@cat-factory/node-server 0.112.0 → 0.113.0

package/dist/container-core-deps.d.ts

@@ -0,0 +1,82 @@
+import { type GitHubInstallationRepository } from '@cat-factory/kernel';
+import { type CoreDependencies } from '@cat-factory/orchestration';
+import { type AppConfig, resolveUrlSafetyPolicy } from '@cat-factory/server';
+import type { DrizzleDb } from './db/client.js';
+import { createNodeGateways } from './gateways.js';
+import { createDrizzleRepositories } from './repositories/drizzle.js';
+import type { NodeAppRegistriesResult } from './container-foundation.js';
+import type { NodeContainerOptions, NodeModelDepsResult, NodeTransportDeployResult, NodeRunServicesResult, NodeGitHubDepsResult, NodeBootstrapperResult, NodeRealtimeDepsResult, NodeAccountDepsResult } from './container.js';
+/**
+ * The engine {@link CoreDependencies} assembly for the Node facade, carved out of the
+ * `container.ts` composition root so neither the bundle contract nor the (large) dependency
+ * literal keeps that god-file — or its own function — over budget
+ * (docs/initiatives/lint-complexity-size-ratchet.md). Behaviour-neutral: the literal is split
+ * along a persistence/services seam into two builders whose spreads are concatenated in the
+ * SAME order, so later keys still override earlier ones exactly as when it was one literal.
+ */
+/**
+ * The intermediate values {@link buildNodeContainer} builds before it assembles the engine
+ * {@link CoreDependencies}: the resolved config/options, the shared Drizzle repo set + the
+ * mothership-aware `sourced` picker, and every build*Deps / select*Deps fragment.
+ * Bundled so {@link assembleNodeCoreDependencies} can own the large `dependencies` object
+ * literal (a size-only split — behaviour is identical), keeping the composition root within the
+ * function-size budget.
+ */
+export interface NodeCoreDepsBundle {
+    config: AppConfig;
+    options: NodeContainerOptions;
+    env: NodeJS.ProcessEnv;
+    db: DrizzleDb;
+    repos: ReturnType<typeof createDrizzleRepositories>;
+    sourced: <T>(name: string, build: (d: DrizzleDb) => T) => T;
+    idGenerator: CoreDependencies['idGenerator'];
+    clock: CoreDependencies['clock'];
+    gateways: ReturnType<typeof createNodeGateways>;
+    runnerUrlPolicy: ReturnType<typeof resolveUrlSafetyPolicy>;
+    githubInstallationRepository: GitHubInstallationRepository;
+    environmentBackendRegistry: NodeAppRegistriesResult['environmentBackendRegistry'];
+    runnerBackendRegistry: NodeAppRegistriesResult['runnerBackendRegistry'];
+    customManifestTypeRegistry: NodeAppRegistriesResult['customManifestTypeRegistry'];
+    agentKindRegistry: NodeAppRegistriesResult['agentKindRegistry'];
+    gateRegistry: NodeAppRegistriesResult['gateRegistry'];
+    stepResolverRegistry: NodeAppRegistriesResult['stepResolverRegistry'];
+    initiativePresetRegistry: NodeAppRegistriesResult['initiativePresetRegistry'];
+    providerRegistry: NodeAppRegistriesResult['providerRegistry'];
+    apiKeys: NodeModelDepsResult['apiKeys'];
+    subscriptions: NodeModelDepsResult['subscriptions'];
+    personalSubscriptions: NodeModelDepsResult['personalSubscriptions'];
+    localModelEndpoints: NodeModelDepsResult['localModelEndpoints'];
+    openRouterCatalog: NodeModelDepsResult['openRouterCatalog'];
+    modelProviderResolver: NodeModelDepsResult['modelProviderResolver'];
+    cloudflareModelsEnabled: NodeModelDepsResult['cloudflareModelsEnabled'];
+    deployDeps: NodeTransportDeployResult['deployDeps'];
+    runnerPoolConnectionRepository: CoreDependencies['runnerPoolConnectionRepository'];
+    agentContextObservability: NodeRunServicesResult['agentContextObservability'];
+    searchQueryObservability: NodeRunServicesResult['searchQueryObservability'];
+    resolveTestSecretRefs: NodeRunServicesResult['resolveTestSecretRefs'];
+    githubClient: NodeGitHubDepsResult['githubClient'];
+    tasks: NodeGitHubDepsResult['tasks'];
+    fileGitHubIssue: NodeGitHubDepsResult['fileGitHubIssue'];
+    issueWritebackProvider: NodeGitHubDepsResult['issueWritebackProvider'];
+    githubGateDeps: NodeGitHubDepsResult['githubGateDeps'];
+    githubModuleDeps: NodeGitHubDepsResult['githubModuleDeps'];
+    bootstrapJobRepository: NodeBootstrapperResult['bootstrapJobRepository'];
+    repoBootstrapper: NodeBootstrapperResult['repoBootstrapper'];
+    slackDeps: NodeRealtimeDepsResult['slackDeps'];
+    executionEventPublisher: NodeRealtimeDepsResult['executionEventPublisher'];
+    agentExecutor: NodeRealtimeDepsResult['agentExecutor'];
+    notificationChannel: NodeRealtimeDepsResult['notificationChannel'];
+    releaseHealthDeps: NodeAccountDepsResult['releaseHealthDeps'];
+    packageRegistryDeps: NodeAccountDepsResult['packageRegistryDeps'];
+    incidentEnrichmentDeps: NodeAccountDepsResult['incidentEnrichmentDeps'];
+    accountSettings: NodeAccountDepsResult['accountSettings'];
+    resolveBinaryArtifactStore: NodeAccountDepsResult['resolveBinaryArtifactStore'];
+}
+/**
+ * Assemble the engine {@link CoreDependencies} from the {@link NodeCoreDepsBundle} the composition
+ * root built. The object is split across two builders purely for the function-size ratchet — they
+ * are spread in declaration order, so the resulting object is identical to the former single
+ * literal (later spreads still override earlier ones).
