@cleocode/cleo-os 2026.9.8 → 2026.9.10

package/dist/harnesses/provider-verification.js

@@ -0,0 +1,442 @@
+/** Bounded external CLI observation for the existing installed-artifact verifier. @packageDocumentation */
+import { spawnSync } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { createReadStream, readFileSync } from 'node:fs';
+import { realpath, stat } from 'node:fs/promises';
+import { isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { spawnWrapped } from '@cleocode/core/resources/spawn-wrapper';
+const WRITABLE_ROOTS = [
+    'HOME',
+    'USERPROFILE',
+    'XDG_DATA_HOME',
+    'XDG_CONFIG_HOME',
+    'XDG_CACHE_HOME',
+    'XDG_STATE_HOME',
+    'XDG_RUNTIME_DIR',
+    'TMPDIR',
+    'TMP',
+    'TEMP',
+    'CLEO_HOME',
+    'CLEO_CONFIG_HOME',
+    'CLEO_ROOT',
+    'CLEO_PROJECT_ROOT',
+    'CLEO_DIR',
+    'NEXUS_HOME',
+    'NEXUS_CACHE_DIR',
+    'AGENTS_HOME',
+    'CLAUDE_CONFIG_DIR',
+    'CODEX_HOME',
+    'KIMI_CODE_HOME',
+    'KIMI_HOME',
+    'KIMI_CONFIG_DIR',
+];
+/** Whether an already-canonical path stays within the synthetic isolation root. */
+function within(root, path) {
+    const suffix = relative(root, path);
+    return (suffix === '' || (!suffix.startsWith(`..${sep}`) && suffix !== '..' && !isAbsolute(suffix)));
+}
+/**
+ * Return normal noninteractive CLI flags without adapter bypass defaults.
+ * @param provider - External CLI, distinct from its programmatic adapter.
+ * @returns Fixed argument prefix; the scenario prompt is appended separately.
+ * @example
+ * ```ts
+ * const args = providerVerificationArguments('codex');
+ * ```
+ */
+export function providerVerificationArguments(provider) {
+    switch (provider) {
+        case 'claude-code':
+            return ['--print', '--output-format', 'stream-json', '--verbose'];
+        case 'codex':
+            return ['exec', '--json', '--sandbox', 'workspace-write'];
+        case 'kimi':
+            return ['--output-format', 'stream-json', '--prompt'];
+        default:
+            throw new Error('Unsupported external provider CLI');
+    }
+}
+/** Verify explicit roots before any child launch; never copy ambient credentials. */
+async function validateInvocation(input) {
+    if (!input.invocationId.trim() || !input.prompt.trim())
+        throw new Error('Invocation identity and prompt are required');
+    if (input.prompt.startsWith('-'))
+        throw new Error('Scenario prompt must not be interpreted as CLI options');
+    if (!Number.isSafeInteger(input.deadlineAt) ||
+        input.deadlineAt <= Date.now() ||
+        input.deadlineAt - Date.now() > 600_000)
+        throw new Error('Original provider deadline must be future and within ten minutes');
+    if (!Number.isSafeInteger(input.transcriptByteLimit) ||
+        input.transcriptByteLimit < 1024 ||
+        input.transcriptByteLimit > 16 * 1024 * 1024)
+        throw new Error('Transcript byte ceiling must be between 1024 and 16777216');
+    if (!Number.isSafeInteger(input.memoryMaxMb) ||
+        input.memoryMaxMb < 128 ||
+        input.memoryMaxMb > 4096)
+        throw new Error('Provider memory ceiling must be between 128 and 4096 MiB');
+    if (!isAbsolute(input.isolationRoot) ||
+        !isAbsolute(input.projectRoot) ||
+        !isAbsolute(input.executable))
+        throw new Error('Provider paths must be absolute');
+    const root = await realpath(input.isolationRoot);
+    if (!(await stat(root)).isDirectory())
+        throw new Error('Isolation root must be a directory');
+    const projectRoot = await realpath(input.projectRoot);
+    const environment = { ...input.environment };
+    if (!within(root, projectRoot))
+        throw new Error('Provider project escapes isolation root');
+    for (const key of WRITABLE_ROOTS) {
+        const path = input.environment[key];
+        if (!path || !isAbsolute(path))
+            throw new Error(`Writable root ${key} must exist inside isolation root`);
+        const capturedPath = await realpath(path);
+        if (!within(root, capturedPath) || !(await stat(capturedPath)).isDirectory())
+            throw new Error(`Writable root ${key} must exist inside isolation root`);
+        environment[key] = capturedPath;
+    }
+    if (environment['CLEO_ROOT'] !== projectRoot || environment['CLEO_PROJECT_ROOT'] !== projectRoot)
+        throw new Error('CLEO project pins must match the captured provider project');
+    if (environment['CLEO_DIR'] !== join(projectRoot, '.cleo'))
+        throw new Error('CLEO_DIR must identify the captured project store');
+    input.signal?.throwIfAborted();
+    if (Date.now() >= input.deadlineAt)
+        throw new Error('Original provider deadline expired during preparation');
+    return { ...input, isolationRoot: root, projectRoot, environment };
+}
+/**
+ * Observe a real external provider using canonical spawning and bounded cleanup.
