@codemem/server 0.44.0-alpha.1 → 0.44.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/dist/index.d.ts.map +1 -1
  2. package/dist/index.js +640 -53
  3. package/dist/index.js.map +1 -1
  4. package/dist/routes/diagnostics.d.ts +31 -0
  5. package/dist/routes/diagnostics.d.ts.map +1 -0
  6. package/dist/routes/memory.d.ts.map +1 -1
  7. package/dist/routes/pack.d.ts.map +1 -1
  8. package/dist/routes/stats.d.ts.map +1 -1
  9. package/dist/routes/team-setup-view.d.ts +2 -1
  10. package/dist/routes/team-setup-view.d.ts.map +1 -1
  11. package/dist/routes/team-setup.d.ts +20 -1
  12. package/dist/routes/team-setup.d.ts.map +1 -1
  13. package/package.json +2 -2
  14. package/static/app.js +41 -41
  15. package/static/app.js.br +0 -0
  16. package/static/app.js.gz +0 -0
  17. package/static/index.html +184 -21
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","names":[],"sources":["../src/middleware.ts","../src/request-rate-limit.ts","../src/routes/config.ts","../src/routes/health.ts","../src/helpers.ts","../src/routes/memory.ts","../src/routes/observer-status.ts","../src/routes/target-validation.ts","../src/routes/pack.ts","../src/routes/raw-events.ts","../src/routes/stats.ts","../src/routes/team-setup-view.ts","../src/routes/team-setup.ts","../src/routes/sync.ts","../src/routes/update-status.ts","../src/index.ts"],"sourcesContent":["/**\n * CORS and cross-origin protection middleware.\n *\n * Ports Python's reject_cross_origin() logic from codemem/viewer_http.py.\n * GETs are allowed from any origin by default (viewer is local-only).\n * Callers can mark side-effecting GET path prefixes as unsafe.\n * Mutations (POST/DELETE/PATCH/PUT) require an Origin header matching a\n * loopback address, or are rejected with 403.\n */\n\nimport type { Context, Next } from \"hono\";\nimport { createMiddleware } from \"hono/factory\";\n\nconst LOOPBACK_HOSTS = new Set([\"127.0.0.1\", \"localhost\", \"::1\"]);\n\n/**\n * Check whether an Origin header value is a valid loopback URL.\n * Mirrors Python's _is_allowed_loopback_origin_url().\n */\nfunction isLoopbackOrigin(origin: string): boolean {\n\tlet url: URL;\n\ttry {\n\t\turl = new URL(origin);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (url.protocol !== \"http:\" && url.protocol !== \"https:\") return false;\n\tif (url.username || url.password) return false;\n\tconst hostname = url.hostname.startsWith(\"[\") ? url.hostname.slice(1, -1) : url.hostname;\n\treturn LOOPBACK_HOSTS.has(hostname);\n}\n\n/** HTTP methods that mutate state and require origin validation. */\nconst UNSAFE_METHODS = new Set([\"POST\", \"DELETE\", \"PATCH\", \"PUT\"]);\n\n/**\n * Check whether a missing-Origin request looks like a cross-site browser\n * request. Matches Python's `_is_unsafe_missing_origin()`:\n *\n * - Sec-Fetch-Site present and NOT same-origin/same-site/none → unsafe\n * - Referer present and NOT loopback → unsafe\n * - Otherwise → safe (CLI / programmatic caller, no browser context)\n */\nfunction isUnsafeMissingOrigin(c: Context): boolean {\n\tconst secFetchSite = (c.req.header(\"Sec-Fetch-Site\") ?? \"\").trim().toLowerCase();\n\tif (secFetchSite && ![\"same-origin\", \"same-site\", \"none\"].includes(secFetchSite)) {\n\t\treturn true;\n\t}\n\tconst referer = c.req.header(\"Referer\");\n\tif (!referer) return false;\n\treturn !isLoopbackOrigin(referer);\n}\n\n/**\n * Cross-origin protection middleware.\n *\n * Ports Python's `reject_cross_origin(missing_origin_policy=\"reject_if_unsafe\")`:\n *\n * - GET/HEAD/OPTIONS: allowed from any origin unless the caller marks a\n * side-effecting GET path prefix as unsafe.\n * - POST/DELETE/PATCH/PUT:\n * - Origin present + loopback → allowed (browser on localhost)\n * - Origin present + non-loopback → rejected 403\n * - No Origin + no suspicious browser signals → allowed (CLI callers)\n * - No Origin + suspicious Sec-Fetch-Site/Referer → rejected 403\n *\n * For same-origin requests (no Origin header) on safe methods, no\n * Access-Control-Allow-Origin is set — the browser doesn't need it.\n * For valid loopback origins, ACAO is echoed back.\n */\nexport function originGuard(options?: { unsafeGetPathPrefixes?: readonly string[] }) {\n\treturn createMiddleware(async (c: Context, next: Next) => {\n\t\tconst origin = c.req.header(\"Origin\");\n\t\tconst method = c.req.method;\n\t\tconst unsafeGet =\n\t\t\t(method === \"GET\" || method === \"HEAD\") &&\n\t\t\toptions?.unsafeGetPathPrefixes?.some((prefix) => c.req.path.startsWith(prefix));\n\n\t\tif (UNSAFE_METHODS.has(method) || unsafeGet) {\n\t\t\tif (origin) {\n\t\t\t\t// Origin present — must be loopback\n\t\t\t\tif (!isLoopbackOrigin(origin)) {\n\t\t\t\t\treturn c.json({ error: \"forbidden\" }, 403);\n\t\t\t\t}\n\t\t\t\t// Valid loopback origin — echo it for CORS\n\t\t\t\tc.header(\"Access-Control-Allow-Origin\", origin);\n\t\t\t\tc.header(\"Access-Control-Allow-Methods\", \"GET, POST, PUT, DELETE, OPTIONS\");\n\t\t\t\tc.header(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\t\t\t} else {\n\t\t\t\t// No Origin — reject only if browser signals indicate cross-site\n\t\t\t\t// (matches Python's reject_if_unsafe policy for API endpoints)\n\t\t\t\tif (isUnsafeMissingOrigin(c)) {\n\t\t\t\t\treturn c.json({ error: \"forbidden\" }, 403);\n\t\t\t\t}\n\t\t\t\t// CLI / programmatic caller — no CORS headers needed\n\t\t\t}\n\t\t} else if (origin && isLoopbackOrigin(origin)) {\n\t\t\t// Safe method with valid origin — echo for preflight\n\t\t\tc.header(\"Access-Control-Allow-Origin\", origin);\n\t\t\tc.header(\"Access-Control-Allow-Methods\", \"GET, POST, PUT, DELETE, OPTIONS\");\n\t\t\tc.header(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\t\t}\n\t\t// No origin or non-loopback on safe method: no ACAO header set.\n\t\t// Browser enforces same-origin; we don't set permissive headers.\n\n\t\tawait next();\n\t});\n}\n\n/**\n * Handle OPTIONS preflight requests.\n * Returns 204 with appropriate CORS headers for loopback origins.\n */\nexport function preflightHandler() {\n\treturn createMiddleware(async (c: Context, next: Next) => {\n\t\tif (c.req.method !== \"OPTIONS\") {\n\t\t\tawait next();\n\t\t\treturn;\n\t\t}\n\t\tconst origin = c.req.header(\"Origin\");\n\t\tif (origin && isLoopbackOrigin(origin)) {\n\t\t\tc.header(\"Access-Control-Allow-Origin\", origin);\n\t\t\tc.header(\"Access-Control-Allow-Methods\", \"GET, POST, PUT, DELETE, OPTIONS\");\n\t\t\tc.header(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\t\t\tc.header(\"Access-Control-Max-Age\", \"86400\");\n\t\t\treturn c.body(null, 204);\n\t\t}\n\t\treturn c.body(null, 204);\n\t});\n}\n","import { RateLimiter } from \"limiter\";\n\nexport interface InMemoryRequestRateLimiter {\n\tcheck(key: string, limit: number): { allowed: boolean; retryAfterS: number };\n}\n\nexport function createInMemoryRequestRateLimiter(windowMs = 60_000): InMemoryRequestRateLimiter {\n\tconst safeWindowMs = Math.max(1000, Math.trunc(windowMs));\n\tconst buckets = new Map<string, { limiter: RateLimiter; lastUsedAt: number }>();\n\tlet checks = 0;\n\n\tfunction estimatedRetryAfterS(limit: number): number {\n\t\treturn Math.max(1, Math.ceil(safeWindowMs / Math.max(1, limit) / 1000));\n\t}\n\n\tfunction cleanupExpiredBuckets(currentNow: number): void {\n\t\tif (buckets.size < 64 || checks % 64 !== 0) return;\n\t\tconst staleBefore = currentNow - safeWindowMs * 10;\n\t\tfor (const [key, bucket] of buckets) {\n\t\t\tif (bucket.lastUsedAt < staleBefore) buckets.delete(key);\n\t\t}\n\t}\n\n\treturn {\n\t\tcheck(key: string, limit: number) {\n\t\t\tchecks += 1;\n\t\t\tconst currentNow = Date.now();\n\t\t\tcleanupExpiredBuckets(currentNow);\n\t\t\tconst safeLimit = Math.max(1, Math.trunc(limit));\n\t\t\tconst bucketKey = `${safeLimit}:${key}`;\n\t\t\tlet bucket = buckets.get(bucketKey);\n\t\t\tif (!bucket) {\n\t\t\t\tbucket = {\n\t\t\t\t\tlimiter: new RateLimiter({\n\t\t\t\t\t\ttokensPerInterval: safeLimit,\n\t\t\t\t\t\tinterval: safeWindowMs,\n\t\t\t\t\t\tfireImmediately: true,\n\t\t\t\t\t}),\n\t\t\t\t\tlastUsedAt: currentNow,\n\t\t\t\t};\n\t\t\t\tbuckets.set(bucketKey, bucket);\n\t\t\t}\n\t\t\tbucket.lastUsedAt = currentNow;\n\t\t\tif (bucket.limiter.tryRemoveTokens(1)) {\n\t\t\t\treturn { allowed: true, retryAfterS: 0 };\n\t\t\t}\n\t\t\treturn { allowed: false, retryAfterS: estimatedRetryAfterS(safeLimit) };\n\t\t},\n\t};\n}\n","/**\n * Config routes — GET /api/config, POST /api/config.\n *\n * Ports the user-facing config read/write path from Python's\n * codemem/viewer_routes/config.py, scoped to the TS runtime's current needs.\n */\n\nimport {\n\tCODEMEM_CONFIG_ENV_OVERRIDES,\n\tcoerceObserverCommand,\n\tgetCodememConfigPath,\n\tgetCodememEnvOverrides,\n\tlistObserverProviderOptions,\n\ttype RawEventSweeper,\n\treadCodememConfigFile,\n\twriteCodememConfigFile,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\ntype ConfigData = Record<string, unknown>;\n\nconst REDACTED_VALUE = \"[redacted]\";\n\nconst RUNTIMES = new Set([\"api_http\", \"claude_sidecar\", \"codex_sidecar\"]);\nconst AUTH_SOURCES = new Set([\"auto\", \"env\", \"file\", \"command\", \"none\"]);\nconst HOT_RELOAD_KEYS = new Set([\"raw_events_sweeper_interval_s\"]);\nconst PROTECTED_WRITE_KEYS = new Set<string>([\n\t\"claude_command\",\n\t\"codex_command\",\n\t\"observer_base_url\",\n\t\"observer_auth_file\",\n\t\"observer_auth_command\",\n\t\"observer_headers\",\n\t\"sync_coordinator_url\",\n] as const);\nconst SECRET_CONFIG_KEYS = new Set<string>([\n\t\"observer_auth_file\",\n\t\"observer_auth_command\",\n\t\"observer_headers\",\n\t\"sync_coordinator_admin_secret\",\n] as const);\nconst REMOVED_CONFIG_KEYS = new Set<string>([\"observer_rich_openai_use_responses\"]);\nconst ALLOWED_KEYS = [\n\t\"claude_command\",\n\t\"codex_command\",\n\t\"observer_base_url\",\n\t\"observer_provider\",\n\t\"observer_model\",\n\t\"observer_tier_routing_enabled\",\n\t\"observer_simple_model\",\n\t\"observer_simple_temperature\",\n\t\"observer_reasoning_effort\",\n\t\"observer_reasoning_summary\",\n\t\"observer_rich_model\",\n\t\"observer_rich_temperature\",\n\t\"observer_rich_reasoning_effort\",\n\t\"observer_rich_reasoning_summary\",\n\t\"observer_rich_max_output_tokens\",\n\t\"observer_runtime\",\n\t\"observer_auth_source\",\n\t\"observer_auth_file\",\n\t\"observer_auth_command\",\n\t\"observer_auth_timeout_ms\",\n\t\"observer_auth_cache_ttl_s\",\n\t\"observer_headers\",\n\t\"observer_max_chars\",\n\t\"pack_observation_limit\",\n\t\"pack_session_limit\",\n\t\"sync_enabled\",\n\t\"sync_retention_enabled\",\n\t\"sync_retention_max_age_days\",\n\t\"sync_retention_max_size_mb\",\n\t\"sync_host\",\n\t\"sync_port\",\n\t\"sync_interval_s\",\n\t\"sync_mdns\",\n\t\"sync_coordinator_url\",\n\t\"sync_coordinator_group\",\n\t\"sync_coordinator_timeout_s\",\n\t\"sync_coordinator_presence_ttl_s\",\n\t\"raw_events_sweeper_interval_s\",\n] as const;\n\nconst DEFAULTS: ConfigData = {\n\tclaude_command: [\"claude\"],\n\tcodex_command: [\"codex\"],\n\tobserver_runtime: \"api_http\",\n\tobserver_auth_source: \"auto\",\n\tobserver_tier_routing_enabled: false,\n\tobserver_auth_command: [],\n\tobserver_auth_timeout_ms: 1500,\n\tobserver_auth_cache_ttl_s: 300,\n\tobserver_headers: {},\n\tobserver_max_chars: 12000,\n\tpack_observation_limit: 50,\n\tpack_session_limit: 10,\n\tsync_enabled: false,\n\tsync_retention_enabled: false,\n\tsync_retention_max_age_days: 30,\n\tsync_retention_max_size_mb: 512,\n\tsync_host: \"0.0.0.0\",\n\tsync_port: 7337,\n\tsync_interval_s: 120,\n\tsync_mdns: true,\n\tsync_coordinator_timeout_s: 3,\n\tsync_coordinator_presence_ttl_s: 180,\n\traw_events_sweeper_interval_s: 30,\n};\n\nexport interface ConfigRouteOptions {\n\tgetSweeper?: () => RawEventSweeper | null;\n}\n\nfunction loadProviderOptions(): string[] {\n\treturn listObserverProviderOptions();\n}\n\nfunction withoutRemovedConfigKeys(configData: ConfigData): ConfigData {\n\tconst next = { ...configData };\n\tfor (const key of REMOVED_CONFIG_KEYS) {\n\t\tdelete next[key];\n\t}\n\treturn next;\n}\n\nfunction getEffectiveConfig(configData: ConfigData): ConfigData {\n\tconst effective: ConfigData = { ...DEFAULTS, ...configData };\n\tfor (const key of [\"claude_command\", \"codex_command\"] as const) {\n\t\teffective[key] = coerceObserverCommand(effective[key]) ?? DEFAULTS[key];\n\t}\n\tfor (const [key, envVar] of Object.entries(CODEMEM_CONFIG_ENV_OVERRIDES) as Array<\n\t\t[string, string]\n\t>) {\n\t\tconst val = process.env[envVar];\n\t\tif (val == null || val === \"\") continue;\n\t\tif (key === \"claude_command\" || key === \"codex_command\") {\n\t\t\teffective[key] = coerceObserverCommand(val) ?? effective[key];\n\t\t} else {\n\t\t\teffective[key] = val;\n\t\t}\n\t}\n\treturn effective;\n}\n\nfunction redactConfigValue(key: string, value: unknown): unknown {\n\tif (value == null || !SECRET_CONFIG_KEYS.has(key)) return value;\n\tif (Array.isArray(value)) return value.length > 0 ? REDACTED_VALUE : [];\n\tif (typeof value === \"object\") {\n\t\treturn Object.keys(value as Record<string, unknown>).length > 0 ? REDACTED_VALUE : {};\n\t}\n\tif (typeof value === \"string\") return value.trim() ? REDACTED_VALUE : \"\";\n\treturn REDACTED_VALUE;\n}\n\nfunction sanitizeConfigForResponse(configData: ConfigData): ConfigData {\n\tconst sanitized: ConfigData = {};\n\tfor (const [key, value] of Object.entries(configData)) {\n\t\tsanitized[key] = redactConfigValue(key, value);\n\t}\n\treturn sanitized;\n}\n\nfunction configValuesEqual(left: unknown, right: unknown): boolean {\n\tif (Object.is(left, right)) return true;\n\tif (left == null || right == null) return left == null && right == null;\n\tif (typeof left === \"object\" || typeof right === \"object\") {\n\t\treturn JSON.stringify(left) === JSON.stringify(right);\n\t}\n\treturn false;\n}\n\nfunction partitionViewerUpdates(\n\tupdates: ConfigData,\n\tbeforeConfig: ConfigData,\n): { allowedUpdates: ConfigData; error: string | null } {\n\tconst allowedUpdates: ConfigData = {};\n\tfor (const [key, value] of Object.entries(updates)) {\n\t\tif (!PROTECTED_WRITE_KEYS.has(key)) {\n\t\t\tallowedUpdates[key] = value;\n\t\t\tcontinue;\n\t\t}\n\t\tif (SECRET_CONFIG_KEYS.has(key) && value === REDACTED_VALUE) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (configValuesEqual(value, beforeConfig[key])) {\n\t\t\tcontinue;\n\t\t}\n\t\treturn {\n\t\t\tallowedUpdates: {},\n\t\t\terror: `${key} cannot be changed from the viewer API; edit the config file or environment instead`,\n\t\t};\n\t}\n\treturn { allowedUpdates, error: null };\n}\n\nfunction parsePositiveInt(value: unknown, allowZero = false): number | null {\n\tif (typeof value === \"boolean\") return null;\n\tconst parsed =\n\t\ttypeof value === \"number\"\n\t\t\t? value\n\t\t\t: typeof value === \"string\" && /^-?\\d+$/.test(value.trim())\n\t\t\t\t? Number(value.trim())\n\t\t\t\t: Number.NaN;\n\tif (!Number.isFinite(parsed) || !Number.isInteger(parsed)) return null;\n\tif (allowZero) return parsed >= 0 ? parsed : null;\n\treturn parsed > 0 ? parsed : null;\n}\n\nfunction parseFiniteNumber(value: unknown, allowZero = true): number | null {\n\tif (typeof value === \"boolean\") return null;\n\tconst parsed =\n\t\ttypeof value === \"number\"\n\t\t\t? value\n\t\t\t: typeof value === \"string\" && value.trim().length > 0\n\t\t\t\t? Number(value.trim())\n\t\t\t\t: Number.NaN;\n\tif (!Number.isFinite(parsed)) return null;\n\tif (allowZero) return parsed >= 0 ? parsed : null;\n\treturn parsed > 0 ? parsed : null;\n}\n\nfunction asStringMap(value: unknown): Record<string, string> | null {\n\tif (value == null || typeof value !== \"object\" || Array.isArray(value)) return null;\n\tconst parsed: Record<string, string> = {};\n\tfor (const [key, item] of Object.entries(value)) {\n\t\tif (typeof item !== \"string\") return null;\n\t\tconst stripped = key.trim();\n\t\tif (!stripped) return null;\n\t\tparsed[stripped] = item;\n\t}\n\treturn parsed;\n}\n\nfunction asExecutableArgv(value: unknown): string[] | null {\n\tif (!Array.isArray(value)) return null;\n\tconst argv: string[] = [];\n\tfor (const item of value) {\n\t\tif (typeof item !== \"string\") return null;\n\t\tconst token = item.trim();\n\t\tif (!token) return null;\n\t\targv.push(token);\n\t}\n\treturn argv;\n}\n\nfunction validateAndApplyUpdate(\n\tconfigData: ConfigData,\n\tkey: (typeof ALLOWED_KEYS)[number],\n\tvalue: unknown,\n\tproviders: Set<string>,\n): string | null {\n\tif (value == null || value === \"\") {\n\t\tdelete configData[key];\n\t\treturn null;\n\t}\n\tif (key === \"observer_provider\") {\n\t\tif (typeof value !== \"string\") return \"observer_provider must be string\";\n\t\tconst provider = value.trim().toLowerCase();\n\t\tconst savedBaseUrl = configData.observer_base_url;\n\t\tconst hasSavedBaseUrl = typeof savedBaseUrl === \"string\" && savedBaseUrl.trim().length > 0;\n\t\tif (!providers.has(provider) && !hasSavedBaseUrl) {\n\t\t\treturn \"observer_provider must match a configured provider\";\n\t\t}\n\t\tconfigData[key] = provider;\n\t\treturn null;\n\t}\n\tif (key === \"observer_runtime\") {\n\t\tif (typeof value !== \"string\") return \"observer_runtime must be string\";\n\t\tconst runtime = value.trim().toLowerCase();\n\t\tif (!RUNTIMES.has(runtime)) {\n\t\t\treturn \"observer_runtime must be one of: api_http, claude_sidecar, codex_sidecar\";\n\t\t}\n\t\tconfigData[key] = runtime;\n\t\treturn null;\n\t}\n\tif (key === \"observer_auth_source\") {\n\t\tif (typeof value !== \"string\") return \"observer_auth_source must be string\";\n\t\tconst source = value.trim().toLowerCase();\n\t\tif (!AUTH_SOURCES.has(source)) {\n\t\t\treturn \"observer_auth_source must be one of: auto, env, file, command, none\";\n\t\t}\n\t\tconfigData[key] = source;\n\t\treturn null;\n\t}\n\tif (key === \"claude_command\" || key === \"codex_command\" || key === \"observer_auth_command\") {\n\t\tconst argv = asExecutableArgv(value);\n\t\tif (argv == null) return `${key} must be string array`;\n\t\tif (argv.length > 0) configData[key] = argv;\n\t\telse delete configData[key];\n\t\treturn null;\n\t}\n\tif (key === \"observer_headers\") {\n\t\tconst headers = asStringMap(value);\n\t\tif (headers == null) return \"observer_headers must be object of string values\";\n\t\tif (Object.keys(headers).length > 0) configData[key] = headers;\n\t\telse delete configData[key];\n\t\treturn null;\n\t}\n\tif (key === \"sync_enabled\" || key === \"sync_retention_enabled\" || key === \"sync_mdns\") {\n\t\tif (typeof value !== \"boolean\") return `${key} must be boolean`;\n\t\tconfigData[key] = value;\n\t\treturn null;\n\t}\n\tif (key === \"observer_tier_routing_enabled\") {\n\t\tif (typeof value !== \"boolean\") return `${key} must be boolean`;\n\t\tconfigData[key] = value;\n\t\treturn null;\n\t}\n\tif (\n\t\tkey === \"observer_base_url\" ||\n\t\tkey === \"observer_model\" ||\n\t\tkey === \"observer_simple_model\" ||\n\t\tkey === \"observer_reasoning_effort\" ||\n\t\tkey === \"observer_reasoning_summary\" ||\n\t\tkey === \"observer_rich_model\" ||\n\t\tkey === \"observer_rich_reasoning_effort\" ||\n\t\tkey === \"observer_rich_reasoning_summary\" ||\n\t\tkey === \"observer_auth_file\" ||\n\t\tkey === \"sync_host\" ||\n\t\tkey === \"sync_coordinator_url\" ||\n\t\tkey === \"sync_coordinator_group\"\n\t) {\n\t\tif (typeof value !== \"string\") return `${key} must be string`;\n\t\tconst trimmed = value.trim();\n\t\tif (!trimmed) delete configData[key];\n\t\telse configData[key] = trimmed;\n\t\treturn null;\n\t}\n\tif (key === \"observer_simple_temperature\" || key === \"observer_rich_temperature\") {\n\t\tconst parsed = parseFiniteNumber(value, true);\n\t\tif (parsed == null) return `${key} must be non-negative number`;\n\t\tconfigData[key] = parsed;\n\t\treturn null;\n\t}\n\tconst allowZero = key === \"observer_auth_cache_ttl_s\";\n\tconst parsed = parsePositiveInt(value, allowZero);\n\tif (parsed == null) return `${key} must be ${allowZero ? \"non-negative int\" : \"int\"}`;\n\tconfigData[key] = parsed;\n\treturn null;\n}\n\nfunction applyRuntimeEffects(changedKeys: string[], opts: ConfigRouteOptions): string[] {\n\tconst applied: string[] = [];\n\tif (changedKeys.includes(\"raw_events_sweeper_interval_s\")) {\n\t\tconst configValue = readCodememConfigFile().raw_events_sweeper_interval_s;\n\t\tconst seconds =\n\t\t\ttypeof configValue === \"number\"\n\t\t\t\t? configValue\n\t\t\t\t: Number.parseInt(String(configValue ?? \"\"), 10);\n\t\tif (Number.isFinite(seconds) && seconds > 0) {\n\t\t\tprocess.env.CODEMEM_RAW_EVENTS_SWEEPER_INTERVAL_MS = String(seconds * 1000);\n\t\t} else {\n\t\t\tdelete process.env.CODEMEM_RAW_EVENTS_SWEEPER_INTERVAL_MS;\n\t\t}\n\t\topts.getSweeper?.()?.notifyConfigChanged();\n\t\tapplied.push(\"raw_events_sweeper_interval_s\");\n\t}\n\treturn applied;\n}\n\nexport function configRoutes(opts: ConfigRouteOptions = {}) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/config\", (c) => {\n\t\t// Resolve via the core resolver so GET reflects the same file POST\n\t\t// writes — including workspace-scoped overrides honored through\n\t\t// CODEMEM_RUNTIME_ROOT / CODEMEM_WORKSPACE_ID, which the legacy local\n\t\t// getConfigPath() ignored.\n\t\tconst configPath = getCodememConfigPath();\n\t\tconst configData = withoutRemovedConfigKeys(readCodememConfigFile());\n\t\tconst effective = getEffectiveConfig(configData);\n\t\treturn c.json({\n\t\t\tpath: configPath,\n\t\t\tconfig: sanitizeConfigForResponse(configData),\n\t\t\tdefaults: DEFAULTS,\n\t\t\teffective: sanitizeConfigForResponse(effective),\n\t\t\tenv_overrides: getCodememEnvOverrides(),\n\t\t\tprotected_keys: [...PROTECTED_WRITE_KEYS].sort(),\n\t\t\tproviders: loadProviderOptions(),\n\t\t});\n\t});\n\n\tapp.post(\"/api/config\", async (c) => {\n\t\tlet payload: unknown;\n\t\ttry {\n\t\t\tpayload = (await c.req.json()) as unknown;\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tif (payload == null || typeof payload !== \"object\" || Array.isArray(payload)) {\n\t\t\treturn c.json({ error: \"payload must be an object\" }, 400);\n\t\t}\n\t\tif (\n\t\t\t\"config\" in payload &&\n\t\t\t(payload as ConfigData).config != null &&\n\t\t\t(typeof (payload as ConfigData).config !== \"object\" ||\n\t\t\t\tArray.isArray((payload as ConfigData).config))\n\t\t) {\n\t\t\treturn c.json({ error: \"config must be an object\" }, 400);\n\t\t}\n\t\tconst updates =\n\t\t\t\"config\" in payload &&\n\t\t\t(payload as ConfigData).config != null &&\n\t\t\ttypeof (payload as ConfigData).config === \"object\" &&\n\t\t\t!Array.isArray((payload as ConfigData).config)\n\t\t\t\t? ((payload as ConfigData).config as ConfigData)\n\t\t\t\t: (payload as ConfigData);\n\n\t\tconst configPath = getCodememConfigPath();\n\t\tconst beforeConfig = withoutRemovedConfigKeys(readCodememConfigFile());\n\t\tconst { allowedUpdates, error: protectedKeyError } = partitionViewerUpdates(\n\t\t\tupdates,\n\t\t\tbeforeConfig,\n\t\t);\n\t\tif (protectedKeyError) {\n\t\t\treturn c.json({ error: protectedKeyError }, 403);\n\t\t}\n\n\t\tconst beforeEffective = getEffectiveConfig(beforeConfig);\n\t\tconst nextConfig: ConfigData = { ...beforeConfig };\n\t\tconst providers = new Set(loadProviderOptions());\n\n\t\tconst touchedKeys = ALLOWED_KEYS.filter((key) => key in allowedUpdates);\n\t\tfor (const key of ALLOWED_KEYS) {\n\t\t\tif (!(key in allowedUpdates)) continue;\n\t\t\tconst error = validateAndApplyUpdate(nextConfig, key, allowedUpdates[key], providers);\n\t\t\tif (error) return c.json({ error }, 400);\n\t\t}\n\n\t\tlet savedPath: string;\n\t\ttry {\n\t\t\tsavedPath = writeCodememConfigFile(nextConfig, configPath);\n\t\t} catch {\n\t\t\treturn c.json({ error: \"failed to write config\" }, 500);\n\t\t}\n\n\t\tconst afterEffective = getEffectiveConfig(nextConfig);\n\t\tconst savedChangedKeys = ALLOWED_KEYS.filter((key) => beforeConfig[key] !== nextConfig[key]);\n\t\tconst effectiveChangedKeys = ALLOWED_KEYS.filter(\n\t\t\t(key) => !configValuesEqual(beforeEffective[key], afterEffective[key]),\n\t\t);\n\t\tconst envOverrides = getCodememEnvOverrides();\n\t\tconst ignoredByEnvKeys = savedChangedKeys.filter(\n\t\t\t(key) => !effectiveChangedKeys.includes(key) && key in envOverrides,\n\t\t);\n\t\tconst runtimeChangedKeys = [\n\t\t\t...new Set([...touchedKeys, ...savedChangedKeys, ...effectiveChangedKeys]),\n\t\t];\n\t\tconst hotReloadedKeys = applyRuntimeEffects(runtimeChangedKeys, opts);\n\t\tconst restartRequiredKeys = effectiveChangedKeys.filter(\n\t\t\t(key) => !HOT_RELOAD_KEYS.has(key) && !(key in envOverrides),\n\t\t);\n\n\t\treturn c.json({\n\t\t\tpath: savedPath,\n\t\t\tconfig: sanitizeConfigForResponse(nextConfig),\n\t\t\teffective: sanitizeConfigForResponse(afterEffective),\n\t\t\tprotected_keys: [...PROTECTED_WRITE_KEYS].sort(),\n\t\t\teffects: {\n\t\t\t\tsaved_keys: savedChangedKeys,\n\t\t\t\teffective_keys: effectiveChangedKeys,\n\t\t\t\thot_reloaded_keys: hotReloadedKeys,\n\t\t\t\trestart_required_keys: restartRequiredKeys,\n\t\t\t\tignored_by_env_keys: ignoredByEnvKeys,\n\t\t\t\twarnings: ignoredByEnvKeys.map(\n\t\t\t\t\t(key) =>\n\t\t\t\t\t\t`${key} is currently controlled by ${envOverrides[key]}; saved config will not take effect until that override is removed.`,\n\t\t\t\t),\n\t\t\t},\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { type MemoryStore, VERSION, VIEWER_SERVICE_DISCRIMINATOR } from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\ntype StoreFactory = () => MemoryStore;\n\nfunction databaseReachable(getStore: StoreFactory): boolean {\n\ttry {\n\t\tgetStore().db.pragma(\"schema_version\", { simple: true });\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function healthRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/health\", (c) => {\n\t\tconst reachable = databaseReachable(getStore);\n\t\tc.header(\"Cache-Control\", \"no-store\");\n\t\treturn c.json({\n\t\t\t// Bound to the shared probe contract so producer and clients\n\t\t\t// cannot drift independently.\n\t\t\tservice: VIEWER_SERVICE_DISCRIMINATOR,\n\t\t\tversion: VERSION,\n\t\t\tpid: process.pid,\n\t\t\tuptime_ms: Math.max(0, Math.floor(process.uptime() * 1_000)),\n\t\t\t// Database reachability is the only readiness dependency in this endpoint.\n\t\t\tready: reachable,\n\t\t\tdatabase: { reachable },\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { parseStrictInteger } from \"@codemem/core\";\n\n/**\n * Shared helpers for viewer-server routes.\n */\n\n/**\n * Parse a JSON string that should be an array of strings.\n * Returns an empty array on null, invalid JSON, or non-array values.\n * Mirrors Python's store._safe_json_list().\n */\nexport function safeJsonList(raw: string | null | undefined): string[] {\n\tif (raw == null) return [];\n\ttry {\n\t\tconst parsed: unknown = JSON.parse(raw);\n\t\tif (!Array.isArray(parsed)) return [];\n\t\treturn parsed.filter((item): item is string => typeof item === \"string\");\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n/**\n * Parse a query parameter as an integer, returning the default on failure.\n */\nexport function queryInt(value: string | undefined, defaultValue: number): number {\n\tif (value == null) return defaultValue;\n\tconst parsed = parseStrictInteger(value);\n\treturn parsed == null ? defaultValue : parsed;\n}\n\n/**\n * Parse a query parameter as a boolean flag.\n * Recognizes \"1\", \"true\", \"yes\" as truthy.\n */\nexport function queryBool(value: string | undefined): boolean {\n\tif (value == null) return false;\n\treturn value === \"1\" || value === \"true\" || value === \"yes\";\n}\n\n/**\n * Parse and validate a JSON object body, enforcing size limits.\n * Returns the parsed payload or a Hono Response on error.\n */\nexport async function parseJsonObjectBody(\n\tc: {\n\t\treq: { header: (name: string) => string | undefined; raw: Request };\n\t\tjson: (data: unknown, status?: number) => Response;\n\t},\n\tmaxBytes: number,\n): Promise<Record<string, unknown> | Response> {\n\tconst contentLength = Number.parseInt(c.req.header(\"content-length\") ?? \"0\", 10);\n\tif (Number.isNaN(contentLength) || contentLength < 0) {\n\t\treturn c.json({ error: \"invalid content-length\" }, 400);\n\t}\n\tif (contentLength > maxBytes) {\n\t\treturn c.json({ error: \"payload too large\", max_bytes: maxBytes }, 413);\n\t}\n\tlet raw = \"\";\n\ttry {\n\t\tconst body = c.req.raw.body;\n\t\tif (body !== null) {\n\t\t\tconst reader = body.getReader();\n\t\t\tconst chunks: Uint8Array[] = [];\n\t\t\tlet totalBytes = 0;\n\t\t\ttry {\n\t\t\t\twhile (true) {\n\t\t\t\t\tconst { done, value } = await reader.read();\n\t\t\t\t\tif (done) break;\n\t\t\t\t\ttotalBytes += value.byteLength;\n\t\t\t\t\tif (totalBytes > maxBytes) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tawait reader.cancel();\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// The size rejection is authoritative even if cancellation fails.\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn c.json({ error: \"payload too large\", max_bytes: maxBytes }, 413);\n\t\t\t\t\t}\n\t\t\t\t\tchunks.push(value);\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\treader.releaseLock();\n\t\t\t}\n\n\t\t\tconst bytes = new Uint8Array(totalBytes);\n\t\t\tlet offset = 0;\n\t\t\tfor (const chunk of chunks) {\n\t\t\t\tbytes.set(chunk, offset);\n\t\t\t\toffset += chunk.byteLength;\n\t\t\t}\n\t\t\traw = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n\t\t}\n\t} catch {\n\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = raw ? JSON.parse(raw) : {};\n\t} catch {\n\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t}\n\tif (parsed == null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\treturn c.json({ error: \"payload must be an object\" }, 400);\n\t}\n\treturn parsed as Record<string, unknown>;\n}\n","/**\n * Memory routes — observations, summaries, sessions, projects, pack, artifacts.\n */\n\nimport type { MemoryFilters, MemoryStore } from \"@codemem/core\";\nimport {\n\tbuildFilterClausesWithContext,\n\tcanonicalMemoryKind,\n\tfromJson,\n\tnormalizeHumanPresentationName,\n\tparsePositiveMemoryId,\n\tparseStrictInteger,\n\tschema,\n} from \"@codemem/core\";\nimport { eq, inArray } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/better-sqlite3\";\nimport { Hono } from \"hono\";\nimport { queryInt } from \"../helpers.js\";\n\ntype StoreFactory = () => MemoryStore;\n\ntype OwnershipPredicate = (item: Record<string, unknown>) => boolean;\n\nconst MAX_FEED_QUERY_CODE_UNITS = 256;\nconst searchFunctionsRegisteredStores = new WeakSet<MemoryStore>();\n\nfunction casefold(value: unknown): string {\n\treturn String(value ?? \"\").toLowerCase();\n}\n\nfunction normalizeMemorySearchQuery(value: string | undefined): string | undefined {\n\tconst normalized = casefold(value?.trim()).slice(0, MAX_FEED_QUERY_CODE_UNITS);\n\treturn normalized || undefined;\n}\n\nfunction ensureMemorySearchFunctions(store: MemoryStore): void {\n\tif (searchFunctionsRegisteredStores.has(store)) return;\n\tstore.db.function(\"codemem_casefold\", { deterministic: true }, casefold);\n\tstore.db.function(\"codemem_project_basename\", { deterministic: true }, (value: unknown) =>\n\t\tprojectBasename(String(value ?? \"\").trim()),\n\t);\n\tsearchFunctionsRegisteredStores.add(store);\n}\n\ninterface ActorPresentationRow {\n\tactor_id: string;\n\tdisplay_name: string;\n\tstatus: string;\n\tmerged_into_actor_id: string | null;\n}\n\ninterface DevicePresentationRow {\n\tdevice_id: string;\n\tdisplay_name: string;\n}\n\ninterface PeerPresentationRow {\n\tpeer_device_id: string;\n\tname: string | null;\n\tactor_id: string | null;\n}\n\nconst IDENTITY_LOOKUP_BATCH_SIZE = 500;\n\nfunction identityValue(item: Record<string, unknown>, key: string): string {\n\tconst direct = String(item[key] ?? \"\").trim();\n\tif (direct) return direct;\n\tconst rawMetadata = item.metadata ?? item.metadata_json;\n\tconst metadata = typeof rawMetadata === \"string\" ? fromJson(rawMetadata) : rawMetadata;\n\tif (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) return \"\";\n\treturn String((metadata as Record<string, unknown>)[key] ?? \"\").trim();\n}\n\nfunction uniqueStrings(items: Record<string, unknown>[], key: string): string[] {\n\treturn [...new Set(items.map((item) => identityValue(item, key)).filter(Boolean))];\n}\n\nfunction batchedLookup<T>(\n\tstore: MemoryStore,\n\tvalues: string[],\n\tquery: (placeholders: string) => string,\n): T[] {\n\tconst rows: T[] = [];\n\tfor (let offset = 0; offset < values.length; offset += IDENTITY_LOOKUP_BATCH_SIZE) {\n\t\tconst batch = values.slice(offset, offset + IDENTITY_LOOKUP_BATCH_SIZE);\n\t\tconst placeholders = batch.map(() => \"?\").join(\", \");\n\t\trows.push(...(store.db.prepare(query(placeholders)).all(...batch) as T[]));\n\t}\n\treturn rows;\n}\n\nfunction humanName(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\ttry {\n\t\treturn normalizeHumanPresentationName(value, \"display_name\");\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Add presentation-only identity labels without changing persisted provenance.\n * Resolved names are display hints, not authority or ownership evidence; legacy\n * metadata receives the same top-level-first fallback as existing read paths.\n */\nfunction attachResolvedIdentityFieldsUnsafe(\n\tstore: MemoryStore,\n\titems: Record<string, unknown>[],\n): void {\n\tconst actorIds = uniqueStrings(items, \"actor_id\");\n\tconst deviceIds = uniqueStrings(items, \"origin_device_id\");\n\tconst peers = batchedLookup<PeerPresentationRow>(\n\t\tstore,\n\t\tdeviceIds,\n\t\t(placeholders) =>\n\t\t\t`SELECT peer_device_id, name, actor_id FROM sync_peers\n\t\t WHERE peer_device_id IN (${placeholders})\n\t\t AND TRIM(COALESCE(pinned_fingerprint, '')) <> ''`,\n\t);\n\tconst peerByDevice = new Map(peers.map((peer) => [peer.peer_device_id, peer]));\n\tconst peerActorIds = peers\n\t\t.map((peer) => String(peer.actor_id ?? \"\").trim())\n\t\t.filter((actorId) => actorId.length > 0);\n\tconst actorRows = batchedLookup<ActorPresentationRow>(\n\t\tstore,\n\t\t[...new Set([...actorIds, ...peerActorIds])],\n\t\t(placeholders) =>\n\t\t\t`SELECT actor_id, display_name, status, merged_into_actor_id FROM actors\n\t\t\t WHERE actor_id IN (${placeholders})`,\n\t);\n\tconst devices = batchedLookup<DevicePresentationRow>(\n\t\tstore,\n\t\tdeviceIds,\n\t\t(placeholders) =>\n\t\t\t`SELECT device_id, display_name FROM identity_devices\n\t\t WHERE device_id IN (${placeholders}) AND status = 'active'`,\n\t);\n\tconst actorById = new Map(actorRows.map((actor) => [actor.actor_id, actor] as const));\n\tlet pendingMergeTargets = [\n\t\t...new Set(\n\t\t\tactorRows\n\t\t\t\t.map((actor) => String(actor.merged_into_actor_id ?? \"\").trim())\n\t\t\t\t.filter((actorId) => actorId && !actorById.has(actorId)),\n\t\t),\n\t];\n\twhile (pendingMergeTargets.length > 0) {\n\t\tconst targetRows = batchedLookup<ActorPresentationRow>(\n\t\t\tstore,\n\t\t\tpendingMergeTargets,\n\t\t\t(placeholders) =>\n\t\t\t\t`SELECT actor_id, display_name, status, merged_into_actor_id FROM actors\n\t\t\t\t WHERE actor_id IN (${placeholders})`,\n\t\t);\n\t\tfor (const actor of targetRows) actorById.set(actor.actor_id, actor);\n\t\tpendingMergeTargets = [\n\t\t\t...new Set(\n\t\t\t\ttargetRows\n\t\t\t\t\t.map((actor) => String(actor.merged_into_actor_id ?? \"\").trim())\n\t\t\t\t\t.filter((actorId) => actorId && !actorById.has(actorId)),\n\t\t\t),\n\t\t];\n\t}\n\tconst resolvedActorName = (actorId: string): string | undefined => {\n\t\tconst seen = new Set<string>();\n\t\tlet currentActorId = actorId;\n\t\twhile (currentActorId && !seen.has(currentActorId)) {\n\t\t\tseen.add(currentActorId);\n\t\t\tconst actor = actorById.get(currentActorId);\n\t\t\tif (!actor) return undefined;\n\t\t\tif (actor.status === \"active\" && actor.merged_into_actor_id === null) {\n\t\t\t\treturn humanName(actor.display_name);\n\t\t\t}\n\t\t\tcurrentActorId = String(actor.merged_into_actor_id ?? \"\").trim();\n\t\t}\n\t\treturn undefined;\n\t};\n\tconst deviceNameById = new Map(\n\t\tdevices\n\t\t\t.map((device) => [device.device_id, humanName(device.display_name)] as const)\n\t\t\t.filter((entry): entry is readonly [string, string] => entry[1] !== undefined),\n\t);\n\n\tfor (const item of items) {\n\t\tconst actorId = identityValue(item, \"actor_id\");\n\t\tconst deviceId = identityValue(item, \"origin_device_id\");\n\t\tconst peer = peerByDevice.get(deviceId);\n\t\tconst peerActorId = String(peer?.actor_id ?? \"\").trim();\n\t\tconst knownMemoryActor = actorById.has(actorId);\n\t\tconst actorName = knownMemoryActor\n\t\t\t? (resolvedActorName(actorId) ?? humanName(item.actor_display_name))\n\t\t\t: (resolvedActorName(peerActorId) ?? humanName(item.actor_display_name));\n\t\tconst deviceName = deviceNameById.get(deviceId) ?? humanName(peer?.name);\n\t\tif (actorName) item.resolved_actor_display_name = actorName;\n\t\tif (deviceName) item.resolved_device_display_name = deviceName;\n\t}\n}\n\nfunction attachResolvedIdentityFields(store: MemoryStore, items: Record<string, unknown>[]): void {\n\ttry {\n\t\tattachResolvedIdentityFieldsUnsafe(store, items);\n\t} catch {\n\t\t// Presentation enrichment is optional; neutral Feed fallbacks must remain\n\t\t// available for legacy or partially initialized databases.\n\t}\n}\n\nfunction serializeMemoryRow(\n\townedBySelf: OwnershipPredicate,\n\trow: Record<string, unknown>,\n): Record<string, unknown> {\n\tconst metadata = fromJson((row.metadata_json as string) ?? null);\n\t// Evaluate ownership against the raw row (top-level columns + metadata_json\n\t// fallback) before we overwrite metadata_json with the parsed object.\n\tconst owned_by_self = ownedBySelf(row);\n\treturn {\n\t\t...row,\n\t\tkind: canonicalMemoryKind((row.kind as string | null | undefined) ?? null, row.metadata_json),\n\t\tmetadata_json: metadata,\n\t\towned_by_self,\n\t};\n}\n\n/**\n * Attach session project/cwd fields to memory items.\n */\nfunction attachSessionFields(store: MemoryStore, items: Record<string, unknown>[]): void {\n\tconst sessionIds: number[] = [];\n\tconst seen = new Set<number>();\n\tfor (const item of items) {\n\t\tconst value = item.session_id;\n\t\tif (value == null) continue;\n\t\tconst sid = Number(value);\n\t\tif (Number.isNaN(sid) || seen.has(sid)) continue;\n\t\tseen.add(sid);\n\t\tsessionIds.push(sid);\n\t}\n\tif (sessionIds.length === 0) return;\n\n\tconst d = drizzle(store.db, { schema });\n\tconst rows = d\n\t\t.select({\n\t\t\tid: schema.sessions.id,\n\t\t\tproject: schema.sessions.project,\n\t\t\tcwd: schema.sessions.cwd,\n\t\t})\n\t\t.from(schema.sessions)\n\t\t.where(inArray(schema.sessions.id, sessionIds))\n\t\t.all();\n\n\tconst bySession = new Map<number, { project: string; cwd: string }>();\n\tfor (const row of rows) {\n\t\tconst projectRaw = String(row.project ?? \"\").trim();\n\t\tconst project = projectRaw ? projectBasename(projectRaw) : \"\";\n\t\tconst cwd = String(row.cwd ?? \"\");\n\t\tbySession.set(row.id, { project, cwd });\n\t}\n\n\tfor (const item of items) {\n\t\tconst sid = Number(item.session_id);\n\t\tif (Number.isNaN(sid)) continue;\n\t\tconst fields = bySession.get(sid);\n\t\tif (!fields) continue;\n\t\titem.project ??= fields.project;\n\t\titem.cwd ??= fields.cwd;\n\t}\n}\n\n/**\n * Extract the basename of a project path.\n * Strips \"fatal:\" prefixed values.\n */\nfunction projectBasename(raw: string): string {\n\tif (raw.toLowerCase().startsWith(\"fatal:\")) return \"\";\n\tconst parts = raw.replace(/\\\\/g, \"/\").split(\"/\");\n\treturn parts[parts.length - 1] ?? raw;\n}\n\nfunction normalizeScope(raw: string | undefined): \"mine\" | \"theirs\" | undefined {\n\tconst value = String(raw ?? \"\")\n\t\t.trim()\n\t\t.toLowerCase();\n\tif (value === \"mine\" || value === \"theirs\") return value;\n\treturn undefined;\n}\n\nfunction buildViewerMemoryFilters(store: MemoryStore, filters?: MemoryFilters | null) {\n\treturn buildFilterClausesWithContext(filters, store.ownershipFilterContext());\n}\n\nfunction countVisibleMemoryRows(store: MemoryStore, filters?: MemoryFilters | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, filters);\n\tconst clauses = [\"memory_items.active = 1\", ...filterResult.clauses];\n\tconst from = filterResult.joinSessions\n\t\t? \"memory_items JOIN sessions ON sessions.id = memory_items.session_id\"\n\t\t: \"memory_items\";\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM ${from} WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...filterResult.params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction summaryLikeSqlPredicate(): string {\n\treturn `(\n\t\tLOWER(TRIM(COALESCE(memory_items.kind, ''))) = 'session_summary'\n\t\tOR (\n\t\t\tjson_valid(COALESCE(memory_items.metadata_json, ''))\n\t\t\tAND (\n\t\t\t\tCOALESCE(json_type(memory_items.metadata_json, '$.is_summary') = 'true', 0)\n\t\t\t\tOR LOWER(TRIM(COALESCE(json_extract(memory_items.metadata_json, '$.source'), ''))) = 'observer_summary'\n\t\t\t)\n\t\t)\n\t)`;\n}\n\nfunction memorySearchSql(query: string): { clause: string; params: unknown[] } {\n\tconst textClause = `INSTR(codemem_casefold(\n\t\tCOALESCE(memory_items.title, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.body_text, '') || CHAR(10) ||\n\t\tCASE WHEN ${summaryLikeSqlPredicate()} THEN 'session_summary' ELSE\n\t\t\tCOALESCE(NULLIF(LOWER(TRIM(COALESCE(memory_items.kind, ''))), ''), 'change')\n\t\tEND || CHAR(10) ||\n\t\tCOALESCE(\n\t\t\tmemory_items.project,\n\t\t\tcodemem_project_basename(\n\t\t\t\t(SELECT sessions.project FROM sessions WHERE sessions.id = memory_items.session_id)\n\t\t\t),\n\t\t\t''\n\t\t) || CHAR(10) ||\n\t\tCOALESCE(memory_items.tags_text, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.facts, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.subtitle, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.narrative, '') || CHAR(10) ||\n\t\tCASE WHEN json_valid(COALESCE(memory_items.metadata_json, '')) THEN\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.request'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.subtitle'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.narrative'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.facts'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.summary'), '')\n\t\tELSE '' END\n\t), codemem_casefold(?)) > 0`;\n\tconst parsedMemoryId = parsePositiveMemoryId(query);\n\tconst memoryId =\n\t\tparsedMemoryId != null && String(parsedMemoryId) === query ? parsedMemoryId : null;\n\tif (memoryId != null) {\n\t\treturn { clause: `(memory_items.id = ? OR ${textClause})`, params: [memoryId, query] };\n\t}\n\treturn { clause: textClause, params: [query] };\n}\n\nfunction countVisibleObservationRows(store: MemoryStore, filters?: MemoryFilters | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, filters);\n\tconst clauses = [\n\t\t\"memory_items.active = 1\",\n\t\t`NOT ${summaryLikeSqlPredicate()}`,\n\t\t...filterResult.clauses,\n\t];\n\tconst from = filterResult.joinSessions\n\t\t? \"memory_items JOIN sessions ON sessions.id = memory_items.session_id\"\n\t\t: \"memory_items\";\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM ${from} WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...filterResult.params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction sessionAllowsArtifactAccess(store: MemoryStore, sessionId: number): boolean {\n\tconst visibleCount = countVisibleMemoryRows(store, { session_id: sessionId });\n\tif (visibleCount === 0) return false;\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t`SELECT COUNT(*) AS total FROM memory_items\n\t\t\t WHERE session_id = ? AND active = 1`,\n\t\t)\n\t\t.get(sessionId) as Record<string, unknown> | undefined;\n\treturn visibleCount === Number(row?.total ?? 0);\n}\n\nfunction countVisiblePromptRows(store: MemoryStore, project?: string | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, null);\n\tconst clauses = [\n\t\t\"user_prompts.session_id IS NOT NULL\",\n\t\t`EXISTS (\n\t\t\tSELECT 1 FROM memory_items\n\t\t\tWHERE memory_items.session_id = user_prompts.session_id\n\t\t\t AND memory_items.active = 1\n\t\t\t AND ${filterResult.clauses.join(\" AND \")}\n\t\t)`,\n\t];\n\tconst params: unknown[] = [...filterResult.params];\n\tif (project) {\n\t\tclauses.unshift(\"user_prompts.project = ?\");\n\t\tparams.unshift(project);\n\t}\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM user_prompts WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction countVisibleArtifactRows(store: MemoryStore, project?: string | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, null);\n\tconst clauses = [\n\t\t`EXISTS (\n\t\t\tSELECT 1 FROM memory_items\n\t\t\tWHERE memory_items.session_id = artifacts.session_id\n\t\t\t AND memory_items.active = 1\n\t\t\t AND ${filterResult.clauses.join(\" AND \")}\n\t\t)`,\n\t];\n\tconst params: unknown[] = [...filterResult.params];\n\tconst from = project\n\t\t? \"artifacts JOIN sessions ON sessions.id = artifacts.session_id\"\n\t\t: \"artifacts\";\n\tif (project) {\n\t\tclauses.unshift(\"sessions.project = ?\");\n\t\tparams.unshift(project);\n\t}\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM ${from} WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction queryMemoryPage(\n\tstore: MemoryStore,\n\toptions: {\n\t\tlimit: number;\n\t\toffset: number;\n\t\tproject?: string;\n\t\tscope?: \"mine\" | \"theirs\";\n\t\tq?: string;\n\t\tclassification: \"observation\" | \"summary\";\n\t},\n): Record<string, unknown>[] {\n\tensureMemorySearchFunctions(store);\n\tconst filters: MemoryFilters = {};\n\tif (options.project) filters.project = options.project;\n\tif (options.scope) filters.ownership_scope = options.scope;\n\n\tconst filterResult = buildViewerMemoryFilters(store, filters);\n\tconst summaryPredicate = summaryLikeSqlPredicate();\n\tconst clauses = [\n\t\t\"memory_items.active = 1\",\n\t\toptions.classification === \"summary\" ? summaryPredicate : `NOT ${summaryPredicate}`,\n\t\t...filterResult.clauses,\n\t];\n\tconst params: unknown[] = [...filterResult.params];\n\tif (options.q) {\n\t\tconst search = memorySearchSql(options.q);\n\t\tclauses.push(search.clause);\n\t\tparams.push(...search.params);\n\t}\n\tconst where = clauses.join(\" AND \");\n\tconst from = filterResult.joinSessions\n\t\t? \"memory_items JOIN sessions ON sessions.id = memory_items.session_id\"\n\t\t: \"memory_items\";\n\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT memory_items.* FROM ${from}\n\t\t\t WHERE ${where}\n\t\t\t ORDER BY memory_items.created_at DESC, memory_items.id DESC\n\t\t\t LIMIT ? OFFSET ?`,\n\t\t)\n\t\t.all(...params, options.limit + 1, options.offset) as Record<string, unknown>[];\n\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\treturn rows.map((row) => serializeMemoryRow(ownedBySelf, row));\n}\n\nexport function memoryRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\t// GET /api/sessions\n\tapp.get(\"/api/sessions\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = queryInt(c.req.query(\"limit\"), 20);\n\t\t\tconst filterResult = buildViewerMemoryFilters(store, null);\n\t\t\tconst clauses = [\n\t\t\t\t\"memory_items.session_id = sessions.id\",\n\t\t\t\t\"memory_items.active = 1\",\n\t\t\t\t...filterResult.clauses,\n\t\t\t];\n\t\t\tconst rows = store.db\n\t\t\t\t.prepare(\n\t\t\t\t\t`SELECT sessions.* FROM sessions\n\t\t\t\t\t WHERE EXISTS (SELECT 1 FROM memory_items WHERE ${clauses.join(\" AND \")})\n\t\t\t\t\t ORDER BY sessions.started_at DESC\n\t\t\t\t\t LIMIT ?