+ */
+export declare function assembleNodeCoreDependencies(bundle: NodeCoreDepsBundle): CoreDependencies;
+//# sourceMappingURL=container-core-deps.d.ts.map

package/dist/container-core-deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-core-deps.d.ts","sourceRoot":"","sources":["../src/container-core-deps.ts"],"names":[],"mappings":"AAiBA,OAAO,EAIL,KAAK,4BAA4B,EAGlC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EACL,KAAK,SAAS,EAKd,sBAAsB,EAEvB,MAAM,qBAAqB,CAAA;AAI5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAM/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAGlD,OAAO,EAAE,yBAAyB,EAA4B,MAAM,2BAA2B,CAAA;AAuB/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACxE,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,gBAAgB,CAAA;AAEvB;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,SAAS,CAAA;IACjB,OAAO,EAAE,oBAAoB,CAAA;IAC7B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,EAAE,EAAE,SAAS,CAAA;IACb,KAAK,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAA;IACnD,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3D,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAA;IAC5C,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAChC,QAAQ,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAA;IAC/C,eAAe,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAA;IAC1D,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,0BAA0B,EAAE,uBAAuB,CAAC,4BAA4B,CAAC,CAAA;IACjF,qBAAqB,EAAE,uBAAuB,CAAC,uBAAuB,CAAC,CAAA;IACvE,0BAA0B,EAAE,uBAAuB,CAAC,4BAA4B,CAAC,CAAA;IACjF,iBAAiB,EAAE,uBAAuB,CAAC,mBAAmB,CAAC,CAAA;IAC/D,YAAY,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAA;IACrD,oBAAoB,EAAE,uBAAuB,CAAC,sBAAsB,CAAC,CAAA;IACrE,wBAAwB,EAAE,uBAAuB,CAAC,0BAA0B,CAAC,CAAA;IAC7E,gBAAgB,EAAE,uBAAuB,CAAC,kBAAkB,CAAC,CAAA;IAC7D,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAA;IACvC,aAAa,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAA;IACnD,qBAAqB,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IACnE,mBAAmB,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;IAC/D,iBAAiB,EAAE,mBAAmB,CAAC,mBAAmB,CAAC,CAAA;IAC3D,qBAAqB,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IACnE,uBAAuB,EAAE,mBAAmB,CAAC,yBAAyB,CAAC,CAAA;IACvE,UAAU,EAAE,yBAAyB,CAAC,YAAY,CAAC,CAAA;IACnD,8BAA8B,EAAE,gBAAgB,CAAC,gCAAgC,CAAC,CAAA;IAClF,yBAAyB,EAAE,qBAAqB,CAAC,2BAA2B,CAAC,CAAA;IAC7E,wBAAwB,EAAE,qBAAqB,CAAC,0BAA0B,CAAC,CAAA;IAC3E,qBAAqB,EAAE,qBAAqB,CAAC,uBAAuB,CAAC,CAAA;IACrE,YAAY,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAA;IAClD,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAA;IACpC,eAAe,EAAE,oBAAoB,CAAC,iBAAiB,CAAC,CAAA;IACxD,sBAAsB,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,CAAA;IACtE,cAAc,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IACtD,gBAAgB,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAA;IAC1D,sBAAsB,EAAE,sBAAsB,CAAC,wBAAwB,CAAC,CAAA;IACxE,gBAAgB,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAC5D,SAAS,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAA;IAC9C,uBAAuB,EAAE,sBAAsB,CAAC,yBAAyB,CAAC,CAAA;IAC1E,aAAa,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAA;IACtD,mBAAmB,EAAE,sBAAsB,CAAC,qBAAqB,CAAC,CAAA;IAClE,iBAAiB,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAA;IAC7D,mBAAmB,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAA;IACjE,sBAAsB,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,CAAA;IACvE,eAAe,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;IACzD,0BAA0B,EAAE,qBAAqB,CAAC,4BAA4B,CAAC,CAAA;CAChF;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,kBAAkB,GAAG,gBAAgB,CAEzF"}

package/dist/container-core-deps.js

@@ -0,0 +1,470 @@
+// Opt-in AWS EKS backends (runner + environment), registered by reference below (the Worker
+// facade registers the same pair, keeping the runtimes symmetric with the native `kubernetes`
+// backend these extend). They are pass-throughs until a workspace actually connects an `eks`
+// backend, and carry NO runtime AWS SDK dependency (the token is minted with WebCrypto), so this
+// adds no cost to a deployment that never uses EKS.
+import { ConfluenceProvider, FigmaProvider, ZeplinProvider, GitHubDocsProvider, LinearDocumentProvider, HttpRunnerPoolProvider, NotionProvider, EMAIL_CIPHER_INFO, createEmailSender, TicketTrackerService, } from '@cat-factory/integrations';
+import { DEFAULT_MODEL_PRESET_ID, } from '@cat-factory/kernel';
+import {} from '@cat-factory/orchestration';
+import { runWithInitiator, WebCryptoPasswordHasher, WebCryptoSecretCipher, logger, resolveUrlSafetyPolicy, resolveWorkspaceCapabilities, } from '@cat-factory/server';
+import { executionRuntime } from './execution/config.js';
+import { PgBossBootstrapRunner } from './execution/bootstrapRunner.js';
+import { PgBossEnvConfigRepairRunner } from './execution/envConfigRepairRunner.js';
+import { PgBossEnvironmentTestRunner } from './execution/envTestRunner.js';
+import { PgBossWorkRunner } from './execution/pgBossRunner.js';
+import { createNodeGateways } from './gateways.js';
+import { baseUrlForNode } from './modelProvider.js';
+import { DrizzleSubscriptionActivationRepository } from './repositories/personalSubscription.js';
+import { createDrizzleRepositories, createDrizzleSandboxDeps } from './repositories/drizzle.js';
+import { DrizzleReferenceArchitectureRepository } from './repositories/bootstrap.js';
+import { DrizzleEnvConfigRepairJobRepository } from './repositories/envConfigRepair.js';
+import { DrizzleEnvironmentTestRunRepository } from './repositories/environmentTest.js';
+import { DrizzleDocumentConnectionRepository, DrizzleDocumentRepository, } from './repositories/documents.js';
+import { DrizzleEnvironmentConnectionRepository, DrizzleEnvironmentRegistryRepository, } from './repositories/environments.js';
+import { DrizzleCustomManifestTypeRepository } from './repositories/customManifestType.js';
+import { DrizzleNotificationRepository } from './repositories/notifications.js';
+import { selectNodeFragmentLibraryDeps, selectNodeSkillLibraryDeps, } from './container-content-library-deps.js';
+// The container-agent-executor wiring (transport resolver, provisioning-log wrapper, container
+// executor + bootstrapper + env-config repairer, GitHub-issue filer, trace-sink builder), lifted
+// into a sibling module so this composition root stays within the file-size budget.
+import { RUNNERS_CIPHER_INFO, buildTraceSink } from './container-executor-deps.js';
+/**
+ * Assemble the engine {@link CoreDependencies} from the {@link NodeCoreDepsBundle} the composition
+ * root built. The object is split across two builders purely for the function-size ratchet — they
+ * are spread in declaration order, so the resulting object is identical to the former single
+ * literal (later spreads still override earlier ones).
+ */
+export function assembleNodeCoreDependencies(bundle) {
+    return { ...buildNodeStoreDeps(bundle), ...buildNodeServiceDeps(bundle) };
+}
+/**
+ * The first half of the dependency literal: the app-owned registries, every persisted
+ * repository the engine reads, and the module fragments that carry their own stores
+ * (release-health / incident-enrichment / package-registry / tasks).