+ * @param input - Captured isolated invocation; no ambient environment is inherited.
+ * @returns Process evidence only; repair, instruction delivery and lifecycle remain unverified.
+ * @remarks Process groups cannot prove that descendants did not escape. A successful
+ * systemd launch or kill request is not an independently verified empty cgroup.
+ * @example
+ * ```ts
+ * const processEvidence = await runProviderVerification(invocation);
+ * // Independently inspect actual installed repair receipts before assessing capabilities.
+ * ```
+ */
+export async function runProviderVerification(input) {
+    const started = Date.now();
+    // Copy mutable caller inputs synchronously before filesystem awaits.
+    const captured = {
+        ...input,
+        environment: { ...input.environment },
+        systemdControl: input.systemdControl ? { ...input.systemdControl } : undefined,
+    };
+    const invocation = await validateInvocation(captured);
+    const executablePath = await realpath(invocation.executable);
+    const digest = createHash('sha256');
+    for await (const bytes of createReadStream(executablePath, { signal: invocation.signal })) {
+        if (Date.now() >= invocation.deadlineAt)
+            throw new Error('Original provider deadline expired while hashing executable');
+        digest.update(bytes);
+    }
+    const executableHash = digest.digest('hex');
+    invocation.signal?.throwIfAborted();
+    if (Date.now() >= invocation.deadlineAt)
+        throw new Error('Original provider deadline expired before launch');
+    const args = providerVerificationArguments(invocation.provider);
+    const diagnostics = [
+        'This process observation does not verify instruction delivery, repair receipts, or full lifecycle containment.',
+        'Executable hash records prelaunch bytes; executable immutability during execution was not established.',
+        'No permission bypass flags were supplied; provider policy may refuse unattended actions.',
+        'Cancellation cannot establish whether an in-flight CLEO mutation committed; inspect its canonical receipt.',
+    ];
+    const result = {
+        invocationId: invocation.invocationId,
+        provider: invocation.provider,
+        executable: { locator: executablePath, sha256: executableHash },
+        arguments: args,
+        outcome: 'exited',
+        exitCode: null,
+        exitSignal: null,
+        startedAt: new Date(started).toISOString(),
+        endedAt: '',
+        deadlineAt: invocation.deadlineAt,
+        elapsedMs: 0,
+        stdout: '',
+        stderr: '',
+        transcriptTruncated: false,
+        childClosed: false,
+        processGroupGone: null,
+        containment: 'pgid',
+        scope: null,
+        certification: 'unverified',
+        diagnostics,
+    };
+    const owned = spawnWrapped(executablePath, [...args, invocation.prompt], {
+        cwd: resolve(invocation.projectRoot),
+        env: invocation.environment,
+        detached: process.platform !== 'win32',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    }, {
+        scopeClass: 'tool',
+        scopeId: `${invocation.invocationId}-${randomUUID()}`,
+        systemdControl: invocation.systemdControl,
+        execution: { deadlineAt: invocation.deadlineAt, signal: invocation.signal },
+        resources: { memoryMax: `${invocation.memoryMaxMb}M` },
+    });
+    result.containment = owned.mode;
+    const { child } = owned;
+    const managerEnv = invocation.systemdControl
+        ? {
+            ...invocation.environment,
+            XDG_RUNTIME_DIR: invocation.systemdControl.runtimeDirectory,
+            DBUS_SESSION_BUS_ADDRESS: invocation.systemdControl.busAddress ??