`,\n\t\t\t\t)\n\t\t\t\t.all(...filterResult.params, limit) as Record<string, unknown>[];\n\t\t\tconst items = rows.map((row) => ({\n\t\t\t\t...row,\n\t\t\t\tmetadata_json: fromJson((row.metadata_json as string | null | undefined) ?? null),\n\t\t\t}));\n\t\t\treturn c.json({ items });\n\t\t}\n\t});\n\n\t// GET /api/projects\n\tapp.get(\"/api/projects\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst filterResult = buildViewerMemoryFilters(store, null);\n\t\t\tconst clauses = [\n\t\t\t\t\"memory_items.session_id = sessions.id\",\n\t\t\t\t\"memory_items.active = 1\",\n\t\t\t\t\"sessions.project IS NOT NULL\",\n\t\t\t\t...filterResult.clauses,\n\t\t\t];\n\t\t\tconst rows = store.db\n\t\t\t\t.prepare(\n\t\t\t\t\t`SELECT DISTINCT sessions.project AS project FROM sessions\n\t\t\t\t\t JOIN memory_items ON memory_items.session_id = sessions.id\n\t\t\t\t\t WHERE ${clauses.join(\" AND \")}`,\n\t\t\t\t)\n\t\t\t\t.all(...filterResult.params) as Record<string, unknown>[];\n\t\t\tconst projects = [\n\t\t\t\t...new Set(\n\t\t\t\t\trows\n\t\t\t\t\t\t.map((r) => String(r.project ?? \"\").trim())\n\t\t\t\t\t\t.filter((p) => p && !p.toLowerCase().startsWith(\"fatal:\"))\n\t\t\t\t\t\t.map((p) => projectBasename(p))\n\t\t\t\t\t\t.filter(Boolean),\n\t\t\t\t),\n\t\t\t].sort();\n\t\t\treturn c.json({ projects });\n\t\t}\n\t});\n\n\t// GET /api/observations (aliased from /api/memories)\n\tapp.get(\"/api/memories\", (c) => {\n\t\tconst search = new URL(c.req.url).search;\n\t\treturn c.redirect(`/api/observations${search}`, 301);\n\t});\n\n\tapp.get(\"/api/observations\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 20));\n\t\t\tconst offset = Math.max(0, queryInt(c.req.query(\"offset\"), 0));\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst scope = normalizeScope(c.req.query(\"scope\"));\n\t\t\tconst q = normalizeMemorySearchQuery(c.req.query(\"q\"));\n\t\t\tconst items = queryMemoryPage(store, {\n\t\t\t\tlimit,\n\t\t\t\toffset,\n\t\t\t\tproject,\n\t\t\t\tscope,\n\t\t\t\tq,\n\t\t\t\tclassification: \"observation\",\n\t\t\t});\n\t\t\tconst hasMore = items.length > limit;\n\t\t\tconst result = hasMore ? items.slice(0, limit) : items;\n\t\t\tconst asRecords = result as unknown as Record<string, unknown>[];\n\t\t\tattachSessionFields(store, asRecords);\n\t\t\tattachResolvedIdentityFields(store, asRecords);\n\t\t\treturn c.json({\n\t\t\t\titems: asRecords,\n\t\t\t\tpagination: {\n\t\t\t\t\tlimit,\n\t\t\t\t\toffset,\n\t\t\t\t\tnext_offset: hasMore ? offset + result.length : null,\n\t\t\t\t\thas_more: hasMore,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\t});\n\n\t// GET /api/summaries\n\tapp.get(\"/api/summaries\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 50));\n\t\t\tconst offset = Math.max(0, queryInt(c.req.query(\"offset\"), 0));\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst scope = normalizeScope(c.req.query(\"scope\"));\n\t\t\tconst q = normalizeMemorySearchQuery(c.req.query(\"q\"));\n\t\t\tconst items = queryMemoryPage(store, {\n\t\t\t\tlimit,\n\t\t\t\toffset,\n\t\t\t\tproject,\n\t\t\t\tscope,\n\t\t\t\tq,\n\t\t\t\tclassification: \"summary\",\n\t\t\t});\n\t\t\tconst hasMore = items.length > limit;\n\t\t\tconst result = hasMore ? items.slice(0, limit) : items;\n\t\t\tconst asRecords = result as unknown as Record<string, unknown>[];\n\t\t\tattachSessionFields(store, asRecords);\n\t\t\tattachResolvedIdentityFields(store, asRecords);\n\t\t\treturn c.json({\n\t\t\t\titems: asRecords,\n\t\t\t\tpagination: {\n\t\t\t\t\tlimit,\n\t\t\t\t\toffset,\n\t\t\t\t\tnext_offset: hasMore ? offset + result.length : null,\n\t\t\t\t\thas_more: hasMore,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\t});\n\n\t// GET /api/session (aggregate counts)\n\tapp.get(\"/api/session\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst project = c.req.query(\"project\") || null;\n\t\t\tlet prompts: number;\n\t\t\tlet artifacts: number;\n\t\t\tlet memories: number;\n\t\t\tlet observations: number;\n\t\t\tif (project) {\n\t\t\t\tprompts = countVisiblePromptRows(store, project);\n\t\t\t\tartifacts = countVisibleArtifactRows(store, project);\n\t\t\t\tmemories = countVisibleMemoryRows(store, { project });\n\t\t\t\tobservations = countVisibleObservationRows(store, { project });\n\t\t\t} else {\n\t\t\t\tprompts = countVisiblePromptRows(store);\n\t\t\t\tartifacts = countVisibleArtifactRows(store);\n\t\t\t\tmemories = countVisibleMemoryRows(store);\n\t\t\t\tobservations = countVisibleObservationRows(store);\n\t\t\t}\n\t\t\tconst total = prompts + artifacts + memories;\n\t\t\treturn c.json({ total, memories, artifacts, prompts, observations });\n\t\t}\n\t});\n\n\t// GET /api/pack\n\tapp.get(\"/api/pack\", async (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst context = c.req.query(\"context\") || \"\";\n\t\t\tif (!context) {\n\t\t\t\treturn c.json({ error: \"context required\" }, 400);\n\t\t\t}\n\t\t\tconst limit = queryInt(c.req.query(\"limit\"), 10);\n\t\t\tconst tokenBudgetStr = c.req.query(\"token_budget\");\n\t\t\tlet tokenBudget: number | undefined;\n\t\t\tif (tokenBudgetStr) {\n\t\t\t\ttokenBudget = parseStrictInteger(tokenBudgetStr) ?? undefined;\n\t\t\t\tif (tokenBudget === undefined) {\n\t\t\t\t\treturn c.json({ error: \"token_budget must be int\" }, 400);\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst filters: { project?: string } = {};\n\t\t\tif (project) filters.project = project;\n\t\t\tconst pack = await store.buildMemoryPackAsync(context, limit, tokenBudget ?? null, filters);\n\t\t\treturn c.json(pack);\n\t\t}\n\t});\n\n\tapp.post(\"/api/pack/trace\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst parsed = await c.req.json().catch(() => Symbol.for(\"invalid-json\"));\n\t\tif (parsed === Symbol.for(\"invalid-json\")) {\n\t\t\treturn c.json({ error: \"invalid json body\" }, 400);\n\t\t}\n\t\tconst body = parsed as {\n\t\t\tcontext?: unknown;\n\t\t\tlimit?: unknown;\n\t\t\ttoken_budget?: unknown;\n\t\t\tproject?: unknown;\n\t\t\tworking_set_files?: unknown;\n\t\t} | null;\n\t\tconst context = typeof body?.context === \"string\" ? body.context.trim() : \"\";\n\t\tif (!context) {\n\t\t\treturn c.json({ error: \"context required\" }, 400);\n\t\t}\n\t\tconst limit =\n\t\t\tbody?.limit == null\n\t\t\t\t? 10\n\t\t\t\t: typeof body.limit === \"number\" && Number.isInteger(body.limit) && body.limit >= 1\n\t\t\t\t\t? body.limit\n\t\t\t\t\t: null;\n\t\tif (limit == null) {\n\t\t\treturn c.json({ error: \"limit must be a positive int\" }, 400);\n\t\t}\n\t\tlet tokenBudget: number | null = null;\n\t\tif (body?.token_budget != null) {\n\t\t\tif (\n\t\t\t\ttypeof body.token_budget !== \"number\" ||\n\t\t\t\t!Number.isInteger(body.token_budget) ||\n\t\t\t\tbody.token_budget < 0\n\t\t\t) {\n\t\t\t\treturn c.json({ error: \"token_budget must be int\" }, 400);\n\t\t\t}\n\t\t\ttokenBudget = body.token_budget;\n\t\t}\n\t\tconst project = typeof body?.project === \"string\" && body.project.trim() ? body.project : null;\n\t\tif (body?.working_set_files != null && !Array.isArray(body.working_set_files)) {\n\t\t\treturn c.json({ error: \"working_set_files must be an array of strings\" }, 400);\n\t\t}\n\t\tif (\n\t\t\tArray.isArray(body?.working_set_files) &&\n\t\t\tbody.working_set_files.some((value) => typeof value !== \"string\")\n\t\t) {\n\t\t\treturn c.json({ error: \"working_set_files must be an array of strings\" }, 400);\n\t\t}\n\t\tconst workingSetFiles = Array.isArray(body?.working_set_files) ? body.working_set_files : [];\n\t\tconst filters: { project?: string; working_set_paths?: string[] } = {};\n\t\tif (project) filters.project = project;\n\t\tif (workingSetFiles.length > 0) filters.working_set_paths = workingSetFiles;\n\t\tconst trace = await store.buildMemoryPackTraceAsync(context, limit, tokenBudget, filters);\n\t\treturn c.json(trace);\n\t});\n\n\t// GET /api/memory\n\tapp.get(\"/api/memory\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = queryInt(c.req.query(\"limit\"), 20);\n\t\t\tconst kind = c.req.query(\"kind\") || undefined;\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst filters: MemoryFilters = {};\n\t\t\tif (kind) filters.kind = kind;\n\t\t\tif (project) filters.project = project;\n\t\t\tconst items = store.recent(limit, filters);\n\t\t\tconst asRecords = items as unknown as Record<string, unknown>[];\n\t\t\tattachSessionFields(store, asRecords);\n\t\t\tattachResolvedIdentityFields(store, asRecords);\n\t\t\treturn c.json({ items: asRecords });\n\t\t}\n\t});\n\n\t// GET /api/artifacts\n\tapp.get(\"/api/artifacts\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst sessionIdStr = c.req.query(\"session_id\");\n\t\t\tif (!sessionIdStr) {\n\t\t\t\treturn c.json({ error: \"session_id required\" }, 400);\n\t\t\t}\n\t\t\tconst sessionId = parseStrictInteger(sessionIdStr);\n\t\t\tif (sessionId == null) {\n\t\t\t\treturn c.json({ error: \"session_id must be int\" }, 400);\n\t\t\t}\n\t\t\tif (!sessionAllowsArtifactAccess(store, sessionId)) {\n\t\t\t\treturn c.json({ error: \"session not found\" }, 404);\n\t\t\t}\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst rows = d\n\t\t\t\t.select()\n\t\t\t\t.from(schema.artifacts)\n\t\t\t\t.where(eq(schema.artifacts.session_id, sessionId))\n\t\t\t\t.all();\n\t\t\treturn c.json({ items: rows });\n\t\t}\n\t});\n\n\t// POST /api/memories/visibility\n\tapp.post(\"/api/memories/visibility\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid JSON\" }, 400);\n\t\t}\n\t\tconst memoryId = parseStrictInteger(\n\t\t\ttypeof body.memory_id === \"string\" ? body.memory_id : String(body.memory_id ?? \"\"),\n\t\t);\n\t\tif (memoryId == null || memoryId <= 0) {\n\t\t\treturn c.json({ error: \"memory_id must be int\" }, 400);\n\t\t}\n\t\tif (!store.get(memoryId)) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\t\tconst visibility = String(body.visibility ?? \"\").trim();\n\t\tif (visibility !== \"private\" && visibility !== \"shared\") {\n\t\t\treturn c.json({ error: \"visibility must be private or shared\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst item = store.updateMemoryVisibility(memoryId, visibility);\n\t\t\treturn c.json({ item });\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tif (msg.includes(\"not found\")) return c.json({ error: msg }, 404);\n\t\t\tif (msg.includes(\"not owned\")) return c.json({ error: msg }, 403);\n\t\t\treturn c.json({ error: msg }, 400);\n\t\t}\n\t});\n\n\t// POST /api/memories/project\n\tapp.post(\"/api/memories/project\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid JSON\" }, 400);\n\t\t}\n\t\tconst memoryId = parseStrictInteger(\n\t\t\ttypeof body.memory_id === \"string\" ? body.memory_id : String(body.memory_id ?? \"\"),\n\t\t);\n\t\tif (memoryId == null || memoryId <= 0) {\n\t\t\treturn c.json({ error: \"memory_id must be int\" }, 400);\n\t\t}\n\t\tconst project = String(body.project ?? \"\").trim();\n\t\tif (!project) {\n\t\t\treturn c.json({ error: \"project must be a non-empty string\" }, 400);\n\t\t}\n\t\tif (!store.get(memoryId)) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\t\ttry {\n\t\t\tconst result = store.moveMemoryProject(memoryId, project);\n\t\t\treturn c.json(result);\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tif (msg.includes(\"not found\")) return c.json({ error: msg }, 404);\n\t\t\tif (msg.includes(\"not owned\")) return c.json({ error: msg }, 403);\n\t\t\treturn c.json({ error: msg }, 400);\n\t\t}\n\t});\n\n\t// POST /api/memories/forget\n\tapp.post(\"/api/memories/forget\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid JSON\" }, 400);\n\t\t}\n\t\tconst memoryId = parseStrictInteger(\n\t\t\ttypeof body.memory_id === \"string\" ? body.memory_id : String(body.memory_id ?? \"\"),\n\t\t);\n\t\tif (memoryId == null || memoryId <= 0) {\n\t\t\treturn c.json({ error: \"memory_id must be int\" }, 400);\n\t\t}\n\t\tif (!store.get(memoryId)) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\n\t\tconst row = drizzle(store.db, { schema })\n\t\t\t.select()\n\t\t\t.from(schema.memoryItems)\n\t\t\t.where(eq(schema.memoryItems.id, memoryId))\n\t\t\t.get();\n\t\tif (!row) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\t\tif (!store.memoryOwnedBySelf(row as Record<string, unknown>)) {\n\t\t\treturn c.json({ error: \"memory not owned by this device\" }, 403);\n\t\t}\n\t\tif (Number(row.active ?? 1) === 0 || row.deleted_at != null) {\n\t\t\treturn c.json({ status: \"ok\" });\n\t\t}\n\n\t\ttry {\n\t\t\tstore.forget(memoryId);\n\t\t\treturn c.json({ status: \"ok\" });\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tif (msg.includes(\"not found\")) return c.json({ error: msg }, 404);\n\t\t\tif (msg.includes(\"not owned\")) return c.json({ error: msg }, 403);\n\t\t\tif (msg.includes(\"sync_rebootstrap_in_progress\")) return c.json({ error: msg }, 409);\n\t\t\treturn c.json({ error: msg }, 400);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Observer status route — GET /api/observer-status.\n *\n * Ports Python's viewer_routes/observer_status.py.\n * Returns observer runtime info, credential availability, and queue status.\n */\n\nimport type { ObserverClient } from \"@codemem/core\";\nimport { type MemoryStore, probeAvailableCredentials, type RawEventSweeper } from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\ntype StoreFactory = () => MemoryStore;\n\nexport interface ObserverStatusDeps {\n\tgetStore: StoreFactory;\n\tgetSweeper: () => RawEventSweeper | null;\n\tgetObserver?: () => ObserverClient | null;\n}\n\nfunction normalizeActiveObserver(active: ReturnType<ObserverClient[\"getStatus\"]> | null) {\n\tif (!active) return null;\n\treturn {\n\t\t...active,\n\t\tauth: {\n\t\t\t...active.auth,\n\t\t\tmethod: active.auth.type,\n\t\t\ttoken_present: active.auth.hasToken,\n\t\t},\n\t};\n}\n\nfunction buildFailureImpact(\n\tlatestFailure: Record<string, unknown> | null,\n\tqueueTotals: { pending: number; sessions: number },\n\tauthBackoff: { active: boolean; remainingS: number },\n): string | null {\n\tif (!latestFailure) return null;\n\tif (authBackoff.active) {\n\t\treturn `Queue retries paused for ~${authBackoff.remainingS}s after an observer auth failure.`;\n\t}\n\tif (queueTotals.pending > 0) {\n\t\treturn `${queueTotals.pending} queued raw events across ${queueTotals.sessions} session(s) are waiting on a successful flush.`;\n\t}\n\treturn \"Failed flush batches are pending retry.\";\n}\n\nexport function observerStatusRoutes(deps?: ObserverStatusDeps) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/observer-status\", (c) => {\n\t\tconst store = deps?.getStore();\n\t\tconst sweeper = deps?.getSweeper();\n\t\tconst observer = deps?.getObserver?.() ?? null;\n\n\t\t// Stub fallback when store doesn't have the required methods (e.g. tests with mock store)\n\t\tif (!store || typeof store.rawEventBacklogTotals !== \"function\") {\n\t\t\treturn c.json({\n\t\t\t\tactive: null,\n\t\t\t\tavailable_credentials: {},\n\t\t\t\tlatest_failure: null,\n\t\t\t\tqueue: {\n\t\t\t\t\tpending: 0,\n\t\t\t\t\tsessions: 0,\n\t\t\t\t\tauth_backoff_active: false,\n\t\t\t\t\tauth_backoff_remaining_s: 0,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\tconst queueTotals = store.rawEventBacklogTotals();\n\t\tconst authBackoff = sweeper?.authBackoffStatus() ?? { active: false, remainingS: 0 };\n\t\tconst latestFailure = store.latestRawEventFlushFailure();\n\t\tconst active = normalizeActiveObserver(observer?.getStatus() ?? null);\n\t\tconst availableCredentials = probeAvailableCredentials();\n\t\tconst shouldShowFailure =\n\t\t\tlatestFailure != null && (authBackoff.active || queueTotals.pending > 0);\n\n\t\tconst failureWithImpact =\n\t\t\tshouldShowFailure && latestFailure\n\t\t\t\t? { ...latestFailure, impact: buildFailureImpact(latestFailure, queueTotals, authBackoff) }\n\t\t\t\t: null;\n\n\t\treturn c.json({\n\t\t\tactive,\n\t\t\tavailable_credentials: availableCredentials,\n\t\t\tlatest_failure: failureWithImpact,\n\t\t\tqueue: {\n\t\t\t\t...queueTotals,\n\t\t\t\tauth_backoff_active: authBackoff.active,\n\t\t\t\tauth_backoff_remaining_s: authBackoff.remainingS,\n\t\t\t},\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { resolve as resolvePath } from \"node:path\";\nimport type { MemoryStore, ViewerIdentityTarget } from \"@codemem/core\";\nimport {\n\tbuildViewerIdentityTarget,\n\tresolveDbPath,\n\tVIEWER_IDENTITY_TARGET_KEYS,\n} from \"@codemem/core\";\n\nconst IDENTITY_TARGET_KEYS = new Set<string>(VIEWER_IDENTITY_TARGET_KEYS);\nconst BOOLEAN_IDENTITY_TARGET_KEYS = new Set([\n\t\"actor_id_present\",\n\t\"embedding_disabled\",\n\t\"embedding_offline\",\n]);\n\nexport type ViewerTargetValidation =\n\t| { ok: true }\n\t| { ok: false; status: 400 | 409; body: { error: { code: string; message: string } } };\n\nfunction invalidRequest(message: string): ViewerTargetValidation {\n\treturn { ok: false, status: 400, body: { error: { code: \"invalid_request\", message } } };\n}\n\nfunction conflict(code: string, message: string): ViewerTargetValidation {\n\treturn { ok: false, status: 409, body: { error: { code, message } } };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn value != null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function currentIdentityTarget(): ViewerIdentityTarget {\n\treturn buildViewerIdentityTarget();\n}\n\nfunction requestedDbMatches(store: MemoryStore, value: unknown): boolean | null {\n\tif (value == null) return true;\n\tif (typeof value !== \"string\" || !value.trim()) return null;\n\treturn resolvePath(resolveDbPath(value.trim())) === resolvePath(store.dbPath);\n}\n\nfunction requestedIdentityMatches(value: unknown): boolean | null | \"unsupported\" {\n\tif (value == null) return true;\n\tif (!isRecord(value)) return null;\n\tif (\n\t\tObject.keys(value).length !== IDENTITY_TARGET_KEYS.size ||\n\t\tObject.keys(value).some((key) => !IDENTITY_TARGET_KEYS.has(key))\n\t)\n\t\treturn \"unsupported\";\n\tconst expected = currentIdentityTarget();\n\tfor (const key of VIEWER_IDENTITY_TARGET_KEYS) {\n\t\tconst requested = value[key];\n\t\tif (BOOLEAN_IDENTITY_TARGET_KEYS.has(key)) {\n\t\t\tif (typeof requested !== \"boolean\") return null;\n\t\t} else if (requested !== null && typeof requested !== \"string\") {\n\t\t\treturn null;\n\t\t}\n\t\tif (requested !== expected[key]) return false;\n\t}\n\treturn true;\n}\n\nexport function validateViewerTarget(\n\tstore: MemoryStore,\n\tpayload: Record<string, unknown>,\n\toptions: { requireCurrentIdentity?: boolean; requirePairedTargets?: boolean } = {},\n): ViewerTargetValidation {\n\tif (options.requirePairedTargets) {\n\t\tconst hasDbPath = Object.hasOwn(payload, \"db_path\");\n\t\tconst hasIdentityTarget = Object.hasOwn(payload, \"identity_target\");\n\t\tif (hasDbPath !== hasIdentityTarget) {\n\t\t\treturn invalidRequest(\"db_path and identity_target must be provided together\");\n\t\t}\n\t\tif (hasDbPath && (payload.db_path == null || payload.identity_target == null)) {\n\t\t\treturn invalidRequest(\"db_path and identity_target must be valid when provided\");\n\t\t}\n\t}\n\tconst dbMatches = requestedDbMatches(store, payload.db_path);\n\tif (dbMatches == null) return invalidRequest(\"db_path must be a non-empty string\");\n\tif (!dbMatches) {\n\t\treturn conflict(\"viewer_db_mismatch\", \"viewer database does not match request\");\n\t}\n\n\tconst identityMatches = requestedIdentityMatches(payload.identity_target);\n\tif (identityMatches === \"unsupported\") {\n\t\treturn conflict(\"viewer_contract_unsupported\", \"viewer request contract is incompatible\");\n\t}\n\tif (identityMatches == null) return invalidRequest(\"identity_target is invalid\");\n\tif (!identityMatches) {\n\t\treturn conflict(\"viewer_identity_mismatch\", \"viewer identity does not match request\");\n\t}\n\tif (\n\t\t(options.requireCurrentIdentity || payload.identity_target != null) &&\n\t\t!store.hasCurrentIdentity()\n\t) {\n\t\treturn conflict(\"viewer_identity_mismatch\", \"viewer identity does not match request\");\n\t}\n\treturn { ok: true };\n}\n","import { isAbsolute, posix, resolve as resolvePath, win32 } from \"node:path\";\nimport type {\n\tMemoryFilters,\n\tMemoryStore,\n\tPackRenderOptions,\n\tPromptPackAttemptMetadata,\n\tRetrievalLedgerDeliveryOutcome,\n\tRetrievalLedgerFailureReason,\n\tRetrievalLedgerWriteOutcome,\n} from \"@codemem/core\";\nimport {\n\tclonePromptPackAttempt,\n\tPROMPT_TRANSPORT_PROTOCOL_RANGE,\n\tpromptPackArtifactFingerprint,\n\trecordPromptPackArtifacts,\n\trecordPromptPackTerminal,\n\tresolveProject,\n\ttryUpdateRetrievalDelivery,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\nimport { currentIdentityTarget, validateViewerTarget } from \"./target-validation.js\";\n\ntype StoreFactory = () => MemoryStore;\ntype LedgerOutcome = RetrievalLedgerWriteOutcome | RetrievalLedgerDeliveryOutcome;\n\nconst MAX_LEDGER_PAYLOAD_BYTES = 16 * 1024;\nconst MAX_METADATA_FIELD_CHARS = 512;\nconst MAX_WORKING_SET_FILES = 50;\nconst MAX_WORKING_SET_PATH_CHARS = 512;\nconst INVALID_JSON = Symbol(\"invalid-json\");\n\nconst PACK_KEYS = new Set([\n\t\"context\",\n\t\"limit\",\n\t\"token_budget\",\n\t\"project\",\n\t\"cwd\",\n\t\"all_projects\",\n\t\"working_set_files\",\n\t\"compact\",\n\t\"compact_detail_count\",\n\t\"db_path\",\n\t\"identity_target\",\n\t\"attempt\",\n]);\nconst LEDGER_KEYS = new Set([\n\t\"action\",\n\t\"attempt_id\",\n\t\"started_at\",\n\t\"source\",\n\t\"stream_id\",\n\t\"source_session_id\",\n\t\"prompt_number\",\n\t\"request_id\",\n\t\"retrieval_status\",\n\t\"delivery_status\",\n\t\"failure_code\",\n\t\"failure_stage\",\n\t\"original_attempt_id\",\n\t\"db_path\",\n\t\"identity_target\",\n]);\nconst ATTEMPT_KEYS = new Set([\n\t\"attempt_id\",\n\t\"started_at\",\n\t\"source\",\n\t\"stream_id\",\n\t\"source_session_id\",\n\t\"prompt_number\",\n\t\"request_id\",\n]);\nconst FORBIDDEN_LEDGER_KEYS = new Set([\n\t\"body\",\n\t\"context\",\n\t\"pack\",\n\t\"pack_text\",\n\t\"path\",\n\t\"preview\",\n\t\"prompt\",\n\t\"query\",\n\t\"raw_prompt\",\n\t\"title\",\n]);\n\ntype ValidatedPackRequest = {\n\tcontext: string;\n\tlimit: number;\n\ttokenBudget: number | null;\n\tfilters: MemoryFilters;\n\trenderOptions?: PackRenderOptions;\n\tattempt?: Record<string, unknown>;\n};\n\nfunction invalidRequest(message: string) {\n\treturn { error: { code: \"invalid_request\", message } };\n}\n\nfunction viewerIdentityMismatch() {\n\treturn {\n\t\terror: {\n\t\t\tcode: \"viewer_identity_mismatch\",\n\t\t\tmessage: \"viewer identity does not match request\",\n\t\t},\n\t};\n}\n\nfunction viewerContractUnsupported() {\n\treturn {\n\t\terror: {\n\t\t\tcode: \"viewer_contract_unsupported\",\n\t\t\tmessage: \"viewer request contract is incompatible\",\n\t\t},\n\t};\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn value != null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction isAbsolutePath(value: string): boolean {\n\treturn posix.isAbsolute(value) || win32.isAbsolute(value);\n}\n\nfunction normalizeWorkingSetPath(value: string): string | null {\n\tconst trimmed = value.trim();\n\tif (!trimmed || trimmed.length > MAX_WORKING_SET_PATH_CHARS || isAbsolutePath(trimmed)) {\n\t\treturn null;\n\t}\n\tconst normalized = posix.normalize(trimmed.replaceAll(\"\\\\\", \"/\")).replace(/^\\.\\//, \"\");\n\tif (!normalized || normalized === \".\" || normalized === \"..\" || normalized.startsWith(\"../\")) {\n\t\treturn null;\n\t}\n\treturn normalized;\n}\n\nfunction validateMetadataFields(\n\tpayload: Record<string, unknown>,\n\tallowedKeys: ReadonlySet<string>,\n): string | null {\n\tif (Buffer.byteLength(JSON.stringify(payload), \"utf8\") > MAX_LEDGER_PAYLOAD_BYTES) {\n\t\treturn \"ledger metadata exceeds 16384 bytes\";\n\t}\n\tfor (const key of Object.keys(payload)) {\n\t\tif (FORBIDDEN_LEDGER_KEYS.has(key)) return `ledger metadata rejects sensitive field: ${key}`;\n\t\tif (!allowedKeys.has(key)) return `ledger metadata contains unsupported field: ${key}`;\n\t}\n\tif (typeof payload.attempt_id !== \"string\" || payload.attempt_id.length === 0) {\n\t\treturn \"ledger metadata requires attempt_id\";\n\t}\n\tif (\n\t\tpayload.prompt_number != null &&\n\t\t(typeof payload.prompt_number !== \"number\" ||\n\t\t\t!Number.isInteger(payload.prompt_number) ||\n\t\t\tpayload.prompt_number < 0)\n\t) {\n\t\treturn \"ledger metadata prompt_number must be a non-negative integer\";\n\t}\n\tfor (const key of [\n\t\t\"attempt_id\",\n\t\t\"started_at\",\n\t\t\"source\",\n\t\t\"stream_id\",\n\t\t\"source_session_id\",\n\t\t\"request_id\",\n\t\t\"failure_code\",\n\t\t\"failure_stage\",\n\t\t\"original_attempt_id\",\n\t] as const) {\n\t\tconst field = payload[key];\n\t\tif (field != null && (typeof field !== \"string\" || field.length > MAX_METADATA_FIELD_CHARS)) {\n\t\t\treturn `ledger metadata field ${key} is invalid`;\n\t\t}\n\t\tif (typeof field === \"string\" && isAbsolutePath(field)) {\n\t\t\treturn `ledger metadata rejects absolute paths in field: ${key}`;\n\t\t}\n\t}\n\treturn null;\n}\n\nfunction attemptMetadata(payload: Record<string, unknown>): PromptPackAttemptMetadata {\n\treturn {\n\t\tattemptId: payload.attempt_id as string,\n\t\tstartedAt: (payload.started_at as string | undefined) ?? new Date().toISOString(),\n\t\tcompletedAt: new Date().toISOString(),\n\t\tsource: (payload.source as string | undefined) ?? \"opencode\",\n\t\tstreamId: (payload.stream_id as string | undefined) ?? null,\n\t\tsourceSessionId: (payload.source_session_id as string | undefined) ?? null,\n\t\tpromptNumber: (payload.prompt_number as number | undefined) ?? null,\n\t\trequestId: (payload.request_id as string | undefined) ?? null,\n\t};\n}\n\nfunction validatePackRequest(value: unknown): ValidatedPackRequest | string {\n\tif (!isRecord(value)) return \"request body must be an object\";\n\tfor (const key of Object.keys(value)) {\n\t\tif (!PACK_KEYS.has(key)) return `request body contains unsupported field: ${key}`;\n\t}\n\tconst context = typeof value.context === \"string\" ? value.context.trim() : \"\";\n\tif (!context) return \"context required\";\n\tconst limit = value.limit ?? 10;\n\tif (typeof limit !== \"number\" || !Number.isInteger(limit) || limit < 1) {\n\t\treturn \"limit must be a positive int\";\n\t}\n\tconst tokenBudget = value.token_budget ?? null;\n\tif (\n\t\ttokenBudget !== null &&\n\t\t(typeof tokenBudget !== \"number\" || !Number.isInteger(tokenBudget) || tokenBudget < 0)\n\t) {\n\t\treturn \"token_budget must be a non-negative int\";\n\t}\n\tif (value.all_projects != null && typeof value.all_projects !== \"boolean\") {\n\t\treturn \"all_projects must be a boolean\";\n\t}\n\tif (value.project != null && (typeof value.project !== \"string\" || !value.project.trim())) {\n\t\treturn \"project must be a non-empty string\";\n\t}\n\tif (\n\t\tvalue.cwd != null &&\n\t\t(typeof value.cwd !== \"string\" || !value.cwd.trim() || !isAbsolute(value.cwd))\n\t) {\n\t\treturn \"cwd must be an absolute path\";\n\t}\n\tif (value.working_set_files != null && !Array.isArray(value.working_set_files)) {\n\t\treturn \"working_set_files must be an array of repository-relative strings\";\n\t}\n\tconst workingSetValues = (value.working_set_files ?? []) as unknown[];\n\tif (workingSetValues.length > MAX_WORKING_SET_FILES) {\n\t\treturn `working_set_files must contain at most ${MAX_WORKING_SET_FILES} entries`;\n\t}\n\tconst workingSetFiles: string[] = [];\n\tfor (const entry of workingSetValues) {\n\t\tif (typeof entry !== \"string\") {\n\t\t\treturn \"working_set_files must be an array of repository-relative strings\";\n\t\t}\n\t\tconst normalized = normalizeWorkingSetPath(entry);\n\t\tif (!normalized) return \"working_set_files contains an invalid repository-relative path\";\n\t\tif (!workingSetFiles.includes(normalized)) workingSetFiles.push(normalized);\n\t}\n\tif (value.compact != null && typeof value.compact !== \"boolean\") {\n\t\treturn \"compact must be a boolean\";\n\t}\n\tif (\n\t\tvalue.compact_detail_count != null &&\n\t\t(typeof value.compact_detail_count !== \"number\" ||\n\t\t\t!Number.isInteger(value.compact_detail_count) ||\n\t\t\tvalue.compact_detail_count < 0)\n\t) {\n\t\treturn \"compact_detail_count must be a non-negative int\";\n\t}\n\tlet attempt: Record<string, unknown> | undefined;\n\tif (value.attempt != null) {\n\t\tif (!isRecord(value.attempt)) return \"attempt must be an object\";\n\t\tconst attemptError = validateMetadataFields(value.attempt, ATTEMPT_KEYS);\n\t\tif (attemptError) return attemptError;\n\t\tattempt = value.attempt;\n\t}\n\n\tconst filters: MemoryFilters = {};\n\tif (value.all_projects !== true) {\n\t\tconst envProject = process.env.CODEMEM_PROJECT?.trim() || null;\n\t\tconst requestCwd = value.cwd as string | undefined;\n\t\tconst requestProject = value.project as string | undefined;\n\t\tconst project = resolveProject(\n\t\t\trequestCwd ?? process.cwd(),\n\t\t\trequestProject ?? (requestCwd == null ? envProject : undefined),\n\t\t);\n\t\tif (project) filters.project = project;\n\t}\n\tif (workingSetFiles.length > 0) filters.working_set_paths = workingSetFiles;\n\n\tlet renderOptions: PackRenderOptions | undefined;\n\tif (value.compact != null || value.compact_detail_count != null) {\n\t\trenderOptions = {\n\t\t\tcompact: value.compact === true || value.compact_detail_count != null,\n\t\t\t...(value.compact_detail_count != null\n\t\t\t\t? { compactDetailCount: value.compact_detail_count as number }\n\t\t\t\t: {}),\n\t\t};\n\t}\n\treturn {\n\t\tcontext,\n\t\tlimit,\n\t\ttokenBudget: tokenBudget as number | null,\n\t\tfilters,\n\t\trenderOptions,\n\t\tattempt,\n\t};\n}\n\nfunction ledgerFailureStatus(reason: RetrievalLedgerFailureReason): 400 | 409 | 422 | 503 {\n\tif (reason === \"idempotency_conflict\") return 409;\n\tif (reason === \"attempt_not_found\") return 422;\n\tif (reason === \"storage_unavailable\") return 503;\n\treturn 400;\n}\n\nfunction dispatchLedger(\n\tstore: MemoryStore,\n\tpayload: Record<string, unknown>,\n): LedgerOutcome | string {\n\tconst action = payload.action;\n\tif (action !== \"record\" && action !== \"delivery\" && action !== \"cache_reuse\") {\n\t\treturn \"ledger action is invalid\";\n\t}\n\tconst metadata = attemptMetadata(payload);\n\tif (action === \"delivery\") {\n\t\tconst status = payload.delivery_status;\n\t\tif (status !== \"handed_off\" && status !== \"failed\" && status !== \"unknown\") {\n\t\t\treturn \"delivery action requires a valid delivery_status\";\n\t\t}\n\t\treturn tryUpdateRetrievalDelivery(store.db, metadata.attemptId, status);\n\t}\n\tif (action === \"cache_reuse\") {\n\t\tif (typeof payload.original_attempt_id !== \"string\" || !payload.original_attempt_id) {\n\t\t\treturn \"cache_reuse action requires original_attempt_id\";\n\t\t}\n\t\treturn clonePromptPackAttempt(store.db, payload.original_attempt_id, metadata);\n\t}\n\tif (\n\t\t(payload.retrieval_status !== \"skipped\" && payload.retrieval_status !== \"failed\") ||\n\t\ttypeof payload.failure_code !== \"string\" ||\n\t\t!payload.failure_code ||\n\t\ttypeof payload.failure_stage !== \"string\" ||\n\t\t!payload.failure_stage\n\t) {\n\t\treturn \"record action requires retrieval_status, failure_code, and failure_stage\";\n\t}\n\treturn recordPromptPackTerminal(\n\t\tstore.db,\n\t\tmetadata,\n\t\tpayload.retrieval_status,\n\t\tpayload.failure_code,\n\t\tpayload.failure_stage,\n\t);\n}\n\nexport function packTransportRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/prompt-pack-profile\", (c) => {\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tif (!store.hasCurrentIdentity()) return c.json(viewerIdentityMismatch(), 409);\n\t\t\treturn c.json({\n\t\t\t\tservice: \"codemem-viewer\",\n\t\t\t\tprotocol_version: PROMPT_TRANSPORT_PROTOCOL_RANGE.protocolVersion,\n\t\t\t\tmin_supported_protocol_version: PROMPT_TRANSPORT_PROTOCOL_RANGE.minSupportedProtocolVersion,\n\t\t\t\tdb_path: resolvePath(store.dbPath),\n\t\t\t\tidentity_target: currentIdentityTarget(),\n\t\t\t});\n\t\t} catch {\n\t\t\treturn c.json(\n\t\t\t\t{ error: { code: \"profile_failed\", message: \"viewer profile could not be read\" } },\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/pack\", async (c) => {\n\t\tconst parsed = await c.req.json().catch(() => INVALID_JSON);\n\t\tif (parsed === INVALID_JSON) return c.json(invalidRequest(\"invalid json body\"), 400);\n\t\tconst request = validatePackRequest(parsed);\n\t\tif (typeof request === \"string\") {\n\t\t\tif (request.startsWith(\"request body contains unsupported field:\"))\n\t\t\t\treturn c.json(viewerContractUnsupported(), 409);\n\t\t\treturn c.json(invalidRequest(request), 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, parsed, { requireCurrentIdentity: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tif (!request.attempt) {\n\t\t\t\tconst pack = await store.buildMemoryPackAsync(\n\t\t\t\t\trequest.context,\n\t\t\t\t\trequest.limit,\n\t\t\t\t\trequest.tokenBudget,\n\t\t\t\t\trequest.filters,\n\t\t\t\t\trequest.renderOptions,\n\t\t\t\t);\n\t\t\t\treturn c.json(pack);\n\t\t\t}\n\t\t\tconst artifacts = await store.buildMemoryPackWithTraceAsync(\n\t\t\t\trequest.context,\n\t\t\t\trequest.limit,\n\t\t\t\trequest.tokenBudget,\n\t\t\t\trequest.filters,\n\t\t\t\trequest.renderOptions,\n\t\t\t);\n\t\t\tlet ledgerArtifactFingerprint: string | undefined;\n\t\t\ttry {\n\t\t\t\tledgerArtifactFingerprint = promptPackArtifactFingerprint(\n\t\t\t\t\tstore.db,\n\t\t\t\t\trequest.context,\n\t\t\t\t\trequest.filters,\n\t\t\t\t\tartifacts,\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\t// Fingerprinting is instrumentation and must not block pack delivery.\n\t\t\t}\n\t\t\tlet ledgerOutcome: RetrievalLedgerWriteOutcome | undefined;\n\t\t\ttry {\n\t\t\t\tledgerOutcome = recordPromptPackArtifacts(\n\t\t\t\t\tstore.db,\n\t\t\t\t\tattemptMetadata(request.attempt),\n\t\t\t\t\trequest.context,\n\t\t\t\t\trequest.filters,\n\t\t\t\t\tartifacts,\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\t// Ledger instrumentation is best-effort and must not block pack delivery.\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\t...artifacts.response,\n\t\t\t\t...(ledgerArtifactFingerprint\n\t\t\t\t\t? { ledger_artifact_fingerprint: ledgerArtifactFingerprint }\n\t\t\t\t\t: {}),\n\t\t\t\t...(ledgerOutcome?.ok === false && ledgerOutcome.reason === \"idempotency_conflict\"\n\t\t\t\t\t? { ledger_outcome: ledgerOutcome }\n\t\t\t\t\t: {}),\n\t\t\t});\n\t\t} catch {\n\t\t\treturn c.json(\n\t\t\t\t{ error: { code: \"pack_failed\", message: \"memory pack could not be built\" } },\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/prompt-pack-ledger\", async (c) => {\n\t\tconst parsed = await c.req.json().catch(() => INVALID_JSON);\n\t\tif (parsed === INVALID_JSON) return c.json(invalidRequest(\"invalid json body\"), 400);\n\t\tif (!isRecord(parsed)) return c.json(invalidRequest(\"request body must be an object\"), 400);\n\t\tconst validationError = validateMetadataFields(parsed, LEDGER_KEYS);\n\t\tif (validationError) {\n\t\t\tif (validationError.startsWith(\"ledger metadata contains unsupported field:\"))\n\t\t\t\treturn c.json(viewerContractUnsupported(), 409);\n\t\t\treturn c.json(invalidRequest(validationError), 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, parsed, { requireCurrentIdentity: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tconst outcome = dispatchLedger(store, parsed);\n\t\t\tif (typeof outcome === \"string\") return c.json(invalidRequest(outcome), 400);\n\t\t\tif (outcome.ok) return c.json(outcome);\n\t\t\treturn c.json(outcome, ledgerFailureStatus(outcome.reason));\n\t\t} catch {\n\t\t\treturn c.json(\n\t\t\t\t{ error: { code: \"ledger_failed\", message: \"prompt-pack ledger operation failed\" } },\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Raw events routes — GET & POST /api/raw-events, GET /api/raw-events/status,\n * POST /api/claude-hooks, POST /api/codex-hooks.\n */\n\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { HookTranscriptOutcome, MemoryStore, RawEventSweeper } from \"@codemem/core\";\nimport {\n\tbuildRawEventEnvelopeFromCodexHook,\n\tbuildRawEventEnvelopeFromHook,\n\tingestRawEvents,\n\tRawEventIngestValidationError,\n\tschema,\n} from \"@codemem/core\";\nimport { desc } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/better-sqlite3\";\nimport { Hono } from \"hono\";\nimport { parseJsonObjectBody, queryInt } from \"../helpers.js\";\nimport { validateViewerTarget } from \"./target-validation.js\";\n\ntype StoreFactory = () => MemoryStore;\ntype JsonResponder = {\n\tjson: (data: unknown, status?: number) => Response;\n};\n\nconst DEFAULT_MAX_RAW_EVENTS_BODY_BYTES = 1_048_576;\n\nfunction configuredMaxRawEventsBodyBytes(): number {\n\tconst parsed = Number(process.env.CODEMEM_RAW_EVENTS_MAX_BODY_BYTES?.trim() ?? \"\");\n\treturn Number.isSafeInteger(parsed) && parsed > 0 ? parsed : DEFAULT_MAX_RAW_EVENTS_BODY_BYTES;\n}\n\nconst MAX_RAW_EVENTS_BODY_BYTES = configuredMaxRawEventsBodyBytes();\ntype LegacyTranscriptSource = \"claude\" | \"codex\";\ntype TranscriptOutcomeCounts = Record<HookTranscriptOutcome, number>;\n\nfunction emptyTranscriptOutcomeCounts(): TranscriptOutcomeCounts {\n\treturn {\n\t\tok: 0,\n\t\tnot_provided: 0,\n\t\tpath_rejected: 0,\n\t\tunreadable: 0,\n\t\tno_complete_record: 0,\n\t\tno_assistant_record: 0,\n\t} satisfies TranscriptOutcomeCounts;\n}\n\nfunction createTranscriptDiagnostics() {\n\tconst counts: Record<LegacyTranscriptSource, TranscriptOutcomeCounts> = {\n\t\tclaude: emptyTranscriptOutcomeCounts(),\n\t\tcodex: emptyTranscriptOutcomeCounts(),\n\t};\n\treturn {\n\t\trecord(source: LegacyTranscriptSource, outcome: HookTranscriptOutcome): void {\n\t\t\tcounts[source][outcome] += 1;\n\t\t},\n\t\tsnapshot() {\n\t\t\treturn {\n\t\t\t\tscope: \"legacy_compatibility_routes\" as const,\n\t\t\t\tcounts: {\n\t\t\t\t\tclaude: { ...counts.claude },\n\t\t\t\t\tcodex: { ...counts.codex },\n\t\t\t\t},\n\t\t\t};\n\t\t},\n\t};\n}\n\nfunction transcriptSkipResponse(outcome: HookTranscriptOutcome | null) {\n\tif (outcome !== null && outcome !== \"ok\") {\n\t\treturn {\n\t\t\tinserted: 0,\n\t\t\tskipped: 1,\n\t\t\tskip_reason: \"transcript_unavailable\" as const,\n\t\t\tskip_detail: outcome,\n\t\t};\n\t}\n\treturn { inserted: 0, skipped: 1, skip_reason: \"unsupported_hook\" as const };\n}\n\nfunction claudeTranscriptRoot(): string {\n\treturn join(process.env.CLAUDE_CONFIG_DIR?.trim() || join(homedir(), \".claude\"), \"projects\");\n}\n\nfunction codexTranscriptRoot(): string {\n\treturn join(process.env.CODEX_HOME?.trim() || join(homedir(), \".codex\"), \"sessions\");\n}\n\n/** Nudge the sweeper safely — never crashes the caller. */\nfunction nudgeSweeper(\n\tsweeper: RawEventSweeper | null | undefined,\n\tsessions: Iterable<{ source: string; streamId: string }>,\n): void {\n\tfor (const session of sessions) {\n\t\ttry {\n\t\t\tsweeper?.nudge(session.streamId, session.source);\n\t\t} catch {\n\t\t\t// A failed nudge must not block later validated sessions.\n\t\t}\n\t}\n}\n\nasync function flushBoundarySessions(\n\tsweeper: RawEventSweeper | null | undefined,\n\tsessions: Iterable<{ source: string; streamId: string }>,\n): Promise<void> {\n\tfor (const session of sessions) {\n\t\ttry {\n\t\t\tawait sweeper?.flushBoundary(session.streamId, session.source);\n\t\t} catch {\n\t\t\t// Boundary extraction remains best-effort, matching the legacy CLI path.\n\t\t}\n\t}\n}\n\nfunction isClaudeBoundaryEnvelope(envelope: object): boolean {\n\tconst record = envelope as Record<string, unknown>;\n\tif (\n\t\tString(record.source ?? \"\")\n\t\t\t.trim()\n\t\t\t.toLowerCase() !== \"claude\"\n\t)\n\t\treturn false;\n\tconst payload = record.payload;\n\tif (payload == null || typeof payload !== \"object\" || Array.isArray(payload)) return false;\n\tconst adapter = (payload as Record<string, unknown>)._adapter;\n\tif (adapter == null || typeof adapter !== \"object\" || Array.isArray(adapter)) return false;\n\tconst meta = (adapter as Record<string, unknown>).meta;\n\tif (meta == null || typeof meta !== \"object\" || Array.isArray(meta)) return false;\n\tconst hookEventName = (meta as Record<string, unknown>).hook_event_name;\n\treturn hookEventName === \"SessionEnd\" || hookEventName === \"Stop\";\n}\n\nconst SAFE_INGEST_VALIDATION_ERRORS = new Set([\n\t\"source must be string\",\n\t\"source is required\",\n\t\"source must use 1-64 letters, digits, dots, underscores, or hyphens\",\n\t\"session_stream_id must be string\",\n\t\"session_id must be string\",\n\t\"stream_id must be string\",\n\t\"opencode_session_id must be string\",\n\t\"conflicting session id fields\",\n\t\"invalid session id\",\n\t\"event source conflicts with request source\",\n\t\"session id required\",\n\t\"event_type must be string\",\n\t\"event_type required\",\n\t\"event_type has invalid syntax\",\n\t\"event_id must be string\",\n\t\"event_id required\",\n\t\"event_id has invalid syntax\",\n\t\"event_seq must be int\",\n\t\"ts_wall_ms must be number\",\n\t\"ts_mono_ms must be number\",\n\t\"payload must be an object\",\n\t\"cwd must be string\",\n\t\"project must be string\",\n\t\"started_at must be string\",\n\t\"events must be a list\",\n\t\"event must be an object\",\n]);\n\nfunction boundedIngestValidationMessage(error: RawEventIngestValidationError): string {\n\treturn SAFE_INGEST_VALIDATION_ERRORS.has(error.message)\n\t\t? error.message\n\t\t: \"invalid raw event request\";\n}\n\nfunction boundedIngestErrorResponse(c: JsonResponder, error: unknown): Response {\n\tif (error instanceof RawEventIngestValidationError) {\n\t\treturn c.json({ error: boundedIngestValidationMessage(error) }, 400);\n\t}\n\tconst response: Record<string, unknown> = { error: \"internal server error\" };\n\tif (process.env.CODEMEM_VIEWER_DEBUG === \"1\") {\n\t\tresponse.detail = error instanceof Error ? error.message : String(error);\n\t}\n\treturn c.json(response, 500);\n}\n\nfunction untargetedPayload(payload: Record<string, unknown>): Record<string, unknown> {\n\tconst { db_path: _dbPath, identity_target: _identityTarget, ...body } = payload;\n\treturn body;\n}\n\nasync function ingestNormalizedEnvelope(\n\tstore: MemoryStore,\n\tsweeper: RawEventSweeper | null | undefined,\n\tenvelope: object,\n\tflushBoundary = false,\n) {\n\tconst result = ingestRawEvents(store, envelope);\n\tnudgeSweeper(sweeper, result.sessions);\n\tif (flushBoundary && isClaudeBoundaryEnvelope(envelope)) {\n\t\tawait flushBoundarySessions(sweeper, result.sessions);\n\t}\n\treturn result;\n}\n\nexport function rawEventsRoutes(getStore: StoreFactory, sweeper?: RawEventSweeper | null) {\n\tconst app = new Hono();\n\tconst transcriptDiagnostics = createTranscriptDiagnostics();\n\n\t// GET /api/raw-events (compat endpoint for stats panel)\n\tapp.get(\"/api/raw-events\", (c) => {\n\t\tconst store = getStore();\n\t\tconst totals = store.rawEventBacklogTotals();\n\t\treturn c.json(totals);\n\t});\n\n\t// GET /api/raw-events/status\n\tapp.get(\"/api/raw-events/status\", (c) => {\n\t\tconst store = getStore();\n\t\tconst limit = queryInt(c.req.query(\"limit\"), 25);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst rows = d\n\t\t\t.select({\n\t\t\t\tsource: schema.rawEventSessions.source,\n\t\t\t\tstream_id: schema.rawEventSessions.stream_id,\n\t\t\t\topencode_session_id: schema.rawEventSessions.opencode_session_id,\n\t\t\t\tcwd: schema.rawEventSessions.cwd,\n\t\t\t\tproject: schema.rawEventSessions.project,\n\t\t\t\tstarted_at: schema.rawEventSessions.started_at,\n\t\t\t\tlast_seen_ts_wall_ms: schema.rawEventSessions.last_seen_ts_wall_ms,\n\t\t\t\tlast_received_event_seq: schema.rawEventSessions.last_received_event_seq,\n\t\t\t\tlast_flushed_event_seq: schema.rawEventSessions.last_flushed_event_seq,\n\t\t\t\tupdated_at: schema.rawEventSessions.updated_at,\n\t\t\t})\n\t\t\t.from(schema.rawEventSessions)\n\t\t\t.orderBy(desc(schema.rawEventSessions.updated_at))\n\t\t\t.limit(limit)\n\t\t\t.all();\n\t\tconst items = rows.map((row) => {\n\t\t\tconst streamId = String(row.stream_id ?? row.opencode_session_id ?? \"\");\n\t\t\treturn {\n\t\t\t\t...row,\n\t\t\t\tsession_stream_id: streamId,\n\t\t\t\tsession_id: streamId,\n\t\t\t};\n\t\t});\n\t\tconst totals = store.rawEventBacklogTotals();\n\t\treturn c.json({\n\t\t\titems,\n\t\t\ttotals,\n\t\t\tingest: {\n\t\t\t\tavailable: true,\n\t\t\t\tmode: \"stream_queue\",\n\t\t\t\tmax_body_bytes: MAX_RAW_EVENTS_BODY_BYTES,\n\t\t\t},\n\t\t\ttranscript_diagnostics: transcriptDiagnostics.snapshot(),\n\t\t});\n\t});\n\n\t// POST /api/raw-events — ingest raw events from plugin\n\tapp.post(\"/api/raw-events\", async (c) => {\n\t\tconst result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);\n\t\tif (result instanceof Response) return result;\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, result, { requirePairedTargets: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tconst ingestResult = await ingestNormalizedEnvelope(\n\t\t\t\tstore,\n\t\t\t\tsweeper,\n\t\t\t\tuntargetedPayload(result),\n\t\t\t\tc.req.header(\"x-codemem-boundary-flush\") === \"1\",\n\t\t\t);\n\t\t\treturn c.json({\n\t\t\t\tinserted: ingestResult.inserted,\n\t\t\t\tskipped: ingestResult.skipped,\n\t\t\t\treceived: ingestResult.received,\n\t\t\t});\n\t\t} catch (err) {\n\t\t\treturn boundedIngestErrorResponse(c, err);\n\t\t}\n\t});\n\n\t// POST /api/claude-hooks — ingest Claude Code hook events\n\tapp.post(\"/api/claude-hooks\", async (c) => {\n\t\tconst result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);\n\t\tif (result instanceof Response) return result;\n\t\tconst payload = result;\n\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, payload, { requirePairedTargets: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tlet transcriptOutcome: HookTranscriptOutcome | null = null;\n\t\t\tconst envelope = buildRawEventEnvelopeFromHook(untargetedPayload(payload), {\n\t\t\t\ttranscriptPolicy: { trust: \"restricted\", approvedRoots: [claudeTranscriptRoot()] },\n\t\t\t\tonTranscriptOutcome: (outcome) => {\n\t\t\t\t\ttranscriptOutcome = outcome;\n\t\t\t\t\ttranscriptDiagnostics.record(\"claude\", outcome);\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (envelope === null) {\n\t\t\t\treturn c.json(transcriptSkipResponse(transcriptOutcome));\n\t\t\t}\n\t\t\tconst ingestResult = await ingestNormalizedEnvelope(\n\t\t\t\tstore,\n\t\t\t\tsweeper,\n\t\t\t\tenvelope,\n\t\t\t\tc.req.header(\"x-codemem-boundary-flush\") === \"1\",\n\t\t\t);\n\t\t\treturn c.json({ inserted: ingestResult.inserted, skipped: ingestResult.skipped });\n\t\t} catch (err) {\n\t\t\treturn boundedIngestErrorResponse(c, err);\n\t\t}\n\t});\n\n\t// POST /api/codex-hooks — ingest Codex hook events\n\tapp.post(\"/api/codex-hooks\", async (c) => {\n\t\tconst result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);\n\t\tif (result instanceof Response) return result;\n\t\tconst payload = result;\n\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, payload, { requirePairedTargets: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tlet transcriptOutcome: HookTranscriptOutcome | null = null;\n\t\t\tconst envelope = buildRawEventEnvelopeFromCodexHook(untargetedPayload(payload), {\n\t\t\t\ttranscriptPolicy: { trust: \"restricted\", approvedRoots: [codexTranscriptRoot()] },\n\t\t\t\tonTranscriptOutcome: (outcome) => {\n\t\t\t\t\ttranscriptOutcome = outcome;\n\t\t\t\t\ttranscriptDiagnostics.record(\"codex\", outcome);\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (envelope === null) {\n\t\t\t\treturn c.json(transcriptSkipResponse(transcriptOutcome));\n\t\t\t}\n\t\t\tconst ingestResult = await ingestNormalizedEnvelope(store, sweeper, envelope);\n\t\t\treturn c.json({ inserted: ingestResult.inserted, skipped: ingestResult.skipped });\n\t\t} catch (err) {\n\t\t\treturn boundedIngestErrorResponse(c, err);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Stats routes — GET /api/stats, GET /api/usage.\n *\n * Ports Python's viewer_routes/stats.py.\n */\n\nimport {\n\tbuildFilterClausesWithContext,\n\tlistMaintenanceJobs,\n\ttype MemoryStore,\n\tVERSION,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\nfunction maintenanceJobSortKey(job: {\n\tstarted_at: string | null;\n\tupdated_at: string;\n\tkind: string;\n}): [string, string] {\n\treturn [job.started_at ?? job.updated_at, job.kind];\n}\n\nfunction sortActiveMaintenanceJobs<\n\tT extends { started_at: string | null; updated_at: string; kind: string },\n>(jobs: T[]): T[] {\n\treturn [...jobs].sort((a, b) => {\n\t\tconst [aTime, aKind] = maintenanceJobSortKey(a);\n\t\tconst [bTime, bKind] = maintenanceJobSortKey(b);\n\t\tif (aTime !== bTime) return aTime.localeCompare(bTime);\n\t\treturn aKind.localeCompare(bKind);\n\t});\n}\n\nconst MEMORY_ID_METADATA_KEYS = [\"pack_item_ids\", \"added_ids\", \"removed_ids\", \"retained_ids\"];\n\ntype UsageRow = {\n\tid: number;\n\tsession_id: number | null;\n\tevent: string;\n\ttokens_read: number;\n\ttokens_written: number;\n\ttokens_saved: number;\n\tcreated_at: string;\n\tmetadata_json: Record<string, unknown> | null;\n};\n\ntype UsageVisibility = {\n\tvisibleMemoryIds: Set<number>;\n\tvisibleSessionIds: Set<number>;\n};\n\nfunction toUsageRow(\n\trow: Record<string, unknown>,\n\tmetadata: Record<string, unknown> | null,\n): UsageRow {\n\treturn {\n\t\tid: Number(row.id ?? 0),\n\t\tsession_id: row.session_id == null ? null : Number(row.session_id),\n\t\tevent: String(row.event ?? \"pack\"),\n\t\ttokens_read: Number(row.tokens_read ?? 0),\n\t\ttokens_written: Number(row.tokens_written ?? 0),\n\t\ttokens_saved: Number(row.tokens_saved ?? 0),\n\t\tcreated_at: String(row.created_at ?? \"\"),\n\t\tmetadata_json: metadata,\n\t};\n}\n\nfunction metadataMemoryIds(value: unknown): number[] {\n\tif (!Array.isArray(value)) return [];\n\treturn value\n\t\t.map((item) => (typeof item === \"number\" ? item : Number(item)))\n\t\t.filter((item) => Number.isInteger(item) && item > 0);\n}\n\nfunction chunkNumbers(values: number[], chunkSize = 500): number[][] {\n\tconst chunks: number[][] = [];\n\tfor (let start = 0; start < values.length; start += chunkSize) {\n\t\tchunks.push(values.slice(start, start + chunkSize));\n\t}\n\treturn chunks;\n}\n\nfunction visibleMemoryIdSet(store: MemoryStore, memoryIds: Set<number>): Set<number> {\n\tif (memoryIds.size === 0) return new Set();\n\tconst filterResult = buildFilterClausesWithContext(null, {\n\t\tactorId: store.actorId,\n\t\tdeviceId: store.deviceId,\n\t\tenforceScopeVisibility: true,\n\t});\n\tconst visibleIds = new Set<number>();\n\tfor (const chunk of chunkNumbers([...memoryIds])) {\n\t\tconst placeholders = chunk.map(() => \"?\").join(\", \");\n\t\tconst clauses = [\n\t\t\t\"memory_items.active = 1\",\n\t\t\t`memory_items.id IN (${placeholders})`,\n\t\t\t...filterResult.clauses,\n\t\t];\n\t\tconst rows = store.db\n\t\t\t.prepare(`SELECT memory_items.id FROM memory_items WHERE ${clauses.join(\" AND \")}`)\n\t\t\t.all(...chunk, ...filterResult.params) as Array<{ id: number }>;\n\t\tfor (const row of rows) visibleIds.add(Number(row.id));\n\t}\n\treturn visibleIds;\n}\n\nfunction visibleSessionIdSet(store: MemoryStore, sessionIds: Set<number>): Set<number> {\n\tif (sessionIds.size === 0) return new Set();\n\tconst filterResult = buildFilterClausesWithContext(null, {\n\t\tactorId: store.actorId,\n\t\tdeviceId: store.deviceId,\n\t\tenforceScopeVisibility: true,\n\t});\n\tconst visibleIds = new Set<number>();\n\tfor (const chunk of chunkNumbers([...sessionIds])) {\n\t\tconst placeholders = chunk.map(() => \"?\").join(\", \");\n\t\tconst clauses = [\n\t\t\t\"memory_items.active = 1\",\n\t\t\t`memory_items.session_id IN (${placeholders})`,\n\t\t\t...filterResult.clauses,\n\t\t];\n\t\tconst rows = store.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT DISTINCT memory_items.session_id AS session_id\n\t\t\t\t FROM memory_items\n\t\t\t\t WHERE ${clauses.join(\" AND \")}`,\n\t\t\t)\n\t\t\t.all(...chunk, ...filterResult.params) as Array<{ session_id: number | null }>;\n\t\tfor (const row of rows) {\n\t\t\tif (typeof row.session_id === \"number\") visibleIds.add(row.session_id);\n\t\t}\n\t}\n\treturn visibleIds;\n}\n\nfunction buildUsageVisibility(store: MemoryStore, rows: UsageRow[]): UsageVisibility {\n\tconst memoryIds = new Set<number>();\n\tconst sessionIds = new Set<number>();\n\tfor (const row of rows) {\n\t\tif (typeof row.session_id === \"number\") sessionIds.add(row.session_id);\n\t\tfor (const key of MEMORY_ID_METADATA_KEYS) {\n\t\t\tfor (const memoryId of metadataMemoryIds(row.metadata_json?.[key])) {\n\t\t\t\tmemoryIds.add(memoryId);\n\t\t\t}\n\t\t}\n\t}\n\treturn {\n\t\tvisibleMemoryIds: visibleMemoryIdSet(store, memoryIds),\n\t\tvisibleSessionIds: visibleSessionIdSet(store, sessionIds),\n\t};\n}\n\nfunction usageRowVisible(row: UsageRow, visibility: UsageVisibility): boolean {\n\tconst rowSessionVisible =\n\t\trow.session_id == null || visibility.visibleSessionIds.has(row.session_id);\n\tconst packItemIds = row.metadata_json?.pack_item_ids;\n\tif (Array.isArray(packItemIds)) {\n\t\tif (packItemIds.length === 0) {\n\t\t\treturn row.session_id != null && visibility.visibleSessionIds.has(row.session_id);\n\t\t}\n\t\treturn (\n\t\t\trowSessionVisible &&\n\t\t\tmetadataMemoryIds(packItemIds).some((memoryId) => visibility.visibleMemoryIds.has(memoryId))\n\t\t);\n\t}\n\treturn row.session_id != null && visibility.visibleSessionIds.has(row.session_id);\n}\n\nfunction sanitizePackUsageMetadata(\n\tmetadata: Record<string, unknown> | null,\n\tvisibility: UsageVisibility,\n): Record<string, unknown> | null {\n\tif (!metadata) return null;\n\tconst sanitized = { ...metadata };\n\tfor (const key of MEMORY_ID_METADATA_KEYS) {\n\t\tif (Array.isArray(sanitized[key])) {\n\t\t\tsanitized[key] = metadataMemoryIds(sanitized[key]).filter((memoryId) =>\n\t\t\t\tvisibility.visibleMemoryIds.has(memoryId),\n\t\t\t);\n\t\t}\n\t}\n\treturn sanitized;\n}\n\ntype UsageAggregateRow = {\n\tevent: string;\n\tcount: number;\n\ttokens_read: number;\n\ttokens_written: number;\n\ttokens_saved: number;\n};\n\n/**\n * Convert the neutral core aggregate rows into the wire shape for /api/usage\n * (ApiUsageEventSummary: total_tokens_* names), sorted by event name ASC to\n * match the route's historical ordering.