+ */
+function buildNodeStoreDeps(bundle) {
+    const { config, options, db, repos, sourced, environmentBackendRegistry, runnerBackendRegistry, customManifestTypeRegistry, agentKindRegistry, gateRegistry, stepResolverRegistry, initiativePresetRegistry, providerRegistry, modelProviderResolver, agentContextObservability, searchQueryObservability, resolveTestSecretRefs, tasks, fileGitHubIssue, releaseHealthDeps, packageRegistryDeps, incidentEnrichmentDeps, accountSettings, resolveBinaryArtifactStore, } = bundle;
+    return {
+        ...releaseHealthDeps,
+        ...incidentEnrichmentDeps,
+        ...packageRegistryDeps,
+        // Fold the service frame's SENSITIVE test-credential refs (key + description, never values)
+        // into the tester prompt. Present when ENCRYPTION_KEY is set; absent ⇒ no advertised secrets.
+        ...(resolveTestSecretRefs ? { resolveTestSecretRefs } : {}),
+        // App-owned backend registries (kind → provider) the connection services resolve through.
+        environmentBackendRegistry,
+        runnerBackendRegistry,
+        // The app-owned agent-kind registry (built-ins + any deployment-registered kinds); the
+        // engine reads it (traits / inline-surface / pre-post-op hooks) and re-exposes it on Core.
+        agentKindRegistry,
+        // The app-owned gate + step-resolver registries; the engine's gate machine + completion hub
+        // read them, and the gate registry is re-exposed on Core for the boot-time validation.
+        gateRegistry,
+        stepResolverRegistry,
+        // The app-owned provider registry the gate providers were wired onto above; the engine's gate
+        // machine reads the SAME instance through its GateContext.
+        providerRegistry,
+        // The app-owned pipeline registry (deployment-registered extra pipelines); createCore threads
+        // it into the workspace + pipeline services and re-exposes it on Core for boot-time validation.
+        pipelineRegistry: options.pipelineRegistry,
+        // The app-owned custom task-type registry (deployment-registered namespaced task types);
+        // createCore threads it into the board service (default-pipeline resolution) and re-exposes it
+        // on Core for the snapshot projection (`customTaskTypes`) + boot-time validation.
+        taskTypeRegistry: options.taskTypeRegistry,
+        // The app-owned initiative-preset registry; the initiative services read it and it is
+        // re-exposed on Core for the snapshot descriptors + preset probe.
+        initiativePresetRegistry,
+        // The code-defined custom provision-type catalog, merged with the workspace rows by
+        // `listCustomTypes` so a programmatically-registered type surfaces in the infra editor + the
+        // per-service provisioning picker.
+        customManifestTypeRegistry,
+        ...(accountSettings ? { accountSettings } : {}),
+        // Resolves the per-account binary-artifact store (screenshots) for the visual-confirmation
+        // gate; resolving to null (no storage configured) ⇒ the gate passes through.
+        resolveBinaryArtifactStore,
+        workspaceRepository: repos.workspaceRepository,
+        workspaceMemberRepository: repos.workspaceMemberRepository,
+        accountRepository: repos.accountRepository,
+        membershipRepository: repos.membershipRepository,
+        userRepository: repos.userRepository,
+        passwordHasher: new WebCryptoPasswordHasher(),
+        blockRepository: repos.blockRepository,
+        pipelineRepository: repos.pipelineRepository,
+        executionRepository: repos.executionRepository,
+        // Clear a finished run's personal-credential activation promptly (TTL sweep is the backstop).
+        // In mothership mode its home is the LOCAL `node:sqlite` credential bucket (the activation
+        // re-seals the token for the run, and the LOCAL container executor decrypts it), injected via
+        // `options.subscriptionActivationRepository` — the SAME instance the personal-subscription
+        // service above mints into, so mint + clear agree. Absent (plain Node / siloed-Postgres local)
+        // → the Drizzle repo over `db`. This is NEVER routed through `sourced` (the remote registry):
+        // every no-db (mothership) caller injects the override — `buildLocalContainer` in production
+        // and `makeMothershipConformanceApp` in tests — so `db` here is always a real Postgres handle,
+        // and routing an activation clear to the mothership (where `deleteByExecution` isn't
+        // allow-listed) is a path no caller takes.
+        subscriptionActivationRepository: options.subscriptionActivationRepository ?? new DrizzleSubscriptionActivationRepository(db),
+        // In-org shared services. When a realtime hub is wired (start()), the engine's
+        // event publisher (composed above) is a `FanOutEventPublisher` over these two repos,
+        // so a shared service's live events reach every board that mounts it — parity with
+        // the Cloudflare facade. Without a hub (createServer/tests) the engine uses its
+        // NoopEventPublisher and nothing is pushed.
+        serviceRepository: repos.serviceRepository,
+        workspaceMountRepository: repos.workspaceMountRepository,
+        tokenUsageRepository: repos.tokenUsageRepository,
+        llmCallMetricRepository: repos.llmCallMetricRepository,
+        // Deployment-level rollups over `agent_runs` for the operator dashboard.
+        platformMetricsRepository: repos.platformMetricsRepository,
+        // Unified provisioning event log (its own Postgres schema). Threads the recorder
+        // into the env services and exposes the read service for the logs controller.
+        provisioningLogRepository: repos.provisioningLogRepository,
+        recordLlmPrompts: config.observability.recordPrompts,
+        // Re-exposed on the core for the agent-context read endpoint; the same instance
+        // is injected into the container executor above for the write path.
+        agentContextObservability,
+        // Re-exposed on the core for the search-query read endpoint AND the search proxy's
+        // write path (it reads it off the request container).
+        searchQueryObservability,
+        // Opt-in external trace sink(s) — Langfuse and/or OpenTelemetry — fanning every
+        // recorded LLM call out as a generation. Built only when configured; otherwise
+        // undefined and there is no external emission.
+        llmTraceSink: buildTraceSink(config),
+        modelPresetRepository: repos.modelPresetRepository,
+        // A fresh workspace's model-preset library is seeded with this built-in as the default
+        // (Node deploy → Kimi K2.7, the Cloudflare-runnable baseline; the local facade injects
+        // Claude). Applied only at first seed, so a user's later manual default choice wins.
+        defaultModelPresetId: options.defaultModelPresetId ?? DEFAULT_MODEL_PRESET_ID,
+        serviceFragmentDefaultsRepository: repos.serviceFragmentDefaultsRepository,
+        // Requirements-review feature (stateless reviewer + the requirements-rework
+        // step). Wired identically to the Cloudflare facade's `selectRequirementsDeps`
+        // so both runtimes serve the review/rework API AND substitute a block's reworked
+        // requirements into the agent context (the cross-runtime conformance suite asserts
+        // the substitution against both stores). The reviewer's model resolves exactly
+        // like a pipeline step: block-pin > workspace per-kind default > routing default
+        // (which falls back to Cloudflare Workers AI unless a direct key is set).