+                `unix:path=${join(invocation.systemdControl.runtimeDirectory, 'bus')}`,
+        }
+        : { ...invocation.environment };
+    const scope = owned.mode === 'systemd' && owned.unitName
+        ? {
+            unitName: owned.unitName,
+            cgroupPath: null,
+            memoryMaxBytes: null,
+            memorySwapMaxBytes: null,
+            observedMemberPids: [],
+            populatedBefore: null,
+            populatedAfter: null,
+            removedAfter: false,
+            verified: false,
+        }
+        : null;
+    result.scope = scope;
+    const scopeDiagnostics = new Set();
+    const scopeDiagnostic = (message) => {
+        if (scopeDiagnostics.has(message))
+            return;
+        scopeDiagnostics.add(message);
+        diagnostics.push(message);
+    };
+    let cleanupDeadline;
+    const beginCleanup = () => (cleanupDeadline ??= Date.now() + 1000);
+    const observeScope = (after) => {
+        if (!scope ||
+            process.platform !== 'linux' ||
+            Date.now() >= (after ? beginCleanup() : invocation.deadlineAt))
+            return;
+        try {
+            if (!scope.cgroupPath) {
+                const remaining = (after ? beginCleanup() : invocation.deadlineAt) - Date.now();
+                if (remaining <= 0)
+                    return;
+                const query = spawnSync('systemctl', ['--user', 'show', scope.unitName, '--property=ControlGroup', '--value'], {
+                    env: managerEnv,
+                    encoding: 'utf8',
+                    timeout: Math.min(100, remaining),
+                    maxBuffer: 4096,
+                    stdio: ['ignore', 'pipe', 'ignore'],
+                });
+                if (query.status !== 0 || query.error) {
+                    scopeDiagnostic('An owned scope query failed or exceeded its bounded observation time.');
+                    return;
+                }
+                const group = query.stdout.trim();
+                // Observe only the exact randomly named scope, never a parent/global slice.
+                if (!group.startsWith('/') ||
+                    group.split('/').includes('..') ||
+                    !group.endsWith(`/${scope.unitName}`))
+                    return;
+                scope.cgroupPath = group;
+            }
+            const directory = join('/sys/fs/cgroup', scope.cgroupPath);
+            const events = readFileSync(join(directory, 'cgroup.events'), 'utf8');
+            const populated = /^populated ([01])$/m.exec(events)?.[1];
+            if (after)
+                scope.populatedAfter = populated === undefined ? null : populated === '1';
+            else {
+                scope.populatedBefore =
+                    scope.populatedBefore === true
+                        ? true
+                        : populated === undefined
+                            ? null
+                            : populated === '1';
+                const memory = readFileSync(join(directory, 'memory.max'), 'utf8').trim();
+                const swap = readFileSync(join(directory, 'memory.swap.max'), 'utf8').trim();
+                scope.memoryMaxBytes = /^\d+$/.test(memory) ? Number(memory) : null;
+                scope.memorySwapMaxBytes = /^\d+$/.test(swap) ? Number(swap) : null;
+                const members = readFileSync(join(directory, 'cgroup.procs'), 'utf8').trim().split(/\s+/);
+                if (members.length > 1024)
+                    return;
+                const matched = [];
+                for (const member of members) {
+                    if (Date.now() >= invocation.deadlineAt)
+                        return;
+                    if (!/^\d+$/.test(member))
+                        continue;
+                    const membership = readFileSync(`/proc/${member}/cgroup`, 'utf8');
+                    if (membership.split('\n').includes(`0::${scope.cgroupPath}`))
+                        matched.push(Number(member));
+                }
+                scope.observedMemberPids = [...new Set([...scope.observedMemberPids, ...matched])];
+            }
+        }
+        catch (error) {
+            if (after &&
+                scope.populatedBefore === true &&
+                scope.observedMemberPids.length > 0 &&
+                error instanceof Error &&
+                'code' in error &&
+                error.code === 'ENOENT') {
+                scope.removedAfter = true;
+                scope.populatedAfter = null;
+            }
+            else
+                scopeDiagnostic('An owned scope filesystem observation failed; unavailable evidence remains unverified.');
+            // Races during startup or process exit leave the corresponding evidence unverified.