\n */\nfunction mapAggregateEvents(rows: UsageAggregateRow[]): Record<string, unknown>[] {\n\treturn rows\n\t\t.map((row) => ({\n\t\t\tevent: row.event,\n\t\t\ttotal_tokens_read: row.tokens_read,\n\t\t\ttotal_tokens_written: row.tokens_written,\n\t\t\ttotal_tokens_saved: row.tokens_saved,\n\t\t\tcount: row.count,\n\t\t}))\n\t\t.sort((a, b) => a.event.localeCompare(b.event));\n}\n\n/**\n * Sum the neutral core aggregate rows into the ApiUsageTotals wire shape.\n */\nfunction totalsFromAggregate(rows: UsageAggregateRow[]): {\n\ttokens_read: number;\n\ttokens_written: number;\n\ttokens_saved: number;\n\tcount: number;\n} {\n\treturn rows.reduce(\n\t\t(acc, row) => ({\n\t\t\ttokens_read: acc.tokens_read + row.tokens_read,\n\t\t\ttokens_written: acc.tokens_written + row.tokens_written,\n\t\t\ttokens_saved: acc.tokens_saved + row.tokens_saved,\n\t\t\tcount: acc.count + row.count,\n\t\t}),\n\t\t{ tokens_read: 0, tokens_written: 0, tokens_saved: 0, count: 0 },\n\t);\n}\n\ntype UsagePayload = Record<string, unknown>;\n\ninterface UsageCacheEntry {\n\tpayload: UsagePayload;\n\texpiresAtMs: number;\n}\n\n/**\n * Short-lived cache for the computed /api/usage payload.\n *\n * The health dot polls /api/usage on every 5s refresh regardless of the\n * active tab. The token/event totals come from indexed SQL aggregates and the\n * recent-pack window runs scope-visibility resolution over its bounded set, so\n * each miss is cheap — but the totals are cumulative dashboard figures where a\n * few seconds of staleness is acceptable, so caching still collapses the\n * repeated recompute on the polling loop. Keyed by db path + scope identity +\n * project filter so distinct stores/projects never share an entry.\n */\nconst usagePayloadCache = new Map<string, UsageCacheEntry>();\nconst USAGE_PAYLOAD_CACHE_MS = 10_000;\n\n/**\n * Hard cap on cached usage payloads. The cache key folds in the arbitrary\n * `?project=` filter and a scope-visibility fingerprint that becomes\n * per-request-unique on the error/bypass path, so without a bound the map\n * would grow without limit in a long-running viewer. The cap is far above the\n * realistic working set (a handful of projects times one or two scope\n * generations), so legitimate hits are never evicted under normal load.\n */\nconst USAGE_PAYLOAD_CACHE_MAX_ENTRIES = 256;\n\n/**\n * Sweep expired entries and enforce the size cap before inserting a new one.\n *\n * Mirrors the lazy-sweep approach in request-rate-limit.ts: eviction is\n * piggybacked on writes rather than run on a timer, so an idle viewer does no\n * background work. Expired entries (those past `expiresAtMs`) are always\n * dropped; if the map is still at capacity afterward — e.g. a burst of\n * distinct, still-live bypass keys — the oldest-expiring entries are evicted\n * to make room. This never changes hit/miss semantics for a live entry: the\n * caller still re-checks `expiresAtMs` on read, and only already-expired or\n * over-cap entries are removed here.\n */\nfunction sweepUsagePayloadCache(cache: Map<string, UsageCacheEntry>, nowMs: number): void {\n\tfor (const [key, entry] of cache) {\n\t\tif (entry.expiresAtMs <= nowMs) cache.delete(key);\n\t}\n\tif (cache.size < USAGE_PAYLOAD_CACHE_MAX_ENTRIES) return;\n\t// Leave room for the entry about to be inserted by evicting down to one\n\t// below the cap. Drop the soonest-to-expire entries first.\n\tconst byExpiry = [...cache.entries()].sort((a, b) => a[1].expiresAtMs - b[1].expiresAtMs);\n\tlet overflow = cache.size - USAGE_PAYLOAD_CACHE_MAX_ENTRIES + 1;\n\tfor (const [key] of byExpiry) {\n\t\tif (overflow <= 0) break;\n\t\tcache.delete(key);\n\t\toverflow -= 1;\n\t}\n}\n\n/**\n * Cheap fingerprint of the state that drives scope visibility\n * (`scope_memberships` / `replication_scopes`). Folding this into the usage\n * cache key ensures a membership/scope status change — e.g. a revocation —\n * invalidates any cached payload immediately instead of letting a device keep\n * reading a scope it can no longer see for up to the TTL. These tables are\n * small, so the aggregate is negligible next to the usage_events scan the\n * cache exists to avoid. Fails safe: any error forces a unique value so the\n * request bypasses the cache and recomputes visibility from scratch.\n */\nfunction scopeVisibilityGeneration(store: MemoryStore): string {\n\ttry {\n\t\tconst row = store.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT\n\t\t\t\t\t(SELECT COUNT(*) FROM scope_memberships) AS m_count,\n\t\t\t\t\t(SELECT COUNT(*) FROM scope_memberships WHERE status = 'active') AS m_active,\n\t\t\t\t\t(SELECT COALESCE(MAX(updated_at), '') FROM scope_memberships) AS m_updated,\n\t\t\t\t\t(SELECT COALESCE(MAX(membership_epoch), 0) FROM scope_memberships) AS m_epoch,\n\t\t\t\t\t(SELECT COUNT(*) FROM replication_scopes) AS s_count,\n\t\t\t\t\t(SELECT COUNT(*) FROM replication_scopes WHERE status = 'active') AS s_active,\n\t\t\t\t\t(SELECT COALESCE(MAX(updated_at), '') FROM replication_scopes) AS s_updated`,\n\t\t\t)\n\t\t\t.get() as Record<string, unknown> | undefined;\n\t\tif (!row) return \"no-scope-state\";\n\t\treturn [\n\t\t\trow.m_count,\n\t\t\trow.m_active,\n\t\t\trow.m_updated,\n\t\t\trow.m_epoch,\n\t\t\trow.s_count,\n\t\t\trow.s_active,\n\t\t\trow.s_updated,\n\t\t].join(\":\");\n\t} catch {\n\t\t// Fail safe: bypass the cache rather than risk serving a payload\n\t\t// computed under stale visibility rules.\n\t\treturn `bypass-${Date.now()}-${Math.random()}`;\n\t}\n}\n\nfunction usageCacheKey(store: MemoryStore, projectFilter: string | null): string {\n\tconst visibilityGeneration = scopeVisibilityGeneration(store);\n\treturn `${store.dbPath}|${store.actorId}|${store.deviceId}|${projectFilter ?? \"\"}|${visibilityGeneration}`;\n}\n\n/**\n * Create stats routes. The store factory is called per-request to get a\n * fresh connection (matching the Python viewer pattern).\n */\nexport function statsRoutes(getStore: () => MemoryStore) {\n\tconst app = new Hono();\n\n\tconst parseMetadataJson = (value: unknown): Record<string, unknown> | null => {\n\t\tif (typeof value !== \"string\" || !value.trim()) return null;\n\t\ttry {\n\t\t\treturn JSON.parse(value) as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t};\n\n\t// Keep completed jobs visible in /api/stats for a short window after\n\t// finished_at so the health UI has a chance to render success confirmation\n\t// for fast-completing backfills (often <1s). Failed jobs stay indefinitely.\n\tconst RECENTLY_COMPLETED_WINDOW_MS = 120_000;\n\n\tapp.get(\"/api/stats\", (c) => {\n\t\tconst store = getStore();\n\t\tconst jobs = listMaintenanceJobs(store.db);\n\t\tconst now = Date.now();\n\t\tconst surfacedJobs = sortActiveMaintenanceJobs(\n\t\t\tjobs.filter((job) => {\n\t\t\t\tif (job.status === \"pending\" || job.status === \"running\" || job.status === \"failed\") {\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (job.status === \"completed\" && job.finished_at) {\n\t\t\t\t\tconst finished = Date.parse(job.finished_at);\n\t\t\t\t\tif (Number.isFinite(finished) && now - finished <= RECENTLY_COMPLETED_WINDOW_MS) {\n\t\t\t\t\t\treturn true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn false;\n\t\t\t}),\n\t\t).map((job) => ({\n\t\t\tkind: job.kind,\n\t\t\ttitle: job.title,\n\t\t\tstatus: job.status,\n\t\t\tmessage: job.message,\n\t\t\tprogress: job.progress,\n\t\t\tfinished_at: job.finished_at,\n\t\t\terror: job.error,\n\t\t}));\n\t\treturn c.json({\n\t\t\t...store.stats(),\n\t\t\tviewer_pid: process.pid,\n\t\t\tmaintenance_jobs: surfacedJobs,\n\t\t});\n\t});\n\n\tapp.get(\"/api/runtime\", (c) => {\n\t\treturn c.json({\n\t\t\tversion: VERSION,\n\t\t});\n\t});\n\n\tapp.get(\"/api/usage\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst projectFilter = c.req.query(\"project\") || null;\n\t\t\tconst cacheKey = usageCacheKey(store, projectFilter);\n\t\t\tconst nowMs = Date.now();\n\t\t\tconst cached = usagePayloadCache.get(cacheKey);\n\t\t\tif (cached && nowMs < cached.expiresAtMs) {\n\t\t\t\treturn c.json(cached.payload);\n\t\t\t}\n\n\t\t\t// Token/event aggregates are unfiltered SQL GROUP BYs (matching\n\t\t\t// store.stats()), so they never load the full usage_events table\n\t\t\t// into JS. Only the small surfaced recent_packs window below keeps\n\t\t\t// per-row scope visibility + metadata sanitization.\n\t\t\tconst globalAggregate = store.usageAggregate();\n\t\t\tconst eventsGlobal = mapAggregateEvents(globalAggregate);\n\t\t\tconst totalsGlobal = totalsFromAggregate(globalAggregate);\n\t\t\tconst filteredAggregate = projectFilter ? store.usageAggregate(projectFilter) : null;\n\t\t\tconst eventsFiltered = filteredAggregate ? mapAggregateEvents(filteredAggregate) : null;\n\t\t\tconst totalsFiltered = filteredAggregate ? totalsFromAggregate(filteredAggregate) : null;\n\n\t\t\t// recent_packs candidate window. Over-fetch the most-recent pack\n\t\t\t// events (20x the 10 we surface) so that, in the common case where a\n\t\t\t// device sees most of its own packs, 10 *visible* packs survive the\n\t\t\t// scope filter below without ever scanning the whole table.\n\t\t\t// Tradeoff vs. the old full-scan-then-slice: if MORE than\n\t\t\t// (LIMIT - 10) of the newest packs are non-visible, fewer than 10\n\t\t\t// surface, and a visible pack older than the newest 200 is not\n\t\t\t// shown at all. That only bites a heavily-shared DB whose recent\n\t\t\t// activity is dominated by other scopes; for an activity widget the\n\t\t\t// bounded recompute on a 5s poll is the right call.\n\t\t\tconst RECENT_PACK_SCAN_LIMIT = 200;\n\t\t\tconst loadRecentPackWindow = (project?: string | null): UsageRow[] => {\n\t\t\t\tconst rows = project\n\t\t\t\t\t? (store.db\n\t\t\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\t\t`SELECT usage_events.id, usage_events.session_id, usage_events.event,\n\t\t\t\t\t\t\t\t\tusage_events.tokens_read, usage_events.tokens_written, usage_events.tokens_saved,\n\t\t\t\t\t\t\t\t\tusage_events.created_at, usage_events.metadata_json\n\t\t\t\t\t\t\t\t FROM usage_events\n\t\t\t\t\t\t\t\t JOIN sessions ON sessions.id = usage_events.session_id\n\t\t\t\t\t\t\t\t WHERE sessions.project = ? AND usage_events.event = 'pack'\n\t\t\t\t\t\t\t\t ORDER BY usage_events.created_at DESC\n\t\t\t\t\t\t\t\t LIMIT ?`,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.all(project, RECENT_PACK_SCAN_LIMIT) as Record<string, unknown>[])\n\t\t\t\t\t: (store.db\n\t\t\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\t\t`SELECT id, session_id, event, tokens_read, tokens_written, tokens_saved,\n\t\t\t\t\t\t\t\t\tcreated_at, metadata_json\n\t\t\t\t\t\t\t\t FROM usage_events\n\t\t\t\t\t\t\t\t WHERE event = 'pack'\n\t\t\t\t\t\t\t\t ORDER BY created_at DESC\n\t\t\t\t\t\t\t\t LIMIT ?`,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.all(RECENT_PACK_SCAN_LIMIT) as Record<string, unknown>[]);\n\t\t\t\treturn rows.map((row) => toUsageRow(row, parseMetadataJson(row.metadata_json)));\n\t\t\t};\n\t\t\tconst recentWindow = loadRecentPackWindow(projectFilter);\n\t\t\tconst recentVisibility = buildUsageVisibility(store, recentWindow);\n\t\t\tconst recentPacks = recentWindow\n\t\t\t\t.filter((row) => usageRowVisible(row, recentVisibility))\n\t\t\t\t.slice(0, 10)\n\t\t\t\t.map((row) => ({\n\t\t\t\t\t...row,\n\t\t\t\t\tmetadata_json: sanitizePackUsageMetadata(row.metadata_json, recentVisibility),\n\t\t\t\t}));\n\n\t\t\tconst payload: UsagePayload = {\n\t\t\t\tproject: projectFilter,\n\t\t\t\tevents: projectFilter ? eventsFiltered : eventsGlobal,\n\t\t\t\ttotals: projectFilter ? totalsFiltered : totalsGlobal,\n\t\t\t\tevents_global: eventsGlobal,\n\t\t\t\ttotals_global: totalsGlobal,\n\t\t\t\tevents_filtered: eventsFiltered,\n\t\t\t\ttotals_filtered: totalsFiltered,\n\t\t\t\trecent_packs: recentPacks,\n\t\t\t};\n\t\t\tconst setAtMs = Date.now();\n\t\t\tsweepUsagePayloadCache(usagePayloadCache, setAtMs);\n\t\t\tusagePayloadCache.set(cacheKey, {\n\t\t\t\tpayload,\n\t\t\t\texpiresAtMs: setAtMs + USAGE_PAYLOAD_CACHE_MS,\n\t\t\t});\n\t\t\treturn c.json(payload);\n\t\t}\n\t});\n\n\treturn app;\n}\n\n/**\n * Internals exposed for unit tests of the usage-cache eviction. Not part of the\n * route's public surface; consumers should go through the HTTP handlers.\n */\nexport const __usageCacheTestHooks = {\n\tcache: usagePayloadCache,\n\tsweep: sweepUsagePayloadCache,\n\tmaxEntries: USAGE_PAYLOAD_CACHE_MAX_ENTRIES,\n\tttlMs: USAGE_PAYLOAD_CACHE_MS,\n};\n","import type { LegacyTeamSetupActivationErrorCode, LegacyTeamSetupDraftView } from \"@codemem/core\";\n\nexport interface LegacyTeamSetupCandidateSummaryV1 {\n\tcandidateRef: string;\n\tdisplayName: string;\n\tstatus: \"needs_setup\" | \"in_progress\" | \"stale\" | \"ready\";\n\tdeviceCount: number;\n\tprojectCount: number;\n\tunresolvedDeviceCount: number;\n\tunresolvedProjectCount: number;\n}\n\nexport type LegacyTeamSetupPendingCandidateSummaryV1 = Omit<\n\tLegacyTeamSetupCandidateSummaryV1,\n\t\"status\"\n> & {\n\tstatus: Exclude<LegacyTeamSetupCandidateSummaryV1[\"status\"], \"ready\">;\n};\n\nexport interface LegacyTeamSetupSummaryResponseV1 {\n\tversion: 1;\n\tcandidates: LegacyTeamSetupPendingCandidateSummaryV1[];\n}\n\nexport type LegacyTeamSetupActionBlockedReasonV1 =\n\t| \"setup_incomplete\"\n\t| \"setup_unavailable\"\n\t| \"setup_completed\"\n\t| \"device_inactive\"\n\t| \"device_active\"\n\t| \"assignment_evidence_inactive\"\n\t| \"assignment_required\"\n\t| \"assignment_unavailable\"\n\t| \"decision_unresolved\"\n\t| \"mapping_unavailable\"\n\t| \"automatic_mapping\";\n\nexport type LegacyTeamSetupActionGateV1 =\n\t| { enabled: true; blockedReason: null }\n\t| { enabled: false; blockedReason: LegacyTeamSetupActionBlockedReasonV1 };\n\nexport type LegacyTeamSetupUnavailableReasonV1 = Exclude<\n\tLegacyTeamSetupActivationErrorCode,\n\t\"team_setup_projection_changed\"\n>;\n\nexport interface LegacyTeamSetupDeviceV1 {\n\tdeviceRef: string;\n\tdisplayName: string;\n\tenabled: boolean;\n\texistingIdentityRef: string | null;\n\tsuggestedIdentityRef: string | null;\n\tverifiedEvidenceKind: \"active_assignment\" | null;\n\tdecision: \"unresolved\" | \"included\" | \"excluded\" | \"removed\";\n\ttargetIdentityRef: string | null;\n\texpectation:\n\t\t| { kind: \"absent\" }\n\t\t| { kind: \"existing\"; assignmentVersion: number; identityRef: string };\n\tactions: {\n\t\tassignIdentity: LegacyTeamSetupActionGateV1;\n\t\tinclude: LegacyTeamSetupActionGateV1;\n\t\texclude: LegacyTeamSetupActionGateV1;\n\t\tremove: LegacyTeamSetupActionGateV1;\n\t\tclearDecision: LegacyTeamSetupActionGateV1;\n\t};\n}\n\nexport interface LegacyTeamSetupProjectV1 {\n\tprojectRef: string;\n\tdisplayName: string;\n\tresolution: \"unresolved\" | \"deterministic\" | \"explicit\";\n\tcanonicalProjectRef: string | null;\n\tresolvedProjectRef: string | null;\n\tmappingChoices: Array<{ resolvedProjectRef: string; displayName: string }>;\n\tactions: { map: LegacyTeamSetupActionGateV1 };\n}\n\nexport interface LegacyTeamSetupIdentityChoiceV1 {\n\tidentityRef: string;\n\tdisplayName: string;\n}\n\nexport interface LegacyTeamSetupViewerAccessDeltaV1 {\n\tteamChanges: Array<{\n\t\tteamRef: string;\n\t\tteamDisplayName: string;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t\tfromDeviceEligibilityMode: \"person_all_devices\" | \"reviewed_allowlist\" | null;\n\t\ttoDeviceEligibilityMode: \"reviewed_allowlist\";\n\t}>;\n\tmembershipChanges: Array<{\n\t\tteamRef: string;\n\t\tteamDisplayName: string;\n\t\tidentityRef: string;\n\t\tidentityDisplayName: string;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t}>;\n\tprojectChanges: Array<{\n\t\tprojectRef: string;\n\t\tprojectDisplayName: string;\n\t\tfromCanonicalProjectRef: string | null;\n\t\tfromResolvedProjectRef: string | null;\n\t\tfromResolvedProjectDisplayName: string | null;\n\t\ttoCanonicalProjectRef: string | null;\n\t\ttoResolvedProjectRef: string | null;\n\t\ttoResolvedProjectDisplayName: string | null;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t}>;\n\trecipientChanges: Array<{\n\t\tcanonicalProjectRef: string;\n\t\tcanonicalProjectDisplayName: string;\n\t\tcanonicalProjectKind: \"project\" | \"legacy_default_sharing\";\n\t\trecipientKind: \"team\";\n\t\trecipientRef: string;\n\t\trecipientDisplayName: string;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t}>;\n\tdeviceAccessChanges: Array<{\n\t\tcanonicalProjectRef: string;\n\t\tcanonicalProjectDisplayName: string;\n\t\tcanonicalProjectKind: \"project\" | \"legacy_default_sharing\";\n\t\tdeviceRef: string;\n\t\tdeviceDisplayName: string;\n\t\tchange: \"add\" | \"remove\";\n\t}>;\n}\n\ninterface LegacyTeamSetupViewBaseV1 {\n\tversion: 1;\n\tcandidate: LegacyTeamSetupCandidateSummaryV1;\n\tattemptId: string;\n\tunresolvedDeviceCount: number;\n\tunresolvedProjectCount: number;\n\tdevices: LegacyTeamSetupDeviceV1[];\n\tprojects: LegacyTeamSetupProjectV1[];\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n}\n\nexport type LegacyTeamSetupViewV1 =\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"reviewing\";\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: true; blockedReason: null };\n\t\t\t\tfinish: { enabled: false; blockedReason: \"setup_incomplete\" };\n\t\t\t};\n\t })\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"ready_to_finish\";\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: true; blockedReason: null };\n\t\t\t\tfinish: { enabled: true; blockedReason: null };\n\t\t\t};\n\t\t\tfinishDigest: string;\n\t\t\taccessDeltaDigest: string;\n\t\t\tviewerAccessDeltaDigest: string;\n\t\t\taccessDelta: LegacyTeamSetupViewerAccessDeltaV1;\n\t })\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"unavailable\";\n\t\t\tunavailableReason: LegacyTeamSetupUnavailableReasonV1;\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: true; blockedReason: null };\n\t\t\t\tfinish: { enabled: false; blockedReason: \"setup_unavailable\" };\n\t\t\t};\n\t })\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"completed\";\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: false; blockedReason: \"setup_completed\" };\n\t\t\t\tfinish: { enabled: false; blockedReason: \"setup_completed\" };\n\t\t\t};\n\t });\n\nexport type LegacyTeamSetupDetailResponseV1 = LegacyTeamSetupViewV1;\nexport type LegacyTeamSetupMutationResponseV1 = LegacyTeamSetupViewV1;\n\nexport interface LegacyTeamSetupErrorResponseV1 {\n\terror: LegacyTeamSetupActivationErrorCode;\n}\n\nexport interface LegacyTeamSetupFinishResponseV1 {\n\tversion: 1;\n\tstatus: \"completed\";\n\tteamRef: string;\n\tattemptId: string;\n\taccessDeltaDigest: string;\n\tcompletedAt: string;\n}\n\ntype DeviceData = Omit<LegacyTeamSetupDeviceV1, \"actions\">;\ntype ProjectData = Omit<LegacyTeamSetupProjectV1, \"actions\">;\n\ninterface ProjectViewInput {\n\tversion: 1;\n\tcandidate: LegacyTeamSetupCandidateSummaryV1;\n\tdraftState: LegacyTeamSetupDraftView[\"state\"];\n\tattemptId: string;\n\tunresolvedDeviceCount: number;\n\tunresolvedProjectCount: number;\n\tdevices: DeviceData[];\n\tprojects: ProjectData[];\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n\tunavailableReason: LegacyTeamSetupUnavailableReasonV1 | null;\n\tpreview: null | {\n\t\tfinishDigest: string;\n\t\taccessDeltaDigest: string;\n\t\tviewerAccessDeltaDigest: string;\n\t\taccessDelta: LegacyTeamSetupViewerAccessDeltaV1;\n\t};\n}\n\nconst enabled = { enabled: true, blockedReason: null } as const;\n\nfunction blocked<const Reason extends LegacyTeamSetupActionBlockedReasonV1>(\n\treason: Reason,\n): { enabled: false; blockedReason: Reason } {\n\treturn { enabled: false, blockedReason: reason };\n}\n\nfunction deviceActions(\n\tdevice: DeviceData,\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[],\n\tstate: LegacyTeamSetupViewV1[\"state\"],\n): LegacyTeamSetupDeviceV1[\"actions\"] {\n\tif (state === \"completed\") return disabledDeviceActions(\"setup_completed\");\n\tif (state === \"unavailable\") return disabledDeviceActions(\"setup_unavailable\");\n\tconst assignmentEvidenceInactive =\n\t\tdevice.expectation.kind === \"existing\" && device.verifiedEvidenceKind !== \"active_assignment\";\n\tconst targetAvailable = identityChoices.some(\n\t\t(identity) => identity.identityRef === device.targetIdentityRef,\n\t);\n\treturn {\n\t\tassignIdentity: !device.enabled\n\t\t\t? blocked(\"device_inactive\")\n\t\t\t: assignmentEvidenceInactive\n\t\t\t\t? blocked(\"assignment_evidence_inactive\")\n\t\t\t\t: identityChoices.length === 0\n\t\t\t\t\t? blocked(\"assignment_unavailable\")\n\t\t\t\t\t: enabled,\n\t\tinclude: !device.enabled\n\t\t\t? blocked(\"device_inactive\")\n\t\t\t: assignmentEvidenceInactive\n\t\t\t\t? blocked(\"assignment_evidence_inactive\")\n\t\t\t\t: !device.targetIdentityRef\n\t\t\t\t\t? blocked(\"assignment_required\")\n\t\t\t\t\t: !targetAvailable\n\t\t\t\t\t\t? blocked(\"assignment_unavailable\")\n\t\t\t\t\t\t: enabled,\n\t\texclude: device.enabled ? enabled : blocked(\"device_inactive\"),\n\t\tremove: device.enabled ? blocked(\"device_active\") : enabled,\n\t\tclearDecision: device.decision === \"unresolved\" ? blocked(\"decision_unresolved\") : enabled,\n\t};\n}\n\nfunction disabledDeviceActions(\n\treason: \"setup_completed\" | \"setup_unavailable\",\n): LegacyTeamSetupDeviceV1[\"actions\"] {\n\tconst gate = blocked(reason);\n\treturn {\n\t\tassignIdentity: gate,\n\t\tinclude: gate,\n\t\texclude: gate,\n\t\tremove: gate,\n\t\tclearDecision: gate,\n\t};\n}\n\nfunction projectActions(\n\tproject: ProjectData,\n\tstate: LegacyTeamSetupViewV1[\"state\"],\n): LegacyTeamSetupProjectV1[\"actions\"] {\n\tif (state === \"completed\") return { map: blocked(\"setup_completed\") };\n\tif (state === \"unavailable\") return { map: blocked(\"setup_unavailable\") };\n\treturn {\n\t\tmap:\n\t\t\tproject.resolution === \"deterministic\"\n\t\t\t\t? blocked(\"automatic_mapping\")\n\t\t\t\t: project.mappingChoices.length === 0\n\t\t\t\t\t? blocked(\"mapping_unavailable\")\n\t\t\t\t\t: enabled,\n\t};\n}\n\nfunction viewState(input: ProjectViewInput): LegacyTeamSetupViewV1[\"state\"] {\n\tif (input.draftState === \"completed\") return \"completed\";\n\tif (input.draftState === \"stale\" || input.unavailableReason) return \"unavailable\";\n\tif (input.preview) return \"ready_to_finish\";\n\treturn \"reviewing\";\n}\n\nexport function projectLegacyTeamSetupView(input: ProjectViewInput): LegacyTeamSetupViewV1 {\n\tconst state = viewState(input);\n\tconst base = {\n\t\tversion: input.version,\n\t\tcandidate: input.candidate,\n\t\tattemptId: input.attemptId,\n\t\tunresolvedDeviceCount: input.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: input.unresolvedProjectCount,\n\t\tdevices: input.devices.map((device) => ({\n\t\t\t...device,\n\t\t\tactions: deviceActions(device, input.identityChoices, state),\n\t\t})),\n\t\tprojects: input.projects.map((project) => ({\n\t\t\t...project,\n\t\t\tactions: projectActions(project, state),\n\t\t})),\n\t\tidentityChoices: input.identityChoices,\n\t};\n\tif (state === \"completed\") {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstate,\n\t\t\tactions: {\n\t\t\t\trefresh: blocked(\"setup_completed\"),\n\t\t\t\tfinish: blocked(\"setup_completed\"),\n\t\t\t},\n\t\t};\n\t}\n\tif (state === \"unavailable\") {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstate,\n\t\t\tunavailableReason: input.unavailableReason ?? \"team_setup_confirmation_stale\",\n\t\t\tactions: { refresh: enabled, finish: blocked(\"setup_unavailable\") },\n\t\t};\n\t}\n\tif (state === \"ready_to_finish\" && input.preview) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstate,\n\t\t\tactions: { refresh: enabled, finish: enabled },\n\t\t\t...input.preview,\n\t\t};\n\t}\n\treturn {\n\t\t...base,\n\t\tstate: \"reviewing\",\n\t\tactions: { refresh: enabled, finish: blocked(\"setup_incomplete\") },\n\t};\n}\n","import type {\n\tCoordinatorLegacyTeamCompletionManifestV1,\n\tCoordinatorLegacyTeamCompletionRecord,\n\tLegacyTeamCandidateView,\n\tLegacyTeamConfiguredGroupSnapshot,\n\tLegacyTeamSetupAccessDeltaV1,\n\tLegacyTeamSetupActivationErrorCode,\n\tLegacyTeamSetupActivationResultV1,\n\tLegacyTeamSetupDraftView,\n\tMemoryStore,\n} from \"@codemem/core\";\nimport {\n\tapplyLegacyTeamSetupCompletionManifest,\n\tapplyLegacyTeamSetupCompletionManifestAndReturnActivation,\n\tareLegacyTeamSetupCompletionPolicyFactsAdditivelyCompatible,\n\tbuildBaseUrl,\n\tcanonicalCoordinatorLegacyTeamCompletionManifestJson,\n\tclaimRecipientPolicyActorMutations,\n\tclaimRecipientPolicyPublicationMutation,\n\tclearLegacyTeamSetupDeviceDecision,\n\tcontainLegacyTeamSetupCompletionConflict,\n\tcoordinatorCreateLegacyTeamCompletionAction,\n\tcoordinatorGetLegacyTeamCompletionAction,\n\tcoordinatorListDevicesAction,\n\tcoordinatorListGroupsAction,\n\tcoordinatorListLegacyTeamCompletionsAction,\n\tderiveLegacyTeamSetupCompletionManifest,\n\tdeterministicPolicyTeamId,\n\tdiscoverLegacyTeamCandidates,\n\tfingerprintPublicKey,\n\tgetLegacyTeamSetupDraft,\n\tinspectFreshLegacyTeamSetupActivation,\n\tinspectLegacyTeamSetupActivation,\n\tisLegacyTeamCandidateSelectable,\n\tisLegacyTeamSetupProjectMappingIdentity,\n\tLegacyTeamSetupAdditiveConvergenceError,\n\tlegacyTeamCandidateId,\n\tlegacyTeamCandidateProjectInventory,\n\tlegacyTeamCanonicalProjectRef,\n\tlegacyTeamDeviceRef,\n\tlegacyTeamResolvedProjectRef,\n\tlegacyTeamSetupApiErrorCode,\n\tlistProjectScopeCandidates,\n\tpreviewLegacyTeamSetupActivation,\n\treadCoordinatorSyncConfig,\n\trecipientPolicyDigest,\n\treconstructLegacyTeamSetupCompletionManifest,\n\trefreshLegacyTeamCandidate,\n\treplayLegacyTeamSetupActivation,\n\trequireLegacyTeamSetupAccessDeltaWithinLimit,\n\tserializeRecipientPolicyCoordinatorGroupMutation,\n\tserializeRecipientPolicyPublicationMutation,\n\tserializeRecipientPolicyTeamMutation,\n\tsetLegacyTeamSetupDeviceAssignment,\n\tsetLegacyTeamSetupDeviceDecision,\n\tsetLegacyTeamSetupProjectMapping,\n\tvalidateLegacyTeamSetupCompletionManifest,\n\tvalidateLegacyTeamSetupCompletionManifestBinding,\n} from \"@codemem/core\";\nimport { type Context, Hono } from \"hono\";\nimport {\n\ttype LegacyTeamSetupCandidateSummaryV1,\n\ttype LegacyTeamSetupDetailResponseV1,\n\ttype LegacyTeamSetupDeviceV1,\n\ttype LegacyTeamSetupFinishResponseV1,\n\ttype LegacyTeamSetupIdentityChoiceV1,\n\ttype LegacyTeamSetupPendingCandidateSummaryV1,\n\ttype LegacyTeamSetupProjectV1,\n\ttype LegacyTeamSetupSummaryResponseV1,\n\ttype LegacyTeamSetupUnavailableReasonV1,\n\ttype LegacyTeamSetupViewerAccessDeltaV1,\n\tprojectLegacyTeamSetupView,\n} from \"./team-setup-view.js\";\n\nexport type {\n\tLegacyTeamSetupActionBlockedReasonV1,\n\tLegacyTeamSetupActionGateV1,\n\tLegacyTeamSetupCandidateSummaryV1,\n\tLegacyTeamSetupDetailResponseV1,\n\tLegacyTeamSetupDeviceV1,\n\tLegacyTeamSetupErrorResponseV1,\n\tLegacyTeamSetupFinishResponseV1,\n\tLegacyTeamSetupIdentityChoiceV1,\n\tLegacyTeamSetupMutationResponseV1,\n\tLegacyTeamSetupPendingCandidateSummaryV1,\n\tLegacyTeamSetupProjectV1,\n\tLegacyTeamSetupSummaryResponseV1,\n\tLegacyTeamSetupUnavailableReasonV1,\n\tLegacyTeamSetupViewerAccessDeltaV1,\n\tLegacyTeamSetupViewV1,\n} from \"./team-setup-view.js\";\n\nconst TEAM_SETUP_VERSION = 1 as const;\nconst MAX_CONFIGURED_GROUPS = 25;\nconst MAX_SCOPE_EVIDENCE_COORDINATORS = 100;\nconst MAX_DEVICES = 500;\nconst MAX_PROJECTS = 500;\nconst MAX_IDENTITY_CHOICES = 500;\nconst MAX_COMPLETED_IDENTITY_CHOICES = MAX_DEVICES * 4;\nconst MAX_PROJECT_MAPPING_CHOICES = 500;\nconst MAX_TOTAL_PROJECT_MAPPING_CHOICES = 10_000;\nconst MAX_PROJECT_MAPPING_SCAN_ROWS = 10_000;\nconst MAX_PROJECT_MAPPING_METADATA_ROWS = 10_000;\nconst MAX_MUTATION_BODY_BYTES = 8_192;\nconst SUMMARY_SNAPSHOT_CACHE_TTL_MS = 30_000;\nconst COORDINATOR_ROSTER_READ_BUDGET_MS = 60_000;\nexport const TEAM_SETUP_ROUTE_PREFIX = \"/api/sync/team-setup/v1\";\nconst CANDIDATE_REF_PATTERN = /^legacy-team-candidate:[0-9a-f]{32}$/u;\nconst DEVICE_REF_PATTERN = /^legacy-team-device-ref-v1:[0-9a-f]{64}$/u;\nconst PROJECT_REF_PATTERN = /^legacy-team-project-ref-v1:[0-9a-f]{64}$/u;\nconst IDENTITY_REF_PATTERN = /^legacy-team-viewer-identity-ref-v1:[0-9a-f]{64}$/u;\nconst RESOLVED_PROJECT_REF_PATTERN = /^legacy-team-resolved-project-ref-v1:[0-9a-f]{64}$/u;\nconst ATTEMPT_ID_PATTERN = /^legacy-team-attempt:[0-9a-f-]{36}$/u;\nconst FINISH_DIGEST_PATTERN = /^legacy-team-activation-finish-v1:[0-9a-f]{64}$/u;\nconst ACCESS_DELTA_DIGEST_PATTERN = /^legacy-team-access-delta:[0-9a-f]{64}$/u;\nconst VIEWER_ACCESS_DELTA_DIGEST_PATTERN = /^legacy-team-viewer-access-delta-v1:[0-9a-f]{64}$/u;\nconst activeCandidateMutations = new WeakMap<MemoryStore[\"db\"], Map<string, Promise<void>>>();\n\nfunction claimCandidateMutation(db: MemoryStore[\"db\"], candidateRef: string): (() => void) | null {\n\tlet active = activeCandidateMutations.get(db);\n\tif (!active) {\n\t\tactive = new Map();\n\t\tactiveCandidateMutations.set(db, active);\n\t}\n\tif (active.has(candidateRef)) return null;\n\tlet settle: () => void = () => undefined;\n\tconst settled = new Promise<void>((resolve) => {\n\t\tsettle = resolve;\n\t});\n\tactive.set(candidateRef, settled);\n\tlet released = false;\n\treturn () => {\n\t\tif (released) return;\n\t\treleased = true;\n\t\tactive?.delete(candidateRef);\n\t\tsettle();\n\t};\n}\n\n/** Resolves once the current holder of the candidate claim (if any) releases it. */\nfunction candidateMutationSettled(db: MemoryStore[\"db\"], candidateRef: string): Promise<void> {\n\treturn activeCandidateMutations.get(db)?.get(candidateRef) ?? Promise.resolve();\n}\n\nasync function runCandidateMutation<T>(\n\tdb: MemoryStore[\"db\"],\n\tcandidateRef: string,\n\toperation: () => Promise<T>,\n): Promise<boolean> {\n\tconst release = claimCandidateMutation(db, candidateRef);\n\tif (!release) return false;\n\ttry {\n\t\tawait operation();\n\t\treturn true;\n\t} finally {\n\t\trelease();\n\t}\n}\n\ninterface LegacyTeamConfiguredGroupSnapshotLoadOptions {\n\tcandidateRef?: string;\n\tdeadlineMs?: number;\n}\n\nexport interface LegacyTeamCandidateGroupDescriptor {\n\tgroupId: string;\n\tcoordinatorId: string;\n}\n\nexport type LegacyTeamConfiguredGroupSnapshotLoader = (\n\toptions?: LegacyTeamConfiguredGroupSnapshotLoadOptions,\n) => Promise<LegacyTeamConfiguredGroupSnapshot[]>;\n\nexport interface TeamSetupRoutesOptions {\n\tgetStore: () => MemoryStore;\n\tloadLegacyTeamConfiguredGroupSnapshots?: LegacyTeamConfiguredGroupSnapshotLoader;\n\tsnapshotLoaderDependencies?: LegacyTeamSnapshotLoaderDependencies;\n\tcompletionDependencies?: LegacyTeamCompletionDependencies | null;\n\treadCoordinatorConfig?: typeof readCoordinatorSyncConfig;\n\tregisterSummaryInvalidator?: (invalidate: () => void) => void;\n}\n\nexport interface LegacyTeamCompletionDependencies {\n\tcreate: typeof coordinatorCreateLegacyTeamCompletionAction;\n\tget?: typeof coordinatorGetLegacyTeamCompletionAction;\n\tlist: typeof coordinatorListLegacyTeamCompletionsAction;\n}\n\nconst defaultCompletionDependencies: LegacyTeamCompletionDependencies = {\n\tcreate: coordinatorCreateLegacyTeamCompletionAction,\n\tget: coordinatorGetLegacyTeamCompletionAction,\n\tlist: coordinatorListLegacyTeamCompletionsAction,\n};\n\ninterface LegacyTeamSnapshotLoaderDependencies {\n\treadConfig: typeof readCoordinatorSyncConfig;\n\tlistGroups: typeof coordinatorListGroupsAction;\n\tlistDevices: typeof coordinatorListDevicesAction;\n}\n\nconst defaultSnapshotLoaderDependencies: LegacyTeamSnapshotLoaderDependencies = {\n\treadConfig: readCoordinatorSyncConfig,\n\tlistGroups: coordinatorListGroupsAction,\n\tlistDevices: coordinatorListDevicesAction,\n};\n\nfunction safeCoordinatorError(): Error {\n\treturn new Error(\"team_setup_roster_unavailable\");\n}\n\nfunction isCoordinatorRosterTooLargeError(error: unknown): boolean {\n\treturn error instanceof Error && error.message === \"coordinator_response_too_large\";\n}\n\nfunction remoteCoordinatorHttpStatus(error: unknown): number | null {\n\tif (!(error instanceof Error)) return null;\n\tconst status = /Remote coordinator request failed \\((\\d{3})\\):/u.exec(error.message)?.[1];\n\treturn status ? Number(status) : null;\n}\n\nfunction isTransientCoordinatorReadError(error: unknown): boolean {\n\tif (!(error instanceof Error)) return false;\n\tconst remoteStatus = remoteCoordinatorHttpStatus(error);\n\tif (remoteStatus) return [408, 429, 500, 502, 503, 504].includes(remoteStatus);\n\treturn (\n\t\terror.name === \"TimeoutError\" ||\n\t\terror.name === \"AbortError\" ||\n\t\t/request_timeout|fetch failed|timed out|timeout/iu.test(error.message)\n\t);\n}\n\nfunction isUnsupportedCompletionQuery(error: unknown): boolean {\n\tconst status = remoteCoordinatorHttpStatus(error);\n\treturn status === 404 || status === 405;\n}\n\n/**\n * Batch completion decoding rejects the whole payload when any one record is\n * malformed or misattributed, so the failure cannot be pinned to a group.\n */\nfunction isUnattributableCompletionBatchError(error: unknown): boolean {\n\treturn (\n\t\terror instanceof Error &&\n\t\t(error.message === \"coordinator_completion_response_malformed\" ||\n\t\t\terror.message === \"coordinator_completion_group_mismatch\")\n\t);\n}\n\nasync function listCompletionRecordsPerGroup(\n\tgroupIds: readonly string[],\n\tlist: (groupIds: string[]) => Promise<CoordinatorLegacyTeamCompletionRecord[]>,\n): Promise<CoordinatorLegacyTeamCompletionRecord[]> {\n\t// A single group re-query would repeat the same undecodable payload.\n\tif (groupIds.length < 2) return [];\n\tconst records: CoordinatorLegacyTeamCompletionRecord[] = [];\n\tfor (const groupId of groupIds) {\n\t\ttry {\n\t\t\trecords.push(...(await list([groupId])));\n\t\t} catch (error) {\n\t\t\tif (!isUnattributableCompletionBatchError(error)) throw error;\n\t\t}\n\t}\n\treturn records;\n}\n\nasync function retryTransientCoordinatorRead<T>(\n\tread: (timeoutS: number) => Promise<T>,\n\tconfiguredTimeoutS: number,\n\tdeadlineMs: number,\n): Promise<T> {\n\tlet lastError: unknown;\n\tfor (let attempt = 0; attempt < 8; attempt += 1) {\n\t\tconst remainingMs = deadlineMs - Date.now();\n\t\tif (remainingMs <= 0) throw lastError ?? safeCoordinatorError();\n\t\ttry {\n\t\t\treturn await read(Math.max(0.1, Math.min(configuredTimeoutS, remainingMs / 1_000)));\n\t\t} catch (error) {\n\t\t\tlastError = error;\n\t\t\tif (!isTransientCoordinatorReadError(error) || attempt === 7) throw error;\n\t\t\tconst delayMs = Math.min(100 * 2 ** attempt, 2_000, deadlineMs - Date.now());\n\t\t\tif (delayMs <= 0) throw error;\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, delayMs));\n\t\t}\n\t}\n\tthrow lastError;\n}\n\nexport function remainingCoordinatorTimeoutS(\n\tconfiguredTimeoutS: number,\n\tdeadlineMs: number,\n\tnowMs = Date.now(),\n): number | null {\n\tconst remainingMs = deadlineMs - nowMs;\n\treturn remainingMs <= 0 ? null : Math.max(0.1, Math.min(configuredTimeoutS, remainingMs / 1_000));\n}\n\nfunction configuredGroupIds(groups: string[]): string[] {\n\tconst unique = [...new Set(groups.map((group) => group.trim()).filter(Boolean))];\n\tif (unique.length > MAX_CONFIGURED_GROUPS) throw safeCoordinatorError();\n\treturn unique;\n}\n\nexport function normalizedCoordinatorId(value: string): string | null {\n\ttry {\n\t\tconst normalized = buildBaseUrl(value);\n\t\tif (!normalized) return null;\n\t\tconst parsed = new URL(normalized);\n\t\tif (\n\t\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\t\t!parsed.host ||\n\t\t\tparsed.username ||\n\t\t\tparsed.password\n\t\t) {\n\t\t\treturn null;\n\t\t}\n\t\tconst path = parsed.pathname === \"/\" ? \"\" : parsed.pathname;\n\t\treturn `${parsed.protocol}//${parsed.host}${path}${parsed.search}`;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function legacyTeamCandidateGroupDescriptors(\n\tstore: MemoryStore | undefined,\n\tcoordinatorUrl: string,\n\tgroups: string[],\n): LegacyTeamCandidateGroupDescriptor[] {\n\tconst configuredIds = configuredGroupIds(groups);\n\tconst configuredCoordinatorId = buildBaseUrl(coordinatorUrl);\n\tconst normalizedConfiguredCoordinatorId = normalizedCoordinatorId(configuredCoordinatorId);\n\tif (!configuredCoordinatorId || !normalizedConfiguredCoordinatorId) throw safeCoordinatorError();\n\tlet scopeBackedDescriptors: LegacyTeamCandidateGroupDescriptor[] = [];\n\tif (store) {\n\t\ttry {\n\t\t\tscopeBackedDescriptors = scopeBackedGroupDescriptors(\n\t\t\t\tstore,\n\t\t\t\tnormalizedConfiguredCoordinatorId,\n\t\t\t\tMAX_CONFIGURED_GROUPS - configuredIds.length,\n\t\t\t\tconfiguredIds,\n\t\t\t);\n\t\t} catch {\n\t\t\t// Scope discovery is additive. Preserve configured coordinator candidates\n\t\t\t// when local evidence cannot be read.\n\t\t\tscopeBackedDescriptors = [];\n\t\t}\n\t}\n\treturn [\n\t\t...configuredIds.map((groupId) => ({ groupId, coordinatorId: configuredCoordinatorId })),\n\t\t...scopeBackedDescriptors,\n\t];\n}\n\nfunction scopeBackedGroupDescriptors(\n\tstore: MemoryStore,\n\tnormalizedConfiguredCoordinatorId: string,\n\tlimit: number,\n\texcludedGroupIds: string[],\n): LegacyTeamCandidateGroupDescriptor[] {\n\tif (limit <= 0) return [];\n\tconst textualCoordinatorIds = store.db\n\t\t.prepare(\n\t\t\t`SELECT DISTINCT coordinator_id FROM replication_scopes\n\t\t\t WHERE status = 'active' AND authority_type = 'coordinator'\n\t\t\t AND kind IN ('team', 'team_default', 'org', 'client')\n\t\t\t AND coordinator_id IS NOT NULL\n\t\t\t AND group_id IS NOT NULL AND TRIM(group_id) <> ''\n\t\t\t ORDER BY coordinator_id LIMIT ?`,\n\t\t)\n\t\t.pluck()\n\t\t.all(MAX_SCOPE_EVIDENCE_COORDINATORS + 1) as string[];\n\tif (textualCoordinatorIds.length > MAX_SCOPE_EVIDENCE_COORDINATORS) {\n\t\treturn [];\n\t}\n\tconst matchingTextualIds = textualCoordinatorIds.filter(\n\t\t(value) => normalizedCoordinatorId(value) === normalizedConfiguredCoordinatorId,\n\t);\n\tif (matchingTextualIds.length === 0) return [];\n\tconst coordinatorPlaceholders = matchingTextualIds.map(() => \"?\").join(\", \");\n\tconst excludedGroupClause =\n\t\texcludedGroupIds.length === 0\n\t\t\t? \"\"\n\t\t\t: `AND TRIM(group_id) NOT IN (${excludedGroupIds.map(() => \"?\").join(\", \")})`;\n\tconst groupIds = store.db\n\t\t.prepare(\n\t\t\t`SELECT DISTINCT TRIM(group_id) AS group_id FROM replication_scopes\n\t\t\t WHERE status = 'active' AND authority_type = 'coordinator'\n\t\t\t AND kind IN ('team', 'team_default', 'org', 'client')\n\t\t\t AND coordinator_id IN (${coordinatorPlaceholders})\n\t\t\t AND group_id IS NOT NULL AND TRIM(group_id) <> ''\n\t\t\t ${excludedGroupClause}\n\t\t\t ORDER BY TRIM(group_id) LIMIT ?`,\n\t\t)\n\t\t.pluck()\n\t\t.all(...matchingTextualIds, ...excludedGroupIds, limit) as string[];\n\tif (groupIds.length === 0) return [];\n\tconst groupPlaceholders = groupIds.map(() => \"?\").join(\", \");\n\tconst records = store.db\n\t\t.prepare(\n\t\t\t`SELECT DISTINCT TRIM(group_id) AS group_id, coordinator_id FROM replication_scopes\n\t\t\t WHERE status = 'active' AND authority_type = 'coordinator'\n\t\t\t AND kind IN ('team', 'team_default', 'org', 'client')\n\t\t\t AND coordinator_id IN (${coordinatorPlaceholders})\n\t\t\t AND TRIM(group_id) IN (${groupPlaceholders})\n\t\t\t ORDER BY TRIM(group_id), coordinator_id`,\n\t\t)\n\t\t.all(...matchingTextualIds, ...groupIds) as Array<{\n\t\tgroup_id: string;\n\t\tcoordinator_id: string;\n\t}>;\n\tconst coordinatorIdsByGroup = new Map<string, string[]>();\n\tfor (const record of records) {\n\t\tconst coordinatorIds = coordinatorIdsByGroup.get(record.group_id) ?? [];\n\t\tcoordinatorIds.push(record.coordinator_id);\n\t\tcoordinatorIdsByGroup.set(record.group_id, coordinatorIds);\n\t}\n\treturn groupIds.flatMap((groupId) => {\n\t\tconst coordinatorIds = coordinatorIdsByGroup.get(groupId) ?? [];\n\t\t// Equivalent textual coordinator IDs still represent distinct persisted\n\t\t// candidate identities. Never merge their authorization evidence by label.\n\t\tconst coordinatorId = coordinatorIds[0];\n\t\treturn coordinatorIds.length === 1 && coordinatorId ? [{ groupId, coordinatorId }] : [];\n\t});\n}\n\nasync function loadConfiguredLegacyTeamGroupSnapshotsWith(\n\tdependencies: LegacyTeamSnapshotLoaderDependencies,\n\toptions: LegacyTeamConfiguredGroupSnapshotLoadOptions = {},\n\tgetStore?: () => MemoryStore,\n): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\tlet config: ReturnType<typeof readCoordinatorSyncConfig>;\n\ttry {\n\t\tconfig = dependencies.readConfig();\n\t} catch {\n\t\tthrow safeCoordinatorError();\n\t}\n\tconst hasUrl = Boolean(config.syncCoordinatorUrl);\n\tconst hasSecret = Boolean(config.syncCoordinatorAdminSecret);\n\tif (!hasUrl && !hasSecret && config.syncCoordinatorGroups.length === 0) return [];\n\tif (!hasUrl || !hasSecret) throw safeCoordinatorError();\n\n\ttry {\n\t\tconst configuredCoordinatorId = buildBaseUrl(config.syncCoordinatorUrl);\n\t\tif (!configuredCoordinatorId) throw safeCoordinatorError();\n\t\tconst remoteUrl = configuredCoordinatorId;\n\t\tlet store: MemoryStore | undefined;\n\t\ttry {\n\t\t\tstore = getStore?.();\n\t\t} catch {\n\t\t\t// Scope discovery is additive. Preserve configured coordinator candidates\n\t\t\t// when local evidence cannot be read.\n\t\t\tstore = undefined;\n\t\t}\n\t\tconst groupDescriptors = legacyTeamCandidateGroupDescriptors(\n\t\t\tstore,\n\t\t\tconfig.syncCoordinatorUrl,\n\t\t\tconfig.syncCoordinatorGroups,\n\t\t);\n\t\tif (groupDescriptors.length === 0) throw safeCoordinatorError();\n\t\tconst timeoutS = Math.max(1, config.syncCoordinatorTimeoutS);\n\t\tconst deadlineMs = options.deadlineMs ?? Date.now() + COORDINATOR_ROSTER_READ_BUDGET_MS;\n\t\tconst requestedGroupDescriptors = options.candidateRef\n\t\t\t? groupDescriptors.filter(\n\t\t\t\t\t({ coordinatorId, groupId }) =>\n\t\t\t\t\t\tlegacyTeamCandidateId(coordinatorId, groupId) === options.candidateRef,\n\t\t\t\t)\n\t\t\t: groupDescriptors;\n\t\tconst groups = await retryTransientCoordinatorRead(\n\t\t\t(attemptTimeoutS) =>\n\t\t\t\tdependencies.listGroups({\n\t\t\t\t\tremoteUrl,\n\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\tincludeArchived: false,\n\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t}),\n\t\t\ttimeoutS,\n\t\t\tdeadlineMs,\n\t\t);\n\t\tconst groupById = new Map(groups.map((group) => [group.group_id, group]));\n\t\tconst outcomes = await Promise.all(\n\t\t\trequestedGroupDescriptors.map(async ({ coordinatorId, groupId }) => {\n\t\t\t\t// Authoritative absence is stale state, while malformed or unavailable\n\t\t\t\t// evidence stays fail-closed. Summary mode may isolate the latter only\n\t\t\t\t// when another requested group remains healthy.\n\t\t\t\tconst group = groupById.get(groupId);\n\t\t\t\tif (!group || group.archived_at != null) {\n\t\t\t\t\treturn { kind: \"absent\" as const };\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tgroup.group_id !== groupId ||\n\t\t\t\t\t(group.display_name !== null && typeof group.display_name !== \"string\")\n\t\t\t\t) {\n\t\t\t\t\tif (options.candidateRef) throw safeCoordinatorError();\n\t\t\t\t\treturn { kind: \"unavailable\" as const };\n\t\t\t\t}\n\t\t\t\tlet devices: Awaited<ReturnType<typeof coordinatorListDevicesAction>>;\n\t\t\t\ttry {\n\t\t\t\t\tdevices = await retryTransientCoordinatorRead(\n\t\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\t\tdependencies.listDevices({\n\t\t\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\t\t\tincludeDisabled: true,\n\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\tdeadlineMs,\n\t\t\t\t\t);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!options.candidateRef) return { kind: \"unavailable\" as const };\n\t\t\t\t\tif (isCoordinatorRosterTooLargeError(error)) {\n\t\t\t\t\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t\t\t\t\t}\n\t\t\t\t\tthrow safeCoordinatorError();\n\t\t\t\t}\n\t\t\t\tif (devices.length > MAX_DEVICES) {\n\t\t\t\t\tif (options.candidateRef) throw new Error(\"legacy_team_setup_roster_too_large\");\n\t\t\t\t\treturn { kind: \"unavailable\" as const };\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tdevices.some(\n\t\t\t\t\t\t(device) =>\n\t\t\t\t\t\t\tfingerprintPublicKey(device.public_key) !== device.fingerprint ||\n\t\t\t\t\t\t\t(device.enabled !== 0 && device.enabled !== 1),\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tif (options.candidateRef) throw safeCoordinatorError();\n\t\t\t\t\treturn { kind: \"unavailable\" as const };\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tkind: \"snapshot\" as const,\n\t\t\t\t\tsnapshot: {\n\t\t\t\t\t\tcoordinatorId,\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tdisplayName: group.display_name ?? \"Legacy Team\",\n\t\t\t\t\t\tdevices: devices.map((device) => ({\n\t\t\t\t\t\t\tdeviceId: device.device_id,\n\t\t\t\t\t\t\tfingerprint: device.fingerprint,\n\t\t\t\t\t\t\tdisplayName: device.display_name ?? \"Device\",\n\t\t\t\t\t\t\tenabled: device.enabled === 1,\n\t\t\t\t\t\t\tlabelRedactionIds: [device.identity_id ?? \"\", device.public_key].filter(Boolean),\n\t\t\t\t\t\t})),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\t\tconst validSnapshots = outcomes.flatMap((outcome) =>\n\t\t\toutcome.kind === \"snapshot\" ? [outcome.snapshot] : [],\n\t\t);\n\t\tif (validSnapshots.length === 0 && outcomes.some((outcome) => outcome.kind === \"unavailable\")) {\n\t\t\tthrow safeCoordinatorError();\n\t\t}\n\t\treturn validSnapshots;\n\t} catch (error) {\n\t\tif (error instanceof Error && error.message === \"legacy_team_setup_roster_too_large\") {\n\t\t\tthrow error;\n\t\t}\n\t\tthrow safeCoordinatorError();\n\t}\n}\n\nfunction requireBoundedSnapshots(groups: LegacyTeamConfiguredGroupSnapshot[]): void {\n\tif (groups.length > MAX_CONFIGURED_GROUPS) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n}\n\nfunction projectionOptions(store: MemoryStore) {\n\treturn { localActorId: store.actorId, localDeviceId: store.deviceId };\n}\n\nfunction discoverCandidates(\n\tstore: MemoryStore,\n\tgroups: LegacyTeamConfiguredGroupSnapshot[],\n): LegacyTeamCandidateView[] {\n\trequireBoundedSnapshots(groups);\n\treturn discoverLegacyTeamCandidates(store.db, {\n\t\tprojection: projectionOptions(store),\n\t\tgroups,\n\t});\n}\n\nfunction candidateSummary(candidate: LegacyTeamCandidateView): LegacyTeamSetupCandidateSummaryV1 {\n\treturn {\n\t\tcandidateRef: candidate.candidateRef,\n\t\tdisplayName: candidate.displayName,\n\t\tstatus: candidate.status,\n\t\tdeviceCount: candidate.deviceCount,\n\t\tprojectCount: candidate.projectCount,\n\t\tunresolvedDeviceCount: candidate.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: candidate.unresolvedProjectCount,\n\t};\n}\n\nfunction candidateSummaryForDraft(\n\tcandidate: LegacyTeamCandidateView,\n\tdraft: LegacyTeamSetupDraftView,\n): LegacyTeamSetupCandidateSummaryV1 {\n\treturn {\n\t\t...candidateSummary(candidate),\n\t\tstatus: draft.state === \"completed\" ? \"ready\" : draft.state,\n\t\tunresolvedDeviceCount: draft.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: draft.unresolvedProjectCount,\n\t};\n}\n\nfunction candidateFromDraft(draft: LegacyTeamSetupDraftView): LegacyTeamCandidateView {\n\treturn {\n\t\tcandidateRef: draft.candidateRef,\n\t\tdisplayName: draft.displayName,\n\t\tstatus: draft.state === \"completed\" ? \"ready\" : draft.state,\n\t\tdeviceCount: draft.devices.length,\n\t\tprojectCount: draft.projects.length,\n\t\tunresolvedDeviceCount: draft.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: draft.unresolvedProjectCount,\n\t};\n}\n\nfunction readPureCandidateViews(\n\tstore: MemoryStore,\n\tgroups: LegacyTeamConfiguredGroupSnapshot[],\n): LegacyTeamCandidateView[] {\n\tconst existing: LegacyTeamCandidateView[] = [];\n\tconst discoverable: LegacyTeamConfiguredGroupSnapshot[] = [];\n\tfor (const group of groups) {\n\t\tconst candidateRef = legacyTeamCandidateId(group.coordinatorId, group.groupId);\n\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\tif (hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t// Only canonical terminal completions pass through discovery: they can\n\t\t\t// reconcile missing setup recipient edges while preserving newer drafts.\n\t\t\tif (isLegacyTeamCandidateSelectable(store.db, candidateRef)) discoverable.push(group);\n\t\t\tcontinue;\n\t\t}\n\t\tif (!draft || draft.state === \"completed\") {\n\t\t\tdiscoverable.push(group);\n\t\t\tcontinue;\n\t\t}\n\t\texisting.push(candidateFromDraft(draft));\n\t}\n\treturn [...existing, ...discoverCandidates(store, discoverable)]\n\t\t.filter((candidate) => !hasCompletedLegacyTeamSetup(store, candidate.candidateRef))\n\t\t.toSorted((left, right) =>\n\t\t\tleft.candidateRef < right.candidateRef ? -1 : left.candidateRef > right.candidateRef ? 1 : 0,\n\t\t);\n}\n\nfunction hasCompletedLegacyTeamSetup(store: MemoryStore, candidateRef: string): boolean {\n\treturn Boolean(\n\t\tstore.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT 1 FROM policy_teams\n\t\t\t\t WHERE team_id = ? AND status = 'active'\n\t\t\t\t AND provenance = 'reviewed_team_candidate'\n\t\t\t\t AND migration_state = 'completed' LIMIT 1`,\n\t\t\t)\n\t\t\t.pluck()\n\t\t\t.get(deterministicPolicyTeamId(candidateRef)),\n\t);\n}\n\nfunction identityRef(candidateRef: string, identityId: string | null): string | null {\n\treturn identityId\n\t\t? recipientPolicyDigest(\"legacy-team-viewer-identity-ref-v1\", [candidateRef, identityId])\n\t\t: null;\n}\n\nfunction requiredIdentityRef(candidateRef: string, identityId: string): string {\n\treturn recipientPolicyDigest(\"legacy-team-viewer-identity-ref-v1\", [candidateRef, identityId]);\n}\n\nfunction teamRef(candidateRef: string, teamId: string): string {\n\treturn recipientPolicyDigest(\"legacy-team-viewer-team-ref-v1\", [candidateRef, teamId]);\n}\n\nfunction resolvedProjectRef(projectRef: string, projectIdentity: string | null): string | null {\n\treturn projectIdentity ? legacyTeamResolvedProjectRef(projectRef, projectIdentity) : null;\n}\n\nfunction viewerSafeAccessDelta(\n\tcandidateRef: string,\n\tdelta: LegacyTeamSetupAccessDeltaV1,\n\tlabels?: {\n\t\tteamDisplayName: string;\n\t\tdevices: Array<Omit<LegacyTeamSetupDeviceV1, \"actions\">>;\n\t\tprojects: Array<Omit<LegacyTeamSetupProjectV1, \"actions\">>;\n\t\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n\t},\n): LegacyTeamSetupViewerAccessDeltaV1 {\n\tconst fallbackLabels = new Map<string, string>();\n\tconst fallbackLabelCounts = new Map<string, number>();\n\tconst reservedLabels = new Set(\n\t\t[\n\t\t\tlabels?.teamDisplayName,\n\t\t\t...