+        requirementReviewRepository: repos.requirementReviewRepository,
+        // Interactive document-interview sessions (WS5). Wired unconditionally; the interviewer
+        // reuses the requirements reviewer's model config resolved just below.
+        docInterviewRepository: repos.docInterviewRepository,
+        // Kaizen agent (post-run grading). Wired unconditionally, mirroring the Cloudflare
+        // facade, so the engine schedules gradings at run completion and the background sweep
+        // runs them. The grader resolves its model for the `kaizen` kind exactly like a step.
+        kaizenGradingRepository: repos.kaizenGradingRepository,
+        kaizenVerifiedComboRepository: repos.kaizenVerifiedComboRepository,
+        clarityReviewRepository: repos.clarityReviewRepository,
+        brainstormSessionRepository: repos.brainstormSessionRepository,
+        // Initiatives (the long-running multi-task work container). Wired unconditionally,
+        // mirroring the Worker's `selectMergeLifecycleDeps`, so the create/read API + the
+        // planning pipeline's ingest/committer steps work identically on both runtimes.
+        initiativeRepository: repos.initiativeRepository,
+        // Merge threshold presets: the per-workspace auto-merge ceiling library a task's
+        // merge gate resolves (block-pinned preset > workspace default). Wired
+        // unconditionally, exactly like the Worker's `selectMergeLifecycleDeps`, so the
+        // preset CRUD API + the merger step's threshold resolution work identically.
+        riskPolicyRepository: repos.riskPolicyRepository,
+        // Shared stacks (long-lived compose infra a consumer environment attaches to). Wired
+        // unconditionally like the merge presets so the CRUD API works identically on both
+        // runtimes; the bring-up (`ensureUp`) needs a host daemon, so plain Node has no
+        // `composeRuntime` — the local facade injects one via `overrides.composeRuntime`.
+        sharedStackRepository: repos.sharedStackRepository,
+        // Sandbox (parallel prompt/model testing) — contributed as one sandbox-owned mixin,
+        // symmetric with the Worker's `...selectSandboxDeps(db)`; the run-driver reuses the
+        // reviewer model config below. The container body never enumerates the five repos.
+        ...createDrizzleSandboxDeps(db),
+        // Per-workspace runtime settings (human-wait escalation threshold + per-service task
+        // limit). Wired unconditionally so the settings API + the limit enforcement + the
+        // escalation sweep work identically to the Worker.
+        workspaceSettingsRepository: repos.workspaceSettingsRepository,
+        userSettingsRepository: repos.userSettingsRepository,
+        modelProviderResolver,
+        requirementReviewModel: config.agents.routing.default.ref,
+        requirementReviewResolveModel: config.agents.resolveBlockModel,
+        // Local mode runs the inline reviewers/brainstorm/estimator on the ambient Claude Code /
+        // Codex CLI when the pinned model is a subscription harness (undefined on stock Node, so
+        // such refs degrade to the routing default). Also drives the preset satisfiability guard.
+        ...(config.agents.inlineHarnessRef ? { inlineHarnessRef: config.agents.inlineHarnessRef } : {}),
+        // Notifications subsystem (parity with the Worker, which wires it unconditionally):
+        // the inbox + the human-action surfaces. Node has no real-time push, so the rows
+        // persist (inbox + snapshot) and any channel composed below — e.g. Slack — delivers.
+        notificationRepository: sourced('notificationRepository', (d) => new DrizzleNotificationRepository(d)),
+        ...tasks.deps,
+        // Recurring pipelines + the workspace tracker selection. The tracker provider
+        // files the tech-debt pipeline's issue by resolving the *workspace's* connected
+        // integration: GitHub issues through the workspace's GitHub App installation,
+        // Jira tickets from the per-workspace encrypted connection store — both per-tenant.
+        pipelineScheduleRepository: repos.pipelineScheduleRepository,
+        trackerSettingsRepository: repos.trackerSettingsRepository,
+        ticketTrackerProvider: new TicketTrackerService({
+            trackerSettingsRepository: repos.trackerSettingsRepository,
+            fetchImpl: fetch,
+            ...(fileGitHubIssue ? { fileGitHubIssue } : {}),
+            ...(tasks.taskConnectionRepository
+                ? {
+                    resolveJiraConnection: async (workspaceId) => {
+                        const connection = await tasks.taskConnectionRepository.getByWorkspace(workspaceId, 'jira');
+                        const { baseUrl, accountEmail, apiToken } = connection?.credentials ?? {};
+                        if (!baseUrl || !accountEmail || !apiToken)
+                            return null;
+                        return { baseUrl, accountEmail, apiToken };
+                    },
+                    resolveLinearConnection: async (workspaceId) => {
+                        const connection = await tasks.taskConnectionRepository.getByWorkspace(workspaceId, 'linear');
+                        const { apiKey, token } = connection?.credentials ?? {};
+                        return apiKey || token ? { apiKey, token } : null;
+                    },
+                }
+                : {}),
+        }),
+    };
+}
+/**
+ * The second half of the dependency literal: the runtime collaborators (executor, gateways,
+ * bootstrapper, deploy/runner transports, GitHub + Slack module wiring, the capability resolver)
+ * and — LAST, exactly as before — the caller's `overrides`.
+ */
+function buildNodeServiceDeps(bundle) {
+    const { config, options, env, db, repos, sourced, idGenerator, clock, gateways, runnerUrlPolicy, githubInstallationRepository, apiKeys, subscriptions, personalSubscriptions, localModelEndpoints, openRouterCatalog, modelProviderResolver, cloudflareModelsEnabled, deployDeps, runnerPoolConnectionRepository, githubClient, issueWritebackProvider, githubGateDeps, githubModuleDeps, bootstrapJobRepository, repoBootstrapper, slackDeps, executionEventPublisher, agentExecutor, notificationChannel, accountSettings, } = bundle;
+    return {
+        issueWritebackProvider,
+        idGenerator,
+        clock,
+        agentExecutor,
+        spendPricing: config.spend,
+        // Price metered dynamic OpenRouter models at their real per-model rate (not the
+        // bare-`openrouter` fallback) using this workspace's enabled catalog.
+        dynamicModelPricesFor: openRouterCatalog
+            ? (ws) => openRouterCatalog.capabilitiesFor(ws)
+            : undefined,
+        // The runner-pool integration assembles when enabled, so a workspace can
+        // register the self-hosted pool its container agents dispatch to.