+        }
+    };
+    let bytesLeft = invocation.transcriptByteLimit;
+    const stdout = [];
+    const stderr = [];
+    let stopRequested = false;
+    let finalized = false;
+    let scopeStopRequested = false;
+    let cleanupTimer;
+    let settle = () => undefined;
+    const settled = new Promise((done) => {
+        settle = done;
+    });
+    const killGroup = () => {
+        if (owned.mode === 'systemd' && owned.unitName && !scopeStopRequested) {
+            scopeStopRequested = true;
+            const remaining = beginCleanup() - Date.now();
+            const cleanup = remaining > 0
+                ? spawnSync('systemctl', ['--user', 'kill', '--kill-whom=all', '--signal=SIGKILL', owned.unitName], { env: managerEnv, stdio: 'ignore', timeout: Math.max(1, remaining) })
+                : null;
+            if (!cleanup || cleanup.error || cleanup.status !== 0)
+                diagnostics.push('Owned systemd scope kill was unsuccessful or unverified.');
+        }
+        if (!child.pid)
+            return;
+        try {
+            if (process.platform === 'win32')
+                child.kill('SIGKILL');
+            else
+                process.kill(-child.pid, 'SIGKILL');
+        }
+        catch (error) {
+            if (!(error instanceof Error) || !('code' in error) || error.code !== 'ESRCH')
+                diagnostics.push(`Cleanup signal failed: ${String(error)}`);
+        }
+    };
+    const stop = (outcome) => {
+        if (stopRequested || finalized)
+            return;
+        stopRequested = true;
+        beginCleanup();
+        result.outcome = outcome;
+        killGroup();
+        // This is a bounded cleanup observation window, not extra scenario execution time.
+        cleanupTimer = setTimeout(() => {
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+            settle();
+        }, Math.max(0, beginCleanup() - Date.now()));
+    };
+    const collect = (chunks, value) => {
+        if (finalized)
+            return;
+        const retained = Math.min(bytesLeft, value.byteLength);
+        if (retained)
+            chunks.push(Buffer.from(value.subarray(0, retained)));
+        bytesLeft -= retained;
+        if (retained < value.byteLength) {
+            result.transcriptTruncated = true;
+            stop('transcript-limit');
+        }
+    };
+    child.stdout?.on('data', (value) => collect(stdout, value));
+    child.stderr?.on('data', (value) => collect(stderr, value));
+    child.once('error', (error) => {
+        if (finalized)
+            return;
+        diagnostics.push(error.message);
+        stop('spawn-failed');
+    });
+    child.once('close', (code, signal) => {
+        if (finalized)
+            return;
+        result.exitCode = code;
+        result.exitSignal = signal;
+        result.childClosed = true;
+        settle();
+    });
+    const abort = () => stop('cancelled');
+    invocation.signal?.addEventListener('abort', abort, { once: true });
+    const deadline = setTimeout(() => stop('deadline'), Math.max(0, invocation.deadlineAt - Date.now()));
+    if (invocation.signal?.aborted)
+        abort();
+    else if (Date.now() >= invocation.deadlineAt)
+        stop('deadline');
+    const scopePoll = setInterval(() => {
+        if (!stopRequested && !result.childClosed)
+            observeScope(false);
+    }, 25);
+    if (!stopRequested)
+        observeScope(false);
+    try {
+        await settled;
+    }
+    finally {
+        clearTimeout(deadline);
+        clearInterval(scopePoll);
+        if (cleanupTimer)
+            clearTimeout(cleanupTimer);
+        invocation.signal?.removeEventListener('abort', abort);
+        beginCleanup();
+        killGroup();
+        if (scope) {
+            do {
+                observeScope(true);
+                if (scope.removedAfter || scope.populatedAfter === false)
+                    break;
+                await new Promise((done) => setTimeout(done, Math.min(25, Math.max(0, beginCleanup() - Date.now()))));
+            } while (Date.now() < beginCleanup());
+            scope.verified =
+                result.childClosed &&
+                    scope.populatedBefore === true &&
+                    scope.observedMemberPids.length > 0 &&
+                    scope.memoryMaxBytes === invocation.memoryMaxMb * 1024 * 1024 &&
+                    scope.memorySwapMaxBytes === 0 &&
+                    (scope.removedAfter || scope.populatedAfter === false);
+        }
+        if (process.platform !== 'win32' && child.pid) {
+            try {
+                process.kill(-child.pid, 0);
+                result.processGroupGone = false;
+            }
+            catch (error) {
+                result.processGroupGone =
+                    error instanceof Error && 'code' in error && error.code === 'ESRCH' ? true : null;
+            }
+        }
+    }
+    finalized = true;