(labels?.devices.map((device) => device.displayName) ?? []),\n\t\t\t...(labels?.projects.flatMap((project) => [\n\t\t\t\tproject.displayName,\n\t\t\t\t...project.mappingChoices.map((choice) => choice.displayName),\n\t\t\t]) ?? []),\n\t\t\t...(labels?.identityChoices.map((identity) => identity.displayName) ?? []),\n\t\t]\n\t\t\t.filter((label): label is string => Boolean(label))\n\t\t\t.map((label) => normalizeChoiceLabelText(label).toLowerCase()),\n\t);\n\tconst fallbackLabel = (kind: string, ref: string) => {\n\t\tconst key = `${kind}:${ref}`;\n\t\tconst existing = fallbackLabels.get(key);\n\t\tif (existing) return existing;\n\t\tlet index = (fallbackLabelCounts.get(kind) ?? 0) + 1;\n\t\tlet label = `${kind} outside this setup (${index})`;\n\t\twhile (reservedLabels.has(normalizeChoiceLabelText(label).toLowerCase())) {\n\t\t\tindex += 1;\n\t\t\tlabel = `${kind} outside this setup (${index})`;\n\t\t}\n\t\tfallbackLabelCounts.set(kind, index);\n\t\treservedLabels.add(normalizeChoiceLabelText(label).toLowerCase());\n\t\tfallbackLabels.set(key, label);\n\t\treturn label;\n\t};\n\tconst projectsByRef = new Map(labels?.projects.map((project) => [project.projectRef, project]));\n\tconst projectsByCanonicalRef = new Map(\n\t\tlabels?.projects.flatMap((project) =>\n\t\t\tproject.canonicalProjectRef ? [[project.canonicalProjectRef, project] as const] : [],\n\t\t),\n\t);\n\tconst identitiesByRef = new Map(\n\t\tlabels?.identityChoices.map((identity) => [identity.identityRef, identity]),\n\t);\n\tconst devicesByRef = new Map(labels?.devices.map((device) => [device.deviceRef, device]));\n\tconst canonicalProjectPresentation = (identity: string, ref: string) => {\n\t\tif (identity === \"shared:default\") {\n\t\t\treturn { displayName: \"Legacy default sharing\", kind: \"legacy_default_sharing\" as const };\n\t\t}\n\t\treturn {\n\t\t\tdisplayName: projectsByCanonicalRef.get(ref)?.displayName ?? fallbackLabel(\"Project\", ref),\n\t\t\tkind: \"project\" as const,\n\t\t};\n\t};\n\tconst resolvedDisplayName = (projectRef: string, ref: string | null): string | null => {\n\t\tif (!ref) return null;\n\t\tconst project = projectsByRef.get(projectRef);\n\t\tconst choice = project?.mappingChoices.find((item) => item.resolvedProjectRef === ref);\n\t\tif (choice) return choice.displayName;\n\t\tif (project?.resolvedProjectRef === ref && project.resolution === \"deterministic\") {\n\t\t\treturn `${project.displayName} (automatic match)`;\n\t\t}\n\t\treturn fallbackLabel(\"Project\", ref);\n\t};\n\treturn {\n\t\tteamChanges: delta.teamChanges.map((change) => ({\n\t\t\tteamRef: teamRef(candidateRef, change.teamId),\n\t\t\tteamDisplayName:\n\t\t\t\tlabels?.teamDisplayName ?? fallbackLabel(\"Team\", teamRef(candidateRef, change.teamId)),\n\t\t\tchange: change.change,\n\t\t\tfromDeviceEligibilityMode: change.fromDeviceEligibilityMode,\n\t\t\ttoDeviceEligibilityMode: change.toDeviceEligibilityMode,\n\t\t})),\n\t\tmembershipChanges: delta.membershipChanges.map((change) => {\n\t\t\tconst identityRef = requiredIdentityRef(candidateRef, change.identityId);\n\t\t\tconst membershipTeamRef = teamRef(candidateRef, change.teamId);\n\t\t\treturn {\n\t\t\t\tteamRef: membershipTeamRef,\n\t\t\t\tteamDisplayName: labels?.teamDisplayName ?? fallbackLabel(\"Team\", membershipTeamRef),\n\t\t\t\tidentityRef,\n\t\t\t\tidentityDisplayName:\n\t\t\t\t\tidentitiesByRef.get(identityRef)?.displayName ?? fallbackLabel(\"Person\", identityRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t\tprojectChanges: delta.projectChanges.map((change) => {\n\t\t\tconst fromRef = resolvedProjectRef(change.projectRef, change.fromProjectIdentity);\n\t\t\tconst toRef = resolvedProjectRef(change.projectRef, change.toProjectIdentity);\n\t\t\treturn {\n\t\t\t\tprojectRef: change.projectRef,\n\t\t\t\tprojectDisplayName:\n\t\t\t\t\tprojectsByRef.get(change.projectRef)?.displayName ??\n\t\t\t\t\tfallbackLabel(\"Project\", change.projectRef),\n\t\t\t\tfromCanonicalProjectRef: change.fromProjectIdentity\n\t\t\t\t\t? legacyTeamCanonicalProjectRef(candidateRef, change.fromProjectIdentity)\n\t\t\t\t\t: null,\n\t\t\t\tfromResolvedProjectRef: fromRef,\n\t\t\t\tfromResolvedProjectDisplayName: resolvedDisplayName(change.projectRef, fromRef),\n\t\t\t\ttoCanonicalProjectRef: change.toProjectIdentity\n\t\t\t\t\t? legacyTeamCanonicalProjectRef(candidateRef, change.toProjectIdentity)\n\t\t\t\t\t: null,\n\t\t\t\ttoResolvedProjectRef: toRef,\n\t\t\t\ttoResolvedProjectDisplayName: resolvedDisplayName(change.projectRef, toRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t\trecipientChanges: delta.recipientChanges.map((change) => {\n\t\t\tconst canonicalProjectRef = legacyTeamCanonicalProjectRef(\n\t\t\t\tcandidateRef,\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t);\n\t\t\tconst recipientRef = teamRef(candidateRef, change.recipientId);\n\t\t\tconst projectPresentation = canonicalProjectPresentation(\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t\tcanonicalProjectRef,\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tcanonicalProjectRef,\n\t\t\t\tcanonicalProjectDisplayName: projectPresentation.displayName,\n\t\t\t\tcanonicalProjectKind: projectPresentation.kind,\n\t\t\t\trecipientKind: change.recipientKind,\n\t\t\t\trecipientRef,\n\t\t\t\trecipientDisplayName: labels?.teamDisplayName ?? fallbackLabel(\"Team\", recipientRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t\tdeviceAccessChanges: delta.deviceAccessChanges.map((change) => {\n\t\t\tconst canonicalProjectRef = legacyTeamCanonicalProjectRef(\n\t\t\t\tcandidateRef,\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t);\n\t\t\tconst deviceRef = legacyTeamDeviceRef(candidateRef, change.deviceId);\n\t\t\tconst projectPresentation = canonicalProjectPresentation(\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t\tcanonicalProjectRef,\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tcanonicalProjectRef,\n\t\t\t\tcanonicalProjectDisplayName: projectPresentation.displayName,\n\t\t\t\tcanonicalProjectKind: projectPresentation.kind,\n\t\t\t\tdeviceRef,\n\t\t\t\tdeviceDisplayName:\n\t\t\t\t\tdevicesByRef.get(deviceRef)?.displayName ?? fallbackLabel(\"Device\", deviceRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t};\n}\n\nfunction viewerAccessDeltaDigest(delta: LegacyTeamSetupViewerAccessDeltaV1): string {\n\treturn recipientPolicyDigest(\"legacy-team-viewer-access-delta-v1\", delta);\n}\n\nconst SAFE_CHOICE_LABEL_PATTERN = /^[\\p{L}\\p{N} '&,.()_-]*$/u;\n\n// Keep this byte-for-byte equivalent in behavior to the core setup-label\n// normalization without exporting a presentation-only core implementation.\nfunction normalizeChoiceLabelText(value: string): string {\n\treturn value\n\t\t.normalize(\"NFKC\")\n\t\t.replace(/\\p{Cf}/gu, \"\")\n\t\t.replace(/\\p{Cc}/gu, \" \")\n\t\t.replace(/\\s+/gu, \" \")\n\t\t.trim();\n}\n\nfunction safeChoiceLabel(\n\tvalue: string,\n\tfallback: string,\n\tforbiddenIds: readonly string[],\n\topaqueRef?: string,\n): string {\n\tconst normalized = normalizeChoiceLabelText(value.slice(0, 512));\n\tconst label = normalized.slice(0, 120).trim();\n\tconst forbiddenComparisons = forbiddenIds\n\t\t.map((forbiddenId) => normalizeChoiceLabelText(forbiddenId).toLowerCase())\n\t\t.filter(Boolean);\n\tconst comparable = normalized.toLowerCase();\n\tif (\n\t\t!label ||\n\t\t!SAFE_CHOICE_LABEL_PATTERN.test(label) ||\n\t\t/[\\p{L}\\p{N}]\\.[\\p{L}\\p{N}]/u.test(label) ||\n\t\t/-----|\\b(?:ssh|ecdsa|sk)-[\\p{L}\\p{N}-]+ /iu.test(label) ||\n\t\tforbiddenComparisons.some((forbiddenComparison) => comparable.includes(forbiddenComparison))\n\t) {\n\t\tconst suffix = opaqueRef?.slice(-6);\n\t\treturn suffix ? `${fallback} ${suffix}` : fallback;\n\t}\n\treturn label;\n}\n\nfunction disambiguateChoiceLabels<T extends { displayName: string }>(\n\tchoices: readonly T[],\n\tchoiceRef: (choice: T) => string,\n): T[] {\n\tconst counts = new Map<string, number>();\n\tconst originalLabels = new Set<string>();\n\tfor (const choice of choices) {\n\t\tconst comparable = normalizeChoiceLabelText(choice.displayName).toLowerCase();\n\t\tcounts.set(comparable, (counts.get(comparable) ?? 0) + 1);\n\t\toriginalLabels.add(comparable);\n\t}\n\tconst usedLabels = new Set<string>();\n\treturn choices.map((choice, index) => {\n\t\tconst comparable = normalizeChoiceLabelText(choice.displayName).toLowerCase();\n\t\tif ((counts.get(comparable) ?? 0) < 2 && !usedLabels.has(comparable)) {\n\t\t\tusedLabels.add(comparable);\n\t\t\treturn choice;\n\t\t}\n\t\tconst ref = choiceRef(choice);\n\t\tlet suffixLength = Math.min(6, ref.length);\n\t\tlet suffix = ref.slice(-suffixLength);\n\t\tconst maxAttempts = ref.length + originalLabels.size + usedLabels.size + 2;\n\t\tfor (let attempt = 0; attempt < maxAttempts; attempt += 1) {\n\t\t\tconst baseLength = Math.max(0, 119 - suffix.length);\n\t\t\tconst base = choice.displayName.slice(0, baseLength).trimEnd();\n\t\t\tconst displayName = base ? `${base} ${suffix}` : suffix.slice(-120);\n\t\t\tconst finalComparable = normalizeChoiceLabelText(displayName).toLowerCase();\n\t\t\tif (!usedLabels.has(finalComparable) && !originalLabels.has(finalComparable)) {\n\t\t\t\tusedLabels.add(finalComparable);\n\t\t\t\treturn { ...choice, displayName };\n\t\t\t}\n\t\t\tif (suffixLength < ref.length) {\n\t\t\t\tsuffixLength = Math.min(ref.length, suffixLength + 2);\n\t\t\t\tsuffix = ref.slice(-suffixLength);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tsuffix = `${ref.slice(-Math.min(96, ref.length))}-${index + 1}-${attempt + 1}`;\n\t\t}\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t});\n}\n\nfunction requireCompleteMappingChoices(projectCount: number, choiceCount: number): void {\n\tif (projectCount * choiceCount > MAX_TOTAL_PROJECT_MAPPING_CHOICES) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n}\n\nfunction createCachedSnapshotLoader(\n\tload: () => Promise<LegacyTeamConfiguredGroupSnapshot[]>,\n\tttlMs: number,\n\tnow: () => number = Date.now,\n): (() => Promise<LegacyTeamConfiguredGroupSnapshot[]>) & {\n\tinvalidate: () => void;\n\tpeek: () => LegacyTeamConfiguredGroupSnapshot[] | null;\n} {\n\tlet cached: { expiresAt: number; snapshots: LegacyTeamConfiguredGroupSnapshot[] } | null = null;\n\tlet inFlight: Promise<LegacyTeamConfiguredGroupSnapshot[]> | null = null;\n\tlet generation = 0;\n\tconst cachedLoad = () => {\n\t\tif (cached && now() < cached.expiresAt) return Promise.resolve(cached.snapshots);\n\t\tif (inFlight) return inFlight;\n\t\tconst operationGeneration = generation;\n\t\tlet operation: Promise<LegacyTeamConfiguredGroupSnapshot[]>;\n\t\toperation = load()\n\t\t\t.then((snapshots) => {\n\t\t\t\tif (generation !== operationGeneration) return cachedLoad();\n\t\t\t\tcached = { expiresAt: now() + ttlMs, snapshots };\n\t\t\t\treturn snapshots;\n\t\t\t})\n\t\t\t.finally(() => {\n\t\t\t\tif (inFlight === operation) inFlight = null;\n\t\t\t});\n\t\tinFlight = operation;\n\t\treturn operation;\n\t};\n\tcachedLoad.invalidate = () => {\n\t\tgeneration += 1;\n\t\tcached = null;\n\t\tinFlight = null;\n\t};\n\tcachedLoad.peek = () => (cached && now() < cached.expiresAt ? cached.snapshots : null);\n\treturn cachedLoad;\n}\n\nasync function loadMutableCandidateSnapshots(\n\tstore: MemoryStore,\n\tcandidateRef: string,\n\tload: () => Promise<LegacyTeamConfiguredGroupSnapshot[]>,\n): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\tif (getLegacyTeamSetupDraft(store.db, candidateRef)?.state === \"completed\") {\n\t\tthrow new Error(\"team_setup_confirmation_stale\");\n\t}\n\treturn load();\n}\n\nfunction projectMutationAtomically<Mutation, Projection>(\n\tstore: MemoryStore,\n\tmutate: () => Mutation,\n\tproject: (mutation: Mutation) => Projection,\n): Projection {\n\treturn store.db.transaction(() => project(mutate())).immediate();\n}\n\nexport const __teamSetupTestHooks = {\n\tcreateCachedSnapshotLoader,\n\tloadConfiguredLegacyTeamGroupSnapshotsWith,\n\tnormalizedCoordinatorId,\n\tprojectMutationAtomically,\n\trequireBoundedAccessDelta: requireLegacyTeamSetupAccessDeltaWithinLimit,\n\trequireCompleteMappingChoices,\n\tdisambiguateChoiceLabels,\n\tsafeChoiceLabel,\n\tviewerSafeAccessDelta,\n};\n\ninterface IdentityChoiceInternal extends LegacyTeamSetupIdentityChoiceV1 {\n\tidentityId: string;\n}\n\ntype IdentityChoiceRow = { actor_id: string; display_name: string };\n\nfunction identityChoicesFromRows(\n\trows: IdentityChoiceRow[],\n\tcandidateRef: string,\n\tmaxChoices = MAX_IDENTITY_CHOICES,\n): IdentityChoiceInternal[] {\n\tif (rows.length > maxChoices) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n\tconst actorIds = rows.map((row) => row.actor_id);\n\treturn disambiguateChoiceLabels(\n\t\trows.map((row) => {\n\t\t\tconst opaqueIdentityRef = requiredIdentityRef(candidateRef, row.actor_id);\n\t\t\treturn {\n\t\t\t\tidentityId: row.actor_id,\n\t\t\t\tidentityRef: opaqueIdentityRef,\n\t\t\t\tdisplayName: safeChoiceLabel(row.display_name, \"Person\", actorIds, opaqueIdentityRef),\n\t\t\t};\n\t\t}),\n\t\t(choice) => choice.identityRef,\n\t);\n}\n\nfunction identityChoices(store: MemoryStore, candidateRef: string): IdentityChoiceInternal[] {\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT actor_id, display_name FROM actors\n\t\t\t WHERE status = 'active' AND merged_into_actor_id IS NULL\n\t\t\t ORDER BY display_name, actor_id LIMIT ?`,\n\t\t)\n\t\t.all(MAX_IDENTITY_CHOICES + 1) as IdentityChoiceRow[];\n\treturn identityChoicesFromRows(rows, candidateRef);\n}\n\nfunction completedDraftIdentityChoices(\n\tstore: MemoryStore,\n\tdraft: LegacyTeamSetupDraftView,\n): IdentityChoiceInternal[] {\n\tconst actorIds = [\n\t\t...new Set(\n\t\t\tdraft.devices.flatMap((device) => [\n\t\t\t\tdevice.existingIdentityId,\n\t\t\t\tdevice.suggestedIdentityId,\n\t\t\t\tdevice.targetIdentityId,\n\t\t\t\tdevice.expectation.kind === \"existing\" ? device.expectation.identityId : null,\n\t\t\t]),\n\t\t),\n\t].filter((actorId): actorId is string => actorId !== null);\n\tif (actorIds.length === 0) return [];\n\tconst placeholders = actorIds.map(() => \"?\").join(\", \");\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT actor_id, display_name FROM actors\n\t\t\t WHERE status = 'active' AND merged_into_actor_id IS NULL\n\t\t\t AND actor_id IN (${placeholders})\n\t\t\t ORDER BY display_name, actor_id`,\n\t\t)\n\t\t.all(...actorIds) as IdentityChoiceRow[];\n\treturn identityChoicesFromRows(rows, draft.candidateRef, MAX_COMPLETED_IDENTITY_CHOICES);\n}\n\ninterface ProjectMappingChoiceInternal {\n\tprojectIdentity: string;\n\tsourceDisplayName: string;\n}\n\nfunction projectMappingChoices(store: MemoryStore): ProjectMappingChoiceInternal[] {\n\tlet candidates: ReturnType<typeof listProjectScopeCandidates>;\n\ttry {\n\t\tcandidates = listProjectScopeCandidates(store.db, {\n\t\t\tlimit: null,\n\t\t\tmaxScannedRows: MAX_PROJECT_MAPPING_SCAN_ROWS,\n\t\t\tmaxMetadataRows: MAX_PROJECT_MAPPING_METADATA_ROWS,\n\t\t\texcludePeerReceived: true,\n\t\t}).filter(\n\t\t\t(candidate) =>\n\t\t\t\t!candidate.read_only &&\n\t\t\t\tisLegacyTeamSetupProjectMappingIdentity(candidate.workspace_identity, store.db),\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"project_scope_candidate_scan_too_large\" ||\n\t\t\t\terror.message === \"project_scope_candidate_metadata_too_large\")\n\t\t) {\n\t\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t\t}\n\t\tthrow error;\n\t}\n\tif (candidates.length > MAX_PROJECT_MAPPING_CHOICES) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n\treturn candidates.map((candidate) => ({\n\t\tprojectIdentity: candidate.workspace_identity,\n\t\tsourceDisplayName: candidate.display_project,\n\t}));\n}\n\ninterface ViewerSafeDraft {\n\tdevices: Array<Omit<LegacyTeamSetupDeviceV1, \"actions\">>;\n\tprojects: Array<Omit<LegacyTeamSetupProjectV1, \"actions\">>;\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n}\n\nfunction viewerSafeDraft(store: MemoryStore, draft: LegacyTeamSetupDraftView): ViewerSafeDraft {\n\tif (draft.devices.length > MAX_DEVICES || draft.projects.length > MAX_PROJECTS) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n\tconst completed = draft.state === \"completed\";\n\tconst identities = completed\n\t\t? completedDraftIdentityChoices(store, draft)\n\t\t: identityChoices(store, draft.candidateRef);\n\tconst mappableProjectCount = completed\n\t\t? 0\n\t\t: draft.projects.filter((project) => project.resolution !== \"deterministic\").length;\n\tconst mappingChoices = mappableProjectCount === 0 ? [] : projectMappingChoices(store);\n\trequireCompleteMappingChoices(mappableProjectCount, mappingChoices.length);\n\tconst mappingChoiceIdentities = mappingChoices.map((choice) => choice.projectIdentity);\n\treturn {\n\t\tdevices: draft.devices.map((device) => ({\n\t\t\tdeviceRef: device.deviceRef,\n\t\t\tdisplayName: device.displayName,\n\t\t\tenabled: device.enabled,\n\t\t\texistingIdentityRef: identityRef(draft.candidateRef, device.existingIdentityId),\n\t\t\tsuggestedIdentityRef: identityRef(draft.candidateRef, device.suggestedIdentityId),\n\t\t\tverifiedEvidenceKind: device.verifiedEvidenceKind,\n\t\t\tdecision: device.decision,\n\t\t\ttargetIdentityRef: identityRef(draft.candidateRef, device.targetIdentityId),\n\t\t\texpectation:\n\t\t\t\tdevice.expectation.kind === \"existing\"\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tkind: \"existing\" as const,\n\t\t\t\t\t\t\tassignmentVersion: device.expectation.assignmentVersion,\n\t\t\t\t\t\t\tidentityRef: requiredIdentityRef(draft.candidateRef, device.expectation.identityId),\n\t\t\t\t\t\t}\n\t\t\t\t\t: { kind: \"absent\" as const },\n\t\t})),\n\t\tprojects: draft.projects.map((project) => ({\n\t\t\tprojectRef: project.projectRef,\n\t\t\tdisplayName: project.displayName,\n\t\t\tresolution: project.resolution,\n\t\t\tcanonicalProjectRef: project.canonicalProjectRef,\n\t\t\tresolvedProjectRef: project.resolvedProjectRef,\n\t\t\tmappingChoices:\n\t\t\t\tproject.resolution === \"deterministic\"\n\t\t\t\t\t? []\n\t\t\t\t\t: disambiguateChoiceLabels(\n\t\t\t\t\t\t\tmappingChoices.map((choice) => {\n\t\t\t\t\t\t\t\tconst opaqueResolvedProjectRef = legacyTeamResolvedProjectRef(\n\t\t\t\t\t\t\t\t\tproject.projectRef,\n\t\t\t\t\t\t\t\t\tchoice.projectIdentity,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\t\tresolvedProjectRef: opaqueResolvedProjectRef,\n\t\t\t\t\t\t\t\t\tdisplayName: safeChoiceLabel(\n\t\t\t\t\t\t\t\t\t\tchoice.sourceDisplayName,\n\t\t\t\t\t\t\t\t\t\t\"Project\",\n\t\t\t\t\t\t\t\t\t\tmappingChoiceIdentities,\n\t\t\t\t\t\t\t\t\t\topaqueResolvedProjectRef,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t(choice) => choice.resolvedProjectRef,\n\t\t\t\t\t\t),\n\t\t})),\n\t\tidentityChoices: identities.map(({ identityRef, displayName }) => ({\n\t\t\tidentityRef,\n\t\t\tdisplayName,\n\t\t})),\n\t};\n}\n\nfunction viewerSafePreview(\n\tdraft: LegacyTeamSetupDraftView,\n\tsafeDraft: ViewerSafeDraft,\n\tpreview: ReturnType<typeof inspectLegacyTeamSetupActivation>,\n) {\n\tconst accessDelta = viewerSafeAccessDelta(draft.candidateRef, preview.accessDelta, {\n\t\tteamDisplayName: draft.displayName,\n\t\t...safeDraft,\n\t});\n\treturn {\n\t\tfinishDigest: preview.finishDigest,\n\t\taccessDeltaDigest: preview.accessDeltaDigest,\n\t\tviewerAccessDeltaDigest: viewerAccessDeltaDigest(accessDelta),\n\t\taccessDelta,\n\t};\n}\n\nfunction errorStatus(code: LegacyTeamSetupActivationErrorCode): 400 | 409 | 503 {\n\tif (code === \"team_setup_roster_unavailable\" || code === \"team_setup_completion_unavailable\")\n\t\treturn 503;\n\tif (code === \"team_setup_failed\") return 503;\n\tif (code === \"team_setup_incomplete\") return 400;\n\treturn 409;\n}\n\nfunction apiErrorCode(error: unknown): LegacyTeamSetupActivationErrorCode {\n\tconst code = legacyTeamSetupApiErrorCode(error);\n\treturn code === \"team_setup_projection_changed\" ? \"team_setup_conflict\" : code;\n}\n\nfunction completionApiError(error: unknown): LegacyTeamSetupActivationErrorCode {\n\tconst code = legacyTeamSetupApiErrorCode(error);\n\treturn code === \"team_setup_failed\" ? \"team_setup_completion_unavailable\" : code;\n}\n\ntype BoundedJsonResult = { ok: true; value: Record<string, unknown> } | { ok: false };\n\nasync function parseBoundedJsonObject(c: Context): Promise<BoundedJsonResult> {\n\tconst contentType = c.req.header(\"content-type\")?.split(\";\", 1)[0]?.trim().toLowerCase();\n\tif (contentType !== \"application/json\") return { ok: false };\n\tconst lengthHeader = c.req.header(\"content-length\");\n\tif (lengthHeader != null && !/^\\d+$/u.test(lengthHeader.trim())) return { ok: false };\n\tconst contentLength = lengthHeader == null ? null : Number(lengthHeader);\n\tif (contentLength != null && contentLength > MAX_MUTATION_BODY_BYTES) return { ok: false };\n\tconst body = c.req.raw.body;\n\tif (!body) return { ok: false };\n\tconst reader = body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (!value) continue;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > MAX_MUTATION_BODY_BYTES) {\n\t\t\t\tawait reader.cancel().catch(() => undefined);\n\t\t\t\treturn { ok: false };\n\t\t\t}\n\t\t\tchunks.push(value);\n\t\t}\n\t} catch {\n\t\treturn { ok: false };\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\ttry {\n\t\tconst bytes = new Uint8Array(total);\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tbytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t\tconst parsed = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes)) as unknown;\n\t\treturn parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n\t\t\t? { ok: true, value: parsed as Record<string, unknown> }\n\t\t\t: { ok: false };\n\t} catch {\n\t\treturn { ok: false };\n\t}\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst actual = Object.keys(value).toSorted();\n\tconst expected = keys.toSorted();\n\treturn actual.length === expected.length && actual.every((key, index) => key === expected[index]);\n}\n\nfunction detailResponse(\n\tstore: MemoryStore,\n\tdraft: LegacyTeamSetupDraftView,\n\tcandidate: LegacyTeamCandidateView = candidateFromDraft(draft),\n): LegacyTeamSetupDetailResponseV1 {\n\tlet unavailableReason: LegacyTeamSetupUnavailableReasonV1 | null = null;\n\tlet preview: ReturnType<typeof inspectLegacyTeamSetupActivation> | null = null;\n\tif (draft.state !== \"completed\") {\n\t\ttry {\n\t\t\tpreview = inspectLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef: draft.candidateRef,\n\t\t\t\tattemptId: draft.attemptId,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\tif (code === \"team_setup_failed\") throw error;\n\t\t\tif (code === \"team_setup_projection_changed\") unavailableReason = \"team_setup_conflict\";\n\t\t\telse if (code !== \"team_setup_incomplete\") unavailableReason = code;\n\t\t}\n\t}\n\tif (preview) requireLegacyTeamSetupAccessDeltaWithinLimit(preview.accessDelta);\n\tconst safeDraft = viewerSafeDraft(store, draft);\n\tconst safePreview = preview ? viewerSafePreview(draft, safeDraft, preview) : null;\n\treturn projectLegacyTeamSetupView({\n\t\tversion: TEAM_SETUP_VERSION,\n\t\tcandidate: candidateSummaryForDraft(candidate, draft),\n\t\tdraftState: draft.state,\n\t\tattemptId: draft.attemptId,\n\t\tunresolvedDeviceCount: draft.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: draft.unresolvedProjectCount,\n\t\t...safeDraft,\n\t\tunavailableReason,\n\t\tpreview: safePreview,\n\t});\n}\n\nfunction finishResponse(\n\tcandidateRef: string,\n\tresult: LegacyTeamSetupActivationResultV1,\n): LegacyTeamSetupFinishResponseV1 {\n\treturn {\n\t\tversion: TEAM_SETUP_VERSION,\n\t\tstatus: result.status,\n\t\tteamRef: teamRef(candidateRef, result.teamId),\n\t\tattemptId: result.attemptId,\n\t\taccessDeltaDigest: result.accessDeltaDigest,\n\t\tcompletedAt: result.completedAt,\n\t};\n}\n\nexport function teamSetupRoutes(options: TeamSetupRoutesOptions): Hono {\n\tconst app = new Hono();\n\tconst loadSnapshots =\n\t\toptions.loadLegacyTeamConfiguredGroupSnapshots ??\n\t\t((loadOptions?: LegacyTeamConfiguredGroupSnapshotLoadOptions) =>\n\t\t\tloadConfiguredLegacyTeamGroupSnapshotsWith(\n\t\t\t\toptions.snapshotLoaderDependencies ?? defaultSnapshotLoaderDependencies,\n\t\t\t\tloadOptions,\n\t\t\t\toptions.getStore,\n\t\t\t));\n\n\tasync function loadedSnapshots(\n\t\tcandidateRef?: string,\n\t\tdeadlineMs?: number,\n\t): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\t\ttry {\n\t\t\treturn await loadSnapshots(\n\t\t\t\tcandidateRef || deadlineMs != null ? { candidateRef, deadlineMs } : undefined,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error && error.message === \"legacy_team_setup_roster_too_large\") {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tthrow safeCoordinatorError();\n\t\t}\n\t}\n\tconst loadedSummarySnapshots = createCachedSnapshotLoader(\n\t\t() => loadedSnapshots(),\n\t\tSUMMARY_SNAPSHOT_CACHE_TTL_MS,\n\t);\n\toptions.registerSummaryInvalidator?.(() => loadedSummarySnapshots.invalidate());\n\tconst completionDependencies =\n\t\toptions.completionDependencies === undefined\n\t\t\t? defaultCompletionDependencies\n\t\t\t: options.completionDependencies;\n\n\tinterface CompletionAuthorization {\n\t\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\t\tremoteUrl: string;\n\t\tconfiguredCoordinatorId: string;\n\t\tcurrentGroupIds: Set<string>;\n\t}\n\n\t/**\n\t * Reads the live coordinator configuration and the groups it currently\n\t * authorizes. Returns null when completion I/O is not configured or current\n\t * authorization cannot be proven.\n\t */\n\tfunction currentCompletionAuthorization(): CompletionAuthorization | null {\n\t\tconst config = (\n\t\t\toptions.readCoordinatorConfig ??\n\t\t\toptions.snapshotLoaderDependencies?.readConfig ??\n\t\t\treadCoordinatorSyncConfig\n\t\t)();\n\t\tconst remoteUrl = buildBaseUrl(config.syncCoordinatorUrl);\n\t\tif (!remoteUrl || !config.syncCoordinatorAdminSecret) return null;\n\t\tconst configuredCoordinatorId = normalizedCoordinatorId(remoteUrl);\n\t\tif (!configuredCoordinatorId) return null;\n\t\tlet currentGroupIds: Set<string>;\n\t\ttry {\n\t\t\tcurrentGroupIds = new Set(configuredGroupIds(config.syncCoordinatorGroups));\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t\treturn { config, remoteUrl, configuredCoordinatorId, currentGroupIds };\n\t}\n\n\t// Endpoint equivalence only: candidate identity stays bound to the persisted\n\t// coordinator string and is never rewritten from configuration.\n\tfunction authorizesGroup(\n\t\tauthorization: CompletionAuthorization,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\treturn (\n\t\t\tauthorization.currentGroupIds.has(group.groupId) &&\n\t\t\tnormalizedCoordinatorId(group.coordinatorId) === authorization.configuredCoordinatorId\n\t\t);\n\t}\n\n\t/**\n\t * Configuration may change while completion-list or roster requests are in\n\t * flight. Re-prove authorization for the exact coordinator and group right\n\t * before applying canonical policy, as the finish publication path does.\n\t */\n\tfunction stillAuthorizesGroup(\n\t\tinitial: CompletionAuthorization,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\tlet current: CompletionAuthorization | null;\n\t\ttry {\n\t\t\tcurrent = currentCompletionAuthorization();\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t\treturn (\n\t\t\tcurrent !== null &&\n\t\t\tcurrent.configuredCoordinatorId === initial.configuredCoordinatorId &&\n\t\t\tcurrent.remoteUrl === initial.remoteUrl &&\n\t\t\tcurrent.config.syncCoordinatorAdminSecret === initial.config.syncCoordinatorAdminSecret &&\n\t\t\tauthorizesGroup(current, group)\n\t\t);\n\t}\n\n\tfunction matchesGroupSnapshot(\n\t\tsnapshot: LegacyTeamConfiguredGroupSnapshot,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\treturn (\n\t\t\tsnapshot.groupId === group.groupId &&\n\t\t\tnormalizedCoordinatorId(snapshot.coordinatorId) ===\n\t\t\t\tnormalizedCoordinatorId(group.coordinatorId)\n\t\t);\n\t}\n\n\tfunction freshGroupKey(group: { coordinatorId: string; groupId: string }): string {\n\t\treturn `${normalizedCoordinatorId(group.coordinatorId) ?? group.coordinatorId}\\0${group.groupId}`;\n\t}\n\n\t/**\n\t * The snapshot loader keys candidates by the configured coordinator spelling,\n\t * while a persisted group may carry an equivalent but different spelling.\n\t * Ask for the roster under each spelling and match on normalized identity,\n\t * preserving the persisted candidate identity for everything else.\n\t */\n\tasync function loadFreshGroupSnapshot(\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t\tremoteUrl: string,\n\t\tdeadlineMs: number,\n\t): Promise<LegacyTeamConfiguredGroupSnapshot | undefined> {\n\t\tconst candidateRefs = [\n\t\t\t...new Set([\n\t\t\t\tlegacyTeamCandidateId(remoteUrl, group.groupId),\n\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t]),\n\t\t];\n\t\tfor (const candidateRef of candidateRefs) {\n\t\t\tconst snapshots = await loadedSnapshots(candidateRef, deadlineMs);\n\t\t\tconst matches = snapshots.filter((snapshot) => matchesGroupSnapshot(snapshot, group));\n\t\t\tif (matches.length > 1) throw new Error(\"team_setup_completion_invalid\");\n\t\t\tif (matches[0]) return matches[0];\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tfunction completionRecordCandidateRef(record: { manifest: unknown }): string | null {\n\t\tconst manifest = record.manifest;\n\t\tif (!manifest || typeof manifest !== \"object\" || Array.isArray(manifest)) return null;\n\t\tconst candidateRef = (manifest as { candidate_ref?: unknown }).candidate_ref;\n\t\treturn typeof candidateRef === \"string\" ? candidateRef : null;\n\t}\n\n\t// The coordinator lists every candidate a group has ever completed. A record\n\t// for a different candidate identity (an earlier coordinator address) is\n\t// historical context, not evidence about this candidate.\n\tfunction belongsToGroupCandidate(\n\t\trecord: { manifest: unknown },\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\tconst candidateRef = completionRecordCandidateRef(record);\n\t\treturn (\n\t\t\tcandidateRef === null ||\n\t\t\tcandidateRef === legacyTeamCandidateId(group.coordinatorId, group.groupId)\n\t\t);\n\t}\n\n\t/**\n\t * Applies a canonical manifest with authorization re-proven inside the same\n\t * serialized section that guards the apply. Checking before the locks would\n\t * let a group removed while reconciliation waited on another policy\n\t * mutation still be applied once the queues open.\n\t */\n\tasync function applyCanonicalManifestIfStillAuthorized(\n\t\tstore: MemoryStore,\n\t\tauthorization: CompletionAuthorization,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t\tmanifest: CoordinatorLegacyTeamCompletionManifestV1,\n\t\tfreshRoster: LegacyTeamConfiguredGroupSnapshot[\"devices\"],\n\t): Promise<\"applied\" | \"unauthorized\" | \"claimed\"> {\n\t\tlet outcome: \"applied\" | \"unauthorized\" = \"unauthorized\";\n\t\tconst ran = await runCandidateMutation(\n\t\t\tstore.db,\n\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t() =>\n\t\t\t\tserializeRecipientPolicyPublicationMutation(store.db, () =>\n\t\t\t\t\tserializeRecipientPolicyTeamMutation(store.db, manifest.team_id, () =>\n\t\t\t\t\t\tserializeRecipientPolicyCoordinatorGroupMutation(store.db, group.groupId, async () => {\n\t\t\t\t\t\t\tif (!stillAuthorizesGroup(authorization, group)) return;\n\t\t\t\t\t\t\tawait applyLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\t\tfreshRoster,\n\t\t\t\t\t\t\t\trecipientPolicyLocksHeld: { publication: true, team: true, coordinatorGroup: true },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\toutcome = \"applied\";\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t);\n\t\treturn ran ? outcome : \"claimed\";\n\t}\n\n\tasync function reconcileCompletions(\n\t\tstore: MemoryStore,\n\t\tgroups: LegacyTeamCandidateGroupDescriptor[],\n\t\treconciliationOptions: { isolateApplyFailures?: boolean } = {},\n\t): Promise<void> {\n\t\tif (!completionDependencies || groups.length === 0) return;\n\t\tlet authorization: CompletionAuthorization | null;\n\t\ttry {\n\t\t\tauthorization = currentCompletionAuthorization();\n\t\t} catch (error) {\n\t\t\tthrow new Error(completionApiError(error));\n\t\t}\n\t\t// If current authorization cannot be proven, skip completion I/O without\n\t\t// failing an otherwise serviceable persisted detail read.\n\t\tif (!authorization) return;\n\t\tconst { config, remoteUrl } = authorization;\n\t\tconst scopedGroups = groups.filter((group) => authorizesGroup(authorization, group));\n\t\tif (scopedGroups.length === 0) return;\n\t\tconst timeoutS = Math.max(1, config.syncCoordinatorTimeoutS);\n\t\ttry {\n\t\t\tconst reconciliationDeadlineMs = Date.now() + COORDINATOR_ROSTER_READ_BUDGET_MS;\n\t\t\tconst groupById = new Map(scopedGroups.map((group) => [group.groupId, group]));\n\t\t\tconst listCompletionRecords = (groupIds: string[]) =>\n\t\t\t\tretryTransientCoordinatorRead(\n\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\tcompletionDependencies.list({\n\t\t\t\t\t\t\tgroupIds,\n\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t}),\n\t\t\t\t\ttimeoutS,\n\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t);\n\t\t\tconst scopedGroupIds = [...new Set(scopedGroups.map((group) => group.groupId))];\n\t\t\tlet records: Awaited<ReturnType<LegacyTeamCompletionDependencies[\"list\"]>>;\n\t\t\ttry {\n\t\t\t\trecords = await listCompletionRecords(scopedGroupIds);\n\t\t\t} catch (error) {\n\t\t\t\t// Older coordinators do not expose completion reconciliation. Read routes\n\t\t\t\t// remain usable, and best-effort publication below still lets upgraded\n\t\t\t\t// peers observe a locally completed migration.\n\t\t\t\tif (isUnsupportedCompletionQuery(error)) {\n\t\t\t\t\trecords = [];\n\t\t\t\t} else if (\n\t\t\t\t\treconciliationOptions.isolateApplyFailures &&\n\t\t\t\t\tisUnattributableCompletionBatchError(error)\n\t\t\t\t) {\n\t\t\t\t\t// One corrupt or mixed-version record must not hide every healthy\n\t\t\t\t\t// group's setup state. Re-query per group so the decode failure\n\t\t\t\t\t// stays attributable; a group whose own record cannot be decoded is\n\t\t\t\t\t// skipped, matching the unprovable-binding path below.\n\t\t\t\t\trecords = await listCompletionRecordsPerGroup(scopedGroupIds, listCompletionRecords);\n\t\t\t\t} else {\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst freshGroupByKey = new Map<string, LegacyTeamConfiguredGroupSnapshot>();\n\t\t\tif (records.length > 0) {\n\t\t\t\ttry {\n\t\t\t\t\tconst onlyGroup = scopedGroups.length === 1 ? scopedGroups[0] : undefined;\n\t\t\t\t\tconst freshGroups = onlyGroup\n\t\t\t\t\t\t? [await loadFreshGroupSnapshot(onlyGroup, remoteUrl, reconciliationDeadlineMs)]\n\t\t\t\t\t\t: await loadedSnapshots(undefined, reconciliationDeadlineMs);\n\t\t\t\t\tfor (const freshGroup of freshGroups) {\n\t\t\t\t\t\tif (!freshGroup) continue;\n\t\t\t\t\t\tconst key = freshGroupKey(freshGroup);\n\t\t\t\t\t\tif (freshGroupByKey.has(key)) throw new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\tfreshGroupByKey.set(key, freshGroup);\n\t\t\t\t\t}\n\t\t\t\t} catch (error) {\n\t\t\t\t\tfor (const record of records) {\n\t\t\t\t\t\tconst group = groupById.get(record.group_id);\n\t\t\t\t\t\tif (!group || !belongsToGroupCandidate(record, group)) continue;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tvalidateLegacyTeamSetupCompletionManifestBinding(record.manifest, {\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch (bindingError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw bindingError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlet canonicalManifest: ReturnType<typeof validateLegacyTeamSetupCompletionManifest>;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(record.manifest, {\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch (validationError) {\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\tconst contained = await runCandidateMutation(\n\t\t\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw validationError;\n\t\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw validationError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst localManifest = reconstructLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\t\tcandidateRef: canonicalManifest.candidate_ref,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(localManifest) ===\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(canonicalManifest)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tareLegacyTeamSetupCompletionPolicyFactsAdditivelyCompatible(\n\t\t\t\t\t\t\t\t\tlocalManifest,\n\t\t\t\t\t\t\t\t\tcanonicalManifest,\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// Missing or invalid local completion state must not remain active when\n\t\t\t\t\t\t\t// a valid coordinator winner cannot be applied safely.\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tawait runCandidateMutation(store.db, canonicalManifest.candidate_ref, () =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw error;\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst coordinatorCompletionGroupIds = new Set<string>();\n\t\t\tfor (const record of records) {\n\t\t\t\tconst group = groupById.get(record.group_id);\n\t\t\t\tif (!group) throw new Error(\"team_setup_completion_invalid\");\n\t\t\t\tif (!belongsToGroupCandidate(record, group)) continue;\n\t\t\t\ttry {\n\t\t\t\t\tvalidateLegacyTeamSetupCompletionManifestBinding(record.manifest, {\n\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t});\n\t\t\t\t} catch (bindingError) {\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw bindingError;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tlet canonicalManifest: ReturnType<typeof validateLegacyTeamSetupCompletionManifest>;\n\t\t\t\ttry {\n\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(record.manifest, {\n\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t});\n\t\t\t\t} catch (validationError) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait runCandidateMutation(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t}\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw validationError;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tcoordinatorCompletionGroupIds.add(record.group_id);\n\t\t\t\ttry {\n\t\t\t\t\tlet freshGroup = freshGroupByKey.get(freshGroupKey(group));\n\t\t\t\t\tif (!freshGroup && scopedGroups.length > 1) {\n\t\t\t\t\t\tif (remainingCoordinatorTimeoutS(timeoutS, reconciliationDeadlineMs) == null) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tfreshGroup = await loadFreshGroupSnapshot(group, remoteUrl, reconciliationDeadlineMs);\n\t\t\t\t\t}\n\t\t\t\t\tif (!freshGroup) {\n\t\t\t\t\t\tconst contained = await runCandidateMutation(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t}\n\t\t\t\t\tconst applied = await applyCanonicalManifestIfStillAuthorized(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\tauthorization,\n\t\t\t\t\t\tgroup,\n\t\t\t\t\t\tcanonicalManifest,\n\t\t\t\t\t\tfreshGroup.devices,\n\t\t\t\t\t);\n\t\t\t\t\tif (applied !== \"applied\") continue;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw error;\n\t\t\t\t}\n\t\t\t}\n\t\t\tfor (const group of scopedGroups) {\n\t\t\t\tif (coordinatorCompletionGroupIds.has(group.groupId)) continue;\n\t\t\t\tconst publicationTimeoutS = remainingCoordinatorTimeoutS(\n\t\t\t\t\ttimeoutS,\n\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t);\n\t\t\t\tif (publicationTimeoutS == null) break;\n\t\t\t\tif (\n\t\t\t\t\t!hasCompletedLegacyTeamSetup(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst candidateRef = legacyTeamCandidateId(group.coordinatorId, group.groupId);\n\t\t\t\tlet reconstructionFailed = false;\n\t\t\t\ttry {\n\t\t\t\t\tconst published = await runCandidateMutation(store.db, candidateRef, () =>\n\t\t\t\t\t\tserializeRecipientPolicyPublicationMutation(store.db, () =>\n\t\t\t\t\t\t\tserializeRecipientPolicyTeamMutation(\n\t\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t\tdeterministicPolicyTeamId(candidateRef),\n\t\t\t\t\t\t\t\tasync () => {\n\t\t\t\t\t\t\t\t\tlet manifest: ReturnType<typeof reconstructLegacyTeamSetupCompletionManifest>;\n\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\tmanifest = reconstructLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t\t\treconstructionFailed = true;\n\t\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t// Publication sends identity and policy data to the coordinator;\n\t\t\t\t\t\t\t\t\t// re-prove the destination is still the configured one.\n\t\t\t\t\t\t\t\t\tif (!stillAuthorizesGroup(authorization, group)) {\n\t\t\t\t\t\t\t\t\t\treconstructionFailed = true;\n\t\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tawait completionDependencies.create({\n\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\t\ttimeoutS: publicationTimeoutS,\n\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\tif (!published || reconstructionFailed) continue;\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Publishing an existing local completion is best-effort. The bounded\n\t\t\t\t\t// list/apply pass above remains authoritative and fail-closed.\n\t\t\t\t\tif (completionApiError(error) !== \"team_setup_completion_conflict\") continue;\n\t\t\t\t\tconst getCompletion = completionDependencies.get;\n\t\t\t\t\tlet canonicalManifest: Awaited<ReturnType<NonNullable<typeof getCompletion>>> = null;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tif (!getCompletion) throw new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\tcanonicalManifest = await retryTransientCoordinatorRead(\n\t\t\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\t\t\tgetCompletion({\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!canonicalManifest) throw new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t} catch {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst contained = await runCandidateMutation(store.db, candidateRef, () =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst freshGroup = await loadFreshGroupSnapshot(\n\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!freshGroup) throw new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\tconst applied = await applyCanonicalManifestIfStillAuthorized(\n\t\t\t\t\t\t\tstore,\n\t\t\t\t\t\t\tauthorization,\n\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\tcanonicalManifest,\n\t\t\t\t\t\t\tfreshGroup.devices,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (applied !== \"applied\") continue;\n\t\t\t\t\t} catch (applyError) {\n\t\t\t\t\t\tif (applyError instanceof LegacyTeamSetupAdditiveConvergenceError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw applyError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst contained = await runCandidateMutation(store.db, candidateRef, () =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\", { cause: applyError });\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\", { cause: applyError });\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tthrow new Error(completionApiError(error));\n\t\t}\n\t}\n\tasync function loadedCandidateSnapshots(\n\t\tcandidateRef: string,\n\t\tloadOptions: {\n\t\t\tallowCachedSummaryFallback?: boolean;\n\t\t\tdeadlineMs?: number;\n\t\t\tinvalidateSummaryCache?: boolean;\n\t\t} = {},\n\t): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\t\tconst allowCachedSummaryFallback = loadOptions.allowCachedSummaryFallback ?? false;\n\t\tconst invalidateSummaryCache = loadOptions.invalidateSummaryCache ?? true;\n\t\tif (invalidateSummaryCache) loadedSummarySnapshots.invalidate();\n\t\ttry {\n\t\t\treturn await loadedSnapshots(candidateRef, loadOptions.deadlineMs);\n\t\t} catch (error) {\n\t\t\tif (!allowCachedSummaryFallback) throw error;\n\t\t\tconst cachedGroups = loadedSummarySnapshots.peek();\n\t\t\tif (!cachedGroups) throw error;\n\t\t\tconst matching = cachedGroups.filter(\n\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t);\n\t\t\tif (matching.length !== 1) throw error;\n\t\t\treturn matching;\n\t\t} finally {\n\t\t\tif (invalidateSummaryCache) loadedSummarySnapshots.invalidate();\n\t\t}\n\t}\n\n\tfunction persistedCompletionGroup(\n\t\tstore: MemoryStore,\n\t\tcandidateRef: string,\n\t): LegacyTeamCandidateGroupDescriptor | null {\n\t\tconst row = store.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT coordinator_id, group_id FROM legacy_team_setup_drafts\n\t\t\t\t WHERE candidate_id = ? ORDER BY rowid DESC LIMIT 1`,\n\t\t\t)\n\t\t\t.get(candidateRef) as { coordinator_id: string; group_id: string } | undefined;\n\t\tif (!row || legacyTeamCandidateId(row.coordinator_id, row.group_id) !== candidateRef)\n\t\t\treturn null;\n\t\treturn { coordinatorId: row.coordinator_id, groupId: row.group_id };\n\t}\n\n\tapp.get(\"/api/sync/team-setup/v1\", async (c) => {\n\t\tlet groups: LegacyTeamConfiguredGroupSnapshot[];\n\t\ttry {\n\t\t\tgroups = await loadedSummarySnapshots();\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\treadPureCandidateViews(store, groups);\n\t\t\tawait reconcileCompletions(store, groups, { isolateApplyFailures: true });\n\t\t\tconst response = {\n\t\t\t\tversion: TEAM_SETUP_VERSION,\n\t\t\t\tcandidates: readPureCandidateViews(store, groups)\n\t\t\t\t\t.map(candidateSummary)\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(candidate): candidate is LegacyTeamSetupPendingCandidateSummaryV1 =>\n\t\t\t\t\t\t\tcandidate.status !== \"ready\",\n\t\t\t\t\t),\n\t\t\t} satisfies LegacyTeamSetupSummaryResponseV1;\n\t\t\treturn c.json(response);\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/team-setup/v1/:candidateRef\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tlet draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tconst terminal = hasCompletedLegacyTeamSetup(store, candidateRef);\n\t\t\tlet candidateGroupsForCompletion: LegacyTeamConfiguredGroupSnapshot[] | null = null;\n\t\t\tif (terminal && draft?.state !== \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tlet candidate: LegacyTeamCandidateView;\n\t\t\tif (draft && (draft.state !== \"completed\" || terminal)) {\n\t\t\t\tcandidate = candidateFromDraft(draft);\n\t\t\t} else {\n\t\t\t\t// Revalidation may replace a completed draft, so it must never decide\n\t\t\t\t// against a stale summary-cache roster. Cache fallback remains safe for\n\t\t\t\t// candidates that have no persisted attempt yet.\n\t\t\t\tconst groups = await loadedCandidateSnapshots(candidateRef, {\n\t\t\t\t\tallowCachedSummaryFallback: draft == null,\n\t\t\t\t\tinvalidateSummaryCache: false,\n\t\t\t\t});\n\t\t\t\tconst candidateGroups = groups.filter(\n\t\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t\t);\n\t\t\t\tcandidateGroupsForCompletion = candidateGroups;\n\t\t\t\tconst postLoadDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\tif (hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\t\tif (postLoadDraft?.state !== \"completed\") {\n\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t\t\t}\n\t\t\t\t\tdraft = postLoadDraft;\n\t\t\t\t\tcandidate = candidateFromDraft(postLoadDraft);\n\t\t\t\t} else {\n\t\t\t\t\tconst discoveredCandidate = discoverCandidates(store, candidateGroups).find(\n\t\t\t\t\t\t(item) => item.candidateRef === candidateRef,\n\t\t\t\t\t);\n\t\t\t\t\tif (!discoveredCandidate) {\n\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t\t\t}\n\t\t\t\t\tcandidate = discoveredCandidate;\n\t\t\t\t\tdraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst cachedCandidateGroups = loadedSummarySnapshots\n\t\t\t\t.peek()\n\t\t\t\t?.filter(\n\t\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t\t);\n\t\t\tlet completionGroups: LegacyTeamCandidateGroupDescriptor[] | null =\n\t\t\t\tcandidateGroupsForCompletion ??\n\t\t\t\t(cachedCandidateGroups?.length ? cachedCandidateGroups : null);\n\t\t\tif (!completionGroups) {\n\t\t\t\tconst persistedGroup = persistedCompletionGroup(store, candidateRef);\n\t\t\t\tcompletionGroups = persistedGroup ? [persistedGroup] : null;\n\t\t\t}\n\t\t\tconst terminalBeforeReconciliation = hasCompletedLegacyTeamSetup(store, candidateRef);\n\t\t\tif (completionGroups) await reconcileCompletions(store, completionGroups);\n\t\t\tdraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (\n\t\t\t\t!draft ||\n\t\t\t\t(!terminalBeforeReconciliation && hasCompletedLegacyTeamSetup(store, candidateRef))\n\t\t\t) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tif (completionGroups) candidate = candidateFromDraft(draft);\n\n\t\t\treturn c.json(detailResponse(store, draft, candidate));\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/team-setup/v1/:candidateRef/devices/:deviceRef/assignment\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst deviceRef = c.req.param(\"deviceRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !DEVICE_REF_PATTERN.test(deviceRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (\n\t\t\t!parsed.ok ||\n\t\t\t!hasExactKeys(parsed.value, [\"attemptId\", \"expectation\", \"targetIdentityRef\"])\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId, expectation, targetIdentityRef } = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\ttypeof targetIdentityRef !== \"string\" ||\n\t\t\t!IDENTITY_REF_PATTERN.test(targetIdentityRef) ||\n\t\t\t!expectation ||\n\t\t\ttypeof expectation !== \"object\" ||\n\t\t\tArray.isArray(expectation)\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst device = draft.devices.find((item) => item.deviceRef === deviceRef);\n\t\t\tif (!device) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst submittedExpectation = expectation as Record<string, unknown>;\n\t\t\tconst expectationMatches =\n\t\t\t\tdevice.expectation.kind === \"absent\"\n\t\t\t\t\t? hasExactKeys(submittedExpectation, [\"kind\"]) && submittedExpectation.kind === \"absent\"\n\t\t\t\t\t: hasExactKeys(submittedExpectation, [\"assignmentVersion\", \"identityRef\", \"kind\"]) &&\n\t\t\t\t\t\tsubmittedExpectation.kind === \"existing\" &&\n\t\t\t\t\t\tsubmittedExpectation.assignmentVersion === device.expectation.assignmentVersion &&\n\t\t\t\t\t\tsubmittedExpectation.identityRef ===\n\t\t\t\t\t\t\trequiredIdentityRef(candidateRef, device.expectation.identityId);\n\t\t\tif (!expectationMatches) {\n\t\t\t\treturn c.json({ error: \"team_setup_assignment_changed\" as const }, 409);\n\t\t\t}\n\t\t\tconst target = identityChoices(store, candidateRef).find(\n\t\t\t\t(choice) => choice.identityRef === targetIdentityRef,\n\t\t\t);\n\t\t\tif (!target) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\tsetLegacyTeamSetupDeviceAssignment(store.db, {\n\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\tdeviceRef,\n\t\t\t\t\t\t\t\ttargetIdentityId: target.identityId,\n\t\t\t\t\t\t\t\texpectation: device.expectation,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/team-setup/v1/:candidateRef/devices/:deviceRef/decision\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst deviceRef = c.req.param(\"deviceRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !DEVICE_REF_PATTERN.test(deviceRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId, decision, expectedTargetIdentityRef } = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\t!