+        ...(config.runners.enabled && config.runners.encryptionKey
+            ? {
+                runnerPoolConnectionRepository,
+                runnerSecretCipher: new WebCryptoSecretCipher({
+                    masterKeyBase64: config.runners.encryptionKey,
+                    info: RUNNERS_CIPHER_INFO,
+                }),
+                // The pool provider instance backs the connection service's describeProvider +
+                // testConnection (the manifest editor's secret-key form + a pre-save probe). An
+                // injected native adapter wins here too (same instance that drives dispatch), so
+                // its describeConfig/testConnection render — else the generic manifest provider
+                // (same SSRF policy as the dispatch transport).
+                runnerPoolProvider: options.runnerPoolProvider ??
+                    new HttpRunnerPoolProvider(runnerUrlPolicy ? { urlPolicy: runnerUrlPolicy } : {}),
+                // Node (and local) has undici, so it can verify a private CA / skip TLS for a
+                // Kubernetes apiserver — accept such a config at registration.
+                runnerCustomTlsSupported: true,
+                ...(runnerUrlPolicy ? { runnerUrlSafetyPolicy: runnerUrlPolicy } : {}),
+            }
+            : {}),
+        ...(options.boss
+            ? {
+                workRunner: new PgBossWorkRunner(options.boss, executionRuntime(config, env).queue),
+                // The durable bootstrap driver (analogue of the Worker's BootstrapWorkflow):
+                // BootstrapService.startRun enqueues a drive job that polls the run to terminal.
+                bootstrapRunner: new PgBossBootstrapRunner(options.boss, executionRuntime(config, env).queue),
+                // The durable env-config-repair driver (analogue of the Worker's
+                // EnvConfigRepairWorkflow): start enqueues a drive job that polls the run to terminal.
+                envConfigRepairRunner: new PgBossEnvConfigRepairRunner(options.boss, executionRuntime(config, env).queue),
+                // The durable ephemeral-environment self-test driver (analogue of the Worker's
+                // EnvironmentTestWorkflow): startRun enqueues a drive job that advances the run.
+                environmentTestRunner: new PgBossEnvironmentTestRunner(options.boss, executionRuntime(config, env).queue),
+            }
+            : {}),
+        ...githubGateDeps,
+        // GitHub installation + repo/branch/PR/issue/commit/check-run projections + the
+        // sync/webhook module (inline ingest persists to these repos on Node).
+        ...githubModuleDeps,
+        // Repo-bootstrap: the reference-architecture library + bootstrap-run store make the
+        // module + API available; `repoBootstrapper` (when wired) dispatches the bootstrap
+        // container through the shared runner seam, and `bootstrapRunner` (pg-boss, below)
+        // durably drives its poll loop — parity with the Worker's BootstrapWorkflow.
+        referenceArchitectureRepository: sourced('referenceArchitectureRepository', (d) => new DrizzleReferenceArchitectureRepository(d)),
+        bootstrapJobRepository,
+        ...(repoBootstrapper ? { repoBootstrapper } : {}),
+        // Env-config-repair runs share the unified agent_runs table (kind-scoped). The job
+        // repository is wired unconditionally; the repairer (agent fallback) is wired
+        // post-overrides below over the FINAL provider, and the durable runner in the
+        // `options.boss` block above — parity with the Worker's EnvConfigRepairWorkflow.
+        envConfigRepairJobRepository: sourced('envConfigRepairJobRepository', (d) => new DrizzleEnvConfigRepairJobRepository(d)),
+        // Ephemeral-environment self-test runs (their own table). The store is wired
+        // unconditionally; the environments module builds the service when it + a git provider
+        // are present, and the durable runner is wired in the `options.boss` block above.
+        environmentTestRunRepository: sourced('environmentTestRunRepository', (d) => new DrizzleEnvironmentTestRunRepository(d)),
+        // Document sources (Confluence / Notion / GitHub docs): wired from the shared
+        // integration providers exactly like the Worker, so a workspace can connect a
+        // source and import requirement/PRD/RFC pages as agent context.
+        ...selectNodeDocumentsDeps(config, db, githubClient, githubInstallationRepository),
+        // Ephemeral environments (opt-in): a workspace registers its own environment
+        // management API; the tester provisions/destroys per-run environments from it. A
+        // trusted in-house adapter can replace the default HTTP provider via the seam.
+        // The environment integration scopes its own URL/host policy from
+        // `config.environments` inside this selector (separate from the runner pool's).
+        ...selectNodeEnvironmentsDeps(config, db),
+        // The async container-backed Kubernetes deploy lifecycle (deployJobClient +
+        // resolveDeployCloneTarget) — pool-backed by default, overridable by the local facade.
+        ...deployDeps,
+        // Prompt-fragment library (ADR 0006; opt-in): the managed tenant-scoped catalog
+        // of best-practice fragments feeding every agent run, wired exactly like the
+        // Worker's selectFragmentLibraryDeps (repos + installation resolver + selector).
+        ...selectNodeFragmentLibraryDeps(config, env, db, githubClient, githubInstallationRepository, modelProviderResolver),
+        // Repo-sourced Claude Skills library (docs/initiatives/repo-skills.md; opt-in): the
+        // account's catalog of repo-authored skills, wired exactly like the Worker's
+        // selectSkillLibraryDeps (account repos + installation resolver).
+        ...selectNodeSkillLibraryDeps(config, db, githubClient, githubInstallationRepository),
+        // Push-webhook skill-source freshness fan-out (slice 4): resync affected sources via the
+        // pg-boss GitHub-sync queue. No boss (pure-logic test) ⇒ no proactive resync; the
+        // dispatch-time probe is the freshness backstop.
+        enqueueSkillResync: async ({ accountId, sourceId }) => {
+            await gateways.githubWebhook.queueSkillResync(accountId, sourceId);
+        },
+        // Slack: an extra notification transport (the channel) + its management module.
+        // Default-off; when enabled its channel is composed into `notificationChannel` below
+        // alongside the in-app push, identically to the Worker.
+        ...slackDeps,
+        // Account invitations + per-account email senders (UI-onboarded, DB-stored).
+        ...selectNodeEmailInvitationDeps(config, repos),
+        // The pipeline-start guard resolves what's configured for a workspace + initiator.
+        resolveProviderCapabilities: (workspaceId, initiatedBy) => resolveWorkspaceCapabilities({
+            apiKeys,
+            subscriptions,
+            personalSubscriptions,
+            cloudflareModelsEnabled,
+            baseUrlFor: (provider) => baseUrlForNode(provider, env),
+            localModelEndpoints,
+            openRouterCatalog,
+            accountSettings,
+            workspaceAccountOf: (workspaceId) => repos.workspaceRepository.accountOf(workspaceId),
+            modelPolicySupported: config.infrastructure?.modelPolicy?.supported ?? false,
+            ...(options.caches ? { caches: options.caches } : {}),
+        }, workspaceId, initiatedBy),
+        // Real-time push (when a hub is wired) + the composed notification channel (in-app
+        // push + Slack). These come AFTER the spreads so the composite replaces the bare
+        // Slack channel `slackDeps` set; both are absent (no override) when nothing is wired.
