** Render a JWK from a Node private KeyObject. */\nexport function jwkFromPrivateKey(uri: string, key: KeyObject): Jwk {\n  const pub = publicKeyBytes(key);\n  return {\n    kty: \"OKP\",\n    crv: \"Ed25519\",\n    kid: createHash(\"sha256\").update(uri).digest(\"hex\").slice(0, 16),\n    use: \"sig\",\n    alg: \"EdDSA\",\n    x:   b64urlNoPad(pub),\n  };\n}\n\n/** Sign canonical bytes; return ``ed25519:<kid>:<base64>``. */\nexport function signEnvelope(canonical: Buffer, privateKey: KeyObject, kid: string): string {\n  const sig = nodeSign(null, canonical, privateKey);\n  return `ed25519:${kid}:${sig.toString(\"base64\")}`;\n}\n\n/**\n * The bytes a standard base64 string encodes, or undefined where it is not\n * the one canonical encoding of them: standard alphabet, padded, and nothing\n * else, so a signature has one spelling in every language.\n */\nexport function strictBase64(s: string): Buffer | undefined {\n  const bytes = Buffer.from(s, \"base64\");\n  return bytes.toString(\"base64\") === s ? bytes : undefined;\n}\n\n/** Verify a CHAP sig string against canonical bytes and a public key. */\nexport function verifyEnvelope(canonical: Buffer, sigTag: string, publicKey: KeyObject): boolean {\n  if (!sigTag.startsWith(\"ed25519:\")) return false;\n  const parts = sigTag.split(\":\");\n  if (parts.length < 2) return false;\n  const sig = strictBase64(parts[parts.length - 1]);\n  if (sig === undefined) return false;\n  try {\n    return nodeVerify(null, canonical, publicKey, sig);\n  } catch {\n    return false;\n  }\n}\n\n/** Whether a JWK is an Ed25519 public key: OKP on Ed25519 with a 32-byte x. */\nexport function isEd25519Key(jwk: unknown): boolean {\n  if (jwk === null || typeof jwk !== \"object\" || Array.isArray(jwk)) return false;\n  const key = jwk as Record<string, unknown>;\n  return key.kty === \"OKP\" && key.crv === \"Ed25519\" && typeof key.x === \"string\" && COORDINATE.test(key.x);\n}\n\n/** Parse a JWK x (base64url) into a Node public KeyObject. */\nexport function publicKeyFromJwk(jwk: Jwk): KeyObject {\n  return publicKeyFromRaw(b64urlDecode(jwk.x));\n}\n\n/**\n * The RFC 7638 thumbprint of a public JWK: SHA-256 over the JSON of its\n * required members in lexicographic order, base64url without padding.\n * The members are {crv, kty, x} for an OKP key and {crv, kty, x, y} for an\n * EC key, and for any other key, or one whose members are not strings,\n * there is none.\n */\nexport function jwkThumbprint(jwk: unknown): string | undefined {\n  if (jwk === null || typeof jwk !== \"object\" || Array.isArray(jwk)) return undefined;\n  const key = jwk as Record<string, unknown>;\n  const names = key.kty === \"OKP\" ? [\"crv\", \"kty\", \"x\"] : key.kty === \"EC\" ? [\"crv\", \"kty\", \"x\", \"y\"] : undefined;\n  if (!names || names.some((n) => typeof key[n] !== \"string\")) return undefined;\n  const members = Object.fromEntries(names.map((n) => [n, key[n]]));\n  return b64urlNoPad(createHash(\"sha256\").update(canonicalize(members)).digest());\n}\n\n/** A WebAuthn assertion, as the last part of a `webauthn:` tag carries it. */\nexport interface WebAuthnAssertion {\n  authenticatorData: Buffer;\n  clientDataJSON:    Buffer;\n  signature:         Buffer;\n}\n\n// Unpadded base64url. A length of 1 more than a multiple of 4 encodes no\n// whole byte, and is refused here, since Node and Python decode it apart.\nconst B64URL = /^[A-Za-z0-9_-]+$/;\n\n/**\n * The assertion in `<authenticatorData>.<clientDataJSON>.<signature>`, each\n * part unpadded base64url, or undefined where the part is not that.\n */\nexport function parseWebAuthnAssertion(part: string): WebAuthnAssertion | undefined {\n  const pieces = part.split(\".\");\n  if (pieces.length !== 3 || pieces.some((p) => !B64URL.test(p) || p.length % 4 === 1)) return undefined;\n  const [authenticatorData, clientDataJSON, signature] = pieces.map((p) => Buffer.from(p, \"base64url\"));\n  return { authenticatorData, clientDataJSON, signature };\n}\n\n// A P-256 coordinate: 32 bytes, unpadded base64url.\nconst COORDINATE = /^[A-Za-z0-9_-]{43}$/;\n\n/**\n * Whether a JWK is a WebAuthn key: a P-256 key for ES256 with a `webauthn`\n * member naming its `rp_id`, and, where it limits them, its `origins`.\n */\nexport function isWebAuthnKey(jwk: unknown): boolean {\n  if (jwk === null || typeof jwk !== \"object\" || Array.isArray(jwk)) return false;\n  const key = jwk as Record<string, unknown>;\n  const w = key.webauthn as Record<string, unknown> | null | undefined;\n  return key.kty === \"EC\" && key.crv === \"P-256\"\n    && typeof key.x === \"string\" && COORDINATE.test(key.x) && typeof key.y === \"string\" && COORDINATE.test(key.y)\n    && (key.alg === undefined || key.alg === \"ES256\")\n    && w !== null && typeof w === \"object\" && !Array.isArray(w)\n    && typeof w.rp_id === \"string\" && w.rp_id !== \"\"\n    && (w.origins === undefined || (Array.isArray(w.origins) && w.origins.every((o) => typeof o === \"string\")));\n}\n\nconst UTF8 = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true });\n\n/** How deeply a client data object may nest, as an envelope may (64 levels). */\nconst MAX_CLIENT_DATA_NESTING = 64;\n\n/**\n * How deeply JSON text nests, read from its brackets outside strings, so a\n * text too deep for one language's parser is refused the same way by both.\n */\nfunction jsonDepth(text: string): number {\n  let depth = 0;\n  let deepest = 0;\n  let inString = false;\n  for (let i = 0; i < text.length; i++) {\n    const ch = text[i];\n    if (inString) {\n      if (ch === \"\\\\\") i++;\n      else if (ch === '\"') inString = false;\n    } else if (ch === '\"') {\n      inString = true;\n    } else if (ch === \"{\" || ch === \"[\") {\n      deepest = Math.max(deepest, ++depth);\n    } else if (ch === \"}\" || ch === \"]\") {\n      depth--;\n    }\n  }\n  return deepest;\n}\n\n// The authenticator data's flags: user present, user verified, backup\n// eligible, backed up, attested credential data and extension data.\nconst UP = 0x01, UV = 0x04, BE = 0x08, BS = 0x10, AT = 0x40, ED = 0x80;\n\n/**\n * Why a WebAuthn assertion does not sign a request, or null when it does.\n * `canonical` is the JCS form of the request without its `sig`, and `jwk`\n * a key isWebAuthnKey accepts. The checks are the relying party's in the\n * WebAuthn assertion procedure: the key names the origins it signs for; the\n * client data says it is an assertion, over this request, from one of those\n * origins, made in no other origin's frame; the authenticator data is for\n * the key's relying party, with the user present and verified, its backup\n * flags consistent, and nothing after its counter but the extensions its\n * flags announce; and the ES256 signature covers the authenticator data and\n * the hash of the client data.\n */\nexport function webAuthnFailure(canonical: Buffer, assertion: WebAuthnAssertion,\n                                jwk: Record<string, unknown>): string | null {\n  const w = jwk.webauthn as { rp_id: string; origins?: string[] };\n  if (!Array.isArray(w.origins) || w.origins.length === 0) return \"WebAuthn key lists no origin\";\n  let text: string | undefined;\n  try { text = UTF8.decode(assertion.clientDataJSON); } catch { text = undefined; }\n  if (text !== undefined && jsonDepth(text) > MAX_CLIENT_DATA_NESTING) {\n    return `WebAuthn clientDataJSON nests deeper than ${MAX_CLIENT_DATA_NESTING} levels`;\n  }\n  let client: unknown;\n  try { client = text === undefined ? undefined : JSON.parse(text); } catch { client = undefined; }\n  if (client === null || typeof client !== \"object\" || Array.isArray(client)) {\n    return \"WebAuthn clientDataJSON is not a JSON object\";\n  }\n  const data = client as Record<string, unknown>;\n  if (data.type !== \"webauthn.get\") return \"WebAuthn clientDataJSON type is not webauthn.get\";\n  if (data.challenge !== b64urlNoPad(createHash(\"sha256\").update(canonical).digest())) {\n    return \"WebAuthn challenge is not the digest of this request\";\n  }\n  if (!w.origins.includes(data.origin as string)) return \"WebAuthn origin is not one the key allows\";\n  if (data.crossOrigin === true || data.topOrigin !== undefined) {\n    return \"WebAuthn assertion was made in a cross-origin frame\";\n  }\n  const auth = assertion.authenticatorData;\n  if (auth.length < 37) return \"WebAuthn authenticatorData is too short\";\n  if (!auth.subarray(0, 32).equals(createHash(\"sha256\").update(w.rp_id, \"utf-8\").digest())) {\n    return \"WebAuthn rpIdHash does not match the key's rp_id\";\n  }\n  const flags = auth[32];\n  if ((flags & (UP | UV)) !== (UP | UV)) return \"WebAuthn assertion lacks user presence or verification\";\n  if ((flags & BS) && !(flags & BE)) return \"WebAuthn assertion is backed up but not backup eligible\";\n  // An assertion carries no attested credential data, and extension data\n  // only where its flag says so.\n  if (flags & AT) return \"WebAuthn assertion carries attested credential data\";\n  if ((flags & ED) ? auth.length === 37 : auth.length !== 37) {\n    return \"WebAuthn authenticatorData does not end where its flags say\";\n  }\n  try {\n    const key = createPublicKey({ key: { kty: \"EC\", crv: \"P-256\", x: jwk.x as string, y: jwk.y as string },\n                                  format: \"jwk\" });\n    const signed = Buffer.concat([auth, createHash(\"sha256\").update(assertion.clientDataJSON).digest()]);\n    return nodeVerify(\"sha256\", signed, { key, dsaEncoding: \"der\" }, assertion.signature)\n      ? null : \"Signature failed verification\";\n  } catch {\n    return \"Signature failed verification\";\n  }\n}\n\n/** Demo helper: build a deterministic keypair + JWK for a URI. */\nexport function deriveKeypair(uri: string): { privateKey: KeyObject; jwk: Jwk } {\n  const seed = deriveSeed(uri);\n  const privateKey = privateKeyFromSeed(seed);\n  return { privateKey, jwk: jwkFromPrivateKey(uri, privateKey) };\n}\n\nexport { b64urlNoPad, b64urlDecode };\n","/**\n * @brightbeamai/chap-coordinator/ids\n *\n * ULID-format identifier generation. Supports a deterministic mode\n * for tests/demos so byte-for-byte replay works.\n */\n\nconst ALPHABET = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";  // Crockford\n\nfunction encode(value: bigint, length: number): string {\n  let out = \"\";\n  for (let i = 0; i < length; i++) {\n    const idx = Number(value & 31n);\n    out = ALPHABET[idx] + out;\n    value >>= 5n;\n  }\n  return out;\n}\n\nexport class IdFactory {\n  private counter: bigint;\n  private clockMs: number;\n\n  constructor(\n    public readonly deterministic: boolean = false,\n    seed: bigint = 0n,\n    startMs: number = 1_700_000_000_000,\n  ) {\n    this.counter = seed;\n    this.clockMs = startMs;\n  }\n\n  nowMs(): number {\n    if (this.deterministic) {\n      this.clockMs += 1;\n      return this.clockMs;\n    }\n    return Date.now();\n  }\n\n  private randomness(): bigint {\n    if (this.deterministic) {\n      this.counter += 1n;\n      return (this.counter * 0x9E3779B97F4A7C15n) & ((1n << 80n) - 1n);\n    }\n    // 80 bits of randomness. `globalThis.crypto` is standard from Node 19\n    // and present in every other supported runtime, so there is no fallback\n    // path: the previous one called `require`, which does not exist in an\n    // ES module and so threw on any runtime without the global.\n    const buf = new Uint8Array(10);\n    crypto.getRandomValues(buf);\n    let n = 0n;\n    for (const b of buf) n = (n << 8n) | BigInt(b);\n    return n;\n  }\n\n  ulid(): string {\n    const ts = BigInt(this.nowMs()) & ((1n << 48n) - 1n);\n    const rand = this.randomness();\n    return encode(ts, 10) + encode(rand, 16);\n  }\n\n  envelopeId():     string { return this.ulid(); }\n  taskId():         string { return \"tsk_\" + this.ulid(); }\n  artefactId():     string { return \"art_\" + this.ulid(); }\n  logicalId():      string { return \"lgl_\" + this.ulid(); }\n  workspaceId():    string { return \"wsp_\" + this.ulid(); }\n  deliberationId(): string { return \"dlb_\" + this.ulid(); }\n  handoffId():      string { return \"hnd_\" + this.ulid(); }\n  snapshotId():     string { return \"snp_\" + this.ulid(); }\n}\n","/**\n * @brightbeamai/chap-coordinator/jsonrpc\n *\n * Error codes (JSON-RPC standard + CHAP private range) and helpers.\n *\n * Error code allocations come directly from each profile spec. See\n * profiles/*.md for the authoritative definitions.\n */\n\nexport const E = {\n  // JSON-RPC 2.0 standard\n  PARSE:    -32700,\n  REQUEST:  -32600,\n  METHOD:   -32601,\n  PARAMS:   -32602,\n  INTERNAL: -32603,\n\n  // review/1.0 profile\n  NOT_REVIEWABLE: -32010,\n  NOT_AUTHORISED: -32011,\n  PATCH_FAILED:   -32012,\n  REVIEW_LAPSED:  -32013,\n  REVIEW_ALREADY_OPEN: -32014,\n\n  // whisper/1.0 profile (profiles/whisper.md S6)\n  WHISPER_ALREADY_ANSWERED:    -32020,\n  WHISPER_LAPSED:              -32021,\n  WHISPER_OPTION_NOT_IN_SET:   -32022,\n\n  // deliberation/1.0 profile (profiles/deliberation.md S5)\n  DELIB_VOTER_NOT_IN_LIST: -32030,\n  DELIB_ALREADY_VOTED:     -32031,\n  DELIB_CLOSED_OR_LAPSED:  -32032,\n  DELIB_UNKNOWN_RULE:      -32033,\n\n  // modes/1.0 profile (profiles/modes.md S6)\n  MODE_CEILING_EXCEEDED:   -32040,\n  MODE_STEP_UP_REQUIRED:   -32041,\n\n  // handoff/1.0 profile (profiles/handoff.md S6)\n  HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER: -32050,\n  HANDOFF_ALREADY_RESOLVED:               -32051,\n  HANDOFF_RECIPIENT_NOT_MEMBER:           -32052,\n\n  // control/1.0 profile (profiles/control.md S6)\n  CONTROL_STEP_UP_REQUIRED:    -32060,\n  CONTROL_NOT_AUTHORISED:      -32061,\n  CONTROL_SNAPSHOT_NOT_FOUND:  -32062,\n  CONTROL_WORKSPACE_PAUSED:    -32063,\n\n  // security-signed/1.0 profile (profiles/security-signed.md S7)\n  SIG_VERIFY_FAILED:         -32070,\n  SIG_KEY_NOT_FOUND:         -32071,\n  SIG_KEY_REVOKED:           -32072,\n  SIG_ROTATION_KEY_MISMATCH: -32073,\n  SIG_ARTEFACT_DIGEST_MISMATCH: -32074,\n  SIG_ALREADY_ACCEPTED:         -32075,\n\n  // audit-scitt/1.0 profile (profiles/audit-scitt.md S8)\n  SCITT_UNREACHABLE:        -32080,\n  SCITT_STATEMENT_REJECTED: -32081,\n  SCITT_RECEIPT_INVALID:    -32082,\n\n  // identity-oidc/1.0 profile (profiles/identity-oidc.md S8)\n  OIDC_STEP_UP_REQUIRED: -32402,\n  OIDC_TOKEN_INVALID:    -32403,\n  OIDC_CNF_MISMATCH:     -32404,\n  OIDC_SCOPE_MISSING:    -32405,\n\n  // identity-vc/1.0 profile (profiles/identity-vc.md S8)\n  VC_VP_INVALID:             -32410,\n  VC_HOLDER_BINDING_INVALID: -32411,\n  VC_CREDENTIAL_REVOKED:     -32412,\n  VC_SCHEMA_UNKNOWN:         -32413,\n\n  // routing/1.0 profile (profiles/routing.md S3-S5)\n  ROUTING_NO_ELIGIBLE_ASSIGNEE:   -32510,\n  ROUTING_POLICY_VIOLATION:       -32511,\n  ROUTING_AUTO_ESCALATION_TRIGGERED: -32512,\n  ROUTING_CANDIDATES_EMPTY:       -32513,\n  ROUTING_DEPTH_NOT_APPLICABLE:   -32514,\n  ROUTING_POLICY_UNREACHABLE:     -32515,\n  ROUTING_ESC_TARGET_UNAVAILABLE: -32516,\n} as const;\n\nexport function rpcError(code: number, message: string, data?: unknown) {\n  return { code, message, ...(data !== undefined ? { data } : {}) };\n}\n\nexport function isValidEnvelope(env: unknown): boolean {\n  if (typeof env !== \"object\" || env === null) return false;\n  const e = env as Record<string, unknown>;\n  return e.jsonrpc === \"2.0\";\n}\n","/**\n * Type checks for the params a method reads.\n *\n * A param of the wrong type would reach code written for the right one, and\n * the two references would do different things with it: JavaScript reads\n * `[]` and `{}` as true where Python reads them as false, a Python dict\n * cannot be looked up with a list, and a value written into a message reads\n * one way in each language. Checking the type first gives both the same\n * refusal. packages/coordinator-py/chap_coordinator/params.py is the mirror.\n */\nimport { E, rpcError } from \"./jsonrpc.js\";\n\n/** What a param must be when it is present and not null. */\nexport type ParamKind = \"string\" | \"strings\" | \"boolean\" | \"object\" | \"list\" | \"integer\";\n\nconst NAMES: Record<ParamKind, string> = {\n  string: \"a string\",\n  strings: \"a list of strings\",\n  boolean: \"a boolean\",\n  object: \"an object\",\n  list: \"a list\",\n  integer: \"an integer\",\n};\n\nfunction isKind(value: unknown, kind: ParamKind): boolean {\n  switch (kind) {\n    case \"string\": return typeof value === \"string\";\n    case \"strings\": return Array.isArray(value) && value.every((v) => typeof v === \"string\");\n    case \"boolean\": return typeof value === \"boolean\";\n    case \"object\": return typeof value === \"object\" && value !== null && !Array.isArray(value);\n    case \"list\": return Array.isArray(value);\n    case \"integer\": return typeof value === \"number\" && Number.isInteger(value);\n  }\n}\n\n/**\n * The refusal for the first param in `checks` that holds a value of another\n * kind, or null when every one is absent, null or of its kind.\n * `checks` names params of `params`, or of an object inside it as\n * `outer.inner`.\n */\nexport function paramsError(\n  params: Record<string, unknown>,\n  checks: ReadonlyArray<readonly [string, ParamKind]>,\n): { error: ReturnType<typeof rpcError> } | null {\n  for (const [name, kind] of checks) {\n    let value: unknown = params;\n    for (const part of name.split(\".\")) {\n      value = typeof value === \"object\" && value !== null && !Array.isArray(value)\n        ? (value as Record<string, unknown>)[part] : undefined;\n    }\n    if (value !== undefined && value !== null && !isKind(value, kind)) {\n      return { error: rpcError(E.PARAMS, `${name} must be ${NAMES[kind]}`) };\n    }\n  }\n  return null;\n}\n","/**\n * @brightbeamai/chap-coordinator/audit\n *\n * Audit entries, the chain link over them, and the rule for recording a\n * refusal (SPECIFICATION 10.1).\n *\n * An accepted call is recorded under `envelope`. A refused call that the rule\n * names is recorded under `request`, with an `outcome` beside it, so a reader\n * keyed on `envelope` passes it by instead of replaying it as effective. The\n * chain link hashes what the entry records: the envelope of an accepted call,\n * and the outcome together with the request of a refusal. Altering either\n * half of a refusal breaks the chain, moving its record under `envelope` fails\n * the shape check, and an entry with no outcome hashes exactly as it always\n * has, so every existing chain still verifies.\n */\nimport { canonicalize, sha256Hex } from \"./canonical.js\";\nimport { E } from \"./jsonrpc.js\";\nimport type { AuditEntry, Envelope } from \"./types.js\";\n\n/** The value an entry's chain link hashes. */\nexport function entryRecord(entry: AuditEntry): unknown {\n  if (entry.outcome != null) return { outcome: entry.outcome, request: entry.request };\n  return entry.envelope;\n}\n\n/** The call an entry records, whether it took effect or was refused. */\nexport function entryCall(entry: AuditEntry): Envelope | undefined {\n  return entry.envelope ?? entry.request ?? undefined;\n}\n\n/** True when an entry records a refused call. */\nexport function isRefusal(entry: AuditEntry): boolean {\n  return entry.outcome != null;\n}\n\n/** A JSON-RPC call: an object with `jsonrpc` \"2.0\" and a string `method`. */\nfunction isCall(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\n/**\n * An entry is well formed when it records an accepted call alone, under\n * `envelope`, or a refused call alone, under `request`, with an outcome of\n * status `refused` and an integer code. Requiring a JSON-RPC call on either\n * side is what stops a refusal's record being moved under `envelope`, where it\n * would hash to the same bytes and read as a call that took effect.\n */\nexport function entryIsWellFormed(entry: AuditEntry): boolean {\n  const accepted = entry.envelope != null;\n  const refused = entry.request != null;\n  if (accepted === refused) return false;\n  if (accepted) return isCall(entry.envelope) && entry.outcome == null;\n  const o = entry.outcome as unknown as Record<string, unknown> | null | undefined;\n  return isCall(entry.request) && o != null && typeof o === \"object\"\n    && o.status === \"refused\" && Number.isInteger(o.code);\n}\n\n/** Whether a call carries a top-level signature (security-signed/1.0). */\nexport function isSigned(call: unknown): boolean {\n  return call !== null && typeof call === \"object\" && typeof (call as { sig?: unknown }).sig === \"string\";\n}\n\n/**\n * The digest that identifies a signed call by what its sender signed: SHA-256\n * of the JCS of the call without its `sig`. Two encodings of one signature\n * give the same digest, so re-encoding a signature does not make a new call.\n */\nexport function signedDigest(call: Envelope): string {\n  const signed: Record<string, unknown> = { ...call };\n  delete signed.sig;\n  return sha256Hex(canonicalize(signed));\n}\n\n/** chain_head = SHA-256( JCS(record) || prev_hash ). */\nexport function linkHash(record: unknown, prev: string): string {\n  return sha256Hex(Buffer.concat([canonicalize(record), Buffer.from(prev, \"utf-8\")]));\n}\n\n/**\n * Refusals the log never records: a call that was malformed or invalid, a\n * fault in the Coordinator, a call whose signature or key did not check out,\n * and a signed copy of a call the log already holds as accepted.\n */\nconst UNRECORDED_CODES: ReadonlySet<number> = new Set([\n  E.PARSE, E.REQUEST, E.PARAMS, E.INTERNAL,\n  E.SIG_VERIFY_FAILED, E.SIG_KEY_NOT_FOUND, E.SIG_KEY_REVOKED, E.SIG_ROTATION_KEY_MISMATCH,\n  E.SIG_ALREADY_ACCEPTED,\n]);\n\n/**\n * Methods whose refusals are never recorded. They run before the caller is\n * established as a member and are exempt from signature checks, so a refusal\n * of one proves nothing about who sent it.\n */\nconst UNRECORDED_METHODS: ReadonlySet<string> = new Set([\"workspace.create\", \"participant.join\"]);\n\n/**\n * Whether a refusal with this error is one the log records, before the test\n * that the caller is a member.\n *\n * `-32601` is recorded only when the profile gate refused a privileged method,\n * which is an attempt to pull an emergency brake the workspace has switched\n * off. The gate refusing an ordinary method, and a method that does not\n * exist, are not recorded.\n */\nexport function refusalIsRecorded(\n  method: string,\n  error: { code: number; data?: unknown },\n  privileged: ReadonlySet<string>,\n): boolean {\n  if (!Number.isInteger(error.code)) return false;\n  if (UNRECORDED_METHODS.has(method)) return false;\n  if (UNRECORDED_CODES.has(error.code)) return false;\n  if (error.code === E.METHOD) {\n    const data = error.data as { profile?: unknown } | undefined;\n    return typeof data?.profile === \"string\" && privileged.has(method);\n  }\n  return true;\n}\n","/**\n * @brightbeamai/chap-coordinator/patch\n *\n * RFC 6902 JSON Patch implementation, plus a small diff computer that\n * produces a patch from two values. Used by the Coordinator for\n * `decide.override` apply and by the playground UI (in the browser) to\n * compute the patch from a textarea edit.\n *\n * Implements all six RFC 6902 operations (add, remove, replace, move,\n * copy, test) with semantics identical to the Python reference. Path\n * segments that enable prototype pollution in a JavaScript runtime\n * (`__proto__`, `constructor`, `prototype`) are rejected, so the two\n * references accept and reject exactly the same patches.\n */\n\nimport type { JsonPatchOp } from \"./types.js\";\n\nexport class PatchError extends Error {}\n\n// Rejected in every JSON Pointer segment: these enable prototype pollution.\nconst DANGEROUS_KEYS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// An array index is an RFC 6901 array index: \"0\" or a positive integer with no\n// leading zero. A shared strict rule keeps the two references in step -- JS\n// Number() and Python int() otherwise accept disjoint token sets (e.g. \"1e1\",\n// \"0x0a\", \"3.0\", \"\", \"1_0\"), which would apply the same patch differently.\nconst ARRAY_INDEX_RE = /^(0|[1-9][0-9]*)$/;\n\n// The JSON type name of a value. Python and JavaScript name their own types\n// differently (dict against object, list against object, str against string).\n// The refusal names the JSON type, which both references and the\n// specification share.\nfunction jsonType(value: unknown): string {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  switch (typeof value) {\n    case \"object\":  return \"object\";\n    case \"string\":  return \"string\";\n    case \"number\":  return \"number\";\n    case \"boolean\": return \"boolean\";\n    default:        return \"null\";\n  }\n}\n\nfunction arrayIndex(seg: string): number {\n  if (!ARRAY_INDEX_RE.test(seg)) throw new PatchError(`Array index expected at ${JSON.stringify(seg)}`);\n  return Number(seg);\n}\n\nfunction unescape(token: string): string {\n  return token.replace(/~1/g, \"/\").replace(/~0/g, \"~\");\n}\n\nfunction splitPath(path: string): string[] {\n  if (path === \"\") return [];\n  if (!path.startsWith(\"/\")) {\n    throw new PatchError(`JSON Pointer must start with '/': ${JSON.stringify(path)}`);\n  }\n  const segments = path.slice(1).split(\"/\").map(unescape);\n  for (const seg of segments) {\n    if (DANGEROUS_KEYS.has(seg)) {\n      throw new PatchError(`Refusing unsafe path segment ${JSON.stringify(seg)}`);\n    }\n  }\n  return segments;\n}\n\n/** Navigate to the parent of the target; return [parent, lastKey]. */\nfunction navigate(doc: any, parts: string[]): [any, string | number] {\n  if (parts.length === 0) {\n    throw new PatchError(\"Cannot operate on root with this helper.\");\n  }\n  let parent = doc;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (Array.isArray(parent)) {\n      const idx = arrayIndex(part);\n      if (idx >= parent.length) {\n        throw new PatchError(`Index out of range at /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[idx];\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, part)) {\n        throw new PatchError(`Path not found: /${parts.slice(0, i + 1).join(\"/\")}`);\n      }\n      parent = parent[part];\n    } else {\n      throw new PatchError(`Cannot traverse into ${jsonType(parent)} at ${JSON.stringify(part)}`);\n    }\n  }\n  const last = parts[parts.length - 1];\n  if (Array.isArray(parent)) {\n    if (last === \"-\") return [parent, \"-\"];\n    return [parent, arrayIndex(last)];\n  }\n  return [parent, last];\n}\n\nfunction getAt(doc: any, path: string): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) return doc;\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    if (key === \"-\") throw new PatchError(\"Cannot read '-' position.\");\n    const idx = key as number;\n    if (idx < 0 || idx >= parent.length) throw new PatchError(`Index out of range: ${path}`);\n    return parent[idx];\n  }\n  if (\n    parent === null ||\n    typeof parent !== \"object\" ||\n    !Object.prototype.hasOwnProperty.call(parent, key)\n  ) {\n    throw new PatchError(`Path not found: ${path}`);\n  }\n  return parent[key as string];\n}\n\nfunction clone<T>(v: T): T {\n  return v === undefined ? v : (JSON.parse(JSON.stringify(v)) as T);\n}\n\nfunction deepEqual(a: any, b: any): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return a === b;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return a === b;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) if (!deepEqual(a[i], b[i])) return false;\n    return true;\n  }\n  const ak = Object.keys(a);\n  const bk = Object.keys(b);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (!Object.prototype.hasOwnProperty.call(b, k)) return false;\n    if (!deepEqual(a[k], b[k])) return false;\n  }\n  return true;\n}\n\n/**\n * Puts `value`, which the document owns from here on, at `path`. A copied\n * value counts towards what the patch carries. A moved value is counted\n * already: `movedFrom` is the number of segments of the place it left, and\n * only its key, a value it replaces and how deep it now reaches change the\n * count. A move to a deeper place, or onto the whole document, costs a pass\n * over the value, so it counts towards what the patch carries as well.\n */\nfunction addAt(doc: any, path: string, value: unknown, size: Size | undefined,\n               copied = false, movedFrom?: number): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) {\n    if (size) {\n      size.reset(value);\n      if (copied || movedFrom !== undefined) size.carry(size);\n    }\n    return value; // replace whole document\n  }\n  const [parent, key] = navigate(doc, parts);\n  let newKey: string | undefined;\n  if (Array.isArray(parent)) {\n    if (key === \"-\") {\n      parent.push(value);\n    } else {\n      const idx = key as number;\n      if (idx < 0 || idx > parent.length) {\n        throw new PatchError(`Index out of range for add: ${path}`);\n      }\n      parent.splice(idx, 0, value);\n    }\n  } else if (parent !== null && typeof parent === \"object\") {\n    if (Object.prototype.hasOwnProperty.call(parent, key)) size?.take(parent[key as string]);\n    else newKey = key as string;\n    parent[key as string] = value;\n  } else {\n    throw new PatchError(`Cannot add into ${jsonType(parent)}`);\n  }\n  if (size) {\n    if (movedFrom === undefined) {\n      const inserted = size.insert(value, parts.length, newKey);\n      if (copied) size.carry(inserted);\n    } else {\n      if (newKey !== undefined) size.bytes += utf8Length(newKey);\n      if (parts.length > movedFrom) {\n        // A move to a deeper place costs a pass over the value, for its depth.\n        const moved = sizeOf(value);\n        size.depth = Math.max(size.depth, parts.length + moved.depth);\n        size.carry(moved);\n      }\n    }\n  }\n  return doc;\n}\n\n/** Removes the value at `path`. A moved value goes back in elsewhere, so only its key leaves the count. */\nfunction removeAt(doc: any, path: string, size: Size | undefined, moved = false): any {\n  const parts = splitPath(path);\n  if (parts.length === 0) throw new PatchError(\"Cannot remove root.\");\n  const [parent, key] = navigate(doc, parts);\n  if (Array.isArray(parent)) {\n    // RFC 6901: \"-\" names no existing element, so it cannot be removed.\n    // Left as a string it passes the numeric range check and then splice\n    // coerces it to zero, removing the first element instead.\n    const idx = key === \"-\" ? -1 : (key as number);\n    if (idx < 0 || idx >= parent.length) {\n      throw new PatchError(`Index out of range for remove: ${path}`);\n    }\n    if (size && !moved) size.take(parent[idx]);\n    parent.splice(idx, 1);\n  } else if (parent !== null && typeof parent === \"object\") {\n    if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n      throw new PatchError(`Path not found for remove: ${path}`);\n    }\n    if (size) {\n      if (moved) size.bytes -= utf8Length(key as string);\n      else size.take(parent[key as string], key as string);\n    }\n    delete parent[key as string];\n  } else {\n    throw new PatchError(`Cannot remove from ${jsonType(parent)}`);\n  }\n  return doc;\n}\n\nfunction applyOne(doc: any, op: JsonPatchOp, size?: Size): any {\n  const kind = op.op;\n  const path = op.path ?? \"\";\n\n  if (kind === \"add\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'add' requires 'value'\");\n    // A copy, so an operation on the inserted value leaves the patch as it\n    // was sent.\n    return addAt(doc, path, clone(op.value), size);\n  }\n\n  if (kind === \"replace\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'replace' requires 'value'\");\n    const parts = splitPath(path);\n    const value = clone(op.value);\n    if (parts.length === 0) {\n      size?.reset(value);\n      return value;\n    }\n    const [parent, key] = navigate(doc, parts);\n    if (Array.isArray(parent)) {\n      // RFC 6901: \"-\" names the position after the last element, which no\n      // element occupies, so only \"add\" can use it. Left as a string it slips\n      // through a numeric range check and writes a \"-\" property on the array.\n      const idx = key === \"-\" ? -1 : (key as number);\n      if (idx < 0 || idx >= parent.length) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      size?.take(parent[idx]);\n      parent[idx] = value;\n    } else if (parent !== null && typeof parent === \"object\") {\n      if (!Object.prototype.hasOwnProperty.call(parent, key)) {\n        throw new PatchError(`Path not found for replace: ${path}`);\n      }\n      size?.take(parent[key as string]);\n      parent[key as string] = value;\n    } else {\n      throw new PatchError(`Cannot replace in ${jsonType(parent)}`);\n    }\n    size?.insert(value, parts.length);\n    return doc;\n  }\n\n  if (kind === \"remove\") {\n    return removeAt(doc, path, size);\n  }\n\n  if (kind === \"copy\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'copy' requires 'from'\");\n    return addAt(doc, path, clone(getAt(doc, src)), size, true);\n  }\n\n  if (kind === \"move\") {\n    const src = op.from;\n    if (src === undefined) throw new PatchError(\"'move' requires 'from'\");\n    // RFC 6902 4.4: 'from' MUST NOT be a proper prefix of 'path'.\n    if (path.startsWith(src + \"/\")) {\n      throw new PatchError(\"'move' cannot move a location into its own child.\");\n    }\n    // The remove detaches the value, so it moves as it is, uncopied.\n    const value = getAt(doc, src);\n    doc = removeAt(doc, src, size, true);\n    return addAt(doc, path, value, size, false, splitPath(src).length);\n  }\n\n  if (kind === \"test\") {\n    if (!(\"value\" in op)) throw new PatchError(\"'test' requires 'value'\");\n    const actual = getAt(doc, path);\n    if (!deepEqual(actual, op.value)) throw new PatchError(`'test' failed at ${path}`);\n    return doc;\n  }\n\n  throw new PatchError(`Unsupported op: ${JSON.stringify(kind)}`);\n}\n\nconst MAX_PATCH_OPS = 1000;\nconst MAX_DOCUMENT_NODES = 100_000;\n\n/**\n * How deeply a patched document may nest, counting the document as level one,\n * as the coordinator counts a request's nesting. Each operation's value comes\n * within the request's limit, and a patch that puts one value inside another\n * would otherwise nest the document without limit.\n */\nconst MAX_DOCUMENT_DEPTH = 64;\n\n/**\n * How much a patch's copies, and its moves to a deeper place or onto the whole\n * document, may carry between them, as a multiple of the document's limits.\n * Each costs a pass over the value it carries, so a patch that copied the same\n * large value back and forth could otherwise keep a coordinator busy for\n * seconds.\n */\nconst MAX_CARRIED_TIMES = 3;\n\n/**\n * The default cap on the string and key text a patched document may hold, in\n * UTF-8 bytes: the default `max_envelope_bytes`. An artefact that arrives in a\n * request holds no more text than the request's size. The node cap alone does\n * not bound size: a `copy` of the root doubles the document, long strings\n * included, so fifteen of them grow 64 KiB to about 2 GiB within 100,000\n * nodes.\n */\nexport const DEFAULT_MAX_PATCHED_BYTES = 1_048_576;\n\n/** Limits a caller can set on {@link applyJsonPatch}. */\nexport interface PatchLimits {\n  /** The most UTF-8 bytes of string and key text the result may hold. */\n  maxStringBytes?: number;\n}\n\n/**\n * UTF-8 length of a string: Buffer's count where Node provides it, and the\n * same count by hand elsewhere, so the module runs anywhere. A lone surrogate\n * counts three bytes either way, as does Python's\n * `len(s.encode(\"utf-8\", \"surrogatepass\"))`, which keeps the two references\n * refusing the same patches.\n */\nfunction utf8Length(s: string): number {\n  const buffer = (globalThis as { Buffer?: unknown }).Buffer;\n  if (typeof buffer === \"function\") {\n    return (buffer as unknown as { byteLength(s: string, encoding: \"utf8\"): number }).byteLength(s, \"utf8\");\n  }\n  let n = 0;\n  for (let i = 0; i < s.length; i++) {\n    const c = s.charCodeAt(i);\n    if (c < 0x80) n += 1;\n    else if (c < 0x800) n += 2;\n    else if (c >= 0xd800 && c <= 0xdbff && i + 1 < s.length) {\n      const d = s.charCodeAt(i + 1);\n      if (d >= 0xdc00 && d <= 0xdfff) { n += 4; i++; } else n += 3;\n    } else n += 3;\n  }\n  return n;\n}\n\ninterface Measured { nodes: number; bytes: number; depth: number }\n\n/**\n * A value's count of values, the UTF-8 bytes of its strings and keys, and its\n * depth, counting the value itself as level one, in one pass that does not\n * recurse.\n */\nfunction sizeOf(value: unknown): Measured {\n  if (value === null || typeof value !== \"object\") {\n    return { nodes: 1, bytes: typeof value === \"string\" ? utf8Length(value) : 0, depth: 1 };\n  }\n  let nodes = 0;\n  let bytes = 0;\n  let depth = 0;\n  const values: object[] = [value];\n  const levels: number[] = [1];\n  // A scalar child is counted where it is found, which saves a trip through\n  // the stack.\n  const visit = (x: unknown, level: number): void => {\n    if (x !== null && typeof x === \"object\") {\n      values.push(x);\n      levels.push(level);\n      return;\n    }\n    nodes += 1;\n    if (level > depth) depth = level;\n    if (typeof x === \"string\") bytes += utf8Length(x);\n  };\n  while (values.length > 0) {\n    const v = values.pop()!;\n    const level = levels.pop()!;\n    nodes += 1;\n    if (level > depth) depth = level;\n    if (Array.isArray(v)) {\n      for (const x of v) visit(x, level + 1);\n    } else {\n      const o = v as Record<string, unknown>;\n      for (const k of Object.keys(o)) {\n        bytes += utf8Length(k);\n        visit(o[k], level + 1);\n      }\n    }\n  }\n  return { nodes, bytes, depth };\n}\n\n/**\n * What the working document holds, kept in step by each operation. The values\n * and the bytes are exact: each operation counts what it puts in and what it\n * takes out, so a patch costs what it changes, whatever the document's size.\n * The depth is a bound, raised by what each operation puts in; it passes the\n * limit when the document does, or when the document started deeper.\n */\nclass Size implements Measured {\n  nodes = 0;\n  bytes = 0;\n  depth = 0;\n  /** What copies, and moves to a deeper place or onto the whole document, have carried. */\n  carriedNodes = 0;\n  carriedBytes = 0;\n\n  constructor(doc: unknown) {\n    this.reset(doc);\n  }\n\n  reset(doc: unknown): void {\n    const s = sizeOf(doc);\n    this.nodes = s.nodes;\n    this.bytes = s.bytes;\n    this.depth = s.depth;\n  }\n\n  /** `value` goes in `segments` levels below the top, under a new `key`. */\n  insert(value: unknown, segments: number, key?: string): Measured {\n    const s = sizeOf(value);\n    this.nodes += s.nodes;\n    this.bytes += s.bytes + (key === undefined ? 0 : utf8Length(key));\n    this.depth = Math.max(this.depth, segments + s.depth);\n    return s;\n  }\n\n  carry(s: Measured): void {\n    this.carriedNodes += s.nodes;\n    this.carriedBytes += s.bytes;\n  }\n\n  /** `value` comes out, with its `key`. */\n  take(value: unknown, key?: string): void {\n    const s = sizeOf(value);\n    this.nodes -= s.nodes;\n    this.bytes -= s.bytes + (key === undefined ? 0 : utf8Length(key));\n  }\n}\n\nexport function applyJsonPatch(doc: unknown, ops: JsonPatchOp[], limits: PatchLimits = {}): unknown {\n  const maxBytes = limits.maxStringBytes ?? DEFAULT_MAX_PATCHED_BYTES;\n  if (ops.length > MAX_PATCH_OPS) {\n    throw new PatchError(`Patch has too many operations (${ops.length} > ${MAX_PATCH_OPS})`);\n  }\n  let out: any = JSON.parse(JSON.stringify(doc));\n  const size = new Size(out);\n  for (const op of ops) {\n    out = applyOne(out, op, size);\n    if (size.depth > MAX_DOCUMENT_DEPTH) size.depth = sizeOf(out).depth;\n    if (size.nodes > MAX_DOCUMENT_NODES) {\n      throw new PatchError(`Patched document exceeds the node limit (${MAX_DOCUMENT_NODES})`);\n    }\n    if (size.bytes > maxBytes) {\n      throw new PatchError(`Patched document exceeds the size limit (${maxBytes} bytes of strings and keys)`);\n    }\n    if (size.depth > MAX_DOCUMENT_DEPTH) {\n      throw new PatchError(`Patched document nests deeper than ${MAX_DOCUMENT_DEPTH} levels`);\n    }\n    if (size.carriedNodes > MAX_CARRIED_TIMES * MAX_DOCUMENT_NODES || size.carriedBytes > MAX_CARRIED_TIMES * maxBytes) {\n      throw new PatchError(`Patch copies or moves more than its limit (${MAX_CARRIED_TIMES * MAX_DOCUMENT_NODES} values or ${MAX_CARRIED_TIMES * maxBytes} bytes of strings and keys)`);\n    }\n  }\n  return out;\n}\n\n// ============================================================\n//   diff: produce a patch that transforms `from` into `to`\n// ============================================================\n\n/**\n * Compute an RFC 6902 patch that, when applied to `from`, produces\n * `to`. Walks objects key-by-key; arrays use a shallow whole-array\n * replace if any element differs. Sufficient for the playground's\n * draft-edit use case where drafts are small JSON objects.\n */\nexport function diffJsonPatch(from: unknown, to: unknown, basePath = \"\"): JsonPatchOp[] {\n  const ops: JsonPatchOp[] = [];\n\n  if (typeof from !== typeof to || Array.isArray(from) !== Array.isArray(to)) {\n    ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    return ops;\n  }\n\n  if (from === null || to === null || typeof from !== \"object\") {\n    if (from !== to) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  if (Array.isArray(from) && Array.isArray(to)) {\n    if (JSON.stringify(from) !== JSON.stringify(to)) {\n      ops.push({ op: \"replace\", path: basePath || \"/\", value: to });\n    }\n    return ops;\n  }\n\n  const fromObj = from as Record<string, unknown>;\n  const toObj = to as Record<string, unknown>;\n  const allKeys = new Set([...Object.keys(fromObj), ...Object.keys(toObj)]);\n\n  for (const key of allKeys) {\n    const escaped = key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n    const path = `${basePath}/${escaped}`;\n    if (!(key in fromObj)) {\n      ops.push({ op: \"add\", path, value: toObj[key] });\n    } else if (!(key in toObj)) {\n      ops.push({ op: \"remove\", path });\n    } else {\n      ops.push(...diffJsonPatch(fromObj[key], toObj[key], path));\n    }\n  }\n\n  return ops;\n}\n","/**\n * Pluggable persistence for the Coordinator.\n *\n * A Store keeps workspace state between process restarts. The Coordinator\n * calls `store.load()` once at start, and writes after every call that adds\n * to a workspace's audit log.\n *\n * How the Coordinator writes depends on what the store implements:\n *\n *   - `apply(change)`: the Coordinator sends what the call changed: the new\n *     audit entries, the objects it touched and the workspace's own fields.\n *     The cost of a write stays flat as the log grows; it grows with the\n *     objects a call changes, such as a task with a long history. MemoryStore\n *     and SqliteStore implement it.\n *   - `save(record)` alone: the Coordinator sends the whole workspace on every\n *     write, as releases before 0.3.2 did, so the cost of a write grows with\n *     the log. Stores written for earlier releases keep working this way.\n *\n * MemoryStore is the default and keeps nothing across processes. SqliteStore\n * keeps state in a SQLite file through better-sqlite3. Third-party stores\n * (Postgres, Redis and so on) implement this interface.\n *\n * Concurrency model\n * -----------------\n *\n * A Coordinator is a **single-writer** component: dispatch is serial,\n * workspace state is held in memory, and each chain link is computed from the\n * head the instance holds. Run one Coordinator per workspace.\n *\n * Every change names the number of audit entries the Coordinator expects the\n * store to hold already (`base`). MemoryStore and SqliteStore refuse a change\n * whose base differs from what they hold: they throw a StoreConflictError and\n * write nothing. A second Coordinator writing the same workspace is refused,\n * and the entries already stored stay as they are.\n *\n * A store that also implements `version` and `loadOne` lets a Coordinator\n * keep up with another writer: before each call it compares the entries the\n * store holds for the call's workspace with the entries it last wrote, and\n * reloads the workspace when they differ. A synchronous write that fails or\n * conflicts answers its call with -32603 and `data: {reason: \"store\"}`; the\n * Coordinator then reloads the workspace, and refuses calls on it the same\n * way until a reload succeeds. An asynchronous write that fails is reported,\n * and the next write carries its change again.\n *\n * `save` makes no such check: it replaces what the store holds for the\n * workspace. A store that implements only `save` therefore still loses\n * entries silently when two instances write one workspace.\n *\n * To run more than one instance on a store without `version`, partition\n * workspaces so that no workspace is ever written by two, or hold an\n * external lock. See SPECIFICATION.md 10.3.\n *\n * Production deployments that need rich queries over the log can project it\n * into their own analytics store with the `onAudit` listener.\n */\n\n/** The workspace maps a store keeps object by object. */\nexport const COLLECTIONS = [\n  \"members\", \"tasks\", \"overrides\", \"whispers\",\n  \"deliberations\", \"handoffs\", \"snapshots\", \"route_decisions\", \"invitations\",\n] as const;\n\n/** task.create idempotency keys, kept as one more collection of key to task id. */\nexport const IDEMPOTENCY_KEYS = \"idempotency_keys\";\n\nexport interface WorkspaceRecord {\n  /** Workspace identifier. */\n  id: string;\n  /** JSON-serialisable payload in the shape `Coordinator.snapshot()` produces. */\n  data: unknown;\n  /**\n   * For `save`, a counter the Coordinator increments on each write. For a\n   * record a store loads after `apply`, the number of audit entries. Recorded\n   * for diagnostics; `save` does not check it.\n   */\n  version: number;\n  /** Wall-clock timestamp of the last write, ISO-8601. */\n  updated_at: string;\n}\n\n/** One write to one workspace: what one or more calls changed. */\nexport interface StoreChange {\n  /** Workspace identifier. */\n  id: string;\n  /**\n   * Audit entries the store must already hold for this workspace. A store\n   * that holds a different number refuses the change with a\n   * StoreConflictError and writes nothing. Not checked when `replace` is set.\n   */\n  base: number;\n  /** Audit entries the store holds after the change: `base + entries.length`. */\n  version: number;\n  /** Wall-clock timestamp of the write, ISO-8601. */\n  updated_at: string;\n  /** The workspace's own fields: everything except its collections and log. */\n  meta: Record<string, unknown>;\n  /** New audit entries in order. The first has seq `base`. */\n  entries: unknown[];\n  /**\n   * Objects written, by collection and then by key. A null value removes the\n   * object. The collections are those in COLLECTIONS and IDEMPOTENCY_KEYS.\n   */\n  objects: Record<string, Record<string, unknown>>;\n  /**\n   * Replace everything the store holds for this workspace with this change,\n   * which then carries the whole workspace from seq 0.\n   */\n  replace?: boolean;\n}\n\n/**\n * A change whose base does not match the audit entries the store holds.\n * Usually a second Coordinator writing the same workspace.\n */\nexport class StoreConflictError extends Error {\n  readonly workspace: string;\n  /** Audit entries the store holds. */\n  readonly held: number;\n  /** Audit entries the change expected. */\n  readonly base: number;\n\n  constructor(workspace: string, held: number, base: number) {\n    super(\n      `The store holds ${held} audit entries for workspace ${workspace} and ` +\n      `this write expected ${base}, so nothing was written. Another ` +\n      `coordinator may be writing to this workspace, or the store may have ` +\n      `been changed outside this coordinator. A coordinator reloads the ` +\n      `workspace and answers the call as failed, and the call may be sent ` +\n      `again.`,\n    );\n    this.name = \"StoreConflictError\";\n    this.workspace = workspace;\n    this.held = held;\n    this.base = base;\n  }\n\n  /**\n   * Matched by name, so `instanceof` holds across the package's entry points,\n   * each of which is bundled with its own copy of this class.\n   */\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return value instanceof Error && value.name === \"StoreConflictError\";\n  }\n}\n\nexport interface Store {\n  /** Load all workspace records. Called once when the Coordinator starts. */\n  load(): Promise<WorkspaceRecord[]> | WorkspaceRecord[];\n\n  /**\n   * Replace what the store holds for one workspace. The Coordinator calls it\n   * after every write when the store has no `apply`.\n   */\n  save(record: WorkspaceRecord): Promise<void> | void;\n\n  /**\n   * Write one change. Optional; when present the Coordinator calls it in\n   * place of `save`. It must be atomic: the whole change is written, or\n   * nothing is. The change refers to the Coordinator's live objects, so\n   * serialise or copy everything before returning, including in an async\n   * store. Refuse a change whose `base` differs from the entries held, unless\n   * `replace` is set, by throwing (or rejecting with) a StoreConflictError.\n   */\n  apply?(change: StoreChange): Promise<void> | void;\n\n  /** Remove one workspace. */\n  delete(id: string): Promise<void> | void;\n\n  /**\n   * The number of audit entries the store holds for one workspace, or\n   * undefined when it holds none. Optional; see the concurrency model above.\n   */\n  version?(id: string): number | undefined;\n\n  /** One workspace's record, or undefined when the store holds none. Optional. */\n  loadOne?(id: string): WorkspaceRecord | undefined;\n\n  /** Release resources. Idempotent. */\n  close?(): Promise<void> | void;\n}\n\nfunction isCollection(name: string): boolean {\n  return (COLLECTIONS as readonly string[]).includes(name);\n}\n\n/** The key an object is stored under in its collection. */\nexport function objectKey(collection: string, item: unknown): string | undefined {\n  if (item === null || typeof item !== \"object\") return undefined;\n  const o = item as Record<string, unknown>;\n  const key = collection === \"members\" ? (o.uri ?? o.id) : (o.id ?? o.uri);\n  return typeof key === \"string\" ? key : undefined;\n}\n\n/**\n * A collection as a snapshot holds it, keyed. The TypeScript snapshot holds\n * arrays and the Python snapshot holds objects keyed by id; both are read.\n */\nfunction keyed(collection: string, value: unknown): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      const key = objectKey(collection, item);\n      if (key !== undefined) out[key] = item;\n    }\n  } else if (value !== null && typeof value === \"object\") {\n    Object.assign(out, value);\n  }\n  return out;\n}\n\n/** A whole-workspace snapshot as a change that replaces what the store holds. */\nexport function changeFromRecord(record: WorkspaceRecord): StoreChange {\n  const data = (record.data !== null && typeof record.data === \"object\"\n    ? record.data : {}) as Record<string, unknown>;\n  const meta: Record<string, unknown> = {};\n  const objects: Record<string, Record<string, unknown>> = {};\n  let entries: unknown[] = [];\n  for (const [name, value] of Object.entries(data)) {\n    if (name === \"audit\") entries = Array.isArray(value) ? value : [];\n    else if (name === IDEMPOTENCY_KEYS || isCollection(name)) objects[name] = keyed(name, value);\n    else meta[name] = value;\n  }\n  if (meta.id === undefined) meta.id = record.id;\n  return {\n    id: record.id, base: 0, version: record.version, updated_at: record.updated_at,\n    meta, entries, objects, replace: true,\n  };\n}\n\n/**\n * Rows read back from a store, assembled into the snapshot shape\n * `Coordinator.restore()` reads: arrays for the collections, an object for\n * the idempotency keys, and the log in seq order.\n */\nexport function assembleSnapshot(\n  meta: Record<string, unknown>,\n  entries: unknown[],\n  objects: Iterable<[collection: string, key: string, value: unknown]>,\n): Record<string, unknown> {\n  const data: Record<string, unknown> = { ...meta };\n  for (const name of COLLECTIONS) data[name] = [];\n  const keys: Record<string, unknown> = {};\n  data[IDEMPOTENCY_KEYS] = keys;\n  for (const [collection, key, value] of objects) {\n    if (collection === IDEMPOTENCY_KEYS) {\n      keys[key] = value;\n    } else {\n      const list = (Array.isArray(data[collection]) ? data[collection] : (data[collection] = [])) as unknown[];\n      list.push(value);\n    }\n  }\n  data.audit = entries;\n  return data;\n}\n\ninterface Held {\n  meta: string;\n  version: number;\n  updated_at: string;\n  entries: string[];\n  objects: Map<string, Map<string, string>>;\n}\n\n/**\n * In-memory store. The default: it keeps nothing across processes. Like a\n * database it keeps each row as JSON text, so a Coordinator restarted on it\n * sees what was written and nothing changed later.\n */\nexport class MemoryStore implements Store {\n  private held = new Map<string, Held>();\n\n  load(): WorkspaceRecord[] {\n    return [...this.held.keys()].map((id) => this.loadOne(id)!);\n  }\n\n  loadOne(id: string): WorkspaceRecord | undefined {\n    const h = this.held.get(id);\n    if (!h) return undefined;\n    const objects: Array<[string, string, unknown]> = [];\n    for (const [collection, items] of h.objects) {\n      for (const [key, value] of items) objects.push([collection, key, JSON.parse(value)]);\n    }\n    return {\n      id,\n      data: assembleSnapshot(JSON.parse(h.meta), h.entries.map(e => JSON.parse(e)), objects),\n      version: h.version,\n      updated_at: h.updated_at,\n    };\n  }\n\n  version(id: string): number | undefined {\n    return this.held.get(id)?.entries.length;\n  }\n\n  save(record: WorkspaceRecord): void {\n    this.apply(changeFromRecord(record));\n  }\n\n  apply(change: StoreChange): void {\n    // Serialised before anything is held, so a change that cannot be written\n    // leaves the store as it was.\n    const meta = JSON.stringify(change.meta);\n    const entries = change.entries.map(e => JSON.stringify(e));\n    const objects = Object.entries(change.objects).map(([collection, items]) =>\n      [collection, Object.entries(items).map(([key, value]) =>\n        [key, value === null || value === undefined ? null : JSON.stringify(value)] as const)] as const);\n    let h = this.held.get(change.id);\n    if (!change.replace) {\n      const holds = h ? h.entries.length : 0;\n      if (holds !== change.base) throw new StoreConflictError(change.id, holds, change.base);\n    }\n    if (!h || change.replace) {\n      h = { meta: \"{}\", version: 0, updated_at: \"\", entries: [], objects: new Map() };\n    }\n    for (const entry of entries) h.entries.push(entry);\n    for (const [collection, items] of objects) {\n      let held = h.objects.get(collection);\n      if (!held) h.objects.set(collection, (held = new Map()));\n      for (const [key, value] of items) {\n        if (value === null) held.delete(key);\n        else held.set(key, value);\n      }\n    }\n    h.meta = meta;\n    h.version = change.version;\n    h.updated_at = change.updated_at;\n    this.held.set(change.id, h);\n  }\n\n  delete(id: string): void {\n    this.held.delete(id);\n  }\n}\n","/**\n * Change tracking for a workspace's maps.