([\"included\", \"excluded\", \"removed\"] as unknown[]).includes(decision) ||\n\t\t\t(decision === \"included\"\n\t\t\t\t? !hasExactKeys(parsed.value, [\"attemptId\", \"decision\", \"expectedTargetIdentityRef\"]) ||\n\t\t\t\t\ttypeof expectedTargetIdentityRef !== \"string\" ||\n\t\t\t\t\t!IDENTITY_REF_PATTERN.test(expectedTargetIdentityRef)\n\t\t\t\t: !hasExactKeys(parsed.value, [\"attemptId\", \"decision\"]))\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst device = draft.devices.find((item) => item.deviceRef === deviceRef);\n\t\t\tif (!device) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tif (\n\t\t\t\tdecision === \"included\" &&\n\t\t\t\t(device.targetIdentityId === null ||\n\t\t\t\t\trequiredIdentityRef(candidateRef, device.targetIdentityId) !== expectedTargetIdentityRef)\n\t\t\t) {\n\t\t\t\treturn c.json({ error: \"team_setup_assignment_changed\" as const }, 409);\n\t\t\t}\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\tsetLegacyTeamSetupDeviceDecision(store.db, {\n\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\tdeviceRef,\n\t\t\t\t\t\t\t\tdecision: decision as \"included\" | \"excluded\" | \"removed\",\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.delete(\"/api/sync/team-setup/v1/:candidateRef/devices/:deviceRef/decision\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst deviceRef = c.req.param(\"deviceRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !DEVICE_REF_PATTERN.test(deviceRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok || !hasExactKeys(parsed.value, [\"attemptId\"])) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId } = parsed.value;\n\t\tif (typeof attemptId !== \"string\" || !ATTEMPT_ID_PATTERN.test(attemptId)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (!draft.devices.some((item) => item.deviceRef === deviceRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() => clearLegacyTeamSetupDeviceDecision(store.db, { attemptId, deviceRef }),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/team-setup/v1/:candidateRef/projects/:projectRef/mapping\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst projectRef = c.req.param(\"projectRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !PROJECT_REF_PATTERN.test(projectRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok || !hasExactKeys(parsed.value, [\"attemptId\", \"resolvedProjectRef\"])) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId, resolvedProjectRef } = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\ttypeof resolvedProjectRef !== \"string\" ||\n\t\t\t!RESOLVED_PROJECT_REF_PATTERN.test(resolvedProjectRef)\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst project = draft.projects.find((item) => item.projectRef === projectRef);\n\t\t\tif (!project) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tif (project.resolution === \"deterministic\") {\n\t\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t\t}\n\t\t\tconst target = projectMappingChoices(store).find(\n\t\t\t\t(choice) =>\n\t\t\t\t\tlegacyTeamResolvedProjectRef(projectRef, choice.projectIdentity) === resolvedProjectRef,\n\t\t\t);\n\t\t\tif (!target) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\tsetLegacyTeamSetupProjectMapping(store.db, {\n\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\tprojectRef,\n\t\t\t\t\t\t\t\tresolvedProjectIdentity: target.projectIdentity,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/team-setup/v1/:candidateRef/refresh\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok || !hasExactKeys(parsed.value, [])) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tlet store: MemoryStore;\n\t\ttry {\n\t\t\tstore = options.getStore();\n\t\t\tconst currentDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (currentDraft?.state === \"completed\" || hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t\tlet groups: LegacyTeamConfiguredGroupSnapshot[];\n\t\ttry {\n\t\t\tgroups = await loadMutableCandidateSnapshots(store, candidateRef, () =>\n\t\t\t\tloadedCandidateSnapshots(candidateRef),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t\tif (\n\t\t\tgroups.filter(\n\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t).length === 0\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t}\n\t\ttry {\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() => {\n\t\t\t\t\t\t\tconst currentDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tcurrentDraft?.state === \"completed\" ||\n\t\t\t\t\t\t\t\thasCompletedLegacyTeamSetup(store, candidateRef)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_confirmation_stale\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn refreshLegacyTeamCandidate(\n\t\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t\t{ projection: projectionOptions(store), groups },\n\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/team-setup/v1/:candidateRef/finish\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst finishKeys = [\n\t\t\t\"attemptId\",\n\t\t\t\"confirmedAccessDeltaDigest\",\n\t\t\t\"confirmedViewerAccessDeltaDigest\",\n\t\t\t\"finishDigest\",\n\t\t] as const;\n\t\tif (!hasExactKeys(parsed.value, finishKeys)) {\n\t\t\treturn Object.keys(parsed.value).every((key) =>\n\t\t\t\tfinishKeys.includes(key as (typeof finishKeys)[number]),\n\t\t\t)\n\t\t\t\t? c.json({ error: \"team_setup_confirmation_stale\" as const }, 409)\n\t\t\t\t: c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst {\n\t\t\tattemptId,\n\t\t\tconfirmedAccessDeltaDigest,\n\t\t\tconfirmedViewerAccessDeltaDigest,\n\t\t\tfinishDigest,\n\t\t} = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\ttypeof finishDigest !== \"string\" ||\n\t\t\t!FINISH_DIGEST_PATTERN.test(finishDigest) ||\n\t\t\ttypeof confirmedAccessDeltaDigest !== \"string\" ||\n\t\t\t!ACCESS_DELTA_DIGEST_PATTERN.test(confirmedAccessDeltaDigest) ||\n\t\t\ttypeof confirmedViewerAccessDeltaDigest !== \"string\" ||\n\t\t\t!VIEWER_ACCESS_DELTA_DIGEST_PATTERN.test(confirmedViewerAccessDeltaDigest)\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tlet releaseMutation: (() => void) | undefined;\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\tlet releaseActorMutations: (() => void) | undefined;\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst replay = replayLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId,\n\t\t\t\tfinishDigest,\n\t\t\t\tconfirmedAccessDeltaDigest,\n\t\t\t});\n\t\t\tif (replay) return c.json(finishResponse(candidateRef, replay));\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst preview = previewLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId: draft.attemptId,\n\t\t\t});\n\t\t\trequireLegacyTeamSetupAccessDeltaWithinLimit(preview.accessDelta);\n\t\t\tconst safeDraft = viewerSafeDraft(store, draft);\n\t\t\tconst currentViewerDigest = viewerAccessDeltaDigest(\n\t\t\t\tviewerSafeAccessDelta(candidateRef, preview.accessDelta, {\n\t\t\t\t\tteamDisplayName: draft.displayName,\n\t\t\t\t\t...safeDraft,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tif (currentViewerDigest !== confirmedViewerAccessDeltaDigest) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst freshGroups = await loadedCandidateSnapshots(candidateRef);\n\t\t\tconst matchingGroups = freshGroups.filter(\n\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t);\n\t\t\tif (matchingGroups.length !== 1) throw safeCoordinatorError();\n\t\t\tconst group = matchingGroups[0];\n\t\t\tif (!group) throw safeCoordinatorError();\n\t\t\treleaseMutation = claimCandidateMutation(store.db, candidateRef) ?? undefined;\n\t\t\tif (!releaseMutation) {\n\t\t\t\t// An identical request may be committing right now. Wait for it and\n\t\t\t\t// return its immutable result instead of a stale-confirmation error.\n\t\t\t\tawait candidateMutationSettled(store.db, candidateRef);\n\t\t\t\tconst overlappingReplay = replayLegacyTeamSetupActivation(store.db, {\n\t\t\t\t\tcandidateRef,\n\t\t\t\t\tattemptId,\n\t\t\t\t\tfinishDigest,\n\t\t\t\t\tconfirmedAccessDeltaDigest,\n\t\t\t\t});\n\t\t\t\tif (overlappingReplay) return c.json(finishResponse(candidateRef, overlappingReplay));\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\t// The pre-claim replay lookup raced an in-flight commit; recheck under the claim.\n\t\t\tconst claimedReplay = replayLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId,\n\t\t\t\tfinishDigest,\n\t\t\t\tconfirmedAccessDeltaDigest,\n\t\t\t});\n\t\t\tif (claimedReplay) return c.json(finishResponse(candidateRef, claimedReplay));\n\t\t\tconst claimedDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!claimedDraft || claimedDraft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst publicationDeadlineMs = Date.now() + COORDINATOR_ROSTER_READ_BUDGET_MS;\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\t// Every identity the activation reads or writes is part of the immutable\n\t\t\t// publication winner: the target of each included device and the existing\n\t\t\t// assignment of every reviewed device (including excluded or removed ones,\n\t\t\t// whose current assignment the access delta depends on). These locks cover\n\t\t\t// coordinator creation, conflict recovery, and local application.\n\t\t\treleaseActorMutations = await claimRecipientPolicyActorMutations(\n\t\t\t\tstore.db,\n\t\t\t\tclaimedDraft.devices.flatMap((device) => [\n\t\t\t\t\t...(device.decision === \"included\" && device.targetIdentityId\n\t\t\t\t\t\t? [device.targetIdentityId]\n\t\t\t\t\t\t: []),\n\t\t\t\t\t...(device.existingIdentityId ? [device.existingIdentityId] : []),\n\t\t\t\t]),\n\t\t\t);\n\t\t\tconst response = await serializeRecipientPolicyTeamMutation(\n\t\t\t\tstore.db,\n\t\t\t\tdeterministicPolicyTeamId(candidateRef),\n\t\t\t\t() =>\n\t\t\t\t\tserializeRecipientPolicyCoordinatorGroupMutation(store.db, group.groupId, async () => {\n\t\t\t\t\t\tlet authorization: CompletionAuthorization | null;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tauthorization = currentCompletionAuthorization();\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tthrow new Error(completionApiError(error));\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!completionDependencies || !authorization) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_unavailable\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!authorizesGroup(authorization, group)) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst { config, remoteUrl } = authorization;\n\t\t\t\t\t\tconst freshGroup = await loadFreshGroupSnapshot(\n\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!freshGroup) throw new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\tif (!stillAuthorizesGroup(authorization, group)) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst projectInventory = legacyTeamCandidateProjectInventory(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\tprojectionOptions(store),\n\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tconst freshPreview = inspectFreshLegacyTeamSetupActivation(store.db, {\n\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\tfreshRoster: freshGroup.devices,\n\t\t\t\t\t\t\tprojectInventory,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tfreshPreview.finishDigest !== finishDigest ||\n\t\t\t\t\t\t\tfreshPreview.accessDeltaDigest !== confirmedAccessDeltaDigest\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst freshDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\t\t\tif (!freshDraft || freshDraft.attemptId !== attemptId) {\n\t\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst safeFreshDraft = viewerSafeDraft(store, freshDraft);\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tviewerAccessDeltaDigest(\n\t\t\t\t\t\t\t\tviewerSafeAccessDelta(candidateRef, freshPreview.accessDelta, {\n\t\t\t\t\t\t\t\t\tteamDisplayName: freshDraft.displayName,\n\t\t\t\t\t\t\t\t\t...safeFreshDraft,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t) !== confirmedViewerAccessDeltaDigest\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst completedAt = new Date().toISOString();\n\t\t\t\t\t\tconst proposedManifest = deriveLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\tcompletedAt,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tconst timeoutS = Math.max(1, config.syncCoordinatorTimeoutS);\n\t\t\t\t\t\tconst publicationTimeoutS = remainingCoordinatorTimeoutS(\n\t\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (publicationTimeoutS == null) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_unavailable\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlet canonicalManifest: typeof proposedManifest;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(\n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\tawait completionDependencies.create({\n\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\tmanifest: proposedManifest,\n\t\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\t\ttimeoutS: publicationTimeoutS,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t).manifest,\n\t\t\t\t\t\t\t\t{ coordinatorId: group.coordinatorId, groupId: group.groupId },\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(canonicalManifest) !==\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(proposedManifest)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tconst code = completionApiError(error);\n\t\t\t\t\t\t\tconst getCompletion = completionDependencies.get;\n\t\t\t\t\t\t\tif (code !== \"team_setup_completion_conflict\" || !getCompletion) {\n\t\t\t\t\t\t\t\tthrow new Error(code);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\tconst existing = await retryTransientCoordinatorRead(\n\t\t\t\t\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\t\t\t\t\tgetCompletion({\n\t\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\tif (!existing) throw new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(existing, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t// A conflict can mean an earlier request committed before its response was lost.\n\t\t\t\t\t\t\t\t// The matching policy digest identifies that winner; its publication timestamp\n\t\t\t\t\t\t\t\t// is coordinator-owned metadata and must be applied unchanged.\n\t\t\t\t\t\t\t\tif (canonicalManifest.finish_digest !== proposedManifest.finish_digest) {\n\t\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} catch (recoveryError) {\n\t\t\t\t\t\t\t\tthrow new Error(completionApiError(recoveryError));\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// Publication is the commit point. Apply its immutable winner after binding\n\t\t\t\t\t\t// each included device to the current coordinator roster evidence.\n\t\t\t\t\t\t// If this reload fails, reconciliation can apply the published winner later.\n\t\t\t\t\t\tlet postPublicationGroup: LegacyTeamConfiguredGroupSnapshot | undefined;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tpostPublicationGroup = await loadFreshGroupSnapshot(\n\t\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tif (legacyTeamSetupApiErrorCode(error) === \"team_setup_completion_invalid\") {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tthrow error;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!postPublicationGroup) throw new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\tconst result = await applyLegacyTeamSetupCompletionManifestAndReturnActivation(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\tfreshRoster: postPublicationGroup.devices,\n\t\t\t\t\t\t\t\tmanifest: canonicalManifest,\n\t\t\t\t\t\t\t\texpectedDraftManifest: proposedManifest,\n\t\t\t\t\t\t\t\trecipientPolicyLocksHeld: {\n\t\t\t\t\t\t\t\t\tpublication: true,\n\t\t\t\t\t\t\t\t\tteam: true,\n\t\t\t\t\t\t\t\t\tcoordinatorGroup: true,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn c.json(finishResponse(candidateRef, result));\n\t\t\t\t\t}),\n\t\t\t);\n\t\t\treturn response;\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t} finally {\n\t\t\treleaseActorMutations?.();\n\t\t\treleasePublicationMutation?.();\n\t\t\treleaseMutation?.();\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Sync routes — status, peers, actors, attempts, pairing, mutations.\n */\n\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport { hostname, networkInterfaces } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport type {\n\tCoordinatorBootstrapGrantVerification,\n\tCoordinatorConsumedTeamInvite,\n\tCoordinatorEnrollment,\n\tCoordinatorEnrollmentReconcileResult,\n\tCoordinatorScope,\n\tCoordinatorScopeMembership,\n\tDeviceIdentityBindingCommitRequestV1,\n\tDeviceIdentityBindingPreviewRequestV1,\n\tDeviceIdentityCoordinatorEvidence,\n\tMaintenanceJobSnapshot,\n\tMemoryStore,\n\tProjectScopeGuardrailWarning,\n\tReassignScopeCapability,\n\tRecipientPolicyCoordinatorEffectReceipt,\n\tRecipientPolicyOnboardingPreviewV1,\n\tRecipientPolicyPeerCapability,\n\tRecipientPolicyReconcileResult,\n\tRecipientPolicyReconcilerEffects,\n\tRecipientPolicyReviewDecisionV1,\n\tRecipientPolicyReviewResolveRequestV1,\n\tRecipientReviewedIntentV1,\n\tReplicationOp,\n\tSemanticIndexDiagnostics,\n\tShareOperationLifecycleStepInput,\n\tShareOperationPlan,\n\tSharePersonIntent,\n\tShareProjectIntent,\n} from \"@codemem/core\";\nimport {\n\tACCESS_CLEANUP_OP_TYPE,\n\taddSyncScopeToBoundary,\n\tanalyzeProjectScopeMappingChangeGuardrails,\n\tapplyReplicationOps,\n\tbuildAuthHeaders,\n\tbuildBaseUrl,\n\tbuildDirectPeerAuthHeaders,\n\tCoordinatorReciprocalApprovalRequestChangedError,\n\tcanonicalWorkspaceIdentity,\n\tclaimRecipientPolicyActorMutations,\n\tclaimRecipientPolicyPublicationMutation,\n\tcleanupNonces,\n\tcommitDeviceIdentityBindings,\n\tcommitRecipientPolicyEdges,\n\tcoordinatorArchiveGroupAction,\n\tcoordinatorCreateAddDeviceInviteAction,\n\tcoordinatorCreateGroupAction,\n\tcoordinatorCreateInviteAction,\n\tcoordinatorCreateScopeAction,\n\tcoordinatorDisableDeviceAction,\n\tcoordinatorEnableDeviceAction,\n\tcoordinatorGrantScopeMembershipAction,\n\tcoordinatorImportInviteAction,\n\tcoordinatorListBootstrapGrantsAction,\n\tcoordinatorListConsumedTeamInvitesAction,\n\tcoordinatorListDevicesAction,\n\tcoordinatorListGroupsAction,\n\tcoordinatorListJoinRequestsAction,\n\tcoordinatorListReviewedRecipientInviteEvidenceAction,\n\tcoordinatorListScopeMembershipsAction,\n\tcoordinatorListScopesAction,\n\tcoordinatorRemoveDeviceAction,\n\tcoordinatorRenameDeviceAction,\n\tcoordinatorRenameGroupAction,\n\tcoordinatorReviewJoinRequestAction,\n\tcoordinatorRevokeBootstrapGrantAction,\n\tcoordinatorRevokeScopeMembershipAction,\n\tcoordinatorStatusSnapshot,\n\tcoordinatorUnarchiveGroupAction,\n\tcoordinatorUpdateScopeAction,\n\tcountShareableProjectMemories,\n\tcreateCoordinatorReciprocalApproval,\n\tDEFAULT_TIME_WINDOW_S,\n\tdecodeInvitePayload,\n\tdefaultSpaceScopeIdForGroup,\n\tdeleteProjectScopeSettingsMapping,\n\tdiagnoseStalePeerReceivedRows,\n\tensureDeviceIdentity,\n\texecuteShareProvisioning,\n\textractInvitePayload,\n\textractReplicationOps,\n\ttype FilterReplicationSkipped,\n\tfilterReplicationOpsForSyncWithStatus,\n\tfingerprintPublicKey,\n\tformatHostPort,\n\tfriendlyDeviceName,\n\tgetCoordinatorEnrollmentReconciliationIssueSummary,\n\tgetCoordinatorGroupPreference,\n\tgetRecipientPolicyAuthorityState,\n\tgetSemanticIndexDiagnostics,\n\tgetSyncResetState,\n\ttype InboundScopeRejectionPeerSummary,\n\tinviteTokenDigest,\n\tisPeerTrustBindingCompatible,\n\tisProjectSyncEnablementError,\n\tisScopedSyncCapability,\n\tLEGACY_SHARED_REVIEW_SCOPE_ID,\n\tLOCAL_DEFAULT_SCOPE_ID,\n\tLOCAL_SYNC_CAPABILITY,\n\tLOCAL_SYNC_FEATURES,\n\tlistAuthorizedScopesForPeer,\n\tlistCoordinatorJoinRequests,\n\tlistDeviceIdentityInventory,\n\tlistInboundScopeRejections,\n\tlistLegacyRecipientPolicyProjections,\n\tlistMaintenanceJobs,\n\tlistPerPeerScopeSyncState,\n\tlistProjectScopeCandidates,\n\tlistProjectScopeInventory,\n\tlistProjectScopeSettingsMappings,\n\tlistRecipientPolicyIntent,\n\tlistRecipientPolicyReview,\n\tlistSharingDomainSettingsScopes,\n\tloadMemorySnapshotPageForPeer,\n\tloadReplicationOpsForPeer,\n\tlookupCoordinatorPeers,\n\tmergeAddresses,\n\tmigrateRecipientPolicyIntent,\n\tnegotiateSyncCapability,\n\tnormalizeAddress,\n\tnormalizeHumanPresentationName,\n\tnormalizeSyncCapability,\n\tnormalizeSyncFeatures,\n\tnormalizeTeammateName,\n\tparseAcceptedProjectIntent,\n\tparseReassignScopePayload,\n\tparseRecipientPolicyEdgeCommitRequest,\n\tparseSyncScopeRequest,\n\tpersistShareOperation,\n\tpersonalScopeGrantStatusForPeer,\n\tplanShareOperation,\n\tpreviewDeviceIdentityBindings,\n\tpreviewRecipientPolicyEdges,\n\tpreviewRecipientPolicyOnboarding,\n\tpreviewRecipientPolicyOnboardingFromReviewedIntent,\n\tprojectShareLifecycle,\n\tRecipientPolicyEdgeRequestError,\n\tRecipientPolicyTeamRenameError,\n\treadCodememConfigFile,\n\treadCoordinatorSyncConfig,\n\treassignProjectScopeInventoryProject,\n\trecipientInviteAuthoritativeIdentityId,\n\trecipientReviewedIntentDigest,\n\treconcileCoordinatorEnrollmentSnapshot,\n\treconcileRecipientPolicyProject,\n\treconcileShareOperationAcceptance,\n\trecordHighestObservedDirectSignatureVersion,\n\trecordNonce,\n\trefreshAuthorizedCoordinatorPeerTrust,\n\trefreshConfiguredScopeMembershipCache,\n\trejectInboundScopeFailures,\n\trenameRecipientPolicyTeam,\n\trequestJson,\n\tresolveRecipientPolicyReview,\n\tresolveRecipientPolicyReviewBulk,\n\trunSyncPass,\n\tSCOPE_MEMBERSHIP_REVOCATION_LIMITATION,\n\tSYNC_AUTHORIZATION_REFRESH_HEADER,\n\tSYNC_CAPABILITY_HEADER,\n\tSYNC_FEATURES_HEADER,\n\tSYNC_SCOPE_QUERY_PARAM,\n\tschema,\n\tserializeRecipientPolicyTeamMutation,\n\tsummarizeInboundScopeRejections,\n\tsupportsSyncFeature,\n\tsyncScopeResetRequiredPayload,\n\tupdatePeerAddresses,\n\tupsertCoordinatorGroupPreference,\n\tupsertProjectScopeSettingsMapping,\n\tVERSION,\n\tverifyDirectPeerSignature,\n\tverifyRecipientReviewedIntent,\n\tverifySignature,\n\twriteCodememConfigFile,\n} from \"@codemem/core\";\nimport { and, count, desc, eq, max, ne } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/better-sqlite3\";\nimport { type Context, Hono } from \"hono\";\nimport { queryBool, queryInt, safeJsonList } from \"../helpers.js\";\nimport type { InMemoryRequestRateLimiter } from \"../request-rate-limit.js\";\nimport { legacyTeamCandidateGroupDescriptors, normalizedCoordinatorId } from \"./team-setup.js\";\n\ntype StoreFactory = () => MemoryStore;\nexport type DeviceIdentityCoordinatorEvidenceLoader =\n\t() => Promise<DeviceIdentityCoordinatorEvidence>;\nexport interface SyncRoutesOptions {\n\tloadDeviceIdentityCoordinatorEvidence?: DeviceIdentityCoordinatorEvidenceLoader;\n\tonRecipientPolicyTeamRenamed?: () => void;\n\treadCoordinatorConfig?: typeof readCoordinatorSyncConfig;\n\trenameCoordinatorGroup?: typeof coordinatorRenameGroupAction;\n}\ntype SyncRuntimeStatus = {\n\tphase:\n\t\t| \"starting\"\n\t\t| \"running\"\n\t\t| \"stopping\"\n\t\t| \"error\"\n\t\t| \"disabled\"\n\t\t| \"rebootstrapping\"\n\t\t| \"needs_attention\"\n\t\t| null;\n\tdetail?: string | null;\n};\n\ntype SafeSkippedSyncDetail = Pick<\n\tFilterReplicationSkipped,\n\t\"reason\" | \"skipped_count\" | \"scope_id\" | \"project\" | \"visibility\"\n>;\n\nfunction safeSkippedSyncDetail(\n\tdetail: FilterReplicationSkipped | null | undefined,\n): SafeSkippedSyncDetail | null {\n\tif (!detail) return null;\n\treturn {\n\t\treason: detail.reason,\n\t\tskipped_count: detail.skipped_count,\n\t\tscope_id: detail.scope_id ?? null,\n\t\tproject: detail.project ?? null,\n\t\tvisibility: detail.visibility ?? null,\n\t};\n}\n\ninterface SyncProtocolRouteOptions {\n\trouteRateLimit?: {\n\t\tlimiter: InMemoryRequestRateLimiter;\n\t\treadLimit: number;\n\t\tmutationLimit: number;\n\t\tunauthenticatedReadLimit: number;\n\t\tunauthenticatedMutationLimit: number;\n\t};\n}\n\nconst SYNC_STALE_AFTER_SECONDS = 10 * 60;\nconst SYNC_PROTOCOL_VERSION = \"2\";\nconst LEGACY_SYNC_ACTOR_DISPLAY_NAME = \"Legacy synced peer\";\nconst LEGACY_SHARED_WORKSPACE_ID = \"shared:legacy\";\n\n/**\n * Attempt to decode a pasted string as a device-pairing payload.\n *\n * Returns:\n * - `{ kind: \"pair\", ... }` when the payload base64-decodes to JSON with\n * the expected pairing shape AND the fingerprint matches the public\n * key.\n * - `{ kind: \"invalid-pair\", error }` when the payload looked like a\n * pairing payload but failed validation — the caller should 400 this\n * rather than falling back to coordinator-invite handling.\n * - `null` when the string is not a pairing payload at all.\n */\nfunction tryParsePairingPayload(value: string):\n\t| {\n\t\t\tkind: \"pair\";\n\t\t\tdevice_id: string;\n\t\t\tfingerprint: string;\n\t\t\tpublic_key: string;\n\t\t\taddresses: string[];\n\t }\n\t| { kind: \"invalid-pair\"; error: string }\n\t| null {\n\t// Accept both shapes the CLI can emit:\n\t// - raw JSON (`codemem sync pair --payload-only`)\n\t// - base64-encoded JSON (the inner blob inside the shell pipe wrapper)\n\tlet parsed: Record<string, unknown>;\n\tif (value.trimStart().startsWith(\"{\")) {\n\t\ttry {\n\t\t\tparsed = JSON.parse(value) as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t} else {\n\t\tlet decoded: string;\n\t\ttry {\n\t\t\tdecoded = Buffer.from(value, \"base64\").toString(\"utf8\");\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t\tif (!decoded?.trimStart().startsWith(\"{\")) return null;\n\t\ttry {\n\t\t\tparsed = JSON.parse(decoded) as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\tconst deviceId = String(parsed.device_id ?? \"\").trim();\n\tconst fingerprint = String(parsed.fingerprint ?? \"\").trim();\n\tconst publicKey = String(parsed.public_key ?? \"\").trim();\n\t// If the JSON doesn't carry any of the pairing discriminators, treat\n\t// it as a different kind of payload (e.g. a coordinator invite happened\n\t// to be JSON-encoded directly). Let the caller keep trying.\n\tif (!deviceId && !fingerprint && !publicKey) return null;\n\tconst rawAddresses = Array.isArray(parsed.addresses) ? parsed.addresses : [];\n\tconst addresses = rawAddresses\n\t\t.filter((item): item is string => typeof item === \"string\" && item.trim().length > 0)\n\t\t.map((item) => item.trim());\n\tif (!deviceId || !fingerprint || !publicKey || addresses.length === 0) {\n\t\treturn {\n\t\t\tkind: \"invalid-pair\",\n\t\t\terror: \"Pairing payload missing device_id, fingerprint, public_key, or addresses\",\n\t\t};\n\t}\n\tif (fingerprintPublicKey(publicKey) !== fingerprint) {\n\t\treturn { kind: \"invalid-pair\", error: \"Pairing payload fingerprint mismatch\" };\n\t}\n\treturn {\n\t\tkind: \"pair\",\n\t\tdevice_id: deviceId,\n\t\tfingerprint,\n\t\tpublic_key: publicKey,\n\t\taddresses,\n\t};\n}\n\ntype CoordinatorAdminReadiness = \"not_configured\" | \"partial\" | \"ready\";\n\nfunction coordinatorAdminStatusPayload(config = readCoordinatorSyncConfig()) {\n\tconst groups = config.syncCoordinatorGroups;\n\tconst activeGroup = groups[0] ?? null;\n\tconst hasUrl = Boolean(config.syncCoordinatorUrl);\n\tconst hasGroups = groups.length > 0;\n\tconst hasAdminSecret = Boolean(config.syncCoordinatorAdminSecret);\n\tlet readiness: CoordinatorAdminReadiness = \"ready\";\n\tif (!hasUrl) readiness = \"not_configured\";\n\telse if (!hasGroups || !hasAdminSecret) readiness = \"partial\";\n\treturn {\n\t\treadiness,\n\t\tcoordinator_url: config.syncCoordinatorUrl || null,\n\t\tgroups,\n\t\tactive_group: activeGroup,\n\t\thas_admin_secret: hasAdminSecret,\n\t\thas_groups: hasGroups,\n\t};\n}\n\nasync function ensureDefaultSpaceForTeam(opts: {\n\tstore: MemoryStore;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\tgroupId: string;\n\tdisplayName: string | null;\n}): Promise<{\n\tscope: CoordinatorScope | null;\n\tmembership: CoordinatorScopeMembership | null;\n\tpreferences: ReturnType<typeof upsertCoordinatorGroupPreference>;\n}> {\n\tconst coordinatorId = opts.config.syncCoordinatorUrl || null;\n\tif (!coordinatorId) throw new Error(\"coordinator_not_configured\");\n\tconst scopeId = defaultSpaceScopeIdForGroup(opts.groupId);\n\tconst label = opts.displayName || opts.groupId;\n\tconst existingScopes = await coordinatorListScopesAction({\n\t\tgroupId: opts.groupId,\n\t\tincludeInactive: false,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n\tconst existingScope = existingScopes.find((scope) => scope.scope_id === scopeId) ?? null;\n\tconst scope =\n\t\texistingScope ??\n\t\t(await coordinatorCreateScopeAction({\n\t\t\tgroupId: opts.groupId,\n\t\t\tscopeId,\n\t\t\tlabel,\n\t\t\tkind: \"team_default\",\n\t\t\tauthorityType: \"coordinator\",\n\t\t\tcoordinatorId,\n\t\t\tmembershipEpoch: 1,\n\t\t\tstatus: \"active\",\n\t\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t\t}));\n\tconst [deviceId] = ensureDeviceIdentity(opts.store.db, { keysDir: syncKeysDir() });\n\tconst membership = await coordinatorGrantScopeMembershipAction({\n\t\teffectId: `team-default-grant:${opts.groupId}:${scopeId}:${deviceId}:1`,\n\t\tgroupId: opts.groupId,\n\t\tscopeId,\n\t\tdeviceId,\n\t\trole: \"admin\",\n\t\tmembershipEpoch: 1,\n\t\tcoordinatorId,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n\tconst preferences = upsertCoordinatorGroupPreference(opts.store.db, {\n\t\tcoordinator_id: coordinatorId,\n\t\tgroup_id: opts.groupId,\n\t\tdefault_space_scope_id: scopeId,\n\t\tauto_grant_default_space_on_join: true,\n\t});\n\treturn { scope, membership, preferences };\n}\n\nasync function maybeGrantDefaultSpaceOnJoin(opts: {\n\tstore: MemoryStore;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\tgroupId: string;\n\trequestId: string;\n\tdeviceId: string;\n}): Promise<CoordinatorScopeMembership | null> {\n\tconst coordinatorId = opts.config.syncCoordinatorUrl || null;\n\tif (!coordinatorId) return null;\n\tconst preferences = getCoordinatorGroupPreference(opts.store.db, coordinatorId, opts.groupId);\n\tif (!preferences?.auto_grant_default_space_on_join) return null;\n\tconst scopeId = preferences.default_space_scope_id?.trim();\n\tif (!scopeId) return null;\n\tif (scopeId !== defaultSpaceScopeIdForGroup(opts.groupId)) return null;\n\tconst scopes = await coordinatorListScopesAction({\n\t\tgroupId: opts.groupId,\n\t\tincludeInactive: false,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n\tconst defaultScope = scopes.find((scope) => scope.scope_id === scopeId) ?? null;\n\tif (defaultScope?.kind !== \"team_default\") return null;\n\treturn await coordinatorGrantScopeMembershipAction({\n\t\teffectId: `team-default-join:${opts.requestId}:${scopeId}:${opts.deviceId}:1`,\n\t\tgroupId: opts.groupId,\n\t\tscopeId,\n\t\tdeviceId: opts.deviceId,\n\t\trole: \"member\",\n\t\tmembershipEpoch: 1,\n\t\tcoordinatorId,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n}\n\nfunction removeConfiguredCoordinatorGroup(groupId: string): string[] {\n\tconst targetGroup = groupId.trim();\n\tif (!targetGroup) return [];\n\tconst config = readCodememConfigFile();\n\tconst rawGroups = config.sync_coordinator_groups;\n\tconst groups = Array.isArray(rawGroups)\n\t\t? rawGroups.map((group) => String(group).trim()).filter(Boolean)\n\t\t: typeof rawGroups === \"string\"\n\t\t\t? rawGroups\n\t\t\t\t\t.split(\",\")\n\t\t\t\t\t.map((group) => group.trim())\n\t\t\t\t\t.filter(Boolean)\n\t\t\t: typeof config.sync_coordinator_group === \"string\" && config.sync_coordinator_group.trim()\n\t\t\t\t? [config.sync_coordinator_group.trim()]\n\t\t\t\t: [];\n\tconst nextGroups = groups.filter((group) => group !== targetGroup);\n\tif (nextGroups.length === groups.length) return groups;\n\tconfig.sync_coordinator_groups = nextGroups;\n\tif (nextGroups.length) config.sync_coordinator_group = nextGroups[0];\n\telse delete config.sync_coordinator_group;\n\twriteCodememConfigFile(config);\n\treturn nextGroups;\n}\n\nfunction coordinatorAdminUnavailable(status: ReturnType<typeof coordinatorAdminStatusPayload>): {\n\tbody: Record<string, unknown>;\n\thttpStatus: 400;\n} | null {\n\tif (status.readiness === \"not_configured\") {\n\t\treturn { body: { error: \"coordinator_not_configured\", status }, httpStatus: 400 };\n\t}\n\tif (!status.has_admin_secret) {\n\t\treturn { body: { error: \"coordinator_admin_secret_missing\", status }, httpStatus: 400 };\n\t}\n\treturn null;\n}\n\nfunction recipientInviteCreationUnavailable(\n\tstatus: ReturnType<typeof coordinatorAdminStatusPayload>,\n\tkind: RecipientInviteKind,\n): { body: Record<string, unknown>; httpStatus: 400 } | null {\n\tif (status.readiness === \"not_configured\") {\n\t\treturn { body: { error: \"coordinator_not_configured\", status }, httpStatus: 400 };\n\t}\n\tif (!status.has_groups) {\n\t\treturn { body: { error: \"coordinator_group_missing\", status }, httpStatus: 400 };\n\t}\n\tif (kind === \"team_member\" && !status.has_admin_secret) {\n\t\treturn { body: { error: \"coordinator_admin_secret_missing\", status }, httpStatus: 400 };\n\t}\n\treturn null;\n}\n\nasync function parseViewerJsonBody(\n\tc: Context,\n\toptions: { allowEmpty?: boolean } = {},\n): Promise<Record<string, unknown> | null> {\n\tconst raw = await c.req.text();\n\tif (!raw.trim()) return options.allowEmpty ? {} : null;\n\ttry {\n\t\tconst parsed = JSON.parse(raw) as unknown;\n\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return null;\n\t\treturn parsed as Record<string, unknown>;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction optionalViewerString(body: Record<string, unknown>, key: string): string | null {\n\tconst value = body[key];\n\tif (value == null) return null;\n\treturn String(value).trim() || null;\n}\n\nfunction optionalViewerStrictString(body: Record<string, unknown>, key: string): string | null {\n\tconst value = body[key];\n\tif (value == null) return null;\n\tif (typeof value !== \"string\") throw new Error(`${key} must be string`);\n\treturn value.trim() || null;\n}\n\nfunction optionalViewerStringList(body: Record<string, unknown>, key: string): string[] {\n\tconst value = body[key];\n\tif (value == null) return [];\n\tif (!Array.isArray(value)) throw new Error(`${key} must be an array of strings`);\n\treturn [\n\t\t...new Set(\n\t\t\tvalue\n\t\t\t\t.map((item) => {\n\t\t\t\t\tif (typeof item !== \"string\") throw new Error(`${key} must be an array of strings`);\n\t\t\t\t\treturn item.trim();\n\t\t\t\t})\n\t\t\t\t.filter(Boolean),\n\t\t),\n\t];\n}\n\nfunction optionalViewerNumber(body: Record<string, unknown>, key: string): number | null {\n\tconst value = body[key];\n\tif (value == null || value === \"\") return null;\n\tconst number = typeof value === \"number\" ? value : Number(value);\n\treturn Number.isFinite(number) ? Math.trunc(number) : Number.NaN;\n}\n\nfunction coordinatorAdminMembershipEffectId(\n\taction: \"grant\" | \"revoke\",\n\tattemptId: string,\n\tinput: {\n\t\tgroupId: string;\n\t\tscopeId: string;\n\t\tdeviceId: string;\n\t\trole?: string | null;\n\t\tmembershipEpoch: number | null;\n\t\tcoordinatorId?: string | null;\n\t\tmanifestIssuerDeviceId?: string | null;\n\t\tmanifestHash: string | null;\n\t\tsignedManifestJson: string | null;\n\t},\n): string {\n\tconst fingerprint = createHash(\"sha256\")\n\t\t.update(\n\t\t\tJSON.stringify({\n\t\t\t\taction,\n\t\t\t\tattemptId,\n\t\t\t\tgroupId: input.groupId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\trole: input.role ?? null,\n\t\t\t\tmembershipEpoch: input.membershipEpoch,\n\t\t\t\tcoordinatorId: input.coordinatorId ?? null,\n\t\t\t\tmanifestIssuerDeviceId: input.manifestIssuerDeviceId ?? null,\n\t\t\t\tmanifestHash: input.manifestHash,\n\t\t\t\tsignedManifestJson: input.signedManifestJson,\n\t\t\t}),\n\t\t)\n\t\t.digest(\"hex\");\n\treturn `viewer-admin-membership:${action}:${fingerprint}`;\n}\n\nfunction optionalViewerInteger(body: Record<string, unknown>, key: string): number | null {\n\tconst value = body[key];\n\tif (value == null || value === \"\") return null;\n\tconst number = typeof value === \"number\" ? value : Number(value);\n\treturn Number.isInteger(number) ? number : Number.NaN;\n}\n\nfunction missingGuardrailConfirmations(\n\twarnings: ProjectScopeGuardrailWarning[],\n\tconfirmedTokens: string[],\n): ProjectScopeGuardrailWarning[] {\n\tconst confirmed = new Set(confirmedTokens);\n\treturn warnings.filter(\n\t\t(warning) =>\n\t\t\twarning.requires_confirmation &&\n\t\t\t(!warning.confirmation_token || !confirmed.has(warning.confirmation_token)),\n\t);\n}\n\nfunction parseViewerProjectMappingInput(body: Record<string, unknown>) {\n\tconst id = optionalViewerInteger(body, \"id\");\n\tconst priority = optionalViewerInteger(body, \"priority\");\n\tif (Number.isNaN(id)) throw new Error(\"id must be an integer\");\n\tif (Number.isNaN(priority)) throw new Error(\"priority must be an integer\");\n\treturn {\n\t\tid,\n\t\tworkspace_identity: optionalViewerStrictString(body, \"workspace_identity\"),\n\t\tproject_pattern: optionalViewerStrictString(body, \"project_pattern\"),\n\t\tscope_id: optionalViewerStrictString(body, \"scope_id\") ?? \"\",\n\t\tpriority,\n\t\tsource: optionalViewerStrictString(body, \"source\") ?? \"user\",\n\t};\n}\n\nfunction coordinatorAdminMutationStatus(message: string): 400 | 404 | 409 | 502 {\n\tif (\n\t\tmessage.includes(\"scope_not_found\") ||\n\t\tmessage.includes(\"membership_not_found\") ||\n\t\tmessage.includes(\"group_not_found\") ||\n\t\tmessage.includes(\"Group not found\") ||\n\t\tmessage.includes(\"Scope not found\") ||\n\t\tmessage.includes(\"device_not_enrolled_for_scope_group\") ||\n\t\tmessage.includes(\"device must be enrolled\")\n\t) {\n\t\treturn 404;\n\t}\n\tif (\n\t\tmessage.includes(\"not active\") ||\n\t\tmessage.includes(\"scope_not_active\") ||\n\t\tmessage.includes(\"scope_membership_effect_conflict\") ||\n\t\tmessage.includes(\"group_archived\") ||\n\t\tmessage.includes(\"Group is archived\")\n\t) {\n\t\treturn 409;\n\t}\n\tif (\n\t\tmessage.includes(\"Remote coordinator request failed (5\") ||\n\t\tmessage.includes(\"fetch failed\") ||\n\t\tmessage.includes(\"network\") ||\n\t\tmessage.includes(\"timed out\")\n\t) {\n\t\treturn 502;\n\t}\n\treturn 400;\n}\n\nfunction pairingAdvertiseAddresses(config = readCoordinatorSyncConfig()): string[] {\n\tconst advertise = String(config.syncAdvertise || \"auto\")\n\t\t.trim()\n\t\t.toLowerCase();\n\tif (advertise && advertise !== \"auto\" && advertise !== \"default\") {\n\t\treturn mergeAddresses(\n\t\t\t[],\n\t\t\tString(config.syncAdvertise || \"\")\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((item) => item.trim())\n\t\t\t\t.filter(Boolean),\n\t\t\t{ defaultHttpPort: config.syncPort },\n\t\t);\n\t}\n\tif (config.syncHost && config.syncHost !== \"0.0.0.0\") {\n\t\treturn [normalizeAddress(formatHostPort(config.syncHost, config.syncPort))].filter(Boolean);\n\t}\n\tconst addresses = Object.values(networkInterfaces())\n\t\t.flatMap((entries) => entries ?? [])\n\t\t.filter((entry) => !entry.internal)\n\t\t.map((entry) => entry.address)\n\t\t.filter((address) => address && address !== \"127.0.0.1\" && address !== \"::1\")\n\t\t.map((address) => normalizeAddress(formatHostPort(address, config.syncPort)))\n\t\t.filter(Boolean);\n\treturn [...new Set(addresses)];\n}\n\nfunction resolveCoordinatorAdminGroup(\n\trequestedGroup: string | null | undefined,\n\tstatus: ReturnType<typeof coordinatorAdminStatusPayload>,\n): string | null {\n\tconst explicit = String(requestedGroup ?? \"\").trim();\n\tif (explicit) return explicit;\n\treturn status.active_group;\n}\n\nfunction parseInviteTtlHours(value: unknown): number | null {\n\tconst ttlHours = Number(String(value ?? 24));\n\tif (!Number.isInteger(ttlHours) || ttlHours < 1) return null;\n\treturn ttlHours;\n}\n\nfunction projectInviteAcceptanceFailure(error: unknown): {\n\terror: string;\n\tdetail: string;\n} {\n\tif (isProjectSyncEnablementError(error)) {\n\t\treturn { error: error.code, detail: error.detail };\n\t}\n\tconst code = error instanceof Error ? error.message : \"project_invite_acceptance_failed\";\n\tconst detailByCode: Record<string, string> = {\n\t\tinvite_already_bound:\n\t\t\t\"This invitation was accepted by another device. Ask the owner to create a new invitation.\",\n\t\tinvite_expired: \"This invitation expired. Ask the owner to create a new invitation.\",\n\t\tinvite_identity_conflict:\n\t\t\t\"This invitation does not match this Identity. Ask the owner to create a new invitation for this recipient.\",\n\t\tinvite_invalid: \"This invitation is no longer valid. Ask the owner to create a new invitation.\",\n\t\tinviter_identity_invalid:\n\t\t\t\"The owner's device identity could not be verified. Ask the owner to review the share and create a new invitation.\",\n\t\tproject_invite_self_acceptance_forbidden:\n\t\t\t\"The owner cannot accept this recipient invitation on the owner's device.\",\n\t\tproject_invite_bootstrap_incomplete:\n\t\t\t\"The owner's device is not ready to establish trust yet. Retry once, then ask the owner to review the share.\",\n\t\tproject_invite_trust_state_invalid:\n\t\t\t\"The owner's trust setup could not be verified. Ask the owner to review the share.\",\n\t\trecipient_display_name_invalid:\n\t\t\t\"Enter a human-readable Identity name instead of an internal identifier.\",\n\t\trecipient_display_name_required: \"Enter an Identity display name.\",\n\t\trecipient_display_name_too_long: \"Use an Identity display name with 120 characters or fewer.\",\n\t\tdevice_display_name_invalid:\n\t\t\t\"Enter a human-readable device name instead of an internal identifier.\",\n\t\tdevice_display_name_required: \"Enter a device display name.\",\n\t\tdevice_display_name_too_long: \"Use a device display name with 120 characters or fewer.\",\n\t};\n\tconst safeCode = Object.hasOwn(detailByCode, code) ? code : \"project_invite_acceptance_failed\";\n\treturn {\n\t\terror: safeCode,\n\t\tdetail:\n\t\t\tdetailByCode[code] ??\n\t\t\t\"The invitation could not be accepted safely. Retry once, then ask the owner to review the share.\",\n\t};\n}\n\nconst PROJECT_INVITE_TTL_HOURS = 7 * 24;\nconst PROJECT_INVITE_OWNER_FALLBACK = \"Project owner\";\nconst PROJECT_INVITE_BODY_KEYS = new Set([\n\t\"teammate_name\",\n\t\"project_ids\",\n\t\"reviewed_project_set_digest\",\n]);\n\nfunction projectInviteInviterDisplayName(value: string): string {\n\ttry {\n\t\treturn normalizeHumanPresentationName(value, \"inviter_display_name\");\n\t} catch {\n\t\treturn PROJECT_INVITE_OWNER_FALLBACK;\n\t}\n}\n\nfunction projectInviteStringList(body: Record<string, unknown>, key: string): string[] {\n\tconst value = body[key];\n\tif (!Array.isArray(value)) throw new Error(`${key}_must_be_string_array`);\n\tif (value.length > 100) throw new Error(`${key}_too_large`);\n\tconst items = value.map((item) => {\n\t\tif (typeof item !== \"string\") throw new Error(`${key}_must_be_string_array`);\n\t\treturn item.trim();\n\t});\n\tif (items.some((item) => !item)) throw new Error(`${key}_contains_empty_value`);\n\tif (new Set(items).size !== items.length) throw new Error(`${key}_contains_duplicates`);\n\treturn items;\n}\n\nfunction assertProjectInviteBody(body: Record<string, unknown>, creating: boolean): void {\n\tconst allowed = creating ? PROJECT_INVITE_BODY_KEYS : new Set([\"teammate_name\", \"project_ids\"]);\n\tif (Object.keys(body).some((key) => !allowed.has(key))) {\n\t\tthrow new Error(\"unexpected_project_invite_fields\");\n\t}\n\tif (typeof body.teammate_name !== \"string\") throw new Error(\"teammate_name_must_be_string\");\n\tif (creating && typeof body.reviewed_project_set_digest !== \"string\") {\n\t\tthrow new Error(\"reviewed_project_set_digest_required\");\n\t}\n\tif (creating && !/^[a-f0-9]{64}$/u.test(String(body.reviewed_project_set_digest).trim())) {\n\t\tthrow new Error(\"reviewed_project_set_digest_invalid\");\n\t}\n}\n\nfunction projectInviteStatus(config = readCoordinatorSyncConfig()): {\n\tgroupId: string;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n} {\n\tconst status = coordinatorAdminStatusPayload(config);\n\tif (status.readiness !== \"ready\") throw new Error(\"team_sharing_not_configured\");\n\tif (status.groups.length !== 1) throw new Error(\"team_selection_ambiguous\");\n\tif (!status.active_group) throw new Error(\"team_sharing_not_configured\");\n\treturn { groupId: status.active_group, config };\n}\n\ntype RecipientInviteKind = \"team_member\" | \"add_device\";\n\nfunction recipientInviteKind(value: unknown): RecipientInviteKind {\n\tif (value === \"team_member\" || value === \"add_device\") return value;\n\tthrow new Error(\"recipient_invite_kind_invalid\");\n}\n\nfunction localOnboardingBinding(\n\tstore: MemoryStore,\n\tdeviceName: string | null,\n\toptions: { materializeActor?: boolean } = {},\n): {\n\tdeviceId: string;\n\tdevicePublicKey: string;\n\tdeviceDisplayName: string;\n} {\n\tconst deviceId =\n\t\toptions.materializeActor === false\n\t\t\t? ensureStableStoreDeviceIdentity(store)\n\t\t\t: ensureStableStoreIdentity(store);\n\tconst devicePublicKey = String(\n\t\tstore.db\n\t\t\t.prepare(\"SELECT public_key FROM sync_device WHERE device_id = ?\")\n\t\t\t.pluck()\n\t\t\t.get(deviceId) ?? \"\",\n\t).trim();\n\tif (!devicePublicKey) throw new Error(\"device_public_key_missing\");\n\tconst config = readCodememConfigFile();\n\treturn {\n\t\tdeviceId,\n\t\tdevicePublicKey,\n\t\tdeviceDisplayName: friendlyDeviceName({\n\t\t\texplicitName: deviceName ?? String(config.sync_device_name ?? \"\"),\n\t\t\tosName: hostname(),\n\t\t\tfallbackSeed: deviceId,\n\t\t}),\n\t};\n}\n\nfunction recipientInviteOnboardingPreview(\n\tstore: MemoryStore,\n\tbody: Record<string, unknown>,\n\tinvitationId: string,\n) {\n\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\tconst binding = localOnboardingBinding(store, optionalViewerString(body, \"device_name\"));\n\tconst teamId = optionalViewerStrictString(body, \"policy_team_id\");\n\tconst targetIdentityId = optionalViewerStrictString(body, \"target_identity_id\");\n\tif (kind === \"team_member\") {\n\t\tif (!teamId || targetIdentityId) throw new Error(\"recipient_invite_metadata_invalid\");\n\t\treturn previewRecipientPolicyOnboarding(store.db, {\n\t\t\tversion: 1,\n\t\t\tjourney: \"team\",\n\t\t\tinvitationId,\n\t\t\tidentityId: store.actorId,\n\t\t\t...binding,\n\t\t\tteamId,\n\t\t});\n\t}\n\tif (!targetIdentityId || teamId) throw new Error(\"recipient_invite_metadata_invalid\");\n\treturn previewRecipientPolicyOnboarding(\n\t\tstore.db,\n\t\t{\n\t\t\tversion: 1,\n\t\t\tjourney: \"add_device\",\n\t\t\tinvitationId,\n\t\t\tidentityId: targetIdentityId,\n\t\t\t...binding,\n\t\t},\n\t\t{\n\t\t\taddDeviceTeamEligibility: \"prospective_device\",\n\t\t},\n\t);\n}\n\nfunction recipientInviteReviewedIntent(\n\tstore: MemoryStore,\n\tkind: RecipientInviteKind,\n\ttargetId: string,\n\tpreview: RecipientPolicyOnboardingPreviewV1,\n): RecipientReviewedIntentV1 {\n\tif (kind === \"team_member\") {\n\t\tif (preview.journey !== \"team\" || !preview.team || preview.team.teamId !== targetId) {\n\t\t\tthrow new Error(\"recipient_invite_intent_mismatch\");\n\t\t}\n\t\treturn {\n\t\t\tversion: 1,\n\t\t\tjourney: \"team\",\n\t\t\tteam: preview.team,\n\t\t\tprojects: preview.projects,\n\t\t\texcludedProjects: [],\n\t\t};\n\t}\n\tif (preview.journey !== \"add_device\" || preview.binding.identityId !== targetId) {\n\t\tthrow new Error(\"recipient_invite_intent_mismatch\");\n\t}\n\tconst targetIdentity = store.db\n\t\t.prepare(\n\t\t\t`SELECT display_name FROM actors\n\t\t\t WHERE actor_id = ? AND status = 'active' AND merged_into_actor_id IS NULL`,\n\t\t)\n\t\t.get(targetId) as { display_name: string } | undefined;\n\tif (!targetIdentity?.display_name) throw new Error(\"identity_not_found\");\n\treturn {\n\t\tversion: 1,\n\t\tjourney: \"add_device\",\n\t\ttargetIdentity: { identityId: targetId, displayName: targetIdentity.display_name },\n\t\tprojects: preview.projects,\n\t\texcludedProjects: preview.excludedProjects,\n\t};\n}\n\nfunction recipientInviteOnboardingPreviewFromReviewedIntent(\n\tstore: MemoryStore,\n\tbody: Record<string, unknown>,\n\tinvitationId: string,\n\treviewedIntent: RecipientReviewedIntentV1,\n) {\n\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\tconst binding = localOnboardingBinding(store, optionalViewerString(body, \"device_name\"), {\n\t\tmaterializeActor: false,\n\t});\n\tconst teamId = optionalViewerStrictString(body, \"policy_team_id\");\n\tconst targetIdentityId = optionalViewerStrictString(body, \"target_identity_id\");\n\tconst assignedIdentityId = optionalViewerStrictString(body, \"assigned_identity_id\");\n\tif (kind === \"team_member\") {\n\t\tif (!teamId || !assignedIdentityId || targetIdentityId) {\n\t\t\tthrow new Error(\"recipient_invite_metadata_invalid\");\n\t\t}\n\t\treturn previewRecipientPolicyOnboardingFromReviewedIntent(reviewedIntent, {\n\t\t\tversion: 1,\n\t\t\tjourney: \"team\",\n\t\t\tinvitationId,\n\t\t\tidentityId: assignedIdentityId,\n\t\t\t...binding,\n\t\t\tteamId,\n\t\t});\n\t}\n\tif (!targetIdentityId || teamId || assignedIdentityId) {\n\t\tthrow new Error(\"recipient_invite_metadata_invalid\");\n\t}\n\treturn previewRecipientPolicyOnboardingFromReviewedIntent(reviewedIntent, {\n\t\tversion: 1,\n\t\tjourney: \"add_device\",\n\t\tinvitationId,\n\t\tidentityId: targetIdentityId,\n\t\t...binding,\n\t});\n}\n\nconst SAFE_RECIPIENT_INVITE_ERRORS = new Set([\n\t\"device_display_name_invalid\",\n\t\"device_display_name_required\",\n\t\"device_display_name_too_long\",\n\t\"invite_already_bound\",\n\t\"invite_expired\",\n\t\"invite_identity_conflict\",\n\t\"invite_invalid\",\n\t\"recipient_display_name_invalid\",\n\t\"recipient_display_name_required\",\n\t\"recipient_display_name_too_long\",\n\t\"recipient_invite_intent_mismatch\",\n\t\"recipient_invite_review_unavailable\",\n\t\"reviewed_onboarding_stale\",\n]);\n\nfunction safeRecipientInviteError(value: unknown, fallback = \"invite_invalid\"): string {\n\tconst code = value instanceof Error ? value.message : String(value ?? \"\").trim();\n\treturn SAFE_RECIPIENT_INVITE_ERRORS.has(code) ? code : fallback;\n}\n\nfunction recipientInvitePreviewId(kind: RecipientInviteKind, targetId: string): string {\n\treturn `recipient-invite-preview:${kind}:${targetId}`;\n}\n\nexport function recipientPolicyCapabilityFromStatus(payload: {\n\tsync_capability?: unknown;\n\tsync_features?: unknown;\n}): RecipientPolicyPeerCapability {\n\tif (!isScopedSyncCapability(normalizeSyncCapability(payload.sync_capability))) {\n\t\treturn \"unsupported\";\n\t}\n\treturn supportsSyncFeature(payload.sync_features, \"reassign_scope\") ? \"supported\" : \"unsupported\";\n}\n\nexport async function peerSupportsSyncRequirements(\n\tstore: MemoryStore,\n\tdeviceId: string,\n\trequirements: { scoped: boolean; reassignScope: boolean },\n): Promise<RecipientPolicyPeerCapability> {\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tif (deviceId === localDeviceId) return \"supported\";\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t\"SELECT addresses_json, pinned_fingerprint, public_key FROM sync_peers WHERE peer_device_id = ?