+        ...(executionEventPublisher ? { executionEventPublisher } : {}),
+        ...(notificationChannel ? { notificationChannel } : {}),
+        // Run the engine's gate-probe / merge GitHub reads under the run initiator's ambient
+        // context, so a per-user PAT (when set) is preferred over the App/env token.
+        runInitiatorScope: runWithInitiator,
+        // The process-wide cache bag from start() (Redis-notified invalidation when REDIS_URL
+        // is set). Absent ⇒ createCore builds bare in-memory defaults.
+        ...(options.caches ? { caches: options.caches } : {}),
+        ...options.overrides,
+    };
+}
+/**
+ * Wire account invitations + per-account email senders for the Node facade (parity
+ * with the Worker's `selectEmailInvitationDeps`). Invitations are always available (an
+ * invite link works without email); the email-connection store + cipher are wired only
+ * when EMAIL is enabled, so an account can onboard a SendGrid/Resend key in the UI and
+ * have invites emailed. The provider key is sealed with the shared ENCRYPTION_KEY.
+ */
+function selectNodeEmailInvitationDeps(config, repos) {
+    const deps = {
+        invitationRepository: repos.invitationRepository,
+        // Password reset works without email (the link is logged in dev); the system sender
+        // below upgrades it to real delivery when configured.
+        passwordResetTokenRepository: repos.passwordResetTokenRepository,
+        resolveSystemEmailSender: buildSystemEmailSender(config),
+        appBaseUrl: config.email.appBaseUrl || undefined,
+        logger,
+    };
+    if (config.email.enabled && config.email.encryptionKey) {
+        deps.emailConnectionRepository = repos.emailConnectionRepository;
+        deps.emailSecretCipher = new WebCryptoSecretCipher({
+            masterKeyBase64: config.email.encryptionKey,
+            info: EMAIL_CIPHER_INFO,
+        });
+    }
+    return deps;
+}
+/**
+ * Build the deployment-level system email sender (auth emails like password reset) from
+ * the env-driven `email.system` config, or undefined when not configured.
+ */
+function buildSystemEmailSender(config) {
+    const system = config.email.system;
+    if (!system)
+        return undefined;
+    const sender = createEmailSender({
+        provider: system.provider,
+        from: system.from,
+        sendgrid: system.provider === 'sendgrid' ? { apiKey: system.apiKey } : undefined,
+        resend: system.provider === 'resend' ? { apiKey: system.apiKey } : undefined,
+    });
+    if (!sender)
+        return undefined;
+    return async () => sender;
+}
+/**
+ * Wire the document-source integration for the Node facade, mirroring the Worker's
+ * `selectDocumentsDeps`: the shared `@cat-factory/integrations` provider shells
+ * (Confluence/Notion always; GitHub-docs only when a GitHub client is available, since
+ * it reuses the workspace's App installation), the Drizzle connection/document repos,
+ * and — in `llm` planner mode — the default model ref the doc→board planner runs with
+ * (the container's `modelProvider` is shared). Source credentials are encrypted at rest
+ * under a documents-scoped HKDF info, keyed by the shared ENCRYPTION_KEY.
+ */
+function selectNodeDocumentsDeps(config, db, githubClient, installations) {
+    if (!config.documents.enabled || !config.documents.encryptionKey)
+        return {};
+    const providers = [];
+    if (config.documents.sources.includes('confluence'))
+        providers.push(new ConfluenceProvider());
+    if (config.documents.sources.includes('notion'))
+        providers.push(new NotionProvider());
+    // Figma + Zeplin authenticate with a per-workspace PAT (no GitHub client needed), like
+    // Notion/Confluence.
+    if (config.documents.sources.includes('figma'))
+        providers.push(new FigmaProvider());
+    if (config.documents.sources.includes('zeplin'))
+        providers.push(new ZeplinProvider());
+    if (config.documents.sources.includes('linear'))
+        providers.push(new LinearDocumentProvider());
+    if (config.documents.sources.includes('github') && githubClient) {
+        providers.push(new GitHubDocsProvider({ githubClient, installations, logger }));
+    }
+    if (providers.length === 0)
+        return {};
+    return {
+        documentSourceProviders: providers,
+        documentConnectionRepository: new DrizzleDocumentConnectionRepository(db, new WebCryptoSecretCipher({
+            masterKeyBase64: config.documents.encryptionKey,
+            info: 'cat-factory:documents',
+        })),
+        documentRepository: new DrizzleDocumentRepository(db),
+        ...(config.documents.planner === 'llm'
+            ? { documentPlannerModel: config.agents.routing.default.ref }
+            : {}),
+    };
+}
+/**
+ * Wire the ephemeral-environment integration for the Node facade when enabled,
+ * mirroring the Worker's `selectEnvironmentsDeps`: the Drizzle connection + registry repos
+ * and the environment-scoped `SecretCipher`. The provider itself is resolved per-workspace
+ * from the env-backend registry by the stored `kind` (built-in `manifest`/`kubernetes`, or a
+ * deployment's programmatically-registered custom kind), so nothing is injected here.
+ * Per-tenant management-API secrets are encrypted at rest with the shared ENCRYPTION_KEY.
+ * No key configured → `{}` and the module stays off (there is no separate enable flag).
+ */
+function selectNodeEnvironmentsDeps(config, db) {
+    if (!config.environments.encryptionKey)
+        return {};
+    // The provider is resolved per-workspace from the env-backend registry by the stored
+    // `kind`. Node honors custom-CA / insecure-skip TLS (undici), so a Kubernetes env config
+    // with a CA is allowed (environmentCustomTlsSupported defaults to supported).
+    const urlPolicy = resolveUrlSafetyPolicy(config.environments);
+    return {
+        environmentConnectionRepository: new DrizzleEnvironmentConnectionRepository(db),
+        environmentRegistryRepository: new DrizzleEnvironmentRegistryRepository(db),
+        // The workspace-defined custom-manifest-type catalog is a workspace feature on every facade.
+        customManifestTypeRepository: new DrizzleCustomManifestTypeRepository(db),
+        secretCipher: new WebCryptoSecretCipher({
+            masterKeyBase64: config.environments.encryptionKey,
+        }),
+        ...(urlPolicy ? { environmentUrlSafetyPolicy: urlPolicy } : {}),
+        // Deployment-level, additive extensions to the built-in provisioning-detection conventions.