\n *\n * When the store implements `apply`, the Coordinator writes only the objects\n * a call changed. A TrackedMap records which keys may hold a changed object\n * since the last write: every key set or deleted, and, while a call is being\n * handled, every key read with `get` or reached by iterating, because a\n * handler changes an object in place after reading it. Reads outside a call,\n * such as an application listing tasks, record nothing.\n */\n\nexport interface Tracker {\n  /** Whether anything is recorded: true when the store implements `apply`. */\n  enabled: boolean;\n  /** Calls being handled. Reads are recorded while it is above zero. */\n  depth: number;\n}\n\nexport class TrackedMap<K, V> extends Map<K, V> {\n  /** Keys whose objects may have changed since the last write. */\n  readonly dirty = new Set<K>();\n  readonly tracker: Tracker;\n\n  constructor(tracker: Tracker) {\n    super();\n    this.tracker = tracker;\n  }\n\n  private reading(): boolean {\n    return this.tracker.enabled && this.tracker.depth > 0;\n  }\n\n  private touchAll(): void {\n    if (this.reading()) for (const key of super.keys()) this.dirty.add(key);\n  }\n\n  override get(key: K): V | undefined {\n    const value = super.get(key);\n    if (value !== undefined && this.reading()) this.dirty.add(key);\n    return value;\n  }\n\n  override set(key: K, value: V): this {\n    if (this.tracker.enabled) this.dirty.add(key);\n    return super.set(key, value);\n  }\n\n  override delete(key: K): boolean {\n    const had = super.delete(key);\n    if (had && this.tracker.enabled) this.dirty.add(key);\n    return had;\n  }\n\n  override clear(): void {\n    if (this.tracker.enabled) for (const key of super.keys()) this.dirty.add(key);\n    super.clear();\n  }\n\n  override values(): MapIterator<V> {\n    this.touchAll();\n    return super.values();\n  }\n\n  override entries(): MapIterator<[K, V]> {\n    this.touchAll();\n    return super.entries();\n  }\n\n  override [Symbol.iterator](): MapIterator<[K, V]> {\n    this.touchAll();\n    return super[Symbol.iterator]();\n  }\n\n  override forEach(callback: (value: V, key: K, map: Map<K, V>) => void, thisArg?: unknown): void {\n    this.touchAll();\n    super.forEach(callback, thisArg);\n  }\n\n  /** Read one value without recording it. */\n  peek(key: K): V | undefined {\n    return super.get(key);\n  }\n}\n\n/** Every value of a map, read without recording, whatever kind of map it is. */\nexport function rawValues<V>(map: Map<unknown, V>): IterableIterator<V> {\n  return Map.prototype.values.call(map) as IterableIterator<V>;\n}\n\n/** Every entry of a map, read without recording, whatever kind of map it is. */\nexport function rawEntries<K, V>(map: Map<K, V>): IterableIterator<[K, V]> {\n  return Map.prototype.entries.call(map) as IterableIterator<[K, V]>;\n}\n","/**\n * Typed method facade for the Coordinator.\n *\n * Replaces the verbose dispatch pattern:\n *\n *   const env = await coord.dispatch({\n *     jsonrpc: \"2.0\", id: \"x\",\n *     method: \"task.create\",\n *     params: { workspace, from, kind, input }\n *   });\n *   const taskId = env.result.task_id;\n *\n * with namespace-grouped calls that autocomplete and type-check:\n *\n *   const { task_id } = coord.api.task.create({ workspace, from, kind, input });\n *\n * Every method on the facade calls `dispatch(envelope)` internally with\n * an auto-generated envelope id, so the audit chain semantics, profile\n * gates, and signature checks all run identically.\n *\n * On dispatch error, the facade throws a `CoordinatorError` carrying the\n * JSON-RPC error code and message. Callers expecting `error` objects on\n * the wire can still use `dispatch()` directly.\n */\n\nimport type { Coordinator } from \"./coordinator.js\";\nimport type { Envelope } from \"./types.js\";\nimport type {\n  MethodName, MethodParams, MethodResult,\n} from \"./methods.js\";\n\nexport class CoordinatorError extends Error {\n  readonly code: number;\n  readonly data?: unknown;\n  constructor(code: number, message: string, data?: unknown) {\n    super(message);\n    this.name = \"CoordinatorError\";\n    this.code = code;\n    this.data = data;\n  }\n}\n\n/**\n * Single-call helper. Type-safe wrapper around `coord.dispatch()`.\n * Throws CoordinatorError if dispatch returns an error response.\n */\nexport function call<M extends MethodName>(\n  coord: Coordinator,\n  method: M,\n  params: MethodParams<M>,\n): MethodResult<M> {\n  const envelope: Envelope = {\n    jsonrpc: \"2.0\",\n    id: coord.ids.envelopeId(),\n    method,\n    params: params as unknown as Record<string, unknown>,\n  };\n  const out = coord.dispatch(envelope);\n  if (out.error) {\n    throw new CoordinatorError(out.error.code, out.error.message, out.error.data);\n  }\n  return out.result as MethodResult<M>;\n}\n\n// ============================================================\n//   Namespace-grouped facades\n// ============================================================\n//\n// Each namespace facade is a small object exposing one method per\n// CHAP verb. Implementations are one-liners that delegate to call().\n// The pattern is verbose but autocompletes well and type-checks\n// param shape and result shape from one declaration in methods.ts.\n\nexport function makeApi(coord: Coordinator) {\n  const c = <M extends MethodName>(m: M, p: MethodParams<M>) => call(coord, m, p);\n\n  return {\n    workspace: {\n      create:       (p: MethodParams<\"workspace.create\">)       => c(\"workspace.create\", p),\n      describe:     (p: MethodParams<\"workspace.describe\">)     => c(\"workspace.describe\", p),\n      set_profiles: (p: MethodParams<\"workspace.set_profiles\">) => c(\"workspace.set_profiles\", p),\n      invite:       (p: MethodParams<\"workspace.invite\">)       => c(\"workspace.invite\", p),\n    },\n    participant: {\n      join:       (p: MethodParams<\"participant.join\">)       => c(\"participant.join\", p),\n      leave:      (p: MethodParams<\"participant.leave\">)      => c(\"participant.leave\", p),\n      rotate_key: (p: MethodParams<\"participant.rotate_key\">) => c(\"participant.rotate_key\", p),\n      revoke_key: (p: MethodParams<\"participant.revoke_key\">) => c(\"participant.revoke_key\", p),\n    },\n    task: {\n      create:   (p: MethodParams<\"task.create\">)   => c(\"task.create\", p),\n      update:   (p: MethodParams<\"task.update\">)   => c(\"task.update\", p),\n      complete: (p: MethodParams<\"task.complete\">) => c(\"task.complete\", p),\n      route:    (p: MethodParams<\"task.route\">)    => c(\"task.route\", p),\n    },\n    review: {\n      request:     (p: MethodParams<\"review.request\">)     => c(\"review.request\", p),\n      acknowledge: (p: MethodParams<\"review.acknowledge\">) => c(\"review.acknowledge\", p),\n      depth:       (p: MethodParams<\"review.depth\">)       => c(\"review.depth\", p),\n    },\n    decide: {\n      approve:  (p: MethodParams<\"decide.approve\">)  => c(\"decide.approve\", p),\n      reject:   (p: MethodParams<\"decide.reject\">)   => c(\"decide.reject\", p),\n      override: (p: MethodParams<\"decide.override\">) => c(\"decide.override\", p),\n    },\n    abstain: {\n      declare: (p: MethodParams<\"abstain.declare\">) => c(\"abstain.declare\", p),\n    },\n    escalate: {\n      raise: (p: MethodParams<\"escalate.raise\">) => c(\"escalate.raise\", p),\n      auto:  (p: MethodParams<\"escalate.auto\">)  => c(\"escalate.auto\", p),\n    },\n    whisper: {\n      ask:    (p: MethodParams<\"whisper.ask\">)    => c(\"whisper.ask\", p),\n      answer: (p: MethodParams<\"whisper.answer\">) => c(\"whisper.answer\", p),\n    },\n    deliberate: {\n      open:    (p: MethodParams<\"deliberate.open\">)    => c(\"deliberate.open\", p),\n      comment: (p: MethodParams<\"deliberate.comment\">) => c(\"deliberate.comment\", p),\n      vote:    (p: MethodParams<\"deliberate.vote\">)    => c(\"deliberate.vote\", p),\n      close:   (p: MethodParams<\"deliberate.close\">)   => c(\"deliberate.close\", p),\n    },\n    handoff: {\n      propose: (p: MethodParams<\"handoff.propose\">) => c(\"handoff.propose\", p),\n      accept:  (p: MethodParams<\"handoff.accept\">)  => c(\"handoff.accept\", p),\n      decline: (p: MethodParams<\"handoff.decline\">) => c(\"handoff.decline\", p),\n    },\n    control: {\n      pause:             (p: MethodParams<\"control.pause\">)             => c(\"control.pause\", p),\n      resume:            (p: MethodParams<\"control.resume\">)            => c(\"control.resume\", p),\n      cancel:            (p: MethodParams<\"control.cancel\">)            => c(\"control.cancel\", p),\n      supersede:         (p: MethodParams<\"control.supersede\">)         => c(\"control.supersede\", p),\n      snapshot:          (p: MethodParams<\"control.snapshot\">)          => c(\"control.snapshot\", p),\n      rollback:          (p: MethodParams<\"control.rollback\">)          => c(\"control.rollback\", p),\n      set_mode_ceiling:  (p: MethodParams<\"control.set_mode_ceiling\">)  => c(\"control.set_mode_ceiling\", p),\n    },\n    audit: {\n      read:            (p: MethodParams<\"audit.read\">)            => c(\"audit.read\", p),\n      submit_to_scitt: (p: MethodParams<\"audit.submit_to_scitt\">) => c(\"audit.submit_to_scitt\", p),\n      verify_receipt:  (p: MethodParams<\"audit.verify_receipt\">)  => c(\"audit.verify_receipt\", p),\n      verify_chain:    (p: MethodParams<\"audit.verify_chain\">)    => c(\"audit.verify_chain\", p),\n    },\n  };\n}\n\nexport type CoordinatorApi = ReturnType<typeof makeApi>;\n","/**\n * @brightbeamai/chap-coordinator. type vocabulary\n *\n * Wire-shape and in-memory types for the Coordinator. The schemas at\n * schemas/ are the normative wire types; these mirror them in\n * TypeScript for in-process use.\n */\n\nexport type ParticipantUri = string;\nexport type WorkspaceId    = string;\nexport type TaskId         = string;\nexport type ArtefactId     = string;\n\nexport type ParticipantType = \"human\" | \"agent\" | \"service\" | \"group\" | \"workspace\";\n\nexport interface Envelope {\n  jsonrpc: \"2.0\";\n  id?:     string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?:  { code: number; message: string; data?: unknown };\n  /** security-signed/1.0: top-level signature, signed over JCS of the\n   *  envelope with this field removed. Form: ``ed25519:<kid>:<b64>``. */\n  sig?: string;\n}\n\nexport type Mode = \"shadow\" | \"trial\" | \"production\";\n\n/**\n * Which calls a workspace that requires signatures verifies: every call, or\n * every call except an unsigned one from an agent member.\n */\nexport type SignaturePolicy = \"all\" | \"humans\";\n/**\n * Who may join a workspace: anyone (\"open\"), or only a participant an admin\n * invited with workspace.invite, and the first member (\"invite\").\n */\nexport type JoinPolicy = \"open\" | \"invite\";\nexport type WorkspaceState = \"active\" | \"paused\" | \"closed\";\nexport type PauseScope = \"task\" | \"participant\" | \"workspace\";\n\nexport type TaskState =\n  | \"created\"\n  | \"in_progress\"\n  | \"review_requested\"\n  | \"completed\"\n  | \"declined\"\n  | \"abstained\"\n  | \"escalated\"\n  | \"superseded\"\n  | \"paused\"\n  | \"cancelled\";\n\n// ============================================================\n//   Key records (security-signed/1.0)\n// ============================================================\n\nexport interface Jwk {\n  kty: \"OKP\";\n  crv: \"Ed25519\";\n  kid: string;\n  x:   string;\n  use?: string;\n  alg?: string;\n}\n\n/** A participant's JWK plus the validity window. Lookup by\n *  (participant, kid, ts) so historical envelopes verify across\n *  rotation per security-signed/1.0 S3-S5. */\nexport interface KeyRecord {\n  jwk:         Jwk;\n  kid:         string;\n  valid_from:  string;            // ISO timestamp; inclusive\n  valid_until?: string;           // ISO timestamp; exclusive; absent = unbounded\n  revoked_at?: string;\n  revoked_reason?: string;\n}\n\n// ============================================================\n//   Participants\n// ============================================================\n\nexport interface Member {\n  uri:    ParticipantUri;\n  type:   ParticipantType;\n  role:   string;\n  joined: string;\n  display_name?: string;\n  capabilities?: Record<string, unknown>;\n  scopes?:       string[];\n  keys:          KeyRecord[];\n  paused:        boolean;         // control.pause scope=participant\n  oidc_sub?:     string;\n  oidc_auth_time?: number;        // unix seconds\n  oidc_acr?:     string;\n  vc_holder?:    string;\n}\n\n/**\n * An admin's invitation to join (workspace.invite), held until the invitee\n * joins. The member takes its type and role; where it pins keys, the join's\n * keys are among them and the member holds them; where it names an OIDC\n * subject, the invitee joins with a token for that subject.\n */\nexport interface Invitation {\n  uri:        ParticipantUri;\n  type:       ParticipantType;\n  role?:      string;\n  jwks?:      { keys: Jwk[] };\n  oidc_sub?:  string;\n  invited_by: ParticipantUri;\n  invited_at: string;\n}\n\n// ============================================================\n//   Routing hints\n// ============================================================\n\nexport interface TaskRoutingHints {\n  criticality?: \"low\" | \"medium\" | \"high\" | \"critical\";\n  deadline?:    string;\n  max_cost_usd?: number;\n  risk_tier?:   string;\n  [extra: string]: unknown;\n}\n\nexport interface ArtefactRoutingHints {\n  confidence?:        number | string;\n  model_id?:          string;\n  cost_consumed_usd?: number;\n  latency_ms?:        number;\n  [extra: string]:    unknown;\n}\n\n// ============================================================\n//   JSON Patch (RFC 6902)\n// ============================================================\n\nexport interface JsonPatchOp {\n  op:    \"add\" | \"replace\" | \"remove\" | \"copy\" | \"move\" | \"test\";\n  path:  string;\n  value?: unknown;\n  from?: string;\n}\n\n// ============================================================\n//   Override artefact (review/1.0)\n// ============================================================\n\nexport interface OverrideArtefact {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  reviewer:          ParticipantUri;\n  based_on_artefact: unknown;\n  diff:              JsonPatchOp[];\n  result:            unknown;\n  rationale:         string;\n  tags:              string[];\n  policy_refs:       string[];\n  ts:                string;\n  logical_id?:       string;\n  instance_id?:      string;\n  intent_preserved?: boolean;\n}\n\n// ============================================================\n//   Route decision artefact (routing/1.0)\n// ============================================================\n\nexport interface RouteDecisionArtefact {\n  id:             ArtefactId;\n  kind:           \"route_decision\";\n  decision_type:  \"task.route\" | \"review.depth\" | \"escalate.auto\";\n  outcome:        unknown;\n  produced_by:    ParticipantUri;\n  produced_at:    string;\n  task?:          TaskId;\n  policy_id?:     string;\n  hints_observed: Record<string, unknown>;\n  rationale:      string;\n  // Auxiliary fields per decision_type:\n  // task.route:     alternatives_considered\n  // review.depth:   sampling_probability\n  // escalate.auto:  escalation_target\n  [extra: string]: unknown;\n}\n\n// ============================================================\n//   Snapshot artefact (control/1.0)\n// ============================================================\n\nexport interface SnapshotArtefact {\n  id:           ArtefactId;\n  kind:         \"snapshot\";\n  produced_at:  string;\n  produced_by:  ParticipantUri;\n  content_hash: string;\n  content: {\n    workspace: WorkspaceId;\n    audit_seq: number;\n    label?:    string;\n    include:   string[];\n    state:     Record<string, unknown>;\n  };\n}\n\n// ============================================================\n//   Whisper (whisper/1.0)\n// ============================================================\n\nexport interface WhisperPrompt {\n  id:                ArtefactId;\n  task_id:           TaskId;\n  asker:             ParticipantUri;\n  askee:             ParticipantUri[];\n  question:          string;\n  options?:          Array<{ id: string; label?: string }>;\n  asked_at:          string;\n  deadline_ms:       number;\n  default_if_lapsed: unknown;\n  urgency:           \"low\" | \"medium\" | \"high\";\n  state:             \"pending\" | \"answered\" | \"lapsed\";\n  answered_at?:      string;\n  answered_by?:      ParticipantUri;\n  answer_option?:    string;\n  answer_text?:      string;\n  comment?:          string;\n  default_applied?:  unknown;\n}\n\n// ============================================================\n//   Deliberation (deliberation/1.0)\n// ============================================================\n\nexport interface DeliberationVote {\n  ts:            string;\n  voter:         ParticipantUri;\n  vote:          \"yea\" | \"nay\" | \"abstain\";\n  weight?:       number;\n  comment?:      string;\n  veto_invoked?: boolean;\n}\n\nexport interface Deliberation {\n  id:           string;\n  task_id?:     TaskId;\n  opener:       ParticipantUri;\n  participants: ParticipantUri[];\n  rule:         string;        // raw rule string\n  question?:    string;\n  weights?:     Record<ParticipantUri, number>;\n  veto?:        Record<ParticipantUri, boolean>;\n  deadline?:    string;\n  state:        \"open\" | \"closed\" | \"lapsed\";\n  comments:     { ts: string; from: ParticipantUri; text: string }[];\n  votes:        DeliberationVote[];\n  outcome?:     {\n    outcome:  \"approved\" | \"rejected\" | \"error\";\n    rule:     string;\n    tally?:   { yea: number; nay: number };\n    vetoes?:  ParticipantUri[];\n    reason?:  string;\n  };\n  opened_at:    string;\n}\n\n// ============================================================\n//   Handoff (handoff/1.0)\n// ============================================================\n\nexport interface HandoffTaskItem {\n  task_id:         TaskId;\n  title?:          string;\n  status_summary?: string;\n  next_action?:    string;\n  blockers?:       string[];\n}\n\nexport interface Handoff {\n  id:           string;\n  proposer:     ParticipantUri;\n  recipient:    ParticipantUri;     // single URI or \"group:...\"\n  proposed_at:  string;\n  tasks:        HandoffTaskItem[];\n  summary?:     string;\n  context_links: string[];\n  state:        \"proposed\" | \"accepted\" | \"declined\";\n  resolved_at?: string;\n  accepted_by?: ParticipantUri;\n  accepted_task_ids?: TaskId[];\n  accept_comment?:    string;\n  decline_reason?:    string;\n  decline_suggested_target?: ParticipantUri;\n}\n\n// ============================================================\n//   Review decision (review/1.0)\n// ============================================================\n\nexport interface ReviewDecision {\n  reviewer: ParticipantUri;\n  kind:     \"approve\" | \"reject\" | \"override\" | \"abstain\";\n  ts:       string;\n  comment?: string;\n  tags?:    string[];\n  override_artefact_id?: ArtefactId;\n  abstain_category?:     string;\n}\n\n// ============================================================\n//   Task\n// ============================================================\n\nexport interface Task {\n  id:           TaskId;\n  kind:         string;\n  state:        TaskState;\n  assignee:     ParticipantUri;\n  delegator:    ParticipantUri;\n  input:        Record<string, unknown>;\n  output?:      unknown;\n  confidence?:  number | string;\n  deadline?:    string;\n  created_at:   string;\n  updated_at:   string;\n  mode:         Mode;\n  review_required?: boolean;\n  routing_hints?:           TaskRoutingHints;\n  artefact_routing_hints?:  ArtefactRoutingHints;\n  review?: {\n    requested_at: string;\n    requested_to: ParticipantUri[];\n    rule:         string;\n    deadline?:    string;\n    decisions:    ReviewDecision[];\n    /**\n     * Who made the work under review: the task's assignee, then the member\n     * that completed it. None of them may decide the review.\n     */\n    authors:      ParticipantUri[];\n    /**\n     * The reviewers who have said they began this round, in the order they\n     * did (review.acknowledge). A new round starts with none.\n     */\n    acknowledgements: { reviewer: ParticipantUri; ts: string }[];\n  };\n  history:      { ts: string; from: ParticipantUri; state: TaskState; note?: string }[];\n  /**\n   * The authors of the work carried on from before: those of the task a\n   * successor replaces, through escalate.raise or control.supersede, and\n   * the members task.route or handoff.accept moved the task from. They\n   * count among the authors of any review of this task.\n   */\n  prior_authors?: ParticipantUri[];\n  supersedes?:  TaskId;\n  superseded_by?: TaskId;\n  parent?:      TaskId;\n  paused:       boolean;\n  paused_from?: TaskState;\n  /** Transient: holds the artefact passed to review.request so\n   *  decide.override can use it as the patch base. */\n  pending_artefact?: unknown;\n}\n\n// ============================================================\n//   Audit\n// ============================================================\n\nexport interface AuditEntry {\n  seq:      number;\n  arrived:  string;\n  /** The accepted call. Absent on a refusal entry. */\n  envelope?: Envelope;\n  /**\n   * The refused call, as received. Present only on a refusal entry, and held\n   * here rather than under `envelope` so a reader keyed on `envelope` passes\n   * the refusal by instead of replaying it (SPECIFICATION 10.1).\n   */\n  request?:  Envelope;\n  /** Present only on a refusal entry. */\n  outcome?:  RefusalOutcome;\n  prev_hash?: string;\n}\n\n/** Why a recorded call did not take effect. */\nexport interface RefusalOutcome {\n  status: \"refused\";\n  /** The error code the caller was answered with. */\n  code:   number;\n}\n\n// ============================================================\n//   Workspace\n// ============================================================\n\nexport interface Workspace {\n  id:           WorkspaceId;\n  created:      string;\n  state:        WorkspaceState;\n  profiles:     string[];\n  mode:         Mode;\n  mode_ceiling: Mode;\n  routing_policy_uri?: string;\n  step_up_window_sec: number;\n  min_acr?: string;\n  /** Which calls are verified where the workspace requires signatures. */\n  signature_policy: SignaturePolicy;\n  /** Who may join. */\n  join_policy:     JoinPolicy;\n  /** The rule of a review that opens on task.complete; any_one_approves when unset. */\n  review_rule?:    string;\n  members:         Map<ParticipantUri, Member>;\n  /** Invitations not yet taken up, by the URI each admits. */\n  invitations:     Map<ParticipantUri, Invitation>;\n  tasks:           Map<TaskId, Task>;\n  overrides:       Map<ArtefactId, OverrideArtefact>;\n  whispers:        Map<string, WhisperPrompt>;\n  deliberations:   Map<string, Deliberation>;\n  handoffs:        Map<string, Handoff>;\n  snapshots:       Map<ArtefactId, SnapshotArtefact>;\n  route_decisions: Map<ArtefactId, RouteDecisionArtefact>;\n  // task.create idempotency: caller-supplied key -> task_id.\n  idempotency_keys: Record<string, TaskId>;\n  audit:           AuditEntry[];\n  chain_head?:     string;\n  chain_enabled:   boolean;\n}\n\n/**\n * Listener callback invoked synchronously when an envelope is appended\n * to the workspace audit log.\n */\nexport type AuditListener = (workspace: Workspace, entry: AuditEntry) => void;\n\n/** True iff mode `a` is <= ceiling. */\nexport function modeLE(a: Mode, ceiling: Mode): boolean {\n  const order: Record<Mode, number> = { shadow: 0, trial: 1, production: 2 };\n  return order[a] <= order[ceiling];\n}\n","/**\n * audit-scitt/1.0 profile (profiles/audit-scitt.md).\n *\n * Methods:\n *   - audit.submit_to_scitt   -> build COSE_Sign1-shaped statements, pass to submitter\n *   - audit.verify_receipt    -> delegate to deployment hook\n *   - audit.verify_chain      -> replay local prev_hash chain\n *\n * External SCITT integration is the deployment's job; the Coordinator\n * builds the statement shape and routes through CoordinatorOptions.scittSubmitter.\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { entryIsWellFormed, entryRecord, linkHash } from \"../audit.js\";\nimport { canonicalize, ZERO_HASH } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\n\n/** The head after a malformed entry, which no stored head can match. */\nconst MALFORMED = \"sha256:malformed\";\n\n/**\n * A statement's payload is what the entry's chain link hashes: the envelope\n * of an accepted call, or the outcome together with the request of a refusal.\n */\nfunction buildStatement(workspaceId: string, record: unknown, issuer: string): Record<string, unknown> {\n  return {\n    protected: {\n      alg: -8,  // Ed25519 per COSE\n      iss: issuer,\n      kid: \"scitt-issuer\",\n      cwt_claims: { sub: workspaceId, iat: null },\n      \"content-type\": \"application/chap+json;version=0.3\",\n    },\n    payload: canonicalize(record).toString(\"utf-8\"),\n    signature: \"<deployment-supplied>\",\n  };\n}\n\nexport function registerAuditScitt(coord: Coordinator): void {\n  coord.handlers.set(\"audit.submit_to_scitt\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const bad = paramsError(p, [\n      [\"range\", \"object\"], [\"range.from_seq\", \"integer\"], [\"range.to_seq\", \"integer\"], [\"issuer\", \"string\"],\n    ]);\n    if (bad) return bad;\n    const range = (p.range as { from_seq?: number; to_seq?: number } | undefined) ?? {};\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const issuer = (p.issuer as string) || \"service:coordinator\";\n\n    if (!coord.options.scittSubmitter) {\n      const statements = ws.audit.slice(fromSeq, toSeq).map(e =>\n        buildStatement(ws.id, entryRecord(e), issuer));\n      return { result: {\n        statements,\n        note: \"No scittSubmitter configured; submit these out-of-band\",\n      }};\n    }\n    const receipts: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      const statement = buildStatement(ws.id, entryRecord(entry), issuer);\n      let receipt: Record<string, unknown> | null;\n      try {\n        receipt = coord.options.scittSubmitter(statement);\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_UNREACHABLE, `SCITT submission error: ${msg}`) };\n      }\n      if (receipt === null) {\n        return { error: rpcError(E.SCITT_STATEMENT_REJECTED,\n          `Statement rejected at seq ${entry.seq}`) };\n      }\n      receipts.push({ seq: entry.seq, receipt });\n    }\n    return { result: { receipts } };\n  });\n\n  coord.handlers.set(\"audit.verify_receipt\", (p) => {\n    const receipt = p.receipt;\n    if (typeof receipt !== \"object\" || receipt === null || Array.isArray(receipt)) {\n      return { error: rpcError(E.PARAMS, \"receipt must be an object\") };\n    }\n    if (coord.options.verifyScittReceipt) {\n      let ok: boolean;\n      try { ok = !!coord.options.verifyScittReceipt(receipt as Record<string, unknown>); }\n      catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.SCITT_RECEIPT_INVALID, `verify error: ${msg}`) };\n      }\n      if (!ok) return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"Receipt did not verify\") };\n      return { result: { verified: true } };\n    }\n    // Worded alike in both references, which name the option differently.\n    return { error: rpcError(E.SCITT_RECEIPT_INVALID, \"No receipt verifier is configured; receipt not verified\") };\n  });\n\n  coord.handlers.set(\"audit.verify_chain\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (!(ws.chain_enabled || coord.options.enableChain)) {\n      return { error: rpcError(E.PARAMS, \"Chain not enabled for this workspace\") };\n    }\n    // Range verification is not implemented. Accepting the parameters and\n    // replaying the whole log anyway would answer a wider question than the\n    // caller asked while reporting counts scoped to the whole log, which is\n    // the failure this method was just fixed to stop making.\n    if (p.from_seq != null || p.to_seq != null) {\n      return { error: rpcError(\n        E.PARAMS,\n        \"Range verification is not implemented; omit from_seq and to_seq to \" +\n        \"verify the whole log.\",\n      ) };\n    }\n    // Coverage begins at the first entry carrying a prev_hash. A workspace\n    // may enable chaining part-way through its life, in which case every\n    // earlier entry is outside the chain and cannot be evaluated against\n    // anything. Those entries are not evidence of tampering and not\n    // evidence of integrity: they were never checked, and the verdict\n    // below has to say so rather than pass over them.\n    let start = ws.audit.findIndex(e => e.prev_hash != null);\n    if (start < 0) start = ws.audit.length;\n    const errors: string[] = [];\n    let prev = ZERO_HASH;\n    let resync = false;\n    for (const e of ws.audit.slice(start)) {\n      // After a malformed entry the next link is taken as stored, so the\n      // entries after it are judged on their own links. The chain is\n      // reported broken either way.\n      const expectedPrev = resync && typeof e.prev_hash === \"string\" ? e.prev_hash : prev;\n      resync = false;\n      // A chain-enabled workspace must have prev_hash on every entry; a\n      // missing value is a defect, not a reason to skip the check.\n      if (e.prev_hash !== expectedPrev) {\n        errors.push(`seq ${e.seq}: prev_hash mismatch`);\n      }\n      // An entry that records neither one accepted envelope nor one refused\n      // request with its outcome has been altered, and cannot be linked.\n      if (!entryIsWellFormed(e)) {\n        errors.push(`seq ${e.seq}: malformed entry`);\n        prev = MALFORMED;\n        resync = true;\n        continue;\n      }\n      prev = linkHash(entryRecord(e), expectedPrev);\n    }\n    // The recomputed head must match the stored head; this is what makes\n    // the final entry tamper-evident.\n    // Explicit null/undefined check, matching Python. A falsy-but-present\n    // head must not be silently replaced with ZERO_HASH, or the two\n    // implementations return different verdicts for the same state.\n    const storedHead = (ws.chain_head === undefined || ws.chain_head === null)\n      ? ZERO_HASH : ws.chain_head;\n    if (prev !== storedHead) {\n      errors.push(\"chain_head mismatch: replay does not match stored head\");\n    }\n    if (errors.length) {\n      return { error: rpcError(E.PARAMS, errors.join(\"; \")) };\n    }\n    const entriesTotal     = ws.audit.length;\n    const entriesChecked   = entriesTotal - start;\n    const entriesUnchecked = start;\n    // Three terminal verdicts, mutually exclusive: a broken chain returned\n    // above as an error, an unevaluated range here, and a pass only when\n    // coverage is complete. `not_evaluated` never rides alongside ok:true;\n    // a reader that looks at ok alone fails closed rather than reading a\n    // pass over entries nothing was checked against.\n    if (entriesUnchecked > 0) {\n      return { result: {\n        status:            \"not_evaluated\",\n        ok:                false,\n        reason:            \"unchained_prefix\",\n        entries_total:     entriesTotal,\n        entries_checked:   entriesChecked,\n        entries_unchecked: entriesUnchecked,\n        checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n        chain_head:        storedHead,\n      }};\n    }\n    return { result: {\n      status:            \"verified\",\n      ok:                true,\n      entries_total:     entriesTotal,\n      entries_checked:   entriesChecked,\n      entries_unchecked: 0,\n      checked_from_seq:  entriesChecked > 0 ? ws.audit[start].seq : null,\n      chain_head:        storedHead,\n    }};\n  });\n}\n","/**\n * control/1.0 profile (profiles/control.md).\n *\n * Methods:\n *   - control.pause / control.resume   (scope: task|participant|workspace)\n *   - control.cancel\n *   - control.snapshot                  (returns art_... id)\n *   - control.rollback                  (to_snapshot_artefact_id + what_to_restore)\n *   - control.supersede                 (creates successor in one shot)\n *   - control.set_mode_ceiling\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\nimport { contentHash } from \"../canonical.js\";\nimport { rawValues } from \"../tracked.js\";\nimport { modeLE } from \"../types.js\";\nimport { openRequiredReviewAuthors, successorAuthors } from \"../coordinator.js\";\nimport type { Mode, SnapshotArtefact, Task, TaskState } from \"../types.js\";\n\nconst VALID_MODES = new Set<Mode>([\"shadow\", \"trial\", \"production\"]);\nconst VALID_SCOPES = new Set([\"task\", \"participant\", \"workspace\"]);\nconst SCOPE_ERROR = \"scope must be task, participant or workspace\";\n\nexport function registerControl(coord: Coordinator): void {\n  coord.handlers.set(\"control.pause\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const bad = paramsError(p, [\n      [\"scope\", \"string\"], [\"participant_uri\", \"string\"], [\"uri\", \"string\"], [\"in_flight_policy\", \"string\"],\n    ]);\n    if (bad) return bad;\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, SCOPE_ERROR) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot pause ${task.state} task`) };\n      }\n      task.paused = true;\n      const prior = task.state;\n      if (prior !== \"paused\") task.paused_from = prior;\n      task.state = \"paused\";\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: \"paused\", note: `was ${prior}` });\n      return { result: { scope: \"task\", task_id: task.id, state: \"paused\" } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri) return { error: rpcError(E.PARAMS, \"participant_uri is required\") };\n      if (!ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      ws.members.get(uri)!.paused = true;\n      return { result: {\n        scope: \"participant\", participant_uri: uri, paused: true,\n        in_flight_policy: (p.in_flight_policy as string) || \"allow_to_complete\",\n      }};\n    }\n    // workspace\n    ws.state = \"paused\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"paused\" } };\n  });\n\n  coord.handlers.set(\"control.resume\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const bad = paramsError(p, [[\"scope\", \"string\"], [\"participant_uri\", \"string\"], [\"uri\", \"string\"]]);\n    if (bad) return bad;\n    const scope = (p.scope as string) || \"task\";\n    if (!VALID_SCOPES.has(scope)) {\n      return { error: rpcError(E.PARAMS, SCOPE_ERROR) };\n    }\n    if (scope === \"task\") {\n      const task = ws.tasks.get(p.task_id as string);\n      if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n      if (task.state !== \"paused\") {\n        return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot resume ${task.state} task`) };\n      }\n      task.paused = false;\n      const restored: TaskState = task.paused_from ?? \"in_progress\";\n      task.paused_from = undefined;\n      task.state = restored;\n      task.updated_at = coord.now();\n      task.history.push({ ts: task.updated_at, from: p.from as string, state: restored });\n      return { result: { scope: \"task\", task_id: task.id, state: restored } };\n    }\n    if (scope === \"participant\") {\n      const uri = (p.participant_uri as string) || (p.uri as string);\n      if (!uri) return { error: rpcError(E.PARAMS, \"participant_uri is required\") };\n      if (!ws.members.has(uri)) return { error: rpcError(E.PARAMS, `Unknown participant: ${uri}`) };\n      // A pause holds until someone else lifts it: the paused member lifting\n      // its own would make the pause its to keep or drop.\n      if (uri === p.from) return { error: rpcError(E.NOT_AUTHORISED, \"A paused participant does not lift its own pause\") };\n      ws.members.get(uri)!.paused = false;\n      return { result: { scope: \"participant\", participant_uri: uri, paused: false } };\n    }\n    ws.state = \"active\";\n    return { result: { scope: \"workspace\", workspace: ws.id, state: \"active\" } };\n  });\n\n  coord.handlers.set(\"control.cancel\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state === \"completed\" || task.state === \"declined\" || task.state === \"cancelled\" || task.state === \"superseded\") {\n      return { error: rpcError(E.CONTROL_NOT_AUTHORISED, `Cannot cancel ${task.state} task`) };\n    }\n    // A review a task requires ends with a decision. Its authors pulling the\n    // emergency brake on it would end it with none; other members still can.\n    if (openRequiredReviewAuthors(ws, task).includes(p.from as string)) {\n      return { error: rpcError(E.NOT_AUTHORISED,\n        \"The authors of the work under review cannot end its review without a decision\") };\n    }\n    task.state = \"cancelled\";\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: p.from as string, state: \"cancelled\", note: p.reason as string | undefined });\n    return { result: { state: \"cancelled\" } };\n  });\n\n  coord.handlers.set(\"control.snapshot\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const bad = paramsError(p, [[\"include\", \"strings\"], [\"label\", \"string\"]]);\n    if (bad) return bad;\n    if (Array.isArray(p.include) && p.include.length === 0) {\n      return { error: rpcError(E.PARAMS, \"include must not be empty\") };\n    }\n    const include: string[] = Array.isArray(p.include)\n      ? [...p.include as string[]]\n      : [\"members\", \"open_tasks\", \"mode_ceiling\"];\n    const state: Record<string, unknown> = {};\n    if (include.includes(\"members\")) {\n      // Read-only projections: read without recording a change.\n      const members = Array.from(rawValues(ws.members)).map(m => ({\n        uri: m.uri, type: m.type,\n        ...(m.role ? { role: m.role } : {}),\n        ...(m.scopes?.length ? { scopes: m.scopes } : {}),\n      }));\n      if (members.length) state.members = members;\n    }\n    if (include.includes(\"open_tasks\")) {\n      const tasks = Array.from(rawValues(ws.tasks))\n        .filter(t => t.state !== \"completed\" && t.state !== \"declined\" && t.state !== \"cancelled\" && t.state !== \"superseded\")\n        .map(t => ({ id: t.id, kind: t.kind, state: t.state,\n          ...(t.assignee ? { assignee: t.assignee } : {}),\n        }));\n      if (tasks.length) state.open_tasks = tasks;\n    }\n    if (include.includes(\"mode_ceiling\")) state.mode_ceiling = ws.mode_ceiling;\n    if (include.includes(\"policy\") && ws.routing_policy_uri) state.routing_policy_uri = ws.routing_policy_uri;\n    if (include.includes(\"audit\") || include.includes(\"all\")) state.audit_seq = ws.audit.length;\n\n    // Store the same canonical artefact that is emitted on the wire. Copies\n    // belong to this explicit capture boundary, never Coordinator.snapshot().\n    const content: SnapshotArtefact[\"content\"] = structuredClone({\n      workspace: ws.id,\n      audit_seq: ws.audit.length,\n      include,\n      state,\n      ...(p.label ? { label: p.label as string } : {}),\n    });\n    const snapId = coord.ids.artefactId();\n    const snap: SnapshotArtefact = {\n      id: snapId,\n      kind: \"snapshot\",\n      produced_at: coord.now(),\n      produced_by: p.from as string,\n      content_hash: contentHash(content),\n      content,\n    };\n    ws.snapshots.set(snapId, snap);\n    return {\n      result: {\n        snapshot_artefact_id: snapId,\n        audit_seq: snap.content.audit_seq,\n        artefact: structuredClone(snap),\n      },\n    };\n  });\n\n  coord.handlers.set(\"control.rollback\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const bad = paramsError(p, [\n      [\"to_snapshot_artefact_id\", \"string\"], [\"snapshot_artefact_id\", \"string\"], [\"snapshot_id\", \"string\"],\n      [\"what_to_restore\", \"strings\"], [\"reason\", \"string\"],\n    ]);\n    if (bad) return bad;\n    const snapId = (p.to_snapshot_artefact_id as string)\n                 || (p.snapshot_artefact_id as string)\n                 || (p.snapshot_id as string);\n    if (!snapId) return { error: rpcError(E.PARAMS, \"to_snapshot_artefact_id is required\") };\n    const snap = ws.snapshots.get(snapId);\n    if (!snap) return { error: rpcError(E.CONTROL_SNAPSHOT_NOT_FOUND, `Unknown snapshot: ${snapId}`) };\n    if (Array.isArray(p.what_to_restore) && p.what_to_restore.length === 0) {\n      return { error: rpcError(E.PARAMS, \"what_to_restore must not be empty\") };\n    }\n    const what: string[] = (p.what_to_restore as string[]) ?? snap.content.include;\n    const restored: string[] = [];\n    if (what.includes(\"mode_ceiling\") && snap.content.state.mode_ceiling) {\n      ws.mode_ceiling = snap.content.state.mode_ceiling as Mode;\n      restored.push(\"mode_ceiling\");\n    }\n    if (what.includes(\"members\") && Array.isArray(snap.content.state.members)) {\n      const snapByUri = new Map<string, Record<string, unknown>>();\n      for (const m of snap.content.state.members as Array<Record<string, unknown>>) {\n        snapByUri.set(m.uri as string, m);\n      }\n      for (const [uri, snapM] of snapByUri) {\n        if (ws.members.has(uri)) {\n          const cur = ws.members.get(uri)!;\n          // The admin role is granted by an admin (SPECIFICATION 6.3), and a\n          // rollback, which any member may call, neither grants nor removes it.\n          const role = (snapM.role as string) ?? cur.role;\n          if (role !== \"admin\" && cur.role !== \"admin\") cur.role = role;\n          cur.scopes = Array.isArray(snapM.scopes) ? [...snapM.scopes as string[]] : undefined;\n        }\n      }\n      restored.push(\"members\");\n    }\n    return { result: {\n      rolled_back_to: snapId, audit_seq: snap.content.audit_seq, restored,\n      ...(p.reason ? { reason: p.reason as string } : {}),\n    }};\n  });\n\n  coord.handlers.set(\"control.supersede\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const oldId = p.task_id as string;\n    const old = ws.tasks.get(oldId);\n    if (!old) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (openRequiredReviewAuthors(ws, old).includes(p.from as string)) {\n      return { error: rpcError(E.NOT_AUTHORISED,\n        \"The authors of the work under review cannot end its review without a decision\") };\n    }\n    const newSpec = (p.successor_task as Record<string, unknown>) ?? {};\n    if (typeof newSpec.kind !== \"string\" || !newSpec.kind) {\n      return { error: rpcError(E.PARAMS, \"successor_task must include kind\") };\n    }\n    const bad = paramsError(p, [[\"successor_task.assignee\", \"string\"], [\"reason\", \"string\"]]);\n    if (bad) return bad;\n    const assignee = (newSpec.assignee as string) || old.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"successor assignee not in workspace\") };\n    }\n    // The successor is a created task, so the participant-paused check\n    // task.create applies has to apply here too. Without it, superseding is a\n    // way to hand work to a participant whose work was stopped.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    // The successor is a created task, so it is bound by the same modes/1.0\n    // invariants as task.create: it must not exceed the workspace ceiling, and\n    // a trial-mode task forces review on regardless of its own setting.\n    if (newSpec.mode !== undefined && newSpec.mode !== null && typeof newSpec.mode !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.mode must be a string\") };\n    }\n    const requestedMode = (newSpec.mode as Mode) || old.mode;\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    if (newSpec.review_required !== undefined && newSpec.review_required !== null\n        && typeof newSpec.review_required !== \"boolean\") {\n      return { error: rpcError(E.PARAMS, \"successor_task.review_required must be a boolean\") };\n    }\n    const now = coord.now();\n    const newId = coord.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: newSpec.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as string,\n      input: (newSpec.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode: requestedMode,\n      supersedes: old.id,\n      history: [{ ts: now, from: p.from as string, state: \"created\",\n                  note: `supersedes ${old.id}: ${(p.reason as string) || \"\"}` }],\n      paused: false,\n    };\n    // A successor keeps the review requirement of the task it replaces, so\n    // superseding never removes a required review. Trial forces review only\n    // when the workspace opted into modes/1.0, matching task.create, since\n    // mode is inert without the profile. Otherwise the spec's own setting\n    // applies.\n    if (old.review_required || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    } else if (\"review_required\" in newSpec) {\n      newTask.review_required = !!newSpec.review_required;\n    }\n    // Whoever made the work it replaces is an author of the successor's\n    // review too, so superseding does not make its author a reviewer of it.\n    newTask.prior_authors = successorAuthors(old, p.from);\n    ws.tasks.set(newId, newTask);\n    old.state = \"superseded\";\n    old.superseded_by = newId;\n    old.updated_at = now;\n    old.history.push({ ts: now, from: p.from as string, state: \"superseded\",\n                       note: `-> ${newId}: ${(p.reason as string) || \"\"}` });\n    return { result: {\n      superseded_task_id: old.id, new_task_id: newId,\n      ...(p.reason != null ? { reason: p.reason as string } : {}),\n    } };\n  });\n\n  coord.handlers.set(\"control.set_mode_ceiling\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const bad = paramsError(p, [[\"reason\", \"string\"]]);\n    if (bad) return bad;\n    const m = (p.new_ceiling as Mode) ?? (p.mode_ceiling as Mode);\n    if (!VALID_MODES.has(m)) {\n      return { error: rpcError(E.PARAMS, \"new_ceiling must be shadow, trial or production\") };\n    }\n    ws.mode_ceiling = m;\n    return { result: { mode_ceiling: ws.mode_ceiling, ...(p.reason != null ? { reason: p.reason as string } : {}) } };\n  });\n}\n","/**\n * deliberation/1.0 profile (profiles/deliberation.md).\n *\n * Methods:\n *   - deliberate.open\n *   - deliberate.comment\n *   - deliberate.vote\n *   - deliberate.close\n *\n * Rules: any_one_approves | all_approve | quorum:N |\n *        weighted_vote:T | weighted_vote_with_veto:T\n *\n * Error codes (spec S5):\n *   -32030 voter not in participant list\n *   -32031 already voted\n *   -32032 closed or lapsed\n *   -32033 unknown rule\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\nimport type { Deliberation } from \"../types.js\";\n\n// Names a supplied id cannot take: JavaScript gives them special meaning as\n// object keys, and the patch engine refuses them as path segments too.\nconst RESERVED_IDS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n// A rule's argument is read by these patterns alone, so both references read\n// the same number from it: parseFloat and Python's float() each take forms\n// the other refuses, such as \"1.5x\", \"1_0\" and \"inf\".\nconst QUORUM_ARG = /^[0-9]+$/;\nconst THRESHOLD_ARG = /^[0-9]+(\\.[0-9]+)?$/;\n\nfunction parseRule(rule: string): { kind: string; params: Record<string, number> } {\n  const colon = rule.indexOf(\":\");\n  if (colon >= 0) {\n    const kind = rule.slice(0, colon);\n    const arg = rule.slice(colon + 1);\n    if (kind === \"quorum\" && QUORUM_ARG.test(arg)) return { kind, params: { n: parseInt(arg, 10) } };\n    if ((kind === \"weighted_vote\" || kind === \"weighted_vote_with_veto\") && THRESHOLD_ARG.test(arg)) {\n      return { kind, params: { threshold: parseFloat(arg) } };\n    }\n  }\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return { kind: rule, params: {} };\n  throw new Error(`Unknown rule: ${rule}`);\n}\n\nfunction computeOutcome(delib: Deliberation): Deliberation[\"outcome\"] {\n  const parsed = parseRule(delib.rule);\n  const yea = delib.votes.filter(v => v.vote === \"yea\");\n  const nay = delib.votes.filter(v => v.vote === \"nay\");\n  const vetoes = delib.votes.filter(v => v.veto_invoked && (delib.veto ?? {})[v.voter]);\n  const weights = delib.weights ?? {};\n\n  const weighted = (vs: typeof yea) =>\n    vs.reduce((s, v) => s + (weights[v.voter] ?? 1.0), 0);\n\n  if (parsed.kind === \"any_one_approves\") {\n    return {\n      outcome: yea.length >= 1 ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"all_approve\") {\n    const passed = yea.length === delib.participants.length && nay.length === 0;\n    return {\n      outcome: passed ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: vetoes.map(v => v.voter),\n    };\n  }\n  if (parsed.kind === \"quorum\") {\n    const n = parsed.params.n;\n    const cast = yea.length + nay.length;\n    if (cast < n) {\n      return {\n        outcome: \"rejected\", reason: \"quorum not met\", rule: delib.rule,\n        tally: { yea: yea.length, nay: nay.length }, vetoes: [],\n      };\n    }\n    return {\n      outcome: yea.length > nay.length ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yea.length, nay: nay.length },\n      vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote\") {\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  if (parsed.kind === \"weighted_vote_with_veto\") {\n    if (vetoes.length) {\n      return {\n        outcome: \"rejected\", rule: delib.rule,\n        tally: { yea: 0, nay: 0 },\n        vetoes: vetoes.map(v => v.voter),\n      };\n    }\n    const yeaW = weighted(yea), nayW = weighted(nay);\n    return {\n      outcome: yeaW >= parsed.params.threshold ? \"approved\" : \"rejected\",\n      rule: delib.rule,\n      tally: { yea: yeaW, nay: nayW }, vetoes: [],\n    };\n  }\n  return { outcome: \"error\", rule: delib.rule, reason: `unsupported rule ${parsed.kind}` };\n}\n\nexport function registerDeliberation(coord: Coordinator): void {\n  coord.handlers.set(\"deliberate.open\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"rule\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    for (const name of [\"to\", \"participants\"]) {\n      const v = p[name];\n      if (v != null && typeof v !== \"string\" && !(Array.isArray(v) && v.every((x) => typeof x === \"string\"))) {\n        return { error: rpcError(E.PARAMS, `${name} must be a string or a list of strings`) };\n      }\n    }\n    if (typeof p.rule !== \"string\") return { error: rpcError(E.PARAMS, \"rule must be a string\") };\n    const bad = paramsError(p, [[\"weights\", \"object\"], [\"veto\", \"object\"]]);\n    if (bad) return bad;\n    // Weights are summed and vetoes read as true or false when the vote is\n    // counted, so they are checked when it opens.\n    const weights = (p.weights ?? {}) as Record<string, unknown>;\n    if (!Object.values(weights).every((w) => typeof w === \"number\" && Number.isInteger(w))) {\n      return { error: rpcError(E.PARAMS, \"weights must map participants to integers\") };\n    }\n    const veto = (p.veto ?? {}) as Record<string, unknown>;\n    if (!Object.values(veto).every((v) => typeof v === \"boolean\")) {\n      return { error: rpcError(E.PARAMS, \"veto must map participants to booleans\") };\n    }\n    const to = p.to ?? p.participants;\n    const participants: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!participants.length) {\n      return { error: rpcError(E.PARAMS, \"deliberate.open needs 'to' (participants list)\") };\n    }\n    try { parseRule(p.rule as string); }\n    catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.DELIB_UNKNOWN_RULE, msg) };\n    }\n    // A supplied id names a new deliberation. One already in use was stored\n    // over the existing object, which reopened, reset or replaced it.\n    const suppliedDeliberationId = p.deliberation_id;\n    if (suppliedDeliberationId !== undefined && suppliedDeliberationId !== null && suppliedDeliberationId !== \"\") {\n      if (typeof suppliedDeliberationId !== \"string\") {\n        return { error: rpcError(E.PARAMS, \"deliberation_id must be a string\") };\n      }\n      // The id is a key in the stored state, and a JavaScript object given\n      // the key __proto__ drops it, so the object would be lost on a restart.\n      if (RESERVED_IDS.has(suppliedDeliberationId)) {\n        return { error: rpcError(E.PARAMS, `deliberation_id cannot be ${JSON.stringify(suppliedDeliberationId)}`) };\n      }\n      if (ws.deliberations.has(suppliedDeliberationId)) {\n        return { error: rpcError(E.PARAMS, `deliberation_id already in use: ${suppliedDeliberationId}`) };\n      }\n    }\n    const id = (p.deliberation_id as string) || coord.ids.deliberationId();\n    const delib: Deliberation = {\n      id,\n      task_id: p.task_id as string | undefined,\n      opener: p.from as string,\n      participants,\n      rule: p.rule as string,\n      question: p.question as string | undefined,\n      weights: p.weights as Deliberation[\"weights\"],\n      veto: p.veto as Deliberation[\"veto\"],\n      deadline: p.deadline as string | undefined,\n      state: \"open\",\n      comments: [],\n      votes: [],\n      opened_at: coord.now(),\n    };\n    ws.deliberations.set(id, delib);\n    return { result: { deliberation_id: id, state: \"open\" } };\n  });\n\n  coord.handlers.set(\"deliberate.comment\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    const bad = paramsError(p, [[\"comment\", \"string\"], [\"text\", \"string\"]]);\n    if (bad) return bad;\n    delib.comments.push({\n      ts: coord.now(),\n      from: p.from as string,\n      text: (p.comment as string) || (p.text as string) || \"\",\n    });\n    return { result: { accepted: true } };\n  });\n\n  coord.handlers.set(\"deliberate.vote\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state !== \"open\") {\n      return { error: rpcError(E.DELIB_CLOSED_OR_LAPSED, \"Deliberation not open\") };\n    }\n    for (const f of [\"from\", \"vote\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const v = p.vote as string;\n    if (v !== \"yea\" && v !== \"nay\" && v !== \"abstain\") {\n      return { error: rpcError(E.PARAMS, \"vote must be yea/nay/abstain\") };\n    }\n    const bad = paramsError(p, [[\"veto_invoked\", \"boolean\"]]);\n    if (bad) return bad;\n    const voter = p.from as string;\n    if (!delib.participants.includes(voter)) {\n      return { error: rpcError(E.DELIB_VOTER_NOT_IN_LIST,\n        `Voter ${voter} not in participant list`) };\n    }\n    if (delib.votes.some(x => x.voter === voter)) {\n      return { error: rpcError(E.DELIB_ALREADY_VOTED, `Voter ${voter} has already voted`) };\n    }\n    delib.votes.push({\n      ts: coord.now(),\n      voter,\n      vote: v as \"yea\" | \"nay\" | \"abstain\",\n      weight: p.weight as number | undefined,\n      comment: p.comment as string | undefined,\n      veto_invoked: !!p.veto_invoked,\n    });\n    return { result: { recorded: true } };\n  });\n\n  coord.handlers.set(\"deliberate.close\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const delib = ws.deliberations.get(p.deliberation_id as string);\n    if (!delib) return { error: rpcError(E.PARAMS, \"Unknown deliberation\") };\n    if (delib.state === \"closed\") return { result: delib.outcome! };\n    delib.state = \"closed\";\n    delib.outcome = computeOutcome(delib);\n    return { result: delib.outcome };\n  });\n}\n","/**\n * handoff/1.0 profile (profiles/handoff.md).\n *\n * Carries multiple tasks. Recipient is a single URI or a group:... URI.