+    if (owned.mode === 'pgid')
+        diagnostics.push('Process-group fallback has no observed cgroup memory bound and cannot exclude escaped descendants.');
+    else if (!scope?.verified)
+        diagnostics.push('Owned scope membership, resource bounds or cleanup could not all be verified.');
+    else
+        diagnostics.push('Owned scope membership, memory/swap limits and empty cleanup were observed; this is not a complete provider lifecycle certificate.');
+    diagnostics.push('Synchronous manager probes and kernel reads are bounded cooperatively; timers do not preempt them. Cleanup gets at most one separate one-second observation window; elapsed time includes overruns.');
+    if (!result.childClosed || result.processGroupGone !== true)
+        diagnostics.push('Owned process cleanup is incomplete or unverified.');
+    const decode = (chunks) => {
+        try {
+            return new TextDecoder('utf-8', { fatal: true }).decode(Buffer.concat(chunks), {
+                stream: result.transcriptTruncated,
+            });
+        }
+        catch {
+            result.transcriptTruncated = true;
+            diagnostics.push('Invalid UTF-8 transcript could not be rendered; evidence is incomplete.');
+            return '';
+        }
+    };
+    result.stdout = decode(stdout);
+    result.stderr = decode(stderr);
+    result.endedAt = new Date().toISOString();
+    result.elapsedMs = Date.now() - started;
+    return result;
+}
+//# sourceMappingURL=provider-verification.js.map

package/dist/harnesses/provider-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-verification.js","sourceRoot":"","sources":["../../src/harnesses/provider-verification.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAE3G,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAOrE,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAEtE,MAAM,cAAc,GAAG;IACrB,MAAM;IACN,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,QAAQ;IACR,KAAK;IACL,MAAM;IACN,WAAW;IACX,kBAAkB;IAClB,WAAW;IACX,mBAAmB;IACnB,UAAU;IACV,YAAY;IACZ,iBAAiB;IACjB,aAAa;IACb,mBAAmB;IACnB,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,iBAAiB;CACT,CAAC;AAEX,mFAAmF;AACnF,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,CACL,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAC5F,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAgC;IAC5E,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,aAAa;YAChB,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QACpE,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC5D,KAAK,MAAM;YACT,OAAO,CAAC,iBAAiB,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;QACxD;YACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,kBAAkB,CAC/B,KAAqC;IAErC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;QACpD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;QACvC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QAEvC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAChD,KAAK,CAAC,mBAAmB,GAAG,IAAI;QAChC,KAAK,CAAC,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QAE5C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QACxC,KAAK,CAAC,WAAW,GAAG,GAAG;QACvB,KAAK,CAAC,WAAW,GAAG,IAAI;QAExB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,IACE,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;QAChC,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9B,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QAE7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3F,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,mCAAmC,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE;YAC1E,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,mCAAmC,CAAC,CAAC;QAC3E,WAAW,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;IAClC,CAAC;IACD,IAAI,WAAW,CAAC,WAAW,CAAC,KAAK,WAAW,IAAI,WAAW,CAAC,mBAAmB,CAAC,KAAK,WAAW;QAC9F,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,UAAU;QAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAqC;IAErC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,qEAAqE;IACrE,MAAM,QAAQ,GAAG;QACf,GAAG,KAAK;QACR,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE;QACrC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS;KAC/E,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC1F,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,UAAU;YACrC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,UAAU;QACrC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG;QAClB,gHAAgH;QAChH,wGAAwG;QACxG,0FAA0F;QAC1F,4GAA4G;KAC7G,CAAC;IACF,MAAM,MAAM,GAAsC;QAChD,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,UAAU,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE;QAC/D,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;QAC1C,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,mBAAmB,EAAE,KAAK;QAC1B,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,YAAY;QAC3B,WAAW;KACZ,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CACxB,cAAc,EACd,