+        ...(config.environments.detectionConventions
+            ? { detectionConventions: config.environments.detectionConventions }
+            : {}),
+    };
+}
+//# sourceMappingURL=container-core-deps.js.map

package/dist/container-core-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-core-deps.js","sourceRoot":"","sources":["../src/container-core-deps.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8FAA8F;AAC9F,6FAA6F;AAC7F,iGAAiG;AACjG,oDAAoD;AACpD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAML,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAyB,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAEL,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,MAAM,EACN,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAA;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAA;AAChG,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAA;AAC/F,OAAO,EAAE,sCAAsC,EAAE,MAAM,6BAA6B,CAAA;AACpF,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAA;AACvF,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAA;AACvF,OAAO,EACL,mCAAmC,EACnC,yBAAyB,GAC1B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,sCAAsC,CAAA;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAA;AAC/E,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,qCAAqC,CAAA;AAC5C,+FAA+F;AAC/F,iGAAiG;AACjG,oFAAoF;AACpF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAiFlF;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA0B;IACrE,OAAO,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,MAA0B;IACpD,MAAM,EACJ,MAAM,EACN,OAAO,EACP,EAAE,EACF,KAAK,EACL,OAAO,EACP,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,0BAA0B,GAC3B,GAAG,MAAM,CAAA;IACV,OAAO;QACL,GAAG,iBAAiB;QACpB,GAAG,sBAAsB;QACzB,GAAG,mBAAmB;QACtB,4FAA4F;QAC5F,8FAA8F;QAC9F,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,uFAAuF;QACvF,2FAA2F;QAC3F,iBAAiB;QACjB,4FAA4F;QAC5F,uFAAuF;QACvF,YAAY;QACZ,oBAAoB;QACpB,8FAA8F;QAC9F,2DAA2D;QAC3D,gBAAgB;QAChB,8FAA8F;QAC9F,gGAAgG;QAChG,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,yFAAyF;QACzF,+FAA+F;QAC/F,kFAAkF;QAClF,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,sFAAsF;QACtF,kEAAkE;QAClE,wBAAwB;QACxB,oFAAoF;QACpF,6FAA6F;QAC7F,mCAAmC;QACnC,0BAA0B;QAC1B,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,2FAA2F;QAC3F,6EAA6E;QAC7E,0BAA0B;QAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,IAAI,uBAAuB,EAAE;QAC7C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,8FAA8F;QAC9F,2FAA2F;QAC3F,8FAA8F;QAC9F,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,qFAAqF;QACrF,2CAA2C;QAC3C,gCAAgC,EAC9B,OAAO,CAAC,gCAAgC,IAAI,IAAI,uCAAuC,CAAC,EAAE,CAAC;QAC7F,+EAA+E;QAC/E,qFAAqF;QACrF,mFAAmF;QACnF,gFAAgF;QAChF,4CAA4C;QAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,yEAAyE;QACzE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,iFAAiF;QACjF,8EAA8E;QAC9E,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;QACpD,gFAAgF;QAChF,oEAAoE;QACpE,yBAAyB;QACzB,mFAAmF;QACnF,sDAAsD;QACtD,wBAAwB;QACxB,gFAAgF;QAChF,+EAA+E;QAC/E,+CAA+C;QAC/C,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC;QACpC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,uFAAuF;QACvF,uFAAuF;QACvF,qFAAqF;QACrF,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,uBAAuB;QAC7E,iCAAiC,EAAE,KAAK,CAAC,iCAAiC;QAC1E,4EAA4E;QAC5E,+EAA+E;QAC/E,iFAAiF;QACjF,mFAAmF;QACnF,+EAA+E;QAC/E,iFAAiF;QACjF,0EAA0E;QAC1E,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,wFAAwF;QACxF,uEAAuE;QACvE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,mFAAmF;QACnF,sFAAsF;QACtF,sFAAsF;QACtF,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;QAClE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,mFAAmF;QACnF,kFAAkF;QAClF,gFAAgF;QAChF,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,iFAAiF;QACjF,uEAAuE;QACvE,gFAAgF;QAChF,6EAA6E;QAC7E,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,qFAAqF;QACrF,mFAAmF;QACnF,gFAAgF;QAChF,kFAAkF;QAClF,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,oFAAoF;QACpF,oFAAoF;QACpF,mFAAmF;QACnF,GAAG,wBAAwB,CAAC,EAAE,CAAC;QAC/B,qFAAqF;QACrF,kFAAkF;QAClF,mDAAmD;QACnD,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,qBAAqB;QACrB,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;QACzD,6BAA6B,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;QAC9D,yFAAyF;QACzF,yFAAyF;QACzF,0FAA0F;QAC1F,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,oFAAoF;QACpF,iFAAiF;QACjF,qFAAqF;QACrF,sBAAsB,EAAE,OAAO,CAC7B,wBAAwB,EACxB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,6BAA6B,CAAC,CAAC,CAAC,CAC5C;QACD,GAAG,KAAK,CAAC,IAAI;QACb,8EAA8E;QAC9E,gFAAgF;QAChF,8EAA8E;QAC9E,oFAAoF;QACpF,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,qBAAqB,EAAE,IAAI,oBAAoB,CAAC;YAC9C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,SAAS,EAAE,KAAK;YAChB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC,wBAAwB;gBAChC,CAAC,CAAC;oBACE,qBAAqB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;wBAC3C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,wBAAyB,CAAC,cAAc,CACrE,WAAW,EACX,MAAM,CACP,CAAA;wBACD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,WAAW,IAAI,EAAE,CAAA;wBACzE,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ;4BAAE,OAAO,IAAI,CAAA;wBACvD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;oBAC5C,CAAC;oBACD,uBAAuB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;wBAC7C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,wBAAyB,CAAC,cAAc,CACrE,WAAW,EACX,QAAQ,CACT,CAAA;wBACD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,WAAW,IAAI,EAAE,CAAA;wBACvD,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;oBACnD,CAAC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;KACH,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,MAA0B;IACtD,MAAM,EACJ,MAAM,EACN,OAAO,EACP,GAAG,EACH,EAAE,EACF,KAAK,EACL,OAAO,EACP,WAAW,EACX,KAAK,EACL,QAAQ,EACR,eAAe,EACf,4BAA4B,EAC5B,OAAO,EACP,aAAa,EACb,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,UAAU,EACV,8BAA8B,EAC9B,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,SAAS,EACT,uBAAuB,EACvB,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,GAAG,MAAM,CAAA;IACV,OAAO;QACL,sBAAsB;QACtB,WAAW;QACX,KAAK;QACL,aAAa;QACb,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,gFAAgF;QAChF,sEAAsE;QACtE,qBAAqB,EAAE,iBAAiB;YACtC,CAAC,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;YACvD,CAAC,CAAC,SAAS;QACb,yEAAyE;QACzE,kEAAkE;QAClE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa;YACxD,CAAC,CAAC;gBACE,8BAA8B;gBAC9B,kBAAkB,EAAE,IAAI,qBAAqB,CAAC;oBAC5C,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;oBAC7C,IAAI,EAAE,mBAAmB;iBAC1B,CAAC;gBACF,+EAA+E;gBAC/E,gFAAgF;gBAChF,iFAAiF;gBACjF,gFAAgF;gBAChF,gDAAgD;gBAChD,kBAAkB,EAChB,OAAO,CAAC,kBAAkB;oBAC1B,IAAI,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,8EAA8E;gBAC9E,+DAA+D;gBAC/D,wBAAwB,EAAE,IAAI;gBAC9B,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC;gBACE,UAAU,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;gBACnF,6EAA6E;gBAC7E,iFAAiF;gBACjF,eAAe,EAAE,IAAI,qBAAqB,CACxC,OAAO,CAAC,IAAI,EACZ,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CACpC;gBACD,iEAAiE;gBACjE,uFAAuF;gBACvF,qBAAqB,EAAE,IAAI,2BAA2B,CACpD,OAAO,CAAC,IAAI,EACZ,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CACpC;gBACD,+EAA+E;gBAC/E,iFAAiF;gBACjF,qBAAqB,EAAE,IAAI,2BAA2B,CACpD,OAAO,CAAC,IAAI,EACZ,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,cAAc;QACjB,gFAAgF;QAChF,uEAAuE;QACvE,GAAG,gBAAgB;QACnB,oFAAoF;QACpF,mFAAmF;QACnF,mFAAmF;QACnF,6EAA6E;QAC7E,+BAA+B,EAAE,OAAO,CACtC,iCAAiC,EACjC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,sCAAsC,CAAC,CAAC,CAAC,CACrD;QACD,sBAAsB;QACtB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,mFAAmF;QACnF,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,4BAA4B,EAAE,OAAO,CACnC,8BAA8B,EAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,mCAAmC,CAAC,CAAC,CAAC,CAClD;QACD,6EAA6E;QAC7E,uFAAuF;QACvF,kFAAkF;QAClF,4BAA4B,EAAE,OAAO,CACnC,8BAA8B,EAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,mCAAmC,CAAC,CAAC,CAAC,CAClD;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,gEAAgE;QAChE,GAAG,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,4BAA4B,CAAC;QAClF,6EAA6E;QAC7E,iFAAiF;QACjF,+EAA+E;QAC/E,kEAAkE;QAClE,gFAAgF;QAChF,GAAG,0BAA0B,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,4EAA4E;QAC5E,uFAAuF;QACvF,GAAG,UAAU;QACb,gFAAgF;QAChF,6EAA6E;QAC7E,iFAAiF;QACjF,GAAG,6BAA6B,CAC9B,MAAM,EACN,GAAG,EACH,EAAE,EACF,YAAY,EACZ,4BAA4B,EAC5B,qBAAqB,CACtB;QACD,oFAAoF;QACpF,6EAA6E;QAC7E,kEAAkE;QAClE,GAAG,0BAA0B,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,4BAA4B,CAAC;QACrF,yFAAyF;QACzF,kFAAkF;QAClF,iDAAiD;QACjD,kBAAkB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAA4B,EAAE,EAAE;YAC9E,MAAM,QAAQ,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACpE,CAAC;QACD,gFAAgF;QAChF,qFAAqF;QACrF,wDAAwD;QACxD,GAAG,SAAS;QACZ,6EAA6E;QAC7E,GAAG,6BAA6B,CAAC,MAAM,EAAE,KAAK,CAAC;QAC/C,mFAAmF;QACnF,2BAA2B,EAAE,CAAC,WAAmB,EAAE,WAA2B,EAAE,EAAE,CAChF,4BAA4B,CAC1B;YACE,OAAO;YACP,aAAa;YACb,qBAAqB;YACrB,uBAAuB;YACvB,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC;YACvD,mBAAmB;YACnB,iBAAiB;YACjB,eAAe;YACf,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC;YACrF,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,IAAI,KAAK;YAC5E,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,EACD,WAAW,EACX,WAAW,CACZ;QACH,mFAAmF;QACnF,iFAAiF;QACjF,sFAAsF;QACtF,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,qFAAqF;QACrF,6EAA6E;QAC7E,iBAAiB,EAAE,gBAAgB;QACnC,sFAAsF;QACtF,+DAA+D;QAC/D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,OAAO,CAAC,SAAS;KACrB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,6BAA6B,CACpC,MAAiB,EACjB,KAAmD;IAEnD,MAAM,IAAI,GAA8B;QACtC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,oFAAoF;QACpF,sDAAsD;QACtD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;QAChE,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;QACxD,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS;QAChD,MAAM;KACP,CAAA;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACvD,IAAI,CAAC,yBAAyB,GAAG,KAAK,CAAC,yBAAyB,CAAA;QAChE,IAAI,CAAC,iBAAiB,GAAG,IAAI,qBAAqB,CAAC;YACjD,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YAC3C,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAC7B,MAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;QAChF,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC,CAAA;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,KAAK,IAAI,EAAE,CAAC,MAAM,CAAA;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAC9B,MAAiB,EACjB,EAAa,EACb,YAAsC,EACtC,aAA2C;IAE3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa;QAAE,OAAO,EAAE,CAAA;IAC3E,MAAM,SAAS,GAA6B,EAAE,CAAA;IAC9C,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAA;IAC7F,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,CAAA;IACrF,uFAAuF;IACvF,qBAAqB;IACrB,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC,CAAA;IACnF,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,CAAA;IACrF,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAC7F,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC;QAChE,SAAS,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,OAAO;QACL,uBAAuB,EAAE,SAAS;QAClC,4BAA4B,EAAE,IAAI,mCAAmC,CACnE,EAAE,EACF,IAAI,qBAAqB,CAAC;YACxB,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa;YAC/C,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CACH;QACD,kBAAkB,EAAE,IAAI,yBAAyB,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK;YACpC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,0BAA0B,CAAC,MAAiB,EAAE,EAAa;IAClE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa;QAAE,OAAO,EAAE,CAAA;IACjD,qFAAqF;IACrF,yFAAyF;IACzF,8EAA8E;IAC9E,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC7D,OAAO;QACL,+BAA+B,EAAE,IAAI,sCAAsC,CAAC,EAAE,CAAC;QAC/E,6BAA6B,EAAE,IAAI,oCAAoC,CAAC,EAAE,CAAC;QAC3E,6FAA6F;QAC7F,4BAA4B,EAAE,IAAI,mCAAmC,CAAC,EAAE,CAAC;QACzE,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa;SACnD,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,4FAA4F;QAC5F,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,oBAAoB;YAC1C,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,YAAY,CAAC,oBAAoB,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC"}