\n *\n * Error codes (spec S6):\n *   -32050 tasks not assigned to proposer\n *   -32051 already resolved\n *   -32052 recipient not a workspace member\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { heldBy, unionOf } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\nimport type { Handoff, HandoffTaskItem } from \"../types.js\";\n\n// Names a supplied id cannot take: JavaScript gives them special meaning as\n// object keys, and the patch engine refuses them as path segments too.\nconst RESERVED_IDS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\nexport function registerHandoff(coord: Coordinator): void {\n  coord.handlers.set(\"handoff.propose\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"tasks\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    // The recipient is compared and looked up when the handoff is resolved.\n    if (typeof p.to !== \"string\") return { error: rpcError(E.PARAMS, \"to must be a string\") };\n    const bad = paramsError(p, [[\"context_links\", \"strings\"]]);\n    if (bad) return bad;\n    const proposer = p.from as string;\n    const recipient = p.to as string;\n    if (typeof recipient === \"string\" && !recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(recipient)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          `Recipient ${recipient} is not a member`) };\n      }\n    }\n    const tasksIn = p.tasks;\n    if (!Array.isArray(tasksIn) || !tasksIn.length) {\n      return { error: rpcError(E.PARAMS, \"tasks must be a non-empty list\") };\n    }\n    const proposed: HandoffTaskItem[] = [];\n    for (const t of tasksIn as Array<Record<string, unknown>>) {\n      if (t === null || typeof t !== \"object\" || Array.isArray(t) || typeof t.task_id !== \"string\") {\n        return { error: rpcError(E.PARAMS, \"each entry in tasks must be an object with a string task_id\") };\n      }\n      const badItem = paramsError(t, [[\"blockers\", \"strings\"]]);\n      if (badItem) return badItem;\n      const tid = t.task_id as string;\n      if (!tid || !ws.tasks.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Unknown task in handoff: ${tid}`) };\n      }\n      const task = ws.tasks.get(tid)!;\n      if (task.assignee !== proposer) {\n        return { error: rpcError(E.HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER,\n          `Task ${tid} is not currently assigned to ${proposer}`) };\n      }\n      proposed.push({\n        task_id: tid,\n        title: t.title as string | undefined,\n        status_summary: t.status_summary as string | undefined,\n        next_action: t.next_action as string | undefined,\n        blockers: (t.blockers as string[] | undefined) ?? [],\n      });\n    }\n    // A supplied id names a new handoff. One already in use was stored\n    // over the existing object, which reopened, reset or replaced it.\n    const suppliedHandoffId = p.handoff_id;\n    if (suppliedHandoffId !== undefined && suppliedHandoffId !== null && suppliedHandoffId !== \"\") {\n      if (typeof suppliedHandoffId !== \"string\") {\n        return { error: rpcError(E.PARAMS, \"handoff_id must be a string\") };\n      }\n      // The id is a key in the stored state, and a JavaScript object given\n      // the key __proto__ drops it, so the object would be lost on a restart.\n      if (RESERVED_IDS.has(suppliedHandoffId)) {\n        return { error: rpcError(E.PARAMS, `handoff_id cannot be ${JSON.stringify(suppliedHandoffId)}`) };\n      }\n      if (ws.handoffs.has(suppliedHandoffId)) {\n        return { error: rpcError(E.PARAMS, `handoff_id already in use: ${suppliedHandoffId}`) };\n      }\n    }\n    const id = (p.handoff_id as string) || coord.ids.handoffId();\n    const ho: Handoff = {\n      id,\n      proposer,\n      recipient,\n      proposed_at: coord.now(),\n      tasks: proposed,\n      summary: p.summary as string | undefined,\n      context_links: (p.context_links as string[] | undefined) ?? [],\n      state: \"proposed\",\n    };\n    ws.handoffs.set(id, ho);\n    return { result: { handoff_id: id, state: \"proposed\", task_ids: proposed.map(t => t.task_id) } };\n  });\n\n  coord.handlers.set(\"handoff.accept\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const acceptor = p.from as string;\n    if (ho.recipient.startsWith(\"group:\")) {\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    } else {\n      if (acceptor !== ho.recipient) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not the named recipient\") };\n      }\n      if (!ws.members.has(acceptor)) {\n        return { error: rpcError(E.HANDOFF_RECIPIENT_NOT_MEMBER,\n          \"Acceptor is not a workspace member\") };\n      }\n    }\n    // Accepting makes the acceptor the assignee. A paused participant is\n    // assigned no new tasks (control/1.0), so it cannot take tasks this way.\n    if (ws.members.get(acceptor)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Acceptor ${acceptor} is paused`) };\n    }\n    const bad = paramsError(p, [[\"accepted_task_ids\", \"strings\"]]);\n    if (bad) return bad;\n    // Omission accepts all proposed tasks; an empty selection is not a handoff.\n    if (Array.isArray(p.accepted_task_ids) && p.accepted_task_ids.length === 0) {\n      return { error: rpcError(E.PARAMS, \"accepted_task_ids must not be empty\") };\n    }\n    const validIds = new Set(ho.tasks.map(t => t.task_id));\n    const acceptedIds: string[] = Array.isArray(p.accepted_task_ids)\n      ? [...p.accepted_task_ids as string[]]\n      : ho.tasks.map(t => t.task_id);\n    for (const tid of acceptedIds) {\n      if (!validIds.has(tid)) {\n        return { error: rpcError(E.PARAMS, `Task ${tid} not in this handoff`) };\n      }\n    }\n    // The proposer offered tasks it held. One routed, superseded or handed\n    // to someone else since is no longer the proposer's to give, and taking\n    // it would move it away from whoever holds it now.\n    for (const tid of acceptedIds) {\n      if (ws.tasks.get(tid)?.assignee !== ho.proposer) {\n        return { error: rpcError(E.HANDOFF_TASKS_NOT_ASSIGNED_TO_PROPOSER,\n          `Task ${tid} is not currently assigned to ${ho.proposer}`) };\n      }\n    }\n    const now = coord.now();\n    for (const tid of acceptedIds) {\n      const task = ws.tasks.get(tid)!;\n      // The proposer, which holds the task and hands it on, stays among the\n      // authors of the work (review/1.0 §3.1), so it cannot hand its work on\n      // and then review it.\n      if (acceptor !== task.assignee) task.prior_authors = unionOf(task.prior_authors ?? [], heldBy(task, ho.proposer));\n      task.assignee = acceptor;\n      task.updated_at = now;\n      task.history.push({\n        ts: now, from: acceptor, state: task.state,\n        note: `handoff accepted from ${ho.proposer}`,\n      });\n    }\n    ho.state = \"accepted\";\n    ho.accepted_by = acceptor;\n    ho.accepted_task_ids = [...acceptedIds];\n    ho.accept_comment = p.comment as string | undefined;\n    ho.resolved_at = now;\n    return { result: { accepted: true, task_ids: [...acceptedIds], assignee: acceptor } };\n  });\n\n  coord.handlers.set(\"handoff.decline\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"handoff_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const ho = ws.handoffs.get(p.handoff_id as string);\n    if (!ho) return { error: rpcError(E.PARAMS, \"Unknown handoff\") };\n    if (ho.state !== \"proposed\") {\n      return { error: rpcError(E.HANDOFF_ALREADY_RESOLVED, `Handoff already ${ho.state}`) };\n    }\n    const decliner = p.from as string;\n    ho.decline_reason = p.reason as string | undefined;\n    ho.decline_suggested_target = p.suggested_target as string | undefined;\n    if (!ho.recipient.startsWith(\"group:\") && decliner === ho.recipient) {\n      ho.state = \"declined\";\n      ho.resolved_at = coord.now();\n    }\n    return { result: { recorded: true, state: ho.state } };\n  });\n}\n","/**\n * routing/1.0 profile (profiles/routing.md).\n *\n * Three methods, each emits a route_decision artefact:\n *   - task.route      -> pick assignee + update task.assignee\n *   - review.depth    -> skip / spot_check / full + sampling_probability\n *   - escalate.auto   -> evaluate auto-escalation\n *\n * Error codes:\n *   -32510 no eligible assignee\n *   -32513 candidates_empty\n *   -32514 depth_not_applicable\n *   -32515 policy_unreachable\n *   -32516 escalation target unavailable\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { heldBy, unionOf } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\nimport type { RouteDecisionArtefact, Task } from \"../types.js\";\n\nconst CRIT: Record<string, number> = { low: 0, medium: 1, high: 2, critical: 3 };\nconst DECIMAL = /^-?[0-9]+(\\.[0-9]+)?$/;\n\n/**\n * The confidence a hint gives, 1.0 where it gives none. Read from an integer\n * or a decimal string alone, so both references read the same number:\n * Number() and Python's float() each take forms the other refuses, such as\n * \"\", \"0x10\" and \"inf\".\n */\nexport function confidenceOf(hints: Record<string, unknown>): number {\n  const v = hints.confidence;\n  if (typeof v === \"number\" && Number.isInteger(v)) return v;\n  if (typeof v === \"string\" && DECIMAL.test(v)) return Number(v);\n  return 1.0;\n}\n\n/** The rank of a hint's criticality, medium where it names none of the four. */\nexport function criticalityOf(hints: Record<string, unknown>): number {\n  const crit = hints.criticality ?? \"medium\";\n  return typeof crit === \"string\" && Object.prototype.hasOwnProperty.call(CRIT, crit) ? CRIT[crit] : 1;\n}\n\nfunction defaultDepth(hints: Record<string, unknown>): {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling?: number;\n  summary: string;\n} {\n  const conf = confidenceOf(hints);\n  const r = criticalityOf(hints);\n  if (r >= 3) return { depth: \"full\", summary: \"criticality=critical: full review\" };\n  if (r === 2 && conf < 0.7) return { depth: \"full\", summary: \"criticality=high and confidence<0.7: full review\" };\n  if (r === 0 && conf >= 0.95) return { depth: \"skip\", summary: \"very low criticality + very high confidence: skip\" };\n  if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling: 0.10, summary: \"low criticality + high confidence: 10% sample\" };\n  return { depth: \"spot_check\", sampling: 0.25, summary: \"default mid-confidence: 25% sample\" };\n}\n\nexport function registerRouting(coord: Coordinator): void {\n  coord.handlers.set(\"task.route\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (p.candidates !== undefined && p.candidates !== null && !Array.isArray(p.candidates)) {\n      return { error: rpcError(E.PARAMS, \"candidates must be a list\") };\n    }\n    const candidates = (p.candidates as string[] | null | undefined) ?? [];\n    if (!candidates.length) {\n      return { error: rpcError(E.ROUTING_CANDIDATES_EMPTY, \"candidates array was empty\") };\n    }\n    let selected: string;\n    let rationale: Record<string, unknown>;\n    if (coord.options.routingPolicy) {\n      try {\n        const d = coord.options.routingPolicy(task, [...candidates]);\n        selected = d.selected;\n        rationale = d.rationale;\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `routing policy error: ${msg}`) };\n      }\n    } else {\n      // A paused participant is assigned no new tasks (control/1.0), so the\n      // default policy passes over one as it passes over a non-member, and\n      // names it among the alternatives with that reason.\n      const memberOf = (c: unknown) => (typeof c === \"string\" ? ws.members.get(c) : undefined);\n      const eligible = candidates.filter(c => { const m = memberOf(c); return !!m && !m.paused; });\n      if (!eligible.length) {\n        return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE, \"No candidate is a workspace member who is not paused\") };\n      }\n      selected = eligible[0];\n      const alternatives: Array<{ candidate: string; reason_excluded: string }> = [];\n      let chosen = false;\n      for (const c of candidates) {\n        const m = memberOf(c);\n        if (!m) continue;\n        if (m.paused) alternatives.push({ candidate: c, reason_excluded: \"paused\" });\n        else if (!chosen) chosen = true;\n        else alternatives.push({ candidate: c, reason_excluded: \"not first eligible\" });\n      }\n      rationale = {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: alternatives,\n      };\n    }\n    if (!ws.members.has(selected)) {\n      return { error: rpcError(E.ROUTING_NO_ELIGIBLE_ASSIGNEE,\n        `Selected ${JSON.stringify(selected)} is not a member`) };\n    }\n    // An operator policy can pick a paused participant. Routing to one would\n    // assign a task to a participant whose work was stopped, so it is refused\n    // as task.create refuses a paused assignee.\n    if (ws.members.get(selected)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${selected} is paused`) };\n    }\n    // The member the task leaves stays among the authors of its work where it\n    // routes the task on itself (review/1.0 §3.1), so it cannot route its\n    // work on and then review it.\n    const leaving = heldBy(task, p.from);\n    if (selected !== task.assignee && leaving.length) task.prior_authors = unionOf(task.prior_authors ?? [], leaving);\n    task.assignee = selected;\n    task.updated_at = coord.now();\n    task.history.push({ ts: task.updated_at, from: \"service:coordinator\",\n                        state: task.state, note: `routed to ${selected}` });\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"task.route\", outcome: selected,\n      produced_by: \"service:coordinator\", produced_at: task.updated_at,\n      task: task.id,\n      policy_id: rationale.policy_id as string | undefined,\n      hints_observed: { ...(task.routing_hints ?? {}) },\n      rationale: (rationale.summary as string) ?? \"\",\n      alternatives_considered: rationale.alternatives_considered,\n    };\n    ws.route_decisions.set(artId, artefact);\n    return { result: { selected, decision_artefact: artId, rationale } };\n  });\n\n  coord.handlers.set(\"review.depth\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const bad = paramsError(p, [[\"artefact_routing_hints\", \"object\"]]);\n    if (bad) return bad;\n    const hints: Record<string, unknown> = { ...(task.routing_hints ?? {}),\n                                              ...((p.artefact_routing_hints as Record<string, unknown>) ?? {}) };\n    if (!Object.keys(hints).length) {\n      return { error: rpcError(E.ROUTING_DEPTH_NOT_APPLICABLE, \"No routing_hints to consult\") };\n    }\n    let depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n    let sampling: number | undefined;\n    let summary: string;\n    let policyId: string;\n    if (coord.options.reviewDepthPolicy) {\n      try {\n        const d = coord.options.reviewDepthPolicy(task, hints);\n        depth = d.depth;\n        sampling = d.sampling_probability;\n        summary = (d.rationale.summary as string) ?? \"operator policy\";\n        policyId = (d.rationale.policy_id as string) ?? \"operator\";\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `depth policy error: ${msg}`) };\n      }\n    } else {\n      const d = defaultDepth(hints);\n      depth = d.depth; sampling = d.sampling; summary = d.summary;\n      policyId = \"default\";\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"review.depth\", outcome: depth,\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id, policy_id: policyId,\n      hints_observed: hints, rationale: summary,\n      ...(sampling !== undefined ? { sampling_probability: sampling } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    const result: Record<string, unknown> = {\n      depth, decision_artefact: artId,\n      rationale: { policy_id: policyId, hints_used: Object.keys(hints), summary },\n    };\n    if (sampling !== undefined) result.sampling_probability = sampling;\n    return { result };\n  });\n\n  coord.handlers.set(\"escalate.auto\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    const bad = paramsError(p, [[\"default_escalation_target\", \"string\"]]);\n    if (bad) return bad;\n    const hints = { ...(task.routing_hints ?? {}) };\n    let escalate: boolean, to: string | undefined, rule: Record<string, unknown>;\n    if (coord.options.escalationPolicy) {\n      try {\n        const d = coord.options.escalationPolicy(task, hints);\n        escalate = !!d.escalate;\n        to = d.to;\n        rule = d.triggered_rule ?? {};\n      } catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        return { error: rpcError(E.ROUTING_POLICY_UNREACHABLE, `escalation policy error: ${msg}`) };\n      }\n    } else {\n      const conf = confidenceOf(hints);\n      const r = criticalityOf(hints);\n      escalate = r >= 3 || (r >= 2 && conf < 0.6);\n      to = p.default_escalation_target as string | undefined;\n      rule = {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      };\n    }\n    if (escalate) {\n      if (!to) return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n        \"Escalation triggered but no target available\") };\n      if (!to.startsWith(\"group:\") && !ws.members.has(to)) {\n        return { error: rpcError(E.ROUTING_ESC_TARGET_UNAVAILABLE,\n          `Escalation target ${to} is not a member or group`) };\n      }\n    }\n    const artId = coord.ids.artefactId();\n    const artefact: RouteDecisionArtefact = {\n      id: artId, kind: \"route_decision\",\n      decision_type: \"escalate.auto\",\n      outcome: escalate ? { escalate: true, to } : { escalate: false },\n      produced_by: \"service:coordinator\", produced_at: coord.now(),\n      task: task.id,\n      policy_id: rule.rule_id as string | undefined,\n      hints_observed: hints,\n      rationale: (rule.summary as string) ?? \"\",\n      ...(escalate ? { escalation_target: to } : {}),\n    };\n    ws.route_decisions.set(artId, artefact);\n    if (escalate) {\n      if (coord.options.onAutoEscalate && to) {\n        try { coord.options.onAutoEscalate(task, to); } catch { /* */ }\n      }\n      return { result: { escalate: true, to, decision_artefact: artId, triggered_rule: rule } };\n    }\n    return { result: { escalate: false, decision_artefact: artId } };\n  });\n}\n","/**\n * security-signed/1.0 profile (profiles/security-signed.md).\n *\n * Top-level `sig` field on every envelope: ed25519:<kid>:<base64>.\n * Verification happens at dispatch (see Coordinator.verifySignature).\n *\n * Methods:\n *   - participant.rotate_key\n *   - participant.revoke_key\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\nimport type { KeyRecord } from \"../types.js\";\n\nexport function registerSecuritySigned(coord: Coordinator): void {\n  coord.handlers.set(\"participant.rotate_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"old_kid\", \"new_jwk\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    // Both are written into the refusals below, where null reads one way in\n    // each language.\n    for (const f of [\"from\", \"old_kid\"]) {\n      if (typeof p[f] !== \"string\") return { error: rpcError(E.PARAMS, `${f} must be a string`) };\n    }\n    const member = ws.members.get(p.from as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown participant: ${p.from}`) };\n    const oldKid = p.old_kid as string;\n    const oldKey = member.keys.find(k => k.kid === oldKid);\n    if (!oldKey) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${oldKid} for ${p.from}`) };\n    if (oldKey.revoked_at) return { error: rpcError(E.SIG_KEY_REVOKED, `Key ${oldKid} is revoked`) };\n\n    const newJwk = p.new_jwk as Record<string, unknown>;\n    if (!newJwk || typeof newJwk.kid !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_jwk must include kid\") };\n    }\n    // Keys are found by kid, so a new key under a kid the member holds would\n    // be closed with the old one, or shadowed by it.\n    if (member.keys.some((k) => k.kid === newJwk.kid)) {\n      return { error: rpcError(E.PARAMS, `${p.from} already holds a key ${newJwk.kid}; a new key takes a kid of its own`) };\n    }\n    const now = coord.now();\n    oldKey.valid_until = now;\n    member.keys.push({\n      jwk: newJwk as unknown as KeyRecord[\"jwk\"],\n      kid: newJwk.kid as string,\n      valid_from: now,\n    });\n    return { result: { rotated: true, old_kid: oldKid, new_kid: newJwk.kid, valid_from: now } };\n  });\n\n  coord.handlers.set(\"participant.revoke_key\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"target_uri\", \"kid\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    // Both are written into the refusals below, where null reads one way in\n    // each language.\n    for (const f of [\"target_uri\", \"kid\"]) {\n      if (typeof p[f] !== \"string\") return { error: rpcError(E.PARAMS, `${f} must be a string`) };\n    }\n    const bad = paramsError(p, [[\"from\", \"string\"], [\"reason\", \"string\"]]);\n    if (bad) return bad;\n    const sender = p.from as string | undefined;\n    if (sender !== p.target_uri) {\n      const caller = sender ? ws.members.get(sender) : undefined;\n      if (!caller || caller.role !== \"admin\") {\n        return { error: rpcError(E.NOT_AUTHORISED,\n          \"Revoking another member's key requires the admin role\") };\n      }\n    }\n    const member = ws.members.get(p.target_uri as string);\n    if (!member) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `Unknown target: ${p.target_uri}`) };\n    const key = member.keys.find(k => k.kid === p.kid);\n    if (!key) return { error: rpcError(E.SIG_KEY_NOT_FOUND, `No key ${p.kid} for target`) };\n    const now = coord.now();\n    key.revoked_at = now;\n    key.revoked_reason = (p.reason as string) || \"unspecified\";\n    return { result: { revoked: true, kid: key.kid, revoked_at: now, reason: key.revoked_reason } };\n  });\n}\n","/**\n * whisper/1.0 profile (profiles/whisper.md).\n *\n * Methods:\n *   - whisper.ask     -> pose a deadline-bound question with options + default\n *   - whisper.answer  -> answer a whisper\n *\n * Lapse handling: coordinator.checkWhisperLapses(workspaceId, now?) is\n * registered on the Coordinator instance for deployments to call from a\n * scheduler.\n *\n * Error codes (per spec S6):\n *   -32020 WHISPER_ALREADY_ANSWERED\n *   -32021 WHISPER_LAPSED\n *   -32022 WHISPER_OPTION_NOT_IN_SET\n */\nimport type { Coordinator } from \"../coordinator.js\";\nimport { canonicalize } from \"../canonical.js\";\nimport { E, rpcError } from \"../jsonrpc.js\";\nimport { paramsError } from \"../params.js\";\nimport { rawValues } from \"../tracked.js\";\nimport type { WhisperPrompt, Envelope } from \"../types.js\";\n\n// Names a supplied id cannot take: JavaScript gives them special meaning as\n// object keys, and the patch engine refuses them as path segments too.\nconst RESERVED_IDS = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\nfunction parseIso(ts: string): number { return new Date(ts).getTime(); }\n\n/**\n * Whether an answer field holds anything, read as Python reads a value's\n * truth, so both references agree that an empty answer is no answer.\n */\nfunction present(v: unknown): boolean {\n  if (v === undefined || v === null || v === false || v === 0 || v === \"\") return false;\n  if (Array.isArray(v)) return v.length > 0;\n  if (typeof v === \"object\") return Object.keys(v as object).length > 0;\n  return true;\n}\n\nexport function registerWhisper(coord: Coordinator): void {\n  coord.handlers.set(\"whisper.ask\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"to\", \"task_id\", \"question\", \"deadline_ms\", \"default_if_lapsed\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    if (!ws.tasks.has(p.task_id as string)) {\n      return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    }\n    const bad = paramsError(p, [[\"options\", \"list\"], [\"urgency\", \"string\"]]);\n    if (bad) return bad;\n    // The deadline is required, and a number of milliseconds.\n    if (typeof p.deadline_ms !== \"number\" || !Number.isInteger(p.deadline_ms)) {\n      return { error: rpcError(E.PARAMS, \"deadline_ms must be an integer\") };\n    }\n    const to = p.to;\n    const askee: string[] = Array.isArray(to) ? (to as string[]) : [to as string];\n    // A supplied id names a new whisper. One already in use was stored\n    // over the existing object, which reopened, reset or replaced it.\n    const suppliedWhisperId = p.whisper_id;\n    if (suppliedWhisperId !== undefined && suppliedWhisperId !== null && suppliedWhisperId !== \"\") {\n      if (typeof suppliedWhisperId !== \"string\") {\n        return { error: rpcError(E.PARAMS, \"whisper_id must be a string\") };\n      }\n      // The id is a key in the stored state, and a JavaScript object given\n      // the key __proto__ drops it, so the object would be lost on a restart.\n      if (RESERVED_IDS.has(suppliedWhisperId)) {\n        return { error: rpcError(E.PARAMS, `whisper_id cannot be ${JSON.stringify(suppliedWhisperId)}`) };\n      }\n      if (ws.whispers.has(suppliedWhisperId)) {\n        return { error: rpcError(E.PARAMS, `whisper_id already in use: ${suppliedWhisperId}`) };\n      }\n    }\n    const id = (p.whisper_id as string) || coord.ids.artefactId();\n    const prompt: WhisperPrompt = {\n      id,\n      task_id: p.task_id as string,\n      asker: p.from as string,\n      askee,\n      question: p.question as string,\n      options: p.options as WhisperPrompt[\"options\"],\n      asked_at: coord.now(),\n      deadline_ms: Number(p.deadline_ms),\n      default_if_lapsed: p.default_if_lapsed,\n      urgency: (p.urgency as WhisperPrompt[\"urgency\"]) || \"low\",\n      state: \"pending\",\n    };\n    ws.whispers.set(id, prompt);\n    return { result: { whisper_id: id, deadline_ms: prompt.deadline_ms } };\n  });\n\n  coord.handlers.set(\"whisper.answer\", (p) => {\n    const ws = coord.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    for (const f of [\"from\", \"whisper_id\"]) {\n      if (!(f in p)) return { error: rpcError(E.PARAMS, `Missing field: ${f}`) };\n    }\n    const prompt = ws.whispers.get(p.whisper_id as string);\n    if (!prompt) return { error: rpcError(E.PARAMS, \"Unknown whisper id\") };\n    // Only a participant the whisper was addressed to may answer it. A\n    // broadcast scope (workspace:/group:) is satisfied by any member; the\n    // coordinator does not model group membership (see SPECIFICATION.md).\n    const answerer = p.from as string;\n    const broadcast = prompt.askee.some((a) => typeof a === \"string\" && (a.startsWith(\"workspace:\") || a.startsWith(\"group:\")));\n    if (broadcast) {\n      if (!ws.members.has(answerer)) {\n        return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${answerer}`) };\n      }\n    } else if (!prompt.askee.includes(answerer)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Whisper was not addressed to ${answerer}`) };\n    }\n    if (prompt.state === \"answered\") {\n      return { error: rpcError(E.WHISPER_ALREADY_ANSWERED, \"Whisper already answered\") };\n    }\n    if (prompt.state === \"lapsed\") {\n      return { error: rpcError(E.WHISPER_LAPSED, \"Whisper already lapsed\") };\n    }\n\n    // A null option is no option, and an empty answer no answer, as in Python.\n    const answerOption = p.answer_option as string | undefined;\n    const hasOption = answerOption !== undefined && answerOption !== null;\n    const answerText = (present(p.answer) ? p.answer : p.answer_text) as string | undefined;\n    if (prompt.options && prompt.options.length) {\n      if (!hasOption) {\n        return { error: rpcError(E.PARAMS, \"answer_option is required when options are defined\") };\n      }\n      // An option that is not an object offers no id, as in Python.\n      const valid = new Set(prompt.options\n        .filter((o) => o !== null && typeof o === \"object\" && !Array.isArray(o))\n        .map((o) => o.id));\n      if (!valid.has(answerOption)) {\n        return { error: rpcError(E.WHISPER_OPTION_NOT_IN_SET,\n          `Answer option ${canonicalize(answerOption as never).toString(\"utf-8\")} not in option set`) };\n      }\n    } else if (!present(answerText) && !hasOption) {\n      return { error: rpcError(E.PARAMS, \"answer or answer_option required\") };\n    }\n\n    prompt.state = \"answered\";\n    prompt.answered_at = coord.now();\n    prompt.answered_by = p.from as string;\n    prompt.answer_option = answerOption;\n    prompt.answer_text = answerText;\n    prompt.comment = p.comment as string | undefined;\n    return { result: { answered: true, whisper_id: prompt.id, task_id: prompt.task_id } };\n  });\n\n  // Expose the lapse-check function on the coordinator instance. A check runs\n  // outside any call, under the rules a call keeps: it waits for a held\n  // workspace, and a lapse whose write fails is undone and reported to nobody.\n  coord.checkWhisperLapses = (workspaceId: string, now?: string): Envelope[] =>\n    coord.outsideCall(workspaceId, () => lapse(workspaceId, now));\n\n  function lapse(workspaceId: string, now?: string): Envelope[] {\n    const ws = coord.workspaces.get(workspaceId);\n    if (!ws) return [];\n    const cutoff = parseIso(now ?? coord.now());\n    const emitted: Envelope[] = [];\n    for (const prompt of rawValues(ws.whispers)) {\n      if (prompt.state !== \"pending\") continue;\n      const asked = parseIso(prompt.asked_at);\n      const deadline = asked + prompt.deadline_ms;\n      if (cutoff < deadline) continue;\n      prompt.state = \"lapsed\";\n      prompt.default_applied = prompt.default_if_lapsed;\n      // The prompts are read without being recorded, so each that lapses is\n      // set again to be written.\n      ws.whispers.set(prompt.id, prompt);\n      const notify: Envelope = {\n        jsonrpc: \"2.0\",\n        method: \"notify.message\",\n        params: {\n          workspace: ws.id,\n          from: \"service:coordinator\",\n          to: [prompt.asker, ...prompt.askee],\n          ts: coord.now(),\n          kind: \"whisper_lapsed\",\n          whisper_id: prompt.id,\n          // Carry the task so a task-filtered audit.read surfaces the\n          // lapse. A lapsed whisper applies its default with no human\n          // input, so it is the case most in need of being visible on\n          // the task's thread.\n          task_id: prompt.task_id,\n          default_applied: prompt.default_if_lapsed,\n        },\n      };\n      coord.recordAudit(ws, notify);\n      emitted.push(notify);\n    }\n    return emitted;\n  }\n}\n","/**\n * @brightbeamai/chap-coordinator/coordinator\n *\n * The Coordinator class. CHAP protocol logic, packaged as a library\n * rather than a CLI server. Applications instantiate one, call\n * `dispatch(envelope)`, subscribe to audit events, and persist via\n * the provided hooks.\n *\n * Coverage:\n *   - Core (9 methods)\n *   - review/1.0 (6 methods)\n *   - whisper/1.0 (2 methods + lapse handling)\n *   - deliberation/1.0 (4 methods)\n *   - modes/1.0 (mode handling at task.create; trial forces review)\n *   - handoff/1.0 (3 methods with multi-task and group support)\n *   - control/1.0 (7 methods with task/participant/workspace scopes)\n *   - routing/1.0 (3 methods producing route_decision artefacts)\n *   - security-signed/1.0 (top-level `sig` field; key history)\n *   - audit-scitt/1.0 (statement assembly + local chain linkage)\n *   - identity-oidc/1.0 + identity-vc/1.0 (binding hooks at join)\n */\n\nimport { canonicalize, contentHash, sha256Hex, ZERO_HASH } from \"./canonical.js\";\nimport { ALWAYS_AVAILABLE, OWNING_PROFILE, PROFILE_VERSIONS } from \"./catalogue.js\";\nimport {\n  isEd25519Key, isWebAuthnKey, jwkThumbprint, parseWebAuthnAssertion, publicKeyFromJwk, verifyEnvelope,\n  webAuthnFailure,\n} from \"./crypto.js\";\nimport { IdFactory } from \"./ids.js\";\nimport { E, isValidEnvelope, rpcError } from \"./jsonrpc.js\";\nimport { paramsError } from \"./params.js\";\nimport { entryCall, entryRecord, isSigned, linkHash, refusalIsRecorded, signedDigest } from \"./audit.js\";\nimport { applyJsonPatch } from \"./patch.js\";\nimport type { Store, StoreChange, WorkspaceRecord } from \"./storage/store.js\";\nimport { COLLECTIONS, IDEMPOTENCY_KEYS, MemoryStore, StoreConflictError } from \"./storage/store.js\";\nimport { TrackedMap, rawEntries, rawValues, type Tracker } from \"./tracked.js\";\nimport { makeApi, type CoordinatorApi } from \"./api.js\";\nimport type {\n  ArtefactId,\n  AuditEntry,\n  AuditListener,\n  Envelope,\n  KeyRecord,\n  Invitation,\n  JoinPolicy,\n  Jwk,\n  Member,\n  Mode,\n  OverrideArtefact,\n  SignaturePolicy,\n  ParticipantUri,\n  SnapshotArtefact,\n  Task,\n  TaskId,\n  TaskState,\n  Workspace,\n  WorkspaceId,\n} from \"./types.js\";\nimport { modeLE } from \"./types.js\";\nimport { registerAuditScitt } from \"./profiles/audit_scitt.js\";\nimport { registerControl } from \"./profiles/control.js\";\nimport { registerDeliberation } from \"./profiles/deliberation.js\";\nimport { registerHandoff } from \"./profiles/handoff.js\";\nimport { registerRouting } from \"./profiles/routing.js\";\nimport { registerSecuritySigned } from \"./profiles/security_signed.js\";\nimport { registerWhisper } from \"./profiles/whisper.js\";\n\n// ============================================================\n//   Options\n// ============================================================\n\nexport type TokenVerifier = (token: string) => Record<string, unknown> | null;\nexport type CredentialVerifier = (presentation: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittSubmitter = (statement: Record<string, unknown>) => Record<string, unknown> | null;\nexport type ScittReceiptVerifier = (receipt: Record<string, unknown>) => boolean;\nexport type RoutingPolicyFn = (task: Task, candidates: ParticipantUri[]) => {\n  selected: ParticipantUri;\n  rationale: Record<string, unknown>;\n};\nexport type ReviewDepthPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  depth: \"skip\" | \"spot_check\" | \"full\" | \"escalated\";\n  sampling_probability?: number;\n  rationale: Record<string, unknown>;\n};\nexport type EscalationPolicyFn = (task: Task, hints: Record<string, unknown>) => {\n  escalate: boolean;\n  to?: ParticipantUri;\n  triggered_rule?: Record<string, unknown>;\n};\n\n/** Methods classified as privileged for step-up auth. */\nexport const PRIVILEGED_METHODS = new Set<string>([\n  \"control.pause\", \"control.resume\", \"control.cancel\", \"control.supersede\",\n  \"control.snapshot\", \"control.rollback\", \"control.set_mode_ceiling\",\n  \"workspace.set_profiles\", \"workspace.invite\",\n  \"participant.rotate_key\", \"participant.revoke_key\",\n]);\n\n// Methods outside the control, deliberate, handoff and whisper namespaces that\n// dispatch holds to the membership floor before the handler runs.\nconst MEMBER_ONLY_METHODS = new Set<string>([\n  \"task.route\", \"review.depth\", \"escalate.auto\", \"participant.leave\",\n]);\n\n// Read-only methods return workspace state but do not mutate it, so they are not\n// recorded in the audit chain -- recording a read would grow and re-link it.\nconst READ_ONLY_METHODS = new Set<string>([\n  \"workspace.describe\", \"audit.read\", \"audit.verify_chain\", \"audit.verify_receipt\",\n  // Submitting the chain to a transparency service reads it and sends it\n  // onward. Recording the submission would append to the very log being\n  // submitted, so the receipt would attest a chain one entry shorter.\n  \"audit.submit_to_scitt\",\n]);\n\n// Cap on a workspace's task.create idempotency map. Older keys are evicted, so\n// the dedup window is bounded rather than growing unbounded in a long-lived\n// workspace; a redelivery beyond this many intervening creates is not deduped.\nconst MAX_IDEMPOTENCY_KEYS = 10_000;\n\n// Largest envelope accepted, published in the workspace descriptor (SPEC S4.4).\nconst DEFAULT_MAX_ENVELOPE_BYTES = 1_048_576;\n\n// How deeply a request may nest, counting the envelope as level one. The\n// reference HTTP servers refuse deeper bodies before dispatch; the same limit\n// here means an in-process caller cannot send what the canonicaliser, the\n// copy of a recorded call and the two references handle differently.\nconst MAX_NESTING = 64;\n\nfunction withinNesting(value: unknown, limit: number): boolean {\n  const stack: Array<[unknown, number]> = [[value, 1]];\n  while (stack.length) {\n    const [node, depth] = stack.pop()!;\n    if (depth > limit) return false;\n    if (Array.isArray(node)) {\n      for (const v of node) stack.push([v, depth + 1]);\n    } else if (node !== null && typeof node === \"object\") {\n      for (const v of Object.values(node as Record<string, unknown>)) stack.push([v, depth + 1]);\n    }\n  }\n  return true;\n}\n\nexport interface CoordinatorOptions {\n  deterministicIds?: boolean;\n  deterministicClock?: boolean;\n  enableChain?: boolean;\n  /**\n   * Require signatures on every workspace, as advertising\n   * `security-signed/1.0` does on one.\n   */\n  requireSignatures?: boolean;\n  /**\n   * The signature policy of a workspace whose `workspace.create` names none:\n   * \"all\" (the default) verifies every call, and \"humans\" takes an unsigned\n   * call from an agent member.\n   */\n  signaturePolicy?: SignaturePolicy;\n  /**\n   * The join policy of a workspace whose `workspace.create` names none:\n   * \"open\" (the default) admits anyone, and \"invite\" admits only a\n   * participant an admin invited, and the first member.\n   */\n  joinPolicy?: JoinPolicy;\n  enforceStepUp?: boolean;\n  requireReadMembership?: boolean;\n  /** Largest envelope accepted (default 1 MiB), published in the descriptor. */\n  maxEnvelopeBytes?: number;\n  /** Told of each audit entry once the store has taken it. */\n  onAudit?: AuditListener;\n  onAutoEscalate?: (task: Task, to: ParticipantUri) => void;\n  /**\n   * Called when a write to the store fails, with the workspace and the\n   * version the write would have reached. When unset, the failure is written\n   * to stderr. What happens to the call is `storeErrors`'s to say.\n   */\n  onStoreError?: (err: unknown, record: { id: string; version: number }) => void;\n  /**\n   * What a failed synchronous write does to the call that made it. \"raise\"\n   * (the default): the call is answered with -32603 and\n   * `data: { reason: \"store\" }`, and the workspace goes back to what the\n   * store holds. \"log\": the call is answered as it was, and the next write\n   * carries its change again. A write another writer got to first is\n   * answered as \"raise\" says under either, and the call may be sent again.\n   * An asynchronous write's call was answered already, and the next write\n   * to the workspace carries what this one did not.\n   */\n  storeErrors?: \"raise\" | \"log\";\n  /**\n   * Called when a handler throws, with the error and the call's method and\n   * workspace. The caller is answered with -32603 and no detail. When unset,\n   * the error is written to stderr.\n   */\n  onInternalError?: (err: unknown, call: { method: string; workspace?: string }) => void;\n  verifyOidcToken?: TokenVerifier;\n  verifyVc?: CredentialVerifier;\n  scittSubmitter?: ScittSubmitter;\n  verifyScittReceipt?: ScittReceiptVerifier;\n  routingPolicy?: RoutingPolicyFn;\n  reviewDepthPolicy?: ReviewDepthPolicyFn;\n  escalationPolicy?: EscalationPolicyFn;\n  defaultProfiles?: string[];\n  /**\n   * Persistence backend. Defaults to MemoryStore (no persistence).\n   * Pass SqliteStore or any other Store implementation to persist\n   * workspaces between process restarts. The Coordinator calls\n   * `store.load()` once when it starts, and after each call that adds to a\n   * workspace's log it calls `store.apply()` with what changed, or\n   * `store.save()` with the whole workspace when the store has no `apply`.\n   */\n  store?: Store;\n}\n\n// ============================================================\n//   Helpers\n// ============================================================\n\nfunction nowIso(clockMs?: number): string {\n  const d = clockMs === undefined ? new Date() : new Date(clockMs);\n  return d.toISOString().replace(/\\.(\\d{3})Z$/, \".$1Z\");\n}\n\nfunction missing(params: Record<string, unknown>, fields: string[]): string | null {\n  for (const f of fields) if (!(f in params)) return f;\n  return null;\n}\n\nconst MODES = new Set<string>([\"shadow\", \"trial\", \"production\"]);\n\nfunction isObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction reviewRuleSupported(rule: string): boolean {\n  if (rule === \"any_one_approves\" || rule === \"all_approve\") return true;\n  if (rule.startsWith(\"quorum:\")) {\n    const arg = rule.slice(\"quorum:\".length);\n    return /^[0-9]+$/.test(arg) && parseInt(arg, 10) >= 1;\n  }\n  return false;\n}\n\nfunction reviewSatisfied(review: { requested_to: string[]; rule: string; decisions: { kind: string; reviewer: string }[] }): boolean {\n  const approvers = new Set(review.decisions.filter(d => d.kind === \"approve\").map(d => d.reviewer));\n  const rule = review.rule || \"any_one_approves\";\n  if (rule === \"all_approve\") {\n    // A broadcast-only review has no bounded reviewer set to wait on, so it\n    // degrades to first-approve.\n    const named = review.requested_to.filter(r => !(r.startsWith(\"workspace:\") || r.startsWith(\"group:\")));\n    if (named.length === 0) return approvers.size >= 1;\n    return named.every(r => approvers.has(r));\n  }\n  if (rule.startsWith(\"quorum:\")) return approvers.size >= parseInt(rule.slice(\"quorum:\".length), 10);\n  return approvers.size >= 1;  // any_one_approves (and the default)\n}\n\n/** Whether a workspace advertises a profile, matched by name as the gate matches it. */\nfunction advertises(ws: Workspace, name: string): boolean {\n  return ws.profiles.some((p) => p === name || p.startsWith(name + \"/\"));\n}\n\n/**\n * Whether a profile id names a profile the catalogue lists, at its major\n * version: `<name>/<major>.<minor>` in ASCII digits (SPECIFICATION 6.5). A\n * later minor version is the same profile (SPECIFICATION 15.4).\n */\nfunction knownProfile(id: string): boolean {\n  const m = /^([a-z][a-z0-9-]*)\\/(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$/.exec(id);\n  if (!m || !Object.prototype.hasOwnProperty.call(PROFILE_VERSIONS, m[1])) return false;\n  return PROFILE_VERSIONS[m[1]].split(\".\")[0] === m[2];\n}\n\n/** Profiles that cannot be removed once advertised: each states a guarantee about every later call. */\nconst LASTING_PROFILES = [\"security-signed\", \"identity-oidc\", \"identity-vc\"];\n\n/** The refusal of a profile list naming a profile the catalogue does not list, or null. */\nfunction profilesError(profiles: string[]): { error: ReturnType<typeof rpcError> } | null {\n  const unknown = profiles.find((x) => !knownProfile(x));\n  if (unknown === undefined) return null;\n  return { error: rpcError(E.PARAMS,\n    `Unknown profile ${JSON.stringify(unknown)}: a profile id is <name>/<major>.<minor> for a profile the catalogue lists`) };\n}\n\n/** Names a task.create idempotency key cannot take (SPECIFICATION 12.3). */\nconst RESERVED_KEYS = [\"__proto__\", \"constructor\", \"prototype\"];\n\n/** The participant types SPECIFICATION 5.1 names, each the scheme of its URIs. */\nconst PARTICIPANT_TYPES = [\"human\", \"agent\", \"service\", \"group\", \"workspace\"];\n\n/** The types that may hold the admin role (SPECIFICATION 6.3). */\nconst ADMIN_TYPES = [\"human\", \"service\"];\n\n/**\n * Why `uri` cannot name a participant of this type, or null: the type is one\n * of the five, and the URI's scheme names it (SPECIFICATION 5.1). `field` is\n * the param that holds the URI.\n */\nfunction participantError(type: string, uri: string, field: string): { error: ReturnType<typeof rpcError> } | null {\n  if (!PARTICIPANT_TYPES.includes(type)) {\n    return { error: rpcError(E.PARAMS, \"type must be human, agent, service, group or workspace\") };\n  }\n  if (!uri.startsWith(`${type}:`)) {\n    return { error: rpcError(E.PARAMS, `${field} must start with \"${type}:\" for type ${type}`) };\n  }\n  // A group: or workspace: URI addresses everyone it covers, as a review's\n  // `to` does, so it names no one who could join and act.\n  if (type === \"group\" || type === \"workspace\") {\n    return { error: rpcError(E.PARAMS, \"group: and workspace: URIs name address scopes, which cannot join\") };\n  }\n  return null;\n}\n\n/** Whether a key may sign now: neither revoked nor past its validity. */\nfunction inForce(key: KeyRecord, now: string): boolean {\n  return !(key.revoked_at !== undefined && now >= key.revoked_at)\n    && !(key.valid_until !== undefined && now >= key.valid_until);\n}\n\n/**\n * Whether two JWKs are the same key: the same kid and the same RFC 7638\n * thumbprint, or, for a key with no thumbprint, the same JSON throughout.\n */\nfunction sameKey(a: Record<string, unknown>, b: Record<string, unknown>): boolean {\n  const material = (k: Record<string, unknown>) => jwkThumbprint(k) ?? canonicalize(k).toString(\"utf-8\");\n  return a.kid === b.kid && material(a) === material(b);\n}\n\n/**\n * The keys a credential binds for a join: its confirmation key, named by its\n * kid or else by its RFC 7638 thumbprint, or, where it carries none, the\n * join's keys whose thumbprint its nonce is (SPECIFICATION 5.4). Every key\n * the join carries must be a bound one: null where one is not. Undefined\n * where the credential binds no key.\n */\nfunction credentialKeys(cnf: unknown, nonce: unknown, joinKeys: Array<Record<string, unknown> & { kid: string }>):\n    Array<Record<string, unknown> & { kid: string }> | null | undefined {\n  if (isObject(cnf)) {\n    const kid = typeof cnf.kid === \"string\" && cnf.kid !== \"\" ? cnf.kid : jwkThumbprint(cnf);\n    if (kid === undefined) return null;\n    const key = { ...cnf, kid };\n    return joinKeys.every((j) => sameKey(key, j)) ? [key] : null;\n  }\n  if (typeof nonce === \"string\") return joinKeys.every((j) => jwkThumbprint(j) === nonce) ? joinKeys : null;\n  return undefined;\n}\n\n/** An invitation, read without recording it as changed. */\nfunction rawInvitation(ws: Workspace, uri: string): Invitation | undefined {\n  return Map.prototype.get.call(ws.invitations, uri) as Invitation | undefined;\n}\n\n/**\n * Whether nobody has joined the workspace yet: it holds no member and its log\n * holds no accepted participant.join. A workspace whose members have all left\n * has had its first member.\n */\nfunction awaitsFirstMember(ws: Workspace): boolean {\n  if (ws.members.size > 0) return false;\n  return !ws.audit.some((e) => e.outcome == null && entryCall(e)?.method === \"participant.join\");\n}\n\n/** The keys of a join's `jwks` a signature can name: objects with a non-empty string kid. */\nfunction signingKeys(jwks: unknown): Array<Record<string, unknown> & { kid: string }> {\n  const keys = isObject(jwks) && Array.isArray(jwks.keys) ? jwks.keys : [];\n  return keys.filter((j): j is Record<string, unknown> & { kid: string } =>\n    isObject(j) && typeof j.kid === \"string\" && j.kid !== \"\");\n}\n\n/**\n * A call as the log holds it. A participant.join keeps its credentials off\n * the chain: an `oidc_token` is recorded as the SHA-256 of its UTF-8 bytes\n * and a `vc_presentation` as the SHA-256 of its JCS form, so the log shows\n * which credential a member joined with and never holds one a reader could\n * present again.\n */\nfunction recordedForm(envelope: Envelope): Envelope {\n  if (envelope.method !== \"participant.join\" || !isObject(envelope.params)) return envelope;\n  const params = { ...envelope.params };\n  if (typeof params.oidc_token === \"string\") params.oidc_token = sha256Hex(params.oidc_token);\n  if (isObject(params.vc_presentation)) params.vc_presentation = contentHash(params.vc_presentation);\n  return { ...envelope, params };\n}\n\n/** The answer to a call whose workspace the store could not be brought in line with. */\nfunction storeFailed() {\n  return rpcError(E.INTERNAL, \"Internal error\", { reason: \"store\" });\n}\n\n/** The workspace a call names, where it names one. */\nfunction targetOf(envelope: unknown): WorkspaceId | undefined {\n  const params = isObject(envelope) ? envelope.params : undefined;\n  const id = isObject(params) ? params.workspace : undefined;\n  return typeof id === \"string\" && id !== \"\" ? id : undefined;\n}\n\n/**\n * The fields that keep a null. A whisper's default_if_lapsed is required, and\n * null is the default a lapse applies and records.\n */\nconst KEPT_NULLS: Readonly<Record<string, readonly string[]>> = { whispers: [\"default_if_lapsed\"] };\n\n/** Deletes the fields of `o` that hold null, but those named in `keep`. */\nfunction dropNulls(o: Record<string, unknown>, keep: readonly string[] = []): void {\n  for (const key of Object.keys(o)) if (o[key] === null && !keep.includes(key)) delete o[key];\n}\n\n/**\n * Puts one object of a workspace's collection in the shape this coordinator\n * stores and restores, in place, whichever coordinator made it. Called on\n * copies only: the objects a workspace holds keep what its handlers put in\n * them, and every read treats a field holding null as one left out. A field\n * with no value is left out: the Python coordinator writes it as null, and a\n * call that gives a param as null gives it no value, as both coordinators\n * read params. The Python coordinator also names a history entry's sender\n * `from_` and keeps a route decision's fields of its kind in `extra`; this\n * one names the sender `from` and keeps those fields beside `kind`. What an\n * input, an output or an artefact holds is kept as it is.\n */\nfunction shapeObject(name: string, item: Record<string, unknown>): Record<string, unknown> {\n  if (name === \"route_decisions\") {\n    const extra = item.extra;\n    delete item.extra;\n    if (isObject(extra)) Object.assign(item, extra);\n    item.kind = \"route_decision\";\n  }\n  dropNulls(item, KEPT_NULLS[name]);\n  const each = (o: Record<string, unknown>, field: string, f?: (x: Record<string, unknown>) => void) => {\n    if (!Array.isArray(o[field])) return;\n    for (const x of o[field] as unknown[]) {\n      if (isObject(x)) {\n        dropNulls(x);\n        f?.(x);\n      }\n    }\n  };\n  if (name === \"members\") each(item, \"keys\");\n  if (name === \"tasks\") {\n    each(item, \"history\", (h) => {\n      if (h.from === undefined && typeof h.from_ === \"string\") h.from = h.from_;\n      delete h.from_;\n    });\n    if (isObject(item.review)) {\n      dropNulls(item.review);\n      each(item.review, \"decisions\");\n    }\n  }\n  if (name === \"deliberations\") each(item, \"votes\");\n  if (name === \"handoffs\") {\n    each(item, \"tasks\");\n    if (Array.isArray(item.accepted_task_ids) && item.accepted_task_ids.length === 0) delete item.accepted_task_ids;\n  }\n  return item;\n}\n\n/** A copy of one object of a collection, in the shape this coordinator stores. */\nfunction storedCopy(name: string, item: Record<string, unknown>): Record<string, unknown> {\n  return shapeObject(name, structuredClone(item));\n}\n\n/**\n * A workspace snapshot in this coordinator's shape, whichever coordinator\n * wrote it: its own fields with no value left out, and a copy of each object\n * of its collections put in shape. The snapshot itself is not changed.\n */\nfunction shapeSnapshot(w: Record<string, unknown>): Record<string, unknown> {\n  const out = { ...w };\n  dropNulls(out);\n  for (const name of COLLECTIONS) {\n    if (Array.isArray(out[name])) {\n      out[name] = (out[name] as unknown[]).map((x) => (isObject(x) ? storedCopy(name, x) : x));\n    }\n  }\n  return out;\n}\n\n/**\n * Whether a task's work must be decided by a person: it carries\n * review_required, or it runs in trial on a workspace advertising modes/1.0.\n */\nexport function reviewRequired(ws: Workspace, task: Task): boolean {\n  return task.review_required === true || (task.mode === \"trial\" && advertises(ws, \"modes\"));\n}\n\n/** A member, read without recording it as changed. */\nfunction rawMember(ws: Workspace, uri: unknown): Member | undefined {\n  return typeof uri === \"string\" ? Map.prototype.get.call(ws.members, uri) as Member | undefined : undefined;\n}\n\n/** The members of the lists in order, each once. */\nexport function unionOf(...lists: ReadonlyArray<ParticipantUri>[]): ParticipantUri[] {\n  const out: ParticipantUri[] = [];\n  for (const list of lists) for (const uri of list) if (!out.includes(uri)) out.push(uri);\n  return out;\n}\n\n/**\n * Who made the work: the task's assignee, then whoever completed it, then\n * the authors it carries from a task it replaces, once each.\n */\nexport function authorsOf(task: Task, completer: unknown): ParticipantUri[] {\n  const authors: ParticipantUri[] = [task.assignee];\n  if (typeof completer === \"string\" && completer !== task.assignee) authors.push(completer);\n  return unionOf(authors, Array.isArray(task.prior_authors) ? task.prior_authors : []);\n}\n\n/**\n * The state a task was in before the history entry at `i`, passing over\n * pauses, which leave the work where it was.\n */\nfunction stateBefore(history: Task[\"history\"], i: number): TaskState | undefined {\n  for (let j = i - 1; j >= 0; j--) {\n    if (history[j].state !== \"paused\") return history[j].state;\n  }\n  return undefined;\n}\n\n/**\n * Whether the history entry at `i` records the work completed: the task\n * entering `completed` from any state but review. A reviewer's decision\n * completes a task out of review, and an entry a task already completed\n * takes, such as a route or a handoff of it, completes nothing.\n */\nfunction workCompletion(history: Task[\"history\"], i: number): boolean {\n  if (history[i].state !== \"completed\") return false;\n  const before = stateBefore(history, i);\n  return before !== \"review_requested\" && before !== \"completed\";\n}\n\n/** The sender of the task's latest completion of the work, if it has one. */\nfunction lastCompleter(task: Task): ParticipantUri | undefined {\n  for (let i = task.history.length - 1; i >= 0; i--) {\n    if (workCompletion(task.history, i)) return task.history[i].from;\n  }\n  return undefined;\n}\n\n/** The notes on the history entries of the reviews task.complete opened. */\nconst OPENED_ON_COMPLETE = \"review required; opened on task.complete\";\nconst NEW_ROUND_ON_COMPLETE = \"a new round of the review; opened on task.complete\";\n\n/**\n * The authors of a review recorded before authors were kept, read from the\n * task's history: the assignee, whoever completed the work, whether the\n * completion opened the review or came before a review.request, and the\n * member whose review.request opened the review, which supplied the\n * artefact under review. A reviewer's decision that completed the task is\n * not a completion of the work.\n */\nfunction storedAuthors(task: Task): ParticipantUri[] {\n  let requester: ParticipantUri | undefined;\n  const withRequester = (authors: ParticipantUri[]) => unionOf(authors, requester !== undefined ? [requester] : []);\n  for (let i = task.history.length - 1; i >= 0; i--) {\n    const h = task.history[i];\n    const opens = h.state === \"review_requested\" && stateBefore(task.history, i) !== \"review_requested\";\n    if (opens && (h.note === OPENED_ON_COMPLETE || h.note === NEW_ROUND_ON_COMPLETE)) return withRequester(authorsOf(task, h.from));\n    if (opens && requester === undefined) requester = h.from;\n    if (workCompletion(task.history, i)) return withRequester(authorsOf(task, h.from));\n  }\n  return withRequester(authorsOf(task, undefined));\n}\n\n/** The states in which a task is over. */\nconst ENDED: ReadonlyArray<TaskState> = [\"completed\", \"declined\", \"cancelled\", \"superseded\", \"escalated\"];\n\n/**\n * The authors a review the task requires holds, whatever state the task is\n * in: those of its own review, until a reviewer rejects or overrides the\n * round under review, or approves it as its rule asks; or, for a task with\n * no review yet, those of the task it replaces, since an escalation or a\n * supersede carries that review on, however long the chain.