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAC5B;QACE,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;QACpC,GAAG,EAAE,UAAU,CAAC,WAAW;QAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,EACD;QACE,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,GAAG,UAAU,CAAC,YAAY,IAAI,UAAU,EAAE,EAAE;QACrD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,SAAS,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;QAC3E,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,WAAW,GAAG,EAAE;KACvD,CACF,CAAC;IACF,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;IAChC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc;QAC1C,CAAC,CAAC;YACE,GAAG,UAAU,CAAC,WAAW;YACzB,eAAe,EAAE,UAAU,CAAC,cAAc,CAAC,gBAAgB;YAC3D,wBAAwB,EACtB,UAAU,CAAC,cAAc,CAAC,UAAU;gBACpC,aAAa,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE;SACzE;QACH,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ;QACxC,CAAC,CAAC;YACE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,kBAAkB,EAAE,EAAE;YACtB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,KAAK;SAChB;QACH,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,EAAE;QAC1C,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QAC1C,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,IAAI,eAAmC,CAAC;IACxC,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE;QACtC,IACE,CAAC,KAAK;YACN,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;YAE9D,OAAO;QACT,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChF,IAAI,SAAS,IAAI,CAAC;oBAAE,OAAO;gBAC3B,MAAM,KAAK,GAAG,SAAS,CACrB,WAAW,EACX,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,yBAAyB,EAAE,SAAS,CAAC,EACxE;oBACE,GAAG,EAAE,UAAU;oBACf,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;oBACjC,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;iBACpC,CACF,CAAC;gBACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBACtC,eAAe,CAAC,uEAAuE,CAAC,CAAC;oBACzF,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClC,4EAA4E;gBAC5E,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;oBACtB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC/B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAErC,OAAO;gBACT,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;YAC3B,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,KAAK;gBAAE,KAAK,CAAC,cAAc,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC;iBAChF,CAAC;gBACJ,KAAK,CAAC,eAAe;oBACnB,KAAK,CAAC,eAAe,KAAK,IAAI;wBAC5B,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,SAAS,KAAK,SAAS;4BACvB,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC;gBAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7E,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpE,KAAK,CAAC,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1F,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;oBAAE,OAAO;gBAClC,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,UAAU;wBAAE,OAAO;oBAChD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,SAAS;oBACpC,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,MAAM,SAAS,EAAE,MAAM,CAAC,CAAC;oBAClE,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;wBAC3D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjC,CAAC;gBACD,KAAK,CAAC,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,kBAAkB,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK;gBACL,KAAK,CAAC,eAAe,KAAK,IAAI;gBAC9B,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;gBACnC,KAAK,YAAY,KAAK;gBACtB,MAAM,IAAI,KAAK;gBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAC9B,CAAC;;gBACC,eAAe,CACb,wFAAwF,CACzF,CAAC;YACJ,oFAAoF;QACtF,CAAC;IACH,CAAC,CAAC;IACF,IAAI,SAAS,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,YAAuD,CAAC;IAC5D,IAAI,MAAM,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;QACzC,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtE,kBAAkB,GAAG,IAAI,CAAC;YAC1B,MAAM,SAAS,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,OAAO,GACX,SAAS,GAAG,CAAC;gBACX,CAAC,CAAC,SAAS,CACP,WAAW,EACX,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,EACzE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CACtE;gBACH,CAAC,CAAC,IAAI,CAAC;YACX,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBACnD,WAAW,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,OAAO;QACvB,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAC3E,WAAW,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,OAAqD,EAAE,EAAE;QACrE,IAAI,aAAa,IAAI,SAAS;YAAE,OAAO;QACvC,aAAa,GAAG,IAAI,CAAC;QACrB,YAAY,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,SAAS,EAAE,CAAC;QACZ,mFAAmF;QACnF,YAAY,GAAG,UAAU,CACvB,GAAG,EAAE;YACH,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC;QACX,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,EAAE;QAClD,IAAI,SAAS;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpE,SAAS,IAAI,QAAQ,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,SAAS;YAAE,OAAO;QACtB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QACnC,IAAI,SAAS;YAAE,OAAO;QACtB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC;QAC3B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EACtB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAChD,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO;QAAE,KAAK,EAAE,CAAC;SACnC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,IAAI,CAAC,aAAa;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,YAAY;YAAE,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,UAAU,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvD,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,CAAC;QACZ,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC;gBACF,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK;oBAAE,MAAM;gBAChE,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAC/B,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CACzE,CAAC;YACJ,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,EAAE;YACtC,KAAK,CAAC,QAAQ;gBACZ,MAAM,CAAC,WAAW;oBAClB,KAAK,CAAC,eAAe,KAAK,IAAI;oBAC9B,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;oBACnC,KAAK,CAAC,cAAc,KAAK,UAAU,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI;oBAC7D,KAAK,CAAC,kBAAkB,KAAK,CAAC;oBAC9B,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,gBAAgB;oBACrB,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IACD,SAAS,GAAG,IAAI,CAAC;IACjB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QACvB,WAAW,CAAC,IAAI,CACd,oGAAoG,CACrG,CAAC;SACC,IAAI,CAAC,KAAK,EAAE,QAAQ;QACvB,WAAW,CAAC,IAAI,CACd,+EAA+E,CAChF,CAAC;;QAEF,WAAW,CAAC,IAAI,CACd,oIAAoI,CACrI,CAAC;IACJ,WAAW,CAAC,IAAI,CACd,qMAAqM,CACtM,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;QACzD,WAAW,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC7E,MAAM,EAAE,MAAM,CAAC,mBAAmB;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YAC5F,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/registry/__tests__/provider-matrix.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider-matrix.test.d.ts.map

package/dist/registry/__tests__/provider-matrix.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-matrix.test.d.ts","sourceRoot":"","sources":["../../../src/registry/__tests__/provider-matrix.test.ts"],"names":[],"mappings":""}

package/dist/registry/__tests__/provider-matrix.test.js

@@ -0,0 +1,111 @@
+import * as fs from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { ProviderMatrix } from '../provider-matrix.js';
+vi.mock('node:fs/promises', { spy: true });
+let root;
+beforeEach(async () => {
+    root = await fs.mkdtemp(join(tmpdir(), 'provider-source-inspection-'));
+});
+afterEach(async () => {
+    vi.restoreAllMocks();
+    await fs.rm(root, { recursive: true, force: true });
+});
+describe('ProviderMatrix evidence boundaries', () => {
+    it('reports absent source separately from diagnostic failure and live capability', async () => {
+        const rows = await new ProviderMatrix(join(root, 'absent')).getMatrix();
+        expect(rows).toHaveLength(9);
+        for (const row of rows) {
+            expect(row.source).toMatchObject({ status: 'missing', diagnostics: [] });
+            expect(row.installed).toBe(false);
+            for (const report of [row.externalCli, row.programmaticSpawn]) {
+                expect(report.identity).toBeNull();
+                for (const assessment of Object.values(report.levels)) {
+                    expect(assessment.status).toBe('unverified');
+                    expect(assessment.evidence).toEqual([]);
+                }
+            }
+        }
+        expect(await new ProviderMatrix(join(root, 'absent')).listInstalledProviderIds()).toEqual([]);
+    });
+    it('does not certify source stubs, comment-only hooks, versions, or self-authored certificates', async () => {
+        const provider = join(root, 'claude-code');
+        await fs.mkdir(provider);
+        await fs.writeFile(join(provider, 'spawn.ts'), '// Not an implementation; version 2.1.274\n');
+        await fs.writeFile(join(provider, 'hooks.ts'), '// PreToolUse Stop StopEvent\n');
+        await fs.writeFile(join(provider, 'certification.json'), JSON.stringify({
+            installed: true,
+            workflow: 'passed',
+            lifecycle: 'passed',
+            receipts: ['invented'],
+        }));
+        const row = (await new ProviderMatrix(root).getMatrix()).find((r) => r.providerId === 'claude-code');
+        expect(row).toMatchObject({
+            installed: true,
+            spawnImplemented: true,
+            hookSupport: 2,
+            source: { status: 'present', directory: provider, hookNameMentions: 2, diagnostics: [] },
+        });
+        expect(row?.externalCli.channel).toBe('external-cli');
+        expect(row?.programmaticSpawn.channel).toBe('programmatic-spawn');
+        for (const report of [row?.externalCli, row?.programmaticSpawn]) {
+            expect(report?.identity).toBeNull();
+            expect(Object.values(report?.levels ?? {}).map((level) => level.status)).toEqual(Array(5).fill('unverified'));