\",\n\t\t)\n\t\t.get(deviceId) as\n\t\t| {\n\t\t\t\taddresses_json: string | null;\n\t\t\t\tpinned_fingerprint: string | null;\n\t\t\t\tpublic_key: string | null;\n\t\t }\n\t\t| undefined;\n\tconst expectedFingerprint =\n\t\tString(row?.pinned_fingerprint ?? \"\").trim() ||\n\t\t(row?.public_key ? fingerprintPublicKey(row.public_key) : \"\");\n\tconst addresses = safeJsonList(row?.addresses_json ?? null);\n\tfor (const address of addresses) {\n\t\ttry {\n\t\t\tconst url = `${buildBaseUrl(address)}/v1/status`;\n\t\t\tconst headers = {\n\t\t\t\t...buildDirectPeerAuthHeaders({\n\t\t\t\t\tdeviceId: localDeviceId,\n\t\t\t\t\trecipientId: deviceId,\n\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\turl,\n\t\t\t\t\tbodyBytes: Buffer.alloc(0),\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t}),\n\t\t\t\t[SYNC_CAPABILITY_HEADER]: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t[SYNC_FEATURES_HEADER]: LOCAL_SYNC_FEATURES.join(\",\"),\n\t\t\t};\n\t\t\tconst [status, payload] = await requestJson(\"GET\", url, { headers, timeoutS: 5 });\n\t\t\tif (status < 200 || status >= 300) continue;\n\t\t\tif (String(payload?.device_id ?? \"\").trim() !== deviceId) continue;\n\t\t\tif (\n\t\t\t\texpectedFingerprint &&\n\t\t\t\tString(payload?.fingerprint ?? \"\").trim() !== expectedFingerprint\n\t\t\t) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (\n\t\t\t\trequirements.scoped &&\n\t\t\t\trequirements.reassignScope &&\n\t\t\t\trecipientPolicyCapabilityFromStatus(payload ?? {}) !== \"supported\"\n\t\t\t) {\n\t\t\t\treturn \"unsupported\";\n\t\t\t}\n\t\t\tif (\n\t\t\t\trequirements.scoped &&\n\t\t\t\t!isScopedSyncCapability(normalizeSyncCapability(payload?.sync_capability))\n\t\t\t) {\n\t\t\t\treturn \"unsupported\";\n\t\t\t}\n\t\t\tif (\n\t\t\t\trequirements.reassignScope &&\n\t\t\t\t!supportsSyncFeature(payload?.sync_features, \"reassign_scope\")\n\t\t\t) {\n\t\t\t\treturn \"unsupported\";\n\t\t\t}\n\t\t\treturn \"supported\";\n\t\t} catch {\n\t\t\t// Try the next reviewed address. Ambiguous/unreachable capability fails closed.\n\t\t}\n\t}\n\treturn \"undetermined\";\n}\n\nasync function peerSupportsReassignScope(\n\tstore: MemoryStore,\n\tdeviceId: string,\n): Promise<ReassignScopeCapability> {\n\treturn peerSupportsSyncRequirements(store, deviceId, {\n\t\tscoped: false,\n\t\treassignScope: true,\n\t});\n}\n\nfunction resolveProjectInviteSelection(\n\tstore: MemoryStore,\n\trequestedIds: string[],\n\tinitiatingDeviceId: string,\n): ShareProjectIntent[] {\n\tif (requestedIds.length === 0) throw new Error(\"project_selection_empty\");\n\tconst requested = new Set(requestedIds);\n\tconst byIdentity = new Map<\n\t\tstring,\n\t\tReturnType<typeof listProjectScopeInventory>[\"projects\"][number]\n\t>();\n\tlet offset = 0;\n\twhile (byIdentity.size < requested.size) {\n\t\tconst page = listProjectScopeInventory(store.db, { limit: 250, offset });\n\t\tfor (const project of page.projects) {\n\t\t\tif (requested.has(project.workspace_identity)) {\n\t\t\t\tbyIdentity.set(project.workspace_identity, project);\n\t\t\t}\n\t\t}\n\t\tif (!page.has_more) break;\n\t\toffset += page.limit;\n\t}\n\treturn requestedIds.map((projectId) => {\n\t\tconst project = byIdentity.get(projectId);\n\t\tif (!project) throw new Error(\"project_selection_unknown\");\n\t\tconst ambiguous = project.guardrail_warnings.some(\n\t\t\t(warning) => warning.code === \"basename_collision_review\" && warning.requires_confirmation,\n\t\t);\n\t\tif (ambiguous) throw new Error(\"project_selection_ambiguous\");\n\t\tif (\n\t\t\tproject.read_only ||\n\t\t\tproject.identity_source === \"unmapped\" ||\n\t\t\tproject.memory_count == null ||\n\t\t\tproject.guardrail_warnings.some((warning) => warning.requires_confirmation)\n\t\t) {\n\t\t\tthrow new Error(\"project_selection_unsupported\");\n\t\t}\n\t\treturn {\n\t\t\tcanonicalIdentity: project.workspace_identity,\n\t\t\tdisplayName: project.display_project,\n\t\t\tidentitySource: project.identity_source,\n\t\t\texistingMemoryCount: countShareableProjectMemories(store.db, {\n\t\t\t\tcanonicalIdentity: project.workspace_identity,\n\t\t\t\tinitiatingDeviceId,\n\t\t\t}),\n\t\t};\n\t});\n}\n\nfunction resolveSharePerson(store: MemoryStore, teammateName: string): SharePersonIntent {\n\tconst matches = store.db\n\t\t.prepare(\n\t\t\t`SELECT actor_id, display_name, status\n\t\t\t FROM actors\n\t\t\t WHERE status IN ('active', 'pending') AND lower(trim(display_name)) = lower(?)\n\t\t\t ORDER BY actor_id`,\n\t\t)\n\t\t.all(teammateName) as Array<{ actor_id: string; display_name: string; status: string }>;\n\tif (matches.length > 1) throw new Error(\"teammate_match_ambiguous\");\n\tconst match = matches[0];\n\tif (match) {\n\t\treturn match.status === \"pending\"\n\t\t\t? { kind: \"pending\", personId: match.actor_id, displayName: match.display_name }\n\t\t\t: { kind: \"existing\", personId: match.actor_id, displayName: match.display_name };\n\t}\n\treturn { kind: \"pending\", displayName: teammateName };\n}\n\nfunction projectInvitePlan(\n\tstore: MemoryStore,\n\tbody: Record<string, unknown>,\n\tcreatedAt: string,\n\tinviteExpiresAt: string,\n): { plan: ShareOperationPlan; config: ReturnType<typeof readCoordinatorSyncConfig> } {\n\tconst teammateName = normalizeTeammateName(String(body.teammate_name));\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tstore.adoptEnsuredDeviceIdentity(localDeviceId);\n\tconst projects = resolveProjectInviteSelection(\n\t\tstore,\n\t\tprojectInviteStringList(body, \"project_ids\"),\n\t\tlocalDeviceId,\n\t);\n\tconst { groupId, config } = projectInviteStatus();\n\treturn {\n\t\tplan: planShareOperation({\n\t\t\tinviterActorId: store.actorId,\n\t\t\tinviterDeviceIds: [localDeviceId],\n\t\t\tperson: resolveSharePerson(store, teammateName),\n\t\t\tprojects,\n\t\t\tcoordinatorGroupId: groupId,\n\t\t\tcreatedAt,\n\t\t\tinviteExpiresAt,\n\t\t}),\n\t\tconfig,\n\t};\n}\n\nfunction projectInvitePreview(plan: ShareOperationPlan) {\n\treturn {\n\t\toperation_id: plan.operationId,\n\t\tteammate: {\n\t\t\tdisplay_name: plan.teammateName,\n\t\t\tmatch: plan.personKind,\n\t\t\t...(plan.personKind === \"existing\" ? { person_id: plan.personId } : {}),\n\t\t},\n\t\tprojects: plan.projects.map((project) => ({\n\t\t\tproject_id: project.canonicalIdentity,\n\t\t\tdisplay_name: project.displayName,\n\t\t\texisting_memory_count: project.existingMemoryCount,\n\t\t})),\n\t\texisting_memory_count: plan.projects.reduce(\n\t\t\t(total, project) => total + project.existingMemoryCount,\n\t\t\t0,\n\t\t),\n\t\tfuture_memories_shared: true as const,\n\t\thistory_policy: plan.historyPolicy,\n\t\treviewed_project_set_digest: plan.reviewedProjectSetDigest,\n\t};\n}\n\ntype CoordinatorProjectInvitePayload = Record<string, unknown> & {\n\toperation_id?: string;\n\tgroup_id?: string;\n\tstate?: string;\n};\n\nasync function coordinatorProjectInvitePayload(operationId: string): Promise<{\n\tgroupId: string;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\tpayload: CoordinatorProjectInvitePayload;\n}> {\n\tconst { groupId, config } = projectInviteStatus();\n\tconst [status, payload] = await requestJson(\n\t\t\"GET\",\n\t\t`${buildBaseUrl(config.syncCoordinatorUrl)}/v1/admin/project-invites/${encodeURIComponent(operationId)}?group_id=${encodeURIComponent(groupId)}`,\n\t\t{\n\t\t\theaders: { \"X-Codemem-Coordinator-Admin\": config.syncCoordinatorAdminSecret },\n\t\t\ttimeoutS: 10,\n\t\t},\n\t).catch((cause: unknown) => {\n\t\tconst error = new Error(\"coordinator_unavailable\", { cause });\n\t\tObject.assign(error, { status: 503 });\n\t\tthrow error;\n\t});\n\tif (status < 200 || status >= 300) {\n\t\tconst error = new Error(String(payload?.error ?? \"operation_read_failed\"));\n\t\tObject.assign(error, { status });\n\t\tthrow error;\n\t}\n\tif (!payload || payload.operation_id !== operationId || payload.group_id !== groupId) {\n\t\tconst error = new Error(\"operation_scope_mismatch\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\treturn { groupId, config, payload: payload as CoordinatorProjectInvitePayload };\n}\n\nasync function reconcileProjectInviteAcceptance(\n\tstore: MemoryStore,\n\toperationId: string,\n): Promise<{ accepted: boolean; payload: CoordinatorProjectInvitePayload }> {\n\tconst owner = store.db\n\t\t.prepare(\"SELECT inviter_actor_id FROM share_operations WHERE operation_id = ?\")\n\t\t.pluck()\n\t\t.get(operationId) as string | undefined;\n\tif (!owner) throw new Error(\"operation_not_found\");\n\tif (owner !== store.actorId) throw new Error(\"operation_scope_mismatch\");\n\tensureLocalActorRecord(store);\n\tconst { groupId, payload } = await coordinatorProjectInvitePayload(operationId);\n\tif (payload.state === \"waiting_for_acceptance\") return { accepted: false, payload };\n\tif (payload.state !== \"accepted\") {\n\t\tconst error = new Error(\"operation_state_invalid\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\tconst required = [\n\t\t\"reviewed_project_set_digest\",\n\t\t\"recipient_actor_id\",\n\t\t\"recipient_display_name\",\n\t\t\"recipient_device_id\",\n\t\t\"recipient_device_display_name\",\n\t\t\"recipient_public_key\",\n\t\t\"recipient_fingerprint\",\n\t\t\"consumed_at\",\n\t\t\"trust_state\",\n\t] as const;\n\tif (required.some((key) => typeof payload[key] !== \"string\" || !String(payload[key]).trim())) {\n\t\tconst error = new Error(\"operation_acceptance_invalid\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\tconst trustState = String(payload.trust_state);\n\tconst bootstrapGrantId =\n\t\ttypeof payload.bootstrap_grant_id === \"string\" && payload.bootstrap_grant_id.trim()\n\t\t\t? payload.bootstrap_grant_id\n\t\t\t: null;\n\tif (\n\t\t(trustState !== \"pending_inviter_device\" && trustState !== \"bootstrap_grant_created\") ||\n\t\t(trustState === \"bootstrap_grant_created\") !== Boolean(bootstrapGrantId)\n\t) {\n\t\tconst error = new Error(\"operation_trust_state_invalid\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\tconst projects = parseAcceptedProjectIntent(payload.projects);\n\treconcileShareOperationAcceptance(store.db, {\n\t\toperationId,\n\t\tlocalInviterActorId: store.actorId,\n\t\tcoordinatorGroupId: groupId,\n\t\treviewedProjectSetDigest: String(payload.reviewed_project_set_digest),\n\t\trecipientActorId: String(payload.recipient_actor_id),\n\t\trecipientDisplayName: String(payload.recipient_display_name),\n\t\trecipientDeviceId: String(payload.recipient_device_id),\n\t\trecipientDeviceDisplayName: String(payload.recipient_device_display_name),\n\t\trecipientPublicKey: String(payload.recipient_public_key),\n\t\trecipientFingerprint: String(payload.recipient_fingerprint),\n\t\tconsumedAt: String(payload.consumed_at),\n\t\ttrustState,\n\t\tbootstrapGrantId,\n\t\tprojects,\n\t});\n\treturn { accepted: true, payload };\n}\n\ninterface ShareOperationReadRow {\n\toperation_id: string;\n\tstate: string;\n\tperson_id: string;\n\tteammate_name: string;\n\trecipient_actor_id: string | null;\n\trecipient_display_name: string | null;\n\trecipient_device_id: string | null;\n\trecipient_device_display_name: string | null;\n\tinvite_expires_at: string;\n\tacceptance_consumed_at: string | null;\n\tcreated_at: string;\n\tupdated_at: string;\n\tactor_display_name: string | null;\n\tpeer_display_name: string | null;\n\tdevice_last_seen_at: string | null;\n\tdevice_last_reached_at: string | null;\n}\n\nasync function shareOperationReadModels(\n\tstore: MemoryStore,\n\toperationId?: string,\n\tincludeInviteLinks = true,\n) {\n\tconst rows = store.db\n\t\t.prepare(`SELECT o.operation_id, o.state, o.person_id, o.teammate_name,\n\t\t\to.recipient_actor_id, o.recipient_display_name, o.recipient_device_id,\n\t\t\to.recipient_device_display_name, o.invite_expires_at, o.acceptance_consumed_at,\n\t\t\to.created_at, o.updated_at, a.display_name AS actor_display_name,\n\t\t\tp.name AS peer_display_name, p.last_seen_at AS device_last_seen_at,\n\t\t\tp.last_sync_at AS device_last_reached_at\n\t\t FROM share_operations o\n\t\t LEFT JOIN actors a ON a.actor_id = o.person_id\n\t\t LEFT JOIN sync_peers p ON p.peer_device_id = o.recipient_device_id\n\t\t WHERE o.inviter_actor_id = ? AND (? IS NULL OR o.operation_id = ?)\n\t\t ORDER BY o.created_at DESC, o.operation_id`)\n\t\t.all(store.actorId, operationId ?? null, operationId ?? null) as ShareOperationReadRow[];\n\tconst now = new Date().toISOString();\n\treturn Promise.all(\n\t\trows.map(async (row) => {\n\t\t\tconst projects = store.db\n\t\t\t\t.prepare(`SELECT canonical_project_identity AS project_id, display_name, existing_memory_count\n\t\t\t\t FROM share_operation_projects WHERE operation_id = ? ORDER BY ordinal`)\n\t\t\t\t.all(row.operation_id) as Array<{\n\t\t\t\tproject_id: string;\n\t\t\t\tdisplay_name: string;\n\t\t\t\texisting_memory_count: number;\n\t\t\t}>;\n\t\t\tconst steps = (\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(`SELECT step_key, status, attempt_count, started_at, last_attempt_at,\n\t\t\t\t\t\tsafe_error_code, updated_at FROM share_operation_steps WHERE operation_id = ?`)\n\t\t\t\t\t.all(row.operation_id) as Array<{\n\t\t\t\t\tstep_key: string;\n\t\t\t\t\tstatus: ShareOperationLifecycleStepInput[\"status\"];\n\t\t\t\t\tattempt_count: number;\n\t\t\t\t\tstarted_at: string | null;\n\t\t\t\t\tlast_attempt_at: string | null;\n\t\t\t\t\tsafe_error_code: string | null;\n\t\t\t\t\tupdated_at: string;\n\t\t\t\t}>\n\t\t\t).map(\n\t\t\t\t(step): ShareOperationLifecycleStepInput => ({\n\t\t\t\t\tattemptCount: step.attempt_count,\n\t\t\t\t\tlastAttemptAt: step.last_attempt_at,\n\t\t\t\t\tsafeErrorCode: step.safe_error_code,\n\t\t\t\t\tstartedAt: step.started_at,\n\t\t\t\t\tstatus: step.status,\n\t\t\t\t\tstepKey: step.step_key,\n\t\t\t\t\tupdatedAt: step.updated_at,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tlet inviteLink: string | null = null;\n\t\t\tlet projectedState = row.state;\n\t\t\tif (includeInviteLinks && row.state === \"waiting_for_acceptance\") {\n\t\t\t\ttry {\n\t\t\t\t\tconst remote = await coordinatorProjectInvitePayload(row.operation_id);\n\t\t\t\t\tif (remote.payload.state === \"accepted\") projectedState = \"accepted\";\n\t\t\t\t\tinviteLink =\n\t\t\t\t\t\ttypeof remote.payload.invite_link === \"string\" && remote.payload.invite_link.trim()\n\t\t\t\t\t\t\t? remote.payload.invite_link\n\t\t\t\t\t\t\t: null;\n\t\t\t\t} catch {\n\t\t\t\t\t// A read-model refresh remains useful when the coordinator is temporarily unavailable.\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst personId = row.recipient_actor_id || row.person_id;\n\t\t\tconst personName = row.recipient_display_name || row.actor_display_name || row.teammate_name;\n\t\t\tconst deviceName = row.recipient_device_display_name || row.peer_display_name;\n\t\t\tconst lifecycle = projectShareLifecycle({\n\t\t\t\tdeviceLastSeenAt: row.device_last_seen_at,\n\t\t\t\tdeviceLastReachedAt: row.device_last_reached_at,\n\t\t\t\tdeviceName,\n\t\t\t\tinviteLink,\n\t\t\t\tnow,\n\t\t\t\tpersonName,\n\t\t\t\tstate: projectedState,\n\t\t\t\tsteps,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\toperation_id: row.operation_id,\n\t\t\t\tperson: { actor_id: personId, display_name: personName },\n\t\t\t\tdevices:\n\t\t\t\t\trow.recipient_device_id && deviceName\n\t\t\t\t\t\t? [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\tdevice_id: row.recipient_device_id,\n\t\t\t\t\t\t\t\t\tdisplay_name: deviceName,\n\t\t\t\t\t\t\t\t\tlast_seen_at: row.device_last_seen_at,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t: [],\n\t\t\t\tprojects,\n\t\t\t\tproject_count: projects.length,\n\t\t\t\tlifecycle: {\n\t\t\t\t\tstate: lifecycle.lifecycle,\n\t\t\t\t\tlabel: lifecycle.label,\n\t\t\t\t\texplanation: lifecycle.explanation,\n\t\t\t\t\tprimary_action:\n\t\t\t\t\t\tlifecycle.primaryAction?.kind === \"copy_invite\"\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tkind: \"copy_invite\",\n\t\t\t\t\t\t\t\t\tlabel: lifecycle.primaryAction.label,\n\t\t\t\t\t\t\t\t\tinvite_link: lifecycle.primaryAction.inviteLink,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: !includeInviteLinks && lifecycle.lifecycle === \"waiting_for_acceptance\"\n\t\t\t\t\t\t\t\t? { kind: \"copy_invite\", label: \"Copy invite\" }\n\t\t\t\t\t\t\t\t: lifecycle.primaryAction,\n\t\t\t\t},\n\t\t\t\ttimestamps: {\n\t\t\t\t\tcreated_at: row.created_at,\n\t\t\t\t\tupdated_at: row.updated_at,\n\t\t\t\t\taccepted_at: row.acceptance_consumed_at,\n\t\t\t\t\tinvite_expires_at: row.invite_expires_at,\n\t\t\t\t},\n\t\t\t};\n\t\t}),\n\t);\n}\n\nasync function executeProjectShareProvisioning(store: MemoryStore, operationId: string) {\n\tconst { groupId, config } = projectInviteStatus();\n\tconst coordinatorId = config.syncCoordinatorUrl || null;\n\tif (!coordinatorId) throw new Error(\"coordinator_not_configured\");\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\treturn executeShareProvisioning(\n\t\tstore.db,\n\t\t{ operationId, initiatingDeviceId: localDeviceId },\n\t\t{\n\t\t\tcreateOrGetBoundary: async (project, expectedGroupId) => {\n\t\t\t\tif (expectedGroupId !== groupId) throw new Error(\"operation_scope_mismatch\");\n\t\t\t\tconst readExisting = async () =>\n\t\t\t\t\t(\n\t\t\t\t\t\tawait coordinatorListScopesAction({\n\t\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\t\tincludeInactive: true,\n\t\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t\t\t})\n\t\t\t\t\t).find((scope) => scope.scope_id === project.boundaryId) ?? null;\n\t\t\t\tconst existing = await readExisting();\n\t\t\t\tif (existing) return existing;\n\t\t\t\ttry {\n\t\t\t\t\treturn await coordinatorCreateScopeAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tscopeId: project.boundaryId,\n\t\t\t\t\t\tlabel: project.displayName,\n\t\t\t\t\t\tkind: \"managed_project\",\n\t\t\t\t\t\tauthorityType: \"coordinator\",\n\t\t\t\t\t\tcoordinatorId,\n\t\t\t\t\t\tmembershipEpoch: 1,\n\t\t\t\t\t\tstatus: \"active\",\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconst reread = await readExisting();\n\t\t\t\t\tif (reread) return reread;\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t},\n\t\t\tgrantMembership: ({ effectId, groupId: expectedGroupId, scopeId, deviceId, role }) => {\n\t\t\t\tif (expectedGroupId !== groupId) throw new Error(\"operation_scope_mismatch\");\n\t\t\t\treturn coordinatorGrantScopeMembershipAction({\n\t\t\t\t\teffectId,\n\t\t\t\t\tgroupId,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tdeviceId,\n\t\t\t\t\trole,\n\t\t\t\t\tmembershipEpoch: 1,\n\t\t\t\t\tcoordinatorId,\n\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t});\n\t\t\t},\n\t\t\tsupportsReassignScope: (deviceId) => peerSupportsReassignScope(store, deviceId),\n\t\t\trefreshAuthorization: async (expectedGroupId) => {\n\t\t\t\tif (expectedGroupId !== groupId) throw new Error(\"operation_scope_mismatch\");\n\t\t\t\tconst refreshed = await refreshConfiguredScopeMembershipCache(store.db, config, {\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t});\n\t\t\t\tconst group = refreshed.groups.find((item) => item.groupId === groupId);\n\t\t\t\tif (group?.status !== \"refreshed\") throw new Error(\"authorization_refresh_failed\");\n\t\t\t},\n\t\t\trunInitialSync: (recipientDeviceId) =>\n\t\t\t\trunSyncPass(store.db, recipientDeviceId, {\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\tscanner: store.scanner,\n\t\t\t\t\trefreshAuthorization: true,\n\t\t\t\t}),\n\t\t},\n\t);\n}\n\nexport interface AdvanceProjectShareOperationResult {\n\tadvanced: boolean;\n\tstate: \"active\" | \"waiting_for_acceptance\" | \"cancelled\";\n}\n\nexport async function advanceProjectShareOperation(\n\tstore: MemoryStore,\n\toperationId: string,\n): Promise<AdvanceProjectShareOperationResult> {\n\tconst operation = store.db\n\t\t.prepare(\n\t\t\t\"SELECT state, inviter_actor_id, recipient_device_id FROM share_operations WHERE operation_id = ?\",\n\t\t)\n\t\t.get(operationId) as\n\t\t| { state: string; inviter_actor_id: string; recipient_device_id: string | null }\n\t\t| undefined;\n\tif (!operation) throw new Error(\"operation_not_found\");\n\tif (operation.inviter_actor_id !== store.actorId) throw new Error(\"operation_scope_mismatch\");\n\tif (operation.state === \"cancelled\") {\n\t\t// Already superseded (possibly earlier in the same maintenance batch);\n\t\t// provisioning a cancelled operation would only produce a misleading\n\t\t// operation_not_accepted failure.\n\t\treturn { advanced: false, state: \"cancelled\" };\n\t}\n\tif (!operation.recipient_device_id) {\n\t\tconst reconciliation = await reconcileProjectInviteAcceptance(store, operationId);\n\t\tif (!reconciliation.accepted) {\n\t\t\treturn { advanced: false, state: \"waiting_for_acceptance\" };\n\t\t}\n\t}\n\tconst plan = await executeProjectShareProvisioning(store, operationId);\n\tif (plan.superseded) {\n\t\t// A duplicate operation won the race and cancelled this one mid-flight;\n\t\t// reporting it as active would contradict the stored state.\n\t\treturn { advanced: false, state: \"cancelled\" };\n\t}\n\treturn { advanced: true, state: \"active\" };\n}\n\nexport interface AdvancePendingProjectSharesResult {\n\tprocessed: number;\n\tadvanced: number;\n\twaiting: number;\n\tattention: number;\n\tfailed: number;\n\titems: Array<{\n\t\toperationId: string;\n\t\toutcome:\n\t\t\t| \"advanced\"\n\t\t\t| \"waiting_for_acceptance\"\n\t\t\t| \"waiting_for_device\"\n\t\t\t| \"retry_scheduled\"\n\t\t\t| \"needs_attention\"\n\t\t\t| \"superseded\"\n\t\t\t| \"failed\";\n\t\terror?: string;\n\t}>;\n}\n\nconst AUTOMATIC_SHARE_OPERATION_STATES = [\n\t\"waiting_for_acceptance\",\n\t\"accepted\",\n\t\"provisioning\",\n\t\"initial_sync\",\n\t\"waiting_for_device\",\n] as const;\n\nconst AUTOMATIC_WAITING_ACCEPTANCE_RETRY_COOLDOWN_MS = 30 * 1000;\nconst AUTOMATIC_WAITING_DEVICE_RETRY_COOLDOWN_MS = 5 * 60 * 1000;\nconst TERMINAL_SHARE_MAINTENANCE_ERRORS = new Set([\n\t\"coordinator_not_configured\",\n\t\"team_sharing_not_configured\",\n\t\"team_selection_ambiguous\",\n\t\"initiating_device_not_reviewed\",\n\t\"inviter_project_access_ambiguous\",\n\t\"managed_boundary_plan_missing\",\n\t\"operation_device_binding_missing\",\n\t\"operation_intent_invalid\",\n\t\"provisioning_membership_plan_invalid\",\n\t\"device_binding_conflict\",\n\t\"intent_conflict\",\n\t\"inviter_identity_conflict\",\n]);\nconst PROJECT_INVITE_OWNER_CONFLICT_ERRORS = new Set([\n\t\"operation_scope_mismatch\",\n\t\"operation_state_invalid\",\n\t\"operation_acceptance_invalid\",\n\t\"operation_trust_state_invalid\",\n\t\"operation_intent_invalid\",\n\t\"operation_intent_mismatch\",\n\t\"recipient_fingerprint_mismatch\",\n\t\"recipient_device_identity_conflict\",\n\t\"recipient_actor_conflict\",\n\t\"pending_person_identity_conflict\",\n\t\"device_binding_conflict\",\n\t\"intent_conflict\",\n\t\"inviter_identity_conflict\",\n]);\nconst TERMINAL_RECONCILIATION_ERRORS = new Set([\n\t\"coordinator_not_configured\",\n\t\"team_sharing_not_configured\",\n\t\"team_selection_ambiguous\",\n\t\"operation_not_found\",\n\t...PROJECT_INVITE_OWNER_CONFLICT_ERRORS,\n]);\n\nfunction errorStatus(error: unknown): number | null {\n\tconst value = error && typeof error === \"object\" ? (error as { status?: unknown }).status : null;\n\treturn typeof value === \"number\" && Number.isInteger(value) && value >= 400 && value <= 599\n\t\t? value\n\t\t: null;\n}\n\nfunction projectInviteOwnerErrorResponse(\n\terror: unknown,\n\tfallback: { code: \"operation_read_failed\" | \"operation_reconcile_failed\"; status: 400 | 409 },\n): {\n\tcode: string;\n\tstatus: 400 | 404 | 409 | 502 | 503;\n} {\n\tconst message = error instanceof Error ? error.message : \"\";\n\tconst status = errorStatus(error);\n\tif (message === \"operation_not_found\" && (status == null || status === 404)) {\n\t\treturn { code: message, status: 404 };\n\t}\n\tif (PROJECT_INVITE_OWNER_CONFLICT_ERRORS.has(message) && (status == null || status === 409)) {\n\t\treturn { code: message, status: 409 };\n\t}\n\tif (status != null && status >= 500 && message !== \"coordinator_unavailable\") {\n\t\treturn { code: \"coordinator_upstream_failed\", status: 502 };\n\t}\n\tif (message === \"coordinator_unavailable\" || status === 408 || status === 429 || status === 503) {\n\t\treturn { code: \"coordinator_unavailable\", status: 503 };\n\t}\n\treturn fallback;\n}\n\nfunction isRetryableReconciliationError(error: unknown): boolean {\n\tconst message = error instanceof Error ? error.message : String(error);\n\tif (TERMINAL_RECONCILIATION_ERRORS.has(message)) return false;\n\tconst status = errorStatus(error);\n\treturn status == null || status === 408 || status === 429 || status >= 500;\n}\n\nfunction safeReconciliationErrorCode(error: unknown): string {\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn TERMINAL_RECONCILIATION_ERRORS.has(message) ? message : \"operation_read_failed\";\n}\n\nfunction recordInviteReconciliationFailure(\n\tstore: MemoryStore,\n\toperationId: string,\n\terror: unknown,\n\tnow: string,\n): \"retry_scheduled\" | \"needs_attention\" {\n\tconst safeErrorCode = safeReconciliationErrorCode(error);\n\tconst retryable = isRetryableReconciliationError(error);\n\tstore.db\n\t\t.prepare(`UPDATE share_operation_steps SET\n\t\t\tstatus = CASE WHEN ? = 1 THEN 'pending' ELSE 'failed' END,\n\t\t\tattempt_count = attempt_count + 1, last_attempt_at = ?, safe_error_code = ?, updated_at = ?\n\t\t\tWHERE operation_id = ? AND step_key = 'invite_consumption'`)\n\t\t.run(retryable ? 1 : 0, now, safeErrorCode, now, operationId);\n\tconst outcome = retryable ? \"retry_scheduled\" : \"needs_attention\";\n\tstore.db\n\t\t.prepare(\"UPDATE share_operations SET state = ?, updated_at = ? WHERE operation_id = ?\")\n\t\t.run(\n\t\t\toutcome === \"needs_attention\" ? \"needs_attention\" : \"waiting_for_acceptance\",\n\t\t\tnow,\n\t\t\toperationId,\n\t\t);\n\treturn outcome;\n}\n\nexport async function advancePendingProjectShares(\n\tstore: MemoryStore,\n\toptions: {\n\t\tlimit?: number;\n\t\tnow?: Date;\n\t\tadvanceOperation?: (\n\t\t\tstore: MemoryStore,\n\t\t\toperationId: string,\n\t\t) => Promise<AdvanceProjectShareOperationResult>;\n\t} = {},\n): Promise<AdvancePendingProjectSharesResult> {\n\tconst limit = Math.max(1, Math.min(Math.trunc(options.limit ?? 3), 10));\n\tconst placeholders = AUTOMATIC_SHARE_OPERATION_STATES.map(() => \"?\").join(\", \");\n\tconst maintenanceNow = options.now ?? new Date();\n\tconst waitingAcceptanceRetryBefore = new Date(\n\t\tmaintenanceNow.getTime() - AUTOMATIC_WAITING_ACCEPTANCE_RETRY_COOLDOWN_MS,\n\t).toISOString();\n\tconst waitingRetryBefore = new Date(\n\t\tmaintenanceNow.getTime() - AUTOMATIC_WAITING_DEVICE_RETRY_COOLDOWN_MS,\n\t).toISOString();\n\t// A later failed attempt supersedes older reachability evidence and keeps the cooldown in force.\n\tconst rows = store.db\n\t\t.prepare(`SELECT operation.operation_id FROM share_operations AS operation\n\t\t WHERE operation.inviter_actor_id = ?\n\t\t AND operation.state IN (${placeholders})\n\t\t AND (operation.state <> 'waiting_for_acceptance' OR operation.updated_at <= ?)\n\t\t AND (\n\t\t\toperation.state <> 'waiting_for_device'\n\t\t\tOR operation.updated_at <= ?\n\t\t\tOR (\n\t\t\t\tNOT EXISTS (\n\t\t\t\t\tSELECT 1 FROM share_operation_steps AS step\n\t\t\t\t\tWHERE step.operation_id = operation.operation_id\n\t\t\t\t\tAND step.step_key = 'capability_preflight'\n\t\t\t\t\tAND step.status <> 'completed'\n\t\t\t\t\tAND (\n\t\t\t\t\t\tstep.status = 'running'\n\t\t\t\t\t\tOR step.safe_error_code IN (\n\t\t\t\t\t\t\t'waiting_for_device', 'device_offline', 'recipient_offline'\n\t\t\t\t\t\t)\n\t\t\t\t\t)\n\t\t\t\t)\n\t\t\t\tAND EXISTS (\n\t\t\t\t\tSELECT 1 FROM sync_attempts AS attempt\n\t\t\t\t\tWHERE attempt.id = (\n\t\t\t\t\t\tSELECT latest.id FROM sync_attempts AS latest\n\t\t\t\t\t\tWHERE latest.peer_device_id = operation.recipient_device_id\n\t\t\t\t\t\tORDER BY latest.started_at DESC, latest.id DESC\n\t\t\t\t\t\tLIMIT 1\n\t\t\t\t\t)\n\t\t\t\t\tAND attempt.ok = 1\n\t\t\t\t\tAND julianday(COALESCE(attempt.finished_at, attempt.started_at)) >\n\t\t\t\t\t\tjulianday(operation.updated_at)\n\t\t\t\t)\n\t\t\t)\n\t\t )\n\t\t ORDER BY CASE WHEN operation.state IN ('accepted', 'provisioning', 'initial_sync') THEN 0 ELSE 1 END,\n\t\t\tCASE WHEN operation.state IN ('waiting_for_acceptance', 'waiting_for_device')\n\t\t\t\tTHEN operation.updated_at ELSE operation.created_at END ASC,\n\t\t\toperation.created_at ASC, operation.operation_id ASC\n\t\t LIMIT ?`)\n\t\t.all(\n\t\t\tstore.actorId,\n\t\t\t...AUTOMATIC_SHARE_OPERATION_STATES,\n\t\t\twaitingAcceptanceRetryBefore,\n\t\t\twaitingRetryBefore,\n\t\t\tlimit,\n\t\t) as Array<{\n\t\toperation_id: string;\n\t}>;\n\tconst advanceOperation = options.advanceOperation ?? advanceProjectShareOperation;\n\tconst result: AdvancePendingProjectSharesResult = {\n\t\tprocessed: 0,\n\t\tadvanced: 0,\n\t\twaiting: 0,\n\t\tattention: 0,\n\t\tfailed: 0,\n\t\titems: [],\n\t};\n\tfor (const row of rows) {\n\t\tresult.processed += 1;\n\t\ttry {\n\t\t\tconst advanced = await advanceOperation(store, row.operation_id);\n\t\t\tif (!advanced.advanced) {\n\t\t\t\tif (advanced.state === \"cancelled\") {\n\t\t\t\t\t// Superseded by a duplicate that reached active first; terminal.\n\t\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"superseded\" });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(\"UPDATE share_operations SET updated_at = ? WHERE operation_id = ?\")\n\t\t\t\t\t.run(maintenanceNow.toISOString(), row.operation_id);\n\t\t\t\tresult.waiting += 1;\n\t\t\t\tresult.items.push({\n\t\t\t\t\toperationId: row.operation_id,\n\t\t\t\t\toutcome: \"waiting_for_acceptance\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tresult.advanced += 1;\n\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"advanced\" });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tconst state = store.db\n\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t.pluck()\n\t\t\t\t.get(row.operation_id);\n\t\t\tif (state === \"cancelled\") {\n\t\t\t\t// Superseded by a duplicate while a step was in flight; the stored\n\t\t\t\t// state is terminal and benign, so the step's rejection must not be\n\t\t\t\t// reported as a failure or push the daemon into an error phase.\n\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"superseded\" });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (message === \"waiting_for_device\" || state === \"waiting_for_device\") {\n\t\t\t\tresult.waiting += 1;\n\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"waiting_for_device\" });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (state === \"needs_attention\") {\n\t\t\t\tresult.attention += 1;\n\t\t\t\tresult.items.push({\n\t\t\t\t\toperationId: row.operation_id,\n\t\t\t\t\toutcome: \"needs_attention\",\n\t\t\t\t\terror: message,\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (state === \"waiting_for_acceptance\") {\n\t\t\t\tconst outcome = recordInviteReconciliationFailure(\n\t\t\t\t\tstore,\n\t\t\t\t\trow.operation_id,\n\t\t\t\t\terror,\n\t\t\t\t\tmaintenanceNow.toISOString(),\n\t\t\t\t);\n\t\t\t\tif (outcome === \"needs_attention\") result.attention += 1;\n\t\t\t\telse result.waiting += 1;\n\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome, error: message });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (TERMINAL_SHARE_MAINTENANCE_ERRORS.has(message)) {\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"UPDATE share_operations SET state = 'needs_attention', updated_at = ? WHERE operation_id = ?\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(maintenanceNow.toISOString(), row.operation_id);\n\t\t\t\tresult.attention += 1;\n\t\t\t\tresult.items.push({\n\t\t\t\t\toperationId: row.operation_id,\n\t\t\t\t\toutcome: \"needs_attention\",\n\t\t\t\t\terror: message,\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tresult.failed += 1;\n\t\t\tresult.items.push({\n\t\t\t\toperationId: row.operation_id,\n\t\t\t\toutcome: \"failed\",\n\t\t\t\terror: message,\n\t\t\t});\n\t\t}\n\t}\n\treturn result;\n}\n\nexport interface ReconcileConfiguredCoordinatorEnrollmentResult {\n\tskipped: boolean;\n\tgroupsProcessed: number;\n\tfailedGroups: number;\n\tfailures: CoordinatorEnrollmentMaintenanceFailure[];\n\tdevicesAdded: number;\n\tmembershipsAdded: number;\n\tidentitiesAdded: number;\n\tunchanged: number;\n\tissues: number;\n}\n\nexport type CoordinatorEnrollmentMaintenanceStage =\n\t| \"list_devices\"\n\t| \"list_consumed_team_invites\"\n\t| \"reconcile_snapshot\";\n\nexport interface CoordinatorEnrollmentMaintenanceFailure {\n\tgroupId: string;\n\tstage: CoordinatorEnrollmentMaintenanceStage;\n\tcode: string;\n}\n\nfunction coordinatorEnrollmentFailureCode(error: unknown): string {\n\tconst message = (error instanceof Error ? error.message : String(error)).trim();\n\tconst httpStatus = message.match(/\\((\\d{3})(?::|\\))/u)?.[1];\n\tif (httpStatus) return `http_${httpStatus}`;\n\tif (\n\t\tnew Set([\n\t\t\t\"coordinator_consumed_team_invite_invalid\",\n\t\t\t\"coordinator_device_list_malformed\",\n\t\t\t\"coordinator_group_id_invalid\",\n\t\t\t\"coordinator_id_invalid\",\n\t\t\t\"coordinator_invite_group_mismatch\",\n\t\t\t\"coordinator_invite_list_malformed\",\n\t\t\t\"reconciliation_time_invalid\",\n\t\t]).has(message)\n\t) {\n\t\treturn message;\n\t}\n\tif (/timeout|timed out|abort/iu.test(message)) return \"request_timeout\";\n\tif (/fetch failed|network|econn|enotfound/iu.test(message)) return \"network_error\";\n\treturn \"unexpected_error\";\n}\n\nfunction coordinatorEnrollmentFailure(\n\tgroupId: string,\n\tstage: CoordinatorEnrollmentMaintenanceStage,\n\terror: unknown,\n): CoordinatorEnrollmentMaintenanceFailure {\n\tconst safeGroupId = /^[A-Za-z0-9._-]{1,64}$/u.test(groupId)\n\t\t? groupId\n\t\t: `group_${createHash(\"sha256\").update(groupId).digest(\"hex\").slice(0, 12)}`;\n\treturn { groupId: safeGroupId, stage, code: coordinatorEnrollmentFailureCode(error) };\n}\n\nexport async function reconcileConfiguredCoordinatorEnrollment(\n\tstore: MemoryStore,\n\toptions: {\n\t\tconfig?: ReturnType<typeof readCoordinatorSyncConfig>;\n\t\tlistDevices?: (input: {\n\t\t\tgroupId: string;\n\t\t\tremoteUrl: string;\n\t\t\tadminSecret: string;\n\t\t}) => Promise<CoordinatorEnrollment[]>;\n\t\tlistConsumedTeamInvites?: (input: {\n\t\t\tgroupId: string;\n\t\t\tremoteUrl: string;\n\t\t\tadminSecret: string;\n\t\t}) => Promise<CoordinatorConsumedTeamInvite[]>;\n\t\treconcileSnapshot?: (\n\t\t\tinput: Parameters<typeof reconcileCoordinatorEnrollmentSnapshot>[1],\n\t\t) => CoordinatorEnrollmentReconcileResult | Promise<CoordinatorEnrollmentReconcileResult>;\n\t} = {},\n): Promise<ReconcileConfiguredCoordinatorEnrollmentResult> {\n\tconst config = options.config ?? readCoordinatorSyncConfig();\n\tconst remoteUrl = config.syncCoordinatorUrl.trim();\n\tconst adminSecret = config.syncCoordinatorAdminSecret.trim();\n\tif (!remoteUrl || !adminSecret || config.syncCoordinatorGroups.length === 0) {\n\t\treturn {\n\t\t\tskipped: true,\n\t\t\tgroupsProcessed: 0,\n\t\t\tfailedGroups: 0,\n\t\t\tfailures: [],\n\t\t\tdevicesAdded: 0,\n\t\t\tmembershipsAdded: 0,\n\t\t\tidentitiesAdded: 0,\n\t\t\tunchanged: 0,\n\t\t\tissues: 0,\n\t\t};\n\t}\n\tconst listDevices = options.listDevices ?? coordinatorListDevicesAction;\n\tconst listConsumedTeamInvites =\n\t\toptions.listConsumedTeamInvites ?? coordinatorListConsumedTeamInvitesAction;\n\tconst reconcileSnapshot =\n\t\toptions.reconcileSnapshot ??\n\t\t((input) => reconcileCoordinatorEnrollmentSnapshot(store.db, input));\n\tconst total: ReconcileConfiguredCoordinatorEnrollmentResult = {\n\t\tskipped: false,\n\t\tgroupsProcessed: 0,\n\t\tfailedGroups: 0,\n\t\tfailures: [],\n\t\tdevicesAdded: 0,\n\t\tmembershipsAdded: 0,\n\t\tidentitiesAdded: 0,\n\t\tunchanged: 0,\n\t\tissues: 0,\n\t};\n\tfor (const groupId of config.syncCoordinatorGroups) {\n\t\tconst [enrollmentsResult, consumedTeamInvitesResult] = await Promise.allSettled([\n\t\t\tlistDevices({ groupId, remoteUrl, adminSecret }),\n\t\t\tlistConsumedTeamInvites({ groupId, remoteUrl, adminSecret }),\n\t\t]);\n\t\tif (enrollmentsResult.status === \"rejected\") {\n\t\t\ttotal.failures.push(\n\t\t\t\tcoordinatorEnrollmentFailure(groupId, \"list_devices\", enrollmentsResult.reason),\n\t\t\t);\n\t\t}\n\t\tif (consumedTeamInvitesResult.status === \"rejected\") {\n\t\t\ttotal.failures.push(\n\t\t\t\tcoordinatorEnrollmentFailure(\n\t\t\t\t\tgroupId,\n\t\t\t\t\t\"list_consumed_team_invites\",\n\t\t\t\t\tconsumedTeamInvitesResult.reason,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tif (\n\t\t\tenrollmentsResult.status === \"rejected\" ||\n\t\t\tconsumedTeamInvitesResult.status === \"rejected\"\n\t\t) {\n\t\t\ttotal.failedGroups += 1;\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst result = await reconcileSnapshot({\n\t\t\t\tcoordinatorId: buildBaseUrl(remoteUrl),\n\t\t\t\tgroupId,\n\t\t\t\tenrollments: enrollmentsResult.value,\n\t\t\t\tconsumedTeamInvites: consumedTeamInvitesResult.value,\n\t\t\t\tlocalDeviceId: store.deviceId,\n\t\t\t});\n\t\t\ttotal.groupsProcessed += 1;\n\t\t\ttotal.devicesAdded += result.devicesAdded;\n\t\t\ttotal.membershipsAdded += result.membershipsAdded;\n\t\t\ttotal.identitiesAdded += result.identitiesAdded;\n\t\t\ttotal.unchanged += result.unchanged;\n\t\t\ttotal.issues += result.issues.length;\n\t\t} catch (error) {\n\t\t\ttotal.failedGroups += 1;\n\t\t\ttotal.failures.push(coordinatorEnrollmentFailure(groupId, \"reconcile_snapshot\", error));\n\t\t}\n\t}\n\treturn total;\n}\n\nconst RECIPIENT_POLICY_MAINTENANCE_MAX_LIMIT = 10;\nconst RECIPIENT_POLICY_MAINTENANCE_DEFAULT_LIMIT = 3;\nconst RECIPIENT_POLICY_MAINTENANCE_BACKOFF_MS = 60_000;\nconst RECIPIENT_POLICY_WAITING_ERRORS = new Set([\n\t\"recipient_policy_capability_undetermined\",\n\t\"recipient_policy_parity_incomplete\",\n\t\"recipient_policy_snapshot_not_fresh\",\n]);\n\ninterface RecipientPolicyCoordinatorBoundary {\n\tcoordinatorId: string;\n\tgroupId: string;\n\tmembershipEpoch: number;\n}\n\nfunction recipientPolicyCoordinatorBoundary(\n\tstore: MemoryStore,\n\tscopeId: string,\n): RecipientPolicyCoordinatorBoundary {\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t`SELECT coordinator_id, group_id, membership_epoch FROM replication_scopes\n\t\t\t WHERE scope_id = ? AND kind = 'managed_project' AND authority_type = 'coordinator'\n\t\t\t AND status = 'active'`,\n\t\t)\n\t\t.get(scopeId) as\n\t\t| {\n\t\t\t\tcoordinator_id: string | null;\n\t\t\t\tgroup_id: string | null;\n\t\t\t\tmembership_epoch: number;\n\t\t }\n\t\t| undefined;\n\tconst coordinatorId = String(row?.coordinator_id ?? \"\").trim();\n\tconst groupId = String(row?.group_id ?? \"\").trim();\n\tconst membershipEpoch = Number(row?.membership_epoch);\n\tif (!coordinatorId || !groupId || !Number.isSafeInteger(membershipEpoch) || membershipEpoch < 0) {\n\t\tthrow new Error(\"recipient_policy_active_managed_scope_required\");\n\t}\n\treturn { coordinatorId, groupId, membershipEpoch };\n}\n\nfunction recipientPolicySnapshotFingerprint(\n\tscopeId: string,\n\tscopeMembershipEpoch: number,\n\tmemberships: Array<{\n\t\tdeviceId: string;\n\t\tstatus: \"active\" | \"revoked\";\n\t\tmembershipEpoch: number;\n\t}>,\n): string {\n\tconst canonical = memberships\n\t\t.toSorted(\n\t\t\t(left, right) =>\n\t\t\t\tleft.deviceId.localeCompare(right.deviceId) ||\n\t\t\t\tleft.status.localeCompare(right.status) ||\n\t\t\t\tleft.membershipEpoch - right.membershipEpoch,\n\t\t)\n\t\t.map(\n\t\t\t(membership) =>\n\t\t\t\t`${membership.deviceId}\\u0000${membership.status}\\u0000${membership.membershipEpoch}`,\n\t\t)\n\t\t.join(\"\\u0001\");\n\treturn `recipient-policy-coordinator-snapshot-v2:${createHash(\"sha256\")\n\t\t.update(`${scopeId}\\u0000${scopeMembershipEpoch}\\u0000${canonical}`)\n\t\t.digest(\"hex\")}`;\n}\n\nfunction recipientPolicyPresenceCapabilityExpiresAt(\n\tenrollment: CoordinatorEnrollment,\n\tobservedAt: string,\n): number | null {\n\tconst expiresAt = enrollment.presence_expires_at;\n\tconst capabilities = enrollment.presence_capabilities;\n\tif (typeof expiresAt !== \"string\" || !capabilities) return null;\n\tconst expiresAtMs = Date.parse(expiresAt);\n\tconst observedAtMs = Date.parse(observedAt);\n\tif (\n\t\t!Number.isFinite(expiresAtMs) ||\n\t\t!Number.isFinite(observedAtMs) ||\n\t\tnew Date(expiresAtMs).toISOString() !== expiresAt ||\n\t\texpiresAtMs <= observedAtMs ||\n\t\tcapabilities.sync_capability !== \"scoped\" ||\n\t\t!Array.isArray(capabilities.sync_features) ||\n\t\t!capabilities.sync_features.every((feature) => typeof feature === \"string\") ||\n\t\t!capabilities.sync_features.includes(\"reassign_scope\")\n\t) {\n\t\treturn null;\n\t}\n\treturn expiresAtMs;\n}\n\nfunction recipientPolicyEnrollmentValueIsValid(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length > 0 && value === value.trim();\n}\n\nexport function createRecipientPolicyReconcilerEffects(\n\tstore: MemoryStore,\n\toptions: {\n\t\tconfig?: ReturnType<typeof readCoordinatorSyncConfig>;\n\t\tnow?: () => string;\n\t\tlistDevices?: typeof coordinatorListDevicesAction;\n\t\tlistReviewedRecipientInviteEvidence?: typeof coordinatorListReviewedRecipientInviteEvidenceAction;\n\t} = {},\n): RecipientPolicyReconcilerEffects {\n\tconst config = options.config ?? readCoordinatorSyncConfig();\n\tconst now = options.now ?? (() => new Date().toISOString());\n\tconst listDevices = options.listDevices ?? coordinatorListDevicesAction;\n\tconst listReviewedRecipientInviteEvidence =\n\t\toptions.listReviewedRecipientInviteEvidence ??\n\t\tcoordinatorListReviewedRecipientInviteEvidenceAction;\n\tconst reviewedRecipientInviteEvidence = new Map<\n\t\tstring,\n\t\tReturnType<typeof coordinatorListReviewedRecipientInviteEvidenceAction>\n\t>();\n\tconst loadReviewedRecipientInviteEvidence = (groupId: string) => {\n\t\tlet evidence = reviewedRecipientInviteEvidence.get(groupId);\n\t\tif (!evidence) {\n\t\t\tevidence = listReviewedRecipientInviteEvidence({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treviewedRecipientInviteEvidence.set(groupId, evidence);\n\t\t}\n\t\treturn evidence;\n\t};\n\tconst boundaryEnrollments = new Map<\n\t\tstring,\n\t\tMap<\n\t\t\tstring,\n\t\t\t{\n\t\t\t\tidentityId: string;\n\t\t\t\tpublicKey: string;\n\t\t\t\tfingerprint: string;\n\t\t\t\tpresenceCapabilityExpiresAtMs: number | null;\n\t\t\t}\n\t\t>\n\t>();\n\tconst target = (scopeId: string) => recipientPolicyCoordinatorBoundary(store, scopeId);\n\tconst coordinatorOptions = (scopeId: string) => {\n\t\tconst boundary = target(scopeId);\n\t\tconst remoteUrl = config.syncCoordinatorUrl?.trim();\n\t\tconst adminSecret = config.syncCoordinatorAdminSecret?.trim();\n\t\tif (!remoteUrl || !adminSecret) throw new Error(\"recipient_policy_effect_failed\");\n\t\tif (!config.syncCoordinatorGroups.includes(boundary.groupId)) {\n\t\t\tthrow new Error(\"recipient_policy_effect_failed\");\n\t\t}\n\t\ttry {\n\t\t\tif (buildBaseUrl(boundary.coordinatorId) !== buildBaseUrl(remoteUrl)) {\n\t\t\t\tthrow new Error(\"recipient_policy_effect_failed\");\n\t\t\t}\n\t\t} catch {\n\t\t\tthrow new Error(\"recipient_policy_effect_failed\");\n\t\t}\n\t\treturn {\n\t\t\t...boundary,\n\t\t\tremoteUrl,\n\t\t\tadminSecret,\n\t\t};\n\t};\n\treturn {\n\t\tnow,\n\t\tsnapshot: async ({ scopeId }) => {\n\t\t\tconst targetOptions = coordinatorOptions(scopeId);\n\t\t\tconst memberships = await coordinatorListScopeMembershipsAction({\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tscopeId,\n\t\t\t\tincludeRevoked: true,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t}).catch(() => {\n\t\t\t\tthrow new Error(\"recipient_policy_snapshot_not_fresh\");\n\t\t\t});\n\t\t\tconst snapshotMemberships = memberships.map((membership) => {\n\t\t\t\tif (\n\t\t\t\t\ttypeof membership.device_id !== \"string\" ||\n\t\t\t\t\t(membership.status !== \"active\" && membership.status !== \"revoked\")\n\t\t\t\t) {\n\t\t\t\t\tthrow new Error(\"recipient_policy_snapshot_invalid\");\n\t\t\t\t}\n\t\t\t\tconst status: \"active\" | \"revoked\" = membership.status;\n\t\t\t\treturn {\n\t\t\t\t\tdeviceId: membership.device_id,\n\t\t\t\t\tstatus,\n\t\t\t\t\tmembershipEpoch: membership.membership_epoch,\n\t\t\t\t};\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tauthoritative: true,\n\t\t\t\tscopeId,\n\t\t\t\tscopeMembershipEpoch: targetOptions.membershipEpoch,\n\t\t\t\tfingerprint: recipientPolicySnapshotFingerprint(\n\t\t\t\t\tscopeId,\n\t\t\t\t\ttargetOptions.membershipEpoch,\n\t\t\t\t\tsnapshotMemberships,\n\t\t\t\t),\n\t\t\t\tobservedAt: now(),\n\t\t\t\tmemberships: snapshotMemberships,\n\t\t\t};\n\t\t},\n\t\tlistBoundaryEnrollments: async ({ scopeId }) => {\n\t\t\tconst targetOptions = coordinatorOptions(scopeId);\n\t\t\tconst observedAt = now();\n\t\t\tconst enrollments = await listDevices({\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tincludeDisabled: true,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t}).catch(() => {\n\t\t\t\tthrow new Error(\"recipient_policy_snapshot_not_fresh\");\n\t\t\t});\n\t\t\tconst presenceCapabilityExpiries = new Map(\n\t\t\t\tenrollments.map((enrollment) => [\n\t\t\t\t\tenrollment.device_id,\n\t\t\t\t\trecipientPolicyPresenceCapabilityExpiresAt(enrollment, observedAt),\n\t\t\t\t]),\n\t\t\t);\n\t\t\tconst mapped = enrollments.map((enrollment) => {\n\t\t\t\tif (\n\t\t\t\t\tenrollment.group_id !== targetOptions.groupId ||\n\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.device_id) ||\n\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.public_key) ||\n\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.fingerprint) ||\n\t\t\t\t\tfingerprintPublicKey(enrollment.public_key) !== enrollment.fingerprint ||\n\t\t\t\t\t(enrollment.enabled !== 0 && enrollment.enabled !== 1) ||\n\t\t\t\t\t(enrollment.identity_id !== null &&\n\t\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.identity_id))\n\t\t\t\t) {\n\t\t\t\t\tthrow new Error(\"recipient_policy_snapshot_invalid\");\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tdeviceId: enrollment.device_id,\n\t\t\t\t\tidentityId: enrollment.identity_id,\n\t\t\t\t\tpublicKey: enrollment.public_key,\n\t\t\t\t\tfingerprint: enrollment.fingerprint,\n\t\t\t\t\tenabled: enrollment.enabled === 1,\n\t\t\t\t};\n\t\t\t});\n\t\t\tboundaryEnrollments.set(\n\t\t\t\tscopeId,\n\t\t\t\tnew Map(\n\t\t\t\t\tmapped.flatMap((enrollment) =>\n\t\t\t\t\t\tenrollment.enabled && enrollment.identityId !== null\n\t\t\t\t\t\t\t? [\n\t\t\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t\t\tenrollment.deviceId,\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\tidentityId: enrollment.identityId,\n\t\t\t\t\t\t\t\t\t\t\tpublicKey: enrollment.publicKey,\n\t\t\t\t\t\t\t\t\t\t\tfingerprint: enrollment.fingerprint,\n\t\t\t\t\t\t\t\t\t\t\tpresenceCapabilityExpiresAtMs:\n\t\t\t\t\t\t\t\t\t\t\t\tpresenceCapabilityExpiries.get(enrollment.deviceId) ?? null,\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t] as const,\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t: [],\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn mapped;\n\t\t},\n\t\tprobeCapability: async ({ deviceId, scopeId }) => {\n\t\t\tif (deviceId === store.deviceId) return \"supported\";\n\t\t\t// Reconciliation always lists this scope's enrollments before capability\n\t\t\t// preflight. A missing binding still fails closed if that order changes.\n\t\t\tconst targetOptions = coordinatorOptions(scopeId);\n\t\t\tconst enrollment = boundaryEnrollments.get(scopeId)?.get(deviceId);\n\t\t\tif (!enrollment) return \"undetermined\";\n\t\t\tconst peer = store.db\n\t\t\t\t.prepare(\"SELECT pinned_fingerprint, public_key FROM sync_peers WHERE peer_device_id = ?\")\n\t\t\t\t.get(deviceId) as\n\t\t\t\t| { pinned_fingerprint: string | null; public_key: string | null }\n\t\t\t\t| undefined;\n\t\t\tif (peer) {\n\t\t\t\tconst peerPublicKey = String(peer.public_key ?? \"\").trim();\n\t\t\t\tconst peerFingerprint =\n\t\t\t\t\tString(peer.pinned_fingerprint ?? \"\").trim() ||\n\t\t\t\t\t(peerPublicKey ? fingerprintPublicKey(peerPublicKey) : \"\");\n\t\t\t\tif (\n\t\t\t\t\t(peerFingerprint || peerPublicKey) &&\n\t\t\t\t\t(peerFingerprint !== enrollment.fingerprint ||\n\t\t\t\t\t\t(peerPublicKey && peerPublicKey !== enrollment.publicKey))\n\t\t\t\t) {\n\t\t\t\t\treturn \"undetermined\";\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst observed = await peerSupportsSyncRequirements(store, deviceId, {\n\t\t\t\tscoped: true,\n\t\t\t\treassignScope: true,\n\t\t\t});\n\t\t\tif (observed !== \"undetermined\") return observed;\n\t\t\tconst observedAtMs = Date.parse(now());\n\t\t\tif (\n\t\t\t\tenrollment.presenceCapabilityExpiresAtMs == null ||\n\t\t\t\t!Number.isFinite(observedAtMs) ||\n\t\t\t\tenrollment.presenceCapabilityExpiresAtMs <= observedAtMs\n\t\t\t) {\n\t\t\t\treturn \"undetermined\";\n\t\t\t}\n\t\t\t// A consumed, still-reviewed Team/add-device invite is the only bootstrap\n\t\t\t// identity proof accepted before normal peer discovery can observe the new\n\t\t\t// device. Fresh authenticated presence separately proves capability.