\n */\nfunction reviewHolds(ws: Workspace, task: Task): ParticipantUri[] {\n  const seen = new Set<string>();\n  for (let t: Task | undefined = task; t && !seen.has(t.id); t = typeof t.supersedes === \"string\" ? ws.tasks.get(t.supersedes) : undefined) {\n    seen.add(t.id);\n    if (!reviewRequired(ws, t)) return [];\n    if (t.review) {\n      const decided = t.review.decisions.some((d) => d.kind === \"reject\" || d.kind === \"override\") || reviewSatisfied(t.review);\n      return decided ? [] : t.review.authors;\n    }\n  }\n  return [];\n}\n\n/**\n * The authors a review the task requires holds to it: from the moment the\n * review opens until the task is over, unless a reviewer has rejected the\n * round under review, and through a successor an escalation or a supersede\n * makes. They may take the work back to revise it, and hand it on with\n * escalate.raise; they do not end the task, or its successor, around a\n * decision. Once a reviewer rejects the work, its authors may give the task\n * up. Empty where the task holds no such review.\n */\nexport function openRequiredReviewAuthors(ws: Workspace, task: Task): ParticipantUri[] {\n  return ENDED.includes(task.state) ? [] : reviewHolds(ws, task);\n}\n\n/**\n * The task's assignee, as an author of its work, where it moves the task on\n * itself; otherwise nobody. Whoever completed the work is an author by its\n * completion. A member another member routed or escalated the task to made\n * none of the work it was handed, so nobody can leave a person out of a\n * review's reviewers by passing the task through them.\n */\nexport function heldBy(task: Task, mover: unknown): ParticipantUri[] {\n  return mover === task.assignee ? [task.assignee] : [];\n}\n\n/**\n * The authors a successor carries from the task it replaces: that task's\n * review authors where it held a review, its assignee where heldBy counts\n * it, whoever completed the work, and the authors it carried itself.\n */\nexport function successorAuthors(old: Task, mover: unknown): ParticipantUri[] {\n  const completer = lastCompleter(old);\n  return unionOf(old.review ? old.review.authors : [], heldBy(old, mover),\n                 completer !== undefined ? [completer] : [],\n                 Array.isArray(old.prior_authors) ? old.prior_authors : []);\n}\n\n/** Whether a URI is an address scope, which every member it covers answers to. */\nfunction isScope(uri: unknown): boolean {\n  return typeof uri === \"string\" && (uri.startsWith(\"workspace:\") || uri.startsWith(\"group:\"));\n}\n\nfunction reply(env: Envelope, body: { result?: unknown; error?: { code: number; message: string; data?: unknown } }): Envelope {\n  // JSON-RPC answers with a null id where the request carries none, or is\n  // not an object at all, as the Python reference does, so dispatch(null)\n  // is answered too.\n  const sent = env !== null && typeof env === \"object\" && !Array.isArray(env) ? env.id : undefined;\n  const out = { jsonrpc: \"2.0\", id: sent ?? null } as Envelope;\n  if (body.error !== undefined) out.error = body.error;\n  else out.result = body.result;\n  return out;\n}\n\n/** The signed calls on a log, keyed by `signedDigest`: refusals, and the seq each accepted call took. */\ninterface SignedIndex {\n  refused: Map<string, { seq: number; code: number }>;\n  accepted: Map<string, number>;\n}\n\nfunction indexSigned(index: SignedIndex, entry: AuditEntry): void {\n  const call = entryCall(entry);\n  if (!isSigned(call)) return;\n  let digest: string;\n  try { digest = signedDigest(call as Envelope); }\n  catch { return; /* an entry that cannot be canonicalised was altered; verify_chain reports it */ }\n  if (entry.outcome != null) index.refused.set(digest, { seq: entry.seq, code: entry.outcome.code });\n  // A log written before signed copies were refused can hold one call twice;\n  // the first is where it took effect.\n  else if (!index.accepted.has(digest)) index.accepted.set(digest, entry.seq);\n}\n\n// ============================================================\n//   Handler type for profile modules\n// ============================================================\n\nexport type Handler = (params: Record<string, unknown>) => { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n\n// ============================================================\n//   Coordinator\n// ============================================================\n\nfunction isThenable(value: unknown): value is PromiseLike<void> {\n  return typeof (value as PromiseLike<void> | undefined)?.then === \"function\";\n}\n\n/** A deep copy where the value can be cloned, else the value itself. */\nfunction ownCopy<T>(value: T): T {\n  try {\n    return structuredClone(value);\n  } catch {\n    return value;\n  }\n}\n\n// States in which a task has been deliberately stopped. review.request and\n// task.complete both refuse these, so neither can revive a terminated task nor\n// bypass a pause.\nconst REVIEW_REQUEST_STOPPED: string[] = [\"cancelled\", \"superseded\", \"paused\"];\n\n/** What the store holds of one workspace, as far as a Coordinator knows. */\ninterface Persisted {\n  /** Audit entries the store holds. */\n  seq: number;\n  /** Write the whole workspace next: the store's copy is unknown. */\n  replace: boolean;\n  /** Idempotency keys written or removed since the last write. */\n  keys: Set<string>;\n  /** The time to stamp on the next write. */\n  updatedAt?: string;\n}\n\nexport class Coordinator {\n  readonly workspaces = new Map<WorkspaceId, Workspace>();\n  readonly options: CoordinatorOptions;\n  readonly ids: IdFactory;\n  readonly store: Store;\n  private wsVersions = new Map<WorkspaceId, number>();\n  private saveChains = new Map<WorkspaceId, Promise<void>>();\n  /** Records which objects change, for stores that implement `apply`. */\n  private readonly tracker: Tracker;\n  /** What the store holds of each workspace, as far as this instance knows. */\n  private persisted = new WeakMap<Workspace, Persisted>();\n  /** Workspaces with entries not yet written in the call being handled. */\n  private unflushed = new Set<Workspace>();\n  /** Workspaces with a write queued behind an async write in flight. */\n  private flushQueued = new Set<Workspace>();\n  /**\n   * Workspaces whose store copy may differ from memory after a synchronous\n   * write failed or conflicted. Each is reloaded from the store before the\n   * next call on it, which is refused while the reload fails.\n   */\n  private held = new Set<WorkspaceId>();\n  /** Entries appended and not yet written, which the audit listeners hear of once they are. */\n  private unannounced = new WeakMap<Workspace, AuditEntry[]>();\n  private clockMs?: number;\n  private frozenNow?: string;\n  private auditListeners: AuditListener[] = [];\n  /**\n   * The signed calls on each workspace's log, by what their senders signed:\n   * recorded refusals with their seq and code, and accepted calls with their\n   * seq. Rebuilt from the log when missing, so a snapshot never carries it.\n   */\n  private signedIndexes = new WeakMap<Workspace, SignedIndex>();\n  /** Method handler registry; profiles plug into this. */\n  readonly handlers = new Map<string, Handler>();\n  /** Custom lapse-check function (whisper/1.0). Set by the whisper profile. */\n  checkWhisperLapses?: (workspaceId: string, now?: string) => Envelope[];\n  /** Typed method facade. Defined via getter in the constructor. */\n  readonly api!: CoordinatorApi;\n  /** @internal cached facade instance */\n  private _api?: CoordinatorApi;\n\n  constructor(options: CoordinatorOptions = {}) {\n    this.options = options;\n    this.store = options.store ?? new MemoryStore();\n    this.tracker = { enabled: typeof this.store.apply === \"function\", depth: 0 };\n    this.ids = new IdFactory(!!options.deterministicIds, 0n, 1_700_000_000_000);\n    if (options.deterministicClock) this.clockMs = 1_700_000_000_000;\n    if (options.onAudit) this.auditListeners.push(options.onAudit);\n\n    this.registerCoreHandlers();\n    this.registerProfileHandlers();\n\n    // Lazily-initialised typed facade. Constructed on first access so\n    // tests that don't use it pay nothing.\n    Object.defineProperty(this, \"api\", {\n      get: () => {\n        if (!this._api) this._api = makeApi(this);\n        return this._api;\n      },\n      enumerable: false,\n      configurable: true,\n    });\n\n    // Rehydrate any persisted state synchronously. Async stores can\n    // call `start()` instead; this fallback covers the common\n    // synchronous Memory/Sqlite path with no async setup needed.\n    try {\n      const loaded = this.store.load();\n      if (!isThenable(loaded)) {\n        this.applyRecords(loaded as WorkspaceRecord[]);\n      }\n    } catch {\n      /* fall through; caller must invoke start() */\n    }\n  }\n\n  /**\n   * Asynchronously hydrate workspaces from the store. Required only for\n   * stores whose `load()` returns a Promise. Idempotent.\n   */\n  async start(): Promise<void> {\n    const records = await this.store.load();\n    this.applyRecords(records);\n  }\n\n  private applyRecords(records: WorkspaceRecord[]): void {\n    // One restore for every record: restore replaces the workspaces it\n    // holds, so restoring record by record kept only the last.\n    this.wsVersions.clear();\n    this.restore(records.map(r => r.data));\n    for (const r of records) this.wsVersions.set(r.id, r.version);\n    // What was just loaded is what the store holds.\n    for (const ws of this.workspaces.values()) this.markWritten(ws);\n  }\n\n  /** A map for a workspace collection, tracked for stores that implement `apply`. */\n  private newMap<K, V>(): Map<K, V> {\n    return new TrackedMap<K, V>(this.tracker);\n  }\n\n  /** Record that the store holds this workspace exactly as it is in memory. */\n  private markWritten(ws: Workspace): void {\n    for (const name of COLLECTIONS) {\n      const map = ws[name];\n      if (map instanceof TrackedMap) map.dirty.clear();\n    }\n    this.persisted.set(ws, { seq: ws.audit.length, replace: false, keys: new Set() });\n  }\n\n  /**\n   * What the store holds of a workspace. A workspace this instance did not\n   * create or load, such as one an application put in `workspaces` itself,\n   * or one whose maps an application replaced, is tracked from here on and\n   * written whole once.\n   */\n  private persistedOf(ws: Workspace): Persisted {\n    let p = this.persisted.get(ws);\n    let untracked = false;\n    for (const name of COLLECTIONS) {\n      const map = ws[name] as Map<string, unknown>;\n      if (map instanceof TrackedMap && map.tracker === this.tracker) continue;\n      untracked = true;\n      const tracked = new TrackedMap<string, unknown>(this.tracker);\n      for (const [key, value] of Map.prototype.entries.call(map) as IterableIterator<[string, unknown]>) {\n        tracked.set(key, value);\n      }\n      (ws as unknown as Record<string, unknown>)[name] = tracked;\n    }\n    if (!p || untracked) {\n      p = { seq: p?.seq ?? 0, replace: true, keys: new Set(), updatedAt: p?.updatedAt };\n      this.persisted.set(ws, p);\n    }\n    return p;\n  }\n\n  /** Record that a task.create idempotency key was written or removed. */\n  private markKey(ws: Workspace, key: string): void {\n    if (this.tracker.enabled) this.persistedOf(ws).keys.add(key);\n  }\n\n  /** After an entry is appended: write now, or when the call being handled ends. */\n  private persist(ws: Workspace): void {\n    if (!this.tracker.enabled) {\n      this.persistSnapshot(ws);\n      return;\n    }\n    // One clock reading per entry, where earlier releases read it to stamp\n    // the snapshot, so a deterministic clock gives the same times as before.\n    this.persistedOf(ws).updatedAt = this.now();\n    if (this.tracker.depth > 0) this.unflushed.add(ws);\n    else this.flush(ws);\n  }\n\n  private flushUnflushed(): void {\n    if (!this.unflushed.size) return;\n    const list = [...this.unflushed];\n    this.unflushed.clear();\n    for (const ws of list) this.flush(ws);\n  }\n\n  /** Write what changed in one workspace since its last write. */\n  private flush(ws: Workspace): void {\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      // An async write is in flight. One more write follows it, built when it\n      // runs, so it carries everything that changed until then.\n      if (this.flushQueued.has(ws)) return;\n      this.flushQueued.add(ws);\n      this.chainWrite(ws.id, pending.then(() => {\n        this.flushQueued.delete(ws);\n        return this.writeChange(ws);\n      }));\n      return;\n    }\n    const result = this.writeChange(ws);\n    if (result) this.chainWrite(ws.id, result);\n  }\n\n  private chainWrite(id: WorkspaceId, work: Promise<void>): void {\n    // writeChange reports its own failures; this only keeps the chain alive.\n    const guarded = work.catch(() => undefined);\n    this.saveChains.set(id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(id) === guarded) this.saveChains.delete(id);\n    });\n  }\n\n  private writeChange(ws: Workspace): Promise<void> | void {\n    const p = this.persistedOf(ws);\n    let change: StoreChange | undefined;\n    try {\n      change = this.takeChange(ws, p);\n    } catch (err) {\n      // What was taken is unknown, so the next write carries the whole workspace.\n      p.replace = true;\n      if (this.options.storeErrors !== \"log\") this.held.add(ws.id);\n      this.reportStoreError(err, { id: ws.id, version: ws.audit.length });\n      return;\n    }\n    if (!change) return;\n    const taken = change;\n    const done = () => {\n      p.seq = taken.version;\n      if (taken.replace) p.replace = false;\n      this.announce(ws, taken.version);\n    };\n    const failed = (err: unknown) => {\n      this.giveBack(ws, p, taken);\n      this.reportStoreError(err, { id: taken.id, version: taken.version });\n    };\n    let result: PromiseLike<void> | void;\n    try {\n      result = this.store.apply!(taken);\n    } catch (err) {\n      // The call that made this change is answered as failed, and the\n      // workspace is reloaded from the store before it is used again; under\n      // \"log\" the call stands, and the next write carries the change. A\n      // write another writer got to first fails its call under either.\n      if (err instanceof StoreConflictError || this.options.storeErrors !== \"log\") this.held.add(ws.id);\n      failed(err);\n      return;\n    }\n    if (isThenable(result)) return Promise.resolve(result).then(done, failed);\n    done();\n  }\n\n  /** Tell the audit listeners of the entries now written, up to `upTo`. */\n  private announce(ws: Workspace, upTo: number): void {\n    const queued = this.unannounced.get(ws);\n    if (!queued?.length) return;\n    const now = queued.filter((e) => e.seq < upTo);\n    this.unannounced.set(ws, queued.filter((e) => e.seq >= upTo));\n    for (const entry of now) {\n      for (const l of this.auditListeners) {\n        try { l(ws, entry); } catch { /* listeners never break dispatch */ }\n      }\n    }\n  }\n\n  /**\n   * The change since the last write, taking the recorded keys with it. Each\n   * object is written as a copy in the shape a restore gives back, so a\n   * coordinator restarted on the store holds what this one holds, and the\n   * workspace's own objects are left as they are.\n   */\n  private takeChange(ws: Workspace, p: Persisted): StoreChange | undefined {\n    const replace = p.replace;\n    const objects: Record<string, Record<string, unknown>> = {};\n    for (const name of COLLECTIONS) {\n      const map = ws[name] as unknown as TrackedMap<string, Record<string, unknown>>;\n      if (replace) {\n        const all: Record<string, unknown> = {};\n        for (const [key, value] of Map.prototype.entries.call(map) as IterableIterator<[string, Record<string, unknown>]>) {\n          all[key] = storedCopy(name, value);\n        }\n        objects[name] = all;\n      } else if (map.dirty.size) {\n        const changed: Record<string, unknown> = {};\n        for (const key of map.dirty) {\n          const value = map.peek(key);\n          changed[key] = value === undefined ? null : storedCopy(name, value);\n        }\n        objects[name] = changed;\n      }\n      map.dirty.clear();\n    }\n    if (replace) {\n      objects[IDEMPOTENCY_KEYS] = { ...ws.idempotency_keys };\n    } else if (p.keys.size) {\n      const changed: Record<string, unknown> = {};\n      for (const key of p.keys) changed[key] = ws.idempotency_keys[key] ?? null;\n      objects[IDEMPOTENCY_KEYS] = changed;\n    }\n    p.keys.clear();\n    const entries = ws.audit.slice(replace ? 0 : p.seq);\n    if (!replace && !entries.length && !Object.keys(objects).length) return undefined;\n    return {\n      id: ws.id,\n      base: replace ? 0 : p.seq,\n      version: ws.audit.length,\n      updated_at: p.updatedAt ?? ws.audit[ws.audit.length - 1]?.arrived ?? ws.created,\n      meta: this.metaOf(ws),\n      entries,\n      objects,\n      ...(replace ? { replace: true } : {}),\n    };\n  }\n\n  /** A failed write's keys go back, so the next write carries them again. */\n  private giveBack(ws: Workspace, p: Persisted, change: StoreChange): void {\n    if (change.replace) {\n      p.replace = true;\n      return;\n    }\n    for (const [name, items] of Object.entries(change.objects)) {\n      if (name === IDEMPOTENCY_KEYS) {\n        for (const key of Object.keys(items)) p.keys.add(key);\n        continue;\n      }\n      const map = (ws as unknown as Record<string, unknown>)[name];\n      if (map instanceof TrackedMap) for (const key of Object.keys(items)) map.dirty.add(key);\n    }\n  }\n\n  /** Persist the whole workspace, for a store that implements only `save`. */\n  private persistSnapshot(ws: Workspace): void {\n    const next = (this.wsVersions.get(ws.id) ?? 0) + 1;\n    this.wsVersions.set(ws.id, next);\n    let record: WorkspaceRecord;\n    try {\n      record = { id: ws.id, data: this.snapshotOf(ws), version: next, updated_at: this.now() };\n    } catch (err) {\n      // Nothing was written. The next save builds the whole workspace again.\n      this.reportStoreError(err, { id: ws.id, version: next });\n      return;\n    }\n\n    const upTo = ws.audit.length;\n    const pending = this.saveChains.get(ws.id);\n    if (pending) {\n      this.trackSave(pending.then(() => this.store.save(record)), record, () => this.announce(ws, upTo));\n      return;\n    }\n    let result: PromiseLike<void> | void;\n    try {\n      result = this.store.save(record);\n    } catch (err) {\n      if (this.options.storeErrors !== \"log\") this.held.add(ws.id);\n      this.reportStoreError(err, record);\n      return;\n    }\n    if (isThenable(result)) {\n      this.trackSave(Promise.resolve(result), record, () => this.announce(ws, upTo));\n      return;\n    }\n    this.announce(ws, upTo);\n  }\n\n  private trackSave(save: Promise<void>, record: WorkspaceRecord, saved: () => void): void {\n    const guarded = save.then(saved, err => this.reportStoreError(err, record));\n    this.saveChains.set(record.id, guarded);\n    void guarded.then(() => {\n      if (this.saveChains.get(record.id) === guarded) {\n        this.saveChains.delete(record.id);\n      }\n    });\n  }\n\n  private reportInternalError(err: unknown, method: string, workspace: string | undefined): void {\n    const call = { method, ...(workspace !== undefined ? { workspace } : {}) };\n    if (this.options.onInternalError) {\n      try {\n        this.options.onInternalError(err, call);\n      } catch {\n        void 0;\n      }\n      return;\n    }\n    console.error(`chap coordinator: ${method} failed with an internal error:`, err);\n  }\n\n  private reportStoreError(err: unknown, record: { id: string; version: number }): void {\n    if (this.options.onStoreError) {\n      try {\n        this.options.onStoreError(err, { id: record.id, version: record.version });\n      } catch {\n        void 0;\n      }\n      return;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    const line = `chap coordinator: writing workspace ${record.id} to the store failed: ${message}`;\n    // Another writer having written first is handled: the workspace is\n    // reloaded, and the call may be sent again.\n    if (err instanceof StoreConflictError) console.warn(line);\n    else console.error(line);\n  }\n\n  async drainSaves(): Promise<void> {\n    while (this.saveChains.size) {\n      await Promise.allSettled([...this.saveChains.values()]);\n    }\n  }\n\n  // -- lifecycle -----------------------------------------------------\n\n  private advanceClock(): string {\n    if (this.clockMs !== undefined) {\n      this.clockMs += 1000;\n      return nowIso(this.clockMs);\n    }\n    return nowIso();\n  }\n\n  now(): string {\n    return this.frozenNow ?? this.advanceClock();\n  }\n\n  onAudit(listener: AuditListener): () => void {\n    this.auditListeners.push(listener);\n    return () => {\n      const i = this.auditListeners.indexOf(listener);\n      if (i >= 0) this.auditListeners.splice(i, 1);\n    };\n  }\n\n  /** Convenience: get a workspace by id, or undefined. */\n  getWorkspace(id: WorkspaceId): Workspace | undefined {\n    return this.workspaces.get(id);\n  }\n\n  // ----- authorisation preconditions -----\n\n  /**\n   * Assert that `sender` is a joined member of `ws`. Returns an error\n   * fragment if not, else null. Every actor-action method runs this on\n   * its `from` so a decision, completion, or review request can never\n   * be attributed to a participant who never joined. See\n   * SPECIFICATION.md S6.3 and the `unknown_participant` condition in\n   * S13.3. (The published spec assigns -32403; the reference\n   * implementations use NOT_AUTHORISED -32011 because -32403 already\n   * denotes OIDC_TOKEN_INVALID in their private range. The spec/impl\n   * error-table divergence is tracked separately.)\n   */\n  private requireMember(ws: Workspace, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    // A `from` that is not a string names nobody. It is answered in fixed\n    // words, so both references refuse it alike whatever was sent.\n    if (typeof sender !== \"string\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"Not a workspace member: from is not a participant URI\") };\n    }\n    if (!ws.members.has(sender)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not a workspace member: ${sender}`) };\n    }\n    return null;\n  }\n\n  /**\n   * Assert that `sender` may decide the task's open review. Applied to\n   * review-decision methods (decide.* and abstain.declare) and to\n   * review.acknowledge: to act on a review you must not be an author of the\n   * work under review, must be a human member where the task requires\n   * review, and must be one of the reviewers it was addressed to (the `to`\n   * set on review.request).\n   * Membership is the floor; this is the eligibility ceiling for decisions.\n   * Returns an error fragment if not eligible, else null.\n   */\n  private requireReviewer(ws: Workspace, task: Task, sender: unknown): { error: ReturnType<typeof rpcError> } | null {\n    const review = task.review;\n    if (!review) return null;\n    // A decision by whoever made the work is not a review of it, whatever\n    // the reviewer set says, broadcast scopes included.\n    if (typeof sender === \"string\" && review.authors.includes(sender)) {\n      return { error: rpcError(E.NOT_AUTHORISED, \"The author of the work under review cannot decide it\") };\n    }\n    if (reviewRequired(ws, task) && rawMember(ws, sender)?.type !== \"human\") {\n      return { error: rpcError(E.NOT_AUTHORISED, `This task requires a person's review: ${String(sender)} is not a human member`) };\n    }\n    if (!review.requested_to || review.requested_to.length === 0) {\n      // No recorded reviewer set: fall back to the membership floor,\n      // which the caller has already enforced.\n      return null;\n    }\n    // A broadcast-scoped reviewer (workspace:/group: URI) is satisfied by\n    // any workspace member; the membership floor already passed. Note the\n    // coordinator does not model group membership: a group: target means\n    // \"any member\", not \"any member of that group\" (deployments needing\n    // true group restriction enforce it externally). Keeps the documented\n    // `to: workspace:<id>` broadcast pattern working.\n    if (review.requested_to.some((r) => typeof r === \"string\" && (r.startsWith(\"workspace:\") || r.startsWith(\"group:\")))) {\n      return null;\n    }\n    if (typeof sender !== \"string\" || !review.requested_to.includes(sender as ParticipantUri)) {\n      return { error: rpcError(E.NOT_AUTHORISED, `Not an addressed reviewer for this task: ${String(sender)}`) };\n    }\n    return null;\n  }\n\n  /** Serialise all workspaces to a JSON-safe structure for persistence. */\n  snapshot(): unknown {\n    const out: Array<Record<string, unknown>> = [];\n    for (const ws of this.workspaces.values()) out.push(this.snapshotOf(ws));\n    return out;\n  }\n\n  /** The workspace's own fields: everything except its collections and log. */\n  private metaOf(ws: Workspace): Record<string, unknown> {\n    return {\n      id:           ws.id,\n      created:      ws.created,\n      state:        ws.state,\n      profiles:     ws.profiles,\n      mode:         ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      routing_policy_uri: ws.routing_policy_uri,\n      step_up_window_sec: ws.step_up_window_sec,\n      min_acr:      ws.min_acr,\n      signature_policy: ws.signature_policy,\n      join_policy:  ws.join_policy,\n      review_rule:  ws.review_rule,\n      chain_head:   ws.chain_head,\n      chain_enabled: ws.chain_enabled,\n    };\n  }\n\n  /**\n   * One workspace as `snapshot()` holds it: each object of its collections a\n   * copy in the shape the store keeps. Reads nothing as a change.\n   */\n  private snapshotOf(ws: Workspace): Record<string, unknown> {\n    const { chain_head, chain_enabled, ...own } = this.metaOf(ws);\n    const stored = (name: (typeof COLLECTIONS)[number]) =>\n      Array.from(rawValues(ws[name] as unknown as TrackedMap<string, Record<string, unknown>>))\n        .map((v) => storedCopy(name, v));\n    return {\n      ...own,\n      members:         stored(\"members\"),\n      tasks:           stored(\"tasks\"),\n      overrides:       stored(\"overrides\"),\n      whispers:        stored(\"whispers\"),\n      deliberations:   stored(\"deliberations\"),\n      handoffs:        stored(\"handoffs\"),\n      snapshots:       stored(\"snapshots\"),\n      route_decisions: stored(\"route_decisions\"),\n      invitations:     stored(\"invitations\"),\n      idempotency_keys: { ...ws.idempotency_keys },\n      audit:           ws.audit,\n      chain_head,\n      chain_enabled,\n    };\n  }\n\n  /** Restore from a snapshot produced by ``snapshot()``. Replaces\n   *  any existing in-memory workspaces. */\n  restore(data: unknown): void {\n    this.workspaces.clear();\n    this.unflushed.clear();\n    if (!Array.isArray(data)) return;\n    for (const w of data as Array<Record<string, unknown>>) {\n      // One workspace that cannot be rebuilt is skipped, with a warning, so\n      // the others still load.\n      let ws: Workspace;\n      try {\n        ws = this.rebuild(w);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        console.warn(`chap coordinator: workspace ${String(w?.id)} could not be restored: ${message}`);\n        continue;\n      }\n      this.workspaces.set(ws.id, ws);\n      // Restored from data the store may not hold: the next write replaces\n      // the store's copy whole. Loading from the store marks it written.\n      for (const name of COLLECTIONS) (ws[name] as TrackedMap<unknown, unknown>).dirty.clear();\n      this.persisted.set(ws, { seq: 0, replace: true, keys: new Set() });\n    }\n  }\n\n  /** One workspace from a snapshot entry, its maps tracked. */\n  private rebuild(snapshot: Record<string, unknown>): Workspace {\n    const w = shapeSnapshot(snapshot);\n    const ws: Workspace = {\n      id: w.id as WorkspaceId,\n      created: w.created as string,\n      state: (w.state as Workspace[\"state\"]) ?? \"active\",\n      profiles: (w.profiles as string[]) ?? [],\n      mode: (w.mode as Mode) ?? \"trial\",\n      mode_ceiling: (w.mode_ceiling as Mode) ?? \"production\",\n      routing_policy_uri: w.routing_policy_uri as string | undefined,\n      step_up_window_sec: (w.step_up_window_sec as number) ?? 300,\n      min_acr: w.min_acr as string | undefined,\n      // A workspace written before the policy existed verified every call,\n      // and one written before the join policy existed admitted anyone.\n      signature_policy: w.signature_policy === \"humans\" ? \"humans\" : \"all\",\n      join_policy: w.join_policy === \"invite\" ? \"invite\" : \"open\",\n      review_rule: typeof w.review_rule === \"string\" && reviewRuleSupported(w.review_rule) ? w.review_rule : undefined,\n      members: this.newMap(),\n      tasks: this.newMap(),\n      overrides: this.newMap(),\n      whispers: this.newMap(),\n      deliberations: this.newMap(),\n      handoffs: this.newMap(),\n      snapshots: this.newMap(),\n      route_decisions: this.newMap(),\n      invitations: this.newMap(),\n      idempotency_keys: (w.idempotency_keys as Record<string, string>) ?? {},\n      audit: (w.audit as AuditEntry[]) ?? [],\n      chain_head: w.chain_head as string | undefined,\n      chain_enabled: !!w.chain_enabled,\n    };\n    for (const m of (w.members as Member[]) ?? []) {\n      // Defensive: ensure required collections exist even on older snapshots.\n      if (!Array.isArray(m.keys)) m.keys = [];\n      if (m.paused === undefined) m.paused = false;\n      // A member written before its type was checked against its URI takes\n      // the type the scheme names, and holds the admin role only where that\n      // type may (SPECIFICATION 5.1, 6.3).\n      const scheme = typeof m.uri === \"string\" ? m.uri.split(\":\")[0] : \"\";\n      if (PARTICIPANT_TYPES.includes(scheme)) m.type = scheme as Member[\"type\"];\n      if (m.role === \"admin\" && !ADMIN_TYPES.includes(m.type)) m.role = \"participant\";\n      ws.members.set(m.uri, m);\n    }\n    for (const t of (w.tasks as Task[]) ?? []) {\n      // A review written before authors were recorded takes them from the\n      // task's history.\n      if (t.review && !Array.isArray(t.review.authors)) t.review.authors = storedAuthors(t);\n      // and one written before acknowledgements were kept has none.\n      if (t.review && !Array.isArray(t.review.acknowledgements)) t.review.acknowledgements = [];\n      ws.tasks.set(t.id, t);\n    }\n    for (const o of (w.overrides as OverrideArtefact[]) ?? []) ws.overrides.set(o.id, o);\n    // The dynamic profile collections may not be present on legacy snapshots.\n    for (const x of (w.whispers as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.whispers.set(x.id, x as never);\n    for (const x of (w.deliberations as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.deliberations.set(x.id, x as never);\n    for (const x of (w.handoffs as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.handoffs.set(x.id, x as never);\n    for (const x of (w.snapshots as Array<{ id: string } & Record<string, unknown>>) ?? []) {\n      // Normalize the former flat store representation only on restore.\n      // New snapshots are stored and emitted in the canonical wire shape.\n      const content = structuredClone((x.content ?? {\n        workspace: x.workspace, audit_seq: x.audit_seq,\n        include: x.include, state: x.state,\n        ...(x.label ? { label: x.label } : {}),\n      }) as SnapshotArtefact[\"content\"]);\n      if (!x.content) {\n        // Legacy in-memory projections can contain undefined optional\n        // fields; full bodies from older stores are not snapshot slices.\n        const oldState = content.state;\n        const state: Record<string, unknown> = {};\n        for (const key of [\"mode_ceiling\", \"routing_policy_uri\", \"audit_seq\"]) {\n          if (oldState[key] != null && oldState[key] !== \"\") state[key] = oldState[key];\n        }\n        for (const [key, fields] of [\n          [\"members\", [\"uri\", \"type\", \"role\", \"scopes\"]],\n          [\"open_tasks\", [\"id\", \"kind\", \"state\", \"assignee\"]],\n        ] as const) {\n          const items = oldState[key];\n          if (Array.isArray(items) && items.length) {\n            state[key] = items.map(item => Object.fromEntries(fields\n              .filter(field => item[field] != null && item[field] !== \"\"\n                && (!Array.isArray(item[field]) || item[field].length > 0))\n              .map(field => [field, item[field]])));\n          }\n        }\n        content.state = state;\n      }\n      ws.snapshots.set(x.id, {\n        id: x.id, kind: \"snapshot\",\n        produced_by: (x.produced_by ?? x.by) as string,\n        produced_at: (x.produced_at ?? x.ts) as string,\n        content_hash: (x.content_hash as string | undefined) ?? contentHash(content),\n        content,\n      });\n    }\n    for (const x of (w.route_decisions as Array<{ id: string } & Record<string, unknown>>) ?? [])\n      ws.route_decisions.set(x.id, x as never);\n    for (const x of (w.invitations as Invitation[]) ?? []) ws.invitations.set(x.uri, x);\n    return ws;\n  }\n\n  // -- dispatch ------------------------------------------------------\n\n  dispatch(envelope: Envelope): Envelope {\n    this.frozenNow = this.advanceClock();\n    this.tracker.depth++;\n    let response: Envelope;\n    let target: WorkspaceId | undefined;\n    let ran = false;\n    try {\n      target = targetOf(envelope);\n      const refused = target === undefined ? null : this.keepUp(target);\n      if (refused) {\n        response = reply(envelope, { error: refused });\n      } else {\n        ran = true;\n        response = this._dispatch(envelope);\n        if (response.error) this.recordRefusal(envelope, response.error);\n        else if (target === undefined && envelope.method === \"workspace.create\") {\n          target = (response.result as { workspace?: WorkspaceId } | undefined)?.workspace;\n        }\n      }\n    } finally {\n      // One write per call, with everything the call changed, made before\n      // dispatch returns.\n      if (--this.tracker.depth === 0) this.flushUnflushed();\n      this.frozenNow = undefined;\n    }\n    // The call's write failed, so the store does not hold what it did. It is\n    // answered as failed, and the workspace goes back to what the store holds.\n    if (ran && target !== undefined && this.tracker.depth === 0 && this.held.has(target)) {\n      this.reload(target);\n      return reply(envelope, { error: storeFailed() });\n    }\n    return response;\n  }\n\n  /**\n   * Work that changes a workspace outside any call, a whisper lapse check\n   * for one, kept to the rules a call keeps (SPECIFICATION 10.3): the\n   * workspace is first brought up to date with the store, and left alone\n   * as long as it is held; what the work changed is written once, when it ends;\n   * and where that write fails, the workspace goes back to what the store\n   * holds and the work's results are dropped, since none took effect.\n   */\n  outsideCall<T>(id: WorkspaceId, work: () => T[]): T[] {\n    if (this.tracker.depth > 0) return work();\n    if (this.keepUp(id)) return [];\n    this.tracker.depth++;\n    let out: T[];\n    try {\n      out = work();\n    } finally {\n      if (--this.tracker.depth === 0) this.flushUnflushed();\n    }\n    if (this.held.has(id)) {\n      this.reload(id);\n      return [];\n    }\n    return out;\n  }\n\n  /**\n   * Before a call on a workspace: where the store holds a different number of\n   * audit entries for it than this instance last wrote, another writer has\n   * written it, and it is reloaded. A workspace held after a failed write is\n   * reloaded as well, and the call refused while that fails.\n   */\n  private keepUp(id: WorkspaceId): ReturnType<typeof rpcError> | null {\n    if (this.held.has(id)) return this.reload(id) ? null : storeFailed();\n    if (typeof this.store.version !== \"function\" || this.saveChains.has(id)) return null;\n    let stored: number | undefined;\n    try {\n      stored = this.store.version(id);\n    } catch {\n      // Unread, the store may still take the call's write; if it does not,\n      // the write fails and is answered as failed.\n      return null;\n    }\n    if (isThenable(stored)) return null;\n    const ws = this.workspaces.get(id);\n    const p = ws ? this.persisted.get(ws) : undefined;\n    // A workspace written whole on its next write replaces the store's copy.\n    if (ws && (!p || p.replace)) return null;\n    if (stored === p?.seq) return null;\n    return this.reload(id) ? null : storeFailed();\n  }\n\n  /** Replace a workspace with what the store holds of it. False when it cannot be read. */\n  private reload(id: WorkspaceId): boolean {\n    let record: WorkspaceRecord | undefined;\n    try {\n      if (typeof this.store.loadOne === \"function\") {\n        record = this.store.loadOne(id);\n      } else {\n        const all = this.store.load();\n        if (isThenable(all)) return false;\n        record = (all as WorkspaceRecord[]).find((r) => r.id === id);\n      }\n      if (isThenable(record)) return false;\n    } catch (err) {\n      this.reportStoreError(err, { id, version: this.workspaces.get(id)?.audit.length ?? 0 });\n      return false;\n    }\n    const old = this.workspaces.get(id);\n    if (old) this.unflushed.delete(old);\n    if (record) {\n      let ws: Workspace;\n      try {\n        ws = this.rebuild(record.data as Record<string, unknown>);\n      } catch (err) {\n        this.reportStoreError(err, { id, version: record.version });\n        return false;\n      }\n      this.workspaces.set(id, ws);\n      this.markWritten(ws);\n      this.wsVersions.set(id, record.version);\n    } else {\n      this.workspaces.delete(id);\n    }\n    this.held.delete(id);\n    return true;\n  }\n\n  private _dispatch(envelope: Envelope): Envelope {\n    // SPECIFICATION 10.1 fixes the order of the checks below, because which\n    // refusal a call receives decides whether it is recorded. First the\n    // request itself, none of whose refusals is recorded.\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\" || !envelope.method) {\n      return reply(envelope, { error: rpcError(E.REQUEST, \"Invalid JSON-RPC 2.0 request\") });\n    }\n    if (!withinNesting(envelope, MAX_NESTING)) {\n      return reply(envelope, { error: rpcError(E.REQUEST, `Envelope nests deeper than ${MAX_NESTING} levels`) });\n    }\n    const maxBytes = this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES;\n    // Canonicalised once: the length is what the size limit measures, and a\n    // request that cannot be canonicalised is refused below, once its method\n    // is known to exist.\n    let size = 0;\n    let canonicalError: unknown;\n    try { size = canonicalize(envelope).length; } catch (e) { canonicalError = e; }\n    if (size > maxBytes) {\n      return reply(envelope, { error: rpcError(E.REQUEST,\n        `Envelope exceeds max_envelope_bytes (${size} > ${maxBytes})`) });\n    }\n    const method = envelope.method;\n    // JSON-RPC params, when present, must be a structured value (object).\n    // CHAP methods use by-name params; reject non-object params cleanly as\n    // Invalid params for parity with the Python reference.\n    const rawParams = envelope.params;\n    if (\n      rawParams !== undefined &&\n      rawParams !== null &&\n      (typeof rawParams !== \"object\" || Array.isArray(rawParams))\n    ) {\n      return reply(envelope, { error: rpcError(E.PARAMS, \"Invalid params: expected an object\") });\n    }\n    const params = (rawParams ?? {}) as Record<string, unknown>;\n    const handler = this.handlers.get(method);\n    if (!handler) {\n      return reply(envelope, { error: rpcError(E.METHOD, `Unknown method: ${method}`) });\n    }\n    if (canonicalError !== undefined) {\n      const msg = canonicalError instanceof Error ? canonicalError.message : String(canonicalError);\n      return reply(envelope, { error: rpcError(E.PARAMS, msg) });\n    }\n    // A workspace is named by a non-empty string. A list or an object names\n    // none, and an empty string is no id participant.join could make a\n    // workspace under, so both references refuse either before any lookup.\n    if (params.workspace !== undefined && (typeof params.workspace !== \"string\" || !params.workspace)) {\n      return reply(envelope, { error: rpcError(E.PARAMS, \"workspace must be a non-empty string\") });\n    }\n\n    // SPECIFICATION 10.1: a signed request whose signed content matches a\n    // recorded refusal is answered with that refusal and not evaluated again,\n    // and one that matches an accepted call is refused with -32075. The log\n    // publishes every call, signature and all, so without this anyone who can\n    // read the log could send a refused request again once whatever refused\n    // it had changed, or an accepted one again once it applied anew, a\n    // reviewer's reject to a resubmitted artefact for instance, and it would\n    // take effect in its signer's name.\n    if (isSigned(envelope)) {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const index = this.signedIndex(ws);\n        const digest = signedDigest(recordedForm(envelope));\n        const prior = index.refused.get(digest);\n        if (prior) {\n          return reply(envelope, { error: rpcError(prior.code,\n            `Refused at seq ${prior.seq}; a refused request is not evaluated again`,\n            { refused_at_seq: prior.seq }) });\n        }\n        const accepted = index.accepted.get(digest);\n        if (accepted !== undefined) {\n          return reply(envelope, { error: rpcError(E.SIG_ALREADY_ACCEPTED,\n            `Accepted at seq ${accepted}; a signed request takes effect once`,\n            { accepted_at_seq: accepted }) });\n        }\n      }\n    }\n\n    // security-signed/1.0: verify the top-level sig where the workspace\n    // requires signatures, because it advertises the profile or this\n    // coordinator is configured to require them. participant.join and\n    // workspace.create are bootstrap operations that run before any signing\n    // key is registered for the actor, so they cannot be signature-verified.\n    // Under the \"humans\" policy a call that carries no signature is taken\n    // from an agent member, such as one on the server's own transport;\n    // people and services sign every call.\n    const target = typeof params.workspace === \"string\" ? this.workspaces.get(params.workspace) : undefined;\n    if (this.requiresSignatures(target)\n        && method !== \"participant.join\" && method !== \"workspace.create\"\n        && !(!isSigned(envelope) && target !== undefined\n             && !this.mustSign(target, rawMember(target, params.from)?.type))) {\n      const sigErr = this.verifySignature(envelope);\n      if (sigErr) return reply(envelope, { error: sigErr });\n      if (method === \"participant.rotate_key\") {\n        // A null old_kid names no key, as a null param gives no value, and\n        // the handler refuses it.\n        const signingKid = (envelope.sig as string).split(\":\")[1];\n        const oldKid = params.old_kid as string | null | undefined;\n        if (oldKid != null && signingKid !== oldKid) {\n          return reply(envelope, { error: rpcError(E.SIG_ROTATION_KEY_MISMATCH,\n            \"Rotation must be signed with the old key\") });\n        }\n      }\n    }\n\n    // identity-oidc/1.0: step-up freshness on privileged methods.\n    if (this.options.enforceStepUp && PRIVILEGED_METHODS.has(method)) {\n      const stale = this.checkStepUp(params);\n      if (stale) return reply(envelope, { error: stale });\n    }\n\n    // SPECIFICATION 15.4: refuse a method whose owning profile the workspace\n    // does not advertise. The refusal is -32601, the same answer a coordinator\n    // that never implemented the method would give, so a deployment cannot\n    // tell from outside which of the two it is talking to. The detail rides in\n    // `data` for an operator reading the log.\n    {\n      const gate = this.profileGate(method, params);\n      if (gate) return reply(envelope, { error: gate });\n    }\n\n    // control/1.0 and deliberation/1.0: these operations are privileged and\n    // MUST be performed by a workspace member. Control is the governance\n    // \"emergency brake\"; deliberation open/close set the vote parameters and\n    // finalize the tally. Without this floor a non-member could resume a\n    // paused workspace, raise the mode ceiling, or open and close a\n    // deliberation to finalize an outcome early. (The per-voter eligibility\n    // check in deliberate.vote is separate and still applies. A stricter role\n    // gate than membership is layered on top via an identity-* profile.)\n    // The routing methods and participant.leave sit under the same floor\n    // (SPECIFICATION 6.3.1): without it a non-member could reassign a task\n    // with task.route, or write a leave to the log under any name.\n    if (method.startsWith(\"control.\") || method.startsWith(\"deliberate.\") || method.startsWith(\"handoff.\") || method.startsWith(\"whisper.\") || MEMBER_ONLY_METHODS.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      if (ws) {\n        const notMember = this.requireMember(ws, params.from);\n        if (notMember) return reply(envelope, { error: notMember.error });\n      }\n    }\n\n    // control/1.0 workspace-paused gate (S6 -32063).\n    const exempt = new Set([\"workspace.create\", \"workspace.describe\",\n                            \"control.resume\", \"audit.read\",\n                            \"participant.join\", \"participant.leave\"]);\n    if (!exempt.has(method)) {\n      const wsId = params.workspace as string | undefined;\n      if (typeof wsId === \"string\") {\n        const ws = this.workspaces.get(wsId);\n        if (ws && ws.state === \"paused\") {\n          return reply(envelope, { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Workspace ${wsId} is paused`) });\n        }\n      }\n    }\n\n    // task.create idempotency: a repeat carrying a seen idempotency_key returns\n    // the original task rather than creating (or recording) a duplicate -- safe\n    // for at-least-once redelivery.\n    if (method === \"task.create\") {\n      const wsId = params.workspace;\n      const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n      const key = params.idempotency_key;\n      if (ws && typeof key === \"string\") {\n        const existingId = ws.idempotency_keys[key];\n        const task = existingId ? ws.tasks.get(existingId) : undefined;\n        if (task) return reply(envelope, { result: { task_id: existingId, state: task.state } });\n      }\n    }\n\n    let out: { result?: unknown; error?: { code: number; message: string; data?: unknown } };\n    try {\n      // The handler works on its own copy of what the caller sent, and the\n      // caller gets a copy of the result, so no object is shared between the\n      // workspace and the caller. A caller that reused or changed one later\n      // would change the workspace outside any call, where no change is\n      // recorded for the store.\n      out = handler(ownCopy(params));\n    } catch (e) {\n      // The caller learns only that the call failed. An exception's text can\n      // name a path, a query or a value from another workspace, so it goes\n      // to the operator through onInternalError and never onto the wire.\n      this.reportInternalError(e, method, params.workspace as string | undefined);\n      return reply(envelope, { error: rpcError(E.INTERNAL, \"Internal error\") });\n    }\n    if (out.error) return reply(envelope, { error: out.error });\n\n    // Record audit on success. A refusal is weighed in dispatch(), once this\n    // returns, against the rule in SPECIFICATION 10.1. A workspace.create\n    // that names no workspace is recorded in the one it made, which was\n    // otherwise left with no entry and never written to the store.\n    const wsId = method === \"workspace.create\"\n      ? (out.result as { workspace: string }).workspace\n      : params.workspace as string | undefined;\n    if (typeof wsId === \"string\" && !READ_ONLY_METHODS.has(method)) {\n      const ws = this.workspaces.get(wsId);\n      if (ws) this.recordAudit(ws, recordedForm(envelope));\n    }\n    return reply(envelope, { result: ownCopy(out.result) });\n  }\n\n  // -- audit ---------------------------------------------------------\n\n  recordAudit(ws: Workspace, envelope: Envelope): void {\n    this.appendEntry(ws, { envelope: JSON.parse(JSON.stringify(envelope)) as Envelope });\n  }\n\n  /**\n   * SPECIFICATION 10.1: record a refused call when it is a governed attempt.\n   * The caller must be a member of an existing workspace, the call must be a\n   * JSON-RPC call for a method that is not a read, and the refusal must be one\n   * `refusalIsRecorded` names. The request is kept as it arrived, so a\n   * signature on it still verifies. Every call that reaches a recorded refusal\n   * has passed the canonical check, so it can be hashed into the chain.\n   */\n  private recordRefusal(envelope: Envelope, error: { code: number; data?: unknown }): void {\n    if (!isValidEnvelope(envelope) || typeof envelope.method !== \"string\") return;\n    const method = envelope.method;\n    if (READ_ONLY_METHODS.has(method)) return;\n    if (!refusalIsRecorded(method, error, PRIVILEGED_METHODS)) return;\n    const raw = envelope.params;\n    if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return;\n    const params = raw as Record<string, unknown>;\n    const ws = typeof params.workspace === \"string\" ? this.workspaces.get(params.workspace) : undefined;\n    if (!ws || typeof params.from !== \"string\" || !ws.members.has(params.from)) return;\n    // A signed copy of a call already on the log is not a new attempt by its\n    // signer. A copy of a refusal was answered with it, and a copy of a call\n    // that took effect repeats a call its signer made once. Anyone who can\n    // read the log can send either.\n    if (isSigned(envelope)) {\n      const index = this.signedIndex(ws);\n      const digest = signedDigest(envelope);\n      if (index.refused.has(digest) || index.accepted.has(digest)) return;\n    }\n    this.appendEntry(ws, {\n      request: JSON.parse(JSON.stringify(envelope)) as Envelope,\n      outcome: { status: \"refused\", code: error.code },\n    });\n  }\n\n  /** The signed calls on this workspace's log, built from the log when missing. */\n  private signedIndex(ws: Workspace): SignedIndex {\n    let index = this.signedIndexes.get(ws);\n    if (!index) {\n      index = { refused: new Map(), accepted: new Map() };\n      for (const entry of ws.audit) indexSigned(index, entry);\n      this.signedIndexes.set(ws, index);\n    }\n    return index;\n  }\n\n  private appendEntry(ws: Workspace, record: Pick<AuditEntry, \"envelope\" | \"request\" | \"outcome\">): void {\n    const entry: AuditEntry = { seq: ws.audit.length, arrived: this.now(), ...record };\n    if (ws.chain_enabled || this.options.enableChain) {\n      const prev = ws.chain_head ?? ZERO_HASH;\n      entry.prev_hash = prev;\n      ws.chain_head = linkHash(entryRecord(entry), prev);\n    }\n    ws.audit.push(entry);\n    const index = this.signedIndexes.get(ws);\n    if (index) indexSigned(index, entry);\n    // The listeners hear of the entry once it is written, so they never hear\n    // of one the store did not take.\n    const queued = this.unannounced.get(ws);\n    if (queued) queued.push(entry);\n    else this.unannounced.set(ws, [entry]);\n    this.persist(ws);\n  }\n\n  // -- signature verification (security-signed/1.0) -----------------\n\n  private verifySignature(envelope: Envelope): { code: number; message: string; data?: unknown } | null {\n    const sig = envelope.sig;\n    if (!sig || typeof sig !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Missing top-level `sig` field\");\n    }\n    // ed25519:<kid>:<base64>, or webauthn:<kid>:<assertion> for a key a\n    // browser's authenticator holds (security-signed/1.0 3).\n    const parts = sig.split(\":\");\n    const scheme = parts[0];\n    if (parts.length !== 3 || (scheme !== \"ed25519\" && scheme !== \"webauthn\")) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Malformed signature tag\");\n    }\n    const assertion = scheme === \"webauthn\" ? parseWebAuthnAssertion(parts[2]) : undefined;\n    if (scheme === \"webauthn\" && !assertion) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Malformed signature tag\");\n    }\n    const kid = parts[1];\n    const params = (envelope.params ?? {}) as Record<string, unknown>;\n    const sender = params.from;\n    const wsId = params.workspace;\n    const rawTs = params.ts;\n    // Fail closed: a signature is present and requireSignatures is on, so it\n    // must verify. If we cannot resolve the context needed to verify it,\n    // reject rather than skip -- a signature we cannot check must never be\n    // treated as valid. A `from` or `workspace` that is not a string names\n    // nothing, so it counts as missing.\n    if (typeof sender !== \"string\" || !sender || typeof wsId !== \"string\" || !wsId) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: missing from/workspace\");\n    }\n    // The key is chosen by the time the sender gives. A `ts` that is not a\n    // string gives no time, so no key can be chosen for it.\n    if (rawTs !== undefined && rawTs !== null && typeof rawTs !== \"string\") {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: ts must be a string\");\n    }\n    const ts = (rawTs as string | null | undefined) ?? this.now();\n    const ws = this.workspaces.get(wsId);\n    if (!ws) {\n      return rpcError(E.SIG_VERIFY_FAILED, \"Cannot verify signature: unknown workspace\");\n    }\n    const member = ws.members.get(sender);\n    if (!member) return rpcError(E.SIG_KEY_NOT_FOUND, `No member: ${sender}`);\n\n    // Revocation is present-tense: a revoked key must be rejected for any\n    // live request regardless of the envelope's self-asserted `ts`. Checking\n    // against `ts` alone lets a holder of a revoked key backdate `ts` to\n    // before the revocation and still be accepted. Use the coordinator's\n    // trusted clock for the revocation decision.\n    const now = this.now();\n    if (member.keys.some(k => k.kid === kid && k.revoked_at !== undefined && now >= k.revoked_at)) {\n      return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n    }\n    // Expiry is present-tense for the same reason: a rotated-out key\n    // (valid_until set to the rotation time, but never explicitly revoked) must\n    // not sign live requests. Selecting it by the self-asserted `ts` alone lets\n    // its holder backdate `ts` to before valid_until and keep using it. Judge\n    // expiry by the trusted clock.\n    if (member.keys.some(k => k.kid === kid && k.valid_until !