+            expect(report?.limitations.join(' ')).toContain('Permission policy');
+        }
+    });
+    it('does not confuse Kimi API adapter source with external Kimi CLI installation', async () => {
+        await fs.mkdir(join(root, 'kimi'));
+        await fs.writeFile(join(root, 'kimi', 'spawn.ts'), '// Moonshot API adapter\n');
+        const row = (await new ProviderMatrix(root).getMatrix()).find((r) => r.providerId === 'kimi');
+        expect(row?.source.spawnFilePresent).toBe(true);
+        expect(row?.externalCli.levels.installed.status).toBe('unverified');
+        expect(row?.externalCli.identity).toBeNull();
+        expect(row?.programmaticSpawn.levels.workflow.status).toBe('unverified');
+    });
+    it('reports wrong provider path type as a failed diagnostic', async () => {
+        await fs.writeFile(join(root, 'codex'), 'not a directory');
+        const row = (await new ProviderMatrix(root).getMatrix()).find((r) => r.providerId === 'codex');
+        expect(row?.source.status).toBe('failed');
+        expect(row?.source.diagnostics[0]).toContain('Expected directory');
+        expect(row?.externalCli.levels.workflow.status).toBe('unverified');
+    });
+    it('does not treat a directory called spawn.ts as executable source', async () => {
+        await fs.mkdir(join(root, 'codex', 'spawn.ts'), { recursive: true });
+        const row = (await new ProviderMatrix(root).getMatrix()).find((r) => r.providerId === 'codex');
+        expect(row?.source).toMatchObject({
+            status: 'failed',
+            directoryPresent: true,
+            spawnFilePresent: false,
+        });
+        expect(row?.source.diagnostics[0]).toContain('Expected file');
+    });
+    it('retains hook read failure explicitly rather than claiming zero supported hooks', async () => {
+        await fs.mkdir(join(root, 'codex'));
+        await fs.writeFile(join(root, 'codex', 'hooks.ts'), 'PreToolUse');
+        vi.mocked(fs.readFile).mockRejectedValueOnce(new Error('injected hook read failure'));
+        const row = (await new ProviderMatrix(root).getMatrix()).find((r) => r.providerId === 'codex');
+        expect(row?.source).toMatchObject({
+            status: 'failed',
+            diagnostics: ['injected hook read failure'],
+        });
+        expect(row?.programmaticSpawn.levels.lifecycle.status).toBe('unverified');
+    });
+    it('does not convert a broken inventory root into an empty healthy list', async () => {
+        const badRoot = join(root, 'file');
+        await fs.writeFile(badRoot, 'not a directory');
+        const matrix = new ProviderMatrix(badRoot);
+        await expect(matrix.listInstalledProviderIds()).rejects.toMatchObject({ code: 'ENOTDIR' });
+        const rows = await matrix.getMatrix();
+        expect(rows.every((row) => row.source.status === 'failed')).toBe(true);
+        expect(rows.every((row) => row.source.diagnostics.length === 1)).toBe(true);
+    });
+    it('preserves discovery of unknown source directories without claiming live support', async () => {
+        await fs.mkdir(join(root, 'experimental'));
+        await fs.writeFile(join(root, 'README'), 'source inventory');
+        expect(await new ProviderMatrix(root).listInstalledProviderIds()).toEqual(['experimental']);
+        expect((await new ProviderMatrix(root).getMatrix()).some((row) => row.providerId === 'experimental')).toBe(false);
+    });
+});
+//# sourceMappingURL=provider-matrix.test.js.map

package/dist/registry/__tests__/provider-matrix.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-matrix.test.js","sourceRoot":"","sources":["../../../src/registry/__tests__/provider-matrix.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AAE3C,IAAI,IAAY,CAAC;AACjB,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,IAAI,GAAG,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACnC,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAC7C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,6CAA6C,CAAC,CAAC;QAC9F,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,gCAAgC,CAAC,CAAC;QACjF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC;YACb,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB,CAAC,CACH,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,aAAa,CACtC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;SACzF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAC9E,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAC5B,CAAC;YACF,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC;YAChC,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;QAClE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC;YAChC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC,4BAA4B,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5F,MAAM,CACJ,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,cAAc,CAAC,CAC9F,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}