\n\t\t\tconst evidence = await loadReviewedRecipientInviteEvidence(targetOptions.groupId).catch(\n\t\t\t\t() => [],\n\t\t\t);\n\t\t\treturn evidence.some(\n\t\t\t\t(invite) =>\n\t\t\t\t\tinvite.group_id === targetOptions.groupId &&\n\t\t\t\t\tinvite.bound_device_id === deviceId &&\n\t\t\t\t\tinvite.recipient_actor_id === enrollment.identityId &&\n\t\t\t\t\tinvite.bound_public_key === enrollment.publicKey &&\n\t\t\t\t\tinvite.bound_fingerprint === enrollment.fingerprint,\n\t\t\t)\n\t\t\t\t? \"supported\"\n\t\t\t\t: \"undetermined\";\n\t\t},\n\t\trevoke: async (input): Promise<RecipientPolicyCoordinatorEffectReceipt> => {\n\t\t\tconst targetOptions = coordinatorOptions(input.scopeId);\n\t\t\tawait coordinatorRevokeScopeMembershipAction({\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\tstatus: \"revoked\",\n\t\t\t};\n\t\t},\n\t\tgrant: async (input): Promise<RecipientPolicyCoordinatorEffectReceipt> => {\n\t\t\tconst targetOptions = coordinatorOptions(input.scopeId);\n\t\t\tconst membership = await coordinatorGrantScopeMembershipAction({\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\trole: input.role,\n\t\t\t\tcoordinatorId: targetOptions.coordinatorId,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tscopeId: membership.scope_id,\n\t\t\t\tdeviceId: membership.device_id,\n\t\t\t\tstatus: membership.status === \"active\" ? \"active\" : \"revoked\",\n\t\t\t};\n\t\t},\n\t\trefresh: async ({ scopeId }) => {\n\t\t\tconst boundary = target(scopeId);\n\t\t\tconst refreshed = await refreshConfiguredScopeMembershipCache(store.db, config, {\n\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\tdbPath: store.dbPath,\n\t\t\t});\n\t\t\tconst group = refreshed.groups.find((item) => item.groupId === boundary.groupId);\n\t\t\tif (group?.status !== \"refreshed\") throw new Error(\"recipient_policy_effect_failed\");\n\t\t\tawait refreshAuthorizedCoordinatorPeerTrust(store, config);\n\t\t},\n\t};\n}\n\nexport interface ReconcileRecipientPolicyProjectsResult {\n\tprocessed: number;\n\tactive: number;\n\twaiting: number;\n\tattention: number;\n\tfailed: number;\n\titems: Array<{\n\t\tcanonicalProjectIdentity: string;\n\t\tstatus: RecipientPolicyReconcileResult[\"status\"] | \"failed\";\n\t\tsafeErrorCode: string | null;\n\t}>;\n}\n\nexport async function reconcileRecipientPolicyProjects(\n\tstore: MemoryStore,\n\toptions: {\n\t\tlimit?: number;\n\t\tnow?: Date;\n\t\tbackoffMs?: number;\n\t\tleaseOwner?: string;\n\t\teffects?: RecipientPolicyReconcilerEffects;\n\t\treconcileProject?: typeof reconcileRecipientPolicyProject;\n\t} = {},\n): Promise<ReconcileRecipientPolicyProjectsResult> {\n\tconst limit = Math.max(\n\t\t1,\n\t\tMath.min(\n\t\t\tMath.trunc(options.limit ?? RECIPIENT_POLICY_MAINTENANCE_DEFAULT_LIMIT),\n\t\t\tRECIPIENT_POLICY_MAINTENANCE_MAX_LIMIT,\n\t\t),\n\t);\n\tconst maintenanceNow = options.now ?? new Date();\n\tconst backoffMs = Math.max(\n\t\t0,\n\t\tMath.trunc(options.backoffMs ?? RECIPIENT_POLICY_MAINTENANCE_BACKOFF_MS),\n\t);\n\tconst retryBefore = new Date(maintenanceNow.getTime() - backoffMs).toISOString();\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`WITH projects AS (\n\t\t\t\tSELECT DISTINCT canonical_project_identity FROM project_recipients\n\t\t\t\tUNION\n\t\t\t\tSELECT canonical_project_identity FROM recipient_policy_authority_states\n\t\t\t)\n\t\t\t SELECT projects.canonical_project_identity\n\t\t\t FROM projects\n\t\t\t LEFT JOIN recipient_policy_authority_states authority\n\t\t\t ON authority.canonical_project_identity = projects.canonical_project_identity\n\t\t\t WHERE authority.safe_error_code IS NULL OR authority.last_attempt_at IS NULL\n\t\t\t OR authority.last_attempt_at <= ?\n\t\t\t ORDER BY CASE WHEN authority.last_attempt_at IS NULL THEN 0 ELSE 1 END,\n\t\t\t authority.last_attempt_at, projects.canonical_project_identity\n\t\t\t LIMIT ?`,\n\t\t)\n\t\t.all(retryBefore, limit) as Array<{ canonical_project_identity: string }>;\n\tconst effects = options.effects ?? createRecipientPolicyReconcilerEffects(store);\n\tconst reconcileProject = options.reconcileProject ?? reconcileRecipientPolicyProject;\n\tconst result: ReconcileRecipientPolicyProjectsResult = {\n\t\tprocessed: 0,\n\t\tactive: 0,\n\t\twaiting: 0,\n\t\tattention: 0,\n\t\tfailed: 0,\n\t\titems: [],\n\t};\n\tfor (const row of rows) {\n\t\tresult.processed += 1;\n\t\ttry {\n\t\t\tconst outcome = await reconcileProject(\n\t\t\t\tstore.db,\n\t\t\t\t{\n\t\t\t\t\tcanonicalProjectIdentity: row.canonical_project_identity,\n\t\t\t\t\tleaseOwner:\n\t\t\t\t\t\toptions.leaseOwner ?? `recipient-policy-maintenance:${store.deviceId || process.pid}`,\n\t\t\t\t},\n\t\t\t\teffects,\n\t\t\t);\n\t\t\tif (outcome.status === \"active\") result.active += 1;\n\t\t\telse if (outcome.status === \"needs_attention\") result.attention += 1;\n\t\t\telse result.waiting += 1;\n\t\t\tresult.items.push({\n\t\t\t\tcanonicalProjectIdentity: row.canonical_project_identity,\n\t\t\t\tstatus: outcome.status,\n\t\t\t\tsafeErrorCode: outcome.safeErrorCode,\n\t\t\t});\n\t\t} catch {\n\t\t\tresult.failed += 1;\n\t\t\tresult.items.push({\n\t\t\t\tcanonicalProjectIdentity: row.canonical_project_identity,\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tsafeErrorCode: \"recipient_policy_reconciliation_failed\",\n\t\t\t});\n\t\t}\n\t}\n\treturn result;\n}\n\nexport type RecipientPolicyReconciliationReadState =\n\t| \"active\"\n\t| \"needs_attention\"\n\t| \"pending\"\n\t| \"verifying\"\n\t| \"waiting\";\n\nexport interface RecipientPolicyReconciliationReadModel {\n\tversion: 1;\n\titems: Array<{\n\t\tcanonicalProjectIdentity: string;\n\t\tstate: RecipientPolicyReconciliationReadState;\n\t\tlabel: string;\n\t\texplanation: string;\n\t\tdeliveredCopiesMayRemain: true;\n\t\trevocationWarning: string;\n\t}>;\n}\n\nfunction recipientPolicyReadState(\n\tauthority: ReturnType<typeof getRecipientPolicyAuthorityState>,\n): RecipientPolicyReconciliationReadState {\n\tif (!authority) return \"pending\";\n\tif (authority.safeErrorCode && RECIPIENT_POLICY_WAITING_ERRORS.has(authority.safeErrorCode)) {\n\t\treturn \"waiting\";\n\t}\n\tif (authority.safeErrorCode || authority.authorityState === \"rolled_back\") {\n\t\treturn \"needs_attention\";\n\t}\n\tif (authority.authorityState === \"active\") return \"active\";\n\tif (authority.authorityState === \"eligible\") return \"verifying\";\n\treturn \"pending\";\n}\n\nfunction recipientPolicyReadCopy(state: RecipientPolicyReconciliationReadState): {\n\tlabel: string;\n\texplanation: string;\n} {\n\tif (state === \"active\") {\n\t\treturn {\n\t\t\tlabel: \"Recipient policy active\",\n\t\t\texplanation: \"Recipient policy now controls future access for this Project.\",\n\t\t};\n\t}\n\tif (state === \"verifying\") {\n\t\treturn {\n\t\t\tlabel: \"Verifying recipient policy\",\n\t\t\texplanation: \"Current access matches recipient policy and needs one more stable check.\",\n\t\t};\n\t}\n\tif (state === \"waiting\") {\n\t\treturn {\n\t\t\tlabel: \"Waiting to reconcile\",\n\t\t\texplanation:\n\t\t\t\t\"Waiting for devices or a fresh coordinator snapshot. No partial grant is applied.\",\n\t\t};\n\t}\n\tif (state === \"needs_attention\") {\n\t\treturn {\n\t\t\tlabel: \"Reconciliation needs attention\",\n\t\t\texplanation:\n\t\t\t\t\"Legacy scope enforcement remains in control until this Project is safe to retry.\",\n\t\t};\n\t}\n\treturn {\n\t\tlabel: \"Recipient policy pending\",\n\t\texplanation: \"Legacy scope enforcement remains in control while reconciliation is pending.\",\n\t};\n}\n\nexport function listRecipientPolicyReconciliationStatus(\n\tstore: MemoryStore,\n): RecipientPolicyReconciliationReadModel {\n\tconst projectIds = (\n\t\tstore.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT DISTINCT canonical_project_identity FROM project_recipients WHERE status = 'active'\n\t\t\t\t UNION SELECT canonical_project_identity FROM recipient_policy_authority_states\n\t\t\t\t ORDER BY canonical_project_identity`,\n\t\t\t)\n\t\t\t.all() as Array<{ canonical_project_identity: string }>\n\t).map((row) => row.canonical_project_identity);\n\treturn {\n\t\tversion: 1,\n\t\titems: projectIds.map((canonicalProjectIdentity) => {\n\t\t\tconst state = recipientPolicyReadState(\n\t\t\t\tgetRecipientPolicyAuthorityState(store.db, canonicalProjectIdentity),\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tcanonicalProjectIdentity,\n\t\t\t\tstate,\n\t\t\t\t...recipientPolicyReadCopy(state),\n\t\t\t\tdeliveredCopiesMayRemain: true,\n\t\t\t\trevocationWarning: SCOPE_MEMBERSHIP_REVOCATION_LIMITATION,\n\t\t\t};\n\t\t}),\n\t};\n}\n\nfunction sortActiveMaintenanceJobs<\n\tT extends { started_at: string | null; updated_at: string; kind: string },\n>(jobs: T[]): T[] {\n\treturn [...jobs].sort((a, b) => {\n\t\tconst aTime = a.started_at ?? a.updated_at;\n\t\tconst bTime = b.started_at ?? b.updated_at;\n\t\tif (aTime !== bTime) return aTime.localeCompare(bTime);\n\t\treturn a.kind.localeCompare(b.kind);\n\t});\n}\n\nfunction summarizeMaintenanceJobs(\n\tjobs: MaintenanceJobSnapshot[],\n\tshowDiagnostics: boolean,\n): Array<Record<string, unknown>> {\n\treturn sortActiveMaintenanceJobs(\n\t\tjobs.filter((job) => [\"pending\", \"running\", \"failed\"].includes(String(job.status ?? \"\"))),\n\t).map((job) => ({\n\t\tkind: job.kind,\n\t\ttitle: job.title,\n\t\tstatus: job.status,\n\t\tprogress: job.progress,\n\t\t...(showDiagnostics\n\t\t\t? {\n\t\t\t\t\tmessage: job.message,\n\t\t\t\t\terror: job.error,\n\t\t\t\t\tmetadata: job.metadata,\n\t\t\t\t}\n\t\t\t: {}),\n\t}));\n}\n\nfunction redactSemanticIndexDiagnostics(\n\tdiagnostics: SemanticIndexDiagnostics,\n\tshowDiagnostics: boolean,\n): SemanticIndexDiagnostics {\n\tif (showDiagnostics || !diagnostics.maintenance_job) {\n\t\treturn diagnostics;\n\t}\n\tconst summary =\n\t\tdiagnostics.state === \"pending\"\n\t\t\t? \"Semantic-index catch-up is pending\"\n\t\t\t: diagnostics.state === \"failed\"\n\t\t\t\t? \"Semantic-index catch-up failed\"\n\t\t\t\t: diagnostics.state === \"degraded\"\n\t\t\t\t\t? \"Semantic index is running in degraded mode\"\n\t\t\t\t\t: diagnostics.summary;\n\treturn {\n\t\t...diagnostics,\n\t\tsummary,\n\t\tmaintenance_job: {\n\t\t\t...diagnostics.maintenance_job,\n\t\t\tmessage: null,\n\t\t\terror: null,\n\t\t},\n\t};\n}\n\nfunction syncKeysDir(): string | undefined {\n\treturn process.env.CODEMEM_KEYS_DIR?.trim() || undefined;\n}\n\n/** Strip control/format characters and cap length so attacker-controlled\n * headers cannot forge log lines when included in diagnostics. */\nfunction loggableHeaderValue(value: string | undefined): string {\n\tconst sanitized = (value ?? \"\")\n\t\t.replace(/[\\p{Cc}\\p{Cf}]/gu, \"\")\n\t\t.slice(0, 64)\n\t\t.trim();\n\treturn sanitized || \"unknown\";\n}\n\nfunction intEnvOr(name: string, fallback: number): number {\n\tconst value = Number.parseInt(process.env[name] ?? \"\", 10);\n\treturn Number.isFinite(value) ? value : fallback;\n}\n\nconst MAX_SYNC_BODY_BYTES = intEnvOr(\"CODEMEM_SYNC_MAX_BODY_BYTES\", 1_048_576);\nconst MAX_SYNC_OPS = intEnvOr(\"CODEMEM_SYNC_MAX_OPS\", 2000);\n\nasync function readBoundedRequestBytes(request: Request, maxBytes: number): Promise<Buffer | null> {\n\tconst contentLength = Number.parseInt(request.headers.get(\"content-length\") ?? \"\", 10);\n\tif (Number.isFinite(contentLength) && contentLength > maxBytes) {\n\t\treturn null;\n\t}\n\tconst stream = request.body;\n\tif (!stream) return Buffer.alloc(0);\n\tconst reader = stream.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (!value) continue;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tawait reader.cancel();\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tchunks.push(value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\treturn Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));\n}\n\nconst PAIRING_FILTER_HINT =\n\t\"Run this on another device with codemem sync pair --accept '<payload>'. \" +\n\t\"On the accepting device, --include/--exclude control both what it sends and what it accepts from that peer.\";\n\nfunction pathWithQuery(url: string): string {\n\tconst parsed = new URL(url);\n\treturn parsed.search ? `${parsed.pathname}${parsed.search}` : parsed.pathname;\n}\n\nfunction unauthorizedPayload(): Record<string, string> {\n\treturn { error: \"unauthorized\" };\n}\n\nconst SYNC_AUTH_STORE_BUSY_REASON = \"sync_auth_store_busy\";\n\ntype SyncAuthResult = { ok: boolean; reason: string; deviceId: string };\ntype VerifiedDirectPeerSignature = { ok: true; version: 2 | 3 } | { ok: false; reason: string };\n\nconst DIRECT_PEER_SIGNATURE_VERSION_NUMBER = 3;\n\nfunction logDirectPeerAuthDiagnostic(...reasons: Array<string | null>): void {\n\tconst reason = reasons.find(\n\t\t(candidate) => candidate === \"recipient_mismatch\" || candidate === \"signature_downgrade\",\n\t);\n\tif (reason) console.warn(`[sync] peer auth failed: reason=${reason}`);\n}\n\nfunction isSqliteBusy(err: unknown): boolean {\n\tif (!err || typeof err !== \"object\") return false;\n\tconst code = \"code\" in err ? String((err as { code?: unknown }).code ?? \"\") : \"\";\n\tconst message = err instanceof Error ? err.message : \"\";\n\treturn code === \"SQLITE_BUSY\" || message.includes(\"database is locked\");\n}\n\nfunction recordSyncAuthNonce(\n\tstore: MemoryStore,\n\tdeviceId: string,\n\tnonce: string,\n\tcreatedAt: string,\n): SyncAuthResult | null {\n\ttry {\n\t\tif (!recordNonce(store.db, deviceId, nonce, createdAt)) {\n\t\t\treturn { ok: false, reason: \"nonce_replay\", deviceId };\n\t\t}\n\t} catch (err) {\n\t\tif (isSqliteBusy(err)) {\n\t\t\treturn { ok: false, reason: SYNC_AUTH_STORE_BUSY_REASON, deviceId };\n\t\t}\n\t\tthrow err;\n\t}\n\n\tconst cutoff = new Date(Date.now() - DEFAULT_TIME_WINDOW_S * 2 * 1000).toISOString();\n\ttry {\n\t\tcleanupNonces(store.db, cutoff);\n\t} catch (err) {\n\t\tif (!isSqliteBusy(err)) throw err;\n\t\t// Nonce cleanup is best-effort. A lock here should not fail a request\n\t\t// after its nonce was already recorded; the next request can prune.\n\t}\n\treturn null;\n}\n\nfunction isSyncAuthStoreBusy(auth: SyncAuthResult): boolean {\n\treturn !auth.ok && auth.reason === SYNC_AUTH_STORE_BUSY_REASON;\n}\n\nfunction syncAuthStoreBusyResponse(c: Context) {\n\tc.header(\"Retry-After\", \"1\");\n\treturn c.json({ error: SYNC_AUTH_STORE_BUSY_REASON }, 503);\n}\n\nfunction verifyDirectPeerRequestSignature(\n\trequest: { method: string; url: string; header(name: string): string | undefined },\n\tbody: Buffer,\n\toptions: {\n\t\tdeviceId: string;\n\t\tpublicKey: string;\n\t\texpectedRecipientId: string;\n\t\thighestObservedVersion: number | null;\n\t},\n): VerifiedDirectPeerSignature {\n\tconst timestamp = request.header(\"X-Opencode-Timestamp\") ?? \"\";\n\tconst nonce = request.header(\"X-Opencode-Nonce\") ?? \"\";\n\tconst legacySignature = request.header(\"X-Opencode-Signature\") ?? \"\";\n\tconst recipientHeader = request.header(\"X-Codemem-Recipient\");\n\tconst directSignatureHeader = request.header(\"X-Codemem-Signature\");\n\tconst hasDirectMaterial = recipientHeader !== undefined || directSignatureHeader !== undefined;\n\tconst direct = verifyDirectPeerSignature({\n\t\tmethod: request.method,\n\t\tpathWithQuery: pathWithQuery(request.url),\n\t\tbodyBytes: body,\n\t\ttimestamp,\n\t\tnonce,\n\t\trecipientId: recipientHeader,\n\t\texpectedRecipientId: options.expectedRecipientId,\n\t\tsignature: directSignatureHeader,\n\t\tpublicKey: options.publicKey,\n\t});\n\tif (hasDirectMaterial && direct.status === \"absent\") {\n\t\treturn { ok: false, reason: \"invalid_direct_signature\" };\n\t}\n\tif (direct.status === \"invalid\") {\n\t\treturn {\n\t\t\tok: false,\n\t\t\treason: direct.reason === \"recipient_mismatch\" ? direct.reason : \"invalid_direct_signature\",\n\t\t};\n\t}\n\n\tconst legacyValid = verifySignature({\n\t\tmethod: request.method,\n\t\tpathWithQuery: pathWithQuery(request.url),\n\t\tbodyBytes: body,\n\t\ttimestamp,\n\t\tnonce,\n\t\tsignature: legacySignature,\n\t\tpublicKey: options.publicKey,\n\t\tdeviceId: options.deviceId,\n\t});\n\tif (!legacyValid) return { ok: false, reason: \"invalid_signature\" };\n\tif (\n\t\tdirect.status === \"absent\" &&\n\t\t(options.highestObservedVersion ?? 0) >= DIRECT_PEER_SIGNATURE_VERSION_NUMBER\n\t) {\n\t\treturn { ok: false, reason: \"signature_downgrade\" };\n\t}\n\treturn { ok: true, version: direct.status === \"valid\" ? 3 : 2 };\n}\n\nfunction recordDirectPeerSignatureVersion(\n\tstore: MemoryStore,\n\tdeviceId: string,\n\tversion: 3,\n): SyncAuthResult | null {\n\ttry {\n\t\tconst advanced = recordHighestObservedDirectSignatureVersion(store.db, deviceId, version);\n\t\tif (!advanced) {\n\t\t\tconst observed = store.db\n\t\t\t\t.prepare(\n\t\t\t\t\t`SELECT sync_peer_signature_state.highest_observed_direct_signature_version\n\t\t\t\t\t FROM sync_peers\n\t\t\t\t\t LEFT JOIN sync_peer_signature_state USING (peer_device_id)\n\t\t\t\t\t WHERE sync_peers.peer_device_id = ? LIMIT 1`,\n\t\t\t\t)\n\t\t\t\t.pluck()\n\t\t\t\t.get(deviceId);\n\t\t\tif (observed === undefined) return { ok: false, reason: \"unknown_peer\", deviceId };\n\t\t}\n\t\treturn null;\n\t} catch (err) {\n\t\tif (isSqliteBusy(err)) {\n\t\t\treturn { ok: false, reason: SYNC_AUTH_STORE_BUSY_REASON, deviceId };\n\t\t}\n\t\tthrow err;\n\t}\n}\n\nfunction authorizeSyncRequest(\n\tstore: MemoryStore,\n\trequest: { method: string; url: string; header(name: string): string | undefined },\n\tbody: Buffer,\n): SyncAuthResult {\n\tconst deviceId = (request.header(\"X-Opencode-Device\") ?? \"\").trim();\n\tconst signature = request.header(\"X-Opencode-Signature\") ?? \"\";\n\tconst timestamp = request.header(\"X-Opencode-Timestamp\") ?? \"\";\n\tconst nonce = request.header(\"X-Opencode-Nonce\") ?? \"\";\n\tif (!deviceId || !signature || !timestamp || !nonce) {\n\t\treturn { ok: false, reason: \"missing_headers\", deviceId };\n\t}\n\n\tconst peerRow = store.db\n\t\t.prepare(\n\t\t\t`SELECT sync_peers.pinned_fingerprint, sync_peers.public_key,\n\t\t\t sync_peer_signature_state.highest_observed_direct_signature_version\n\t\t\t FROM sync_peers\n\t\t\t LEFT JOIN sync_peer_signature_state USING (peer_device_id)\n\t\t\t WHERE sync_peers.peer_device_id = ? LIMIT 1`,\n\t\t)\n\t\t.get(deviceId) as\n\t\t| {\n\t\t\t\tpinned_fingerprint: string | null;\n\t\t\t\tpublic_key: string | null;\n\t\t\t\thighest_observed_direct_signature_version: number | null;\n\t\t }\n\t\t| undefined;\n\tif (!peerRow) {\n\t\treturn { ok: false, reason: \"unknown_peer\", deviceId };\n\t}\n\n\tconst pinnedFingerprint = String(peerRow.pinned_fingerprint ?? \"\").trim();\n\tconst publicKey = String(peerRow.public_key ?? \"\").trim();\n\tif (!pinnedFingerprint || !publicKey) {\n\t\treturn { ok: false, reason: \"peer_record_incomplete\", deviceId };\n\t}\n\tif (fingerprintPublicKey(publicKey) !== pinnedFingerprint) {\n\t\treturn { ok: false, reason: \"fingerprint_mismatch\", deviceId };\n\t}\n\n\tlet verification: VerifiedDirectPeerSignature;\n\ttry {\n\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\tverification = verifyDirectPeerRequestSignature(request, body, {\n\t\t\tdeviceId,\n\t\t\tpublicKey,\n\t\t\texpectedRecipientId: localDeviceId,\n\t\t\thighestObservedVersion: peerRow.highest_observed_direct_signature_version,\n\t\t});\n\t} catch {\n\t\treturn { ok: false, reason: \"signature_verification_error\", deviceId };\n\t}\n\tif (!verification.ok) {\n\t\treturn { ok: false, reason: verification.reason, deviceId };\n\t}\n\n\tconst createdAt = new Date().toISOString();\n\tconst nonceResult = recordSyncAuthNonce(store, deviceId, nonce, createdAt);\n\tif (nonceResult) return nonceResult;\n\tif (verification.version === DIRECT_PEER_SIGNATURE_VERSION_NUMBER) {\n\t\tconst versionResult = recordDirectPeerSignatureVersion(store, deviceId, verification.version);\n\t\tif (versionResult) return versionResult;\n\t}\n\treturn { ok: true, reason: \"ok\", deviceId };\n}\n\nasync function authorizeBootstrapGrantRequest(\n\tstore: MemoryStore,\n\trequest: { method: string; url: string; header(name: string): string | undefined },\n\tbody: Buffer,\n): Promise<SyncAuthResult> {\n\tconst grantId = (request.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim();\n\tconst deviceId = (request.header(\"X-Opencode-Device\") ?? \"\").trim();\n\tconst signature = request.header(\"X-Opencode-Signature\") ?? \"\";\n\tconst timestamp = request.header(\"X-Opencode-Timestamp\") ?? \"\";\n\tconst nonce = request.header(\"X-Opencode-Nonce\") ?? \"\";\n\tif (!grantId || !deviceId || !signature || !timestamp || !nonce) {\n\t\treturn { ok: false, reason: \"missing_bootstrap_grant_headers\", deviceId };\n\t}\n\n\tconst config = readCoordinatorSyncConfig();\n\tif (!config.syncCoordinatorUrl) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_coordinator_not_configured\", deviceId };\n\t}\n\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tlet verification: CoordinatorBootstrapGrantVerification;\n\ttry {\n\t\tlet payload: Record<string, unknown> | null = null;\n\t\tif (config.syncCoordinatorAdminSecret) {\n\t\t\tconst [status, adminPayload] = await requestJson(\n\t\t\t\t\"GET\",\n\t\t\t\t`${buildBaseUrl(config.syncCoordinatorUrl)}/v1/admin/bootstrap-grants/${encodeURIComponent(grantId)}`,\n\t\t\t\t{\n\t\t\t\t\theaders: { \"X-Codemem-Coordinator-Admin\": config.syncCoordinatorAdminSecret },\n\t\t\t\t\ttimeoutS: Math.max(1, config.syncCoordinatorTimeoutS),\n\t\t\t\t},\n\t\t\t);\n\t\t\tif (status === 200) payload = adminPayload;\n\t\t} else {\n\t\t\tfor (const groupId of config.syncCoordinatorGroups) {\n\t\t\t\tconst lookupUrl = `${buildBaseUrl(config.syncCoordinatorUrl)}/v1/bootstrap-grants/${encodeURIComponent(grantId)}?group_id=${encodeURIComponent(groupId)}`;\n\t\t\t\tconst [status, signedPayload] = await requestJson(\"GET\", lookupUrl, {\n\t\t\t\t\theaders: buildAuthHeaders({\n\t\t\t\t\t\tdeviceId: localDeviceId,\n\t\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\turl: lookupUrl,\n\t\t\t\t\t\tbodyBytes: Buffer.alloc(0),\n\t\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\t}),\n\t\t\t\t\ttimeoutS: Math.max(1, config.syncCoordinatorTimeoutS),\n\t\t\t\t});\n\t\t\t\tif (status === 200) {\n\t\t\t\t\tpayload = signedPayload;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (!payload) return { ok: false, reason: \"bootstrap_grant_lookup_failed\", deviceId };\n\t\tverification = payload as unknown as CoordinatorBootstrapGrantVerification;\n\t} catch {\n\t\treturn { ok: false, reason: \"bootstrap_grant_lookup_failed\", deviceId };\n\t}\n\n\tconst grant = verification.grant;\n\tconst workerEnrollment = verification.worker_enrollment;\n\tif (!grant || !workerEnrollment) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_invalid_payload\", deviceId };\n\t}\n\tif (\n\t\tconfig.syncCoordinatorGroups.length > 0 &&\n\t\t!config.syncCoordinatorGroups.includes(String(grant.group_id))\n\t) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_group_mismatch\", deviceId };\n\t}\n\tif (grant.revoked_at) return { ok: false, reason: \"bootstrap_grant_revoked\", deviceId };\n\tif (String(workerEnrollment.device_id) !== String(grant.worker_device_id)) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_enrollment_mismatch\", deviceId };\n\t}\n\tif (String(workerEnrollment.group_id) !== String(grant.group_id)) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_group_mismatch\", deviceId };\n\t}\n\tif (Number(workerEnrollment.enabled) !== 1) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_disabled\", deviceId };\n\t}\n\tconst workerPublicKey = String(workerEnrollment.public_key ?? \"\").trim();\n\tconst workerFingerprint = String(workerEnrollment.fingerprint ?? \"\").trim();\n\tif (!workerPublicKey || fingerprintPublicKey(workerPublicKey) !== workerFingerprint) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_identity_invalid\", deviceId };\n\t}\n\tif (grant.worker_device_id !== deviceId) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_mismatch\", deviceId };\n\t}\n\tif (grant.seed_device_id !== localDeviceId) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_seed_mismatch\", deviceId };\n\t}\n\tif (new Date(grant.expires_at) <= new Date()) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_expired\", deviceId };\n\t}\n\n\tconst existingPeer = store.db\n\t\t.prepare(\n\t\t\t`SELECT highest_observed_direct_signature_version\n\t\t\t FROM sync_peer_signature_state WHERE peer_device_id = ? LIMIT 1`,\n\t\t)\n\t\t.get(deviceId) as { highest_observed_direct_signature_version: number | null } | undefined;\n\tlet signatureVerification: VerifiedDirectPeerSignature;\n\ttry {\n\t\tsignatureVerification = verifyDirectPeerRequestSignature(request, body, {\n\t\t\tdeviceId,\n\t\t\tpublicKey: workerPublicKey,\n\t\t\texpectedRecipientId: localDeviceId,\n\t\t\thighestObservedVersion: existingPeer?.highest_observed_direct_signature_version ?? null,\n\t\t});\n\t} catch {\n\t\treturn { ok: false, reason: \"bootstrap_grant_signature_verification_error\", deviceId };\n\t}\n\tif (!signatureVerification.ok) {\n\t\treturn { ok: false, reason: signatureVerification.reason, deviceId };\n\t}\n\tif (!isPeerTrustBindingCompatible(store.db, deviceId, workerPublicKey, workerFingerprint)) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_peer_trust_conflict\", deviceId };\n\t}\n\n\tconst createdAt = new Date().toISOString();\n\tconst nonceResult = recordSyncAuthNonce(store, deviceId, nonce, createdAt);\n\tif (nonceResult) return nonceResult;\n\tupdatePeerAddresses(store.db, deviceId, [], {\n\t\tname: String(workerEnrollment.display_name ?? \"\").trim() || undefined,\n\t\tpinnedFingerprint: workerFingerprint,\n\t\tpublicKey: workerPublicKey,\n\t\treplaceTrust: true,\n\t});\n\tif (signatureVerification.version === DIRECT_PEER_SIGNATURE_VERSION_NUMBER) {\n\t\tconst versionResult = recordDirectPeerSignatureVersion(\n\t\t\tstore,\n\t\t\tdeviceId,\n\t\t\tsignatureVerification.version,\n\t\t);\n\t\tif (versionResult) return versionResult;\n\t}\n\treturn { ok: true, reason: \"ok\", deviceId };\n}\n\nfunction parseJsonList(value: unknown): string[] {\n\tif (value == null) return [];\n\tif (typeof value === \"string\") {\n\t\ttry {\n\t\t\tconst parsed = JSON.parse(value) as unknown;\n\t\t\tif (!Array.isArray(parsed)) return [];\n\t\t\treturn parsed.map((entry) => String(entry ?? \"\").trim()).filter(Boolean);\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t}\n\tif (!Array.isArray(value)) return [];\n\treturn value.map((entry) => String(entry ?? \"\").trim()).filter(Boolean);\n}\n\nfunction readPeerProjectFilters(\n\tstore: MemoryStore,\n\tpeerDeviceId: string,\n): { include: string[]; exclude: string[] } {\n\tconst globalConfig = readCoordinatorSyncConfig();\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t\"SELECT projects_include_json, projects_exclude_json FROM sync_peers WHERE peer_device_id = ? LIMIT 1\",\n\t\t)\n\t\t.get(peerDeviceId) as\n\t\t| { projects_include_json: string | null; projects_exclude_json: string | null }\n\t\t| undefined;\n\tif (!row) {\n\t\treturn {\n\t\t\tinclude: globalConfig.syncProjectsInclude,\n\t\t\texclude: globalConfig.syncProjectsExclude,\n\t\t};\n\t}\n\tconst hasOverride = row.projects_include_json != null || row.projects_exclude_json != null;\n\tif (!hasOverride) {\n\t\treturn {\n\t\t\tinclude: globalConfig.syncProjectsInclude,\n\t\t\texclude: globalConfig.syncProjectsExclude,\n\t\t};\n\t}\n\treturn {\n\t\tinclude: parseJsonList(row.projects_include_json),\n\t\texclude: parseJsonList(row.projects_exclude_json),\n\t};\n}\n\nfunction currentProjectScope(\n\trow: Record<string, unknown>,\n\teffective?: { include: string[]; exclude: string[] },\n): Record<string, unknown> {\n\treturn {\n\t\tinclude: safeJsonList(row.projects_include_json as string | null),\n\t\texclude: safeJsonList(row.projects_exclude_json as string | null),\n\t\teffective_include:\n\t\t\teffective?.include ?? safeJsonList(row.projects_include_json as string | null),\n\t\teffective_exclude:\n\t\t\teffective?.exclude ?? safeJsonList(row.projects_exclude_json as string | null),\n\t\tinherits_global: row.projects_include_json == null && row.projects_exclude_json == null,\n\t};\n}\n\nfunction cleanPeerScopeText(value: unknown): string | null {\n\tconst text = String(value ?? \"\").trim();\n\treturn text || null;\n}\n\nfunction peerAuthorizedScopes(store: MemoryStore, peerDeviceId: string): Record<string, unknown>[] {\n\tconst deviceId = peerDeviceId.trim();\n\tif (!deviceId) return [];\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT\n\t\t\t\trs.scope_id,\n\t\t\t\trs.label,\n\t\t\t\trs.kind,\n\t\t\t\trs.authority_type,\n\t\t\t\trs.coordinator_id,\n\t\t\t\trs.group_id,\n\t\t\t\tsm.role,\n\t\t\t\tsm.membership_epoch,\n\t\t\t\tsm.updated_at\n\t\t\t FROM scope_memberships sm\n\t\t\t JOIN replication_scopes rs ON rs.scope_id = sm.scope_id\n\t\t\t WHERE sm.device_id = ?\n\t\t\t AND sm.status = 'active'\n\t\t\t AND rs.status = 'active'\n\t\t\t AND sm.membership_epoch >= rs.membership_epoch\n\t\t\t ORDER BY CASE WHEN rs.authority_type = 'local' THEN 1 ELSE 0 END,\n\t\t\t rs.label COLLATE NOCASE,\n\t\t\t rs.scope_id`,\n\t\t)\n\t\t.all(deviceId) as Array<Record<string, unknown>>;\n\treturn rows.map((row) => ({\n\t\tscope_id: String(row.scope_id ?? \"\"),\n\t\tlabel: String(row.label ?? row.scope_id ?? \"\"),\n\t\tkind: String(row.kind ?? \"user\"),\n\t\tauthority_type: String(row.authority_type ?? \"local\"),\n\t\tcoordinator_id: cleanPeerScopeText(row.coordinator_id),\n\t\tgroup_id: cleanPeerScopeText(row.group_id),\n\t\trole: String(row.role ?? \"member\"),\n\t\tmembership_epoch: Number(row.membership_epoch ?? 0),\n\t\tupdated_at: cleanPeerScopeText(row.updated_at),\n\t}));\n}\n\nfunction ensureLocalActorRecord(store: MemoryStore): void {\n\tconst d = drizzle(store.db, { schema });\n\tconst now = new Date().toISOString();\n\t// Invariant: exactly one row in `actors` has is_local=1, and it is the\n\t// row whose actor_id matches store.actorId. Stale is_local=1 rows can\n\t// appear when a device's actor_id changes (config edit, regenerated\n\t// device keys, DB copied from another machine). Demote any such rows\n\t// before ensuring the canonical local row exists.\n\td.update(schema.actors)\n\t\t.set({ is_local: 0, updated_at: now })\n\t\t.where(and(eq(schema.actors.is_local, 1), ne(schema.actors.actor_id, store.actorId)))\n\t\t.run();\n\tconst existing = d\n\t\t.select({ actor_id: schema.actors.actor_id, is_local: schema.actors.is_local })\n\t\t.from(schema.actors)\n\t\t.where(eq(schema.actors.actor_id, store.actorId))\n\t\t.get();\n\tif (existing) {\n\t\t// Row already exists for the canonical local actor id; the demotion\n\t\t// above guarantees it is the only is_local=1 row, but the row itself\n\t\t// may have been previously set to is_local=0 (e.g. via a stale demote\n\t\t// from an even earlier identity). Re-mark it as local idempotently.\n\t\tif (existing.is_local !== 1) {\n\t\t\td.update(schema.actors)\n\t\t\t\t.set({ is_local: 1, updated_at: now })\n\t\t\t\t.where(eq(schema.actors.actor_id, store.actorId))\n\t\t\t\t.run();\n\t\t}\n\t\treturn;\n\t}\n\td.insert(schema.actors)\n\t\t.values({\n\t\t\tactor_id: store.actorId,\n\t\t\tdisplay_name: store.actorDisplayName,\n\t\t\tis_local: 1,\n\t\t\tstatus: \"active\",\n\t\t\tmerged_into_actor_id: null,\n\t\t\tcreated_at: now,\n\t\t\tupdated_at: now,\n\t\t})\n\t\t.run();\n}\n\nfunction ensureStableStoreIdentity(store: MemoryStore): string {\n\tconst deviceId = ensureStableStoreDeviceIdentity(store);\n\tensureLocalActorRecord(store);\n\treturn deviceId;\n}\n\nfunction ensureStableStoreDeviceIdentity(store: MemoryStore): string {\n\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tstore.adoptEnsuredDeviceIdentity(deviceId);\n\treturn deviceId;\n}\n\nfunction findPeerDeviceIdForAddress(store: MemoryStore, address: string): string | null {\n\tconst rows = store.db\n\t\t.prepare(\"SELECT peer_device_id, addresses_json FROM sync_peers\")\n\t\t.all() as Array<{ peer_device_id: string; addresses_json: string | null }>;\n\tfor (const row of rows) {\n\t\tconst addresses = safeJsonList(row.addresses_json);\n\t\tif (addresses.includes(address)) return String(row.peer_device_id ?? \"\").trim() || null;\n\t}\n\treturn null;\n}\n\nfunction claimLegacyDeviceAsSelf(store: MemoryStore, originDeviceId: string): number {\n\tconst deviceId = String(originDeviceId || \"\").trim();\n\tif (!deviceId || deviceId === \"unknown\" || deviceId === store.deviceId) return 0;\n\tconst personalWorkspaceId = `personal:${store.actorId}`;\n\tconst result = store.db\n\t\t.prepare(\n\t\t\t`UPDATE memory_items\n\t\t\t SET actor_id = ?,\n\t\t\t actor_display_name = ?,\n\t\t\t visibility = 'private',\n\t\t\t workspace_id = ?,\n\t\t\t workspace_kind = 'personal',\n\t\t\t trust_state = 'trusted'\n\t\t\t WHERE origin_device_id = ?\n\t\t\t AND origin_device_id NOT IN (\n\t\t\t SELECT peer_device_id FROM sync_peers WHERE peer_device_id IS NOT NULL\n\t\t\t )\n\t\t\t AND (\n\t\t\t (\n\t\t\t actor_id IS NULL\n\t\t\t OR TRIM(actor_id) = ''\n\t\t\t OR actor_id LIKE 'legacy-sync:%'\n\t\t\t OR actor_id = ?\n\t\t\t )\n\t\t\t AND (\n\t\t\t actor_id IS NULL\n\t\t\t OR TRIM(actor_id) = ''\n\t\t\t OR actor_id LIKE 'legacy-sync:%'\n\t\t\t OR actor_display_name = ?\n\t\t\t OR workspace_id = ?\n\t\t\t OR trust_state = 'legacy_unknown'\n\t\t\t )\n\t\t\t )`,\n\t\t)\n\t\t.run(\n\t\t\tstore.actorId,\n\t\t\tstore.actorDisplayName,\n\t\t\tpersonalWorkspaceId,\n\t\t\tdeviceId,\n\t\t\tstore.actorId,\n\t\t\tLEGACY_SYNC_ACTOR_DISPLAY_NAME,\n\t\t\tLEGACY_SHARED_WORKSPACE_ID,\n\t\t);\n\treturn Number(result.changes ?? 0);\n}\n\nfunction redactCoordinatorStatus(\n\tcoordinator: Record<string, unknown>,\n\tshowDiag: boolean,\n): Record<string, unknown> {\n\tif (showDiag) return coordinator;\n\tconst discovered = Array.isArray(coordinator.discovered_devices)\n\t\t? coordinator.discovered_devices.map((item) => {\n\t\t\t\tif (!item || typeof item !== \"object\") return item;\n\t\t\t\tconst record = item as Record<string, unknown>;\n\t\t\t\tconst addressCount = Array.isArray(record.addresses) ? record.addresses.length : 0;\n\t\t\t\treturn {\n\t\t\t\t\tdevice_id: record.device_id,\n\t\t\t\t\tdisplay_name: record.display_name ?? null,\n\t\t\t\t\tgroups: Array.isArray(record.groups) ? record.groups : [],\n\t\t\t\t\tlast_seen_at: record.last_seen_at ?? null,\n\t\t\t\t\texpires_at: record.expires_at ?? null,\n\t\t\t\t\tstale: Boolean(record.stale),\n\t\t\t\t\tneeds_local_approval: Boolean(record.needs_local_approval),\n\t\t\t\t\twaiting_for_peer_approval: Boolean(record.waiting_for_peer_approval),\n\t\t\t\t\tincoming_reciprocal_request_id: record.incoming_reciprocal_request_id ?? null,\n\t\t\t\t\toutgoing_reciprocal_request_id: record.outgoing_reciprocal_request_id ?? null,\n\t\t\t\t\tfingerprint: null,\n\t\t\t\t\taddresses: [],\n\t\t\t\t\taddress_count: addressCount,\n\t\t\t\t};\n\t\t\t})\n\t\t: [];\n\treturn {\n\t\t...coordinator,\n\t\tdiscovered_devices: discovered,\n\t};\n}\n\ninterface AcceptDiscoveredPeerOptions {\n\tpeerDeviceId: string;\n\tfingerprint?: string;\n\t// Optional per-peer scope override. When undefined the group's scope\n\t// template is applied if auto_seed_scope is enabled; otherwise the peer\n\t// is enrolled with no scope filters.\n\t// Per-field: `undefined` = \"inherit from template\", `null` = \"explicit empty\",\n\t// `string[]` = \"use this list\". This avoids silently wiping the template's\n\t// exclude list when the caller only overrides include (or vice versa).\n\tscopeOverride?: {\n\t\tprojects_include?: string[] | null;\n\t\tprojects_exclude?: string[] | null;\n\t};\n\t// When provided and the caller is the admin-groups endpoint, this group\n\t// must be one of the match's coordinator groups. When undefined (legacy\n\t// /api/sync/peers/accept-discovered path) the match must belong to\n\t// exactly one group and that one is used.\n\texpectedGroupId?: string;\n\t// When provided, complete only the exact incoming reciprocal approval that\n\t// the caller reviewed instead of accepting a replacement request.\n\texpectedIncomingRequestId?: string;\n}\n\ntype AcceptDiscoveredPeerNotConfiguredReason =\n\t| \"coordinator_url_missing\"\n\t| \"coordinator_groups_empty\"\n\t| \"sync_disabled\";\n\nfunction detailForNotConfiguredReason(reason: AcceptDiscoveredPeerNotConfiguredReason): string {\n\tswitch (reason) {\n\t\tcase \"coordinator_url_missing\":\n\t\t\treturn \"Configure a coordinator URL before pairing with discovered peers.\";\n\t\tcase \"coordinator_groups_empty\":\n\t\t\treturn \"Join a coordinator team before pairing with discovered peers.\";\n\t\tcase \"sync_disabled\":\n\t\t\treturn \"Enable sync on this device before pairing with discovered peers.\";\n\t}\n}\n\nasync function acceptDiscoveredPeer(\n\tstore: MemoryStore,\n\tinput: AcceptDiscoveredPeerOptions,\n): Promise<\n\t| {\n\t\t\tok: true;\n\t\t\tpeer_device_id: string;\n\t\t\tcreated: boolean;\n\t\t\tupdated: boolean;\n\t\t\tname: string | null;\n\t\t\tgroup_id: string;\n\t }\n\t| {\n\t\t\tok: false;\n\t\t\tstatus: number;\n\t\t\terror: string;\n\t\t\tdetail: string;\n\t\t\treason?: AcceptDiscoveredPeerNotConfiguredReason;\n\t }\n> {\n\tconst config = readCoordinatorSyncConfig();\n\t// Order: address the most foundational gap first so the detail string\n\t// guides the user through setup in the correct sequence.\n\tlet notConfiguredReason: AcceptDiscoveredPeerNotConfiguredReason | null = null;\n\tif (!config.syncCoordinatorUrl) {\n\t\tnotConfiguredReason = \"coordinator_url_missing\";\n\t} else if (config.syncCoordinatorGroups.length === 0) {\n\t\tnotConfiguredReason = \"coordinator_groups_empty\";\n\t} else if (!config.syncEnabled) {\n\t\tnotConfiguredReason = \"sync_disabled\";\n\t}\n\tif (notConfiguredReason) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 400,\n\t\t\terror: \"coordinator_not_configured\",\n\t\t\treason: notConfiguredReason,\n\t\t\tdetail: detailForNotConfiguredReason(notConfiguredReason),\n\t\t};\n\t}\n\tconst discovered = await lookupCoordinatorPeers(store, config);\n\tconst inputFingerprint = String(input.fingerprint ?? \"\").trim();\n\tconst candidates = discovered.filter(\n\t\t(peer) => String(peer.device_id ?? \"\").trim() === input.peerDeviceId,\n\t);\n\tconst matchingCandidates = inputFingerprint\n\t\t? candidates.filter((peer) => String(peer.fingerprint ?? \"\").trim() === inputFingerprint)\n\t\t: candidates;\n\tconst uniqueFingerprints = new Set(\n\t\tmatchingCandidates.map((peer) => String(peer.fingerprint ?? \"\").trim()).filter(Boolean),\n\t);\n\tif (!inputFingerprint && uniqueFingerprints.size > 1) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"ambiguous_discovered_peer\",\n\t\t\tdetail:\n\t\t\t\t\"That discovered device has multiple coordinator fingerprints. Enable diagnostics, refresh sync status, and choose the intended device before trusting it.\",\n\t\t};\n\t}\n\tconst match = matchingCandidates[0];\n\tif (!match) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 404,\n\t\t\terror: \"discovered_peer_not_found\",\n\t\t\tdetail: \"That discovered device is no longer available. Refresh sync status and try again.\",\n\t\t};\n\t}\n\tconst expiresAt = String(match.expires_at ?? \"\").trim();\n\tconst expired = expiresAt ? Date.parse(expiresAt) <= Date.now() : false;\n\tif (match.stale || expired) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"discovered_peer_stale\",\n\t\t\tdetail:\n\t\t\t\t\"This discovered device's coordinator presence is stale. Wait for it to come online and refresh sync status before trusting it.\",\n\t\t};\n\t}\n\tconst nextFingerprint = String(match.fingerprint ?? \"\").trim();\n\tconst nextPublicKey = String(match.public_key ?? \"\").trim();\n\tconst nextName = String(match.display_name ?? \"\").trim() || null;\n\tconst nextAddresses = Array.isArray(match.addresses)\n\t\t? match.addresses.filter((value): value is string => typeof value === \"string\")\n\t\t: [];\n\tif (!nextPublicKey) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"discovered_peer_missing_public_key\",\n\t\t\tdetail:\n\t\t\t\t\"This discovered device is missing its coordinator public key. Refresh sync status and try again.\",\n\t\t};\n\t}\n\tif (!nextFingerprint || fingerprintPublicKey(nextPublicKey) !== nextFingerprint) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"discovered_peer_fingerprint_mismatch\",\n\t\t\tdetail:\n\t\t\t\t\"This discovered device's coordinator public key does not match its fingerprint. Refresh sync status or re-enroll the device before trusting it.\",\n\t\t};\n\t}\n\n\tconst groupIds = Array.isArray(match.groups)\n\t\t? match.groups.map((value) => String(value ?? \"\").trim()).filter(Boolean)\n\t\t: [];\n\tconst freshGroupIds = Array.isArray(match.fresh_groups)\n\t\t? match.fresh_groups.map((value) => String(value ?? \"\").trim()).filter(Boolean)\n\t\t: [];\n\tlet groupId: string;\n\tif (input.expectedGroupId) {\n\t\tif (!groupIds.includes(input.expectedGroupId)) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tstatus: 409,\n\t\t\t\terror: \"peer_not_in_group\",\n\t\t\t\tdetail:\n\t\t\t\t\t\"This discovered device is not visible through the specified coordinator group. Refresh sync status and try again.\",\n\t\t\t};\n\t\t}\n\t\tif (!freshGroupIds.includes(input.expectedGroupId)) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tstatus: 409,\n\t\t\t\terror: \"discovered_peer_stale\",\n\t\t\t\tdetail:\n\t\t\t\t\t\"This discovered device's coordinator presence is stale for the specified group. Wait for it to come online and refresh sync status before trusting it.\",\n\t\t\t};\n\t\t}\n\t\tgroupId = input.expectedGroupId;\n\t} else {\n\t\tif (groupIds.length !== 1) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tstatus: 409,\n\t\t\t\terror: \"ambiguous_coordinator_group\",\n\t\t\t\tdetail:\n\t\t\t\t\tgroupIds.length > 1\n\t\t\t\t\t\t? \"This device is visible through multiple coordinator groups. Review the team setup before approving it here.\"\n\t\t\t\t\t\t: \"This device is missing coordinator group context. Refresh sync status and try again.\",\n\t\t\t};\n\t\t}\n\t\tgroupId = groupIds[0] as string;\n\t}\n\tconst d = drizzle(store.db, { schema });\n\tconst existing = d\n\t\t.select({\n\t\t\tpeer_device_id: schema.syncPeers.peer_device_id,\n\t\t\tpinned_fingerprint: schema.syncPeers.pinned_fingerprint,\n\t\t\tpublic_key: schema.syncPeers.public_key,\n\t\t\taddresses_json: schema.syncPeers.addresses_json,\n\t\t\tdiscovered_via_group_id: schema.syncPeers.discovered_via_group_id,\n\t\t})\n\t\t.from(schema.syncPeers)\n\t\t.where(eq(schema.syncPeers.peer_device_id, input.peerDeviceId))\n\t\t.get();\n\tconst existingFingerprint = String(existing?.pinned_fingerprint ?? \"\").trim();\n\tif (existing && existingFingerprint && existingFingerprint !== nextFingerprint) {\n\t\treturn {\n\t\t\tok: false as const,\n\t\t\tstatus: 409,\n\t\t\terror: \"peer_conflict\",\n\t\t\tdetail:\n\t\t\t\t\"An existing peer with this device id is pinned to a different fingerprint. Remove or repair the old peer before accepting this discovered device.\",\n\t\t};\n\t}\n\tconst existingAddresses = (() => {\n\t\ttry {\n\t\t\tconst raw = JSON.parse(String(existing?.addresses_json ?? \"[]\"));\n\t\t\treturn Array.isArray(raw)\n\t\t\t\t? raw.filter((value): value is string => typeof value === \"string\")\n\t\t\t\t: [];\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t})();\n\tconst addressesJson = JSON.stringify(mergeAddresses(nextAddresses, existingAddresses));\n\tawait createCoordinatorReciprocalApproval(store, config, {\n\t\tgroupId,\n\t\trequestedDeviceId: input.peerDeviceId,\n\t\t...(input.expectedIncomingRequestId\n\t\t\t? { expectedIncomingRequestId: input.expectedIncomingRequestId }\n\t\t\t: {}),\n\t});\n\n\t// Resolve project-scope seed. On first enrollment (no existing row), apply\n\t// the group's scope template if auto_seed_scope is enabled. Per-field\n\t// overrides fall back to the template when undefined, so passing only\n\t// `projects_include` does not silently wipe the template's exclude list.\n\t// Existing peers are not re-scoped — the template is a seed, not a live link.\n\tconst coordinatorUrl = config.syncCoordinatorUrl || null;\n\tlet scopeInclude: string | null | undefined;\n\tlet scopeExclude: string | null | undefined;\n\tif (!existing) {\n\t\tlet templateInclude: string[] | null = null;\n\t\tlet templateExclude: string[] | null = null;\n\t\tif (coordinatorUrl) {\n\t\t\tconst prefs = getCoordinatorGroupPreference(store.db, coordinatorUrl, groupId);\n\t\t\tif (prefs?.auto_seed_scope) {\n\t\t\t\ttemplateInclude = prefs.projects_include ?? null;\n\t\t\t\ttemplateExclude = prefs.projects_exclude ?? null;\n\t\t\t}\n\t\t}\n\t\tconst overrideInclude = input.scopeOverride?.projects_include;\n\t\tconst overrideExclude = input.scopeOverride?.projects_exclude;\n\t\tconst resolvedInclude = overrideInclude === undefined ? templateInclude : overrideInclude;\n\t\tconst resolvedExclude = overrideExclude === undefined ? templateExclude : overrideExclude;\n\t\tscopeInclude = resolvedInclude ? JSON.stringify(resolvedInclude) : null;\n\t\tscopeExclude = resolvedExclude ? JSON.stringify(resolvedExclude) : null;\n\t}\n\n\tconst now = new Date().toISOString();\n\tconst result = store.db.transaction(() => {\n\t\tif (!existing) {\n\t\t\td.insert(schema.syncPeers)\n\t\t\t\t.values({\n\t\t\t\t\tpeer_device_id: input.peerDeviceId,\n\t\t\t\t\tname: nextName,\n\t\t\t\t\tpinned_fingerprint: nextFingerprint || null,\n\t\t\t\t\tpublic_key: nextPublicKey,\n\t\t\t\t\taddresses_json: addressesJson,\n\t\t\t\t\tprojects_include_json: scopeInclude ?? null,\n\t\t\t\t\tprojects_exclude_json: scopeExclude ?? null,\n\t\t\t\t\tcreated_at: now,\n\t\t\t\t\tlast_seen_at: now,\n\t\t\t\t\tdiscovered_via_coordinator_id: coordinatorUrl,\n\t\t\t\t\tdiscovered_via_group_id: groupId,\n\t\t\t\t})\n\t\t\t\t.run();\n\t\t\treturn {\n\t\t\t\tok: true as const,\n\t\t\t\tpeer_device_id: input.peerDeviceId,\n\t\t\t\tcreated: true,\n\t\t\t\tupdated: false,\n\t\t\t\tname: nextName,\n\t\t\t\tgroup_id: groupId,\n\t\t\t};\n\t\t}\n\t\td.update(schema.syncPeers)\n\t\t\t.set({\n\t\t\t\tname: nextName,\n\t\t\t\tpinned_fingerprint: nextFingerprint || existing.pinned_fingerprint || null,\n\t\t\t\tpublic_key: nextPublicKey || existing.public_key || null,\n\t\t\t\taddresses_json: addressesJson,\n\t\t\t\tlast_seen_at: now,\n\t\t\t\t// Backfill group-discovery attribution on existing rows if we know\n\t\t\t\t// it now and it wasn't stamped before. Don't overwrite a non-null\n\t\t\t\t// group reference — that would silently move the peer between\n\t\t\t\t// teams and invalidate any template-seeded scope.\n\t\t\t\t...((existing as { discovered_via_group_id?: string | null }).discovered_via_group_id\n\t\t\t\t\t? {}\n\t\t\t\t\t: { discovered_via_group_id: groupId, discovered_via_coordinator_id: coordinatorUrl }),\n\t\t\t})\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, input.peerDeviceId))\n\t\t\t.run();\n\t\treturn {\n\t\t\tok: true as const,\n\t\t\tpeer_device_id: input.peerDeviceId,\n\t\t\tcreated: false,\n\t\t\tupdated: true,\n\t\t\tname: nextName,\n\t\t\tgroup_id: groupId,\n\t\t};\n\t})();\n\treturn result;\n}\n\nfunction filterOpsForPeer(\n\tstore: MemoryStore,\n\tpeerDeviceId: string,\n\tlocalDeviceId: string | null,\n\tops: ReplicationOp[],\n\toptions: { applyScopeFilter?: boolean; supportsReassignScope?: boolean } = {},\n): { allowed: ReplicationOp[]; skipped: number; skippedDetail: SafeSkippedSyncDetail | null } {\n\tconst [allowed, , skipped] = filterReplicationOpsForSyncWithStatus(store.db, ops, peerDeviceId, {\n\t\tlocalDeviceId,\n\t\tapplyScopeFilter: options.applyScopeFilter,\n\t\tsupportsReassignScope: options.supportsReassignScope,\n\t});\n\treturn {\n\t\tallowed,\n\t\tskipped: skipped?.skipped_count ?? 0,\n\t\tskippedDetail: skipped ? safeSkippedSyncDetail(skipped) : null,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Peer row mapping — deduplicated helper (fix #4)\n// ---------------------------------------------------------------------------\n\nfunction claimedLocalActorScopeStatus(\n\tstore: MemoryStore,\n\trow: Record<string, unknown>,\n): Record<string, unknown> | null {\n\tif (!row.claimed_local_actor) return null;\n\tconst peerDeviceId = String(row.peer_device_id ?? \"\").trim();\n\tconst actorId = String(row.actor_id ?? store.actorId).trim() || store.actorId;\n\tconst grant = personalScopeGrantStatusForPeer(store.db, { peerDeviceId, actorId });\n\treturn {\n\t\tscope_id: grant.scope_id,\n\t\tauthorized: grant.authorized,\n\t\tstate: grant.state,\n\t\taction_required: !grant.authorized,\n\t};\n}\n\n/**\n * Map a raw sync_peers DB row to the API response shape.\n * When showDiag is false, sensitive fields (fingerprint, last_error, addresses)\n * are redacted.\n */\nfunction mapPeerRow(\n\tstore: MemoryStore,\n\trow: Record<string, unknown>,\n\tshowDiag: boolean,\n\trecentOpsByPeer?: Map<string, { in: number; out: number }>,\n\tscopeRejectionsByPeer?: Map<string, InboundScopeRejectionPeerSummary>,\n\tlocalDeviceId?: string | null,\n): Record<string, unknown> {\n\tconst peerId = String(row.peer_device_id ?? \"\");\n\tconst recentOps = recentOpsByPeer?.get(peerId) ?? { in: 0, out: 0 };\n\tconst scopeRejections = scopeRejectionsByPeer?.get(peerId);\n\tconst addresses = safeJsonList(row.addresses_json as string | null);\n\tconst perScopeSync = listPerPeerScopeSyncState(store.db, {\n\t\tlocalDeviceId: localDeviceId ?? null,\n\t\tpeerDeviceId: peerId,\n\t});\n\treturn {\n\t\tpeer_device_id: row.peer_device_id,\n\t\tname: row.name,\n\t\tfingerprint: showDiag ? row.pinned_fingerprint : null,\n\t\tpinned: Boolean(row.pinned_fingerprint),\n\t\taddresses: showDiag ? addresses : [],\n\t\taddress_count: addresses.length,\n\t\tlast_seen_at: row.last_seen_at,\n\t\tlast_sync_at: row.last_sync_at,\n\t\tlast_error: showDiag ? row.last_error : null,\n\t\truntime_version: row.runtime_version ?? null,\n\t\truntime_version_observed_at: row.runtime_version_observed_at ?? null,\n\t\thas_error: Boolean(row.last_error),\n\t\tclaimed_local_actor: Boolean(row.claimed_local_actor),\n\t\tclaimed_local_actor_scope: claimedLocalActorScopeStatus(store, row),\n\t\tactor_id: row.actor_id ?? null,\n\t\tactor_display_name: row.actor_display_name ?? null,\n\t\tauthorized_scopes: peerAuthorizedScopes(store, peerId),\n\t\t// Per-Space sync state intersecting local + peer membership and joining\n\t\t// per-scope replication cursor data. Use this surface to render\n\t\t// per-Space progress in CLI/UI without exposing the legacy `status=ok`\n\t\t// shorthand that hid scoped sync gaps in 0.32.x.\n\t\tper_scope_sync: perScopeSync,\n\t\tproject_scope: {\n\t\t\t...currentProjectScope(row, readPeerProjectFilters(store, String(row.peer_device_id ?? \"\"))),\n\t\t},\n\t\trecent_ops: { in: recentOps.in, out: recentOps.out },\n\t\tscope_rejections: {\n\t\t\ttotal: scopeRejections?.total ?? 