== undefined && now >= k.valid_until)) {\n      return rpcError(E.SIG_KEY_NOT_FOUND, `Key ${kid} is no longer valid`);\n    }\n\n    const key = this.lookupKey(member, kid, ts);\n    if (!key) {\n      const revoked = member.keys.find(k => k.kid === kid && k.revoked_at);\n      if (revoked) return rpcError(E.SIG_KEY_REVOKED, `Key ${kid} is revoked`);\n      return rpcError(E.SIG_KEY_NOT_FOUND, `No key ${kid} valid at ${ts} for ${sender}`);\n    }\n\n    if (assertion) {\n      if (!isWebAuthnKey(key.jwk)) return rpcError(E.SIG_VERIFY_FAILED, `Key ${kid} is not a WebAuthn key`);\n      const stripped: Envelope = JSON.parse(JSON.stringify(envelope));\n      delete stripped.sig;\n      const failure = webAuthnFailure(canonicalize(stripped), assertion, key.jwk as unknown as Record<string, unknown>);\n      return failure === null ? null : rpcError(E.SIG_VERIFY_FAILED, failure);\n    }\n\n    // An ed25519: tag names an Ed25519 key, and a webauthn: tag a WebAuthn\n    // key, so neither key is read as the other kind.\n    if (!isEd25519Key(key.jwk)) return rpcError(E.SIG_VERIFY_FAILED, `Key ${kid} is not an Ed25519 key`);\n    try {\n      const stripped: Envelope = JSON.parse(JSON.stringify(envelope));\n      delete stripped.sig;\n      const canonical = canonicalize(stripped);\n      const pub = publicKeyFromJwk(key.jwk);\n      if (!verifyEnvelope(canonical, sig, pub)) {\n        return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n      }\n      return null;\n    } catch {\n      // An exception here (malformed key or signature bytes) means the\n      // signature cannot be verified: fail closed with the same generic code\n      // as the Python reference, and do not leak the exception detail.\n      return rpcError(E.SIG_VERIFY_FAILED, \"Signature failed verification\");\n    }\n  }\n\n  /**\n   * SPECIFICATION 6.5: an identity profile states that a verifier checks\n   * people's credentials, so advertising one this coordinator has no\n   * verifier for describes a guarantee it does not give.\n   */\n  private unverifiedIdentity(profiles: string[]): ReturnType<typeof rpcError> | null {\n    const named = (name: string) => profiles.some((x) => x === name || x.startsWith(name + \"/\"));\n    if (named(\"identity-oidc\") && this.options.verifyOidcToken === undefined) {\n      return rpcError(E.PARAMS,\n        \"identity-oidc/1.0 is advertised but no token verifier is configured. \" +\n        \"A workspace that advertises it and does not enforce it \" +\n        \"describes a guarantee it does not give.\");\n    }\n    if (named(\"identity-vc\") && this.options.verifyVc === undefined) {\n      return rpcError(E.PARAMS,\n        \"identity-vc/1.0 is advertised but no presentation verifier is configured. \" +\n        \"A workspace that advertises it and does not enforce it \" +\n        \"describes a guarantee it does not give.\");\n    }\n    return null;\n  }\n\n  /** Whether a workspace requires signatures: it advertises security-signed/1.0, or this coordinator is configured to. */\n  private requiresSignatures(ws: Workspace | undefined): boolean {\n    return !!this.options.requireSignatures || (ws !== undefined && advertises(ws, \"security-signed\"));\n  }\n\n  /**\n   * Whether a participant of this type signs its calls in a workspace that\n   * requires signatures: every participant under \"all\", and every one but an\n   * agent under \"humans\". A non-member signs.\n   */\n  private mustSign(ws: Workspace, type: string | undefined): boolean {\n    return ws.signature_policy === \"all\" || type !== \"agent\";\n  }\n\n  /** Lookup the key valid for a given participant at a given time. */\n  lookupKey(member: Member, kid: string, ts: string): KeyRecord | null {\n    for (const k of member.keys) {\n      if (k.kid !== kid) continue;\n      if (k.revoked_at !== undefined && ts >= k.revoked_at) continue;\n      if (ts < k.valid_from) continue;\n      if (k.valid_until !== undefined && ts >= k.valid_until) continue;\n      return k;\n    }\n    return null;\n  }\n\n  // -- step-up (identity-oidc/1.0) -----------------------------------\n\n  /**\n   * The SPECIFICATION 15.4 check, per method rather than per namespace.\n   *\n   * Core is always present, so a core method is never gated. The reads in\n   * ALWAYS_AVAILABLE are never gated either: a workspace must be able to ask\n   * what it is and to check its own chain, and `audit.verify_chain` belongs to\n   * `audit-scitt/1.0` while chaining also turns on through an option, so\n   * gating it would let a workspace write a hash-linked chain it is refused\n   * permission to verify.\n   */\n  private profileGate(method: string, params: Record<string, unknown>) {\n    const owner = OWNING_PROFILE[method];\n    if (owner === undefined || owner === \"core/1.0\" || ALWAYS_AVAILABLE.has(method)) return undefined;\n    const wsId = params.workspace as string | undefined;\n    const ws = typeof wsId === \"string\" ? this.workspaces.get(wsId) : undefined;\n    if (!ws) return undefined;\n    // Match on the profile name, so a workspace advertising a later minor\n    // version of the owning profile still carries its methods.\n    const name = owner.split(\"/\")[0];\n    if (ws.profiles.some(p => p === name || p.startsWith(name + \"/\"))) return undefined;\n    return rpcError(E.METHOD, `Unknown method: ${method}`,\n                    { profile: owner, advertised: [...ws.profiles] });\n  }\n\n  private checkStepUp(params: Record<string, unknown>): { code: number; message: string; data?: unknown } | null {\n    // A `from` or `workspace` that is not a string names no member to hold to\n    // step-up; the membership check answers such a call.\n    const wsId = params.workspace;\n    const sender = params.from;\n    if (typeof wsId !== \"string\" || typeof sender !== \"string\" || !wsId || !sender) return null;\n    const ws = this.workspaces.get(wsId);\n    if (!ws) return null;\n    const member = ws.members.get(sender);\n    if (!member) return null;\n    // Step-up applies to OIDC actors -- humans, or any member with an OIDC\n    // binding. Agents and services authenticate out of band (SPIFFE/X.509),\n    // so they are not held to an auth_time window here.\n    if (member.type !== \"human\" && member.oidc_sub === undefined) return null;\n    if (member.oidc_auth_time === undefined) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec,\n      });\n    }\n    const nowSec = Math.floor(Date.now() / 1000);\n    const age = nowSec - member.oidc_auth_time;\n    if (age > ws.step_up_window_sec) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up authentication required\", {\n        window_sec: ws.step_up_window_sec, age_sec: age,\n      });\n    }\n    if (ws.min_acr !== undefined && member.oidc_acr !== ws.min_acr) {\n      return rpcError(E.OIDC_STEP_UP_REQUIRED, \"Step-up required: acr below the workspace minimum\", {\n        required_acr: ws.min_acr, acr: member.oidc_acr,\n      });\n    }\n    return null;\n  }\n\n  // ==========================================================\n  //   Registration\n  // ==========================================================\n\n  private registerCoreHandlers(): void {\n    this.handlers.set(\"workspace.create\",       p => this.opWorkspaceCreate(p));\n    this.handlers.set(\"workspace.describe\",     p => this.opWorkspaceDescribe(p));\n    this.handlers.set(\"workspace.set_profiles\", p => this.opWorkspaceSetProfiles(p));\n    this.handlers.set(\"workspace.invite\",       p => this.opWorkspaceInvite(p));\n    this.handlers.set(\"participant.join\",       p => this.opParticipantJoin(p));\n    this.handlers.set(\"participant.leave\",      p => this.opParticipantLeave(p));\n    this.handlers.set(\"task.create\",            p => this.opTaskCreate(p));\n    this.handlers.set(\"task.update\",            p => this.opTaskUpdate(p));\n    this.handlers.set(\"task.complete\",          p => this.opTaskComplete(p));\n    this.handlers.set(\"audit.read\",             p => this.opAuditRead(p));\n    this.handlers.set(\"review.request\",         p => this.opReviewRequest(p));\n    this.handlers.set(\"review.acknowledge\",     p => this.opReviewAcknowledge(p));\n    this.handlers.set(\"decide.approve\",         p => this.opDecide(p, \"approve\"));\n    this.handlers.set(\"decide.reject\",          p => this.opDecide(p, \"reject\"));\n    this.handlers.set(\"decide.override\",        p => this.opDecideOverride(p));\n    this.handlers.set(\"abstain.declare\",        p => this.opAbstainDeclare(p));\n    this.handlers.set(\"escalate.raise\",         p => this.opEscalateRaise(p));\n  }\n\n  private registerProfileHandlers(): void {\n    // Profiles register themselves by mutating this.handlers\n    registerWhisper(this);\n    registerDeliberation(this);\n    registerHandoff(this);\n    registerControl(this);\n    registerRouting(this);\n    registerSecuritySigned(this);\n    registerAuditScitt(this);\n  }\n\n  // ==========================================================\n  //   Core method handlers\n  // ==========================================================\n\n  private opWorkspaceCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const built = this.buildWorkspace(p);\n    if (built.error) return { error: built.error };\n    this.addWorkspace(built.ws);\n    return { result: { workspace: built.ws.id, created: built.ws.created } };\n  }\n\n  /**\n   * The workspace a workspace.create with these params makes, or why it\n   * cannot be made. Nothing is registered, so participant.join can judge a\n   * join by the workspace it would make and make it only once the join\n   * passes.\n   */\n  private buildWorkspace(p: Record<string, unknown>):\n      { ws: Workspace; error?: undefined } | { ws?: undefined; error: ReturnType<typeof rpcError> } {\n    const bad = paramsError(p, [\n      [\"profiles\", \"strings\"], [\"mode\", \"string\"], [\"mode_ceiling\", \"string\"],\n      [\"routing_policy_uri\", \"string\"], [\"step_up_window_sec\", \"integer\"], [\"min_acr\", \"string\"],\n    ]);\n    if (bad) return bad;\n    for (const name of [\"mode\", \"mode_ceiling\"]) {\n      if (p[name] != null && !MODES.has(p[name] as string)) {\n        return { error: rpcError(E.PARAMS, `${name} must be shadow, trial or production`) };\n      }\n    }\n    const policy = p.signature_policy ?? this.options.signaturePolicy ?? \"all\";\n    if (policy !== \"all\" && policy !== \"humans\") {\n      return { error: rpcError(E.PARAMS, \"signature_policy must be all or humans\") };\n    }\n    const joinPolicy = p.join_policy ?? this.options.joinPolicy ?? \"open\";\n    if (joinPolicy !== \"open\" && joinPolicy !== \"invite\") {\n      return { error: rpcError(E.PARAMS, \"join_policy must be open or invite\") };\n    }\n    const reviewRule = p.review_rule ?? undefined;\n    if (reviewRule !== undefined && (typeof reviewRule !== \"string\" || !reviewRuleSupported(reviewRule))) {\n      return { error: rpcError(E.PARAMS, \"review_rule must be any_one_approves, all_approve or quorum:<n>\") };\n    }\n    const id = (p.workspace as string) || this.ids.workspaceId();\n    if (this.workspaces.has(id)) return { error: rpcError(E.PARAMS, `workspace already exists: ${id}`) };\n    if (Array.isArray(p.profiles)) {\n      const unknown = profilesError(p.profiles as string[]);\n      if (unknown) return unknown;\n    }\n    const profiles: string[] = Array.isArray(p.profiles) ? [...(p.profiles as string[])] : [...(this.options.defaultProfiles ?? [\"core/1.0\", \"review/1.0\"])];\n\n    // SPECIFICATION 6.5: the descriptor and the enforcement agree. Signatures\n    // are enforced wherever security-signed/1.0 is advertised, so enforcing\n    // them through the option adds the profile, and advertising it needs\n    // nothing configured. A token verifier cannot follow the profile, so\n    // identity-oidc/1.0 advertised with none configured describes a\n    // guarantee the workspace does not give, and is refused here, where the\n    // misconfiguration surfaces at once.\n    const signed = profiles.some(x => x === \"security-signed\" || x.startsWith(\"security-signed/\"));\n    if (this.options.requireSignatures && !signed) profiles.push(\"security-signed/1.0\");\n    const oidc = profiles.some(x => x === \"identity-oidc\" || x.startsWith(\"identity-oidc/\"));\n    if (this.options.verifyOidcToken !== undefined && !oidc) profiles.push(\"identity-oidc/1.0\");\n    const vc = profiles.some(x => x === \"identity-vc\" || x.startsWith(\"identity-vc/\"));\n    if (this.options.verifyVc !== undefined && !vc) profiles.push(\"identity-vc/1.0\");\n    const unverified = this.unverifiedIdentity(profiles);\n    if (unverified) return { error: unverified };\n\n    const chainEnabled = profiles.includes(\"audit-scitt/1.0\") || !!this.options.enableChain;\n    const ws: Workspace = {\n      id,\n      created: this.now(),\n      state: \"active\",\n      profiles,\n      mode: (p.mode as Mode) ?? \"trial\",\n      mode_ceiling: (p.mode_ceiling as Mode) ?? \"production\",\n      // A param given as null gives no value, as in the Python reference: a\n      // null min_acr sets no minimum.\n      routing_policy_uri: (p.routing_policy_uri as string | null | undefined) ?? undefined,\n      step_up_window_sec: (p.step_up_window_sec as number | null | undefined) ?? 300,\n      min_acr: (p.min_acr as string | null | undefined) ?? undefined,\n      signature_policy: policy,\n      join_policy: joinPolicy,\n      ...(reviewRule !== undefined ? { review_rule: reviewRule } : {}),\n      members: this.newMap(),\n      tasks: this.newMap(),\n      overrides: this.newMap(),\n      whispers: this.newMap(),\n      deliberations: this.newMap(),\n      handoffs: this.newMap(),\n      snapshots: this.newMap(),\n      route_decisions: this.newMap(),\n      invitations: this.newMap(),\n      idempotency_keys: {},\n      audit: [],\n      chain_enabled: chainEnabled,\n      chain_head: chainEnabled ? ZERO_HASH : undefined,\n    };\n    return { ws };\n  }\n\n  private addWorkspace(ws: Workspace): void {\n    this.workspaces.set(ws.id, ws);\n    // New here, so the store holds nothing of it yet.\n    this.persisted.set(ws, { seq: 0, replace: false, keys: new Set() });\n  }\n\n  private opWorkspaceDescribe(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, `Unknown workspace: ${p.workspace}`) };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    return { result: {\n      id: ws.id,\n      created: ws.created,\n      state: ws.state,\n      mode: ws.mode,\n      mode_ceiling: ws.mode_ceiling,\n      max_envelope_bytes: this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES,\n      step_up_window_sec: ws.step_up_window_sec,\n      signature_policy: ws.signature_policy,\n      join_policy: ws.join_policy,\n      review_rule: ws.review_rule ?? \"any_one_approves\",\n      profiles: ws.profiles,\n      members: Array.from(rawValues(ws.members)).map(memberToDict),\n      audit_count: ws.audit.length,\n      task_count: ws.tasks.size,\n      override_count: ws.overrides.size,\n      // Omitted where the workspace has no chain, which is what the Python\n      // reference now sends too: JSON.stringify drops an undefined value, so\n      // the two answered the same call differently on the wire.\n      ...(ws.chain_head ? { evidence_head: ws.chain_head } : {}),\n      ...(ws.routing_policy_uri ? { routing_policy_uri: ws.routing_policy_uri } : {}),\n    }};\n  }\n\n  private opWorkspaceSetProfiles(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"profiles\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    if (!Array.isArray(p.profiles) || !p.profiles.every((x) => typeof x === \"string\")) {\n      return { error: rpcError(E.PARAMS, \"profiles must be a list of strings\") };\n    }\n    const unknown = profilesError(p.profiles as string[]);\n    if (unknown) return unknown;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    if (ws.members.get(p.from as string)!.role !== \"admin\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"workspace.set_profiles requires the admin role\") };\n    }\n    // A workspace that requires signatures keeps requiring them, and one that\n    // says its people are verified keeps verifying them. Removing either\n    // profile would turn its checks off for every call after this one, and\n    // the calls the log holds from then on would carry no assurance of who\n    // sent them.\n    const newProfiles = [...(p.profiles as string[])];\n    for (const name of LASTING_PROFILES) {\n      const held = ws.profiles.find((x) => x === name || x.startsWith(name + \"/\"));\n      if (held !== undefined && !newProfiles.some((x) => x.startsWith(name + \"/\"))) {\n        return { error: rpcError(E.NOT_AUTHORISED, `${held} cannot be removed once advertised`) };\n      }\n    }\n    const unverified = this.unverifiedIdentity(newProfiles);\n    if (unverified) return { error: unverified };\n    if (!newProfiles.some(pr => pr.startsWith(\"core/\"))) newProfiles.push(\"core/1.0\");\n    ws.profiles = newProfiles;\n    if (newProfiles.includes(\"audit-scitt/1.0\") && !ws.chain_enabled) {\n      ws.chain_enabled = true;\n      ws.chain_head = ZERO_HASH;\n    }\n    return { result: { profiles: ws.profiles } };\n  }\n\n  private opParticipantJoin(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"type\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    // The member is stored under its URI and read by its type, so neither\n    // may be null.\n    for (const f of [\"from\", \"type\"]) {\n      if (typeof p[f] !== \"string\") return { error: rpcError(E.PARAMS, `${f} must be a string`) };\n    }\n    // SPECIFICATION 5.1: a participant is one of five types, and the scheme\n    // of its URI names the type. Otherwise \"human:mallory\" could join as an\n    // agent, which the \"humans\" signature policy lets call unsigned, and\n    // still read as a person on the log.\n    const type = p.type as string;\n    const named = participantError(type, p.from as string, \"from\");\n    if (named) return named;\n    const bad = paramsError(p, [\n      [\"role\", \"string\"], [\"display_name\", \"string\"], [\"scopes\", \"strings\"],\n      [\"capabilities\", \"object\"], [\"jwks\", \"object\"], [\"jwks.keys\", \"list\"],\n      [\"oidc_token\", \"string\"], [\"vc_presentation\", \"object\"],\n    ]);\n    if (bad) return bad;\n    if (p.role === \"admin\" && !ADMIN_TYPES.includes(type)) {\n      return { error: rpcError(E.PARAMS, \"The admin role is held by a human or a service\") };\n    }\n    // A join may make its workspace. It is judged by the workspace it would\n    // make, which is registered only once the join passes, so a refused join\n    // leaves nothing behind.\n    let ws = this.workspaces.get(p.workspace as string);\n    const made = ws === undefined;\n    if (!ws) {\n      const built = this.buildWorkspace({ workspace: p.workspace });\n      if (built.error) return { error: built.error };\n      ws = built.ws;\n    }\n    const uri = p.from as ParticipantUri;\n    const now = this.now();\n    const existing = ws.members.get(uri);\n    let tokenVerified = false;\n    let holderVerified = false;\n    let credentialBound = false;\n\n    // SPECIFICATION 6.3: a newcomer joins in the role an admin's invitation\n    // names, else in the role it asks for. The admin role is granted, never\n    // claimed: by an invitation, or to the first member, who is the admin of\n    // a workspace that admits by invitation. Taken by anyone who asked, it\n    // would let an agent drop the workspace's identity profile or revoke a\n    // person's key.\n    const invitation = existing ? undefined : rawInvitation(ws, uri);\n    const asked = typeof p.role === \"string\" && p.role !== \"\" ? p.role : undefined;\n    let role = asked ?? \"participant\";\n    if (!existing) {\n      const first = awaitsFirstMember(ws);\n      if (ws.join_policy === \"invite\" && !invitation && !(first && ADMIN_TYPES.includes(type))) {\n        return { error: rpcError(E.NOT_AUTHORISED, `${uri} has no invitation to this workspace`) };\n      }\n      if (invitation?.role !== undefined) {\n        if (asked === \"admin\" && invitation.role !== \"admin\") {\n          return { error: rpcError(E.NOT_AUTHORISED, \"The admin role is granted by an admin\") };\n        }\n        role = invitation.role;\n      } else if (first && ws.join_policy === \"invite\") {\n        if (asked !== undefined && asked !== \"admin\") {\n          return { error: rpcError(E.PARAMS,\n            \"The first member of a workspace that admits by invitation is its admin\") };\n        }\n        role = \"admin\";\n      } else if (asked === \"admin\" && !first) {\n        return { error: rpcError(E.NOT_AUTHORISED, \"The admin role is granted by an admin\") };\n      }\n    }\n\n    // identity-oidc/1.0 and identity-vc/1.0: where a verifier is configured\n    // and the workspace advertises its profile, a person joins with the\n    // credential it checks. Otherwise a workspace that says its people are\n    // verified would admit one on nobody's word. Where both apply either\n    // will do, since the two coexist (identity-vc/1.0 2).\n    if (type === \"human\") {\n      const oidc = this.options.verifyOidcToken !== undefined && advertises(ws, \"identity-oidc\");\n      const vc = this.options.verifyVc !== undefined && advertises(ws, \"identity-vc\");\n      const presented = (oidc && typeof p.oidc_token === \"string\") || (vc && isObject(p.vc_presentation));\n      if ((oidc || vc) && !presented) {\n        return { error: oidc\n          ? rpcError(E.OIDC_TOKEN_INVALID, vc\n            ? \"An oidc_token or a vc_presentation is required to join as a human participant\"\n            : \"An oidc_token is required to join as a human participant\")\n          : rpcError(E.VC_VP_INVALID, \"A vc_presentation is required to join as a human participant\") };\n      }\n    }\n\n    const member: Member = {\n      uri,\n      type: type as Member[\"type\"],\n      role,\n      joined: now,\n      display_name: p.display_name as string | undefined,\n      capabilities: p.capabilities as Record<string, unknown> | undefined,\n      scopes: p.scopes as string[] | undefined,\n      keys: [],\n      paused: false,\n    };\n\n    // An invitation that names a token subject admits a join carrying a token\n    // for that subject, which only a configured verifier can check.\n    if (invitation?.oidc_sub !== undefined\n        && (this.options.verifyOidcToken === undefined || typeof p.oidc_token !== \"string\")) {\n      return { error: rpcError(E.OIDC_TOKEN_INVALID, \"An oidc_token is required: the invitation names a token subject\") };\n    }\n\n    // identity-oidc/1.0\n    if (this.options.verifyOidcToken && typeof p.oidc_token === \"string\") {\n      const claims = this.options.verifyOidcToken(p.oidc_token);\n      if (claims === null) return { error: rpcError(E.OIDC_TOKEN_INVALID, \"OIDC token invalid\") };\n      // A token binds only to the participant it belongs to. One naming\n      // another participant is refused, and a join under an existing member's\n      // name must carry a token for that member: the same subject, or, for a\n      // member with no verified subject yet, a token naming the member.\n      const boundUri = claims.chap_participant_uri;\n      const sub = typeof claims.sub === \"string\" && claims.sub !== \"\" ? claims.sub : undefined;\n      if (boundUri != null && boundUri !== uri) {\n        return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token is bound to another participant\") };\n      }\n      if (invitation?.oidc_sub !== undefined && sub !== invitation.oidc_sub) {\n        return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token subject does not match the invitation\") };\n      }\n      if (existing) {\n        if (existing.oidc_sub != null) {\n          if (sub !== existing.oidc_sub) {\n            return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token subject does not match the member\") };\n          }\n        } else if (boundUri !== uri) {\n          return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token does not name this member\") };\n        }\n      } else if (type === \"human\" && boundUri !== uri && invitation?.oidc_sub === undefined) {\n        // A provider vouches for its user, and only the token, or an admin's\n        // invitation naming the token's subject, says which participant that\n        // user is. Otherwise any user of the provider takes any free name.\n        return { error: rpcError(E.OIDC_CNF_MISMATCH, \"OIDC token does not name this participant\") };\n      }\n      member.oidc_sub = sub;\n      tokenVerified = true;\n      // A NumericDate may carry a fraction; both coordinators keep whole\n      // seconds, and nothing that is not a finite number.\n      const at = claims.auth_time;\n      if (typeof at === \"number\" && Number.isFinite(at) && Math.abs(at) <= Number.MAX_SAFE_INTEGER) member.oidc_auth_time = Math.floor(at);\n      member.oidc_acr = typeof claims.acr === \"string\" ? claims.acr : undefined;\n      // The token binds the key in its cnf.jwk or, with none, the key whose\n      // thumbprint is its nonce: a client that cannot have the key put in the\n      // token puts its thumbprint in the nonce it asks the identity provider\n      // for. A join that brings another key is refused, so a token taken\n      // from its holder admits no key of the taker's.\n      const cnf = isObject(claims.cnf) ? claims.cnf.jwk : undefined;\n      const bound = credentialKeys(cnf, cnf == null ? claims.nonce : undefined, signingKeys(p.jwks));\n      if (bound === null) return { error: rpcError(E.OIDC_CNF_MISMATCH, \"The join's keys are not the key the token binds\") };\n      if (bound !== undefined) {\n        credentialBound = true;\n        for (const j of bound) member.keys.push({ jwk: j as unknown as KeyRecord[\"jwk\"], kid: j.kid, valid_from: now });\n      }\n    }\n    // identity-vc/1.0\n    if (this.options.verifyVc && isObject(p.vc_presentation)) {\n      const subject = this.options.verifyVc(p.vc_presentation);\n      if (subject === null) return { error: rpcError(E.VC_VP_INVALID, \"VC presentation invalid\") };\n      const holder = [subject.holder, subject.id].find(\n        (h): h is string => typeof h === \"string\" && h !== \"\");\n      // A join under an existing member's name binds a presentation only from\n      // the member's own holder.\n      if (existing && (existing.vc_holder == null || holder !== existing.vc_holder)) {\n        return { error: rpcError(E.VC_HOLDER_BINDING_INVALID, \"Presentation holder does not match the member\") };\n      }\n      member.vc_holder = holder;\n      holderVerified = true;\n      const bound = credentialKeys(subject.cnf_jwk, undefined, signingKeys(p.jwks));\n      if (bound === null) {\n        return { error: rpcError(E.VC_HOLDER_BINDING_INVALID, \"The join's keys are not the key the presentation binds\") };\n      }\n      if (bound !== undefined) {\n        credentialBound = true;\n        for (const j of bound) member.keys.push({ jwk: j as unknown as KeyRecord[\"jwk\"], kid: j.kid, valid_from: now });\n      }\n    }\n\n    // A person a credential verifies signs with a key the credential binds,\n    // or one an invitation pins: keys the join asserts on its own are not\n    // the person's on anyone's word.\n    if (!existing && type === \"human\" && (tokenVerified || holderVerified) && !credentialBound\n        && !invitation?.jwks && signingKeys(p.jwks).length > 0) {\n      return { error: tokenVerified\n        ? rpcError(E.OIDC_CNF_MISMATCH, \"The token binds no key: a person it verifies signs with a key it binds\")\n        : rpcError(E.VC_HOLDER_BINDING_INVALID,\n          \"The presentation binds no key: a person it verifies signs with a key it binds\") };\n    }\n\n    // An invitation that pins keys names the keys the member signs with: the\n    // join's own keys, and a key an identity profile binds, are among them,\n    // and the member holds the pinned keys.\n    const pinned = invitation?.jwks?.keys;\n    if (pinned) {\n      const strays = [...signingKeys(p.jwks), ...member.keys.map((k) => k.jwk as unknown as Record<string, unknown>)]\n        .filter((j) => !pinned.some((k) => sameKey(k as unknown as Record<string, unknown>, j)));\n      if (strays.length) {\n        return { error: rpcError(E.NOT_AUTHORISED, `${uri} joins with keys its invitation does not name`,\n          { kids: [...new Set(strays.map((j) => j.kid))] }) };\n      }\n      member.keys = pinned.map((j) => ({ jwk: j, kid: j.kid, valid_from: now }));\n    }\n\n    const attested = [...member.keys];\n\n    // Self-asserted JWKs are ignored for an identity-bound participant: the\n    // verifier-pinned key is the signing key (proof of possession).\n    if (attested.length === 0) {\n      for (const j of signingKeys(p.jwks)) {\n        if (!member.keys.some(k => k.kid === j.kid)) {\n          member.keys.push({ jwk: j as unknown as KeyRecord[\"jwk\"], kid: j.kid, valid_from: now });\n        }\n      }\n    }\n\n    if (existing) {\n      // A member's keys change through participant.rotate_key, which the old\n      // key signs. A join under the member's name that brings only keys the\n      // member does not hold, and no identity binding one, is refused: the\n      // name is held by other keys, and answering it as joined would leave\n      // its sender holding a key nothing here accepts.\n      if (attested.length === 0) {\n        const keys = signingKeys(p.jwks);\n        const held = keys.some((j) => existing.keys.some((k) => sameKey(k.jwk as unknown as Record<string, unknown>, j)));\n        if (keys.length > 0 && !held) {\n          return { error: rpcError(E.NOT_AUTHORISED,\n            `${uri} is already a member, with other keys; a new key arrives through participant.rotate_key`,\n            { kids: [...new Set(keys.map((j) => j.kid))] }) };\n        }\n      }\n      if (member.oidc_sub !== undefined) existing.oidc_sub = member.oidc_sub;\n      if (member.oidc_auth_time !== undefined) existing.oidc_auth_time = member.oidc_auth_time;\n      if (member.oidc_acr !== undefined) existing.oidc_acr = member.oidc_acr;\n      if (tokenVerified) existing.oidc_acr = member.oidc_acr;\n      if (member.vc_holder !== undefined) existing.vc_holder = member.vc_holder;\n      for (const k of attested) {\n        if (!existing.keys.some(x => x.kid === k.kid)) existing.keys.push(k);\n      }\n      return { result: { joined: true, as: uri } };\n    }\n    // A participant that signs its calls joins with a key: without one it\n    // would hold a name it could never sign for. The key may be its own, or\n    // one an identity profile or an invitation binds.\n    if (this.requiresSignatures(ws) && this.mustSign(ws, type) && member.keys.length === 0) {\n      return { error: rpcError(E.PARAMS, `${uri} must sign in this workspace, and joins with no key`) };\n    }\n    if (made) this.addWorkspace(ws);\n    ws.members.set(uri, member);\n    if (invitation) ws.invitations.delete(uri);\n    return { result: { joined: true, as: uri } };\n  }\n\n  /**\n   * SPECIFICATION 6.3.3: an admin invites a participant. For a URI that is\n   * not a member it records an invitation, which the invitee's join takes\n   * up. For a member that holds no key in force it registers the\n   * invitation's keys: the way back for a member whose keys were all revoked,\n   * or who joined a workspace that requires signatures with none.\n   */\n  private opWorkspaceInvite(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"uri\", \"type\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    for (const f of [\"uri\", \"type\"]) {\n      if (typeof p[f] !== \"string\") return { error: rpcError(E.PARAMS, `${f} must be a string`) };\n    }\n    const bad = paramsError(p, [\n      [\"role\", \"string\"], [\"jwks\", \"object\"], [\"jwks.keys\", \"list\"], [\"oidc_sub\", \"string\"],\n    ]);\n    if (bad) return bad;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    if (rawMember(ws, p.from)!.role !== \"admin\") {\n      return { error: rpcError(E.NOT_AUTHORISED, \"workspace.invite requires the admin role\") };\n    }\n    const uri = p.uri as ParticipantUri;\n    const type = p.type as string;\n    const named = participantError(type, uri, \"uri\");\n    if (named) return named;\n    const role = typeof p.role === \"string\" && p.role !== \"\" ? p.role : undefined;\n    if (role === \"admin\" && !ADMIN_TYPES.includes(type)) {\n      return { error: rpcError(E.PARAMS, \"The admin role is held by a human or a service\") };\n    }\n    const sub = typeof p.oidc_sub === \"string\" ? p.oidc_sub : undefined;\n    if (sub !== undefined && this.options.verifyOidcToken === undefined) {\n      return { error: rpcError(E.PARAMS, \"oidc_sub names a token subject, and this Coordinator has no token verifier\") };\n    }\n    let pinned: Array<Jwk & Record<string, unknown>> | undefined;\n    if (p.jwks != null) {\n      pinned = signingKeys(p.jwks) as unknown as Array<Jwk & Record<string, unknown>>;\n      if (pinned.length === 0) return { error: rpcError(E.PARAMS, \"jwks names no key: each key needs a kid\") };\n    }\n    const now = this.now();\n    const member = ws.members.get(uri);\n    if (member) {\n      // A member's keys otherwise change through participant.rotate_key,\n      // which a key it holds signs.\n      if (member.keys.some((k) => inForce(k, now))) {\n        return { error: rpcError(E.PARAMS,\n          `${uri} is a member and holds a key in force; its keys change through participant.rotate_key`) };\n      }\n      if (!pinned) {\n        return { error: rpcError(E.PARAMS, `${uri} is a member; an invitation for a member registers the keys its jwks names`) };\n      }\n      // Where a token verifier is configured, a person's key is the one their\n      // token binds, and they register a new one by joining again with it.\n      // Registered here, it would be a key the admin chose, and the admin\n      // could revoke a person's keys and sign as them.\n      if ((this.options.verifyOidcToken !== undefined && (member.type === \"human\" || member.oidc_sub !== undefined))\n          || (this.options.verifyVc !== undefined && (member.type === \"human\" || member.vc_holder !== undefined))) {\n        return { error: rpcError(E.PARAMS,\n          `${uri} registers a new key by joining again with a token that binds it; an invitation does not register a person's keys here`) };\n      }\n      if ((role !== undefined && role !== member.role) || (sub !== undefined && sub !== member.oidc_sub)) {\n        return { error: rpcError(E.PARAMS, `${uri} is a member; an invitation for a member registers keys and changes nothing else`) };\n      }\n      // A kid names one key for good: a signature naming a revoked kid is\n      // refused whatever key holds it now.\n      const reused = pinned.find((j) => member.keys.some((k) => k.kid === j.kid));\n      if (reused) return { error: rpcError(E.PARAMS, `Key ${reused.kid} was ${uri}'s; a new key takes a new kid`) };\n      for (const j of pinned) member.keys.push({ jwk: j, kid: j.kid, valid_from: now });\n      return { result: { invited: true, uri, registered: pinned.map((j) => j.kid) } };\n    }\n    // Where a token verifier is configured, a person's keys arrive with the\n    // token or presentation they join with. Pinned here, they would be keys\n    // the admin chose, which a join whose token binds no key would take up,\n    // and the admin could sign as the person.\n    if (pinned && (type === \"human\" || sub !== undefined)\n        && (this.options.verifyOidcToken !== undefined || this.options.verifyVc !== undefined)) {\n      return { error: rpcError(E.PARAMS,\n        `${uri} joins with a token that binds its key; an invitation does not register a person's keys here`) };\n    }\n    const invitation: Invitation = {\n      uri, type: type as Invitation[\"type\"], invited_by: p.from as ParticipantUri, invited_at: now,\n    };\n    if (role !== undefined) invitation.role = role;\n    if (pinned) invitation.jwks = { keys: pinned };\n    if (sub !== undefined) invitation.oidc_sub = sub;\n    ws.invitations.set(uri, invitation);\n    return { result: { invited: true, uri } };\n  }\n\n  private opParticipantLeave(p: Record<string, unknown>): ReturnType<Handler> {\n    // Self-removal: deletes the caller's own `from`. Under requireSignatures the\n    // signature binds `from`, so a member can only remove itself; evicting\n    // another member is an admin operation, not this. Unsigned, a spoofed\n    // `from` is the transport's responsibility.\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    // A member that left and joined again would come back unpaused, so a\n    // paused member stays until another member lifts its pause.\n    if (rawMember(ws, p.from)?.paused) {\n      return { error: rpcError(E.NOT_AUTHORISED, \"A paused participant does not leave until another member lifts its pause\") };\n    }\n    ws.members.delete(p.from as string);\n    return { result: { left: true } };\n  }\n\n  private opTaskCreate(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"kind\", \"input\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    // A param of the wrong type is refused, so both references read the same\n    // task from the same call.\n    const bad = paramsError(p, [\n      [\"assignee\", \"string\"], [\"to\", \"string\"], [\"mode\", \"string\"], [\"review_required\", \"boolean\"],\n      [\"routing_hints\", \"object\"], [\"idempotency_key\", \"string\"],\n    ]);\n    if (bad) return bad;\n    // The keys live in a plain object, where these names belong to the\n    // object itself: \"__proto__\" was never stored, so a retry made a second\n    // task here and found the first in Python.\n    if (RESERVED_KEYS.includes(p.idempotency_key as string)) {\n      return { error: rpcError(E.PARAMS, \"idempotency_key must not be __proto__, constructor or prototype\") };\n    }\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const assignee = (p.assignee as string) || (p.to as string);\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Assignee not in workspace\") };\n    }\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n\n    // modes/1.0 ceiling check.\n    const requestedMode = ((p.mode as Mode) || ws.mode);\n    if (!modeLE(requestedMode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${requestedMode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n\n    const taskId = this.ids.taskId();\n    const now = this.now();\n    const task: Task = {\n      id: taskId,\n      kind: p.kind as string,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: p.input as Record<string, unknown>,\n      created_at: now,\n      updated_at: now,\n      deadline: p.deadline as string | undefined,\n      mode: requestedMode,\n      routing_hints: p.routing_hints as Task[\"routing_hints\"],\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\" }],\n      paused: false,\n    };\n\n    // modes/1.0: trial mode forces review\n    // modes/1.0: trial forces review, but only when the workspace opted into\n    // modes/1.0. mode is inert without the profile.\n    if (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && task.mode === \"trial\") task.review_required = true;\n    else if (\"review_required\" in p) task.review_required = !!p.review_required;\n\n    ws.tasks.set(taskId, task);\n    if (typeof p.idempotency_key === \"string\") {\n      ws.idempotency_keys[p.idempotency_key] = taskId;\n      this.markKey(ws, p.idempotency_key);\n      const keys = Object.keys(ws.idempotency_keys);\n      if (keys.length > MAX_IDEMPOTENCY_KEYS) {\n        delete ws.idempotency_keys[keys[0]];\n        this.markKey(ws, keys[0]);\n      }\n    }\n    return { result: { task_id: taskId, state: \"created\" } };\n  }\n\n  private opTaskUpdate(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // The state is required, and is written into the refusal below.\n    if (typeof p.state !== \"string\") return { error: rpcError(E.PARAMS, \"state must be a string\") };\n    const newState = p.state as Task[\"state\"];\n    // Pausing and resuming both belong to control/1.0. A Core-only workspace\n    // that could pause through task.update would hold a task nothing it\n    // advertises can lift. A review opens with review.request, or with\n    // task.complete on a task that requires one: task.update into\n    // review_requested would leave the task under review with no review for a\n    // decision to act on.\n    const legal: Record<string, string[]> = {\n      created:          [\"in_progress\", \"declined\"],\n      in_progress:      [\"in_progress\", \"completed\", \"declined\"],\n      review_requested: [\"in_progress\"],\n      paused:           [\"cancelled\"],\n    };\n    if (!legal[task.state]?.includes(newState)) {\n      return { error: rpcError(E.PARAMS, `Illegal transition ${task.state} -> ${newState}`) };\n    }\n    // task.complete opens a review, and does not complete, when one is\n    // required or when the task holds a review already. task.update reaches\n    // the same state by another route and carries no output, so completing\n    // here would record a finished task with nothing reviewed and no decision\n    // on the chain.\n    if (newState === \"completed\" && reviewRequired(ws, task)) {\n      return { error: rpcError(E.PARAMS,\n        \"This task requires review. Submit the output with task.complete, which opens the review; a reviewer decision completes it.\") };\n    }\n    if (newState === \"completed\" && task.review) {\n      return { error: rpcError(E.PARAMS,\n        \"This task holds a review. Submit the output with task.complete, which opens a new round; a reviewer decision completes it.\") };\n    }\n    // A review once opened is decided. Its authors may take their work back\n    // to revise it, and nobody else; and a task whose review no decision has\n    // closed is not declined around it.\n    if (task.state === \"review_requested\" && !task.review!.authors.includes(p.from as ParticipantUri)) {\n      return { error: rpcError(E.NOT_AUTHORISED,\n        \"Only the authors of the work under review take it back from review\") };\n    }\n    if (newState === \"cancelled\" && openRequiredReviewAuthors(ws, task).includes(p.from as ParticipantUri)) {\n      return { error: rpcError(E.NOT_AUTHORISED,\n        \"The authors of the work under review cannot end its review without a decision\") };\n    }\n    if (newState === \"declined\" && task.review && !task.review.decisions.some((d) => d.kind === \"reject\")) {\n      return { error: rpcError(E.PARAMS,\n        \"This task holds a review no decision has closed; a reviewer's decision ends it\") };\n    }\n    if (newState === \"declined\" && !task.review && openRequiredReviewAuthors(ws, task).length > 0) {\n      return { error: rpcError(E.PARAMS,\n        \"This task carries on a review no decision has closed; completing it opens the review a reviewer decides\") };\n    }\n    task.state = newState;\n    task.updated_at = this.now();\n    task.history.push({\n      ts: task.updated_at, from: p.from as ParticipantUri,\n      state: newState, note: p.progress_note as string | undefined,\n    });\n    return { result: { state: newState } };\n  }\n\n  private opTaskComplete(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // Completion is only legal from an active, non-terminal, non-paused state.\n    // An allowlist (rather than a denylist of terminal states) is safer: any\n    // state not listed -- cancelled, superseded, paused, already\n    // completed/declined, abstained, escalated -- is rejected, so completion\n    // can neither revive a terminated task nor bypass a pause.\n    if (task.state !== \"created\" && task.state !== \"in_progress\") {\n      return { error: rpcError(E.PARAMS, `Cannot complete task in state: ${task.state}`) };\n    }\n    if (p.confidence != null && typeof p.confidence !== \"number\" && typeof p.confidence !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"confidence must be a number or a string\") };\n    }\n    // The assignee does the work a person reviews. A completion from anyone\n    // else would make them an author, and an author cannot decide: routing a\n    // task to a reviewer and completing it would take that reviewer off the\n    // review.\n    const required = reviewRequired(ws, task);\n    if (required && p.from !== task.assignee) {\n      return { error: rpcError(E.NOT_AUTHORISED, \"Only the assignee completes a task that requires review\") };\n    }\n    // review/1.0 S3.1: task.complete on a task whose review is required opens a\n    // review implicitly and does not complete, and so does task.complete on a\n    // task that holds a review from an earlier round. The submitted output\n    // becomes the artefact under review; only a reviewer decision (decide.*)\n    // then takes the task to completed. Without this a review_required task\n    // would reach completed with unreviewed output and no decision, and a task\n    // taken back from review with task.update would complete with none.\n    if (required || task.review) {\n      const now = this.now();\n      // The assignee and the completer made this artefact, and neither may\n      // decide it.\n      const authors = authorsOf(task, p.from);\n      let note = OPENED_ON_COMPLETE;\n      if (!task.review) {\n        // review_required means a person has to see this. The producer must\n        // not satisfy its own review, and neither must another agent: an agent\n        // approving an agent leaves a decide.approve on the chain that reads\n        // as human oversight and is not. So the implicit review is addressed\n        // to the human members other than the authors, and where there are\n        // none the completion is refused: a review no person can decide would\n        // never close.\n        const eligible = [...rawEntries(ws.members)]\n          .filter(([uri, member]) => !authors.includes(uri) && member.type === \"human\")\n          .map(([uri]) => uri);\n        if (eligible.length === 0) {\n          return { error: rpcError(E.NOT_AUTHORISED,\n            \"Task requires review but has no eligible human reviewer (needs a human member other than its assignee and completer)\") };\n        }\n        task.review = { requested_at: now, requested_to: eligible as ParticipantUri[], rule: ws.review_rule ?? \"any_one_approves\",\n                        decisions: [], authors, acknowledgements: [] };\n      } else {\n        // The task held a review already: it went back to in_progress through\n        // task.update or a reject with request_revision, and this completion\n        // submits a new artefact. A decision counts only for the artefact it\n        // was made on, so the new round starts with no decisions; kept, an\n        // approval of the earlier artefact would count towards the rule on\n        // this one. The reviewers and the rule stay, so a revision cannot\n        // weaken the review. The authors of the new artefact are left out of\n        // the reviewers, and so is any member who is not a person where the\n        // review is required; where nobody remains, the completion is refused.\n        // The authors of the earlier rounds stay authors of this one: the work\n        // is theirs as well, whoever resubmits it.\n        const roundAuthors = unionOf(task.review.authors, authors);\n        const reviewers = task.review.requested_to.filter((r) => !roundAuthors.includes(r)\n          && !(required && rawMember(ws, r) !== undefined && rawMember(ws, r)!.type !== \"human\"));\n        if (reviewers.length === 0) {\n          return { error: rpcError(E.NOT_AUTHORISED,\n            \"No reviewer of this task remains once the authors of the work are left out\") };\n        }\n        task.review = { ...task.review, requested_at: now, requested_to: reviewers, decisions: [],\n                        authors: roundAuthors, acknowledgements: [] };\n        note = NEW_ROUND_ON_COMPLETE;\n      }\n      task.pending_artefact = p.output;\n      task.state = \"review_requested\";\n      task.updated_at = now;\n      task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\", note });\n      return { result: { state: \"review_requested\", review_id: task.id } };\n    }\n    task.output = p.output;\n    if (p.confidence != null) task.confidence = p.confidence as number | string;\n    task.state = \"completed\";\n    task.updated_at = this.now();\n    task.history.push({ ts: task.updated_at, from: p.from as ParticipantUri, state: \"completed\" });\n    return { result: { state: \"completed\" } };\n  }\n\n  private opAuditRead(p: Record<string, unknown>): ReturnType<Handler> {\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    if (this.options.requireReadMembership) {\n      const notMember = this.requireMember(ws, p.from);\n      if (notMember) return notMember;\n    }\n    // A range or filter that is not an object reads as none. Within one, a\n    // field the read compares or slices by must be of its type.\n    const bad = paramsError(p, [\n      [\"range.from_seq\", \"integer\"], [\"range.to_seq\", \"integer\"],\n      [\"filter.method\", \"string\"], [\"filter.from\", \"string\"], [\"filter.task_id\", \"string\"],\n    ]);\n    if (bad) return bad;\n    const range = (isObject(p.range) ? p.range : {}) as { from_seq?: number; to_seq?: number };\n    const filter = (isObject(p.filter) ? p.filter : {}) as {\n      method?: string; from?: string; task_id?: string; outcome?: unknown;\n    };\n    if (filter.outcome != null && filter.outcome !== \"accepted\" && filter.outcome !== \"refused\") {\n      return { error: rpcError(E.PARAMS, \"filter.outcome must be 'accepted' or 'refused'\") };\n    }\n    const fromSeq = range.from_seq ?? 0;\n    const toSeq = range.to_seq ?? ws.audit.length;\n    const out: unknown[] = [];\n    for (const entry of ws.audit.slice(fromSeq, toSeq)) {\n      // Filters read the call an entry records, accepted or refused, and\n      // `outcome` narrows to one kind.\n      const refused = entry.outcome != null;\n      if (filter.outcome === \"accepted\" && refused) continue;\n      if (filter.outcome === \"refused\" && !refused) continue;\n      const call = entryCall(entry) ?? ({} as Envelope);\n      const ep = (call.params ?? {}) as Record<string, unknown>;\n      if (filter.method && call.method !== filter.method) continue;\n      if (filter.from && ep.from !== filter.from) continue;\n      if (filter.task_id) {\n        let taskId = ep.task_id;\n        if (call.method === \"whisper.answer\") {\n          const prompt = ws.whispers.get(ep.whisper_id as string);\n          taskId = prompt ? (prompt as { task_id?: string }).task_id : undefined;\n        }\n        if (taskId !== filter.task_id) continue;\n      }\n      const item: Record<string, unknown> = { seq: entry.seq, arrived: entry.arrived };\n      if (refused) {\n        item.request = entry.request;\n        item.outcome = entry.outcome;\n      } else {\n        item.envelope = entry.envelope;\n      }\n      if (entry.prev_hash) item.prev_hash = entry.prev_hash;\n      out.push(item);\n    }\n    // The next entry to read: the end of the range, or the end of the log\n    // where the range runs past it, so a reader paging forward meets the\n    // entries written after this read.\n    return { result: { entries: out, next_seq: Math.min(toSeq, ws.audit.length) } };\n  }\n\n  // ==========================================================\n  //   review/1.0 handlers\n  // ==========================================================\n\n  private opReviewRequest(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"artefact\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    // task.complete refuses a task that has been stopped, so that a completion\n    // \"can neither revive a terminated task nor bypass a pause\". review.request\n    // creates the same kind of state and had no such check, so it revived\n    // cancelled and superseded tasks and pulled paused ones back into play. The\n    // same three states are refused here.\n    //\n    // `completed` is deliberately still allowed. Requesting review on a\n    // completed task is how every framework bridge submits a draft, and\n    // 0.2.12's `review_required` is the route away from that, not this.\n    if (REVIEW_REQUEST_STOPPED.includes(task.state)) {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Cannot request review for task in state: ${task.state}`) };\n    }\n    const to = p.to;\n    if (to != null && typeof to !== \"string\"\n        && !(Array.isArray(to) && to.every((r) => typeof r === \"string\"))) {\n      return { error: rpcError(E.PARAMS, \"to must be a string or a list of strings\") };\n    }\n    const reviewers: string[] = Array.isArray(to) ? (to as string[]) : typeof to === \"string\" ? [to] : [];\n    if (!reviewers.length) return { error: rpcError(E.PARAMS, \"review.request needs 'to'\") };\n    const bad = paramsError(p, [[\"rule\", \"string\"]]);\n    if (bad) return bad;\n    const now = this.now();\n    const declaredRule = p.rule as string | undefined;\n    const rule = declaredRule || \"any_one_approves\";\n    if (!reviewRuleSupported(rule)) {\n      return { error: rpcError(E.PARAMS, `Unsupported review rule ${JSON.stringify(rule)}: review/1.0 supports any_one_approves, all_approve, quorum:<n>`) };\n    }\n\n    // A review already open on this task. Replacing the artefact underneath\n    // it would let a reviewer decide on content they never saw, and would\n    // discard decisions already cast while their envelopes remain in the\n    // audit log, so a quorum could appear to have been assembled across two\n    // different artefacts. Re-requesting the *same* artefact is a different\n    // thing: it widens the reviewer set on an open review, which is legitimate\n    // and preserves what has been decided so far.\n    const open = task.state === \"review_requested\" ? task.review : undefined;\n    if (open) {\n      // An artefact left out reads as null, as it does in Python and in a\n      // store's copy.\n      if (contentHash(task.pending_artefact ?? null) !== contentHash(p.artefact ?? null)) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          \"A review is already open on this task with different content. \" +\n          \"Decide, abstain, escalate or cancel it before requesting review of a new artefact.\",\n        ) };\n      }\n      // Only a rule the caller actually supplied can be a change. Comparing\n      // the resolved default instead refused the documented\n      // widen-the-reviewer-set request whenever `rule` was omitted.\n      if (declaredRule != null && declaredRule !== open.rule) {\n        return { error: rpcError(\n          E.REVIEW_ALREADY_OPEN,\n          `Cannot change the decision rule of an open review (currently ${open.rule})`,\n        ) };\n      }\n    }\n\n    // Where a person's review is required, the work's authors do not choose\n    // who reviews it, and the reviewers a request names, opening the review\n    // or widening it, are people other than the authors, each named. Without\n    // this the agent whose work a required review holds could add itself, or\n    // a person it joined, or any member at all through a broadcast scope,\n    // and approve its own work. An explicit review of a task that does not\n    // require one keeps its own `to`, so a deliberate agent-reviews-agent\n    // flow is still available.\n    const authors = open ? open.authors\n      : unionOf(task.review ? task.review.authors : [], authorsOf(task, lastCompleter(task)));\n    if (reviewRequired(ws, task)) {\n      // The review a task requires opens on task.complete, from the assignee,\n      // under the workspace's rule. Opened here, by anyone, it would take an\n      // artefact, a rule and reviewers its requester chose, and a requester\n      // who is not an author could approve work it supplied itself, or reopen\n      // a task a review already completed.\n      if (!open) {\n        return { error: rpcError(E.NOT_AUTHORISED,\n          \"This task requires a person's review, which opens on task.complete; review.request only adds reviewers to it once it is open\") };\n      }\n      if (authors.includes(p.from as ParticipantUri)) {\n        return { error: rpcError(E.NOT_AUTHORISED, \"The author of the work under review cannot request its review\") };\n      }\n      const scope = reviewers.find(isScope);\n      if (scope !== undefined) {\n        return { error: rpcError(E.PARAMS,\n          `A review that requires a person names its reviewers, and ${scope} is an address scope`) };\n      }\n      for (const r of reviewers) {\n        if (authors.includes(r)) {\n          return { error: rpcError(E.NOT_AUTHORISED, `The author of the work under review cannot review it: ${r}`) };\n        }\n        const member = rawMember(ws, r);\n        if (member && member.type !== \"human\") {\n          return { error: rpcError(E.NOT_AUTHORISED, `This task requires a person's review: ${r} is not a human member`) };\n        }\n      }\n    }\n\n    if (open) {\n      // Union, preserving order and the decisions already recorded.\n      for (const r of reviewers) {\n        if (!open.requested_to.includes(r)) open.requested_to.push(r);\n      }\n      if (p.deadline != null) open.deadline = p.deadline as string;\n      task.updated_at = now;\n      return { result: {\n        state: \"review_requested\",\n        review_id: task.id,\n        amended: true,\n        requested_to: [...open.requested_to],\n      } };\n    }\n\n    task.state = \"review_requested\";\n    task.updated_at = now;\n    task.review = {\n      requested_at: now,\n      requested_to: reviewers,\n      rule,\n      deadline: p.deadline as string | undefined,\n      decisions: [],\n      authors,\n      acknowledgements: [],\n    };\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"review_requested\" });\n    task.pending_artefact = p.artefact;\n    return { result: { state: \"review_requested\", review_id: task.id } };\n  }\n\n  /**\n   * review/1.0 S3.6: a reviewer says they have begun the open review. Only\n   * someone who may decide it can, so the log's record of who took a review\n   * up, and when, names reviewers alone. It changes nothing else: the review\n   * stays open and the acknowledgement counts towards no rule.\n   */\n  private opReviewAcknowledge(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(ws, task, p.from);\n    if (notReviewer) return notReviewer;\n    const review = task.review!;\n    if (review.acknowledgements.some((a) => a.reviewer === p.from)) {\n      return { error: rpcError(E.PARAMS, \"Already acknowledged in this round\") };\n    }\n    review.acknowledgements.push({ reviewer: p.from as ParticipantUri, ts: this.now() });\n    return { result: { acknowledged: true, requested_at: review.requested_at } };\n  }\n\n  /**\n   * Verify an optional `approved_artefact_digest` against the artefact under\n   * review (review/1.0 S3.2).\n   *\n   * The digest sits in params, so it is inside whatever the envelope signature\n   * covers: the decision then attests the content the reviewer saw rather than\n   * a task reference, and a relying party can check it without trusting the\n   * Coordinator that produced it. Absent, behaviour is exactly as before.\n   *\n   * On mismatch nothing is recorded and no state changes, so a client that\n   * computes the wrong digest refuses only its own decision.\n   */\n  private checkArtefactDigest(p: Record<string, unknown>, task: Task): ReturnType<Handler> | null {\n    const declared = p.approved_artefact_digest;\n    if (declared === undefined || declared === null) return null;\n    if (typeof declared !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"approved_artefact_digest must be a string\") };\n    }\n    // A null output is no artefact, as it is in the Python reference.\n    if (task.pending_artefact === undefined || task.pending_artefact === null) {\n      return { error: rpcError(E.PARAMS, \"No artefact under review to bind a digest to\") };\n    }\n    const actual = contentHash(task.pending_artefact);\n    if (declared !== actual) {\n      return { error: rpcError(\n        E.SIG_ARTEFACT_DIGEST_MISMATCH,\n        \"approved_artefact_digest does not match the artefact under review\",\n        { declared, actual },\n      ) };\n    }\n    return null;\n  }\n\n  private opDecide(p: Record<string, unknown>, kind: \"approve\" | \"reject\"): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const bad = paramsError(p, [[\"tags\", \"strings\"], [\"request_revision\", \"boolean\"]]);\n    if (bad) return bad;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(ws, task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind,\n      ts: now,\n      comment: p.comment as string | undefined,\n      tags: p.tags as string[] | undefined,\n    });\n    if (kind === \"approve\") {\n      // Complete only when the rule's approval predicate is met; otherwise the\n      // approval is recorded and the task stays review_requested.\n      if (reviewSatisfied(task.review!)) {\n        task.output = task.pending_artefact;\n        task.state = \"completed\";\n      }\n    } else {\n      task.state = p.request_revision ? \"in_progress\" : \"declined\";\n    }\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: task.state });\n    return { result: { state: task.state } };\n  }\n\n  private opDecideOverride(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"diff\", \"rationale\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const bad = paramsError(p, [[\"tags\", \"strings\"], [\"policy_refs\", \"strings\"]]);\n    if (bad) return bad;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(ws, task, p.from);\n    if (notReviewer) return notReviewer;\n    const digestError = this.checkArtefactDigest(p, task);\n    if (digestError) return digestError;\n    // The override is of the artefact under review; use the coordinator's\n    // record, not a caller-supplied \"before\" that could be fabricated.\n    const base = task.pending_artefact;\n    if (base === undefined || base === null) return { error: rpcError(E.PARAMS, \"No base artefact for override\") };\n    let applied: unknown;\n    try {\n      applied = applyJsonPatch(base, p.diff as never, {\n        maxStringBytes: this.options.maxEnvelopeBytes ?? DEFAULT_MAX_ENVELOPE_BYTES,\n      });\n    } catch (e) {\n      const msg = e instanceof Error ? e.message : String(e);\n      return { error: rpcError(E.PATCH_FAILED, msg) };\n    }\n    const now = this.now();\n    const id = this.ids.artefactId();\n    const override: OverrideArtefact = {\n      id,\n      task_id: task.id,\n      reviewer: p.from as ParticipantUri,\n      based_on_artefact: base,\n      diff: p.diff as never,\n      result: applied,\n      rationale: p.rationale as string,\n      tags: (p.tags as string[]) ?? [],\n      policy_refs: (p.policy_refs as string[]) ?? [],\n      ts: now,\n      logical_id: p.logical_id as string | undefined,\n      instance_id: p.instance_id as string | undefined,\n      intent_preserved: p.intent_preserved as boolean | undefined,\n    };\n    ws.overrides.set(id, override);\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"override\",\n      ts: now,\n      tags: override.tags,\n      override_artefact_id: id,\n    });\n    task.output = applied;\n    task.state = \"completed\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"completed\", note: \"override applied\" });\n    return { result: { state: \"completed\", override_artefact_id: id, applied } };\n  }\n\n  private opAbstainDeclare(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"task_id\", \"reason\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const bad = paramsError(p, [[\"category\", \"string\"]]);\n    if (bad) return bad;\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const task = ws.tasks.get(p.task_id as string);\n    if (!task) return { error: rpcError(E.PARAMS, \"Unknown task\") };\n    if (task.state !== \"review_requested\") {\n      return { error: rpcError(E.NOT_REVIEWABLE, `Task not awaiting review: ${task.state}`) };\n    }\n    const notReviewer = this.requireReviewer(ws, task, p.from);\n    if (notReviewer) return notReviewer;\n    const now = this.now();\n    task.review!.decisions.push({\n      reviewer: p.from as ParticipantUri,\n      kind: \"abstain\",\n      ts: now,\n      comment: p.reason as string,\n      abstain_category: (p.category as string) || \"other\",\n    });\n    task.state = \"abstained\";\n    task.updated_at = now;\n    task.history.push({ ts: now, from: p.from as ParticipantUri, state: \"abstained\", note: p.reason as string });\n    return { result: { state: \"abstained\" } };\n  }\n\n  private opEscalateRaise(p: Record<string, unknown>): ReturnType<Handler> {\n    const miss = missing(p, [\"workspace\", \"from\", \"original_task_id\", \"new_task\"]);\n    if (miss) return { error: rpcError(E.PARAMS, `Missing field: ${miss}`) };\n    const ws = this.workspaces.get(p.workspace as string);\n    if (!ws) return { error: rpcError(E.PARAMS, \"Unknown workspace\") };\n    const notMember = this.requireMember(ws, p.from);\n    if (notMember) return notMember;\n    const origId = p.original_task_id;\n    const orig = typeof origId === \"string\" ? ws.tasks.get(origId) : undefined;\n    if (!orig) return { error: rpcError(E.PARAMS, \"Unknown original task\") };\n    if (orig.state === \"completed\" || orig.state === \"cancelled\" || orig.state === \"superseded\") {\n      return { error: rpcError(E.PARAMS, `Cannot escalate a terminal task: ${orig.state}`) };\n    }\n    if (p.new_task === null || typeof p.new_task !== \"object\" || Array.isArray(p.new_task)) {\n      return { error: rpcError(E.PARAMS, \"new_task must be an object\") };\n    }\n    const nt = p.new_task as Record<string, unknown>;\n    const bad = paramsError(p, [[\"new_task.kind\", \"string\"]]);\n    if (bad) return bad;\n    const assignee = nt.assignee;\n    if (typeof assignee !== \"string\" || !ws.members.has(assignee)) {\n      return { error: rpcError(E.PARAMS, \"Escalation assignee not in workspace\") };\n    }\n    const named = nt.mode;\n    if (named !== undefined && named !== null && typeof named !== \"string\") {\n      return { error: rpcError(E.PARAMS, \"new_task.mode must be a string\") };\n    }\n    // The successor is a created task, so it meets the checks task.create and\n    // control.supersede apply: its assignee must not be paused, and its mode,\n    // the one new_task names or else the original's, must be within the\n    // ceiling in force now. Naming a lower mode is how work is escalated\n    // after the ceiling has been lowered.\n    if (ws.members.get(assignee)!.paused) {\n      return { error: rpcError(E.CONTROL_WORKSPACE_PAUSED, `Assignee ${assignee} is paused`) };\n    }\n    const mode = ((named as Mode | null | undefined) || orig.mode) as Mode;\n    if (!modeLE(mode, ws.mode_ceiling)) {\n      return { error: rpcError(E.MODE_CEILING_EXCEEDED,\n        `Requested mode ${mode} exceeds ceiling ${ws.mode_ceiling}`) };\n    }\n    const now = this.now();\n    const newId = this.ids.taskId();\n    const newTask: Task = {\n      id: newId,\n      kind: (nt.kind as string) || orig.kind,\n      state: \"created\",\n      assignee,\n      delegator: p.from as ParticipantUri,\n      input: (nt.input as Record<string, unknown>) ?? {},\n      created_at: now,\n      updated_at: now,\n      mode,\n      supersedes: orig.id,\n      history: [{ ts: now, from: p.from as ParticipantUri, state: \"created\", note: `escalated from ${orig.id}` }],\n      paused: false,\n    };\n    // Escalating hands the work on and keeps its review. The successor\n    // requires review when the original did or held a review, since a review\n    // once opened is decided, and a trial task forces review under modes/1.0\n    // as it does at task.create.\n    if (orig.review_required || orig.review !== undefined\n        || (ws.profiles.some(pr => pr.startsWith(\"modes/\")) && newTask.mode === \"trial\")) {\n      newTask.review_required = true;\n    }\n    // Whoever made the work it carries on is an author of its review too, so\n    // handing the work on does not make its author a reviewer of it.\n    newTask.prior_authors = successorAuthors(orig, p.from);\n    ws.tasks.set(newId, newTask);\n    orig.state = \"escalated\";\n    orig.updated_at = now;\n    orig.superseded_by = newId;\n    orig.history.push({ ts: now, from: p.from as ParticipantUri, state: \"escalated\", note: `-> ${newId}` });\n    return { result: { new_task_id: newId, escalated_from: orig.id } };\n  }\n}\n\nfunction memberToDict(m: Member): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    uri: m.uri, type: m.type, role: m.role, joined: m.joined,\n  };\n  // Empty capabilities and scopes are left out, as the Python reference\n  // leaves them out.\n  if (m.display_name) out.display_name = m.display_name;\n  if (m.capabilities && Object.keys(m.capabilities).length) out.capabilities = m.capabilities;\n  if (m.scopes?.length) out.scopes = m.scopes;\n  if (m.keys.length) {\n    out.jwks = { keys: m.keys.filter(k => !k.revoked_at && !k.valid_until).map(k => k.jwk) };\n    out.key_history = m.keys;\n  }\n  if (m.paused) out.paused = true;\n  if (m.oidc_sub) out.oidc_sub = m.oidc_sub;\n  if (m.vc_holder) out.vc_holder = m.vc_holder;\n  return out;\n}\n","/**\n * Default routing policy factory.\n *\n * Returns a partial CoordinatorOptions configured with the three\n * routing hooks (routingPolicy, reviewDepthPolicy, escalationPolicy)\n * that the playground and demo use out of the box. Operators can\n * override individual hooks by passing their own functions in\n * CoordinatorOptions.\n *\n * The defaults shipped with the Coordinator (in profiles/routing.ts)\n * apply the same review-depth and escalation rules. Routing differs: this\n * routing policy takes the first candidate as given, so a first candidate\n * who is not a member is refused with -32510 and one who is paused with\n * -32063, where the built-in default passes over both. This factory exists\n * so that the legacy call site can keep using:\n *\n *   new Coordinator({ ...makeDefaultPolicy(SENIOR_URI), ... })\n *\n * The seniorTarget argument is the URI auto-escalation routes to\n * when no other target is supplied.\n */\nimport type {\n  EscalationPolicyFn,\n  ReviewDepthPolicyFn,\n  RoutingPolicyFn,\n  CoordinatorOptions,\n} from \"./coordinator.js\";\nimport { confidenceOf, criticalityOf } from \"./profiles/routing.js\";\n\nexport function makeDefaultPolicy(seniorTarget: string): Pick<CoordinatorOptions,\n  \"routingPolicy\" | \"reviewDepthPolicy\" | \"escalationPolicy\"> {\n\n  const routingPolicy: RoutingPolicyFn = (task, candidates) => {\n    const eligible = candidates;  // delegate elig check to coordinator\n    return {\n      selected: eligible[0],\n      rationale: {\n        policy_id: \"default\",\n        hints_used: Object.keys(task.routing_hints ?? {}),\n        summary: \"default policy: first eligible candidate\",\n        alternatives_considered: eligible.slice(1).map(c => ({\n          candidate: c, reason_excluded: \"not first eligible\",\n        })),\n      },\n    };\n  };\n\n  const reviewDepthPolicy: ReviewDepthPolicyFn = (_task, hints) => {\n    const conf = confidenceOf(hints);\n    const r = criticalityOf(hints);\n    if (r >= 3) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=critical: full review\" }};\n    if (r === 2 && conf < 0.7) return { depth: \"full\",\n      rationale: { policy_id: \"default\", summary: \"criticality=high and confidence<0.7: full review\" }};\n    if (r === 0 && conf >= 0.95) return { depth: \"skip\",\n      rationale: { policy_id: \"default\", summary: \"very low criticality + very high confidence: skip\" }};\n    if (r <= 1 && conf >= 0.85) return { depth: \"spot_check\", sampling_probability: 0.10,\n      rationale: { policy_id: \"default\", summary: \"low criticality + high confidence: 10% sample\" }};\n    return { depth: \"spot_check\", sampling_probability: 0.25,\n      rationale: { policy_id: \"default\", summary: \"default mid-confidence: 25% sample\" }};\n  };\n\n  const escalationPolicy: EscalationPolicyFn = (_task, hints) => {\n    const conf = confidenceOf(hints);\n    const r = criticalityOf(hints);\n    const escalate = (r >= 3) || (r >= 2 && conf < 0.6);\n    return {\n      escalate,\n      to: escalate ? seniorTarget : undefined,\n      triggered_rule: {\n        rule_id: \"default-auto-esc\",\n        summary: \"criticality=critical OR (criticality>=high AND confidence<0.6)\",\n        hints_used: [\"criticality\", \"confidence\"],\n      },\n    };\n  };\n\n  return { routingPolicy, reviewDepthPolicy, escalationPolicy };\n}\n","/**\n * @brightbeamai/chap-coordinator/transports/wrap\n *\n * Inward integration helpers: turn an external tool/agent event into\n * a CHAP envelope landing in a workspace's audit log. Library\n * counterpart to the patterns described in\n * ``integrations/CHAP-with-MCP.md`` and ``integrations/CHAP-with-A2A.md``.\n *\n * The outward transports let external clients drive a CHAP workspace.\n * These helpers go the other direction: when work has already\n * happened outside CHAP, wrap it so the audit log carries a faithful,\n * citable record.\n *\n * Spec target: CHAP 0.3. MCP 2026-07-28. A2A 1.0.\n */\n\nimport { contentHash } from \"../canonical.js\";\nimport type { Coordinator } from \"../coordinator.js\";\n\nexport { contentHash } from \"../canonical.js\";\n\nexport interface WrapMcpToolCallOptions {\n  /** Participant URI making the call. Must already be a workspace member. */\n  caller: string;\n  /** MCP tool name, e.g. ``\"github.create_issue\"``. */\n  tool: string;\n  /** Arguments passed to the MCP tool. */\n  args: Record<string, unknown>;\n  /** Return value from the MCP tool. */\n  result: unknown;\n  /** Optional MCP server identifier, e.g. \"github\". */\n  server?: string;\n  /** Override the default task kind ``\"mcp_call:<tool>\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the CHAP task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /**\n   * Create the task with ``review_required``, so ``task.complete`` holds the\n   * result as the artefact under review, opens a review addressed to the\n   * workspace's human members other than ``caller``, and leaves the task in\n   * ``review_requested`` until one of them decides. Where the workspace has\n   * no such member, this throws before anything is recorded. Default false:\n   * the task completes at once.\n   */\n  reviewRequired?: boolean;\n  /** Optional id of the decision this call fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapResult {\n  task_id:     string;\n  input_hash:  string;\n  output_hash: string;\n}\n\n/**\n * Wrap a completed MCP tool call as a CHAP task pair.\n *\n * Emits ``task.create`` + ``task.complete`` envelopes into the\n * workspace so the MCP call shows up as a first-class audit entry.\n * The result artefact is the MCP tool's return value, plus a\n * ``citations[]`` entry with the input/output hashes per\n * ``integrations/CHAP-with-MCP.md`` §2.\n *\n * Throws when the coordinator refuses a call. A refused ``task.complete``\n * leaves the task it names in progress, on the log.\n */\nexport function wrapMcpToolCall(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapMcpToolCallOptions,\n): WrapResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.caller) throw new Error(\"caller is required\");\n  if (!options.tool) throw new Error(\"tool is required\");\n  if (options.reviewRequired) {\n    const described = coord.dispatch({\n      jsonrpc: \"2.0\",\n      id:      `wrap-${options.tool}-describe`,\n      method:  \"workspace.describe\",\n      params:  { workspace, from: options.caller },\n    });\n    if (described.error) throw new Error(`workspace.describe failed: ${JSON.stringify(described.error)}`);\n    const members = (described.result as { members: { uri: string; type: string }[] }).members;\n    if (!members.some((m) => m.type === \"human\" && m.uri !== options.caller)) {\n      throw new Error(\"review_required needs a human member other than the caller to review the result; nothing was recorded\");\n    }\n  }\n\n  const inputHash = contentHash(options.args);\n  const outputHash = contentHash(options.result);\n  const kind = options.taskKind ?? `mcp_call:${options.tool}`;\n\n  const citations = [{\n    kind:         \"mcp_tool_call\" as const,\n    server:       options.server ?? \"unknown\",\n    tool:         options.tool,\n    input_hash:   inputHash,\n    output_hash:  outputHash,\n  }];\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    kind,\n    assignee: options.caller,\n    input:    options.args,\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n  if (options.reviewRequired) createParams.review_required = true;\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-create`,\n    method:  \"task.create\",\n    params:  createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-update`,\n    method:  \"task.update\",\n    params:  { workspace, from: options.caller, task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { result: options.result, citations };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace,\n    from:     options.caller,\n    task_id:  taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\",\n    id:      `wrap-${options.tool}-complete`,\n    method:  \"task.complete\",\n    params:  completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed for ${taskId}: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, input_hash: inputHash, output_hash: outputHash };\n}\n\n// ============================================================\n\nexport interface WrapA2aExchangeOptions {\n  /** URI of the local bridge participant. Must be a workspace member. */\n  bridgeUri: string;\n  /** Identifier of the remote A2A agent. Recorded in the citation. */\n  remoteAgent: string;\n  /** The A2A message body sent outbound. */\n  sent: Record<string, unknown>;\n  /** The A2A message body received in response. */\n  received: Record<string, unknown>;\n  /** CHAP task kind. Default ``\"a2a_exchange\"``. */\n  taskKind?: string;\n  /** Optional routing hints attached to the task. */\n  routingHints?: Record<string, unknown>;\n  /** Optional confidence value attached to task.complete. */\n  confidence?: number | string;\n  /** Optional id of the decision this exchange fulfils; recorded as a ``fulfils`` link on the result artefact. Asserted by the caller and not verified by the coordinator. */\n  fulfils?: string;\n}\n\nexport interface WrapA2aResult {\n  task_id:       string;\n  sent_hash:     string;\n  received_hash: string;\n}\n\n/**\n * Wrap a completed A2A message exchange as a CHAP task pair.\n *\n * Implements the bridge-participant pattern from\n * ``integrations/CHAP-with-A2A.md`` §3 as a library helper.\n */\nexport function wrapA2aMessageExchange(\n  coord: Coordinator,\n  workspace: string,\n  options: WrapA2aExchangeOptions,\n): WrapA2aResult {\n  if (!workspace) throw new Error(\"workspace is required\");\n  if (!options.bridgeUri) throw new Error(\"bridgeUri is required\");\n  if (!options.remoteAgent) throw new Error(\"remoteAgent is required\");\n\n  const sentHash = contentHash(options.sent);\n  const receivedHash = contentHash(options.received);\n  const kind = options.taskKind ?? \"a2a_exchange\";\n\n  const citation = {\n    kind:           \"a2a_exchange\" as const,\n    remote_agent:   options.remoteAgent,\n    sent_hash:      sentHash,\n    received_hash:  receivedHash,\n  };\n\n  const createParams: Record<string, unknown> = {\n    workspace,\n    from:     options.bridgeUri,\n    kind,\n    assignee: options.bridgeUri,\n    input:    { remote_agent: options.remoteAgent, sent: options.sent },\n  };\n  if (options.routingHints) createParams.routing_hints = { ...options.routingHints };\n\n  const createResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-create\",\n    method: \"task.create\", params: createParams,\n  });\n  if (createResp.error) throw new Error(`task.create failed: ${JSON.stringify(createResp.error)}`);\n  const taskId = (createResp.result as { task_id: string }).task_id;\n\n  coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-update\",\n    method: \"task.update\",\n    params: { workspace, from: options.bridgeUri,\n              task_id: taskId, state: \"in_progress\" },\n  });\n\n  const output: Record<string, unknown> = { received: options.received, citations: [citation] };\n  if (options.fulfils) output.fulfils = options.fulfils;\n  const completeParams: Record<string, unknown> = {\n    workspace, from: options.bridgeUri, task_id: taskId,\n    output,\n  };\n  if (options.confidence !== undefined) completeParams.confidence = options.confidence;\n\n  const completeResp = coord.dispatch({\n    jsonrpc: \"2.0\", id: \"wrap-a2a-complete\",\n    method: \"task.complete\", params: completeParams,\n  });\n  if (completeResp.error) throw new Error(`task.complete failed: ${JSON.stringify(completeResp.error)}`);\n\n  return { task_id: taskId, sent_hash: sentHash, received_hash: receivedHash };\n}\n"],"mappings":";AAkBA,SAAS,kBAAkB;AAEpB,IAAM,YAAY,YAAY,IAAI,OAAO,EAAE;AAElD,IAAM,oBACJ;AAEF,IAAM,qBACJ;AAGF,IAAM,uBACJ;AAGF,SAAS,sBAAsB,GAAiB;AAC9C,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,UAAM,IAAI,EAAE,WAAW,CAAC;AACxB,QAAI,KAAK,SAAU,KAAK,OAAQ;AAC9B,YAAM,OAAO,IAAI,IAAI,EAAE,SAAS,EAAE,WAAW,IAAI,CAAC,IAAI;AACtD,UAAI,OAAO,SAAU,OAAO,MAAQ,OAAM,IAAI,MAAM,oBAAoB;AACxE;AAAA,IACF,WAAW,KAAK,SAAU,KAAK,OAAQ;AACrC,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,wBAAsB,CAAC;AACvB,SAAO,KAAK,UAAU,CAAC;AACzB;AAEA,SAAS,gBAAgB,GAAmB;AAC1C,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACA,MAAI,KAAK,IAAI,CAAC,IAAI,OAAO,kBAAkB;AACzC,UAAM,IAAI,MAAM,kBAAkB;AAAA,EACpC;AAGA,SAAO,EAAE,SAAS;AACpB;AAEA,SAAS,MAAM,OAAwB;AACrC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO,gBAAgB,KAAK;AAC3D,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,MAAM,IAAI,KAAK,EAAE,KAAK,GAAG,IAAI;AAAA,EAC5C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,gBAAgB,GAAG,IAAI,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC;AAAA,IACzD;AACA,WAAO,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,EACjC;AACA,QAAM,IAAI,UAAU,qCAAqC,OAAO,KAAK,EAAE;AACzE;AAGO,SAAS,aAAa,OAAwB;AACnD,SAAO,OAAO,KAAK,MAAM,KAAK,GAAG,OAAO;AAC1C;AAGO,SAAS,UAAU,MAA+B;AACvD,QAAM,IAAI,WAAW,QAAQ;AAC7B,IAAE,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,OAAO,IAAI,IAAI;AACrE,SAAO,YAAY,EAAE,OAAO,KAAK;AACnC;AAGO,SAAS,YAAY,SAA0B;AACpD,SAAO,UAAU,aAAa,OAAO,CAAC;AACxC;;;AC3FO,IAAM,iBAAmD,OAAO,OAAO;AAAA,EAC5E,mBAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,yBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,wBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,4BAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,qBAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,0BAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,gBAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,cAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,kBAA2B;AAAA,EAC3B,eAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,sBAA2B;AAAA,EAC3B,oBAA2B;AAAA,EAC3B,0BAA2B;AAC7B,CAAC;AAUM,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,mBAAqD,OAAO,OAAO;AAAA,EAC9E,eAAe;AAAA,EACf,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,SAAS;AAAA,EACT,UAAU;AAAA,EACV,WAAW;AAAA,EACX,mBAAmB;AAAA,EACnB,WAAW;AACb,CAAC;;;AC9ED;AAAA,EACE;AAAA,EACA;AAAA,EAEA,QAAQ;AAAA,EACR,UAAU;AAAA,EAEV,cAAAA;AAAA,OACK;AAGP,IAAM,cAAc,OAAO,KAAK,4BAA4B,KAAK;AAEjE,SAAS,YAAY,KAAqB;AACxC,SAAO,IAAI,SAAS,QAAQ,EAAE,QAAQ,OAAO,EAAE,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACzF;AAEA,SAAS,aAAa,GAAmB;AACvC,QAAM,MAAM,IAAI,QAAQ,IAAK,EAAE,SAAS,KAAM,CAAC;AAC/C,SAAO,OAAO,KAAK,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,KAAK,QAAQ;AAC5E;AAgBO,SAAS,WAAW,KAAqB;AAC9C,SAAOC,YAAW,QAAQ,EAAE,OAAO,UAAU,GAAG,EAAE,OAAO;AAC3D;AAKO,SAAS,mBAAmB,MAAyB;AAC1D,MAAI,KAAK,WAAW,IAAI;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAEA,QAAM,QAAQ,OAAO,OAAO;AAAA,IAC1B,OAAO,KAAK,oCAAoC,KAAK;AAAA,IACrD;AAAA,EACF,CAAC;AACD,SAAO,iBAAiB,EAAE,KAAK,OAAO,QAAQ,OAAO,MAAM,QAAQ,CAAC;AACtE;AAGO,SAAS,eAAe,YAA+B;AAC5D,QAAM,MAAM,gBAAgB,UAAU;AACtC,QAAM,MAAM,IAAI,OAAO,EAAE,QAAQ,OAAO,MAAM,OAAO,CAAC;AAEtD,SAAO,IAAI,SAAS,IAAI,SAAS,EAAE;AACrC;AAGO,SAAS,iBAAiB,KAAwB;AACvD,MAAI,IAAI,WAAW,IAAI;AACrB,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,QAAM,MAAM,OAAO,OAAO,CAAC,aAAa,GAAG,CAAC;AAC5C,SAAO,gBAAgB,EAAE,KAAK,KAAK,QAAQ,OAAO,MAAM,OAAO,CAAC;AAClE;AAGO,SAAS,kBAAkB,KAAa,KAAqB;AAClE,QAAM,MAAM,eAAe,GAAG;AAC9B,SAAO;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAKA,YAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA,IAC/D,KAAK;AAAA,IACL,KAAK;AAAA,IACL,GAAK,YAAY,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,aAAa,WAAmB,YAAuB,KAAqB;AAC1F,QAAM,MAAM,SAAS,MAAM,WAAW,UAAU;AAChD,SAAO,WAAW,GAAG,IAAI,IAAI,SAAS,QAAQ,CAAC;AACjD;AAOO,SAAS,aAAa,GAA+B;AAC1D,QAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ;AACrC,SAAO,MAAM,SAAS,QAAQ,MAAM,IAAI,QAAQ;AAClD;AAGO,SAAS,eAAe,WAAmB,QAAgB,WAA+B;AAC/F,MAAI,CAAC,OAAO,WAAW,UAAU,EAAG,QAAO;AAC3C,QAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,MAAI,MAAM,SAAS,EAAG,QAAO;AAC7B,QAAM,MAAM,aAAa,MAAM,MAAM,SAAS,CAAC,CAAC;AAChD,MAAI,QAAQ,OAAW,QAAO;AAC9B,MAAI;AACF,WAAO,WAAW,MAAM,WAAW,WAAW,GAAG;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,aAAa,KAAuB;AAClD,MAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO;AAC1E,QAAM,MAAM;AACZ,SAAO,IAAI,QAAQ,SAAS,IAAI,QAAQ,aAAa,OAAO,IAAI,MAAM,YAAY,WAAW,KAAK,IAAI,CAAC;AACzG;AAGO,SAAS,iBAAiB,KAAqB;AACpD,SAAO,iBAAiB,aAAa,IAAI,CAAC,CAAC;AAC7C;AASO,SAAS,cAAc,KAAkC;AAC9D,MAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO;AAC1E,QAAM,MAAM;AACZ,QAAM,QAAQ,IAAI,QAAQ,QAAQ,CAAC,OAAO,OAAO,GAAG,IAAI,IAAI,QAAQ,OAAO,CAAC,OAAO,OAAO,KAAK,GAAG,IAAI;AACtG,MAAI,CAAC,SAAS,MAAM,KAAK,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,QAAQ,EAAG,QAAO;AACpE,QAAM,UAAU,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAChE,SAAO,YAAYA,YAAW,QAAQ,EAAE,OAAO,aAAa,OAAO,CAAC,EAAE,OAAO,CAAC;AAChF;AAWA,IAAM,SAAS;AAMR,SAAS,uBAAuB,MAA6C;AAClF,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,MAAI,OAAO,WAAW,KAAK,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,KAAK,EAAE,SAAS,MAAM,CAAC,EAAG,QAAO;AAC7F,QAAM,CAAC,mBAAmB,gBAAgB,SAAS,IAAI,OAAO,IAAI,CAAC,MAAM,OAAO,KAAK,GAAG,WAAW,CAAC;AACpG,SAAO,EAAE,mBAAmB,gBAAgB,UAAU;AACxD;AAGA,IAAM,aAAa;AAMZ,SAAS,cAAc,KAAuB;AACnD,MAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO;AAC1E,QAAM,MAAM;AACZ,QAAM,IAAI,IAAI;AACd,SAAO,IAAI,QAAQ,QAAQ,IAAI,QAAQ,WAClC,OAAO,IAAI,MAAM,YAAY,WAAW,KAAK,IAAI,CAAC,KAAK,OAAO,IAAI,MAAM,YAAY,WAAW,KAAK,IAAI,CAAC,MACxG,IAAI,QAAQ,UAAa,IAAI,QAAQ,YACtC,MAAM,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,KACvD,OAAO,EAAE,UAAU,YAAY,EAAE,UAAU,OAC1C,EAAE,YAAY,UAAc,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ;AAC5G;AAEA,IAAM,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAGtE,IAAM,0BAA0B;AAMhC,SAAS,UAAU,MAAsB;AACvC,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,MAAI,WAAW;AACf,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,KAAK,KAAK,CAAC;AACjB,QAAI,UAAU;AACZ,UAAI,OAAO,KAAM;AAAA,eACR,OAAO,IAAK,YAAW;AAAA,IAClC,WAAW,OAAO,KAAK;AACrB,iBAAW;AAAA,IACb,WAAW,OAAO,OAAO,OAAO,KAAK;AACnC,gBAAU,KAAK,IAAI,SAAS,EAAE,KAAK;AAAA,IACrC,WAAW,OAAO,OAAO,OAAO,KAAK;AACnC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAIA,IAAM,KAAK;AAAX,IAAiB,KAAK;AAAtB,IAA4B,KAAK;AAAjC,IAAuC,KAAK;AAA5C,IAAkD,KAAK;AAAvD,IAA6D,KAAK;AAc3D,SAAS,gBAAgB,WAAmB,WACnB,KAA6C;AAC3E,QAAM,IAAI,IAAI;AACd,MAAI,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,WAAW,EAAG,QAAO;AAChE,MAAI;AACJ,MAAI;AAAE,WAAO,KAAK,OAAO,UAAU,cAAc;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAW;AAChF,MAAI,SAAS,UAAa,UAAU,IAAI,IAAI,yBAAyB;AACnE,WAAO,6CAA6C,uBAAuB;AAAA,EAC7E;AACA,MAAI;AACJ,MAAI;AAAE,aAAS,SAAS,SAAY,SAAY,KAAK,MAAM,IAAI;AAAA,EAAG,QAAQ;AAAE,aAAS;AAAA,EAAW;AAChG,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,WAAO;AAAA,EACT;AACA,QAAM,OAAO;AACb,MAAI,KAAK,SAAS,eAAgB,QAAO;AACzC,MAAI,KAAK,cAAc,YAAYA,YAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,CAAC,GAAG;AACnF,WAAO;AAAA,EACT;AACA,MAAI,CAAC,EAAE,QAAQ,SAAS,KAAK,MAAgB,EAAG,QAAO;AACvD,MAAI,KAAK,gBAAgB,QAAQ,KAAK,cAAc,QAAW;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,OAAO,UAAU;AACvB,MAAI,KAAK,SAAS,GAAI,QAAO;AAC7B,MAAI,CAAC,KAAK,SAAS,GAAG,EAAE,EAAE,OAAOA,YAAW,QAAQ,EAAE,OAAO,EAAE,OAAO,OAAO,EAAE,OAAO,CAAC,GAAG;AACxF,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,KAAK,EAAE;AACrB,OAAK,SAAS,KAAK,UAAU,KAAK,IAAK,QAAO;AAC9C,MAAK,QAAQ,MAAO,EAAE,QAAQ,IAAK,QAAO;AAG1C,MAAI,QAAQ,GAAI,QAAO;AACvB,MAAK,QAAQ,KAAM,KAAK,WAAW,KAAK,KAAK,WAAW,IAAI;AAC1D,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,MAAM,gBAAgB;AAAA,MAAE,KAAK,EAAE,KAAK,MAAM,KAAK,SAAS,GAAG,IAAI,GAAa,GAAG,IAAI,EAAY;AAAA,MACvE,QAAQ;AAAA,IAAM,CAAC;AAC7C,UAAM,SAAS,OAAO,OAAO,CAAC,MAAMA,YAAW,QAAQ,EAAE,OAAO,UAAU,cAAc,EAAE,OAAO,CAAC,CAAC;AACnG,WAAO,WAAW,UAAU,QAAQ,EAAE,KAAK,aAAa,MAAM,GAAG,UAAU,SAAS,IAChF,OAAO;AAAA,EACb,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,cAAc,KAAkD;AAC9E,QAAM,OAAO,WAAW,GAAG;AAC3B,QAAM,aAAa,mBAAmB,IAAI;AAC1C,SAAO,EAAE,YAAY,KAAK,kBAAkB,KAAK,UAAU,EAAE;AAC/D;;;AC9RA,IAAM,WAAW;AAEjB,SAAS,OAAO,OAAe,QAAwB;AACrD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,UAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,UAAM,SAAS,GAAG,IAAI;AACtB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YACkB,gBAAyB,OACzC,OAAe,IACf,UAAkB,OAClB;AAHgB;AAIhB,SAAK,UAAU;AACf,SAAK,UAAU;AAAA,EACjB;AAAA,EANkB;AAAA,EAJV;AAAA,EACA;AAAA,EAWR,QAAgB;AACd,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAO,KAAK;AAAA,IACd;AACA,WAAO,KAAK,IAAI;AAAA,EAClB;AAAA,EAEQ,aAAqB;AAC3B,QAAI,KAAK,eAAe;AACtB,WAAK,WAAW;AAChB,aAAQ,KAAK,UAAU,uBAAyB,MAAM,OAAO;AAAA,IAC/D;AAKA,UAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,WAAO,gBAAgB,GAAG;AAC1B,QAAI,IAAI;AACR,eAAW,KAAK,IAAK,KAAK,KAAK,KAAM,OAAO,CAAC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,OAAe;AACb,UAAM,KAAK,OAAO,KAAK,MAAM,CAAC,KAAM,MAAM,OAAO;AACjD,UAAM,OAAO,KAAK,WAAW;AAC7B,WAAO,OAAO,IAAI,EAAE,IAAI,OAAO,MAAM,EAAE;AAAA,EACzC;AAAA,EAEA,aAAyB;AAAE,WAAO,KAAK,KAAK;AAAA,EAAG;AAAA,EAC/C,SAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,cAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,iBAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,YAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAAA,EACxD,aAAyB;AAAE,WAAO,SAAS,KAAK,KAAK;AAAA,EAAG;AAC1D;;;AC7DO,IAAM,IAAI;AAAA;AAAA,EAEf,OAAU;AAAA,EACV,SAAU;AAAA,EACV,QAAU;AAAA,EACV,QAAU;AAAA,EACV,UAAU;AAAA;AAAA,EAGV,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,cAAgB;AAAA,EAChB,eAAgB;AAAA,EAChB,qBAAqB;AAAA;AAAA,EAGrB,0BAA6B;AAAA,EAC7B,gBAA6B;AAAA,EAC7B,2BAA6B;AAAA;AAAA,EAG7B,yBAAyB;AAAA,EACzB,qBAAyB;AAAA,EACzB,wBAAyB;AAAA,EACzB,oBAAyB;AAAA;AAAA,EAGzB,uBAAyB;AAAA,EACzB,uBAAyB;AAAA;AAAA,EAGzB,wCAAwC;AAAA,EACxC,0BAAwC;AAAA,EACxC,8BAAwC;AAAA;AAAA,EAGxC,0BAA6B;AAAA,EAC7B,wBAA6B;AAAA,EAC7B,4BAA6B;AAAA,EAC7B,0BAA6B;AAAA;AAAA,EAG7B,mBAA2B;AAAA,EAC3B,mBAA2B;AAAA,EAC3B,iBAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,8BAA8B;AAAA,EAC9B,sBAA8B;AAAA;AAAA,EAG9B,mBAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,uBAA0B;AAAA;AAAA,EAG1B,uBAAuB;AAAA,EACvB,oBAAuB;AAAA,EACvB,mBAAuB;AAAA,EACvB,oBAAuB;AAAA;AAAA,EAGvB,eAA2B;AAAA,EAC3B,2BAA2B;AAAA,EAC3B,uBAA2B;AAAA,EAC3B,mBAA2B;AAAA;AAAA,EAG3B,8BAAgC;AAAA,EAChC,0BAAgC;AAAA,EAChC,mCAAmC;AAAA,EACnC,0BAAgC;AAAA,EAChC,8BAAgC;AAAA,EAChC,4BAAgC;AAAA,EAChC,gCAAgC;AAClC;AAEO,SAAS,SAAS,MAAc,SAAiB,MAAgB;AACtE,SAAO,EAAE,MAAM,SAAS,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC,EAAG;AAClE;AAEO,SAAS,gBAAgB,KAAuB;AACrD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,IAAI;AACV,SAAO,EAAE,YAAY;AACvB;;;AC9EA,IAAM,QAAmC;AAAA,EACvC,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,SAAS;AACX;AAEA,SAAS,OAAO,OAAgB,MAA0B;AACxD,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAU,aAAO,OAAO,UAAU;AAAA,IACvC,KAAK;AAAW,aAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ;AAAA,IACvF,KAAK;AAAW,aAAO,OAAO,UAAU;AAAA,IACxC,KAAK;AAAU,aAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA,IACzF,KAAK;AAAQ,aAAO,MAAM,QAAQ,KAAK;AAAA,IACvC,KAAK;AAAW,aAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK;AAAA,EAC5E;AACF;AAQO,SAAS,YACd,QACA,QAC+C;AAC/C,aAAW,CAAC,MAAM,IAAI,KAAK,QAAQ;AACjC,QAAI,QAAiB;AACrB,eAAW,QAAQ,KAAK,MAAM,GAAG,GAAG;AAClC,cAAQ,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IACtE,MAAkC,IAAI,IAAI;AAAA,IACjD;AACA,QAAI,UAAU,UAAa,UAAU,QAAQ,CAAC,OAAO,OAAO,IAAI,GAAG;AACjE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,IAAI,YAAY,MAAM,IAAI,CAAC,EAAE,EAAE;AAAA,IACvE;AAAA,EACF;AACA,SAAO;AACT;;;ACpCO,SAAS,YAAY,OAA4B;AACtD,MAAI,MAAM,WAAW,KAAM,QAAO,EAAE,SAAS,MAAM,SAAS,SAAS,MAAM,QAAQ;AACnF,SAAO,MAAM;AACf;AAGO,SAAS,UAAU,OAAyC;AACjE,SAAO,MAAM,YAAY,MAAM,WAAW;AAC5C;AAGO,SAAS,UAAU,OAA4B;AACpD,SAAO,MAAM,WAAW;AAC1B;AAGA,SAAS,OAAO,OAAyB;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,IAAI;AACV,SAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AASO,SAAS,kBAAkB,OAA4B;AAC5D,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,aAAa,QAAS,QAAO;AACjC,MAAI,SAAU,QAAO,OAAO,MAAM,QAAQ,KAAK,MAAM,WAAW;AAChE,QAAM,IAAI,MAAM;AAChB,SAAO,OAAO,MAAM,OAAO,KAAK,KAAK,QAAQ,OAAO,MAAM,YACrD,EAAE,WAAW,aAAa,OAAO,UAAU,EAAE,IAAI;AACxD;AAGO,SAAS,SAASC,OAAwB;AAC/C,SAAOA,UAAS,QAAQ,OAAOA,UAAS,YAAY,OAAQA,MAA2B,QAAQ;AACjG;AAOO,SAAS,aAAaA,OAAwB;AACnD,QAAM,SAAkC,EAAE,GAAGA,MAAK;AAClD,SAAO,OAAO;AACd,SAAO,UAAU,aAAa,MAAM,CAAC;AACvC;AAGO,SAAS,SAAS,QAAiB,MAAsB;AAC9D,SAAO,UAAU,OAAO,OAAO,CAAC,aAAa,MAAM,GAAG,OAAO,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC;AACpF;AAOA,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EACpD,EAAE;AAAA,EAAO,EAAE;AAAA,EAAS,EAAE;AAAA,EAAQ,EAAE;AAAA,EAChC,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAmB,EAAE;AAAA,EAAiB,EAAE;AAAA,EAC/D,EAAE;AACJ,CAAC;AAOD,IAAM,qBAA0C,oBAAI,IAAI,CAAC,oBAAoB,kBAAkB,CAAC;AAWzF,SAAS,kBACd,QACA,OACA,YACS;AACT,MAAI,CAAC,OAAO,UAAU,MAAM,IAAI,EAAG,QAAO;AAC1C,MAAI,mBAAmB,IAAI,MAAM,EAAG,QAAO;AAC3C,MAAI,iBAAiB,IAAI,MAAM,IAAI,EAAG,QAAO;AAC7C,MAAI,MAAM,SAAS,EAAE,QAAQ;AAC3B,UAAM,OAAO,MAAM;AACnB,WAAO,OAAO,MAAM,YAAY,YAAY,WAAW,IAAI,MAAM;AAAA,EACnE;AACA,SAAO;AACT;;;ACvGO,IAAM,aAAN,cAAyB,MAAM;AAAC;AAGvC,IAAM,iBAAiB,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAMxE,IAAM,iBAAiB;AAMvB,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO;AACjC,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB,KAAK;AAAW,aAAO;AAAA,IACvB;AAAgB,aAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG,OAAM,IAAI,WAAW,2BAA2B,KAAK,UAAU,GAAG,CAAC,EAAE;AACpG,SAAO,OAAO,GAAG;AACnB;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AACrD;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI,SAAS,GAAI,QAAO,CAAC;AACzB,MAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,UAAM,IAAI,WAAW,qCAAqC,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,WAAW,KAAK,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,QAAQ;AACtD,aAAW,OAAO,UAAU;AAC1B,QAAI,eAAe,IAAI,GAAG,GAAG;AAC3B,YAAM,IAAI,WAAW,gCAAgC,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,OAAyC;AACnE,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,YAAM,MAAM,WAAW,IAAI;AAC3B,UAAI,OAAO,OAAO,QAAQ;AACxB,cAAM,IAAI,WAAW,0BAA0B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAClF;AACA,eAAS,OAAO,GAAG;AAAA,IACrB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,GAAG;AACvD,cAAM,IAAI,WAAW,oBAAoB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,eAAS,OAAO,IAAI;AAAA,IACtB,OAAO;AACL,YAAM,IAAI,WAAW,wBAAwB,SAAS,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,EAAE;AAAA,IAC5F;AAAA,EACF;AACA,QAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,SAAS,IAAK,QAAO,CAAC,QAAQ,GAAG;AACrC,WAAO,CAAC,QAAQ,WAAW,IAAI,CAAC;AAAA,EAClC;AACA,SAAO,CAAC,QAAQ,IAAI;AACtB;AAEA,SAAS,MAAM,KAAU,MAAmB;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,IAAK,OAAM,IAAI,WAAW,2BAA2B;AACjE,UAAM,MAAM;AACZ,QAAI,MAAM,KAAK,OAAO,OAAO,OAAQ,OAAM,IAAI,WAAW,uBAAuB,IAAI,EAAE;AACvF,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,MACE,WAAW,QACX,OAAO,WAAW,YAClB,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACjD;AACA,UAAM,IAAI,WAAW,mBAAmB,IAAI,EAAE;AAAA,EAChD;AACA,SAAO,OAAO,GAAa;AAC7B;AAEA,SAAS,MAAS,GAAS;AACzB,SAAO,MAAM,SAAY,IAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC;AAC5D;AAEA,SAAS,UAAU,GAAQ,GAAiB;AAC1C,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,MAAI,OAAO,MAAM,OAAO,EAAG,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AACtE,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,aAAW,KAAK,IAAI;AAClB,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC,EAAG,QAAO;AACxD,QAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAUA,SAAS,MAAM,KAAU,MAAc,OAAgB,MACxC,SAAS,OAAO,WAAyB;AACtD,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,GAAG;AACtB,QAAI,MAAM;AACR,WAAK,MAAM,KAAK;AAChB,UAAI,UAAU,cAAc,OAAW,MAAK,MAAM,IAAI;AAAA,IACxD;AACA,WAAO;AAAA,EACT;AACA,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI;AACJ,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,QAAQ,KAAK;AACf,aAAO,KAAK,KAAK;AAAA,IACnB,OAAO;AACL,YAAM,MAAM;AACZ,UAAI,MAAM,KAAK,MAAM,OAAO,QAAQ;AAClC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,aAAO,OAAO,KAAK,GAAG,KAAK;AAAA,IAC7B;AAAA,EACF,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,QAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,EAAG,OAAM,KAAK,OAAO,GAAa,CAAC;AAAA,QAClF,UAAS;AACd,WAAO,GAAa,IAAI;AAAA,EAC1B,OAAO;AACL,UAAM,IAAI,WAAW,mBAAmB,SAAS,MAAM,CAAC,EAAE;AAAA,EAC5D;AACA,MAAI,MAAM;AACR,QAAI,cAAc,QAAW;AAC3B,YAAM,WAAW,KAAK,OAAO,OAAO,MAAM,QAAQ,MAAM;AACxD,UAAI,OAAQ,MAAK,MAAM,QAAQ;AAAA,IACjC,OAAO;AACL,UAAI,WAAW,OAAW,MAAK,SAAS,WAAW,MAAM;AACzD,UAAI,MAAM,SAAS,WAAW;AAE5B,cAAM,QAAQ,OAAO,KAAK;AAC1B,aAAK,QAAQ,KAAK,IAAI,KAAK,OAAO,MAAM,SAAS,MAAM,KAAK;AAC5D,aAAK,MAAM,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,SAAS,KAAU,MAAc,MAAwB,QAAQ,OAAY;AACpF,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,MAAM,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AAClE,QAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,MAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,UAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,QAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,YAAM,IAAI,WAAW,kCAAkC,IAAI,EAAE;AAAA,IAC/D;AACA,QAAI,QAAQ,CAAC,MAAO,MAAK,KAAK,OAAO,GAAG,CAAC;AACzC,WAAO,OAAO,KAAK,CAAC;AAAA,EACtB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,QAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,YAAM,IAAI,WAAW,8BAA8B,IAAI,EAAE;AAAA,IAC3D;AACA,QAAI,MAAM;AACR,UAAI,MAAO,MAAK,SAAS,WAAW,GAAa;AAAA,UAC5C,MAAK,KAAK,OAAO,GAAa,GAAG,GAAa;AAAA,IACrD;AACA,WAAO,OAAO,GAAa;AAAA,EAC7B,OAAO;AACL,UAAM,IAAI,WAAW,sBAAsB,SAAS,MAAM,CAAC,EAAE;AAAA,EAC/D;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAU,IAAiB,MAAkB;AAC7D,QAAM,OAAO,GAAG;AAChB,QAAM,OAAO,GAAG,QAAQ;AAExB,MAAI,SAAS,OAAO;AAClB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,wBAAwB;AAGnE,WAAO,MAAM,KAAK,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI;AAAA,EAC/C;AAEA,MAAI,SAAS,WAAW;AACtB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,4BAA4B;AACvE,UAAM,QAAQ,UAAU,IAAI;AAC5B,UAAM,QAAQ,MAAM,GAAG,KAAK;AAC5B,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,MAAM,KAAK;AACjB,aAAO;AAAA,IACT;AACA,UAAM,CAAC,QAAQ,GAAG,IAAI,SAAS,KAAK,KAAK;AACzC,QAAI,MAAM,QAAQ,MAAM,GAAG;AAIzB,YAAM,MAAM,QAAQ,MAAM,KAAM;AAChC,UAAI,MAAM,KAAK,OAAO,OAAO,QAAQ;AACnC,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,YAAM,KAAK,OAAO,GAAG,CAAC;AACtB,aAAO,GAAG,IAAI;AAAA,IAChB,WAAW,WAAW,QAAQ,OAAO,WAAW,UAAU;AACxD,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GAAG;AACtD,cAAM,IAAI,WAAW,+BAA+B,IAAI,EAAE;AAAA,MAC5D;AACA,YAAM,KAAK,OAAO,GAAa,CAAC;AAChC,aAAO,GAAa,IAAI;AAAA,IAC1B,OAAO;AACL,YAAM,IAAI,WAAW,qBAAqB,SAAS,MAAM,CAAC,EAAE;AAAA,IAC9D;AACA,UAAM,OAAO,OAAO,MAAM,MAAM;AAChC,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,UAAU;AACrB,WAAO,SAAS,KAAK,MAAM,IAAI;AAAA,EACjC;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AACpE,WAAO,MAAM,KAAK,MAAM,MAAM,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,IAAI;AAAA,EAC5D;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,MAAM,GAAG;AACf,QAAI,QAAQ,OAAW,OAAM,IAAI,WAAW,wBAAwB;AAEpE,QAAI,KAAK,WAAW,MAAM,GAAG,GAAG;AAC9B,YAAM,IAAI,WAAW,mDAAmD;AAAA,IAC1E;AAEA,UAAM,QAAQ,MAAM,KAAK,GAAG;AAC5B,UAAM,SAAS,KAAK,KAAK,MAAM,IAAI;AACnC,WAAO,MAAM,KAAK,MAAM,OAAO,MAAM,OAAO,UAAU,GAAG,EAAE,MAAM;AAAA,EACnE;AAEA,MAAI,SAAS,QAAQ;AACnB,QAAI,EAAE,WAAW,IAAK,OAAM,IAAI,WAAW,yBAAyB;AACpE,UAAM,SAAS,MAAM,KAAK,IAAI;AAC9B,QAAI,CAAC,UAAU,QAAQ,GAAG,KAAK,EAAG,OAAM,IAAI,WAAW,oBAAoB,IAAI,EAAE;AACjF,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,mBAAmB,KAAK,UAAU,IAAI,CAAC,EAAE;AAChE;AAEA,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAQ3B,IAAM,qBAAqB;AAS3B,IAAM,oBAAoB;AAUnB,IAAM,4BAA4B;AAezC,SAAS,WAAW,GAAmB;AACrC,QAAM,SAAU,WAAoC;AACpD,MAAI,OAAO,WAAW,YAAY;AAChC,WAAQ,OAA0E,WAAW,GAAG,MAAM;AAAA,EACxG;AACA,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,UAAM,IAAI,EAAE,WAAW,CAAC;AACxB,QAAI,IAAI,IAAM,MAAK;AAAA,aACV,IAAI,KAAO,MAAK;AAAA,aAChB,KAAK,SAAU,KAAK,SAAU,IAAI,IAAI,EAAE,QAAQ;AACvD,YAAM,IAAI,EAAE,WAAW,IAAI,CAAC;AAC5B,UAAI,KAAK,SAAU,KAAK,OAAQ;AAAE,aAAK;AAAG;AAAA,MAAK,MAAO,MAAK;AAAA,IAC7D,MAAO,MAAK;AAAA,EACd;AACA,SAAO;AACT;AASA,SAAS,OAAO,OAA0B;AACxC,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,WAAO,EAAE,OAAO,GAAG,OAAO,OAAO,UAAU,WAAW,WAAW,KAAK,IAAI,GAAG,OAAO,EAAE;AAAA,EACxF;AACA,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,QAAM,SAAmB,CAAC,KAAK;AAC/B,QAAM,SAAmB,CAAC,CAAC;AAG3B,QAAM,QAAQ,CAAC,GAAY,UAAwB;AACjD,QAAI,MAAM,QAAQ,OAAO,MAAM,UAAU;AACvC,aAAO,KAAK,CAAC;AACb,aAAO,KAAK,KAAK;AACjB;AAAA,IACF;AACA,aAAS;AACT,QAAI,QAAQ,MAAO,SAAQ;AAC3B,QAAI,OAAO,MAAM,SAAU,UAAS,WAAW,CAAC;AAAA,EAClD;AACA,SAAO,OAAO,SAAS,GAAG;AACxB,UAAM,IAAI,OAAO,IAAI;AACrB,UAAM,QAAQ,OAAO,IAAI;AACzB,aAAS;AACT,QAAI,QAAQ,MAAO,SAAQ;AAC3B,QAAI,MAAM,QAAQ,CAAC,GAAG;AACpB,iBAAW,KAAK,EAAG,OAAM,GAAG,QAAQ,CAAC;AAAA,IACvC,OAAO;AACL,YAAM,IAAI;AACV,iBAAW,KAAK,OAAO,KAAK,CAAC,GAAG;AAC9B,iBAAS,WAAW,CAAC;AACrB,cAAM,EAAE,CAAC,GAAG,QAAQ,CAAC;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,OAAO,OAAO,MAAM;AAC/B;AASA,IAAM,OAAN,MAA+B;AAAA,EAC7B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA;AAAA,EAER,eAAe;AAAA,EACf,eAAe;AAAA,EAEf,YAAY,KAAc;AACxB,SAAK,MAAM,GAAG;AAAA,EAChB;AAAA,EAEA,MAAM,KAAoB;AACxB,UAAM,IAAI,OAAO,GAAG;AACpB,SAAK,QAAQ,EAAE;AACf,SAAK,QAAQ,EAAE;AACf,SAAK,QAAQ,EAAE;AAAA,EACjB;AAAA;AAAA,EAGA,OAAO,OAAgB,UAAkB,KAAwB;AAC/D,UAAM,IAAI,OAAO,KAAK;AACtB,SAAK,SAAS,EAAE;AAChB,SAAK,SAAS,EAAE,SAAS,QAAQ,SAAY,IAAI,WAAW,GAAG;AAC/D,SAAK,QAAQ,KAAK,IAAI,KAAK,OAAO,WAAW,EAAE,KAAK;AACpD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,GAAmB;AACvB,SAAK,gBAAgB,EAAE;AACvB,SAAK,gBAAgB,EAAE;AAAA,EACzB;AAAA;AAAA,EAGA,KAAK,OAAgB,KAAoB;AACvC,UAAM,IAAI,OAAO,KAAK;AACtB,SAAK,SAAS,EAAE;AAChB,SAAK,SAAS,EAAE,SAAS,QAAQ,SAAY,IAAI,WAAW,GAAG;AAAA,EACjE;AACF;AAEO,SAAS,eAAe,KAAc,KAAoB,SAAsB,CAAC,GAAY;AAClG,QAAM,WAAW,OAAO,kBAAkB;AAC1C,MAAI,IAAI,SAAS,eAAe;AAC9B,UAAM,IAAI,WAAW,kCAAkC,IAAI,MAAM,MAAM,aAAa,GAAG;AAAA,EACzF;AACA,MAAI,MAAW,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAC7C,QAAM,OAAO,IAAI,KAAK,GAAG;AACzB,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,KAAK,IAAI,IAAI;AAC5B,QAAI,KAAK,QAAQ,mBAAoB,MAAK,QAAQ,OAAO,GAAG,EAAE;AAC9D,QAAI,KAAK,QAAQ,oBAAoB;AACnC,YAAM,IAAI,WAAW,4CAA4C,kBAAkB,GAAG;AAAA,IACxF;AACA,QAAI,KAAK,QAAQ,UAAU;AACzB,YAAM,IAAI,WAAW,4CAA4C,QAAQ,6BAA6B;AAAA,IACxG;AACA,QAAI,KAAK,QAAQ,oBAAoB;AACnC,YAAM,IAAI,WAAW,sCAAsC,kBAAkB,SAAS;AAAA,IACxF;AACA,QAAI,KAAK,eAAe,oBAAoB,sBAAsB,KAAK,eAAe,oBAAoB,UAAU;AAClH,YAAM,IAAI,WAAW,8CAA8C,oBAAoB,kBAAkB,cAAc,oBAAoB,QAAQ,6BAA6B;AAAA,IAClL;AAAA,EACF;AACA,SAAO;AACT;AAYO,SAAS,cAAc,MAAe,IAAa,WAAW,IAAmB;AACtF,QAAM,MAAqB,CAAC;AAE5B,MAAI,OAAO,SAAS,OAAO,MAAM,MAAM,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAE,GAAG;AAC1E,QAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAC5D,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,QAAQ,OAAO,QAAQ,OAAO,SAAS,UAAU;AAC5D,QAAI,SAAS,IAAI;AACf,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,EAAE,GAAG;AAC5C,QAAI,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,EAAE,GAAG;AAC/C,UAAI,KAAK,EAAE,IAAI,WAAW,MAAM,YAAY,KAAK,OAAO,GAAG,CAAC;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAChB,QAAM,QAAQ;AACd,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;AAExE,aAAW,OAAO,SAAS;AACzB,UAAM,UAAU,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI;AAC3D,UAAM,OAAO,GAAG,QAAQ,IAAI,OAAO;AACnC,QAAI,EAAE,OAAO,UAAU;AACrB,UAAI,KAAK,EAAE,IAAI,OAAO,MAAM,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,IACjD,WAAW,EAAE,OAAO,QAAQ;AAC1B,UAAI,KAAK,EAAE,IAAI,UAAU,KAAK,CAAC;AAAA,IACjC,OAAO;AACL,UAAI,KAAK,GAAG,cAAc,QAAQ,GAAG,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC;AAAA,IAC3D;AAAA,EACF;AAEA,SAAO;AACT;;;AC7dO,IAAM,cAAc;AAAA,EACzB;AAAA,EAAW;AAAA,EAAS;AAAA,EAAa;AAAA,EACjC;AAAA,EAAiB;AAAA,EAAY;AAAA,EAAa;AAAA,EAAmB;AAC/D;AAGO,IAAM,mBAAmB;AAmDzB,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACnC;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA,EAET,YAAY,WAAmB,MAAc,MAAc;AACzD;AAAA,MACE,mBAAmB,IAAI,gCAAgC,SAAS,4BACzC,IAAI;AAAA,IAK7B;AACA,SAAK,OAAO;AACZ,SAAK,YAAY;AACjB,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,OAAO,WAAW,EAAE,OAAyB;AACnD,WAAO,iBAAiB,SAAS,MAAM,SAAS;AAAA,EAClD;AACF;AAsCA,SAAS,aAAa,MAAuB;AAC3C,SAAQ,YAAkC,SAAS,IAAI;AACzD;AAGO,SAAS,UAAU,YAAoB,MAAmC;AAC/E,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,QAAM,IAAI;AACV,QAAM,MAAM,eAAe,YAAa,EAAE,OAAO,EAAE,KAAO,EAAE,MAAM,EAAE;AACpE,SAAO,OAAO,QAAQ,WAAW,MAAM;AACzC;AAMA,SAAS,MAAM,YAAoB,OAAyC;AAC1E,QAAM,MAA+B,CAAC;AACtC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAW,QAAQ,OAAO;AACxB,YAAM,MAAM,UAAU,YAAY,IAAI;AACtC,UAAI,QAAQ,OAAW,KAAI,GAAG,IAAI;AAAA,IACpC;AAAA,EACF,WAAW,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtD,WAAO,OAAO,KAAK,KAAK;AAAA,EAC1B;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,QAAsC;AACrE,QAAM,OAAQ,OAAO,SAAS,QAAQ,OAAO,OAAO,SAAS,WACzD,OAAO,OAAO,CAAC;AACnB,QAAM,OAAgC,CAAC;AACvC,QAAM,UAAmD,CAAC;AAC1D,MAAI,UAAqB,CAAC;AAC1B,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAChD,QAAI,SAAS,QAAS,WAAU,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AAAA,aACvD,SAAS,oBAAoB,aAAa,IAAI,EAAG,SAAQ,IAAI,IAAI,MAAM,MAAM,KAAK;AAAA,QACtF,MAAK,IAAI,IAAI;AAAA,EACpB;AACA,MAAI,KAAK,OAAO,OAAW,MAAK,KAAK,OAAO;AAC5C,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IAAI,MAAM;AAAA,IAAG,SAAS,OAAO;AAAA,IAAS,YAAY,OAAO;AAAA,IACpE;AAAA,IAAM;AAAA,IAAS;AAAA,IAAS,SAAS;AAAA,EACnC;AACF;AAOO,SAAS,iBACd,MACA,SACA,SACyB;AACzB,QAAM,OAAgC,EAAE,GAAG,KAAK;AAChD,aAAW,QAAQ,YAAa,MAAK,IAAI,IAAI,CAAC;AAC9C,QAAM,OAAgC,CAAC;AACvC,OAAK,gBAAgB,IAAI;AACzB,aAAW,CAAC,YAAY,KAAK,KAAK,KAAK,SAAS;AAC9C,QAAI,eAAe,kBAAkB;AACnC,WAAK,GAAG,IAAI;AAAA,IACd,OAAO;AACL,YAAM,OAAQ,MAAM,QAAQ,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,IAAK,KAAK,UAAU,IAAI,CAAC;AACxF,WAAK,KAAK,KAAK;AAAA,IACjB;AAAA,EACF;AACA,OAAK,QAAQ;AACb,SAAO;AACT;AAeO,IAAM,cAAN,MAAmC;AAAA,EAChC,OAAO,oBAAI,IAAkB;AAAA,EAErC,OAA0B;AACxB,WAAO,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAE;AAAA,EAC5D;AAAA,EAEA,QAAQ,IAAyC;AAC/C,UAAM,IAAI,KAAK,KAAK,IAAI,EAAE;AAC1B,QAAI,CAAC,EAAG,QAAO;AACf,UAAM,UAA4C,CAAC;AACnD,eAAW,CAAC,YAAY,KAAK,KAAK,EAAE,SAAS;AAC3C,iBAAW,CAAC,KAAK,KAAK,KAAK,MAAO,SAAQ,KAAK,CAAC,YAAY,KAAK,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,IACrF;AACA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,iBAAiB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,QAAQ,IAAI,OAAK,KAAK,MAAM,CAAC,CAAC,GAAG,OAAO;AAAA,MACrF,SAAS,EAAE;AAAA,MACX,YAAY,EAAE;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,QAAQ,IAAgC;AACtC,WAAO,KAAK,KAAK,IAAI,EAAE,GAAG,QAAQ;AAAA,EACpC;AAAA,EAEA,KAAK,QAA+B;AAClC,SAAK,MAAM,iBAAiB,MAAM,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,QAA2B;AAG/B,UAAM,OAAO,KAAK,UAAU,OAAO,IAAI;AACvC,UAAM,UAAU,OAAO,QAAQ,IAAI,OAAK,KAAK,UAAU,CAAC,CAAC;AACzD,UAAM,UAAU,OAAO,QAAQ,OAAO,OAAO,EAAE,IAAI,CAAC,CAAC,YAAY,KAAK,MACpE,CAAC,YAAY,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MACjD,CAAC,KAAK,UAAU,QAAQ,UAAU,SAAY,OAAO,KAAK,UAAU,KAAK,CAAC,CAAU,CAAC,CAAU;AACnG,QAAI,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE;AAC/B,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,QAAQ,IAAI,EAAE,QAAQ,SAAS;AACrC,UAAI,UAAU,OAAO,KAAM,OAAM,IAAI,mBAAmB,OAAO,IAAI,OAAO,OAAO,IAAI;AAAA,IACvF;AACA,QAAI,CAAC,KAAK,OAAO,SAAS;AACxB,UAAI,EAAE,MAAM,MAAM,SAAS,GAAG,YAAY,IAAI,SAAS,CAAC,GAAG,SAAS,oBAAI,IAAI,EAAE;AAAA,IAChF;AACA,eAAW,SAAS,QAAS,GAAE,QAAQ,KAAK,KAAK;AACjD,eAAW,CAAC,YAAY,KAAK,KAAK,SAAS;AACzC,UAAI,OAAO,EAAE,QAAQ,IAAI,UAAU;AACnC,UAAI,CAAC,KAAM,GAAE,QAAQ,IAAI,YAAa,OAAO,oBAAI,IAAI,CAAE;AACvD,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO;AAChC,YAAI,UAAU,KAAM,MAAK,OAAO,GAAG;AAAA,YAC9B,MAAK,IAAI,KAAK,KAAK;AAAA,MAC1B;AAAA,IACF;AACA,MAAE,OAAO;AACT,MAAE,UAAU,OAAO;AACnB,MAAE,aAAa,OAAO;AACtB,SAAK,KAAK,IAAI,OAAO,IAAI,CAAC;AAAA,EAC5B;AAAA,EAEA,OAAO,IAAkB;AACvB,SAAK,KAAK,OAAO,EAAE;AAAA,EACrB;AACF;;;AC1TO,IAAM,aAAN,cAA+B,IAAU;AAAA;AAAA,EAErC,QAAQ,oBAAI,IAAO;AAAA,EACnB;AAAA,EAET,YAAY,SAAkB;AAC5B,UAAM;AACN,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,UAAmB;AACzB,WAAO,KAAK,QAAQ,WAAW,KAAK,QAAQ,QAAQ;AAAA,EACtD;AAAA,EAEQ,WAAiB;AACvB,QAAI,KAAK,QAAQ,EAAG,YAAW,OAAO,MAAM,KAAK,EAAG,MAAK,MAAM,IAAI,GAAG;AAAA,EACxE;AAAA,EAES,IAAI,KAAuB;AAClC,UAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,QAAI,UAAU,UAAa,KAAK,QAAQ,EAAG,MAAK,MAAM,IAAI,GAAG;AAC7D,WAAO;AAAA,EACT;AAAA,EAES,IAAI,KAAQ,OAAgB;AACnC,QAAI,KAAK,QAAQ,QAAS,MAAK,MAAM,IAAI,GAAG;AAC5C,WAAO,MAAM,IAAI,KAAK,KAAK;AAAA,EAC7B;AAAA,EAES,OAAO,KAAiB;AAC/B,UAAM,MAAM,MAAM,OAAO,GAAG;AAC5B,QAAI,OAAO,KAAK,QAAQ,QAAS,MAAK,MAAM,IAAI,GAAG;AACnD,WAAO;AAAA,EACT;AAAA,EAES,QAAc;AACrB,QAAI,KAAK,QAAQ,QAAS,YAAW,OAAO,MAAM,KAAK,EAAG,MAAK,MAAM,IAAI,GAAG;AAC5E,UAAM,MAAM;AAAA,EACd;AAAA,EAES,SAAyB;AAChC,SAAK,SAAS;AACd,WAAO,MAAM,OAAO;AAAA,EACtB;AAAA,EAES,UAA+B;AACtC,SAAK,SAAS;AACd,WAAO,MAAM,QAAQ;AAAA,EACvB;AAAA,EAEA,CAAU,OAAO,QAAQ,IAAyB;AAChD,SAAK,SAAS;AACd,WAAO,MAAM,OAAO,QAAQ,EAAE;AAAA,EAChC;AAAA,EAES,QAAQ,UAAsD,SAAyB;AAC9F,SAAK,SAAS;AACd,UAAM,QAAQ,UAAU,OAAO;AAAA,EACjC;AAAA;AAAA,EAGA,KAAK,KAAuB;AAC1B,WAAO,MAAM,IAAI,GAAG;AAAA,EACtB;AACF;AAGO,SAAS,UAAa,KAA2C;AACtE,SAAO,IAAI,UAAU,OAAO,KAAK,GAAG;AACtC;AAGO,SAAS,WAAiB,KAA0C;AACzE,SAAO,IAAI,UAAU,QAAQ,KAAK,GAAG;AACvC;;;AC7DO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EACA;AAAA,EACT,YAAY,MAAc,SAAiB,MAAgB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAMO,SAAS,KACd,OACA,QACA,QACiB;AACjB,QAAM,WAAqB;AAAA,IACzB,SAAS;AAAA,IACT,IAAI,MAAM,IAAI,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACA,QAAM,MAAM,MAAM,SAAS,QAAQ;AACnC,MAAI,IAAI,OAAO;AACb,UAAM,IAAI,iBAAiB,IAAI,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI;AAAA,EAC9E;AACA,SAAO,IAAI;AACb;AAWO,SAAS,QAAQ,OAAoB;AAC1C,QAAM,IAAI,CAAuB,GAAM,MAAuB,KAAK,OAAO,GAAG,CAAC;AAE9E,SAAO;AAAA,IACL,WAAW;AAAA,MACT,QAAc,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MACpF,UAAc,CAAC,MAA8C,EAAE,sBAAsB,CAAC;AAAA,MACtF,cAAc,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,MAC1F,QAAc,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,IACtF;AAAA,IACA,aAAa;AAAA,MACX,MAAY,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MAClF,OAAY,CAAC,MAA8C,EAAE,qBAAqB,CAAC;AAAA,MACnF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,MACxF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC1F;AAAA,IACA,MAAM;AAAA,MACJ,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,UAAU,CAAC,MAAqC,EAAE,iBAAiB,CAAC;AAAA,MACpE,OAAU,CAAC,MAAqC,EAAE,cAAc,CAAC;AAAA,IACnE;AAAA,IACA,QAAQ;AAAA,MACN,SAAa,CAAC,MAA0C,EAAE,kBAAkB,CAAC;AAAA,MAC7E,aAAa,CAAC,MAA0C,EAAE,sBAAsB,CAAC;AAAA,MACjF,OAAa,CAAC,MAA0C,EAAE,gBAAgB,CAAC;AAAA,IAC7E;AAAA,IACA,QAAQ;AAAA,MACN,SAAU,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACvE,QAAU,CAAC,MAAuC,EAAE,iBAAiB,CAAC;AAAA,MACtE,UAAU,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IAC1E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,OAAO,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACnE,MAAO,CAAC,MAAsC,EAAE,iBAAiB,CAAC;AAAA,IACpE;AAAA,IACA,SAAS;AAAA,MACP,KAAQ,CAAC,MAAsC,EAAE,eAAe,CAAC;AAAA,MACjE,QAAQ,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,IACtE;AAAA,IACA,YAAY;AAAA,MACV,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,SAAS,CAAC,MAA0C,EAAE,sBAAsB,CAAC;AAAA,MAC7E,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,OAAS,CAAC,MAA0C,EAAE,oBAAoB,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,MACvE,QAAS,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACtE,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,SAAS;AAAA,MACP,OAAmB,CAAC,MAAiD,EAAE,iBAAiB,CAAC;AAAA,MACzF,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,WAAmB,CAAC,MAAiD,EAAE,qBAAqB,CAAC;AAAA,MAC7F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,kBAAmB,CAAC,MAAiD,EAAE,4BAA4B,CAAC;AAAA,IACtG;AAAA,IACA,OAAO;AAAA,MACL,MAAiB,CAAC,MAA6C,EAAE,cAAc,CAAC;AAAA,MAChF,iBAAiB,CAAC,MAA6C,EAAE,yBAAyB,CAAC;AAAA,MAC3F,gBAAiB,CAAC,MAA6C,EAAE,wBAAwB,CAAC;AAAA,MAC1F,cAAiB,CAAC,MAA6C,EAAE,sBAAsB,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;;;ACqSO,SAAS,OAAO,GAAS,SAAwB;AACtD,QAAM,QAA8B,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,EAAE;AACzE,SAAO,MAAM,CAAC,KAAK,MAAM,OAAO;AAClC;;;ACraA,IAAM,YAAY;AAMlB,SAAS,eAAe,aAAqB,QAAiB,QAAyC;AACrG,SAAO;AAAA,IACL,WAAW;AAAA,MACT,KAAK;AAAA;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,YAAY,EAAE,KAAK,aAAa,KAAK,KAAK;AAAA,MAC1C,gBAAgB;AAAA,IAClB;AAAA,IACA,SAAS,aAAa,MAAM,EAAE,SAAS,OAAO;AAAA,IAC9C,WAAW;AAAA,EACb;AACF;AAEO,SAAS,mBAAmB,OAA0B;AAC3D,QAAM,SAAS,IAAI,yBAAyB,CAAC,MAAM;AACjD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,SAAS,QAAQ;AAAA,MAAG,CAAC,kBAAkB,SAAS;AAAA,MAAG,CAAC,gBAAgB,SAAS;AAAA,MAAG,CAAC,UAAU,QAAQ;AAAA,IACtG,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,UAAM,QAAS,EAAE,SAAgE,CAAC;AAClF,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,SAAU,EAAE,UAAqB;AAEvC,QAAI,CAAC,MAAM,QAAQ,gBAAgB;AACjC,YAAM,aAAa,GAAG,MAAM,MAAM,SAAS,KAAK,EAAE,IAAI,OACpD,eAAe,GAAG,IAAI,YAAY,CAAC,GAAG,MAAM,CAAC;AAC/C,aAAO,EAAE,QAAQ;AAAA,QACf;AAAA,QACA,MAAM;AAAA,MACR,EAAC;AAAA,IACH;AACA,UAAM,WAAsB,CAAC;AAC7B,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAClD,YAAM,YAAY,eAAe,GAAG,IAAI,YAAY,KAAK,GAAG,MAAM;AAClE,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,QAAQ,eAAe,SAAS;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,2BAA2B,GAAG,EAAE,EAAE;AAAA,MAClF;AACA,UAAI,YAAY,MAAM;AACpB,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,6BAA6B,MAAM,GAAG;AAAA,QAAE,EAAE;AAAA,MAC9C;AACA,eAAS,KAAK,EAAE,KAAK,MAAM,KAAK,QAAQ,CAAC;AAAA,IAC3C;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;AAAA,EAChC,CAAC;AAED,QAAM,SAAS,IAAI,wBAAwB,CAAC,MAAM;AAChD,UAAM,UAAU,EAAE;AAClB,QAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,QAAQ,OAAO,GAAG;AAC7E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,MAAM,QAAQ,oBAAoB;AACpC,UAAI;AACJ,UAAI;AAAE,aAAK,CAAC,CAAC,MAAM,QAAQ,mBAAmB,OAAkC;AAAA,MAAG,SAC5E,GAAG;AACR,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,iBAAiB,GAAG,EAAE,EAAE;AAAA,MAC5E;AACA,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,wBAAwB,EAAE;AACrF,aAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,IACtC;AAEA,WAAO,EAAE,OAAO,SAAS,EAAE,uBAAuB,yDAAyD,EAAE;AAAA,EAC/G,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,EAAE,GAAG,iBAAiB,MAAM,QAAQ,cAAc;AACpD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AAKA,QAAI,EAAE,YAAY,QAAQ,EAAE,UAAU,MAAM;AAC1C,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,MAEF,EAAE;AAAA,IACJ;AAOA,QAAI,QAAQ,GAAG,MAAM,UAAU,OAAK,EAAE,aAAa,IAAI;AACvD,QAAI,QAAQ,EAAG,SAAQ,GAAG,MAAM;AAChC,UAAM,SAAmB,CAAC;AAC1B,QAAI,OAAO;AACX,QAAI,SAAS;AACb,eAAW,KAAK,GAAG,MAAM,MAAM,KAAK,GAAG;AAIrC,YAAM,eAAe,UAAU,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC/E,eAAS;AAGT,UAAI,EAAE,cAAc,cAAc;AAChC,eAAO,KAAK,OAAO,EAAE,GAAG,sBAAsB;AAAA,MAChD;AAGA,UAAI,CAAC,kBAAkB,CAAC,GAAG;AACzB,eAAO,KAAK,OAAO,EAAE,GAAG,mBAAmB;AAC3C,eAAO;AACP,iBAAS;AACT;AAAA,MACF;AACA,aAAO,SAAS,YAAY,CAAC,GAAG,YAAY;AAAA,IAC9C;AAMA,UAAM,aAAc,GAAG,eAAe,UAAa,GAAG,eAAe,OACjE,YAAY,GAAG;AACnB,QAAI,SAAS,YAAY;AACvB,aAAO,KAAK,wDAAwD;AAAA,IACtE;AACA,QAAI,OAAO,QAAQ;AACjB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IACxD;AACA,UAAM,eAAmB,GAAG,MAAM;AAClC,UAAM,iBAAmB,eAAe;AACxC,UAAM,mBAAmB;AAMzB,QAAI,mBAAmB,GAAG;AACxB,aAAO,EAAE,QAAQ;AAAA,QACf,QAAmB;AAAA,QACnB,IAAmB;AAAA,QACnB,QAAmB;AAAA,QACnB,eAAmB;AAAA,QACnB,iBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,QAC9D,YAAmB;AAAA,MACrB,EAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,QAAmB;AAAA,MACnB,IAAmB;AAAA,MACnB,eAAmB;AAAA,MACnB,iBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB,kBAAmB,iBAAiB,IAAI,GAAG,MAAM,KAAK,EAAE,MAAM;AAAA,MAC9D,YAAmB;AAAA,IACrB,EAAC;AAAA,EACH,CAAC;AACH;;;ACzKA,IAAM,cAAc,oBAAI,IAAU,CAAC,UAAU,SAAS,YAAY,CAAC;AACnE,IAAM,eAAe,oBAAI,IAAI,CAAC,QAAQ,eAAe,WAAW,CAAC;AACjE,IAAM,cAAc;AAEb,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,SAAS,QAAQ;AAAA,MAAG,CAAC,mBAAmB,QAAQ;AAAA,MAAG,CAAC,OAAO,QAAQ;AAAA,MAAG,CAAC,oBAAoB,QAAQ;AAAA,IACtG,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,WAAW,EAAE;AAAA,IAClD;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,gBAAgB,KAAK,KAAK,OAAO,EAAE;AAAA,MACxF;AACA,WAAK,SAAS;AACd,YAAM,QAAQ,KAAK;AACnB,UAAI,UAAU,SAAU,MAAK,cAAc;AAC3C,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,UAAU,MAAM,OAAO,KAAK,GAAG,CAAC;AACxG,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE;AAC5E,UAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AAC5F,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QAAe,iBAAiB;AAAA,QAAK,QAAQ;AAAA,QACpD,kBAAmB,EAAE,oBAA+B;AAAA,MACtD,EAAC;AAAA,IACH;AAEA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,QAAQ,GAAG,CAAC,mBAAmB,QAAQ,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC;AAClG,QAAI,IAAK,QAAO;AAChB,UAAM,QAAS,EAAE,SAAoB;AACrC,QAAI,CAAC,aAAa,IAAI,KAAK,GAAG;AAC5B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,WAAW,EAAE;AAAA,IAClD;AACA,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,UAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAI,KAAK,UAAU,UAAU;AAC3B,eAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,MACzF;AACA,WAAK,SAAS;AACd,YAAM,WAAsB,KAAK,eAAe;AAChD,WAAK,cAAc;AACnB,WAAK,QAAQ;AACb,WAAK,aAAa,MAAM,IAAI;AAC5B,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,SAAS,CAAC;AAClF,aAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,OAAO,SAAS,EAAE;AAAA,IACxE;AACA,QAAI,UAAU,eAAe;AAC3B,YAAM,MAAO,EAAE,mBAA+B,EAAE;AAChD,UAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE;AAC5E,UAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,GAAG,EAAE,EAAE;AAG5F,UAAI,QAAQ,EAAE,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,kDAAkD,EAAE;AACnH,SAAG,QAAQ,IAAI,GAAG,EAAG,SAAS;AAC9B,aAAO,EAAE,QAAQ,EAAE,OAAO,eAAe,iBAAiB,KAAK,QAAQ,MAAM,EAAE;AAAA,IACjF;AACA,OAAG,QAAQ;AACX,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,WAAW,GAAG,IAAI,OAAO,SAAS,EAAE;AAAA,EAC7E,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AACxH,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,iBAAiB,KAAK,KAAK,OAAO,EAAE;AAAA,IACzF;AAGA,QAAI,0BAA0B,IAAI,IAAI,EAAE,SAAS,EAAE,IAAc,GAAG;AAClE,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA+E,EAAE;AAAA,IACrF;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAgB,OAAO,aAAa,MAAM,EAAE,OAA6B,CAAC;AAC3H,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,SAAS,GAAG,CAAC,SAAS,QAAQ,CAAC,CAAC;AACxE,QAAI,IAAK,QAAO;AAChB,QAAI,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,WAAW,GAAG;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,UAAoB,MAAM,QAAQ,EAAE,OAAO,IAC7C,CAAC,GAAG,EAAE,OAAmB,IACzB,CAAC,WAAW,cAAc,cAAc;AAC5C,UAAM,QAAiC,CAAC;AACxC,QAAI,QAAQ,SAAS,SAAS,GAAG;AAE/B,YAAM,UAAU,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,QAAM;AAAA,QAC1D,KAAK,EAAE;AAAA,QAAK,MAAM,EAAE;AAAA,QACpB,GAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,QACjC,GAAI,EAAE,QAAQ,SAAS,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,MACjD,EAAE;AACF,UAAI,QAAQ,OAAQ,OAAM,UAAU;AAAA,IACtC;AACA,QAAI,QAAQ,SAAS,YAAY,GAAG;AAClC,YAAM,QAAQ,MAAM,KAAK,UAAU,GAAG,KAAK,CAAC,EACzC,OAAO,OAAK,EAAE,UAAU,eAAe,EAAE,UAAU,cAAc,EAAE,UAAU,eAAe,EAAE,UAAU,YAAY,EACpH,IAAI,QAAM;AAAA,QAAE,IAAI,EAAE;AAAA,QAAI,MAAM,EAAE;AAAA,QAAM,OAAO,EAAE;AAAA,QAC5C,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,EAAE;AACJ,UAAI,MAAM,OAAQ,OAAM,aAAa;AAAA,IACvC;AACA,QAAI,QAAQ,SAAS,cAAc,EAAG,OAAM,eAAe,GAAG;AAC9D,QAAI,QAAQ,SAAS,QAAQ,KAAK,GAAG,mBAAoB,OAAM,qBAAqB,GAAG;AACvF,QAAI,QAAQ,SAAS,OAAO,KAAK,QAAQ,SAAS,KAAK,EAAG,OAAM,YAAY,GAAG,MAAM;AAIrF,UAAM,UAAuC,gBAAgB;AAAA,MAC3D,WAAW,GAAG;AAAA,MACd,WAAW,GAAG,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAgB,IAAI,CAAC;AAAA,IAChD,CAAC;AACD,UAAM,SAAS,MAAM,IAAI,WAAW;AACpC,UAAM,OAAyB;AAAA,MAC7B,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa,MAAM,IAAI;AAAA,MACvB,aAAa,EAAE;AAAA,MACf,cAAc,YAAY,OAAO;AAAA,MACjC;AAAA,IACF;AACA,OAAG,UAAU,IAAI,QAAQ,IAAI;AAC7B,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,sBAAsB;AAAA,QACtB,WAAW,KAAK,QAAQ;AAAA,QACxB,UAAU,gBAAgB,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,2BAA2B,QAAQ;AAAA,MAAG,CAAC,wBAAwB,QAAQ;AAAA,MAAG,CAAC,eAAe,QAAQ;AAAA,MACnG,CAAC,mBAAmB,SAAS;AAAA,MAAG,CAAC,UAAU,QAAQ;AAAA,IACrD,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,UAAM,SAAU,EAAE,2BACD,EAAE,wBACF,EAAE;AACnB,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AACvF,UAAM,OAAO,GAAG,UAAU,IAAI,MAAM;AACpC,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,qBAAqB,MAAM,EAAE,EAAE;AACjG,QAAI,MAAM,QAAQ,EAAE,eAAe,KAAK,EAAE,gBAAgB,WAAW,GAAG;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,EAAE;AAAA,IAC1E;AACA,UAAM,OAAkB,EAAE,mBAAgC,KAAK,QAAQ;AACvE,UAAM,WAAqB,CAAC;AAC5B,QAAI,KAAK,SAAS,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc;AACpE,SAAG,eAAe,KAAK,QAAQ,MAAM;AACrC,eAAS,KAAK,cAAc;AAAA,IAC9B;AACA,QAAI,KAAK,SAAS,SAAS,KAAK,MAAM,QAAQ,KAAK,QAAQ,MAAM,OAAO,GAAG;AACzE,YAAM,YAAY,oBAAI,IAAqC;AAC3D,iBAAW,KAAK,KAAK,QAAQ,MAAM,SAA2C;AAC5E,kBAAU,IAAI,EAAE,KAAe,CAAC;AAAA,MAClC;AACA,iBAAW,CAAC,KAAK,KAAK,KAAK,WAAW;AACpC,YAAI,GAAG,QAAQ,IAAI,GAAG,GAAG;AACvB,gBAAM,MAAM,GAAG,QAAQ,IAAI,GAAG;AAG9B,gBAAM,OAAQ,MAAM,QAAmB,IAAI;AAC3C,cAAI,SAAS,WAAW,IAAI,SAAS,QAAS,KAAI,OAAO;AACzD,cAAI,SAAS,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,MAAkB,IAAI;AAAA,QAC7E;AAAA,MACF;AACA,eAAS,KAAK,SAAS;AAAA,IACzB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,gBAAgB;AAAA,MAAQ,WAAW,KAAK,QAAQ;AAAA,MAAW;AAAA,MAC3D,GAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAiB,IAAI,CAAC;AAAA,IACnD,EAAC;AAAA,EACH,CAAC;AAED,QAAM,SAAS,IAAI,qBAAqB,CAAC,MAAM;AAC7C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,EAAE;AAChB,UAAM,MAAM,GAAG,MAAM,IAAI,KAAK;AAC9B,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC7D,QAAI,0BAA0B,IAAI,GAAG,EAAE,SAAS,EAAE,IAAc,GAAG;AACjE,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA+E,EAAE;AAAA,IACrF;AACA,UAAM,UAAW,EAAE,kBAA8C,CAAC;AAClE,QAAI,OAAO,QAAQ,SAAS,YAAY,CAAC,QAAQ,MAAM;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AACA,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,2BAA2B,QAAQ,GAAG,CAAC,UAAU,QAAQ,CAAC,CAAC;AACxF,QAAI,IAAK,QAAO;AAChB,UAAM,WAAY,QAAQ,YAAuB,IAAI;AACrD,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,QAAI,QAAQ,SAAS,UAAa,QAAQ,SAAS,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,gBAAiB,QAAQ,QAAiB,IAAI;AACpD,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AACA,QAAI,QAAQ,oBAAoB,UAAa,QAAQ,oBAAoB,QAClE,OAAO,QAAQ,oBAAoB,WAAW;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kDAAkD,EAAE;AAAA,IACzF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,UAAM,QAAQ,MAAM,IAAI,OAAO;AAC/B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAM,QAAQ;AAAA,MACd,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,QAAQ,SAAqC,CAAC;AAAA,MACtD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,YAAY,IAAI;AAAA,MAChB,SAAS,CAAC;AAAA,QAAE,IAAI;AAAA,QAAK,MAAM,EAAE;AAAA,QAAgB,OAAO;AAAA,QACxC,MAAM,cAAc,IAAI,EAAE,KAAM,EAAE,UAAqB,EAAE;AAAA,MAAG,CAAC;AAAA,MACzE,QAAQ;AAAA,IACV;AAMA,QAAI,IAAI,mBAAoB,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACxG,cAAQ,kBAAkB;AAAA,IAC5B,WAAW,qBAAqB,SAAS;AACvC,cAAQ,kBAAkB,CAAC,CAAC,QAAQ;AAAA,IACtC;AAGA,YAAQ,gBAAgB,iBAAiB,KAAK,EAAE,IAAI;AACpD,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,QAAI,QAAQ;AACZ,QAAI,gBAAgB;AACpB,QAAI,aAAa;AACjB,QAAI,QAAQ,KAAK;AAAA,MAAE,IAAI;AAAA,MAAK,MAAM,EAAE;AAAA,MAAgB,OAAO;AAAA,MACxC,MAAM,MAAM,KAAK,KAAM,EAAE,UAAqB,EAAE;AAAA,IAAG,CAAC;AACvE,WAAO,EAAE,QAAQ;AAAA,MACf,oBAAoB,IAAI;AAAA,MAAI,aAAa;AAAA,MACzC,GAAI,EAAE,UAAU,OAAO,EAAE,QAAQ,EAAE,OAAiB,IAAI,CAAC;AAAA,IAC3D,EAAE;AAAA,EACJ,CAAC;AAED,QAAM,SAAS,IAAI,4BAA4B,CAAC,MAAM;AACpD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,UAAU,QAAQ,CAAC,CAAC;AACjD,QAAI,IAAK,QAAO;AAChB,UAAM,IAAK,EAAE,eAAyB,EAAE;AACxC,QAAI,CAAC,YAAY,IAAI,CAAC,GAAG;AACvB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iDAAiD,EAAE;AAAA,IACxF;AACA,OAAG,eAAe;AAClB,WAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,cAAc,GAAI,EAAE,UAAU,OAAO,EAAE,QAAQ,EAAE,OAAiB,IAAI,CAAC,EAAG,EAAE;AAAA,EAClH,CAAC;AACH;;;AC3SA,IAAM,eAAe,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAKtE,IAAM,aAAa;AACnB,IAAM,gBAAgB;AAEtB,SAAS,UAAU,MAAgE;AACjF,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,MAAI,SAAS,GAAG;AACd,UAAM,OAAO,KAAK,MAAM,GAAG,KAAK;AAChC,UAAM,MAAM,KAAK,MAAM,QAAQ,CAAC;AAChC,QAAI,SAAS,YAAY,WAAW,KAAK,GAAG,EAAG,QAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,SAAS,KAAK,EAAE,EAAE,EAAE;AAC/F,SAAK,SAAS,mBAAmB,SAAS,8BAA8B,cAAc,KAAK,GAAG,GAAG;AAC/F,aAAO,EAAE,MAAM,QAAQ,EAAE,WAAW,WAAW,GAAG,EAAE,EAAE;AAAA,IACxD;AAAA,EACF;AACA,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO,EAAE,MAAM,MAAM,QAAQ,CAAC,EAAE;AAC3F,QAAM,IAAI,MAAM,iBAAiB,IAAI,EAAE;AACzC;AAEA,SAAS,eAAe,OAA8C;AACpE,QAAM,SAAS,UAAU,MAAM,IAAI;AACnC,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,MAAM,MAAM,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK;AACpD,QAAM,SAAS,MAAM,MAAM,OAAO,OAAK,EAAE,iBAAiB,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;AACpF,QAAM,UAAU,MAAM,WAAW,CAAC;AAElC,QAAM,WAAW,CAAC,OAChB,GAAG,OAAO,CAAC,GAAG,MAAM,KAAK,QAAQ,EAAE,KAAK,KAAK,IAAM,CAAC;AAEtD,MAAI,OAAO,SAAS,oBAAoB;AACtC,WAAO;AAAA,MACL,SAAS,IAAI,UAAU,IAAI,aAAa;AAAA,MACxC,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,eAAe;AACjC,UAAM,SAAS,IAAI,WAAW,MAAM,aAAa,UAAU,IAAI,WAAW;AAC1E,WAAO;AAAA,MACL,SAAS,SAAS,aAAa;AAAA,MAC/B,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,IACjC;AAAA,EACF;AACA,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,IAAI,OAAO,OAAO;AACxB,UAAM,OAAO,IAAI,SAAS,IAAI;AAC9B,QAAI,OAAO,GAAG;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,QAAQ;AAAA,QAAkB,MAAM,MAAM;AAAA,QAC3D,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,QAAG,QAAQ,CAAC;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,MACL,SAAS,IAAI,SAAS,IAAI,SAAS,aAAa;AAAA,MAChD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,IAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,MAC1C,QAAQ,CAAC;AAAA,IACX;AAAA,EACF;AACA,MAAI,OAAO,SAAS,iBAAiB;AACnC,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,MAAI,OAAO,SAAS,2BAA2B;AAC7C,QAAI,OAAO,QAAQ;AACjB,aAAO;AAAA,QACL,SAAS;AAAA,QAAY,MAAM,MAAM;AAAA,QACjC,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE;AAAA,QACxB,QAAQ,OAAO,IAAI,OAAK,EAAE,KAAK;AAAA,MACjC;AAAA,IACF;AACA,UAAM,OAAO,SAAS,GAAG,GAAG,OAAO,SAAS,GAAG;AAC/C,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,OAAO,YAAY,aAAa;AAAA,MACxD,MAAM,MAAM;AAAA,MACZ,OAAO,EAAE,KAAK,MAAM,KAAK,KAAK;AAAA,MAAG,QAAQ,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO,EAAE,SAAS,SAAS,MAAM,MAAM,MAAM,QAAQ,oBAAoB,OAAO,IAAI,GAAG;AACzF;AAEO,SAAS,qBAAqB,OAA0B;AAC7D,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,eAAW,QAAQ,CAAC,MAAM,cAAc,GAAG;AACzC,YAAM,IAAI,EAAE,IAAI;AAChB,UAAI,KAAK,QAAQ,OAAO,MAAM,YAAY,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AACtG,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,IAAI,wCAAwC,EAAE;AAAA,MACtF;AAAA,IACF;AACA,QAAI,OAAO,EAAE,SAAS,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AAC5F,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,QAAQ,GAAG,CAAC,QAAQ,QAAQ,CAAC,CAAC;AACtE,QAAI,IAAK,QAAO;AAGhB,UAAM,UAAW,EAAE,WAAW,CAAC;AAC/B,QAAI,CAAC,OAAO,OAAO,OAAO,EAAE,MAAM,CAAC,MAAM,OAAO,MAAM,YAAY,OAAO,UAAU,CAAC,CAAC,GAAG;AACtF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2CAA2C,EAAE;AAAA,IAClF;AACA,UAAM,OAAQ,EAAE,QAAQ,CAAC;AACzB,QAAI,CAAC,OAAO,OAAO,IAAI,EAAE,MAAM,CAAC,MAAM,OAAO,MAAM,SAAS,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wCAAwC,EAAE;AAAA,IAC/E;AACA,UAAM,KAAK,EAAE,MAAM,EAAE;AACrB,UAAM,eAAyB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACvG,QAAI,CAAC,aAAa,QAAQ;AACxB,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,QAAI;AAAE,gBAAU,EAAE,IAAc;AAAA,IAAG,SAC5B,GAAG;AACR,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,GAAG,EAAE;AAAA,IACtD;AAGA,UAAM,yBAAyB,EAAE;AACjC,QAAI,2BAA2B,UAAa,2BAA2B,QAAQ,2BAA2B,IAAI;AAC5G,UAAI,OAAO,2BAA2B,UAAU;AAC9C,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,MACzE;AAGA,UAAI,aAAa,IAAI,sBAAsB,GAAG;AAC5C,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,KAAK,UAAU,sBAAsB,CAAC,EAAE,EAAE;AAAA,MAC5G;AACA,UAAI,GAAG,cAAc,IAAI,sBAAsB,GAAG;AAChD,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mCAAmC,sBAAsB,EAAE,EAAE;AAAA,MAClG;AAAA,IACF;AACA,UAAM,KAAM,EAAE,mBAA8B,MAAM,IAAI,eAAe;AACrE,UAAM,QAAsB;AAAA,MAC1B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,QAAQ,EAAE;AAAA,MACV;AAAA,MACA,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,MACR,UAAU,EAAE;AAAA,MACZ,OAAO;AAAA,MACP,UAAU,CAAC;AAAA,MACX,OAAO,CAAC;AAAA,MACR,WAAW,MAAM,IAAI;AAAA,IACvB;AACA,OAAG,cAAc,IAAI,IAAI,KAAK;AAC9B,WAAO,EAAE,QAAQ,EAAE,iBAAiB,IAAI,OAAO,OAAO,EAAE;AAAA,EAC1D,CAAC;AAED,QAAM,SAAS,IAAI,sBAAsB,CAAC,MAAM;AAC9C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,QAAQ,GAAG,CAAC,QAAQ,QAAQ,CAAC,CAAC;AACtE,QAAI,IAAK,QAAO;AAChB,UAAM,SAAS,KAAK;AAAA,MAClB,IAAI,MAAM,IAAI;AAAA,MACd,MAAM,EAAE;AAAA,MACR,MAAO,EAAE,WAAuB,EAAE,QAAmB;AAAA,IACvD,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,QAAQ;AAC1B,aAAO,EAAE,OAAO,SAAS,EAAE,wBAAwB,uBAAuB,EAAE;AAAA,IAC9E;AACA,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,IAAI,EAAE;AACZ,QAAI,MAAM,SAAS,MAAM,SAAS,MAAM,WAAW;AACjD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8BAA8B,EAAE;AAAA,IACrE;AACA,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,gBAAgB,SAAS,CAAC,CAAC;AACxD,QAAI,IAAK,QAAO;AAChB,UAAM,QAAQ,EAAE;AAChB,QAAI,CAAC,MAAM,aAAa,SAAS,KAAK,GAAG;AACvC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,SAAS,KAAK;AAAA,MAA0B,EAAE;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM,KAAK,OAAK,EAAE,UAAU,KAAK,GAAG;AAC5C,aAAO,EAAE,OAAO,SAAS,EAAE,qBAAqB,SAAS,KAAK,oBAAoB,EAAE;AAAA,IACtF;AACA,UAAM,MAAM,KAAK;AAAA,MACf,IAAI,MAAM,IAAI;AAAA,MACd;AAAA,MACA,MAAM;AAAA,MACN,QAAQ,EAAE;AAAA,MACV,SAAS,EAAE;AAAA,MACX,cAAc,CAAC,CAAC,EAAE;AAAA,IACpB,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE;AAAA,EACtC,CAAC;AAED,QAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM;AAC5C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,QAAQ,GAAG,cAAc,IAAI,EAAE,eAAyB;AAC9D,QAAI,CAAC,MAAO,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE;AACvE,QAAI,MAAM,UAAU,SAAU,QAAO,EAAE,QAAQ,MAAM,QAAS;AAC9D,UAAM,QAAQ;AACd,UAAM,UAAU,eAAe,KAAK;AACpC,WAAO,EAAE,QAAQ,MAAM,QAAQ;AAAA,EACjC,CAAC;AACH;;;AC1OA,IAAMC,gBAAe,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAE/D,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,OAAO,GAAG;AACvC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AAEA,QAAI,OAAO,EAAE,OAAO,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qBAAqB,EAAE;AACxF,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,iBAAiB,SAAS,CAAC,CAAC;AACzD,QAAI,IAAK,QAAO;AAChB,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,EAAE;AACpB,QAAI,OAAO,cAAc,YAAY,CAAC,UAAU,WAAW,QAAQ,GAAG;AACpE,UAAI,CAAC,GAAG,QAAQ,IAAI,SAAS,GAAG;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,aAAa,SAAS;AAAA,QAAkB,EAAE;AAAA,MAC9C;AAAA,IACF;AACA,UAAM,UAAU,EAAE;AAClB,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,CAAC,QAAQ,QAAQ;AAC9C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AACA,UAAM,WAA8B,CAAC;AACrC,eAAW,KAAK,SAA2C;AACzD,UAAI,MAAM,QAAQ,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,KAAK,OAAO,EAAE,YAAY,UAAU;AAC5F,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6DAA6D,EAAE;AAAA,MACpG;AACA,YAAM,UAAU,YAAY,GAAG,CAAC,CAAC,YAAY,SAAS,CAAC,CAAC;AACxD,UAAI,QAAS,QAAO;AACpB,YAAM,MAAM,EAAE;AACd,UAAI,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,GAAG;AAC9B,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,GAAG,EAAE,EAAE;AAAA,MACxE;AACA,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAC7B,UAAI,KAAK,aAAa,UAAU;AAC9B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,QAAQ,GAAG,iCAAiC,QAAQ;AAAA,QAAE,EAAE;AAAA,MAC5D;AACA,eAAS,KAAK;AAAA,QACZ,SAAS;AAAA,QACT,OAAO,EAAE;AAAA,QACT,gBAAgB,EAAE;AAAA,QAClB,aAAa,EAAE;AAAA,QACf,UAAW,EAAE,YAAqC,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AAGA,UAAM,oBAAoB,EAAE;AAC5B,QAAI,sBAAsB,UAAa,sBAAsB,QAAQ,sBAAsB,IAAI;AAC7F,UAAI,OAAO,sBAAsB,UAAU;AACzC,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE;AAAA,MACpE;AAGA,UAAIA,cAAa,IAAI,iBAAiB,GAAG;AACvC,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,KAAK,UAAU,iBAAiB,CAAC,EAAE,EAAE;AAAA,MAClG;AACA,UAAI,GAAG,SAAS,IAAI,iBAAiB,GAAG;AACtC,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8BAA8B,iBAAiB,EAAE,EAAE;AAAA,MACxF;AAAA,IACF;AACA,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,UAAU;AAC3D,UAAM,KAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,MAAM,IAAI;AAAA,MACvB,OAAO;AAAA,MACP,SAAS,EAAE;AAAA,MACX,eAAgB,EAAE,iBAA0C,CAAC;AAAA,MAC7D,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,EAAE;AACtB,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,YAAY,UAAU,SAAS,IAAI,OAAK,EAAE,OAAO,EAAE,EAAE;AAAA,EACjG,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,QAAI,GAAG,UAAU,WAAW,QAAQ,GAAG;AACrC,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF,OAAO;AACL,UAAI,aAAa,GAAG,WAAW;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAqC,EAAE;AAAA,MAC3C;AACA,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAoC,EAAE;AAAA,MAC1C;AAAA,IACF;AAGA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,qBAAqB,SAAS,CAAC,CAAC;AAC7D,QAAI,IAAK,QAAO;AAEhB,QAAI,MAAM,QAAQ,EAAE,iBAAiB,KAAK,EAAE,kBAAkB,WAAW,GAAG;AAC1E,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,qCAAqC,EAAE;AAAA,IAC5E;AACA,UAAM,WAAW,IAAI,IAAI,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO,CAAC;AACrD,UAAM,cAAwB,MAAM,QAAQ,EAAE,iBAAiB,IAC3D,CAAC,GAAG,EAAE,iBAA6B,IACnC,GAAG,MAAM,IAAI,OAAK,EAAE,OAAO;AAC/B,eAAW,OAAO,aAAa;AAC7B,UAAI,CAAC,SAAS,IAAI,GAAG,GAAG;AACtB,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,QAAQ,GAAG,sBAAsB,EAAE;AAAA,MACxE;AAAA,IACF;AAIA,eAAW,OAAO,aAAa;AAC7B,UAAI,GAAG,MAAM,IAAI,GAAG,GAAG,aAAa,GAAG,UAAU;AAC/C,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,QAAQ,GAAG,iCAAiC,GAAG,QAAQ;AAAA,QAAE,EAAE;AAAA,MAC/D;AAAA,IACF;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,eAAW,OAAO,aAAa;AAC7B,YAAM,OAAO,GAAG,MAAM,IAAI,GAAG;AAI7B,UAAI,aAAa,KAAK,SAAU,MAAK,gBAAgB,QAAQ,KAAK,iBAAiB,CAAC,GAAG,OAAO,MAAM,GAAG,QAAQ,CAAC;AAChH,WAAK,WAAW;AAChB,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK;AAAA,QAChB,IAAI;AAAA,QAAK,MAAM;AAAA,QAAU,OAAO,KAAK;AAAA,QACrC,MAAM,yBAAyB,GAAG,QAAQ;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,OAAG,QAAQ;AACX,OAAG,cAAc;AACjB,OAAG,oBAAoB,CAAC,GAAG,WAAW;AACtC,OAAG,iBAAiB,EAAE;AACtB,OAAG,cAAc;AACjB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,UAAU,CAAC,GAAG,WAAW,GAAG,UAAU,SAAS,EAAE;AAAA,EACtF,CAAC;AAED,QAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM;AAC3C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,KAAK,GAAG,SAAS,IAAI,EAAE,UAAoB;AACjD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iBAAiB,EAAE;AAC/D,QAAI,GAAG,UAAU,YAAY;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,mBAAmB,GAAG,KAAK,EAAE,EAAE;AAAA,IACtF;AACA,UAAM,WAAW,EAAE;AACnB,OAAG,iBAAiB,EAAE;AACtB,OAAG,2BAA2B,EAAE;AAChC,QAAI,CAAC,GAAG,UAAU,WAAW,QAAQ,KAAK,aAAa,GAAG,WAAW;AACnE,SAAG,QAAQ;AACX,SAAG,cAAc,MAAM,IAAI;AAAA,IAC7B;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,GAAG,MAAM,EAAE;AAAA,EACvD,CAAC;AACH;;;AC/KA,IAAM,OAA+B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAAE;AAC/E,IAAM,UAAU;AAQT,SAAS,aAAa,OAAwC;AACnE,QAAM,IAAI,MAAM;AAChB,MAAI,OAAO,MAAM,YAAY,OAAO,UAAU,CAAC,EAAG,QAAO;AACzD,MAAI,OAAO,MAAM,YAAY,QAAQ,KAAK,CAAC,EAAG,QAAO,OAAO,CAAC;AAC7D,SAAO;AACT;AAGO,SAAS,cAAc,OAAwC;AACpE,QAAM,OAAO,MAAM,eAAe;AAClC,SAAO,OAAO,SAAS,YAAY,OAAO,UAAU,eAAe,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI;AACrG;AAEA,SAAS,aAAa,OAIpB;AACA,QAAM,OAAO,aAAa,KAAK;AAC/B,QAAM,IAAI,cAAc,KAAK;AAC7B,MAAI,KAAK,EAAG,QAAO,EAAE,OAAO,QAAQ,SAAS,oCAAoC;AACjF,MAAI,MAAM,KAAK,OAAO,IAAK,QAAO,EAAE,OAAO,QAAQ,SAAS,mDAAmD;AAC/G,MAAI,MAAM,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,QAAQ,SAAS,oDAAoD;AAClH,MAAI,KAAK,KAAK,QAAQ,KAAM,QAAO,EAAE,OAAO,cAAc,UAAU,KAAM,SAAS,gDAAgD;AACnI,SAAO,EAAE,OAAO,cAAc,UAAU,MAAM,SAAS,qCAAqC;AAC9F;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,cAAc,CAAC,MAAM;AACtC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,EAAE,eAAe,UAAa,EAAE,eAAe,QAAQ,CAAC,MAAM,QAAQ,EAAE,UAAU,GAAG;AACvF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,UAAM,aAAc,EAAE,cAA8C,CAAC;AACrE,QAAI,CAAC,WAAW,QAAQ;AACtB,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,4BAA4B,EAAE;AAAA,IACrF;AACA,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,eAAe;AAC/B,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,cAAc,MAAM,CAAC,GAAG,UAAU,CAAC;AAC3D,mBAAW,EAAE;AACb,oBAAY,EAAE;AAAA,MAChB,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,yBAAyB,GAAG,EAAE,EAAE;AAAA,MACzF;AAAA,IACF,OAAO;AAIL,YAAM,WAAW,CAAC,MAAgB,OAAO,MAAM,WAAW,GAAG,QAAQ,IAAI,CAAC,IAAI;AAC9E,YAAM,WAAW,WAAW,OAAO,OAAK;AAAE,cAAM,IAAI,SAAS,CAAC;AAAG,eAAO,CAAC,CAAC,KAAK,CAAC,EAAE;AAAA,MAAQ,CAAC;AAC3F,UAAI,CAAC,SAAS,QAAQ;AACpB,eAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,sDAAsD,EAAE;AAAA,MACnH;AACA,iBAAW,SAAS,CAAC;AACrB,YAAM,eAAsE,CAAC;AAC7E,UAAI,SAAS;AACb,iBAAW,KAAK,YAAY;AAC1B,cAAM,IAAI,SAAS,CAAC;AACpB,YAAI,CAAC,EAAG;AACR,YAAI,EAAE,OAAQ,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,SAAS,CAAC;AAAA,iBAClE,CAAC,OAAQ,UAAS;AAAA,YACtB,cAAa,KAAK,EAAE,WAAW,GAAG,iBAAiB,qBAAqB,CAAC;AAAA,MAChF;AACA,kBAAY;AAAA,QACV,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,YAAY,KAAK,UAAU,QAAQ,CAAC;AAAA,MAAkB,EAAE;AAAA,IAC5D;AAIA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAIA,UAAM,UAAU,OAAO,MAAM,EAAE,IAAI;AACnC,QAAI,aAAa,KAAK,YAAY,QAAQ,OAAQ,MAAK,gBAAgB,QAAQ,KAAK,iBAAiB,CAAC,GAAG,OAAO;AAChH,SAAK,WAAW;AAChB,SAAK,aAAa,MAAM,IAAI;AAC5B,SAAK,QAAQ,KAAK;AAAA,MAAE,IAAI,KAAK;AAAA,MAAY,MAAM;AAAA,MAC3B,OAAO,KAAK;AAAA,MAAO,MAAM,aAAa,QAAQ;AAAA,IAAG,CAAC;AACtE,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAc,SAAS;AAAA,MACtC,aAAa;AAAA,MAAuB,aAAa,KAAK;AAAA,MACtD,MAAM,KAAK;AAAA,MACX,WAAW,UAAU;AAAA,MACrB,gBAAgB,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAAA,MAChD,WAAY,UAAU,WAAsB;AAAA,MAC5C,yBAAyB,UAAU;AAAA,IACrC;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,WAAO,EAAE,QAAQ,EAAE,UAAU,mBAAmB,OAAO,UAAU,EAAE;AAAA,EACrE,CAAC;AAED,QAAM,SAAS,IAAI,gBAAgB,CAAC,MAAM;AACxC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,0BAA0B,QAAQ,CAAC,CAAC;AACjE,QAAI,IAAK,QAAO;AAChB,UAAM,QAAiC;AAAA,MAAE,GAAI,KAAK,iBAAiB,CAAC;AAAA,MAC1B,GAAK,EAAE,0BAAsD,CAAC;AAAA,IAAG;AAC3G,QAAI,CAAC,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,8BAA8B,6BAA6B,EAAE;AAAA,IAC1F;AACA,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM,QAAQ,mBAAmB;AACnC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,kBAAkB,MAAM,KAAK;AACrD,gBAAQ,EAAE;AACV,mBAAW,EAAE;AACb,kBAAW,EAAE,UAAU,WAAsB;AAC7C,mBAAY,EAAE,UAAU,aAAwB;AAAA,MAClD,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,uBAAuB,GAAG,EAAE,EAAE;AAAA,MACvF;AAAA,IACF,OAAO;AACL,YAAM,IAAI,aAAa,KAAK;AAC5B,cAAQ,EAAE;AAAO,iBAAW,EAAE;AAAU,gBAAU,EAAE;AACpD,iBAAW;AAAA,IACb;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MAAgB,SAAS;AAAA,MACxC,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MAAI,WAAW;AAAA,MAC1B,gBAAgB;AAAA,MAAO,WAAW;AAAA,MAClC,GAAI,aAAa,SAAY,EAAE,sBAAsB,SAAS,IAAI,CAAC;AAAA,IACrE;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,UAAM,SAAkC;AAAA,MACtC;AAAA,MAAO,mBAAmB;AAAA,MAC1B,WAAW,EAAE,WAAW,UAAU,YAAY,OAAO,KAAK,KAAK,GAAG,QAAQ;AAAA,IAC5E;AACA,QAAI,aAAa,OAAW,QAAO,uBAAuB;AAC1D,WAAO,EAAE,OAAO;AAAA,EAClB,CAAC;AAED,QAAM,SAAS,IAAI,iBAAiB,CAAC,MAAM;AACzC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,6BAA6B,QAAQ,CAAC,CAAC;AACpE,QAAI,IAAK,QAAO;AAChB,UAAM,QAAQ,EAAE,GAAI,KAAK,iBAAiB,CAAC,EAAG;AAC9C,QAAI,UAAmB,IAAwB;AAC/C,QAAI,MAAM,QAAQ,kBAAkB;AAClC,UAAI;AACF,cAAM,IAAI,MAAM,QAAQ,iBAAiB,MAAM,KAAK;AACpD,mBAAW,CAAC,CAAC,EAAE;AACf,aAAK,EAAE;AACP,eAAO,EAAE,kBAAkB,CAAC;AAAA,MAC9B,SAAS,GAAG;AACV,cAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,eAAO,EAAE,OAAO,SAAS,EAAE,4BAA4B,4BAA4B,GAAG,EAAE,EAAE;AAAA,MAC5F;AAAA,IACF,OAAO;AACL,YAAM,OAAO,aAAa,KAAK;AAC/B,YAAM,IAAI,cAAc,KAAK;AAC7B,iBAAW,KAAK,KAAM,KAAK,KAAK,OAAO;AACvC,WAAK,EAAE;AACP,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AACA,QAAI,UAAU;AACZ,UAAI,CAAC,GAAI,QAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QAClC;AAAA,MAA8C,EAAE;AAClD,UAAI,CAAC,GAAG,WAAW,QAAQ,KAAK,CAAC,GAAG,QAAQ,IAAI,EAAE,GAAG;AACnD,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,qBAAqB,EAAE;AAAA,QAA2B,EAAE;AAAA,MACxD;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,IAAI,WAAW;AACnC,UAAM,WAAkC;AAAA,MACtC,IAAI;AAAA,MAAO,MAAM;AAAA,MACjB,eAAe;AAAA,MACf,SAAS,WAAW,EAAE,UAAU,MAAM,GAAG,IAAI,EAAE,UAAU,MAAM;AAAA,MAC/D,aAAa;AAAA,MAAuB,aAAa,MAAM,IAAI;AAAA,MAC3D,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,MAChB,gBAAgB;AAAA,MAChB,WAAY,KAAK,WAAsB;AAAA,MACvC,GAAI,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;AAAA,IAC9C;AACA,OAAG,gBAAgB,IAAI,OAAO,QAAQ;AACtC,QAAI,UAAU;AACZ,UAAI,MAAM,QAAQ,kBAAkB,IAAI;AACtC,YAAI;AAAE,gBAAM,QAAQ,eAAe,MAAM,EAAE;AAAA,QAAG,QAAQ;AAAA,QAAQ;AAAA,MAChE;AACA,aAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,IAAI,mBAAmB,OAAO,gBAAgB,KAAK,EAAE;AAAA,IAC1F;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,OAAO,mBAAmB,MAAM,EAAE;AAAA,EACjE,CAAC;AACH;;;AC3OO,SAAS,uBAAuB,OAA0B;AAC/D,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,WAAW,SAAS,GAAG;AAC9C,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AAGA,eAAW,KAAK,CAAC,QAAQ,SAAS,GAAG;AACnC,UAAI,OAAO,EAAE,CAAC,MAAM,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,CAAC,mBAAmB,EAAE;AAAA,IAC5F;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,IAAc;AAC9C,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,wBAAwB,EAAE,IAAI,EAAE,EAAE;AAC7F,UAAM,SAAS,EAAE;AACjB,UAAM,SAAS,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,MAAM;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,MAAM,QAAQ,EAAE,IAAI,EAAE,EAAE;AAC7F,QAAI,OAAO,WAAY,QAAO,EAAE,OAAO,SAAS,EAAE,iBAAiB,OAAO,MAAM,aAAa,EAAE;AAE/F,UAAM,SAAS,EAAE;AACjB,QAAI,CAAC,UAAU,OAAO,OAAO,QAAQ,UAAU;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0BAA0B,EAAE;AAAA,IACjE;AAGA,QAAI,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,QAAQ,OAAO,GAAG,GAAG;AACjD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,EAAE,IAAI,wBAAwB,OAAO,GAAG,oCAAoC,EAAE;AAAA,IACtH;AACA,UAAM,MAAM,MAAM,IAAI;AACtB,WAAO,cAAc;AACrB,WAAO,KAAK,KAAK;AAAA,MACf,KAAK;AAAA,MACL,KAAK,OAAO;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,SAAS,QAAQ,SAAS,OAAO,KAAK,YAAY,IAAI,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,SAAS,IAAI,0BAA0B,CAAC,MAAM;AAClD,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,cAAc,KAAK,GAAG;AACrC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AAGA,eAAW,KAAK,CAAC,cAAc,KAAK,GAAG;AACrC,UAAI,OAAO,EAAE,CAAC,MAAM,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,CAAC,mBAAmB,EAAE;AAAA,IAC5F;AACA,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,QAAQ,GAAG,CAAC,UAAU,QAAQ,CAAC,CAAC;AACrE,QAAI,IAAK,QAAO;AAChB,UAAM,SAAS,EAAE;AACjB,QAAI,WAAW,EAAE,YAAY;AAC3B,YAAM,SAAS,SAAS,GAAG,QAAQ,IAAI,MAAM,IAAI;AACjD,UAAI,CAAC,UAAU,OAAO,SAAS,SAAS;AACtC,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAAuD,EAAE;AAAA,MAC7D;AAAA,IACF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,EAAE,UAAoB;AACpD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,mBAAmB,EAAE,UAAU,EAAE,EAAE;AAC9F,UAAM,MAAM,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG;AACjD,QAAI,CAAC,IAAK,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,UAAU,EAAE,GAAG,aAAa,EAAE;AACtF,UAAM,MAAM,MAAM,IAAI;AACtB,QAAI,aAAa;AACjB,QAAI,iBAAkB,EAAE,UAAqB;AAC7C,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,KAAK,IAAI,KAAK,YAAY,KAAK,QAAQ,IAAI,eAAe,EAAE;AAAA,EAChG,CAAC;AACH;;;AC1DA,IAAMC,gBAAe,oBAAI,IAAI,CAAC,aAAa,eAAe,WAAW,CAAC;AAEtE,SAAS,SAAS,IAAoB;AAAE,SAAO,IAAI,KAAK,EAAE,EAAE,QAAQ;AAAG;AAMvE,SAAS,QAAQ,GAAqB;AACpC,MAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAK,MAAM,GAAI,QAAO;AAChF,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,SAAS;AACxC,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,KAAK,CAAW,EAAE,SAAS;AACpE,SAAO;AACT;AAEO,SAAS,gBAAgB,OAA0B;AACxD,QAAM,SAAS,IAAI,eAAe,CAAC,MAAM;AACvC,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,MAAM,WAAW,YAAY,eAAe,mBAAmB,GAAG;AACzF,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,QAAI,CAAC,GAAG,MAAM,IAAI,EAAE,OAAiB,GAAG;AACtC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAAA,IACrD;AACA,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,MAAM,GAAG,CAAC,WAAW,QAAQ,CAAC,CAAC;AACvE,QAAI,IAAK,QAAO;AAEhB,QAAI,OAAO,EAAE,gBAAgB,YAAY,CAAC,OAAO,UAAU,EAAE,WAAW,GAAG;AACzE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AACA,UAAM,KAAK,EAAE;AACb,UAAM,QAAkB,MAAM,QAAQ,EAAE,IAAK,KAAkB,CAAC,EAAY;AAG5E,UAAM,oBAAoB,EAAE;AAC5B,QAAI,sBAAsB,UAAa,sBAAsB,QAAQ,sBAAsB,IAAI;AAC7F,UAAI,OAAO,sBAAsB,UAAU;AACzC,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE;AAAA,MACpE;AAGA,UAAIA,cAAa,IAAI,iBAAiB,GAAG;AACvC,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,KAAK,UAAU,iBAAiB,CAAC,EAAE,EAAE;AAAA,MAClG;AACA,UAAI,GAAG,SAAS,IAAI,iBAAiB,GAAG;AACtC,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8BAA8B,iBAAiB,EAAE,EAAE;AAAA,MACxF;AAAA,IACF;AACA,UAAM,KAAM,EAAE,cAAyB,MAAM,IAAI,WAAW;AAC5D,UAAM,SAAwB;AAAA,MAC5B;AAAA,MACA,SAAS,EAAE;AAAA,MACX,OAAO,EAAE;AAAA,MACT;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,SAAS,EAAE;AAAA,MACX,UAAU,MAAM,IAAI;AAAA,MACpB,aAAa,OAAO,EAAE,WAAW;AAAA,MACjC,mBAAmB,EAAE;AAAA,MACrB,SAAU,EAAE,WAAwC;AAAA,MACpD,OAAO;AAAA,IACT;AACA,OAAG,SAAS,IAAI,IAAI,MAAM;AAC1B,WAAO,EAAE,QAAQ,EAAE,YAAY,IAAI,aAAa,OAAO,YAAY,EAAE;AAAA,EACvE,CAAC;AAED,QAAM,SAAS,IAAI,kBAAkB,CAAC,MAAM;AAC1C,UAAM,KAAK,MAAM,WAAW,IAAI,EAAE,SAAmB;AACrD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,eAAW,KAAK,CAAC,QAAQ,YAAY,GAAG;AACtC,UAAI,EAAE,KAAK,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,CAAC,EAAE,EAAE;AAAA,IAC3E;AACA,UAAM,SAAS,GAAG,SAAS,IAAI,EAAE,UAAoB;AACrD,QAAI,CAAC,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oBAAoB,EAAE;AAItE,UAAM,WAAW,EAAE;AACnB,UAAM,YAAY,OAAO,MAAM,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AAC1H,QAAI,WAAW;AACb,UAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7B,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,QAAQ,EAAE,EAAE;AAAA,MACpF;AAAA,IACF,WAAW,CAAC,OAAO,MAAM,SAAS,QAAQ,GAAG;AAC3C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gCAAgC,QAAQ,EAAE,EAAE;AAAA,IACzF;AACA,QAAI,OAAO,UAAU,YAAY;AAC/B,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,0BAA0B,EAAE;AAAA,IACnF;AACA,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,wBAAwB,EAAE;AAAA,IACvE;AAGA,UAAM,eAAe,EAAE;AACvB,UAAM,YAAY,iBAAiB,UAAa,iBAAiB;AACjE,UAAM,aAAc,QAAQ,EAAE,MAAM,IAAI,EAAE,SAAS,EAAE;AACrD,QAAI,OAAO,WAAW,OAAO,QAAQ,QAAQ;AAC3C,UAAI,CAAC,WAAW;AACd,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oDAAoD,EAAE;AAAA,MAC3F;AAEA,YAAM,QAAQ,IAAI,IAAI,OAAO,QAC1B,OAAO,CAAC,MAAM,MAAM,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,CAAC,EACtE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AACnB,UAAI,CAAC,MAAM,IAAI,YAAY,GAAG;AAC5B,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,iBAAiB,aAAa,YAAqB,EAAE,SAAS,OAAO,CAAC;AAAA,QAAoB,EAAE;AAAA,MAChG;AAAA,IACF,WAAW,CAAC,QAAQ,UAAU,KAAK,CAAC,WAAW;AAC7C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,EAAE;AAAA,IACzE;AAEA,WAAO,QAAQ;AACf,WAAO,cAAc,MAAM,IAAI;AAC/B,WAAO,cAAc,EAAE;AACvB,WAAO,gBAAgB;AACvB,WAAO,cAAc;AACrB,WAAO,UAAU,EAAE;AACnB,WAAO,EAAE,QAAQ,EAAE,UAAU,MAAM,YAAY,OAAO,IAAI,SAAS,OAAO,QAAQ,EAAE;AAAA,EACtF,CAAC;AAKD,QAAM,qBAAqB,CAAC,aAAqB,QAC/C,MAAM,YAAY,aAAa,MAAM,MAAM,aAAa,GAAG,CAAC;AAE9D,WAAS,MAAM,aAAqB,KAA0B;AAC5D,UAAM,KAAK,MAAM,WAAW,IAAI,WAAW;AAC3C,QAAI,CAAC,GAAI,QAAO,CAAC;AACjB,UAAM,SAAS,SAAS,OAAO,MAAM,IAAI,CAAC;AAC1C,UAAM,UAAsB,CAAC;AAC7B,eAAW,UAAU,UAAU,GAAG,QAAQ,GAAG;AAC3C,UAAI,OAAO,UAAU,UAAW;AAChC,YAAM,QAAQ,SAAS,OAAO,QAAQ;AACtC,YAAM,WAAW,QAAQ,OAAO;AAChC,UAAI,SAAS,SAAU;AACvB,aAAO,QAAQ;AACf,aAAO,kBAAkB,OAAO;AAGhC,SAAG,SAAS,IAAI,OAAO,IAAI,MAAM;AACjC,YAAM,SAAmB;AAAA,QACvB,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,WAAW,GAAG;AAAA,UACd,MAAM;AAAA,UACN,IAAI,CAAC,OAAO,OAAO,GAAG,OAAO,KAAK;AAAA,UAClC,IAAI,MAAM,IAAI;AAAA,UACd,MAAM;AAAA,UACN,YAAY,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,UAKnB,SAAS,OAAO;AAAA,UAChB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AACA,YAAM,YAAY,IAAI,MAAM;AAC5B,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO;AAAA,EACT;AACF;;;ACrGO,IAAM,qBAAqB,oBAAI,IAAY;AAAA,EAChD;AAAA,EAAiB;AAAA,EAAkB;AAAA,EAAkB;AAAA,EACrD;AAAA,EAAoB;AAAA,EAAoB;AAAA,EACxC;AAAA,EAA0B;AAAA,EAC1B;AAAA,EAA0B;AAC5B,CAAC;AAID,IAAM,sBAAsB,oBAAI,IAAY;AAAA,EAC1C;AAAA,EAAc;AAAA,EAAgB;AAAA,EAAiB;AACjD,CAAC;AAID,IAAM,oBAAoB,oBAAI,IAAY;AAAA,EACxC;AAAA,EAAsB;AAAA,EAAc;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA,EAI1D;AACF,CAAC;AAKD,IAAM,uBAAuB;AAG7B,IAAM,6BAA6B;AAMnC,IAAM,cAAc;AAEpB,SAAS,cAAc,OAAgB,OAAwB;AAC7D,QAAM,QAAkC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,SAAO,MAAM,QAAQ;AACnB,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,IAAI;AAChC,QAAI,QAAQ,MAAO,QAAO;AAC1B,QAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,iBAAW,KAAK,KAAM,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IACjD,WAAW,SAAS,QAAQ,OAAO,SAAS,UAAU;AACpD,iBAAW,KAAK,OAAO,OAAO,IAA+B,EAAG,OAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC;AAAA,IAC3F;AAAA,EACF;AACA,SAAO;AACT;AA4EA,SAAS,OAAO,SAA0B;AACxC,QAAM,IAAI,YAAY,SAAY,oBAAI,KAAK,IAAI,IAAI,KAAK,OAAO;AAC/D,SAAO,EAAE,YAAY,EAAE,QAAQ,eAAe,MAAM;AACtD;AAEA,SAAS,QAAQ,QAAiC,QAAiC;AACjF,aAAW,KAAK,OAAQ,KAAI,EAAE,KAAK,QAAS,QAAO;AACnD,SAAO;AACT;AAEA,IAAM,QAAQ,oBAAI,IAAY,CAAC,UAAU,SAAS,YAAY,CAAC;AAE/D,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,oBAAoB,MAAuB;AAClD,MAAI,SAAS,sBAAsB,SAAS,cAAe,QAAO;AAClE,MAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,UAAM,MAAM,KAAK,MAAM,UAAU,MAAM;AACvC,WAAO,WAAW,KAAK,GAAG,KAAK,SAAS,KAAK,EAAE,KAAK;AAAA,EACtD;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,QAA4G;AACnI,QAAM,YAAY,IAAI,IAAI,OAAO,UAAU,OAAO,OAAK,EAAE,SAAS,SAAS,EAAE,IAAI,OAAK,EAAE,QAAQ,CAAC;AACjG,QAAM,OAAO,OAAO,QAAQ;AAC5B,MAAI,SAAS,eAAe;AAG1B,UAAM,QAAQ,OAAO,aAAa,OAAO,OAAK,EAAE,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE;AACrG,QAAI,MAAM,WAAW,EAAG,QAAO,UAAU,QAAQ;AACjD,WAAO,MAAM,MAAM,OAAK,UAAU,IAAI,CAAC,CAAC;AAAA,EAC1C;AACA,MAAI,KAAK,WAAW,SAAS,EAAG,QAAO,UAAU,QAAQ,SAAS,KAAK,MAAM,UAAU,MAAM,GAAG,EAAE;AAClG,SAAO,UAAU,QAAQ;AAC3B;AAGA,SAAS,WAAW,IAAe,MAAuB;AACxD,SAAO,GAAG,SAAS,KAAK,CAAC,MAAM,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC;AACvE;AAOA,SAAS,aAAa,IAAqB;AACzC,QAAM,IAAI,wDAAwD,KAAK,EAAE;AACzE,MAAI,CAAC,KAAK,CAAC,OAAO,UAAU,eAAe,KAAK,kBAAkB,EAAE,CAAC,CAAC,EAAG,QAAO;AAChF,SAAO,iBAAiB,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;AACrD;AAGA,IAAM,mBAAmB,CAAC,mBAAmB,iBAAiB,aAAa;AAG3E,SAAS,cAAc,UAAmE;AACxF,QAAM,UAAU,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AACrD,MAAI,YAAY,OAAW,QAAO;AAClC,SAAO,EAAE,OAAO;AAAA,IAAS,EAAE;AAAA,IACzB,mBAAmB,KAAK,UAAU,OAAO,CAAC;AAAA,EAA4E,EAAE;AAC5H;AAGA,IAAM,gBAAgB,CAAC,aAAa,eAAe,WAAW;AAG9D,IAAM,oBAAoB,CAAC,SAAS,SAAS,WAAW,SAAS,WAAW;AAG5E,IAAM,cAAc,CAAC,SAAS,SAAS;AAOvC,SAAS,iBAAiB,MAAc,KAAa,OAA8D;AACjH,MAAI,CAAC,kBAAkB,SAAS,IAAI,GAAG;AACrC,WAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wDAAwD,EAAE;AAAA,EAC/F;AACA,MAAI,CAAC,IAAI,WAAW,GAAG,IAAI,GAAG,GAAG;AAC/B,WAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,KAAK,qBAAqB,IAAI,eAAe,IAAI,EAAE,EAAE;AAAA,EAC7F;AAGA,MAAI,SAAS,WAAW,SAAS,aAAa;AAC5C,WAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mEAAmE,EAAE;AAAA,EAC1G;AACA,SAAO;AACT;AAGA,SAAS,QAAQ,KAAgB,KAAsB;AACrD,SAAO,EAAE,IAAI,eAAe,UAAa,OAAO,IAAI,eAC/C,EAAE,IAAI,gBAAgB,UAAa,OAAO,IAAI;AACrD;AAMA,SAAS,QAAQ,GAA4B,GAAqC;AAChF,QAAM,WAAW,CAAC,MAA+B,cAAc,CAAC,KAAK,aAAa,CAAC,EAAE,SAAS,OAAO;AACrG,SAAO,EAAE,QAAQ,EAAE,OAAO,SAAS,CAAC,MAAM,SAAS,CAAC;AACtD;AASA,SAAS,eAAe,KAAc,OAAgB,UACkB;AACtE,MAAI,SAAS,GAAG,GAAG;AACjB,UAAM,MAAM,OAAO,IAAI,QAAQ,YAAY,IAAI,QAAQ,KAAK,IAAI,MAAM,cAAc,GAAG;AACvF,QAAI,QAAQ,OAAW,QAAO;AAC9B,UAAM,MAAM,EAAE,GAAG,KAAK,IAAI;AAC1B,WAAO,SAAS,MAAM,CAAC,MAAM,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI;AAAA,EAC1D;AACA,MAAI,OAAO,UAAU,SAAU,QAAO,SAAS,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,KAAK,IAAI,WAAW;AACrG,SAAO;AACT;AAGA,SAAS,cAAc,IAAe,KAAqC;AACzE,SAAO,IAAI,UAAU,IAAI,KAAK,GAAG,aAAa,GAAG;AACnD;AAOA,SAAS,kBAAkB,IAAwB;AACjD,MAAI,GAAG,QAAQ,OAAO,EAAG,QAAO;AAChC,SAAO,CAAC,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,UAAU,CAAC,GAAG,WAAW,kBAAkB;AAC/F;AAGA,SAAS,YAAY,MAAiE;AACpF,QAAM,OAAO,SAAS,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;AACvE,SAAO,KAAK,OAAO,CAAC,MAClB,SAAS,CAAC,KAAK,OAAO,EAAE,QAAQ,YAAY,EAAE,QAAQ,EAAE;AAC5D;AASA,SAAS,aAAa,UAA8B;AAClD,MAAI,SAAS,WAAW,sBAAsB,CAAC,SAAS,SAAS,MAAM,EAAG,QAAO;AACjF,QAAM,SAAS,EAAE,GAAG,SAAS,OAAO;AACpC,MAAI,OAAO,OAAO,eAAe,SAAU,QAAO,aAAa,UAAU,OAAO,UAAU;AAC1F,MAAI,SAAS,OAAO,eAAe,EAAG,QAAO,kBAAkB,YAAY,OAAO,eAAe;AACjG,SAAO,EAAE,GAAG,UAAU,OAAO;AAC/B;AAGA,SAAS,cAAc;AACrB,SAAO,SAAS,EAAE,UAAU,kBAAkB,EAAE,QAAQ,QAAQ,CAAC;AACnE;AAGA,SAAS,SAAS,UAA4C;AAC5D,QAAM,SAAS,SAAS,QAAQ,IAAI,SAAS,SAAS;AACtD,QAAM,KAAK,SAAS,MAAM,IAAI,OAAO,YAAY;AACjD,SAAO,OAAO,OAAO,YAAY,OAAO,KAAK,KAAK;AACpD;AAMA,IAAM,aAA0D,EAAE,UAAU,CAAC,mBAAmB,EAAE;AAGlG,SAAS,UAAU,GAA4B,OAA0B,CAAC,GAAS;AACjF,aAAW,OAAO,OAAO,KAAK,CAAC,EAAG,KAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,KAAK,SAAS,GAAG,EAAG,QAAO,EAAE,GAAG;AAC5F;AAcA,SAAS,YAAY,MAAc,MAAwD;AACzF,MAAI,SAAS,mBAAmB;AAC9B,UAAM,QAAQ,KAAK;AACnB,WAAO,KAAK;AACZ,QAAI,SAAS,KAAK,EAAG,QAAO,OAAO,MAAM,KAAK;AAC9C,SAAK,OAAO;AAAA,EACd;AACA,YAAU,MAAM,WAAW,IAAI,CAAC;AAChC,QAAM,OAAO,CAAC,GAA4B,OAAe,MAA6C;AACpG,QAAI,CAAC,MAAM,QAAQ,EAAE,KAAK,CAAC,EAAG;AAC9B,eAAW,KAAK,EAAE,KAAK,GAAgB;AACrC,UAAI,SAAS,CAAC,GAAG;AACf,kBAAU,CAAC;AACX,YAAI,CAAC;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,UAAW,MAAK,MAAM,MAAM;AACzC,MAAI,SAAS,SAAS;AACpB,SAAK,MAAM,WAAW,CAAC,MAAM;AAC3B,UAAI,EAAE,SAAS,UAAa,OAAO,EAAE,UAAU,SAAU,GAAE,OAAO,EAAE;AACpE,aAAO,EAAE;AAAA,IACX,CAAC;AACD,QAAI,SAAS,KAAK,MAAM,GAAG;AACzB,gBAAU,KAAK,MAAM;AACrB,WAAK,KAAK,QAAQ,WAAW;AAAA,IAC/B;AAAA,EACF;AACA,MAAI,SAAS,gBAAiB,MAAK,MAAM,OAAO;AAChD,MAAI,SAAS,YAAY;AACvB,SAAK,MAAM,OAAO;AAClB,QAAI,MAAM,QAAQ,KAAK,iBAAiB,KAAK,KAAK,kBAAkB,WAAW,EAAG,QAAO,KAAK;AAAA,EAChG;AACA,SAAO;AACT;AAGA,SAAS,WAAW,MAAc,MAAwD;AACxF,SAAO,YAAY,MAAM,gBAAgB,IAAI,CAAC;AAChD;AAOA,SAAS,cAAc,GAAqD;AAC1E,QAAM,MAAM,EAAE,GAAG,EAAE;AACnB,YAAU,GAAG;AACb,aAAW,QAAQ,aAAa;AAC9B,QAAI,MAAM,QAAQ,IAAI,IAAI,CAAC,GAAG;AAC5B,UAAI,IAAI,IAAK,IAAI,IAAI,EAAgB,IAAI,CAAC,MAAO,SAAS,CAAC,IAAI,WAAW,MAAM,CAAC,IAAI,CAAE;AAAA,IACzF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,eAAe,IAAe,MAAqB;AACjE,SAAO,KAAK,oBAAoB,QAAS,KAAK,SAAS,WAAW,WAAW,IAAI,OAAO;AAC1F;AAGA,SAAS,UAAU,IAAe,KAAkC;AAClE,SAAO,OAAO,QAAQ,WAAW,IAAI,UAAU,IAAI,KAAK,GAAG,SAAS,GAAG,IAA0B;AACnG;AAGO,SAAS,WAAW,OAA0D;AACnF,QAAM,MAAwB,CAAC;AAC/B,aAAW,QAAQ,MAAO,YAAW,OAAO,KAAM,KAAI,CAAC,IAAI,SAAS,GAAG,EAAG,KAAI,KAAK,GAAG;AACtF,SAAO;AACT;AAMO,SAAS,UAAU,MAAY,WAAsC;AAC1E,QAAM,UAA4B,CAAC,KAAK,QAAQ;AAChD,MAAI,OAAO,cAAc,YAAY,cAAc,KAAK,SAAU,SAAQ,KAAK,SAAS;AACxF,SAAO,QAAQ,SAAS,MAAM,QAAQ,KAAK,aAAa,IAAI,KAAK,gBAAgB,CAAC,CAAC;AACrF;AAMA,SAAS,YAAY,SAA0B,GAAkC;AAC/E,WAAS,IAAI,IAAI,GAAG,KAAK,GAAG,KAAK;AAC/B,QAAI,QAAQ,CAAC,EAAE,UAAU,SAAU,QAAO,QAAQ,CAAC,EAAE;AAAA,EACvD;AACA,SAAO;AACT;AAQA,SAAS,eAAe,SAA0B,GAAoB;AACpE,MAAI,QAAQ,CAAC,EAAE,UAAU,YAAa,QAAO;AAC7C,QAAM,SAAS,YAAY,SAAS,CAAC;AACrC,SAAO,WAAW,sBAAsB,WAAW;AACrD;AAGA,SAAS,cAAc,MAAwC;AAC7D,WAAS,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AACjD,QAAI,eAAe,KAAK,SAAS,CAAC,EAAG,QAAO,KAAK,QAAQ,CAAC,EAAE;AAAA,EAC9D;AACA,SAAO;AACT;AAGA,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;AAU9B,SAAS,cAAc,MAA8B;AACnD,MAAI;AACJ,QAAM,gBAAgB,CAAC,YAA8B,QAAQ,SAAS,cAAc,SAAY,CAAC,SAAS,IAAI,CAAC,CAAC;AAChH,WAAS,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AACjD,UAAM,IAAI,KAAK,QAAQ,CAAC;AACxB,UAAM,QAAQ,EAAE,UAAU,sBAAsB,YAAY,KAAK,SAAS,CAAC,MAAM;AACjF,QAAI,UAAU,EAAE,SAAS,sBAAsB,EAAE,SAAS,uBAAwB,QAAO,cAAc,UAAU,MAAM,EAAE,IAAI,CAAC;AAC9H,QAAI,SAAS,cAAc,OAAW,aAAY,EAAE;AACpD,QAAI,eAAe,KAAK,SAAS,CAAC,EAAG,QAAO,cAAc,UAAU,MAAM,EAAE,IAAI,CAAC;AAAA,EACnF;AACA,SAAO,cAAc,UAAU,MAAM,MAAS,CAAC;AACjD;AAGA,IAAM,QAAkC,CAAC,aAAa,YAAY,aAAa,cAAc,WAAW;AASxG,SAAS,YAAY,IAAe,MAA8B;AAChE,QAAM,OAAO,oBAAI,IAAY;AAC7B,WAAS,IAAsB,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,IAAI,OAAO,EAAE,eAAe,WAAW,GAAG,MAAM,IAAI,EAAE,UAAU,IAAI,QAAW;AACxI,SAAK,IAAI,EAAE,EAAE;AACb,QAAI,CAAC,eAAe,IAAI,CAAC,EAAG,QAAO,CAAC;AACpC,QAAI,EAAE,QAAQ;AACZ,YAAM,UAAU,EAAE,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,SAAS,UAAU,KAAK,gBAAgB,EAAE,MAAM;AACxH,aAAO,UAAU,CAAC,IAAI,EAAE,OAAO;AAAA,IACjC;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAWO,SAAS,0BAA0B,IAAe,MAA8B;AACrF,SAAO,MAAM,SAAS,KAAK,KAAK,IAAI,CAAC,IAAI,YAAY,IAAI,IAAI;AAC/D;AASO,SAAS,OAAO,MAAY,OAAkC;AACnE,SAAO,UAAU,KAAK,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC;AACtD;AAOO,SAAS,iBAAiB,KAAW,OAAkC;AAC5E,QAAM,YAAY,cAAc,GAAG;AACnC,SAAO;AAAA,IAAQ,IAAI,SAAS,IAAI,OAAO,UAAU,CAAC;AAAA,IAAG,OAAO,KAAK,KAAK;AAAA,IACvD,cAAc,SAAY,CAAC,SAAS,IAAI,CAAC;AAAA,IACzC,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI,gBAAgB,CAAC;AAAA,EAAC;AAC1E;AAGA,SAAS,QAAQ,KAAuB;AACtC,SAAO,OAAO,QAAQ,aAAa,IAAI,WAAW,YAAY,KAAK,IAAI,WAAW,QAAQ;AAC5F;AAEA,SAAS,MAAM,KAAe,MAAiG;AAI7H,QAAM,OAAO,QAAQ,QAAQ,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,IAAI,IAAI,KAAK;AACvF,QAAM,MAAM,EAAE,SAAS,OAAO,IAAI,QAAQ,KAAK;AAC/C,MAAI,KAAK,UAAU,OAAW,KAAI,QAAQ,KAAK;AAAA,MAC1C,KAAI,SAAS,KAAK;AACvB,SAAO;AACT;AAQA,SAAS,YAAY,OAAoB,OAAyB;AAChE,QAAMC,QAAO,UAAU,KAAK;AAC5B,MAAI,CAAC,SAASA,KAAI,EAAG;AACrB,MAAI;AACJ,MAAI;AAAE,aAAS,aAAaA,KAAgB;AAAA,EAAG,QACzC;AAAE;AAAA,EAAyF;AACjG,MAAI,MAAM,WAAW,KAAM,OAAM,QAAQ,IAAI,QAAQ,EAAE,KAAK,MAAM,KAAK,MAAM,MAAM,QAAQ,KAAK,CAAC;AAAA,WAGxF,CAAC,MAAM,SAAS,IAAI,MAAM,EAAG,OAAM,SAAS,IAAI,QAAQ,MAAM,GAAG;AAC5E;AAYA,SAAS,WAAW,OAA4C;AAC9D,SAAO,OAAQ,OAAyC,SAAS;AACnE;AAGA,SAAS,QAAW,OAAa;AAC/B,MAAI;AACF,WAAO,gBAAgB,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,IAAM,yBAAmC,CAAC,aAAa,cAAc,QAAQ;AActE,IAAM,cAAN,MAAkB;AAAA,EACd,aAAa,oBAAI,IAA4B;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACD,aAAa,oBAAI,IAAyB;AAAA,EAC1C,aAAa,oBAAI,IAAgC;AAAA;AAAA,EAExC;AAAA;AAAA,EAET,YAAY,oBAAI,QAA8B;AAAA;AAAA,EAE9C,YAAY,oBAAI,IAAe;AAAA;AAAA,EAE/B,cAAc,oBAAI,IAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjC,OAAO,oBAAI,IAAiB;AAAA;AAAA,EAE5B,cAAc,oBAAI,QAAiC;AAAA,EACnD;AAAA,EACA;AAAA,EACA,iBAAkC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,gBAAgB,oBAAI,QAAgC;AAAA;AAAA,EAEnD,WAAW,oBAAI,IAAqB;AAAA;AAAA,EAE7C;AAAA;AAAA,EAES;AAAA;AAAA,EAED;AAAA,EAER,YAAY,UAA8B,CAAC,GAAG;AAC5C,SAAK,UAAU;AACf,SAAK,QAAQ,QAAQ,SAAS,IAAI,YAAY;AAC9C,SAAK,UAAU,EAAE,SAAS,OAAO,KAAK,MAAM,UAAU,YAAY,OAAO,EAAE;AAC3E,SAAK,MAAM,IAAI,UAAU,CAAC,CAAC,QAAQ,kBAAkB,IAAI,KAAiB;AAC1E,QAAI,QAAQ,mBAAoB,MAAK,UAAU;AAC/C,QAAI,QAAQ,QAAS,MAAK,eAAe,KAAK,QAAQ,OAAO;AAE7D,SAAK,qBAAqB;AAC1B,SAAK,wBAAwB;AAI7B,WAAO,eAAe,MAAM,OAAO;AAAA,MACjC,KAAK,MAAM;AACT,YAAI,CAAC,KAAK,KAAM,MAAK,OAAO,QAAQ,IAAI;AACxC,eAAO,KAAK;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ,cAAc;AAAA,IAChB,CAAC;AAKD,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,UAAI,CAAC,WAAW,MAAM,GAAG;AACvB,aAAK,aAAa,MAA2B;AAAA,MAC/C;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAC3B,UAAM,UAAU,MAAM,KAAK,MAAM,KAAK;AACtC,SAAK,aAAa,OAAO;AAAA,EAC3B;AAAA,EAEQ,aAAa,SAAkC;AAGrD,SAAK,WAAW,MAAM;AACtB,SAAK,QAAQ,QAAQ,IAAI,OAAK,EAAE,IAAI,CAAC;AACrC,eAAW,KAAK,QAAS,MAAK,WAAW,IAAI,EAAE,IAAI,EAAE,OAAO;AAE5D,eAAW,MAAM,KAAK,WAAW,OAAO,EAAG,MAAK,YAAY,EAAE;AAAA,EAChE;AAAA;AAAA,EAGQ,SAA0B;AAChC,WAAO,IAAI,WAAiB,KAAK,OAAO;AAAA,EAC1C;AAAA;AAAA,EAGQ,YAAY,IAAqB;AACvC,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,eAAe,WAAY,KAAI,MAAM,MAAM;AAAA,IACjD;AACA,SAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,OAAO,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,YAAY,IAA0B;AAC5C,QAAI,IAAI,KAAK,UAAU,IAAI,EAAE;AAC7B,QAAI,YAAY;AAChB,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,eAAe,cAAc,IAAI,YAAY,KAAK,QAAS;AAC/D,kBAAY;AACZ,YAAM,UAAU,IAAI,WAA4B,KAAK,OAAO;AAC5D,iBAAW,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,QAAQ,KAAK,GAAG,GAA0C;AACjG,gBAAQ,IAAI,KAAK,KAAK;AAAA,MACxB;AACA,MAAC,GAA0C,IAAI,IAAI;AAAA,IACrD;AACA,QAAI,CAAC,KAAK,WAAW;AACnB,UAAI,EAAE,KAAK,GAAG,OAAO,GAAG,SAAS,MAAM,MAAM,oBAAI,IAAI,GAAG,WAAW,GAAG,UAAU;AAChF,WAAK,UAAU,IAAI,IAAI,CAAC;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,QAAQ,IAAe,KAAmB;AAChD,QAAI,KAAK,QAAQ,QAAS,MAAK,YAAY,EAAE,EAAE,KAAK,IAAI,GAAG;AAAA,EAC7D;AAAA;AAAA,EAGQ,QAAQ,IAAqB;AACnC,QAAI,CAAC,KAAK,QAAQ,SAAS;AACzB,WAAK,gBAAgB,EAAE;AACvB;AAAA,IACF;AAGA,SAAK,YAAY,EAAE,EAAE,YAAY,KAAK,IAAI;AAC1C,QAAI,KAAK,QAAQ,QAAQ,EAAG,MAAK,UAAU,IAAI,EAAE;AAAA,QAC5C,MAAK,MAAM,EAAE;AAAA,EACpB;AAAA,EAEQ,iBAAuB;AAC7B,QAAI,CAAC,KAAK,UAAU,KAAM;AAC1B,UAAM,OAAO,CAAC,GAAG,KAAK,SAAS;AAC/B,SAAK,UAAU,MAAM;AACrB,eAAW,MAAM,KAAM,MAAK,MAAM,EAAE;AAAA,EACtC;AAAA;AAAA,EAGQ,MAAM,IAAqB;AACjC,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AAGX,UAAI,KAAK,YAAY,IAAI,EAAE,EAAG;AAC9B,WAAK,YAAY,IAAI,EAAE;AACvB,WAAK,WAAW,GAAG,IAAI,QAAQ,KAAK,MAAM;AACxC,aAAK,YAAY,OAAO,EAAE;AAC1B,eAAO,KAAK,YAAY,EAAE;AAAA,MAC5B,CAAC,CAAC;AACF;AAAA,IACF;AACA,UAAM,SAAS,KAAK,YAAY,EAAE;AAClC,QAAI,OAAQ,MAAK,WAAW,GAAG,IAAI,MAAM;AAAA,EAC3C;AAAA,EAEQ,WAAW,IAAiB,MAA2B;AAE7D,UAAM,UAAU,KAAK,MAAM,MAAM,MAAS;AAC1C,SAAK,WAAW,IAAI,IAAI,OAAO;AAC/B,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,EAAE,MAAM,QAAS,MAAK,WAAW,OAAO,EAAE;AAAA,IACpE,CAAC;AAAA,EACH;AAAA,EAEQ,YAAY,IAAqC;AACvD,UAAM,IAAI,KAAK,YAAY,EAAE;AAC7B,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,WAAW,IAAI,CAAC;AAAA,IAChC,SAAS,KAAK;AAEZ,QAAE,UAAU;AACZ,UAAI,KAAK,QAAQ,gBAAgB,MAAO,MAAK,KAAK,IAAI,GAAG,EAAE;AAC3D,WAAK,iBAAiB,KAAK,EAAE,IAAI,GAAG,IAAI,SAAS,GAAG,MAAM,OAAO,CAAC;AAClE;AAAA,IACF;AACA,QAAI,CAAC,OAAQ;AACb,UAAM,QAAQ;AACd,UAAM,OAAO,MAAM;AACjB,QAAE,MAAM,MAAM;AACd,UAAI,MAAM,QAAS,GAAE,UAAU;AAC/B,WAAK,SAAS,IAAI,MAAM,OAAO;AAAA,IACjC;AACA,UAAM,SAAS,CAAC,QAAiB;AAC/B,WAAK,SAAS,IAAI,GAAG,KAAK;AAC1B,WAAK,iBAAiB,KAAK,EAAE,IAAI,MAAM,IAAI,SAAS,MAAM,QAAQ,CAAC;AAAA,IACrE;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,MAAO,KAAK;AAAA,IAClC,SAAS,KAAK;AAKZ,UAAI,eAAe,sBAAsB,KAAK,QAAQ,gBAAgB,MAAO,MAAK,KAAK,IAAI,GAAG,EAAE;AAChG,aAAO,GAAG;AACV;AAAA,IACF;AACA,QAAI,WAAW,MAAM,EAAG,QAAO,QAAQ,QAAQ,MAAM,EAAE,KAAK,MAAM,MAAM;AACxE,SAAK;AAAA,EACP;AAAA;AAAA,EAGQ,SAAS,IAAe,MAAoB;AAClD,UAAM,SAAS,KAAK,YAAY,IAAI,EAAE;AACtC,QAAI,CAAC,QAAQ,OAAQ;AACrB,UAAM,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI;AAC7C,SAAK,YAAY,IAAI,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC;AAC5D,eAAW,SAAS,KAAK;AACvB,iBAAW,KAAK,KAAK,gBAAgB;AACnC,YAAI;AAAE,YAAE,IAAI,KAAK;AAAA,QAAG,QAAQ;AAAA,QAAuC;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,IAAe,GAAuC;AACvE,UAAM,UAAU,EAAE;AAClB,UAAM,UAAmD,CAAC;AAC1D,eAAW,QAAQ,aAAa;AAC9B,YAAM,MAAM,GAAG,IAAI;AACnB,UAAI,SAAS;AACX,cAAM,MAA+B,CAAC;AACtC,mBAAW,CAAC,KAAK,KAAK,KAAK,IAAI,UAAU,QAAQ,KAAK,GAAG,GAA0D;AACjH,cAAI,GAAG,IAAI,WAAW,MAAM,KAAK;AAAA,QACnC;AACA,gBAAQ,IAAI,IAAI;AAAA,MAClB,WAAW,IAAI,MAAM,MAAM;AACzB,cAAM,UAAmC,CAAC;AAC1C,mBAAW,OAAO,IAAI,OAAO;AAC3B,gBAAM,QAAQ,IAAI,KAAK,GAAG;AAC1B,kBAAQ,GAAG,IAAI,UAAU,SAAY,OAAO,WAAW,MAAM,KAAK;AAAA,QACpE;AACA,gBAAQ,IAAI,IAAI;AAAA,MAClB;AACA,UAAI,MAAM,MAAM;AAAA,IAClB;AACA,QAAI,SAAS;AACX,cAAQ,gBAAgB,IAAI,EAAE,GAAG,GAAG,iBAAiB;AAAA,IACvD,WAAW,EAAE,KAAK,MAAM;AACtB,YAAM,UAAmC,CAAC;AAC1C,iBAAW,OAAO,EAAE,KAAM,SAAQ,GAAG,IAAI,GAAG,iBAAiB,GAAG,KAAK;AACrE,cAAQ,gBAAgB,IAAI;AAAA,IAC9B;AACA,MAAE,KAAK,MAAM;AACb,UAAM,UAAU,GAAG,MAAM,MAAM,UAAU,IAAI,EAAE,GAAG;AAClD,QAAI,CAAC,WAAW,CAAC,QAAQ,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,OAAQ,QAAO;AACxE,WAAO;AAAA,MACL,IAAI,GAAG;AAAA,MACP,MAAM,UAAU,IAAI,EAAE;AAAA,MACtB,SAAS,GAAG,MAAM;AAAA,MAClB,YAAY,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,WAAW,GAAG;AAAA,MACxE,MAAM,KAAK,OAAO,EAAE;AAAA,MACpB;AAAA,MACA;AAAA,MACA,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,IACrC;AAAA,EACF;AAAA;AAAA,EAGQ,SAAS,IAAe,GAAc,QAA2B;AACvE,QAAI,OAAO,SAAS;AAClB,QAAE,UAAU;AACZ;AAAA,IACF;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,OAAO,GAAG;AAC1D,UAAI,SAAS,kBAAkB;AAC7B,mBAAW,OAAO,OAAO,KAAK,KAAK,EAAG,GAAE,KAAK,IAAI,GAAG;AACpD;AAAA,MACF;AACA,YAAM,MAAO,GAA0C,IAAI;AAC3D,UAAI,eAAe,WAAY,YAAW,OAAO,OAAO,KAAK,KAAK,EAAG,KAAI,MAAM,IAAI,GAAG;AAAA,IACxF;AAAA,EACF;AAAA;AAAA,EAGQ,gBAAgB,IAAqB;AAC3C,UAAM,QAAQ,KAAK,WAAW,IAAI,GAAG,EAAE,KAAK,KAAK;AACjD,SAAK,WAAW,IAAI,GAAG,IAAI,IAAI;AAC/B,QAAI;AACJ,QAAI;AACF,eAAS,EAAE,IAAI,GAAG,IAAI,MAAM,KAAK,WAAW,EAAE,GAAG,SAAS,MAAM,YAAY,KAAK,IAAI,EAAE;AAAA,IACzF,SAAS,KAAK;AAEZ,WAAK,iBAAiB,KAAK,EAAE,IAAI,GAAG,IAAI,SAAS,KAAK,CAAC;AACvD;AAAA,IACF;AAEA,UAAM,OAAO,GAAG,MAAM;AACtB,UAAM,UAAU,KAAK,WAAW,IAAI,GAAG,EAAE;AACzC,QAAI,SAAS;AACX,WAAK,UAAU,QAAQ,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC,GAAG,QAAQ,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC;AACjG;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,KAAK,MAAM;AAAA,IACjC,SAAS,KAAK;AACZ,UAAI,KAAK,QAAQ,gBAAgB,MAAO,MAAK,KAAK,IAAI,GAAG,EAAE;AAC3D,WAAK,iBAAiB,KAAK,MAAM;AACjC;AAAA,IACF;AACA,QAAI,WAAW,MAAM,GAAG;AACtB,WAAK,UAAU,QAAQ,QAAQ,MAAM,GAAG,QAAQ,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC;AAC7E;AAAA,IACF;AACA,SAAK,SAAS,IAAI,IAAI;AAAA,EACxB;AAAA,EAEQ,UAAU,MAAqB,QAAyB,OAAyB;AACvF,UAAM,UAAU,KAAK,KAAK,OAAO,SAAO,KAAK,iBAAiB,KAAK,MAAM,CAAC;AAC1E,SAAK,WAAW,IAAI,OAAO,IAAI,OAAO;AACtC,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,KAAK,WAAW,IAAI,OAAO,EAAE,MAAM,SAAS;AAC9C,aAAK,WAAW,OAAO,OAAO,EAAE;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,oBAAoB,KAAc,QAAgB,WAAqC;AAC7F,UAAMA,QAAO,EAAE,QAAQ,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC,EAAG;AACzE,QAAI,KAAK,QAAQ,iBAAiB;AAChC,UAAI;AACF,aAAK,QAAQ,gBAAgB,KAAKA,KAAI;AAAA,MACxC,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AACA,YAAQ,MAAM,qBAAqB,MAAM,mCAAmC,GAAG;AAAA,EACjF;AAAA,EAEQ,iBAAiB,KAAc,QAA+C;AACpF,QAAI,KAAK,QAAQ,cAAc;AAC7B,UAAI;AACF,aAAK,QAAQ,aAAa,KAAK,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,QAAQ,CAAC;AAAA,MAC3E,QAAQ;AAAA,MAER;AACA;AAAA,IACF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,uCAAuC,OAAO,EAAE,yBAAyB,OAAO;AAG7F,QAAI,eAAe,mBAAoB,SAAQ,KAAK,IAAI;AAAA,QACnD,SAAQ,MAAM,IAAI;AAAA,EACzB;AAAA,EAEA,MAAM,aAA4B;AAChC,WAAO,KAAK,WAAW,MAAM;AAC3B,YAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,CAAC;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAIQ,eAAuB;AAC7B,QAAI,KAAK,YAAY,QAAW;AAC9B,WAAK,WAAW;AAChB,aAAO,OAAO,KAAK,OAAO;AAAA,IAC5B;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc;AACZ,WAAO,KAAK,aAAa,KAAK,aAAa;AAAA,EAC7C;AAAA,EAEA,QAAQ,UAAqC;AAC3C,SAAK,eAAe,KAAK,QAAQ;AACjC,WAAO,MAAM;AACX,YAAM,IAAI,KAAK,eAAe,QAAQ,QAAQ;AAC9C,UAAI,KAAK,EAAG,MAAK,eAAe,OAAO,GAAG,CAAC;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA,EAGA,aAAa,IAAwC;AACnD,WAAO,KAAK,WAAW,IAAI,EAAE;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,cAAc,IAAe,QAAgE;AAGnG,QAAI,OAAO,WAAW,UAAU;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,uDAAuD,EAAE;AAAA,IACtG;AACA,QAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,GAAG;AAC3B,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,2BAA2B,MAAM,EAAE,EAAE;AAAA,IAClF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,gBAAgB,IAAe,MAAY,QAAgE;AACjH,UAAM,SAAS,KAAK;AACpB,QAAI,CAAC,OAAQ,QAAO;AAGpB,QAAI,OAAO,WAAW,YAAY,OAAO,QAAQ,SAAS,MAAM,GAAG;AACjE,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,sDAAsD,EAAE;AAAA,IACrG;AACA,QAAI,eAAe,IAAI,IAAI,KAAK,UAAU,IAAI,MAAM,GAAG,SAAS,SAAS;AACvE,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,yCAAyC,OAAO,MAAM,CAAC,wBAAwB,EAAE;AAAA,IAC9H;AACA,QAAI,CAAC,OAAO,gBAAgB,OAAO,aAAa,WAAW,GAAG;AAG5D,aAAO;AAAA,IACT;AAOA,QAAI,OAAO,aAAa,KAAK,CAAC,MAAM,OAAO,MAAM,aAAa,EAAE,WAAW,YAAY,KAAK,EAAE,WAAW,QAAQ,EAAE,GAAG;AACpH,aAAO;AAAA,IACT;AACA,QAAI,OAAO,WAAW,YAAY,CAAC,OAAO,aAAa,SAAS,MAAwB,GAAG;AACzF,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,OAAO,MAAM,CAAC,EAAE,EAAE;AAAA,IAC3G;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,WAAoB;AAClB,UAAM,MAAsC,CAAC;AAC7C,eAAW,MAAM,KAAK,WAAW,OAAO,EAAG,KAAI,KAAK,KAAK,WAAW,EAAE,CAAC;AACvE,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,OAAO,IAAwC;AACrD,WAAO;AAAA,MACL,IAAc,GAAG;AAAA,MACjB,SAAc,GAAG;AAAA,MACjB,OAAc,GAAG;AAAA,MACjB,UAAc,GAAG;AAAA,MACjB,MAAc,GAAG;AAAA,MACjB,cAAc,GAAG;AAAA,MACjB,oBAAoB,GAAG;AAAA,MACvB,oBAAoB,GAAG;AAAA,MACvB,SAAc,GAAG;AAAA,MACjB,kBAAkB,GAAG;AAAA,MACrB,aAAc,GAAG;AAAA,MACjB,aAAc,GAAG;AAAA,MACjB,YAAc,GAAG;AAAA,MACjB,eAAe,GAAG;AAAA,IACpB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,IAAwC;AACzD,UAAM,EAAE,YAAY,eAAe,GAAG,IAAI,IAAI,KAAK,OAAO,EAAE;AAC5D,UAAM,SAAS,CAAC,SACd,MAAM,KAAK,UAAU,GAAG,IAAI,CAA2D,CAAC,EACrF,IAAI,CAAC,MAAM,WAAW,MAAM,CAAC,CAAC;AACnC,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAiB,OAAO,SAAS;AAAA,MACjC,OAAiB,OAAO,OAAO;AAAA,MAC/B,WAAiB,OAAO,WAAW;AAAA,MACnC,UAAiB,OAAO,UAAU;AAAA,MAClC,eAAiB,OAAO,eAAe;AAAA,MACvC,UAAiB,OAAO,UAAU;AAAA,MAClC,WAAiB,OAAO,WAAW;AAAA,MACnC,iBAAiB,OAAO,iBAAiB;AAAA,MACzC,aAAiB,OAAO,aAAa;AAAA,MACrC,kBAAkB,EAAE,GAAG,GAAG,iBAAiB;AAAA,MAC3C,OAAiB,GAAG;AAAA,MACpB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIA,QAAQ,MAAqB;AAC3B,SAAK,WAAW,MAAM;AACtB,SAAK,UAAU,MAAM;AACrB,QAAI,CAAC,MAAM,QAAQ,IAAI,EAAG;AAC1B,eAAW,KAAK,MAAwC;AAGtD,UAAI;AACJ,UAAI;AACF,aAAK,KAAK,QAAQ,CAAC;AAAA,MACrB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAQ,KAAK,+BAA+B,OAAO,GAAG,EAAE,CAAC,2BAA2B,OAAO,EAAE;AAC7F;AAAA,MACF;AACA,WAAK,WAAW,IAAI,GAAG,IAAI,EAAE;AAG7B,iBAAW,QAAQ,YAAa,CAAC,GAAG,IAAI,EAAmC,MAAM,MAAM;AACvF,WAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,SAAS,MAAM,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AAAA;AAAA,EAGQ,QAAQ,UAA8C;AAC5D,UAAM,IAAI,cAAc,QAAQ;AAChC,UAAM,KAAgB;AAAA,MACpB,IAAI,EAAE;AAAA,MACN,SAAS,EAAE;AAAA,MACX,OAAQ,EAAE,SAAgC;AAAA,MAC1C,UAAW,EAAE,YAAyB,CAAC;AAAA,MACvC,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA,MAC1C,oBAAoB,EAAE;AAAA,MACtB,oBAAqB,EAAE,sBAAiC;AAAA,MACxD,SAAS,EAAE;AAAA;AAAA;AAAA,MAGX,kBAAkB,EAAE,qBAAqB,WAAW,WAAW;AAAA,MAC/D,aAAa,EAAE,gBAAgB,WAAW,WAAW;AAAA,MACrD,aAAa,OAAO,EAAE,gBAAgB,YAAY,oBAAoB,EAAE,WAAW,IAAI,EAAE,cAAc;AAAA,MACvG,SAAS,KAAK,OAAO;AAAA,MACrB,OAAO,KAAK,OAAO;AAAA,MACnB,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU,KAAK,OAAO;AAAA,MACtB,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK,OAAO;AAAA,MACtB,WAAW,KAAK,OAAO;AAAA,MACvB,iBAAiB,KAAK,OAAO;AAAA,MAC7B,aAAa,KAAK,OAAO;AAAA,MACzB,kBAAmB,EAAE,oBAA+C,CAAC;AAAA,MACrE,OAAQ,EAAE,SAA0B,CAAC;AAAA,MACrC,YAAY,EAAE;AAAA,MACd,eAAe,CAAC,CAAC,EAAE;AAAA,IACrB;AACA,eAAW,KAAM,EAAE,WAAwB,CAAC,GAAG;AAE7C,UAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,EAAG,GAAE,OAAO,CAAC;AACtC,UAAI,EAAE,WAAW,OAAW,GAAE,SAAS;AAIvC,YAAM,SAAS,OAAO,EAAE,QAAQ,WAAW,EAAE,IAAI,MAAM,GAAG,EAAE,CAAC,IAAI;AACjE,UAAI,kBAAkB,SAAS,MAAM,EAAG,GAAE,OAAO;AACjD,UAAI,EAAE,SAAS,WAAW,CAAC,YAAY,SAAS,EAAE,IAAI,EAAG,GAAE,OAAO;AAClE,SAAG,QAAQ,IAAI,EAAE,KAAK,CAAC;AAAA,IACzB;AACA,eAAW,KAAM,EAAE,SAAoB,CAAC,GAAG;AAGzC,UAAI,EAAE,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,OAAO,EAAG,GAAE,OAAO,UAAU,cAAc,CAAC;AAEpF,UAAI,EAAE,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,gBAAgB,EAAG,GAAE,OAAO,mBAAmB,CAAC;AACxF,SAAG,MAAM,IAAI,EAAE,IAAI,CAAC;AAAA,IACtB;AACA,eAAW,KAAM,EAAE,aAAoC,CAAC,EAAG,IAAG,UAAU,IAAI,EAAE,IAAI,CAAC;AAEnF,eAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,SAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,eAAW,KAAM,EAAE,iBAAqE,CAAC;AACvF,SAAG,cAAc,IAAI,EAAE,IAAI,CAAU;AACvC,eAAW,KAAM,EAAE,YAAgE,CAAC;AAClF,SAAG,SAAS,IAAI,EAAE,IAAI,CAAU;AAClC,eAAW,KAAM,EAAE,aAAiE,CAAC,GAAG;AAGtF,YAAM,UAAU,gBAAiB,EAAE,WAAW;AAAA,QAC5C,WAAW,EAAE;AAAA,QAAW,WAAW,EAAE;AAAA,QACrC,SAAS,EAAE;AAAA,QAAS,OAAO,EAAE;AAAA,QAC7B,GAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MACtC,CAAiC;AACjC,UAAI,CAAC,EAAE,SAAS;AAGd,cAAM,WAAW,QAAQ;AACzB,cAAM,QAAiC,CAAC;AACxC,mBAAW,OAAO,CAAC,gBAAgB,sBAAsB,WAAW,GAAG;AACrE,cAAI,SAAS,GAAG,KAAK,QAAQ,SAAS,GAAG,MAAM,GAAI,OAAM,GAAG,IAAI,SAAS,GAAG;AAAA,QAC9E;AACA,mBAAW,CAAC,KAAK,MAAM,KAAK;AAAA,UAC1B,CAAC,WAAW,CAAC,OAAO,QAAQ,QAAQ,QAAQ,CAAC;AAAA,UAC7C,CAAC,cAAc,CAAC,MAAM,QAAQ,SAAS,UAAU,CAAC;AAAA,QACpD,GAAY;AACV,gBAAM,QAAQ,SAAS,GAAG;AAC1B,cAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACxC,kBAAM,GAAG,IAAI,MAAM,IAAI,UAAQ,OAAO,YAAY,OAC/C,OAAO,WAAS,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,MAAM,OAClD,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,SAAS,EAAE,EAC3D,IAAI,WAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AAAA,UACxC;AAAA,QACF;AACA,gBAAQ,QAAQ;AAAA,MAClB;AACA,SAAG,UAAU,IAAI,EAAE,IAAI;AAAA,QACrB,IAAI,EAAE;AAAA,QAAI,MAAM;AAAA,QAChB,aAAc,EAAE,eAAe,EAAE;AAAA,QACjC,aAAc,EAAE,eAAe,EAAE;AAAA,QACjC,cAAe,EAAE,gBAAuC,YAAY,OAAO;AAAA,QAC3E;AAAA,MACF,CAAC;AAAA,IACH;AACA,eAAW,KAAM,EAAE,mBAAuE,CAAC;AACzF,SAAG,gBAAgB,IAAI,EAAE,IAAI,CAAU;AACzC,eAAW,KAAM,EAAE,eAAgC,CAAC,EAAG,IAAG,YAAY,IAAI,EAAE,KAAK,CAAC;AAClF,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,SAAS,UAA8B;AACrC,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,QAAQ;AACb,QAAI;AACJ,QAAI;AACJ,QAAI,MAAM;AACV,QAAI;AACF,eAAS,SAAS,QAAQ;AAC1B,YAAM,UAAU,WAAW,SAAY,OAAO,KAAK,OAAO,MAAM;AAChE,UAAI,SAAS;AACX,mBAAW,MAAM,UAAU,EAAE,OAAO,QAAQ,CAAC;AAAA,MAC/C,OAAO;AACL,cAAM;AACN,mBAAW,KAAK,UAAU,QAAQ;AAClC,YAAI,SAAS,MAAO,MAAK,cAAc,UAAU,SAAS,KAAK;AAAA,iBACtD,WAAW,UAAa,SAAS,WAAW,oBAAoB;AACvE,mBAAU,SAAS,QAAoD;AAAA,QACzE;AAAA,MACF;AAAA,IACF,UAAE;AAGA,UAAI,EAAE,KAAK,QAAQ,UAAU,EAAG,MAAK,eAAe;AACpD,WAAK,YAAY;AAAA,IACnB;AAGA,QAAI,OAAO,WAAW,UAAa,KAAK,QAAQ,UAAU,KAAK,KAAK,KAAK,IAAI,MAAM,GAAG;AACpF,WAAK,OAAO,MAAM;AAClB,aAAO,MAAM,UAAU,EAAE,OAAO,YAAY,EAAE,CAAC;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,YAAe,IAAiB,MAAsB;AACpD,QAAI,KAAK,QAAQ,QAAQ,EAAG,QAAO,KAAK;AACxC,QAAI,KAAK,OAAO,EAAE,EAAG,QAAO,CAAC;AAC7B,SAAK,QAAQ;AACb,QAAI;AACJ,QAAI;AACF,YAAM,KAAK;AAAA,IACb,UAAE;AACA,UAAI,EAAE,KAAK,QAAQ,UAAU,EAAG,MAAK,eAAe;AAAA,IACtD;AACA,QAAI,KAAK,KAAK,IAAI,EAAE,GAAG;AACrB,WAAK,OAAO,EAAE;AACd,aAAO,CAAC;AAAA,IACV;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,OAAO,IAAqD;AAClE,QAAI,KAAK,KAAK,IAAI,EAAE,EAAG,QAAO,KAAK,OAAO,EAAE,IAAI,OAAO,YAAY;AACnE,QAAI,OAAO,KAAK,MAAM,YAAY,cAAc,KAAK,WAAW,IAAI,EAAE,EAAG,QAAO;AAChF,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,QAAQ,EAAE;AAAA,IAChC,QAAQ;AAGN,aAAO;AAAA,IACT;AACA,QAAI,WAAW,MAAM,EAAG,QAAO;AAC/B,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE;AACjC,UAAM,IAAI,KAAK,KAAK,UAAU,IAAI,EAAE,IAAI;AAExC,QAAI,OAAO,CAAC,KAAK,EAAE,SAAU,QAAO;AACpC,QAAI,WAAW,GAAG,IAAK,QAAO;AAC9B,WAAO,KAAK,OAAO,EAAE,IAAI,OAAO,YAAY;AAAA,EAC9C;AAAA;AAAA,EAGQ,OAAO,IAA0B;AACvC,QAAI;AACJ,QAAI;AACF,UAAI,OAAO,KAAK,MAAM,YAAY,YAAY;AAC5C,iBAAS,KAAK,MAAM,QAAQ,EAAE;AAAA,MAChC,OAAO;AACL,cAAM,MAAM,KAAK,MAAM,KAAK;AAC5B,YAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,iBAAU,IAA0B,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AAAA,MAC7D;AACA,UAAI,WAAW,MAAM,EAAG,QAAO;AAAA,IACjC,SAAS,KAAK;AACZ,WAAK,iBAAiB,KAAK,EAAE,IAAI,SAAS,KAAK,WAAW,IAAI,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC;AACtF,aAAO;AAAA,IACT;AACA,UAAM,MAAM,KAAK,WAAW,IAAI,EAAE;AAClC,QAAI,IAAK,MAAK,UAAU,OAAO,GAAG;AAClC,QAAI,QAAQ;AACV,UAAI;AACJ,UAAI;AACF,aAAK,KAAK,QAAQ,OAAO,IAA+B;AAAA,MAC1D,SAAS,KAAK;AACZ,aAAK,iBAAiB,KAAK,EAAE,IAAI,SAAS,OAAO,QAAQ,CAAC;AAC1D,eAAO;AAAA,MACT;AACA,WAAK,WAAW,IAAI,IAAI,EAAE;AAC1B,WAAK,YAAY,EAAE;AACnB,WAAK,WAAW,IAAI,IAAI,OAAO,OAAO;AAAA,IACxC,OAAO;AACL,WAAK,WAAW,OAAO,EAAE;AAAA,IAC3B;AACA,SAAK,KAAK,OAAO,EAAE;AACnB,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,UAA8B;AAI9C,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,YAAY,CAAC,SAAS,QAAQ;AACzF,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,EAAE,CAAC;AAAA,IACvF;AACA,QAAI,CAAC,cAAc,UAAU,WAAW,GAAG;AACzC,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,SAAS,8BAA8B,WAAW,SAAS,EAAE,CAAC;AAAA,IAC3G;AACA,UAAM,WAAW,KAAK,QAAQ,oBAAoB;AAIlD,QAAI,OAAO;AACX,QAAI;AACJ,QAAI;AAAE,aAAO,aAAa,QAAQ,EAAE;AAAA,IAAQ,SAAS,GAAG;AAAE,uBAAiB;AAAA,IAAG;AAC9E,QAAI,OAAO,UAAU;AACnB,aAAO,MAAM,UAAU,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzC,wCAAwC,IAAI,MAAM,QAAQ;AAAA,MAAG,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,SAAS,SAAS;AAIxB,UAAM,YAAY,SAAS;AAC3B,QACE,cAAc,UACd,cAAc,SACb,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,IACzD;AACA,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE,CAAC;AAAA,IAC5F;AACA,UAAM,SAAU,aAAa,CAAC;AAC9B,UAAM,UAAU,KAAK,SAAS,IAAI,MAAM;AACxC,QAAI,CAAC,SAAS;AACZ,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,MAAM,EAAE,EAAE,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB,QAAW;AAChC,YAAM,MAAM,0BAA0B,QAAQ,eAAe,UAAU,OAAO,cAAc;AAC5F,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,EAAE,CAAC;AAAA,IAC3D;AAIA,QAAI,OAAO,cAAc,WAAc,OAAO,OAAO,cAAc,YAAY,CAAC,OAAO,YAAY;AACjG,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE,CAAC;AAAA,IAC9F;AAUA,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAMC,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,QAAQ,KAAK,YAAY,EAAE;AACjC,cAAM,SAAS,aAAa,aAAa,QAAQ,CAAC;AAClD,cAAM,QAAQ,MAAM,QAAQ,IAAI,MAAM;AACtC,YAAI,OAAO;AACT,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,MAAM;AAAA,YAC7C,kBAAkB,MAAM,GAAG;AAAA,YAC3B,EAAE,gBAAgB,MAAM,IAAI;AAAA,UAAC,EAAE,CAAC;AAAA,QACpC;AACA,cAAM,WAAW,MAAM,SAAS,IAAI,MAAM;AAC1C,YAAI,aAAa,QAAW;AAC1B,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzC,mBAAmB,QAAQ;AAAA,YAC3B,EAAE,iBAAiB,SAAS;AAAA,UAAC,EAAE,CAAC;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AAUA,UAAM,SAAS,OAAO,OAAO,cAAc,WAAW,KAAK,WAAW,IAAI,OAAO,SAAS,IAAI;AAC9F,QAAI,KAAK,mBAAmB,MAAM,KAC3B,WAAW,sBAAsB,WAAW,sBAC5C,EAAE,CAAC,SAAS,QAAQ,KAAK,WAAW,UAC/B,CAAC,KAAK,SAAS,QAAQ,UAAU,QAAQ,OAAO,IAAI,GAAG,IAAI,IAAI;AACzE,YAAM,SAAS,KAAK,gBAAgB,QAAQ;AAC5C,UAAI,OAAQ,QAAO,MAAM,UAAU,EAAE,OAAO,OAAO,CAAC;AACpD,UAAI,WAAW,0BAA0B;AAGvC,cAAM,aAAc,SAAS,IAAe,MAAM,GAAG,EAAE,CAAC;AACxD,cAAM,SAAS,OAAO;AACtB,YAAI,UAAU,QAAQ,eAAe,QAAQ;AAC3C,iBAAO,MAAM,UAAU,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzC;AAAA,UAA0C,EAAE,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,KAAK,QAAQ,iBAAiB,mBAAmB,IAAI,MAAM,GAAG;AAChE,YAAM,QAAQ,KAAK,YAAY,MAAM;AACrC,UAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,MAAM,CAAC;AAAA,IACpD;AAOA;AACE,YAAM,OAAO,KAAK,YAAY,QAAQ,MAAM;AAC5C,UAAI,KAAM,QAAO,MAAM,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,IAClD;AAaA,QAAI,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,aAAa,KAAK,OAAO,WAAW,UAAU,KAAK,OAAO,WAAW,UAAU,KAAK,oBAAoB,IAAI,MAAM,GAAG;AAC1K,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,UAAI,IAAI;AACN,cAAM,YAAY,KAAK,cAAc,IAAI,OAAO,IAAI;AACpD,YAAI,UAAW,QAAO,MAAM,UAAU,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AAGA,UAAM,SAAS,oBAAI,IAAI;AAAA,MAAC;AAAA,MAAoB;AAAA,MACpB;AAAA,MAAkB;AAAA,MAClB;AAAA,MAAoB;AAAA,IAAmB,CAAC;AAChE,QAAI,CAAC,OAAO,IAAI,MAAM,GAAG;AACvB,YAAMA,QAAO,OAAO;AACpB,UAAI,OAAOA,UAAS,UAAU;AAC5B,cAAM,KAAK,KAAK,WAAW,IAAIA,KAAI;AACnC,YAAI,MAAM,GAAG,UAAU,UAAU;AAC/B,iBAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,0BAA0B,aAAaA,KAAI,YAAY,EAAE,CAAC;AAAA,QACvG;AAAA,MACF;AAAA,IACF;AAKA,QAAI,WAAW,eAAe;AAC5B,YAAMA,QAAO,OAAO;AACpB,YAAM,KAAK,OAAOA,UAAS,WAAW,KAAK,WAAW,IAAIA,KAAI,IAAI;AAClE,YAAM,MAAM,OAAO;AACnB,UAAI,MAAM,OAAO,QAAQ,UAAU;AACjC,cAAM,aAAa,GAAG,iBAAiB,GAAG;AAC1C,cAAM,OAAO,aAAa,GAAG,MAAM,IAAI,UAAU,IAAI;AACrD,YAAI,KAAM,QAAO,MAAM,UAAU,EAAE,QAAQ,EAAE,SAAS,YAAY,OAAO,KAAK,MAAM,EAAE,CAAC;AAAA,MACzF;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AAMF,YAAM,QAAQ,QAAQ,MAAM,CAAC;AAAA,IAC/B,SAAS,GAAG;AAIV,WAAK,oBAAoB,GAAG,QAAQ,OAAO,SAA+B;AAC1E,aAAO,MAAM,UAAU,EAAE,OAAO,SAAS,EAAE,UAAU,gBAAgB,EAAE,CAAC;AAAA,IAC1E;AACA,QAAI,IAAI,MAAO,QAAO,MAAM,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC;AAM1D,UAAM,OAAO,WAAW,qBACnB,IAAI,OAAiC,YACtC,OAAO;AACX,QAAI,OAAO,SAAS,YAAY,CAAC,kBAAkB,IAAI,MAAM,GAAG;AAC9D,YAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,UAAI,GAAI,MAAK,YAAY,IAAI,aAAa,QAAQ,CAAC;AAAA,IACrD;AACA,WAAO,MAAM,UAAU,EAAE,QAAQ,QAAQ,IAAI,MAAM,EAAE,CAAC;AAAA,EACxD;AAAA;AAAA,EAIA,YAAY,IAAe,UAA0B;AACnD,SAAK,YAAY,IAAI,EAAE,UAAU,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC,EAAc,CAAC;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,UAAoB,OAA+C;AACvF,QAAI,CAAC,gBAAgB,QAAQ,KAAK,OAAO,SAAS,WAAW,SAAU;AACvE,UAAM,SAAS,SAAS;AACxB,QAAI,kBAAkB,IAAI,MAAM,EAAG;AACnC,QAAI,CAAC,kBAAkB,QAAQ,OAAO,kBAAkB,EAAG;AAC3D,UAAM,MAAM,SAAS;AACrB,QAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AACnE,UAAM,SAAS;AACf,UAAM,KAAK,OAAO,OAAO,cAAc,WAAW,KAAK,WAAW,IAAI,OAAO,SAAS,IAAI;AAC1F,QAAI,CAAC,MAAM,OAAO,OAAO,SAAS,YAAY,CAAC,GAAG,QAAQ,IAAI,OAAO,IAAI,EAAG;AAK5E,QAAI,SAAS,QAAQ,GAAG;AACtB,YAAM,QAAQ,KAAK,YAAY,EAAE;AACjC,YAAM,SAAS,aAAa,QAAQ;AACpC,UAAI,MAAM,QAAQ,IAAI,MAAM,KAAK,MAAM,SAAS,IAAI,MAAM,EAAG;AAAA,IAC/D;AACA,SAAK,YAAY,IAAI;AAAA,MACnB,SAAS,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAAA,MAC5C,SAAS,EAAE,QAAQ,WAAW,MAAM,MAAM,KAAK;AAAA,IACjD,CAAC;AAAA,EACH;AAAA;AAAA,EAGQ,YAAY,IAA4B;AAC9C,QAAI,QAAQ,KAAK,cAAc,IAAI,EAAE;AACrC,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,SAAS,oBAAI,IAAI,GAAG,UAAU,oBAAI,IAAI,EAAE;AAClD,iBAAW,SAAS,GAAG,MAAO,aAAY,OAAO,KAAK;AACtD,WAAK,cAAc,IAAI,IAAI,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,YAAY,IAAe,QAAoE;AACrG,UAAM,QAAoB,EAAE,KAAK,GAAG,MAAM,QAAQ,SAAS,KAAK,IAAI,GAAG,GAAG,OAAO;AACjF,QAAI,GAAG,iBAAiB,KAAK,QAAQ,aAAa;AAChD,YAAM,OAAO,GAAG,cAAc;AAC9B,YAAM,YAAY;AAClB,SAAG,aAAa,SAAS,YAAY,KAAK,GAAG,IAAI;AAAA,IACnD;AACA,OAAG,MAAM,KAAK,KAAK;AACnB,UAAM,QAAQ,KAAK,cAAc,IAAI,EAAE;AACvC,QAAI,MAAO,aAAY,OAAO,KAAK;AAGnC,UAAM,SAAS,KAAK,YAAY,IAAI,EAAE;AACtC,QAAI,OAAQ,QAAO,KAAK,KAAK;AAAA,QACxB,MAAK,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC;AACrC,SAAK,QAAQ,EAAE;AAAA,EACjB;AAAA;AAAA,EAIQ,gBAAgB,UAA8E;AACpG,UAAM,MAAM,SAAS;AACrB,QAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AAGA,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,UAAM,SAAS,MAAM,CAAC;AACtB,QAAI,MAAM,WAAW,KAAM,WAAW,aAAa,WAAW,YAAa;AACzE,aAAO,SAAS,EAAE,mBAAmB,yBAAyB;AAAA,IAChE;AACA,UAAM,YAAY,WAAW,aAAa,uBAAuB,MAAM,CAAC,CAAC,IAAI;AAC7E,QAAI,WAAW,cAAc,CAAC,WAAW;AACvC,aAAO,SAAS,EAAE,mBAAmB,yBAAyB;AAAA,IAChE;AACA,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,SAAU,SAAS,UAAU,CAAC;AACpC,UAAM,SAAS,OAAO;AACtB,UAAM,OAAO,OAAO;AACpB,UAAM,QAAQ,OAAO;AAMrB,QAAI,OAAO,WAAW,YAAY,CAAC,UAAU,OAAO,SAAS,YAAY,CAAC,MAAM;AAC9E,aAAO,SAAS,EAAE,mBAAmB,iDAAiD;AAAA,IACxF;AAGA,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,SAAS,EAAE,mBAAmB,8CAA8C;AAAA,IACrF;AACA,UAAM,KAAM,SAAuC,KAAK,IAAI;AAC5D,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,IAAI;AACP,aAAO,SAAS,EAAE,mBAAmB,4CAA4C;AAAA,IACnF;AACA,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO,SAAS,EAAE,mBAAmB,cAAc,MAAM,EAAE;AAOxE,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,eAAe,UAAa,OAAO,EAAE,UAAU,GAAG;AAC7F,aAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AAAA,IAC5D;AAMA,QAAI,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,gBAAgB,UAAa,OAAO,EAAE,WAAW,GAAG;AAC/F,aAAO,SAAS,EAAE,mBAAmB,OAAO,GAAG,qBAAqB;AAAA,IACtE;AAEA,UAAM,MAAM,KAAK,UAAU,QAAQ,KAAK,EAAE;AAC1C,QAAI,CAAC,KAAK;AACR,YAAM,UAAU,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,OAAO,EAAE,UAAU;AACnE,UAAI,QAAS,QAAO,SAAS,EAAE,iBAAiB,OAAO,GAAG,aAAa;AACvE,aAAO,SAAS,EAAE,mBAAmB,UAAU,GAAG,aAAa,EAAE,QAAQ,MAAM,EAAE;AAAA,IACnF;AAEA,QAAI,WAAW;AACb,UAAI,CAAC,cAAc,IAAI,GAAG,EAAG,QAAO,SAAS,EAAE,mBAAmB,OAAO,GAAG,wBAAwB;AACpG,YAAM,WAAqB,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAC9D,aAAO,SAAS;AAChB,YAAM,UAAU,gBAAgB,aAAa,QAAQ,GAAG,WAAW,IAAI,GAAyC;AAChH,aAAO,YAAY,OAAO,OAAO,SAAS,EAAE,mBAAmB,OAAO;AAAA,IACxE;AAIA,QAAI,CAAC,aAAa,IAAI,GAAG,EAAG,QAAO,SAAS,EAAE,mBAAmB,OAAO,GAAG,wBAAwB;AACnG,QAAI;AACF,YAAM,WAAqB,KAAK,MAAM,KAAK,UAAU,QAAQ,CAAC;AAC9D,aAAO,SAAS;AAChB,YAAM,YAAY,aAAa,QAAQ;AACvC,YAAM,MAAM,iBAAiB,IAAI,GAAG;AACpC,UAAI,CAAC,eAAe,WAAW,KAAK,GAAG,GAAG;AACxC,eAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,MACtE;AACA,aAAO;AAAA,IACT,QAAQ;AAIN,aAAO,SAAS,EAAE,mBAAmB,+BAA+B;AAAA,IACtE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,mBAAmB,UAAwD;AACjF,UAAM,QAAQ,CAAC,SAAiB,SAAS,KAAK,CAAC,MAAM,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC;AAC3F,QAAI,MAAM,eAAe,KAAK,KAAK,QAAQ,oBAAoB,QAAW;AACxE,aAAO;AAAA,QAAS,EAAE;AAAA,QAChB;AAAA,MAEyC;AAAA,IAC7C;AACA,QAAI,MAAM,aAAa,KAAK,KAAK,QAAQ,aAAa,QAAW;AAC/D,aAAO;AAAA,QAAS,EAAE;AAAA,QAChB;AAAA,MAEyC;AAAA,IAC7C;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,mBAAmB,IAAoC;AAC7D,WAAO,CAAC,CAAC,KAAK,QAAQ,qBAAsB,OAAO,UAAa,WAAW,IAAI,iBAAiB;AAAA,EAClG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,SAAS,IAAe,MAAmC;AACjE,WAAO,GAAG,qBAAqB,SAAS,SAAS;AAAA,EACnD;AAAA;AAAA,EAGA,UAAU,QAAgB,KAAa,IAA8B;AACnE,eAAW,KAAK,OAAO,MAAM;AAC3B,UAAI,EAAE,QAAQ,IAAK;AACnB,UAAI,EAAE,eAAe,UAAa,MAAM,EAAE,WAAY;AACtD,UAAI,KAAK,EAAE,WAAY;AACvB,UAAI,EAAE,gBAAgB,UAAa,MAAM,EAAE,YAAa;AACxD,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,YAAY,QAAgB,QAAiC;AACnE,UAAM,QAAQ,eAAe,MAAM;AACnC,QAAI,UAAU,UAAa,UAAU,cAAc,iBAAiB,IAAI,MAAM,EAAG,QAAO;AACxF,UAAM,OAAO,OAAO;AACpB,UAAM,KAAK,OAAO,SAAS,WAAW,KAAK,WAAW,IAAI,IAAI,IAAI;AAClE,QAAI,CAAC,GAAI,QAAO;AAGhB,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAI,GAAG,SAAS,KAAK,OAAK,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC,EAAG,QAAO;AAC1E,WAAO;AAAA,MAAS,EAAE;AAAA,MAAQ,mBAAmB,MAAM;AAAA,MACnC,EAAE,SAAS,OAAO,YAAY,CAAC,GAAG,GAAG,QAAQ,EAAE;AAAA,IAAC;AAAA,EAClE;AAAA,EAEQ,YAAY,QAA2F;AAG7G,UAAM,OAAO,OAAO;AACpB,UAAM,SAAS,OAAO;AACtB,QAAI,OAAO,SAAS,YAAY,OAAO,WAAW,YAAY,CAAC,QAAQ,CAAC,OAAQ,QAAO;AACvF,UAAM,KAAK,KAAK,WAAW,IAAI,IAAI;AACnC,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,SAAS,GAAG,QAAQ,IAAI,MAAM;AACpC,QAAI,CAAC,OAAQ,QAAO;AAIpB,QAAI,OAAO,SAAS,WAAW,OAAO,aAAa,OAAW,QAAO;AACrE,QAAI,OAAO,mBAAmB,QAAW;AACvC,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,MACjB,CAAC;AAAA,IACH;AACA,UAAM,SAAS,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC3C,UAAM,MAAM,SAAS,OAAO;AAC5B,QAAI,MAAM,GAAG,oBAAoB;AAC/B,aAAO,SAAS,EAAE,uBAAuB,mCAAmC;AAAA,QAC1E,YAAY,GAAG;AAAA,QAAoB,SAAS;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,QAAI,GAAG,YAAY,UAAa,OAAO,aAAa,GAAG,SAAS;AAC9D,aAAO,SAAS,EAAE,uBAAuB,qDAAqD;AAAA,QAC5F,cAAc,GAAG;AAAA,QAAS,KAAK,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMQ,uBAA6B;AACnC,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,sBAA0B,OAAK,KAAK,oBAAoB,CAAC,CAAC;AAC5E,SAAK,SAAS,IAAI,0BAA0B,OAAK,KAAK,uBAAuB,CAAC,CAAC;AAC/E,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,oBAA0B,OAAK,KAAK,kBAAkB,CAAC,CAAC;AAC1E,SAAK,SAAS,IAAI,qBAA0B,OAAK,KAAK,mBAAmB,CAAC,CAAC;AAC3E,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,eAA0B,OAAK,KAAK,aAAa,CAAC,CAAC;AACrE,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,eAAe,CAAC,CAAC;AACvE,SAAK,SAAS,IAAI,cAA0B,OAAK,KAAK,YAAY,CAAC,CAAC;AACpE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AACxE,SAAK,SAAS,IAAI,sBAA0B,OAAK,KAAK,oBAAoB,CAAC,CAAC;AAC5E,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,SAAS,GAAG,SAAS,CAAC;AAC5E,SAAK,SAAS,IAAI,iBAA0B,OAAK,KAAK,SAAS,GAAG,QAAQ,CAAC;AAC3E,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,mBAA0B,OAAK,KAAK,iBAAiB,CAAC,CAAC;AACzE,SAAK,SAAS,IAAI,kBAA0B,OAAK,KAAK,gBAAgB,CAAC,CAAC;AAAA,EAC1E;AAAA,EAEQ,0BAAgC;AAEtC,oBAAgB,IAAI;AACpB,yBAAqB,IAAI;AACzB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,oBAAgB,IAAI;AACpB,2BAAuB,IAAI;AAC3B,uBAAmB,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,GAAiD;AACzE,UAAM,QAAQ,KAAK,eAAe,CAAC;AACnC,QAAI,MAAM,MAAO,QAAO,EAAE,OAAO,MAAM,MAAM;AAC7C,SAAK,aAAa,MAAM,EAAE;AAC1B,WAAO,EAAE,QAAQ,EAAE,WAAW,MAAM,GAAG,IAAI,SAAS,MAAM,GAAG,QAAQ,EAAE;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,eAAe,GAC2E;AAChG,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,YAAY,SAAS;AAAA,MAAG,CAAC,QAAQ,QAAQ;AAAA,MAAG,CAAC,gBAAgB,QAAQ;AAAA,MACtE,CAAC,sBAAsB,QAAQ;AAAA,MAAG,CAAC,sBAAsB,SAAS;AAAA,MAAG,CAAC,WAAW,QAAQ;AAAA,IAC3F,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,eAAW,QAAQ,CAAC,QAAQ,cAAc,GAAG;AAC3C,UAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,EAAE,IAAI,CAAW,GAAG;AACpD,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,IAAI,sCAAsC,EAAE;AAAA,MACpF;AAAA,IACF;AACA,UAAM,SAAS,EAAE,oBAAoB,KAAK,QAAQ,mBAAmB;AACrE,QAAI,WAAW,SAAS,WAAW,UAAU;AAC3C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wCAAwC,EAAE;AAAA,IAC/E;AACA,UAAM,aAAa,EAAE,eAAe,KAAK,QAAQ,cAAc;AAC/D,QAAI,eAAe,UAAU,eAAe,UAAU;AACpD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE;AAAA,IAC3E;AACA,UAAM,aAAa,EAAE,eAAe;AACpC,QAAI,eAAe,WAAc,OAAO,eAAe,YAAY,CAAC,oBAAoB,UAAU,IAAI;AACpG,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iEAAiE,EAAE;AAAA,IACxG;AACA,UAAM,KAAM,EAAE,aAAwB,KAAK,IAAI,YAAY;AAC3D,QAAI,KAAK,WAAW,IAAI,EAAE,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,6BAA6B,EAAE,EAAE,EAAE;AACnG,QAAI,MAAM,QAAQ,EAAE,QAAQ,GAAG;AAC7B,YAAM,UAAU,cAAc,EAAE,QAAoB;AACpD,UAAI,QAAS,QAAO;AAAA,IACtB;AACA,UAAM,WAAqB,MAAM,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAI,EAAE,QAAqB,IAAI,CAAC,GAAI,KAAK,QAAQ,mBAAmB,CAAC,YAAY,YAAY,CAAE;AASvJ,UAAM,SAAS,SAAS,KAAK,OAAK,MAAM,qBAAqB,EAAE,WAAW,kBAAkB,CAAC;AAC7F,QAAI,KAAK,QAAQ,qBAAqB,CAAC,OAAQ,UAAS,KAAK,qBAAqB;AAClF,UAAM,OAAO,SAAS,KAAK,OAAK,MAAM,mBAAmB,EAAE,WAAW,gBAAgB,CAAC;AACvF,QAAI,KAAK,QAAQ,oBAAoB,UAAa,CAAC,KAAM,UAAS,KAAK,mBAAmB;AAC1F,UAAM,KAAK,SAAS,KAAK,OAAK,MAAM,iBAAiB,EAAE,WAAW,cAAc,CAAC;AACjF,QAAI,KAAK,QAAQ,aAAa,UAAa,CAAC,GAAI,UAAS,KAAK,iBAAiB;AAC/E,UAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,QAAI,WAAY,QAAO,EAAE,OAAO,WAAW;AAE3C,UAAM,eAAe,SAAS,SAAS,iBAAiB,KAAK,CAAC,CAAC,KAAK,QAAQ;AAC5E,UAAM,KAAgB;AAAA,MACpB;AAAA,MACA,SAAS,KAAK,IAAI;AAAA,MAClB,OAAO;AAAA,MACP;AAAA,MACA,MAAO,EAAE,QAAiB;AAAA,MAC1B,cAAe,EAAE,gBAAyB;AAAA;AAAA;AAAA,MAG1C,oBAAqB,EAAE,sBAAoD;AAAA,MAC3E,oBAAqB,EAAE,sBAAoD;AAAA,MAC3E,SAAU,EAAE,WAAyC;AAAA,MACrD,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,GAAI,eAAe,SAAY,EAAE,aAAa,WAAW,IAAI,CAAC;AAAA,MAC9D,SAAS,KAAK,OAAO;AAAA,MACrB,OAAO,KAAK,OAAO;AAAA,MACnB,WAAW,KAAK,OAAO;AAAA,MACvB,UAAU,KAAK,OAAO;AAAA,MACtB,eAAe,KAAK,OAAO;AAAA,MAC3B,UAAU,KAAK,OAAO;AAAA,MACtB,WAAW,KAAK,OAAO;AAAA,MACvB,iBAAiB,KAAK,OAAO;AAAA,MAC7B,aAAa,KAAK,OAAO;AAAA,MACzB,kBAAkB,CAAC;AAAA,MACnB,OAAO,CAAC;AAAA,MACR,eAAe;AAAA,MACf,YAAY,eAAe,YAAY;AAAA,IACzC;AACA,WAAO,EAAE,GAAG;AAAA,EACd;AAAA,EAEQ,aAAa,IAAqB;AACxC,SAAK,WAAW,IAAI,GAAG,IAAI,EAAE;AAE7B,SAAK,UAAU,IAAI,IAAI,EAAE,KAAK,GAAG,SAAS,OAAO,MAAM,oBAAI,IAAI,EAAE,CAAC;AAAA,EACpE;AAAA,EAEQ,oBAAoB,GAAiD;AAC3E,UAAM,OAAO,QAAQ,GAAG,CAAC,WAAW,CAAC;AACrC,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,EAAE,SAAS,EAAE,EAAE;AACjF,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AACA,WAAO,EAAE,QAAQ;AAAA,MACf,IAAI,GAAG;AAAA,MACP,SAAS,GAAG;AAAA,MACZ,OAAO,GAAG;AAAA,MACV,MAAM,GAAG;AAAA,MACT,cAAc,GAAG;AAAA,MACjB,oBAAoB,KAAK,QAAQ,oBAAoB;AAAA,MACrD,oBAAoB,GAAG;AAAA,MACvB,kBAAkB,GAAG;AAAA,MACrB,aAAa,GAAG;AAAA,MAChB,aAAa,GAAG,eAAe;AAAA,MAC/B,UAAU,GAAG;AAAA,MACb,SAAS,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,EAAE,IAAI,YAAY;AAAA,MAC3D,aAAa,GAAG,MAAM;AAAA,MACtB,YAAY,GAAG,MAAM;AAAA,MACrB,gBAAgB,GAAG,UAAU;AAAA;AAAA;AAAA;AAAA,MAI7B,GAAI,GAAG,aAAa,EAAE,eAAe,GAAG,WAAW,IAAI,CAAC;AAAA,MACxD,GAAI,GAAG,qBAAqB,EAAE,oBAAoB,GAAG,mBAAmB,IAAI,CAAC;AAAA,IAC/E,EAAC;AAAA,EACH;AAAA,EAEQ,uBAAuB,GAAiD;AAC9E,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,UAAU,CAAC;AACzD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,QAAI,CAAC,MAAM,QAAQ,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AACjF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE;AAAA,IAC3E;AACA,UAAM,UAAU,cAAc,EAAE,QAAoB;AACpD,QAAI,QAAS,QAAO;AACpB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,QAAI,GAAG,QAAQ,IAAI,EAAE,IAAc,EAAG,SAAS,SAAS;AACtD,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,gDAAgD,EAAE;AAAA,IAC/F;AAMA,UAAM,cAAc,CAAC,GAAI,EAAE,QAAqB;AAChD,eAAW,QAAQ,kBAAkB;AACnC,YAAM,OAAO,GAAG,SAAS,KAAK,CAAC,MAAM,MAAM,QAAQ,EAAE,WAAW,OAAO,GAAG,CAAC;AAC3E,UAAI,SAAS,UAAa,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,GAAG,CAAC,GAAG;AAC5E,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,GAAG,IAAI,oCAAoC,EAAE;AAAA,MAC1F;AAAA,IACF;AACA,UAAM,aAAa,KAAK,mBAAmB,WAAW;AACtD,QAAI,WAAY,QAAO,EAAE,OAAO,WAAW;AAC3C,QAAI,CAAC,YAAY,KAAK,QAAM,GAAG,WAAW,OAAO,CAAC,EAAG,aAAY,KAAK,UAAU;AAChF,OAAG,WAAW;AACd,QAAI,YAAY,SAAS,iBAAiB,KAAK,CAAC,GAAG,eAAe;AAChE,SAAG,gBAAgB;AACnB,SAAG,aAAa;AAAA,IAClB;AACA,WAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,SAAS,EAAE;AAAA,EAC7C;AAAA,EAEQ,kBAAkB,GAAiD;AACzE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,MAAM,CAAC;AACrD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AAGvE,eAAW,KAAK,CAAC,QAAQ,MAAM,GAAG;AAChC,UAAI,OAAO,EAAE,CAAC,MAAM,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,CAAC,mBAAmB,EAAE;AAAA,IAC5F;AAKA,UAAM,OAAO,EAAE;AACf,UAAM,QAAQ,iBAAiB,MAAM,EAAE,MAAgB,MAAM;AAC7D,QAAI,MAAO,QAAO;AAClB,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,QAAQ,QAAQ;AAAA,MAAG,CAAC,gBAAgB,QAAQ;AAAA,MAAG,CAAC,UAAU,SAAS;AAAA,MACpE,CAAC,gBAAgB,QAAQ;AAAA,MAAG,CAAC,QAAQ,QAAQ;AAAA,MAAG,CAAC,aAAa,MAAM;AAAA,MACpE,CAAC,cAAc,QAAQ;AAAA,MAAG,CAAC,mBAAmB,QAAQ;AAAA,IACxD,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,QAAI,EAAE,SAAS,WAAW,CAAC,YAAY,SAAS,IAAI,GAAG;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AAIA,QAAI,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AAClD,UAAM,OAAO,OAAO;AACpB,QAAI,CAAC,IAAI;AACP,YAAM,QAAQ,KAAK,eAAe,EAAE,WAAW,EAAE,UAAU,CAAC;AAC5D,UAAI,MAAM,MAAO,QAAO,EAAE,OAAO,MAAM,MAAM;AAC7C,WAAK,MAAM;AAAA,IACb;AACA,UAAM,MAAM,EAAE;AACd,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,WAAW,GAAG,QAAQ,IAAI,GAAG;AACnC,QAAI,gBAAgB;AACpB,QAAI,iBAAiB;AACrB,QAAI,kBAAkB;AAQtB,UAAM,aAAa,WAAW,SAAY,cAAc,IAAI,GAAG;AAC/D,UAAM,QAAQ,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,EAAE,OAAO;AACrE,QAAI,OAAO,SAAS;AACpB,QAAI,CAAC,UAAU;AACb,YAAM,QAAQ,kBAAkB,EAAE;AAClC,UAAI,GAAG,gBAAgB,YAAY,CAAC,cAAc,EAAE,SAAS,YAAY,SAAS,IAAI,IAAI;AACxF,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,GAAG,GAAG,sCAAsC,EAAE;AAAA,MAC3F;AACA,UAAI,YAAY,SAAS,QAAW;AAClC,YAAI,UAAU,WAAW,WAAW,SAAS,SAAS;AACpD,iBAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,uCAAuC,EAAE;AAAA,QACtF;AACA,eAAO,WAAW;AAAA,MACpB,WAAW,SAAS,GAAG,gBAAgB,UAAU;AAC/C,YAAI,UAAU,UAAa,UAAU,SAAS;AAC5C,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB;AAAA,UAAwE,EAAE;AAAA,QAC9E;AACA,eAAO;AAAA,MACT,WAAW,UAAU,WAAW,CAAC,OAAO;AACtC,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,uCAAuC,EAAE;AAAA,MACtF;AAAA,IACF;AAOA,QAAI,SAAS,SAAS;AACpB,YAAM,OAAO,KAAK,QAAQ,oBAAoB,UAAa,WAAW,IAAI,eAAe;AACzF,YAAM,KAAK,KAAK,QAAQ,aAAa,UAAa,WAAW,IAAI,aAAa;AAC9E,YAAM,YAAa,QAAQ,OAAO,EAAE,eAAe,YAAc,MAAM,SAAS,EAAE,eAAe;AACjG,WAAK,QAAQ,OAAO,CAAC,WAAW;AAC9B,eAAO,EAAE,OAAO,OACZ,SAAS,EAAE,oBAAoB,KAC7B,kFACA,0DAA0D,IAC5D,SAAS,EAAE,eAAe,8DAA8D,EAAE;AAAA,MAChG;AAAA,IACF;AAEA,UAAM,SAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,cAAc,EAAE;AAAA,MAChB,cAAc,EAAE;AAAA,MAChB,QAAQ,EAAE;AAAA,MACV,MAAM,CAAC;AAAA,MACP,QAAQ;AAAA,IACV;AAIA,QAAI,YAAY,aAAa,WACrB,KAAK,QAAQ,oBAAoB,UAAa,OAAO,EAAE,eAAe,WAAW;AACvF,aAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,iEAAiE,EAAE;AAAA,IACpH;AAGA,QAAI,KAAK,QAAQ,mBAAmB,OAAO,EAAE,eAAe,UAAU;AACpE,YAAM,SAAS,KAAK,QAAQ,gBAAgB,EAAE,UAAU;AACxD,UAAI,WAAW,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,oBAAoB,oBAAoB,EAAE;AAK1F,YAAM,WAAW,OAAO;AACxB,YAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,OAAO,QAAQ,KAAK,OAAO,MAAM;AAC/E,UAAI,YAAY,QAAQ,aAAa,KAAK;AACxC,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,4CAA4C,EAAE;AAAA,MAC9F;AACA,UAAI,YAAY,aAAa,UAAa,QAAQ,WAAW,UAAU;AACrE,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,kDAAkD,EAAE;AAAA,MACpG;AACA,UAAI,UAAU;AACZ,YAAI,SAAS,YAAY,MAAM;AAC7B,cAAI,QAAQ,SAAS,UAAU;AAC7B,mBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,8CAA8C,EAAE;AAAA,UAChG;AAAA,QACF,WAAW,aAAa,KAAK;AAC3B,iBAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,sCAAsC,EAAE;AAAA,QACxF;AAAA,MACF,WAAW,SAAS,WAAW,aAAa,OAAO,YAAY,aAAa,QAAW;AAIrF,eAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,2CAA2C,EAAE;AAAA,MAC7F;AACA,aAAO,WAAW;AAClB,sBAAgB;AAGhB,YAAM,KAAK,OAAO;AAClB,UAAI,OAAO,OAAO,YAAY,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,OAAO,iBAAkB,QAAO,iBAAiB,KAAK,MAAM,EAAE;AACnI,aAAO,WAAW,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAMhE,YAAM,MAAM,SAAS,OAAO,GAAG,IAAI,OAAO,IAAI,MAAM;AACpD,YAAM,QAAQ,eAAe,KAAK,OAAO,OAAO,OAAO,QAAQ,QAAW,YAAY,EAAE,IAAI,CAAC;AAC7F,UAAI,UAAU,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,mBAAmB,iDAAiD,EAAE;AACrH,UAAI,UAAU,QAAW;AACvB,0BAAkB;AAClB,mBAAW,KAAK,MAAO,QAAO,KAAK,KAAK,EAAE,KAAK,GAAkC,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,MAChH;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ,YAAY,SAAS,EAAE,eAAe,GAAG;AACxD,YAAM,UAAU,KAAK,QAAQ,SAAS,EAAE,eAAe;AACvD,UAAI,YAAY,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,eAAe,yBAAyB,EAAE;AAC3F,YAAM,SAAS,CAAC,QAAQ,QAAQ,QAAQ,EAAE,EAAE;AAAA,QAC1C,CAAC,MAAmB,OAAO,MAAM,YAAY,MAAM;AAAA,MAAE;AAGvD,UAAI,aAAa,SAAS,aAAa,QAAQ,WAAW,SAAS,YAAY;AAC7E,eAAO,EAAE,OAAO,SAAS,EAAE,2BAA2B,+CAA+C,EAAE;AAAA,MACzG;AACA,aAAO,YAAY;AACnB,uBAAiB;AACjB,YAAM,QAAQ,eAAe,QAAQ,SAAS,QAAW,YAAY,EAAE,IAAI,CAAC;AAC5E,UAAI,UAAU,MAAM;AAClB,eAAO,EAAE,OAAO,SAAS,EAAE,2BAA2B,wDAAwD,EAAE;AAAA,MAClH;AACA,UAAI,UAAU,QAAW;AACvB,0BAAkB;AAClB,mBAAW,KAAK,MAAO,QAAO,KAAK,KAAK,EAAE,KAAK,GAAkC,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,MAChH;AAAA,IACF;AAKA,QAAI,CAAC,YAAY,SAAS,YAAY,iBAAiB,mBAAmB,CAAC,mBACpE,CAAC,YAAY,QAAQ,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG;AAC1D,aAAO,EAAE,OAAO,gBACZ,SAAS,EAAE,mBAAmB,wEAAwE,IACtG;AAAA,QAAS,EAAE;AAAA,QACX;AAAA,MAA+E,EAAE;AAAA,IACvF;AAKA,UAAM,SAAS,YAAY,MAAM;AACjC,QAAI,QAAQ;AACV,YAAM,SAAS,CAAC,GAAG,YAAY,EAAE,IAAI,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,GAAyC,CAAC,EAC3G,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,MAAM,QAAQ,GAAyC,CAAC,CAAC,CAAC;AACzF,UAAI,OAAO,QAAQ;AACjB,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UAAgB,GAAG,GAAG;AAAA,UAC/C,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE;AAAA,QAAC,EAAE;AAAA,MACtD;AACA,aAAO,OAAO,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,YAAY,IAAI,EAAE;AAAA,IAC3E;AAEA,UAAM,WAAW,CAAC,GAAG,OAAO,IAAI;AAIhC,QAAI,SAAS,WAAW,GAAG;AACzB,iBAAW,KAAK,YAAY,EAAE,IAAI,GAAG;AACnC,YAAI,CAAC,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,GAAG;AAC3C,iBAAO,KAAK,KAAK,EAAE,KAAK,GAAkC,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU;AAMZ,UAAI,SAAS,WAAW,GAAG;AACzB,cAAM,OAAO,YAAY,EAAE,IAAI;AAC/B,cAAM,OAAO,KAAK,KAAK,CAAC,MAAM,SAAS,KAAK,KAAK,CAAC,MAAM,QAAQ,EAAE,KAA2C,CAAC,CAAC,CAAC;AAChH,YAAI,KAAK,SAAS,KAAK,CAAC,MAAM;AAC5B,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB,GAAG,GAAG;AAAA,YACN,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE;AAAA,UAAC,EAAE;AAAA,QACpD;AAAA,MACF;AACA,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,OAAO,mBAAmB,OAAW,UAAS,iBAAiB,OAAO;AAC1E,UAAI,OAAO,aAAa,OAAW,UAAS,WAAW,OAAO;AAC9D,UAAI,cAAe,UAAS,WAAW,OAAO;AAC9C,UAAI,OAAO,cAAc,OAAW,UAAS,YAAY,OAAO;AAChE,iBAAW,KAAK,UAAU;AACxB,YAAI,CAAC,SAAS,KAAK,KAAK,OAAK,EAAE,QAAQ,EAAE,GAAG,EAAG,UAAS,KAAK,KAAK,CAAC;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,IAC7C;AAIA,QAAI,KAAK,mBAAmB,EAAE,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,KAAK,WAAW,GAAG;AACtF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,GAAG,qDAAqD,EAAE;AAAA,IAClG;AACA,QAAI,KAAM,MAAK,aAAa,EAAE;AAC9B,OAAG,QAAQ,IAAI,KAAK,MAAM;AAC1B,QAAI,WAAY,IAAG,YAAY,OAAO,GAAG;AACzC,WAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,kBAAkB,GAAiD;AACzE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,OAAO,MAAM,CAAC;AAC5D,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,eAAW,KAAK,CAAC,OAAO,MAAM,GAAG;AAC/B,UAAI,OAAO,EAAE,CAAC,MAAM,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,CAAC,mBAAmB,EAAE;AAAA,IAC5F;AACA,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,QAAQ,QAAQ;AAAA,MAAG,CAAC,QAAQ,QAAQ;AAAA,MAAG,CAAC,aAAa,MAAM;AAAA,MAAG,CAAC,YAAY,QAAQ;AAAA,IACtF,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,QAAI,UAAU,IAAI,EAAE,IAAI,EAAG,SAAS,SAAS;AAC3C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,0CAA0C,EAAE;AAAA,IACzF;AACA,UAAM,MAAM,EAAE;AACd,UAAM,OAAO,EAAE;AACf,UAAM,QAAQ,iBAAiB,MAAM,KAAK,KAAK;AAC/C,QAAI,MAAO,QAAO;AAClB,UAAM,OAAO,OAAO,EAAE,SAAS,YAAY,EAAE,SAAS,KAAK,EAAE,OAAO;AACpE,QAAI,SAAS,WAAW,CAAC,YAAY,SAAS,IAAI,GAAG;AACnD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,UAAM,MAAM,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAC1D,QAAI,QAAQ,UAAa,KAAK,QAAQ,oBAAoB,QAAW;AACnE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4EAA4E,EAAE;AAAA,IACnH;AACA,QAAI;AACJ,QAAI,EAAE,QAAQ,MAAM;AAClB,eAAS,YAAY,EAAE,IAAI;AAC3B,UAAI,OAAO,WAAW,EAAG,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,yCAAyC,EAAE;AAAA,IACzG;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,GAAG,QAAQ,IAAI,GAAG;AACjC,QAAI,QAAQ;AAGV,UAAI,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG;AAC5C,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,GAAG,GAAG;AAAA,QAAuF,EAAE;AAAA,MACnG;AACA,UAAI,CAAC,QAAQ;AACX,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,GAAG,4EAA4E,EAAE;AAAA,MACzH;AAKA,UAAK,KAAK,QAAQ,oBAAoB,WAAc,OAAO,SAAS,WAAW,OAAO,aAAa,WAC3F,KAAK,QAAQ,aAAa,WAAc,OAAO,SAAS,WAAW,OAAO,cAAc,SAAa;AAC3G,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,GAAG,GAAG;AAAA,QAAwH,EAAE;AAAA,MACpI;AACA,UAAK,SAAS,UAAa,SAAS,OAAO,QAAU,QAAQ,UAAa,QAAQ,OAAO,UAAW;AAClG,eAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,GAAG,GAAG,kFAAkF,EAAE;AAAA,MAC/H;AAGA,YAAM,SAAS,OAAO,KAAK,CAAC,MAAM,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;AAC1E,UAAI,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,GAAG,QAAQ,GAAG,+BAA+B,EAAE;AAC5G,iBAAW,KAAK,OAAQ,QAAO,KAAK,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,YAAY,IAAI,CAAC;AAChF,aAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,KAAK,YAAY,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;AAAA,IAChF;AAKA,QAAI,WAAW,SAAS,WAAW,QAAQ,YACnC,KAAK,QAAQ,oBAAoB,UAAa,KAAK,QAAQ,aAAa,SAAY;AAC1F,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,GAAG,GAAG;AAAA,MAA8F,EAAE;AAAA,IAC1G;AACA,UAAM,aAAyB;AAAA,MAC7B;AAAA,MAAK;AAAA,MAAkC,YAAY,EAAE;AAAA,MAAwB,YAAY;AAAA,IAC3F;AACA,QAAI,SAAS,OAAW,YAAW,OAAO;AAC1C,QAAI,OAAQ,YAAW,OAAO,EAAE,MAAM,OAAO;AAC7C,QAAI,QAAQ,OAAW,YAAW,WAAW;AAC7C,OAAG,YAAY,IAAI,KAAK,UAAU;AAClC,WAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,IAAI,EAAE;AAAA,EAC1C;AAAA,EAEQ,mBAAmB,GAAiD;AAK1E,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AAGjE,QAAI,UAAU,IAAI,EAAE,IAAI,GAAG,QAAQ;AACjC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,0EAA0E,EAAE;AAAA,IACzH;AACA,OAAG,QAAQ,OAAO,EAAE,IAAc;AAClC,WAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE;AAAA,EAClC;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,QAAQ,OAAO,CAAC;AAC9D,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AAGvE,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,YAAY,QAAQ;AAAA,MAAG,CAAC,MAAM,QAAQ;AAAA,MAAG,CAAC,QAAQ,QAAQ;AAAA,MAAG,CAAC,mBAAmB,SAAS;AAAA,MAC3F,CAAC,iBAAiB,QAAQ;AAAA,MAAG,CAAC,mBAAmB,QAAQ;AAAA,IAC3D,CAAC;AACD,QAAI,IAAK,QAAO;AAIhB,QAAI,cAAc,SAAS,EAAE,eAAyB,GAAG;AACvD,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,iEAAiE,EAAE;AAAA,IACxG;AACA,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,WAAY,EAAE,YAAwB,EAAE;AAC9C,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,IAClE;AACA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AAGA,UAAM,gBAAkB,EAAE,QAAiB,GAAG;AAC9C,QAAI,CAAC,OAAO,eAAe,GAAG,YAAY,GAAG;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,aAAa,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IAC1E;AAEA,UAAM,SAAS,KAAK,IAAI,OAAO;AAC/B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,OAAa;AAAA,MACjB,IAAI;AAAA,MACJ,MAAM,EAAE;AAAA,MACR,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAO,EAAE;AAAA,MACT,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,eAAe,EAAE;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,UAAU,CAAC;AAAA,MACvE,QAAQ;AAAA,IACV;AAKA,QAAI,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,KAAK,SAAS,QAAS,MAAK,kBAAkB;AAAA,aAC5F,qBAAqB,EAAG,MAAK,kBAAkB,CAAC,CAAC,EAAE;AAE5D,OAAG,MAAM,IAAI,QAAQ,IAAI;AACzB,QAAI,OAAO,EAAE,oBAAoB,UAAU;AACzC,SAAG,iBAAiB,EAAE,eAAe,IAAI;AACzC,WAAK,QAAQ,IAAI,EAAE,eAAe;AAClC,YAAM,OAAO,OAAO,KAAK,GAAG,gBAAgB;AAC5C,UAAI,KAAK,SAAS,sBAAsB;AACtC,eAAO,GAAG,iBAAiB,KAAK,CAAC,CAAC;AAClC,aAAK,QAAQ,IAAI,KAAK,CAAC,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,WAAO,EAAE,QAAQ,EAAE,SAAS,QAAQ,OAAO,UAAU,EAAE;AAAA,EACzD;AAAA,EAEQ,aAAa,GAAiD;AACpE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAE9D,QAAI,OAAO,EAAE,UAAU,SAAU,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,wBAAwB,EAAE;AAC9F,UAAM,WAAW,EAAE;AAOnB,UAAM,QAAkC;AAAA,MACtC,SAAkB,CAAC,eAAe,UAAU;AAAA,MAC5C,aAAkB,CAAC,eAAe,aAAa,UAAU;AAAA,MACzD,kBAAkB,CAAC,aAAa;AAAA,MAChC,QAAkB,CAAC,WAAW;AAAA,IAChC;AACA,QAAI,CAAC,MAAM,KAAK,KAAK,GAAG,SAAS,QAAQ,GAAG;AAC1C,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sBAAsB,KAAK,KAAK,OAAO,QAAQ,EAAE,EAAE;AAAA,IACxF;AAMA,QAAI,aAAa,eAAe,eAAe,IAAI,IAAI,GAAG;AACxD,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA4H,EAAE;AAAA,IAClI;AACA,QAAI,aAAa,eAAe,KAAK,QAAQ;AAC3C,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA4H,EAAE;AAAA,IAClI;AAIA,QAAI,KAAK,UAAU,sBAAsB,CAAC,KAAK,OAAQ,QAAQ,SAAS,EAAE,IAAsB,GAAG;AACjG,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAAoE,EAAE;AAAA,IAC1E;AACA,QAAI,aAAa,eAAe,0BAA0B,IAAI,IAAI,EAAE,SAAS,EAAE,IAAsB,GAAG;AACtG,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAA+E,EAAE;AAAA,IACrF;AACA,QAAI,aAAa,cAAc,KAAK,UAAU,CAAC,KAAK,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ,GAAG;AACrG,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAAgF,EAAE;AAAA,IACtF;AACA,QAAI,aAAa,cAAc,CAAC,KAAK,UAAU,0BAA0B,IAAI,IAAI,EAAE,SAAS,GAAG;AAC7F,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB;AAAA,MAAyG,EAAE;AAAA,IAC/G;AACA,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK;AAAA,MAChB,IAAI,KAAK;AAAA,MAAY,MAAM,EAAE;AAAA,MAC7B,OAAO;AAAA,MAAU,MAAM,EAAE;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,EAAE,OAAO,SAAS,EAAE;AAAA,EACvC;AAAA,EAEQ,eAAe,GAAiD;AACtE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAM9D,QAAI,KAAK,UAAU,aAAa,KAAK,UAAU,eAAe;AAC5D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kCAAkC,KAAK,KAAK,EAAE,EAAE;AAAA,IACrF;AACA,QAAI,EAAE,cAAc,QAAQ,OAAO,EAAE,eAAe,YAAY,OAAO,EAAE,eAAe,UAAU;AAChG,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,yCAAyC,EAAE;AAAA,IAChF;AAKA,UAAM,WAAW,eAAe,IAAI,IAAI;AACxC,QAAI,YAAY,EAAE,SAAS,KAAK,UAAU;AACxC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,yDAAyD,EAAE;AAAA,IACxG;AAQA,QAAI,YAAY,KAAK,QAAQ;AAC3B,YAAM,MAAM,KAAK,IAAI;AAGrB,YAAM,UAAU,UAAU,MAAM,EAAE,IAAI;AACtC,UAAI,OAAO;AACX,UAAI,CAAC,KAAK,QAAQ;AAQhB,cAAM,WAAW,CAAC,GAAG,WAAW,GAAG,OAAO,CAAC,EACxC,OAAO,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,QAAQ,SAAS,GAAG,KAAK,OAAO,SAAS,OAAO,EAC3E,IAAI,CAAC,CAAC,GAAG,MAAM,GAAG;AACrB,YAAI,SAAS,WAAW,GAAG;AACzB,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB;AAAA,UAAsH,EAAE;AAAA,QAC5H;AACA,aAAK,SAAS;AAAA,UAAE,cAAc;AAAA,UAAK,cAAc;AAAA,UAA8B,MAAM,GAAG,eAAe;AAAA,UACvF,WAAW,CAAC;AAAA,UAAG;AAAA,UAAS,kBAAkB,CAAC;AAAA,QAAE;AAAA,MAC/D,OAAO;AAYL,cAAM,eAAe,QAAQ,KAAK,OAAO,SAAS,OAAO;AACzD,cAAM,YAAY,KAAK,OAAO,aAAa,OAAO,CAAC,MAAM,CAAC,aAAa,SAAS,CAAC,KAC5E,EAAE,YAAY,UAAU,IAAI,CAAC,MAAM,UAAa,UAAU,IAAI,CAAC,EAAG,SAAS,QAAQ;AACxF,YAAI,UAAU,WAAW,GAAG;AAC1B,iBAAO,EAAE,OAAO;AAAA,YAAS,EAAE;AAAA,YACzB;AAAA,UAA4E,EAAE;AAAA,QAClF;AACA,aAAK,SAAS;AAAA,UAAE,GAAG,KAAK;AAAA,UAAQ,cAAc;AAAA,UAAK,cAAc;AAAA,UAAW,WAAW,CAAC;AAAA,UACxE,SAAS;AAAA,UAAc,kBAAkB,CAAC;AAAA,QAAE;AAC5D,eAAO;AAAA,MACT;AACA,WAAK,mBAAmB,EAAE;AAC1B,WAAK,QAAQ;AACb,WAAK,aAAa;AAClB,WAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,oBAAoB,KAAK,CAAC;AAC9F,aAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,IACrE;AACA,SAAK,SAAS,EAAE;AAChB,QAAI,EAAE,cAAc,KAAM,MAAK,aAAa,EAAE;AAC9C,SAAK,QAAQ;AACb,SAAK,aAAa,KAAK,IAAI;AAC3B,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,YAAY,MAAM,EAAE,MAAwB,OAAO,YAAY,CAAC;AAC7F,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,YAAY,GAAiD;AACnE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,QAAI,KAAK,QAAQ,uBAAuB;AACtC,YAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,UAAI,UAAW,QAAO;AAAA,IACxB;AAGA,UAAM,MAAM,YAAY,GAAG;AAAA,MACzB,CAAC,kBAAkB,SAAS;AAAA,MAAG,CAAC,gBAAgB,SAAS;AAAA,MACzD,CAAC,iBAAiB,QAAQ;AAAA,MAAG,CAAC,eAAe,QAAQ;AAAA,MAAG,CAAC,kBAAkB,QAAQ;AAAA,IACrF,CAAC;AACD,QAAI,IAAK,QAAO;AAChB,UAAM,QAAS,SAAS,EAAE,KAAK,IAAI,EAAE,QAAQ,CAAC;AAC9C,UAAM,SAAU,SAAS,EAAE,MAAM,IAAI,EAAE,SAAS,CAAC;AAGjD,QAAI,OAAO,WAAW,QAAQ,OAAO,YAAY,cAAc,OAAO,YAAY,WAAW;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gDAAgD,EAAE;AAAA,IACvF;AACA,UAAM,UAAU,MAAM,YAAY;AAClC,UAAM,QAAQ,MAAM,UAAU,GAAG,MAAM;AACvC,UAAM,MAAiB,CAAC;AACxB,eAAW,SAAS,GAAG,MAAM,MAAM,SAAS,KAAK,GAAG;AAGlD,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,OAAO,YAAY,cAAc,QAAS;AAC9C,UAAI,OAAO,YAAY,aAAa,CAAC,QAAS;AAC9C,YAAMD,QAAO,UAAU,KAAK,KAAM,CAAC;AACnC,YAAM,KAAMA,MAAK,UAAU,CAAC;AAC5B,UAAI,OAAO,UAAUA,MAAK,WAAW,OAAO,OAAQ;AACpD,UAAI,OAAO,QAAQ,GAAG,SAAS,OAAO,KAAM;AAC5C,UAAI,OAAO,SAAS;AAClB,YAAI,SAAS,GAAG;AAChB,YAAIA,MAAK,WAAW,kBAAkB;AACpC,gBAAM,SAAS,GAAG,SAAS,IAAI,GAAG,UAAoB;AACtD,mBAAS,SAAU,OAAgC,UAAU;AAAA,QAC/D;AACA,YAAI,WAAW,OAAO,QAAS;AAAA,MACjC;AACA,YAAM,OAAgC,EAAE,KAAK,MAAM,KAAK,SAAS,MAAM,QAAQ;AAC/E,UAAI,SAAS;AACX,aAAK,UAAU,MAAM;AACrB,aAAK,UAAU,MAAM;AAAA,MACvB,OAAO;AACL,aAAK,WAAW,MAAM;AAAA,MACxB;AACA,UAAI,MAAM,UAAW,MAAK,YAAY,MAAM;AAC5C,UAAI,KAAK,IAAI;AAAA,IACf;AAIA,WAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,UAAU,KAAK,IAAI,OAAO,GAAG,MAAM,MAAM,EAAE,EAAE;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,UAAU,CAAC;AACpE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAU9D,QAAI,uBAAuB,SAAS,KAAK,KAAK,GAAG;AAC/C,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,4CAA4C,KAAK,KAAK,EAAE,EAAE;AAAA,IACvG;AACA,UAAM,KAAK,EAAE;AACb,QAAI,MAAM,QAAQ,OAAO,OAAO,YACzB,EAAE,MAAM,QAAQ,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,IAAI;AACrE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,0CAA0C,EAAE;AAAA,IACjF;AACA,UAAM,YAAsB,MAAM,QAAQ,EAAE,IAAK,KAAkB,OAAO,OAAO,WAAW,CAAC,EAAE,IAAI,CAAC;AACpG,QAAI,CAAC,UAAU,OAAQ,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AACvF,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC;AAC/C,QAAI,IAAK,QAAO;AAChB,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,EAAE;AACvB,UAAM,OAAO,gBAAgB;AAC7B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2BAA2B,KAAK,UAAU,IAAI,CAAC,iEAAiE,EAAE;AAAA,IACvJ;AASA,UAAM,OAAO,KAAK,UAAU,qBAAqB,KAAK,SAAS;AAC/D,QAAI,MAAM;AAGR,UAAI,YAAY,KAAK,oBAAoB,IAAI,MAAM,YAAY,EAAE,YAAY,IAAI,GAAG;AAClF,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF;AAAA,QAEF,EAAE;AAAA,MACJ;AAIA,UAAI,gBAAgB,QAAQ,iBAAiB,KAAK,MAAM;AACtD,eAAO,EAAE,OAAO;AAAA,UACd,EAAE;AAAA,UACF,gEAAgE,KAAK,IAAI;AAAA,QAC3E,EAAE;AAAA,MACJ;AAAA,IACF;AAUA,UAAM,UAAU,OAAO,KAAK,UACxB,QAAQ,KAAK,SAAS,KAAK,OAAO,UAAU,CAAC,GAAG,UAAU,MAAM,cAAc,IAAI,CAAC,CAAC;AACxF,QAAI,eAAe,IAAI,IAAI,GAAG;AAM5B,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB;AAAA,QAA8H,EAAE;AAAA,MACpI;AACA,UAAI,QAAQ,SAAS,EAAE,IAAsB,GAAG;AAC9C,eAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,+DAA+D,EAAE;AAAA,MAC9G;AACA,YAAM,QAAQ,UAAU,KAAK,OAAO;AACpC,UAAI,UAAU,QAAW;AACvB,eAAO,EAAE,OAAO;AAAA,UAAS,EAAE;AAAA,UACzB,4DAA4D,KAAK;AAAA,QAAsB,EAAE;AAAA,MAC7F;AACA,iBAAW,KAAK,WAAW;AACzB,YAAI,QAAQ,SAAS,CAAC,GAAG;AACvB,iBAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,yDAAyD,CAAC,EAAE,EAAE;AAAA,QAC3G;AACA,cAAM,SAAS,UAAU,IAAI,CAAC;AAC9B,YAAI,UAAU,OAAO,SAAS,SAAS;AACrC,iBAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,yCAAyC,CAAC,wBAAwB,EAAE;AAAA,QACjH;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM;AAER,iBAAW,KAAK,WAAW;AACzB,YAAI,CAAC,KAAK,aAAa,SAAS,CAAC,EAAG,MAAK,aAAa,KAAK,CAAC;AAAA,MAC9D;AACA,UAAI,EAAE,YAAY,KAAM,MAAK,WAAW,EAAE;AAC1C,WAAK,aAAa;AAClB,aAAO,EAAE,QAAQ;AAAA,QACf,OAAO;AAAA,QACP,WAAW,KAAK;AAAA,QAChB,SAAS;AAAA,QACT,cAAc,CAAC,GAAG,KAAK,YAAY;AAAA,MACrC,EAAE;AAAA,IACJ;AAEA,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,SAAS;AAAA,MACZ,cAAc;AAAA,MACd,cAAc;AAAA,MACd;AAAA,MACA,UAAU,EAAE;AAAA,MACZ,WAAW,CAAC;AAAA,MACZ;AAAA,MACA,kBAAkB,CAAC;AAAA,IACrB;AACA,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,mBAAmB,CAAC;AACxF,SAAK,mBAAmB,EAAE;AAC1B,WAAO,EAAE,QAAQ,EAAE,OAAO,oBAAoB,WAAW,KAAK,GAAG,EAAE;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,oBAAoB,GAAiD;AAC3E,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,SAAS,CAAC;AACxD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,IAAI,MAAM,EAAE,IAAI;AACzD,QAAI,YAAa,QAAO;AACxB,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,iBAAiB,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,GAAG;AAC9D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,EAAE;AAAA,IAC3E;AACA,WAAO,iBAAiB,KAAK,EAAE,UAAU,EAAE,MAAwB,IAAI,KAAK,IAAI,EAAE,CAAC;AACnF,WAAO,EAAE,QAAQ,EAAE,cAAc,MAAM,cAAc,OAAO,aAAa,EAAE;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,oBAAoB,GAA4B,MAAwC;AAC9F,UAAM,WAAW,EAAE;AACnB,QAAI,aAAa,UAAa,aAAa,KAAM,QAAO;AACxD,QAAI,OAAO,aAAa,UAAU;AAChC,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,2CAA2C,EAAE;AAAA,IAClF;AAEA,QAAI,KAAK,qBAAqB,UAAa,KAAK,qBAAqB,MAAM;AACzE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,8CAA8C,EAAE;AAAA,IACrF;AACA,UAAM,SAAS,YAAY,KAAK,gBAAgB;AAChD,QAAI,aAAa,QAAQ;AACvB,aAAO,EAAE,OAAO;AAAA,QACd,EAAE;AAAA,QACF;AAAA,QACA,EAAE,UAAU,OAAO;AAAA,MACrB,EAAE;AAAA,IACJ;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,SAAS,GAA4B,MAAiD;AAC5F,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,SAAS,CAAC;AACxD,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,SAAS,GAAG,CAAC,oBAAoB,SAAS,CAAC,CAAC;AACjF,QAAI,IAAK,QAAO;AAChB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,IAAI,MAAM,EAAE,IAAI;AACzD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ;AAAA,MACA,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,IACV,CAAC;AACD,QAAI,SAAS,WAAW;AAGtB,UAAI,gBAAgB,KAAK,MAAO,GAAG;AACjC,aAAK,SAAS,KAAK;AACnB,aAAK,QAAQ;AAAA,MACf;AAAA,IACF,OAAO;AACL,WAAK,QAAQ,EAAE,mBAAmB,gBAAgB;AAAA,IACpD;AACA,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,KAAK,MAAM,CAAC;AAChF,WAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,EAAE;AAAA,EACzC;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,WAAW,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,SAAS,GAAG,CAAC,eAAe,SAAS,CAAC,CAAC;AAC5E,QAAI,IAAK,QAAO;AAChB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,IAAI,MAAM,EAAE,IAAI;AACzD,QAAI,YAAa,QAAO;AACxB,UAAM,cAAc,KAAK,oBAAoB,GAAG,IAAI;AACpD,QAAI,YAAa,QAAO;AAGxB,UAAM,OAAO,KAAK;AAClB,QAAI,SAAS,UAAa,SAAS,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,+BAA+B,EAAE;AAC7G,QAAI;AACJ,QAAI;AACF,gBAAU,eAAe,MAAM,EAAE,MAAe;AAAA,QAC9C,gBAAgB,KAAK,QAAQ,oBAAoB;AAAA,MACnD,CAAC;AAAA,IACH,SAAS,GAAG;AACV,YAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AACrD,aAAO,EAAE,OAAO,SAAS,EAAE,cAAc,GAAG,EAAE;AAAA,IAChD;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,KAAK,KAAK,IAAI,WAAW;AAC/B,UAAM,WAA6B;AAAA,MACjC;AAAA,MACA,SAAS,KAAK;AAAA,MACd,UAAU,EAAE;AAAA,MACZ,mBAAmB;AAAA,MACnB,MAAM,EAAE;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,EAAE;AAAA,MACb,MAAO,EAAE,QAAqB,CAAC;AAAA,MAC/B,aAAc,EAAE,eAA4B,CAAC;AAAA,MAC7C,IAAI;AAAA,MACJ,YAAY,EAAE;AAAA,MACd,aAAa,EAAE;AAAA,MACf,kBAAkB,EAAE;AAAA,IACtB;AACA,OAAG,UAAU,IAAI,IAAI,QAAQ;AAC7B,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,MAAM,SAAS;AAAA,MACf,sBAAsB;AAAA,IACxB,CAAC;AACD,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,aAAa,sBAAsB,IAAI,QAAQ,EAAE;AAAA,EAC7E;AAAA,EAEQ,iBAAiB,GAAiD;AACxE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,WAAW,QAAQ,CAAC;AAClE,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,QAAQ,CAAC,CAAC;AACnD,QAAI,IAAK,QAAO;AAChB,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,OAAO,GAAG,MAAM,IAAI,EAAE,OAAiB;AAC7C,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,cAAc,EAAE;AAC9D,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,EAAE,OAAO,SAAS,EAAE,gBAAgB,6BAA6B,KAAK,KAAK,EAAE,EAAE;AAAA,IACxF;AACA,UAAM,cAAc,KAAK,gBAAgB,IAAI,MAAM,EAAE,IAAI;AACzD,QAAI,YAAa,QAAO;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAQ,UAAU,KAAK;AAAA,MAC1B,UAAU,EAAE;AAAA,MACZ,MAAM;AAAA,MACN,IAAI;AAAA,MACJ,SAAS,EAAE;AAAA,MACX,kBAAmB,EAAE,YAAuB;AAAA,IAC9C,CAAC;AACD,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,EAAE,OAAiB,CAAC;AAC3G,WAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE;AAAA,EAC1C;AAAA,EAEQ,gBAAgB,GAAiD;AACvE,UAAM,OAAO,QAAQ,GAAG,CAAC,aAAa,QAAQ,oBAAoB,UAAU,CAAC;AAC7E,QAAI,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,kBAAkB,IAAI,EAAE,EAAE;AACvE,UAAM,KAAK,KAAK,WAAW,IAAI,EAAE,SAAmB;AACpD,QAAI,CAAC,GAAI,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,mBAAmB,EAAE;AACjE,UAAM,YAAY,KAAK,cAAc,IAAI,EAAE,IAAI;AAC/C,QAAI,UAAW,QAAO;AACtB,UAAM,SAAS,EAAE;AACjB,UAAM,OAAO,OAAO,WAAW,WAAW,GAAG,MAAM,IAAI,MAAM,IAAI;AACjE,QAAI,CAAC,KAAM,QAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,uBAAuB,EAAE;AACvE,QAAI,KAAK,UAAU,eAAe,KAAK,UAAU,eAAe,KAAK,UAAU,cAAc;AAC3F,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,oCAAoC,KAAK,KAAK,EAAE,EAAE;AAAA,IACvF;AACA,QAAI,EAAE,aAAa,QAAQ,OAAO,EAAE,aAAa,YAAY,MAAM,QAAQ,EAAE,QAAQ,GAAG;AACtF,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,4BAA4B,EAAE;AAAA,IACnE;AACA,UAAM,KAAK,EAAE;AACb,UAAM,MAAM,YAAY,GAAG,CAAC,CAAC,iBAAiB,QAAQ,CAAC,CAAC;AACxD,QAAI,IAAK,QAAO;AAChB,UAAM,WAAW,GAAG;AACpB,QAAI,OAAO,aAAa,YAAY,CAAC,GAAG,QAAQ,IAAI,QAAQ,GAAG;AAC7D,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,sCAAsC,EAAE;AAAA,IAC7E;AACA,UAAM,QAAQ,GAAG;AACjB,QAAI,UAAU,UAAa,UAAU,QAAQ,OAAO,UAAU,UAAU;AACtE,aAAO,EAAE,OAAO,SAAS,EAAE,QAAQ,gCAAgC,EAAE;AAAA,IACvE;AAMA,QAAI,GAAG,QAAQ,IAAI,QAAQ,EAAG,QAAQ;AACpC,aAAO,EAAE,OAAO,SAAS,EAAE,0BAA0B,YAAY,QAAQ,YAAY,EAAE;AAAA,IACzF;AACA,UAAM,OAAS,SAAqC,KAAK;AACzD,QAAI,CAAC,OAAO,MAAM,GAAG,YAAY,GAAG;AAClC,aAAO,EAAE,OAAO;AAAA,QAAS,EAAE;AAAA,QACzB,kBAAkB,IAAI,oBAAoB,GAAG,YAAY;AAAA,MAAE,EAAE;AAAA,IACjE;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,QAAQ,KAAK,IAAI,OAAO;AAC9B,UAAM,UAAgB;AAAA,MACpB,IAAI;AAAA,MACJ,MAAO,GAAG,QAAmB,KAAK;AAAA,MAClC,OAAO;AAAA,MACP;AAAA,MACA,WAAW,EAAE;AAAA,MACb,OAAQ,GAAG,SAAqC,CAAC;AAAA,MACjD,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY,KAAK;AAAA,MACjB,SAAS,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,WAAW,MAAM,kBAAkB,KAAK,EAAE,GAAG,CAAC;AAAA,MAC1G,QAAQ;AAAA,IACV;AAKA,QAAI,KAAK,mBAAmB,KAAK,WAAW,UACpC,GAAG,SAAS,KAAK,QAAM,GAAG,WAAW,QAAQ,CAAC,KAAK,QAAQ,SAAS,SAAU;AACpF,cAAQ,kBAAkB;AAAA,IAC5B;AAGA,YAAQ,gBAAgB,iBAAiB,MAAM,EAAE,IAAI;AACrD,OAAG,MAAM,IAAI,OAAO,OAAO;AAC3B,SAAK,QAAQ;AACb,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,QAAQ,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,MAAwB,OAAO,aAAa,MAAM,MAAM,KAAK,GAAG,CAAC;AACtG,WAAO,EAAE,QAAQ,EAAE,aAAa,OAAO,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,aAAa,GAAoC;AACxD,QAAM,MAA+B;AAAA,IACnC,KAAK,EAAE;AAAA,IAAK,MAAM,EAAE;AAAA,IAAM,MAAM,EAAE;AAAA,IAAM,QAAQ,EAAE;AAAA,EACpD;AAGA,MAAI,EAAE,aAAc,KAAI,eAAe,EAAE;AACzC,MAAI,EAAE,gBAAgB,OAAO,KAAK,EAAE,YAAY,EAAE,OAAQ,KAAI,eAAe,EAAE;AAC/E,MAAI,EAAE,QAAQ,OAAQ,KAAI,SAAS,EAAE;AACrC,MAAI,EAAE,KAAK,QAAQ;AACjB,QAAI,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,OAAK,CAAC,EAAE,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,OAAK,EAAE,GAAG,EAAE;AACvF,QAAI,cAAc,EAAE;AAAA,EACtB;AACA,MAAI,EAAE,OAAQ,KAAI,SAAS;AAC3B,MAAI,EAAE,SAAU,KAAI,WAAW,EAAE;AACjC,MAAI,EAAE,UAAW,KAAI,YAAY,EAAE;AACnC,SAAO;AACT;;;ACzoGO,SAAS,kBAAkB,cAC4B;AAE5D,QAAM,gBAAiC,CAAC,MAAM,eAAe;AAC3D,UAAM,WAAW;AACjB,WAAO;AAAA,MACL,UAAU,SAAS,CAAC;AAAA,MACpB,WAAW;AAAA,QACT,WAAW;AAAA,QACX,YAAY,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC;AAAA,QAChD,SAAS;AAAA,QACT,yBAAyB,SAAS,MAAM,CAAC,EAAE,IAAI,QAAM;AAAA,UACnD,WAAW;AAAA,UAAG,iBAAiB;AAAA,QACjC,EAAE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAEA,QAAM,oBAAyC,CAAC,OAAO,UAAU;AAC/D,UAAM,OAAO,aAAa,KAAK;AAC/B,UAAM,IAAI,cAAc,KAAK;AAC7B,QAAI,KAAK,EAAG,QAAO;AAAA,MAAE,OAAO;AAAA,MAC1B,WAAW,EAAE,WAAW,WAAW,SAAS,oCAAoC;AAAA,IAAC;AACnF,QAAI,MAAM,KAAK,OAAO,IAAK,QAAO;AAAA,MAAE,OAAO;AAAA,MACzC,WAAW,EAAE,WAAW,WAAW,SAAS,mDAAmD;AAAA,IAAC;AAClG,QAAI,MAAM,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAC3C,WAAW,EAAE,WAAW,WAAW,SAAS,oDAAoD;AAAA,IAAC;AACnG,QAAI,KAAK,KAAK,QAAQ,KAAM,QAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAC9E,WAAW,EAAE,WAAW,WAAW,SAAS,gDAAgD;AAAA,IAAC;AAC/F,WAAO;AAAA,MAAE,OAAO;AAAA,MAAc,sBAAsB;AAAA,MAClD,WAAW,EAAE,WAAW,WAAW,SAAS,qCAAqC;AAAA,IAAC;AAAA,EACtF;AAEA,QAAM,mBAAuC,CAAC,OAAO,UAAU;AAC7D,UAAM,OAAO,aAAa,KAAK;AAC/B,UAAM,IAAI,cAAc,KAAK;AAC7B,UAAM,WAAY,KAAK,KAAO,KAAK,KAAK,OAAO;AAC/C,WAAO;AAAA,MACL;AAAA,MACA,IAAI,WAAW,eAAe;AAAA,MAC9B,gBAAgB;AAAA,QACd,SAAS;AAAA,QACT,SAAS;AAAA,QACT,YAAY,CAAC,eAAe,YAAY;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,eAAe,mBAAmB,iBAAiB;AAC9D;;;ACTO,SAAS,gBACd,OACA,WACA,SACY;AACZ,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,OAAQ,OAAM,IAAI,MAAM,oBAAoB;AACzD,MAAI,CAAC,QAAQ,KAAM,OAAM,IAAI,MAAM,kBAAkB;AACrD,MAAI,QAAQ,gBAAgB;AAC1B,UAAM,YAAY,MAAM,SAAS;AAAA,MAC/B,SAAS;AAAA,MACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,MAC7B,QAAS;AAAA,MACT,QAAS,EAAE,WAAW,MAAM,QAAQ,OAAO;AAAA,IAC7C,CAAC;AACD,QAAI,UAAU,MAAO,OAAM,IAAI,MAAM,8BAA8B,KAAK,UAAU,UAAU,KAAK,CAAC,EAAE;AACpG,UAAM,UAAW,UAAU,OAAwD;AACnF,QAAI,CAAC,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,QAAQ,QAAQ,MAAM,GAAG;AACxE,YAAM,IAAI,MAAM,uGAAuG;AAAA,IACzH;AAAA,EACF;AAEA,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,QAAM,aAAa,YAAY,QAAQ,MAAM;AAC7C,QAAM,OAAO,QAAQ,YAAY,YAAY,QAAQ,IAAI;AAEzD,QAAM,YAAY,CAAC;AAAA,IACjB,MAAc;AAAA,IACd,QAAc,QAAQ,UAAU;AAAA,IAChC,MAAc,QAAQ;AAAA,IACtB,YAAc;AAAA,IACd,aAAc;AAAA,EAChB,CAAC;AAED,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,QAAQ;AAAA,EACpB;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AACjF,MAAI,QAAQ,eAAgB,cAAa,kBAAkB;AAE3D,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS,EAAE,WAAW,MAAM,QAAQ,QAAQ,SAAS,QAAQ,OAAO,cAAc;AAAA,EACpF,CAAC;AAED,QAAM,SAAkC,EAAE,QAAQ,QAAQ,QAAQ,UAAU;AAC5E,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB,SAAU;AAAA,IACV;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IACT,IAAS,QAAQ,QAAQ,IAAI;AAAA,IAC7B,QAAS;AAAA,IACT,QAAS;AAAA,EACX,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,4BAA4B,MAAM,KAAK,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAEnH,SAAO,EAAE,SAAS,QAAQ,YAAY,WAAW,aAAa,WAAW;AAC3E;AAmCO,SAAS,uBACd,OACA,WACA,SACe;AACf,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uBAAuB;AACvD,MAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,MAAI,CAAC,QAAQ,YAAa,OAAM,IAAI,MAAM,yBAAyB;AAEnE,QAAM,WAAW,YAAY,QAAQ,IAAI;AACzC,QAAM,eAAe,YAAY,QAAQ,QAAQ;AACjD,QAAM,OAAO,QAAQ,YAAY;AAEjC,QAAM,WAAW;AAAA,IACf,MAAgB;AAAA,IAChB,cAAgB,QAAQ;AAAA,IACxB,WAAgB;AAAA,IAChB,eAAgB;AAAA,EAClB;AAEA,QAAM,eAAwC;AAAA,IAC5C;AAAA,IACA,MAAU,QAAQ;AAAA,IAClB;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,OAAU,EAAE,cAAc,QAAQ,aAAa,MAAM,QAAQ,KAAK;AAAA,EACpE;AACA,MAAI,QAAQ,aAAc,cAAa,gBAAgB,EAAE,GAAG,QAAQ,aAAa;AAEjF,QAAM,aAAa,MAAM,SAAS;AAAA,IAChC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAe,QAAQ;AAAA,EACjC,CAAC;AACD,MAAI,WAAW,MAAO,OAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,WAAW,KAAK,CAAC,EAAE;AAC/F,QAAM,SAAU,WAAW,OAA+B;AAE1D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IACR,QAAQ;AAAA,MAAE;AAAA,MAAW,MAAM,QAAQ;AAAA,MACzB,SAAS;AAAA,MAAQ,OAAO;AAAA,IAAc;AAAA,EAClD,CAAC;AAED,QAAM,SAAkC,EAAE,UAAU,QAAQ,UAAU,WAAW,CAAC,QAAQ,EAAE;AAC5F,MAAI,QAAQ,QAAS,QAAO,UAAU,QAAQ;AAC9C,QAAM,iBAA0C;AAAA,IAC9C;AAAA,IAAW,MAAM,QAAQ;AAAA,IAAW,SAAS;AAAA,IAC7C;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,OAAW,gBAAe,aAAa,QAAQ;AAE1E,QAAM,eAAe,MAAM,SAAS;AAAA,IAClC,SAAS;AAAA,IAAO,IAAI;AAAA,IACpB,QAAQ;AAAA,IAAiB,QAAQ;AAAA,EACnC,CAAC;AACD,MAAI,aAAa,MAAO,OAAM,IAAI,MAAM,yBAAyB,KAAK,UAAU,aAAa,KAAK,CAAC,EAAE;AAErG,SAAO,EAAE,SAAS,QAAQ,WAAW,UAAU,eAAe,aAAa;AAC7E;","names":["createHash","createHash","call","RESERVED_IDS","RESERVED_IDS","call","wsId"]}