0,\n\t\t\tby_reason: scopeRejections?.by_reason ?? {},\n\t\t\tlast_at: scopeRejections?.last_at ?? null,\n\t\t},\n\t\tdiscovered_via_coordinator_id:\n\t\t\ttypeof row.discovered_via_coordinator_id === \"string\"\n\t\t\t\t? row.discovered_via_coordinator_id\n\t\t\t\t: null,\n\t\tdiscovered_via_group_id:\n\t\t\ttypeof row.discovered_via_group_id === \"string\" ? row.discovered_via_group_id : null,\n\t};\n}\n\nfunction redactSyncAttemptError(error: unknown): string | null {\n\tconst text = String(error ?? \"\").trim();\n\tif (!text) return null;\n\treturn \"sync attempt failed; enable diagnostics for details\";\n}\n\nfunction mapSyncAttemptRow(\n\trow: Record<string, unknown>,\n\tshowDiag: boolean,\n\taddresses?: string[],\n): Record<string, unknown> {\n\tconst redactedError = redactSyncAttemptError(row.error);\n\treturn {\n\t\t...row,\n\t\terror: showDiag ? row.error : redactedError,\n\t\terror_redacted: !showDiag && redactedError != null,\n\t\tstatus: attemptStatus(row),\n\t\taddress: showDiag && addresses?.length ? addresses[0] : null,\n\t};\n}\n\nconst SYNC_SCOPE_REJECTION_WINDOW_SECONDS = 24 * 60 * 60;\nconst CLEANUP_DIAGNOSTICS_MAX_ROWS = 250;\n\nfunction recentScopeRejectionsByPeer(\n\tstore: MemoryStore,\n): Map<string, InboundScopeRejectionPeerSummary> {\n\tconst cutoff = new Date(Date.now() - SYNC_SCOPE_REJECTION_WINDOW_SECONDS * 1000).toISOString();\n\tconst summaries = summarizeInboundScopeRejections(store.db, { sinceIso: cutoff });\n\tconst map = new Map<string, InboundScopeRejectionPeerSummary>();\n\tfor (const summary of summaries) {\n\t\tconst id = String(summary.peer_device_id ?? \"\").trim();\n\t\tif (!id) continue;\n\t\tmap.set(id, summary);\n\t}\n\treturn map;\n}\n\nfunction cleanupDiagnostics(\n\tstore: MemoryStore,\n\tlocalDeviceId: string | null,\n\tshowDiag: boolean,\n): Record<string, unknown> {\n\tconst opRows = store.db\n\t\t.prepare(\n\t\t\t`SELECT\n\t\t\t\tSUM(CASE WHEN device_id = ? THEN 1 ELSE 0 END) AS source_authored,\n\t\t\t\tSUM(CASE WHEN device_id != ? THEN 1 ELSE 0 END) AS applied,\n\t\t\t\tMAX(created_at) AS latest_at\n\t\t\t FROM replication_ops\n\t\t\t WHERE op_type = ?`,\n\t\t)\n\t\t.get(localDeviceId ?? \"\", localDeviceId ?? \"\", ACCESS_CLEANUP_OP_TYPE) as\n\t\t| { applied: number | null; latest_at: string | null; source_authored: number | null }\n\t\t| undefined;\n\tconst stale =\n\t\tlocalDeviceId && showDiag\n\t\t\t? diagnoseStalePeerReceivedRows(store.db, {\n\t\t\t\t\tlocalDeviceId,\n\t\t\t\t\tmaxRows: CLEANUP_DIAGNOSTICS_MAX_ROWS,\n\t\t\t\t})\n\t\t\t: { ambiguous: [], checked: 0, retained: 0, would_delete: 0, would_delete_memory_ids: [] };\n\tconst ambiguousByReason: Record<string, number> = {};\n\tfor (const item of stale.ambiguous) {\n\t\tambiguousByReason[item.reason] = (ambiguousByReason[item.reason] ?? 0) + 1;\n\t}\n\tconst sourceAuthored = Number(opRows?.source_authored ?? 0);\n\tconst applied = Number(opRows?.applied ?? 0);\n\tconst ambiguous = stale.ambiguous.length;\n\tconst state = stale.would_delete\n\t\t? \"cleanup_pending\"\n\t\t: ambiguous\n\t\t\t? \"needs_review\"\n\t\t\t: applied\n\t\t\t\t? \"cleanup_applied\"\n\t\t\t\t: sourceAuthored\n\t\t\t\t\t? \"cleanup_announced\"\n\t\t\t\t\t: \"clear\";\n\treturn {\n\t\tstate,\n\t\taccess_cleanup_ops: {\n\t\t\tsource_authored: sourceAuthored,\n\t\t\tapplied,\n\t\t\tlatest_at: opRows?.latest_at ?? null,\n\t\t},\n\t\tstale_peer_rows: {\n\t\t\tchecked: stale.checked,\n\t\t\tdiagnostic_limit: showDiag ? CLEANUP_DIAGNOSTICS_MAX_ROWS : 0,\n\t\t\tscan_skipped: !showDiag || !localDeviceId,\n\t\t\twould_remove: stale.would_delete,\n\t\t\tambiguous,\n\t\t\tambiguous_by_reason: ambiguousByReason,\n\t\t\tretained: stale.retained,\n\t\t\titems: showDiag ? stale.ambiguous.slice(0, 25) : undefined,\n\t\t},\n\t\tredacted: !showDiag,\n\t};\n}\n\nfunction legacySharedReviewSummary(store: MemoryStore): Record<string, unknown> {\n\tconst rows = legacySharedReviewRows(store);\n\tconst memoryCount = rows.length;\n\tconst lastUpdatedAt = rows.reduce<string | null>(\n\t\t(current, row) =>\n\t\t\trow.updated_at && (!current || row.updated_at > current) ? row.updated_at : current,\n\t\tnull,\n\t);\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\tconst candidatesByIdentity = new Map(\n\t\tlistProjectScopeCandidates(store.db, { limit: null }).map((candidate) => [\n\t\t\tcandidate.workspace_identity,\n\t\t\tcandidate,\n\t\t]),\n\t);\n\tconst groupsByIdentity = new Map<\n\t\tstring,\n\t\t{\n\t\t\tworkspace_identity: string;\n\t\t\tidentity_source: string;\n\t\t\tdisplay_project: string;\n\t\t\tmemory_count: number;\n\t\t\treassignable_memory_count: number;\n\t\t\tpeer_owned_memory_count: number;\n\t\t\tlast_updated_at: string | null;\n\t\t\tmemory_samples: LegacySharedReviewMemorySample[];\n\t\t\tsuggested_scope_id: string | null;\n\t\t\tsuggestion_reason: string | null;\n\t\t}\n\t>();\n\tfor (const row of rows) {\n\t\tconst identity = canonicalWorkspaceIdentity({\n\t\t\tcwd: row.cwd,\n\t\t\tgitBranch: row.git_branch,\n\t\t\tgitRemote: row.git_remote,\n\t\t\tproject: row.project,\n\t\t\tworkspaceId: row.workspace_id,\n\t\t});\n\t\tconst candidate = candidatesByIdentity.get(identity.value);\n\t\tconst resolvedScope = candidate?.resolved_scope_id ?? null;\n\t\tconst suggestedScope =\n\t\t\tresolvedScope &&\n\t\t\tresolvedScope !== LOCAL_DEFAULT_SCOPE_ID &&\n\t\t\tresolvedScope !== LEGACY_SHARED_REVIEW_SCOPE_ID\n\t\t\t\t? resolvedScope\n\t\t\t\t: candidate?.suggested_scope_id;\n\t\tconst existing = groupsByIdentity.get(identity.value);\n\t\tconst isOwnedBySelf = ownedBySelf(row as unknown as Record<string, unknown>);\n\t\tconst rowUpdatedAt = row.updated_at ?? null;\n\t\tif (existing) {\n\t\t\texisting.memory_count += 1;\n\t\t\tif (isOwnedBySelf) existing.reassignable_memory_count += 1;\n\t\t\telse existing.peer_owned_memory_count += 1;\n\t\t\tif (rowUpdatedAt && (!existing.last_updated_at || rowUpdatedAt > existing.last_updated_at)) {\n\t\t\t\texisting.last_updated_at = rowUpdatedAt;\n\t\t\t}\n\t\t\tif (existing.memory_samples.length < LEGACY_SHARED_REVIEW_SAMPLE_LIMIT) {\n\t\t\t\texisting.memory_samples.push(legacySharedReviewMemorySample(row, isOwnedBySelf));\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tgroupsByIdentity.set(identity.value, {\n\t\t\tworkspace_identity: identity.value,\n\t\t\tidentity_source: identity.source,\n\t\t\tdisplay_project: identity.displayProject ?? row.project ?? row.cwd ?? identity.value,\n\t\t\tmemory_count: 1,\n\t\t\treassignable_memory_count: isOwnedBySelf ? 1 : 0,\n\t\t\tpeer_owned_memory_count: isOwnedBySelf ? 0 : 1,\n\t\t\tlast_updated_at: rowUpdatedAt,\n\t\t\tmemory_samples: [legacySharedReviewMemorySample(row, isOwnedBySelf)],\n\t\t\tsuggested_scope_id: suggestedScope ?? null,\n\t\t\tsuggestion_reason: suggestedScope\n\t\t\t\t? (candidate?.suggestion_reason ??\n\t\t\t\t\t\"Existing project mapping can be reviewed as a destination, but legacy data is not promoted automatically.\")\n\t\t\t\t: null,\n\t\t});\n\t}\n\tconst totalGroupCount = groupsByIdentity.size;\n\tconst groups = [...groupsByIdentity.values()].sort(\n\t\t(left, right) =>\n\t\t\tright.memory_count - left.memory_count ||\n\t\t\t(right.last_updated_at ?? \"\").localeCompare(left.last_updated_at ?? \"\") ||\n\t\t\tleft.workspace_identity.localeCompare(right.workspace_identity),\n\t);\n\tconst targetScopes = listSharingDomainSettingsScopes(store.db)\n\t\t.filter(\n\t\t\t(scope) =>\n\t\t\t\tscope.scope_id !== LOCAL_DEFAULT_SCOPE_ID &&\n\t\t\t\tscope.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID,\n\t\t)\n\t\t.map((scope) => ({\n\t\t\tauthority_type: scope.authority_type,\n\t\t\tlabel: scope.label || scope.scope_id,\n\t\t\tscope_id: scope.scope_id,\n\t\t}));\n\treturn {\n\t\tscope_id: LEGACY_SHARED_REVIEW_SCOPE_ID,\n\t\tmemory_count: memoryCount,\n\t\thas_data: memoryCount > 0,\n\t\tlast_updated_at: lastUpdatedAt,\n\t\tgroups,\n\t\ttotal_group_count: totalGroupCount,\n\t\ttarget_scopes: targetScopes,\n\t};\n}\n\ninterface LegacySharedReviewReassignmentMemoryRow {\n\tid: number;\n\trev: number | null;\n\tactive: number | null;\n\tdeleted_at: string | null;\n\tcreated_at: string | null;\n\tupdated_at: string | null;\n\tscope_id: string | null;\n\tkind: string | null;\n\ttitle: string | null;\n\tbody_text: string | null;\n\tproject: string | null;\n\tcwd: string | null;\n\tgit_remote: string | null;\n\tgit_branch: string | null;\n\tworkspace_id: string | null;\n\tactor_id: string | null;\n\torigin_device_id: string | null;\n\tmetadata_json: string | null;\n}\n\nconst LEGACY_SHARED_REVIEW_SAMPLE_LIMIT = 3;\nconst LEGACY_SHARED_REVIEW_BODY_PREVIEW_SQL_LIMIT = 360;\n\ninterface LegacySharedReviewMemorySample {\n\tid: number;\n\tkind: string | null;\n\ttitle: string;\n\tbody_preview: string | null;\n\tcreated_at: string | null;\n\tupdated_at: string | null;\n\townership: \"local\" | \"peer\";\n\tproject: string | null;\n\tcwd: string | null;\n\tgit_remote: string | null;\n}\n\nfunction previewText(value: string | null | undefined, limit = 180): string | null {\n\tconst normalized = value?.replace(/\\s+/g, \" \").trim();\n\tif (!normalized) return null;\n\treturn normalized.length > limit ? `${normalized.slice(0, limit - 1)}…` : normalized;\n}\n\nfunction legacySharedReviewMemorySample(\n\trow: LegacySharedReviewReassignmentMemoryRow,\n\tisOwnedBySelf: boolean,\n): LegacySharedReviewMemorySample {\n\treturn {\n\t\tid: row.id,\n\t\tkind: row.kind,\n\t\ttitle: previewText(row.title, 120) ?? `Memory ${row.id}`,\n\t\tbody_preview: previewText(row.body_text),\n\t\tcreated_at: row.created_at ?? null,\n\t\tupdated_at: row.updated_at ?? null,\n\t\townership: isOwnedBySelf ? \"local\" : \"peer\",\n\t\tproject: row.project ?? null,\n\t\tcwd: row.cwd ?? null,\n\t\tgit_remote: row.git_remote ?? null,\n\t};\n}\n\nfunction legacySharedReviewRows(store: MemoryStore): LegacySharedReviewReassignmentMemoryRow[] {\n\treturn store.db\n\t\t.prepare(\n\t\t\t`SELECT m.id,\n\t\t\t m.rev,\n\t\t\t m.active,\n\t\t\t m.deleted_at,\n\t\t\t m.created_at,\n\t\t\t m.updated_at,\n\t\t\t m.scope_id,\n\t\t\t m.kind,\n\t\t\t m.title,\n\t\t\t\t substr(m.body_text, 1, ?) AS body_text,\n\t\t\t s.project,\n\t\t\t s.cwd,\n\t\t\t s.git_remote,\n\t\t\t s.git_branch,\n\t\t\t m.workspace_id,\n\t\t\t m.actor_id,\n\t\t\t m.origin_device_id,\n\t\t\t m.metadata_json\n\t\t\t FROM memory_items m\n\t\t\t LEFT JOIN sessions s ON s.id = m.session_id\n\t\t\t WHERE m.scope_id = ?\n\t\t\t AND m.active = 1\n\t\t\t AND m.deleted_at IS NULL\n\t\t\t ORDER BY COALESCE(m.updated_at, m.created_at, '') DESC, m.id DESC`,\n\t\t)\n\t\t.all(\n\t\t\tLEGACY_SHARED_REVIEW_BODY_PREVIEW_SQL_LIMIT,\n\t\t\tLEGACY_SHARED_REVIEW_SCOPE_ID,\n\t\t) as LegacySharedReviewReassignmentMemoryRow[];\n}\n\nfunction legacySharedReviewConfirmationToken(input: {\n\trows: LegacySharedReviewReassignmentMemoryRow[];\n\tscopeId: string;\n\tstore: MemoryStore;\n\tworkspaceIdentity: string;\n}): string {\n\tconst ownedBySelf = input.store.buildOwnershipPredicate();\n\tconst payload = input.rows\n\t\t.map((row) => {\n\t\t\tconst ownership = ownedBySelf(row as unknown as Record<string, unknown>) ? \"local\" : \"peer\";\n\t\t\treturn `${row.id}:${row.rev ?? 0}:${row.scope_id ?? \"\"}:${ownership}`;\n\t\t})\n\t\t.sort()\n\t\t.join(\",\");\n\treturn Buffer.from(`${input.workspaceIdentity}|${input.scopeId}|${payload}`, \"utf8\").toString(\n\t\t\"base64url\",\n\t);\n}\n\ninterface LegacySharedReviewReassignmentPreview {\n\tconfirmation_token: string;\n\tworkspace_identity: string;\n\tscope_id: string;\n\ttarget_scope_label: string;\n\tmemory_count: number;\n\treassignable_memory_count: number;\n\tskipped_memory_count: number;\n\taffected_peer_device_count: number;\n\taffected_peer_device_ids: string[];\n\twarning: string;\n}\n\ninterface ProjectInventoryMemoryRow {\n\tid: number;\n\trev: number | null;\n\tproject: string | null;\n\tcwd: string | null;\n\tgit_remote: string | null;\n\tgit_branch: string | null;\n\tworkspace_id: string | null;\n\tactor_id: string | null;\n\torigin_device_id: string | null;\n\tmetadata_json: string | null;\n}\n\nfunction projectInventoryRowsForWorkspace(\n\tstore: MemoryStore,\n\tworkspaceIdentity: string,\n): ProjectInventoryMemoryRow[] {\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT m.id,\n\t\t\t m.rev,\n\t\t\t s.project,\n\t\t\t s.cwd,\n\t\t\t s.git_remote,\n\t\t\t s.git_branch,\n\t\t\t m.workspace_id,\n\t\t\t m.actor_id,\n\t\t\t m.origin_device_id,\n\t\t\t m.metadata_json\n\t\t\t FROM memory_items m\n\t\t\t LEFT JOIN sessions s ON s.id = m.session_id\n\t\t\t WHERE m.active = 1\n\t\t\t AND m.deleted_at IS NULL`,\n\t\t)\n\t\t.all() as ProjectInventoryMemoryRow[];\n\treturn rows.filter((row) => {\n\t\tconst identity = canonicalWorkspaceIdentity({\n\t\t\tcwd: row.cwd,\n\t\t\tgitBranch: row.git_branch,\n\t\t\tgitRemote: row.git_remote,\n\t\t\tproject: row.project,\n\t\t\tworkspaceId: row.workspace_id,\n\t\t});\n\t\treturn identity.value === workspaceIdentity;\n\t});\n}\n\nfunction projectForgetConfirmationToken(\n\tstore: MemoryStore,\n\trows: ProjectInventoryMemoryRow[],\n): string {\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\tconst payload = rows\n\t\t.map((row) => {\n\t\t\tconst ownership = ownedBySelf(row as unknown as Record<string, unknown>) ? \"local\" : \"peer\";\n\t\t\treturn `${row.id}:${row.rev ?? 0}:${ownership}`;\n\t\t})\n\t\t.sort()\n\t\t.join(\",\");\n\treturn Buffer.from(payload, \"utf8\").toString(\"base64url\");\n}\n\nfunction forgetProjectInventoryLocalMemories(\n\tstore: MemoryStore,\n\tinput: { confirmationToken?: string | null; confirmed: boolean; workspaceIdentity: string },\n): Record<string, unknown> {\n\tif (!input.workspaceIdentity.trim()) {\n\t\tthrow new Error(\"workspace_identity must be a non-empty string\");\n\t}\n\tconst rows = projectInventoryRowsForWorkspace(store, input.workspaceIdentity);\n\tif (rows.length === 0) throw new Error(\"project identity not found\");\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\tconst localRows = rows.filter((row) => ownedBySelf(row as unknown as Record<string, unknown>));\n\tconst confirmationToken = projectForgetConfirmationToken(store, rows);\n\tconst preview = {\n\t\tconfirmation_token: confirmationToken,\n\t\tlocal_owned_memory_count: localRows.length,\n\t\tpeer_owned_memory_count: rows.length - localRows.length,\n\t\tworkspace_identity: input.workspaceIdentity,\n\t};\n\tif (!input.confirmed) {\n\t\treturn { confirmed: false, ...preview };\n\t}\n\tif (input.confirmationToken !== confirmationToken) {\n\t\tthrow new Error(\"project memories changed before cleanup; refresh and try again\");\n\t}\n\tstore.db.transaction(() => {\n\t\tfor (const row of localRows) store.forget(row.id);\n\t})();\n\treturn { confirmed: true, forgotten_memory_count: localRows.length, ...preview };\n}\n\nfunction assertLocalDeviceScopeMembership(store: MemoryStore, scopeId: string): void {\n\tif (scopeId === LOCAL_DEFAULT_SCOPE_ID) return;\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t`SELECT 1\n\t\t\t FROM scope_memberships sm\n\t\t\t JOIN replication_scopes rs ON rs.scope_id = sm.scope_id\n\t\t\t WHERE sm.scope_id = ?\n\t\t\t AND sm.device_id = ?\n\t\t\t AND sm.status = 'active'\n\t\t\t AND rs.status = 'active'\n\t\t\t AND sm.membership_epoch >= rs.membership_epoch\n\t\t\t LIMIT 1`,\n\t\t)\n\t\t.get(scopeId, store.deviceId);\n\tif (!row) throw new Error(`local device is not a member of Sharing domain ${scopeId}`);\n}\n\nfunction legacySharedReviewRowsForWorkspace(\n\tstore: MemoryStore,\n\tworkspaceIdentity: string,\n): LegacySharedReviewReassignmentMemoryRow[] {\n\treturn legacySharedReviewRows(store).filter((row) => {\n\t\tconst identity = canonicalWorkspaceIdentity({\n\t\t\tcwd: row.cwd,\n\t\t\tgitBranch: row.git_branch,\n\t\t\tgitRemote: row.git_remote,\n\t\t\tproject: row.project,\n\t\t\tworkspaceId: row.workspace_id,\n\t\t});\n\t\treturn identity.value === workspaceIdentity;\n\t});\n}\n\nfunction reassignableLegacySharedReviewRows(\n\tstore: MemoryStore,\n\trows: LegacySharedReviewReassignmentMemoryRow[],\n): LegacySharedReviewReassignmentMemoryRow[] {\n\tconst reassignableRows = rows.filter((row) =>\n\t\tstore.memoryOwnedBySelf(row as unknown as Record<string, unknown>),\n\t);\n\tif (reassignableRows.length === 0) {\n\t\tthrow new Error(\n\t\t\t\"This legacy review group contains only peer-owned memories; this device cannot reassign them to a Sharing domain.\",\n\t\t);\n\t}\n\tconst currentRows = store.db\n\t\t.prepare(\n\t\t\t`SELECT id, scope_id, active, deleted_at\n\t\t\t FROM memory_items\n\t\t\t WHERE id IN (${reassignableRows.map(() => \"?\").join(\",\")})`,\n\t\t)\n\t\t.all(...reassignableRows.map((row) => row.id)) as Array<{\n\t\tactive: number | null;\n\t\tdeleted_at: string | null;\n\t\tid: number;\n\t\tscope_id: string | null;\n\t}>;\n\tconst currentById = new Map(currentRows.map((row) => [Number(row.id), row]));\n\tfor (const row of reassignableRows) {\n\t\tconst current = currentById.get(row.id);\n\t\tif (\n\t\t\tcurrent?.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID ||\n\t\t\tcurrent.active !== 1 ||\n\t\t\tcurrent.deleted_at\n\t\t) {\n\t\t\tthrow new Error(\n\t\t\t\t\"legacy shared review group changed before reassignment; refresh and try again\",\n\t\t\t);\n\t\t}\n\t}\n\treturn reassignableRows;\n}\n\nfunction legacySharedReviewReassignmentPreview(\n\tstore: MemoryStore,\n\tinput: { scopeId: string; workspaceIdentity: string },\n): LegacySharedReviewReassignmentPreview {\n\tif (!input.workspaceIdentity.trim())\n\t\tthrow new Error(\"workspace_identity must be a non-empty string\");\n\tif (!input.scopeId.trim()) throw new Error(\"scope_id must be a non-empty string\");\n\tif (input.scopeId === LOCAL_DEFAULT_SCOPE_ID) {\n\t\tthrow new Error(\"local-default is not a valid target for legacy shared review reassignment\");\n\t}\n\tif (input.scopeId === LEGACY_SHARED_REVIEW_SCOPE_ID) {\n\t\tthrow new Error(\"legacy-shared-review is a review bucket, not an assignable Sharing domain\");\n\t}\n\tconst targetScope = listSharingDomainSettingsScopes(store.db).find(\n\t\t(scope) => scope.scope_id === input.scopeId,\n\t);\n\tif (!targetScope) throw new Error(`scope_id ${input.scopeId} is not an active Sharing domain`);\n\tassertLocalDeviceScopeMembership(store, input.scopeId);\n\tconst rows = legacySharedReviewRowsForWorkspace(store, input.workspaceIdentity);\n\tif (rows.length === 0) throw new Error(\"legacy shared review group not found\");\n\tconst reassignableRows = reassignableLegacySharedReviewRows(store, rows);\n\tconst peerDeviceIds = [\n\t\t...new Set(\n\t\t\trows\n\t\t\t\t.map((row) => String(row.origin_device_id ?? \"\").trim())\n\t\t\t\t.filter((deviceId) => deviceId && deviceId !== store.deviceId),\n\t\t),\n\t].sort();\n\treturn {\n\t\taffected_peer_device_count: peerDeviceIds.length,\n\t\taffected_peer_device_ids: peerDeviceIds.slice(0, 5),\n\t\tconfirmation_token: legacySharedReviewConfirmationToken({\n\t\t\trows,\n\t\t\tscopeId: input.scopeId,\n\t\t\tstore,\n\t\t\tworkspaceIdentity: input.workspaceIdentity,\n\t\t}),\n\t\tmemory_count: rows.length,\n\t\treassignable_memory_count: reassignableRows.length,\n\t\tscope_id: input.scopeId,\n\t\tskipped_memory_count: rows.length - reassignableRows.length,\n\t\ttarget_scope_label: targetScope.label || targetScope.scope_id,\n\t\twarning:\n\t\t\t\"This device can reassign only locally owned memories. Peer-owned copies must be fixed on their source device. Online compatible peers should converge after syncing, but offline devices, backups, copied databases, malicious peers, or old versions may retain old copies.\",\n\t\tworkspace_identity: input.workspaceIdentity,\n\t};\n}\n\nfunction reassignLegacySharedReviewGroup(\n\tstore: MemoryStore,\n\tinput: { confirmationToken?: string | null; scopeId: string; workspaceIdentity: string },\n): Record<string, unknown> {\n\tconst preview = legacySharedReviewReassignmentPreview(store, input);\n\tif (input.confirmationToken !== preview.confirmation_token) {\n\t\tthrow new Error(\n\t\t\t\"legacy shared review group changed before reassignment; refresh and try again\",\n\t\t);\n\t}\n\tconst rows = reassignableLegacySharedReviewRows(\n\t\tstore,\n\t\tlegacySharedReviewRowsForWorkspace(store, input.workspaceIdentity),\n\t);\n\tstore.db.transaction(() => {\n\t\tfor (const row of rows) store.reassignMemoryScope(row.id, input.scopeId);\n\t})();\n\treturn {\n\t\tok: true,\n\t\t...preview,\n\t\treassigned_memory_count: rows.length,\n\t\tlegacy_shared_review: legacySharedReviewSummary(store),\n\t};\n}\n\n// Aggregate ops_in / ops_out across recent successful sync_attempts per peer.\n// Window: last 24 hours. Feeds the per-peer direction glyph on the Sync tab\n// (↕ bidirectional, ↑ publishing, ↓ subscribed) off real traffic instead of\n// an invented peer-role field.\nconst SYNC_DIRECTION_WINDOW_SECONDS = 24 * 60 * 60;\n\nfunction recentPeerOps(store: MemoryStore): Map<string, { in: number; out: number }> {\n\tconst cutoff = new Date(Date.now() - SYNC_DIRECTION_WINDOW_SECONDS * 1000).toISOString();\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT peer_device_id,\n\t\t\t COALESCE(SUM(ops_in), 0) AS ops_in,\n\t\t\t COALESCE(SUM(ops_out), 0) AS ops_out\n\t\t\t FROM sync_attempts\n\t\t\t WHERE ok = 1 AND finished_at IS NOT NULL AND finished_at >= ?\n\t\t\t GROUP BY peer_device_id`,\n\t\t)\n\t\t.all(cutoff) as Array<{\n\t\tpeer_device_id: string | null;\n\t\tops_in: number | null;\n\t\tops_out: number | null;\n\t}>;\n\tconst map = new Map<string, { in: number; out: number }>();\n\tfor (const row of rows) {\n\t\tconst id = String(row.peer_device_id ?? \"\").trim();\n\t\tif (!id) continue;\n\t\tmap.set(id, { in: Number(row.ops_in ?? 0), out: Number(row.ops_out ?? 0) });\n\t}\n\treturn map;\n}\n\n// ---------------------------------------------------------------------------\n// Peer status helpers\n// ---------------------------------------------------------------------------\n\nfunction isRecentIso(value: unknown, windowS = SYNC_STALE_AFTER_SECONDS): boolean {\n\tconst raw = String(value ?? \"\").trim();\n\tif (!raw) return false;\n\tconst normalized = raw.replace(\"Z\", \"+00:00\");\n\tconst hasOffset = /(?:Z|[+-]\\d{2}:?\\d{2})$/i.test(raw);\n\tconst ts = new Date(hasOffset ? normalized : `${normalized}+00:00`);\n\tif (Number.isNaN(ts.getTime())) return false;\n\tconst ageS = (Date.now() - ts.getTime()) / 1000;\n\treturn ageS >= 0 && ageS <= windowS;\n}\n\nfunction peerStatus(peer: Record<string, unknown>): Record<string, unknown> {\n\tconst lastSyncAt = peer.last_sync_at;\n\tconst lastPingAt = peer.last_seen_at;\n\tconst hasError = Boolean(peer.has_error);\n\n\tconst syncFresh = isRecentIso(lastSyncAt);\n\tconst pingFresh = isRecentIso(lastPingAt);\n\n\tlet peerState: string;\n\tif (hasError && !(syncFresh || pingFresh)) peerState = \"offline\";\n\telse if (hasError) peerState = \"degraded\";\n\telse if (syncFresh || pingFresh) peerState = \"online\";\n\telse if (lastSyncAt || lastPingAt) peerState = \"stale\";\n\telse peerState = \"unknown\";\n\n\tconst syncStatus = hasError ? \"error\" : syncFresh ? \"ok\" : lastSyncAt ? \"stale\" : \"unknown\";\n\tconst pingStatus = pingFresh ? \"ok\" : lastPingAt ? \"stale\" : \"unknown\";\n\n\treturn {\n\t\tsync_status: syncStatus,\n\t\tping_status: pingStatus,\n\t\tpeer_state: peerState,\n\t\tfresh: syncFresh || pingFresh,\n\t\tlast_sync_at: lastSyncAt,\n\t\tlast_ping_at: lastPingAt,\n\t};\n}\n\nfunction attemptStatus(attempt: Record<string, unknown>): string {\n\tif (attempt.ok) return \"ok\";\n\tif (attempt.error) return \"error\";\n\treturn \"unknown\";\n}\n\nfunction readViewerBinding(dbPath: string): { host: string; port: number } | null {\n\ttry {\n\t\tconst raw = readFileSync(join(dirname(dbPath), \"viewer.pid\"), \"utf8\");\n\t\tconst parsed = JSON.parse(raw) as Partial<{ host: string; port: number }>;\n\t\tif (typeof parsed.host === \"string\" && typeof parsed.port === \"number\") {\n\t\t\treturn { host: parsed.host, port: parsed.port };\n\t\t}\n\t} catch {\n\t\t// ignore missing/malformed pidfile\n\t}\n\treturn null;\n}\n\nconst PEERS_QUERY = `\n\tSELECT p.peer_device_id, p.name, p.pinned_fingerprint, p.addresses_json,\n\t p.last_seen_at, p.last_sync_at, p.last_error,\n\t p.runtime_version, p.runtime_version_observed_at,\n\t p.projects_include_json, p.projects_exclude_json, p.claimed_local_actor,\n\t p.actor_id, p.discovered_via_coordinator_id, p.discovered_via_group_id,\n\t a.display_name AS actor_display_name\n\tFROM sync_peers AS p\n\tLEFT JOIN actors AS a ON a.actor_id = p.actor_id\n\tORDER BY name, peer_device_id\n`;\n\n// ---------------------------------------------------------------------------\n// Route factory\n// ---------------------------------------------------------------------------\n\n/**\n * Compute the negotiated sync capability for a request by combining the\n * server's local capability with the value the caller advertised in the\n * `X-Codemem-Sync-Capability` header. Routes use this to decide whether to\n * honor scoped-sync wire features such as explicit `scope_id` parameters\n * and `/v1/status` `authorized_scopes` enumeration.\n *\n * Threat model: this header is intentionally only a best-effort capability\n * advertisement. It is not signed, so an authenticated paired peer — or a\n * bootstrap worker presenting a valid grant on `/v1/status` — can claim\n * `scoped` support and cause status to enumerate the scopes that caller is\n * already authorized to see. That is metadata disclosure inside the paired-peer\n * or bootstrap-grant trust boundary, not data authorization. Every scoped data\n * path still requires signed requests and checks membership before returning\n * scope contents.\n */\nfunction negotiatedSyncCapability(c: Context) {\n\tconst header = c.req.header(SYNC_CAPABILITY_HEADER) ?? null;\n\treturn negotiateSyncCapability(LOCAL_SYNC_CAPABILITY, normalizeSyncCapability(header));\n}\n\n/**\n * Peer-to-peer sync protocol routes (/v1/*).\n *\n * These are mounted on the sync listener (0.0.0.0:7337) and are\n * network-accessible. All requests are auth-gated via signature\n * verification so unauthenticated callers are rejected.\n */\nexport function syncProtocolRoutes(getStore: StoreFactory, opts: SyncProtocolRouteOptions = {}) {\n\tconst app = new Hono();\n\tconst routeRateLimit = opts.routeRateLimit ?? null;\n\n\tfunction rateLimitedResponse(c: Context, key: string, authenticated: boolean) {\n\t\tif (!routeRateLimit) return null;\n\t\tconst isRead = c.req.method === \"GET\" || c.req.method === \"HEAD\" || c.req.method === \"OPTIONS\";\n\t\tconst result = routeRateLimit.limiter.check(\n\t\t\t`${c.req.method}:${authenticated ? \"auth\" : \"anon\"}:${key}`,\n\t\t\tauthenticated\n\t\t\t\t? isRead\n\t\t\t\t\t? routeRateLimit.readLimit\n\t\t\t\t\t: routeRateLimit.mutationLimit\n\t\t\t\t: isRead\n\t\t\t\t\t? routeRateLimit.unauthenticatedReadLimit\n\t\t\t\t\t: routeRateLimit.unauthenticatedMutationLimit,\n\t\t);\n\t\tif (result.allowed) return null;\n\t\tc.header(\"Retry-After\", String(result.retryAfterS));\n\t\treturn c.json({ error: \"rate_limited\", retry_after_s: result.retryAfterS }, 429);\n\t}\n\n\t// GET /v1/status (peer sync protocol)\n\tapp.get(\"/v1/status\", (c) => {\n\t\tconst store = getStore();\n\t\treturn (async () => {\n\t\t\tlet auth = authorizeSyncRequest(store, c.req, Buffer.alloc(0));\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tlet preauthChecked = false;\n\t\t\tlet bootstrapAttempted = false;\n\t\t\tlet deviceAuthReason: string | null = null;\n\t\t\tif (!auth.ok) {\n\t\t\t\tconst bootstrapGrantId = (c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim();\n\t\t\t\tif (bootstrapGrantId) {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\t// Use unauthenticated bucket with stable key — grant is not yet verified,\n\t\t\t\t\t// so caller-controlled headers must not influence rate-limit identity.\n\t\t\t\t\tconst bootstrapLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (bootstrapLimited) return bootstrapLimited;\n\t\t\t\t} else {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\tconst unauthLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (unauthLimited) return unauthLimited;\n\t\t\t\t}\n\t\t\t\tdeviceAuthReason = auth.reason;\n\t\t\t\tauth = await authorizeBootstrapGrantRequest(store, c.req, Buffer.alloc(0));\n\t\t\t\tbootstrapAttempted = true;\n\t\t\t}\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tif (!auth.ok) {\n\t\t\t\t// Specific reasons stay server-side; wire responses remain generic.\n\t\t\t\tconst grantPresent = Boolean((c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim());\n\t\t\t\t// Warn only when the caller actually attempted authentication (a\n\t\t\t\t// grant or signed device headers); bare probes and health checks\n\t\t\t\t// must not fill logs with attacker-controllable noise.\n\t\t\t\tconst authAttempted =\n\t\t\t\t\tgrantPresent || (deviceAuthReason != null && deviceAuthReason !== \"missing_headers\");\n\t\t\t\tif (bootstrapAttempted && authAttempted) {\n\t\t\t\t\tconsole.warn(\n\t\t\t\t\t\t`[sync] peer auth failed: reason=${auth.reason} device_auth_reason=${deviceAuthReason ?? \"none\"} grant_present=${grantPresent} path=${c.req.path} device=${loggableHeaderValue(c.req.header(\"X-Opencode-Device\"))}`,\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tlogDirectPeerAuthDiagnostic(deviceAuthReason, auth.reason);\n\t\t\t\t}\n\t\t\t\treturn (\n\t\t\t\t\t(preauthChecked ? null : rateLimitedResponse(c, c.req.path, false)) ??\n\t\t\t\t\tc.json(unauthorizedPayload(), 401)\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\t\tif (limited) return limited;\n\n\t\t\ttry {\n\t\t\t\tif (\n\t\t\t\t\tc.req.header(SYNC_AUTHORIZATION_REFRESH_HEADER) === \"1\" &&\n\t\t\t\t\tsupportsSyncFeature(c.req.header(SYNC_FEATURES_HEADER), \"reassign_scope\")\n\t\t\t\t) {\n\t\t\t\t\t// Project-first provisioning grants at the coordinator immediately before\n\t\t\t\t\t// this status probe. Refresh now so the managed scope can participate in\n\t\t\t\t\t// the same initial sync pass instead of waiting for the daemon interval.\n\t\t\t\t\tawait refreshConfiguredScopeMembershipCache(store.db, undefined, {\n\t\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tconst [deviceId, fingerprint] = ensureDeviceIdentity(store.db, {\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t});\n\t\t\t\tconst syncReset = getSyncResetState(store.db);\n\t\t\t\tconst negotiated = negotiatedSyncCapability(c);\n\t\t\t\tconst authorizedScopes = isScopedSyncCapability(negotiated)\n\t\t\t\t\t? listAuthorizedScopesForPeer(store.db, {\n\t\t\t\t\t\t\tlocalDeviceId: deviceId,\n\t\t\t\t\t\t\tpeerDeviceId: auth.deviceId,\n\t\t\t\t\t\t})\n\t\t\t\t\t: null;\n\t\t\t\tconst response: Record<string, unknown> = {\n\t\t\t\t\tdevice_id: deviceId,\n\t\t\t\t\tprotocol_version: SYNC_PROTOCOL_VERSION,\n\t\t\t\t\tfingerprint,\n\t\t\t\t\truntime_version: VERSION,\n\t\t\t\t\tsync_reset: addSyncScopeToBoundary(syncReset, null),\n\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\tsync_features: LOCAL_SYNC_FEATURES,\n\t\t\t\t};\n\t\t\t\tif (authorizedScopes !== null) {\n\t\t\t\t\tresponse.authorized_scopes = authorizedScopes;\n\t\t\t\t}\n\t\t\t\treturn c.json(response);\n\t\t\t} catch {\n\t\t\t\treturn c.json({ error: \"internal_error\" }, 500);\n\t\t\t}\n\t\t})();\n\t});\n\n\t// GET /v1/ops (peer sync protocol)\n\tapp.get(\"/v1/ops\", (c) => {\n\t\tconst store = getStore();\n\t\tconst auth = authorizeSyncRequest(store, c.req, Buffer.alloc(0));\n\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\tif (!auth.ok) {\n\t\t\tlogDirectPeerAuthDiagnostic(auth.reason);\n\t\t\treturn rateLimitedResponse(c, c.req.path, false) ?? c.json(unauthorizedPayload(), 401);\n\t\t}\n\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\tif (limited) return limited;\n\t\tconst peerDeviceId = auth.deviceId;\n\n\t\ttry {\n\t\t\tconst rawScopeId = c.req.query(SYNC_SCOPE_QUERY_PARAM);\n\t\t\tconst negotiated = negotiatedSyncCapability(c);\n\t\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst scopeRequest = parseSyncScopeRequest(rawScopeId, rawScopeId !== undefined, {\n\t\t\t\tdb: store.db,\n\t\t\t\tlocalDeviceId,\n\t\t\t\tnegotiatedCapability: negotiated,\n\t\t\t\tpeerDeviceId,\n\t\t\t});\n\t\t\tif (!scopeRequest.ok) {\n\t\t\t\treturn c.json(\n\t\t\t\t\tsyncScopeResetRequiredPayload(\n\t\t\t\t\t\tgetSyncResetState(store.db),\n\t\t\t\t\t\tscopeRequest.reason,\n\t\t\t\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\t\t\t\tnull,\n\t\t\t\t\t),\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst since = c.req.query(\"since\") ?? null;\n\t\t\tconst rawLimit = Number.parseInt(c.req.query(\"limit\") ?? \"200\", 10);\n\t\t\tconst rawGeneration = c.req.query(\"generation\");\n\t\t\tconst generation =\n\t\t\t\trawGeneration != null && rawGeneration.trim().length > 0\n\t\t\t\t\t? Number.parseInt(rawGeneration, 10)\n\t\t\t\t\t: null;\n\t\t\tconst snapshotId = c.req.query(\"snapshot_id\") ?? null;\n\t\t\tconst baselineCursor = c.req.query(\"baseline_cursor\") ?? null;\n\t\t\tconst limit = Number.isFinite(rawLimit) ? Math.max(1, Math.min(rawLimit, 1000)) : 200;\n\t\t\tconst result = loadReplicationOpsForPeer(store.db, {\n\t\t\t\tsince,\n\t\t\t\tlimit,\n\t\t\t\tdeviceId: localDeviceId,\n\t\t\t\tgeneration: Number.isFinite(generation) ? generation : null,\n\t\t\t\tsnapshotId,\n\t\t\t\tbaselineCursor,\n\t\t\t\tscopeId: scopeRequest.mode === \"scoped\" ? scopeRequest.scope_id : undefined,\n\t\t\t});\n\t\t\tif (result.reset_required) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"reset_required\",\n\t\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\t\t...addSyncScopeToBoundary(result.reset, scopeRequest.scope_id),\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst { ops, nextCursor, boundary } = result;\n\t\t\tconst filtered = filterOpsForPeer(store, peerDeviceId, localDeviceId, ops, {\n\t\t\t\tsupportsReassignScope: supportsSyncFeature(\n\t\t\t\t\tc.req.header(SYNC_FEATURES_HEADER),\n\t\t\t\t\t\"reassign_scope\",\n\t\t\t\t),\n\t\t\t});\n\t\t\treturn c.json({\n\t\t\t\treset_required: false,\n\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\tscope_id: scopeRequest.scope_id,\n\t\t\t\tgeneration: boundary.generation,\n\t\t\t\tsnapshot_id: boundary.snapshot_id,\n\t\t\t\tbaseline_cursor: boundary.baseline_cursor,\n\t\t\t\tretained_floor_cursor: boundary.retained_floor_cursor,\n\t\t\t\tops: filtered.allowed,\n\t\t\t\tnext_cursor: nextCursor,\n\t\t\t\tskipped: filtered.skipped,\n\t\t\t\tskipped_detail: filtered.skippedDetail,\n\t\t\t});\n\t\t} catch {\n\t\t\treturn c.json({ error: \"internal_error\" }, 500);\n\t\t}\n\t});\n\n\t// GET /v1/snapshot (peer sync protocol — bootstrap snapshot pages)\n\tapp.get(\"/v1/snapshot\", (c) => {\n\t\tconst store = getStore();\n\t\treturn (async () => {\n\t\t\tlet auth = authorizeSyncRequest(store, c.req, Buffer.alloc(0));\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tlet preauthChecked = false;\n\t\t\tlet bootstrapAttempted = false;\n\t\t\tlet deviceAuthReason: string | null = null;\n\t\t\tif (!auth.ok) {\n\t\t\t\tconst bootstrapGrantId = (c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim();\n\t\t\t\tif (bootstrapGrantId) {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\t// Use unauthenticated bucket with stable key — grant is not yet verified,\n\t\t\t\t\t// so caller-controlled headers must not influence rate-limit identity.\n\t\t\t\t\tconst bootstrapLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (bootstrapLimited) return bootstrapLimited;\n\t\t\t\t} else {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\tconst unauthLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (unauthLimited) return unauthLimited;\n\t\t\t\t}\n\t\t\t\tdeviceAuthReason = auth.reason;\n\t\t\t\tauth = await authorizeBootstrapGrantRequest(store, c.req, Buffer.alloc(0));\n\t\t\t\tbootstrapAttempted = true;\n\t\t\t}\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tif (!auth.ok) {\n\t\t\t\t// Specific reasons stay server-side; wire responses remain generic.\n\t\t\t\tconst grantPresent = Boolean((c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim());\n\t\t\t\t// Warn only when the caller actually attempted authentication (a\n\t\t\t\t// grant or signed device headers); bare probes and health checks\n\t\t\t\t// must not fill logs with attacker-controllable noise.\n\t\t\t\tconst authAttempted =\n\t\t\t\t\tgrantPresent || (deviceAuthReason != null && deviceAuthReason !== \"missing_headers\");\n\t\t\t\tif (bootstrapAttempted && authAttempted) {\n\t\t\t\t\tconsole.warn(\n\t\t\t\t\t\t`[sync] peer auth failed: reason=${auth.reason} device_auth_reason=${deviceAuthReason ?? \"none\"} grant_present=${grantPresent} path=${c.req.path} device=${loggableHeaderValue(c.req.header(\"X-Opencode-Device\"))}`,\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tlogDirectPeerAuthDiagnostic(deviceAuthReason, auth.reason);\n\t\t\t\t}\n\t\t\t\treturn (\n\t\t\t\t\t(preauthChecked ? null : rateLimitedResponse(c, c.req.path, false)) ??\n\t\t\t\t\tc.json(unauthorizedPayload(), 401)\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\t\tif (limited) return limited;\n\n\t\t\ttry {\n\t\t\t\tconst rawScopeId = c.req.query(SYNC_SCOPE_QUERY_PARAM);\n\t\t\t\tconst negotiated = negotiatedSyncCapability(c);\n\t\t\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\t\tconst scopeRequest = parseSyncScopeRequest(rawScopeId, rawScopeId !== undefined, {\n\t\t\t\t\tdb: store.db,\n\t\t\t\t\tlocalDeviceId,\n\t\t\t\t\tnegotiatedCapability: negotiated,\n\t\t\t\t\tpeerDeviceId: auth.deviceId,\n\t\t\t\t});\n\t\t\t\tif (!scopeRequest.ok) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\tsyncScopeResetRequiredPayload(\n\t\t\t\t\t\t\tgetSyncResetState(store.db),\n\t\t\t\t\t\t\tscopeRequest.reason,\n\t\t\t\t\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\t\t\t\t\tnull,\n\t\t\t\t\t\t),\n\t\t\t\t\t\t409,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst rawGeneration = c.req.query(\"generation\");\n\t\t\t\tconst generation =\n\t\t\t\t\trawGeneration != null && rawGeneration.trim().length > 0\n\t\t\t\t\t\t? Number.parseInt(rawGeneration, 10)\n\t\t\t\t\t\t: null;\n\t\t\t\tconst snapshotId = c.req.query(\"snapshot_id\") ?? null;\n\t\t\t\tconst baselineCursor = c.req.query(\"baseline_cursor\") ?? null;\n\t\t\t\tconst pageToken = c.req.query(\"page_token\") ?? null;\n\t\t\t\tconst rawLimit = Number.parseInt(c.req.query(\"limit\") ?? \"200\", 10);\n\t\t\t\t// Cap raised to 5000 to support elevated bootstrap page sizes (default 2000).\n\t\t\t\tconst limit = Number.isFinite(rawLimit) ? Math.max(1, Math.min(rawLimit, 5000)) : 200;\n\n\t\t\t\tif (generation == null || !Number.isFinite(generation)) {\n\t\t\t\t\treturn c.json({ error: \"missing_generation\" }, 400);\n\t\t\t\t}\n\t\t\t\tif (!snapshotId) {\n\t\t\t\t\treturn c.json({ error: \"missing_snapshot_id\" }, 400);\n\t\t\t\t}\n\n\t\t\t\tconst result = loadMemorySnapshotPageForPeer(store.db, {\n\t\t\t\t\tgeneration,\n\t\t\t\t\tsnapshotId,\n\t\t\t\t\tbaselineCursor,\n\t\t\t\t\tpageToken,\n\t\t\t\t\tlimit,\n\t\t\t\t\tpeerDeviceId: auth.deviceId,\n\t\t\t\t\tscopeId: scopeRequest.mode === \"scoped\" ? scopeRequest.scope_id : undefined,\n\t\t\t\t});\n\n\t\t\t\treturn c.json({\n\t\t\t\t\tscope_id: scopeRequest.scope_id,\n\t\t\t\t\tgeneration: result.boundary.generation,\n\t\t\t\t\tsnapshot_id: result.boundary.snapshot_id,\n\t\t\t\t\tbaseline_cursor: result.boundary.baseline_cursor,\n\t\t\t\t\tretained_floor_cursor: result.boundary.retained_floor_cursor,\n\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\titems: result.items,\n\t\t\t\t\tnext_page_token: result.nextPageToken,\n\t\t\t\t\thas_more: result.hasMore,\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconst message = err instanceof Error ? err.message : \"\";\n\t\t\t\tif (message === \"generation_mismatch\" || message === \"boundary_mismatch\") {\n\t\t\t\t\treturn c.json({ error: message }, 409);\n\t\t\t\t}\n\t\t\t\treturn c.json({ error: \"internal_error\" }, 500);\n\t\t\t}\n\t\t})();\n\t});\n\n\t// POST /v1/ops (peer sync protocol)\n\tapp.post(\"/v1/ops\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst raw = await readBoundedRequestBytes(c.req.raw, MAX_SYNC_BODY_BYTES);\n\t\tif (raw == null) {\n\t\t\treturn c.json({ error: \"payload_too_large\" }, 413);\n\t\t}\n\n\t\tconst auth = authorizeSyncRequest(store, c.req, raw);\n\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\tif (!auth.ok) {\n\t\t\tlogDirectPeerAuthDiagnostic(auth.reason);\n\t\t\treturn rateLimitedResponse(c, c.req.path, false) ?? c.json(unauthorizedPayload(), 401);\n\t\t}\n\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\tif (limited) return limited;\n\t\tconst peerDeviceId = auth.deviceId;\n\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tconst parsed = JSON.parse(raw.toString(\"utf-8\")) as unknown;\n\t\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\treturn c.json({ error: \"invalid_json\" }, 400);\n\t\t\t}\n\t\t\tbody = parsed as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid_json\" }, 400);\n\t\t}\n\n\t\tconst negotiated = negotiateSyncCapability(\n\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\tnormalizeSyncCapability(body.sync_capability),\n\t\t);\n\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\tconst scopeRequest = parseSyncScopeRequest(body.scope_id, Object.hasOwn(body, \"scope_id\"), {\n\t\t\tdb: store.db,\n\t\t\tlocalDeviceId,\n\t\t\tnegotiatedCapability: negotiated,\n\t\t\tpeerDeviceId,\n\t\t});\n\t\tif (!scopeRequest.ok) {\n\t\t\treturn c.json(\n\t\t\t\tsyncScopeResetRequiredPayload(\n\t\t\t\t\tgetSyncResetState(store.db),\n\t\t\t\t\tscopeRequest.reason,\n\t\t\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\t\t\tnull,\n\t\t\t\t),\n\t\t\t\t409,\n\t\t\t);\n\t\t}\n\t\tif (!Array.isArray(body.ops)) {\n\t\t\treturn c.json({ error: \"invalid_ops\" }, 400);\n\t\t}\n\t\tif (body.ops.length > MAX_SYNC_OPS) {\n\t\t\treturn c.json({ error: \"too_many_ops\" }, 413);\n\t\t}\n\n\t\tconst normalizedOps = extractReplicationOps(body);\n\t\tconst peerFeatures = normalizeSyncFeatures(body.sync_features);\n\t\tconst reassignOps = normalizedOps.filter((op) => op.op_type === \"reassign_scope\");\n\t\tif (reassignOps.length > 0 && !peerFeatures.includes(\"reassign_scope\")) {\n\t\t\treturn c.json({ error: \"reassign_capability_required\" }, 409);\n\t\t}\n\t\ttry {\n\t\t\tfor (const op of reassignOps) parseReassignScopePayload(op);\n\t\t} catch {\n\t\t\treturn c.json({ error: \"reassign_payload_invalid\" }, 400);\n\t\t}\n\t\tfor (const op of normalizedOps) {\n\t\t\tif (op.device_id !== peerDeviceId || op.clock_device_id !== peerDeviceId) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"invalid_op_device\",\n\t\t\t\t\t\treason: \"device_id_mismatch\",\n\t\t\t\t\t\top_id: op.op_id,\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\t// Inbound POSTs still use legacy visibility/project filters, but must not run\n\t\t// the outbound scope gate. Unsupported peers deliberately bypass strict inbound\n\t\t// scope rejection during rollout, so outbound filtering would silently drop data.\n\t\tconst filtered = filterOpsForPeer(store, peerDeviceId, localDeviceId, normalizedOps, {\n\t\t\tapplyScopeFilter: false,\n\t\t\tsupportsReassignScope: peerFeatures.includes(\"reassign_scope\"),\n\t\t});\n\t\t// Scope validation runs against the full signed batch so bad scoped ops cannot\n\t\t// evade fail-closed rejection by also tripping peer project filters.\n\t\tconst rejected = rejectInboundScopeFailures(store.db, normalizedOps, localDeviceId, {\n\t\t\tenabled: negotiated !== \"unsupported\",\n\t\t\tpeerDeviceId,\n\t\t});\n\t\tif (rejected) {\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"scope_rejected\",\n\t\t\t\t\treason: rejected.rejections[0]?.reason ?? \"scope_mismatch\",\n\t\t\t\t\trejections: rejected.rejections,\n\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\tscope_id: scopeRequest.scope_id,\n\t\t\t\t},\n\t\t\t\t403,\n\t\t\t);\n\t\t}\n\n\t\tconst result = applyReplicationOps(store.db, filtered.allowed, localDeviceId, store.scanner);\n\t\tconst skipped = result.skipped + filtered.skipped;\n\t\treturn c.json({\n\t\t\t...result,\n\t\t\tskipped,\n\t\t\tskipped_detail: filtered.skippedDetail,\n\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\tscope_id: scopeRequest.scope_id,\n\t\t});\n\t});\n\n\treturn app;\n}\n\nasync function loadConfiguredDeviceIdentityCoordinatorEvidence(): Promise<DeviceIdentityCoordinatorEvidence> {\n\tconst config = readCoordinatorSyncConfig();\n\tconst hasCoordinatorConfiguration =\n\t\tconfig.syncCoordinatorUrl.length > 0 || config.syncCoordinatorGroups.length > 0;\n\tconst remoteUrl = config.syncCoordinatorUrl.trim();\n\tconst adminSecret = config.syncCoordinatorAdminSecret.trim();\n\tconst groupIds = [\n\t\t...new Set(config.syncCoordinatorGroups.map((groupId) => groupId.trim())),\n\t].filter(Boolean);\n\tif (!hasCoordinatorConfiguration) {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_not_configured\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n\tif (!remoteUrl || !adminSecret || groupIds.length === 0) {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_unavailable\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n\tif (groupIds.length > 25) {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_evidence_too_large\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n\ttry {\n\t\tconst enrollments = (\n\t\t\tawait Promise.all(\n\t\t\t\tgroupIds.map((groupId) =>\n\t\t\t\t\tcoordinatorListDevicesAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tincludeDisabled: true,\n\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\tadminSecret,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t)\n\t\t).flat();\n\t\tif (enrollments.length > 500) {\n\t\t\treturn {\n\t\t\t\tavailability: \"unavailable\",\n\t\t\t\tsafeErrorCode: \"coordinator_evidence_too_large\",\n\t\t\t\tenrollments: [],\n\t\t\t};\n\t\t}\n\t\treturn { availability: \"available\", safeErrorCode: null, enrollments };\n\t} catch {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_unavailable\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n}\n\n/**\n * Viewer-facing sync management routes (/api/sync/*).\n *\n * These are mounted on the viewer listener (127.0.0.1:38888) and\n * provide sync status, peer management, and coordinator UI for the\n * local viewer.\n */\nexport function syncRoutes(\n\tgetStore: StoreFactory,\n\tgetSyncRuntimeStatus?: () => SyncRuntimeStatus | null,\n\toptions: SyncRoutesOptions = {},\n) {\n\tconst app = new Hono();\n\tconst readCoordinatorConfig = options.readCoordinatorConfig ?? readCoordinatorSyncConfig;\n\tconst renameCoordinatorGroup = options.renameCoordinatorGroup ?? coordinatorRenameGroupAction;\n\tconst loadCoordinatorEvidence =\n\t\toptions.loadDeviceIdentityCoordinatorEvidence ??\n\t\tloadConfiguredDeviceIdentityCoordinatorEvidence;\n\tconst currentCoordinatorEvidence = async (): Promise<DeviceIdentityCoordinatorEvidence> => {\n\t\ttry {\n\t\t\treturn await loadCoordinatorEvidence();\n\t\t} catch {\n\t\t\treturn {\n\t\t\t\tavailability: \"unavailable\",\n\t\t\t\tsafeErrorCode: \"coordinator_unavailable\",\n\t\t\t\tenrollments: [],\n\t\t\t};\n\t\t}\n\t};\n\tconst localInventoryInput = async (store: MemoryStore) => {\n\t\tlet explicitDeviceName = \"\";\n\t\ttry {\n\t\t\texplicitDeviceName = String(readCodememConfigFile().sync_device_name ?? \"\");\n\t\t} catch {\n\t\t\texplicitDeviceName = \"\";\n\t\t}\n\t\treturn {\n\t\t\tlocalDeviceId: store.deviceId,\n\t\t\tlocalDisplayName: friendlyDeviceName({\n\t\t\t\texplicitName: explicitDeviceName,\n\t\t\t\tosName: hostname(),\n\t\t\t\tfallbackSeed: store.deviceId,\n\t\t\t}),\n\t\t\tcoordinator: await currentCoordinatorEvidence(),\n\t\t};\n\t};\n\n\tapp.get(\"/api/sync/recipient-policy/v1/device-inventory\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureStableStoreIdentity(store);\n\t\treturn c.json(listDeviceIdentityInventory(store.db, await localInventoryInput(store)));\n\t});\n\n\tapp.patch(\"/api/sync/recipient-policy/v1/teams/:teamId\", async (c) => {\n\t\tconst raw = await readBoundedRequestBytes(c.req.raw, 8_192);\n\t\tif (!raw) return c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tconst parsed = JSON.parse(raw.toString(\"utf8\")) as unknown;\n\t\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\treturn c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\t\t}\n\t\t\tbody = parsed as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\t}\n\t\tif (\n\t\t\tObject.keys(body).length !== 2 ||\n\t\t\t!Object.hasOwn(body, \"displayName\") ||\n\t\t\t!Object.hasOwn(body, \"expectedDisplayName\") ||\n\t\t\ttypeof body.displayName !== \"string\" ||\n\t\t\ttypeof body.expectedDisplayName !== \"string\"\n\t\t) {\n\t\t\treturn c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst config = readCoordinatorConfig();\n\t\t\tconst coordinatorId = config.syncCoordinatorUrl\n\t\t\t\t? buildBaseUrl(config.syncCoordinatorUrl)\n\t\t\t\t: null;\n\t\t\tconst normalizedConfiguredCoordinatorId = coordinatorId\n\t\t\t\t? normalizedCoordinatorId(coordinatorId)\n\t\t\t\t: null;\n\t\t\tlet configuredCoordinatorGroups: ReturnType<typeof legacyTeamCandidateGroupDescriptors> = [];\n\t\t\tif (coordinatorId) {\n\t\t\t\ttry {\n\t\t\t\t\t// Scope-backed descriptors widen rename eligibility only when\n\t\t\t\t\t// linkedGroup() also proves exact completed-setup history.\n\t\t\t\t\tconfiguredCoordinatorGroups = legacyTeamCandidateGroupDescriptors(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\tconfig.syncCoordinatorUrl,\n\t\t\t\t\t\tconfig.syncCoordinatorGroups,\n\t\t\t\t\t);\n\t\t\t\t} catch {\n\t\t\t\t\t// Bad coordinator evidence must not block a local-only rename.\n\t\t\t\t\t// Proven linked Teams still fail closed as team_link_stale.\n\t\t\t\t\tconfiguredCoordinatorGroups = [];\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst result = await renameRecipientPolicyTeam(store.db, {\n\t\t\t\tteamId: c.req.param(\"teamId\"),\n\t\t\t\tdisplayName: body.displayName,\n\t\t\t\texpectedDisplayName: body.expectedDisplayName,\n\t\t\t\tconfiguredCoordinatorGroups,\n\t\t\t\tcoordinatorIdsEquivalent: (left, right) => {\n\t\t\t\t\tconst normalizedLeft = normalizedCoordinatorId(left);\n\t\t\t\t\tconst normalizedRight = normalizedCoordinatorId(right);\n\t\t\t\t\treturn normalizedLeft !== null && normalizedLeft === normalizedRight;\n\t\t\t\t},\n\t\t\t\trenameCoordinatorGroup: async (group, normalizedDisplayName) => {\n\t\t\t\t\tconst normalizedLinkedCoordinatorId = normalizedCoordinatorId(group.coordinatorId);\n\t\t\t\t\tif (\n\t\t\t\t\t\t!config.syncCoordinatorUrl ||\n\t\t\t\t\t\t!config.syncCoordinatorAdminSecret ||\n\t\t\t\t\t\t!normalizedConfiguredCoordinatorId ||\n\t\t\t\t\t\t!normalizedLinkedCoordinatorId ||\n\t\t\t\t\t\tnormalizedLinkedCoordinatorId !== normalizedConfiguredCoordinatorId\n\t\t\t\t\t) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\tconst renamed = await renameCoordinatorGroup({\n\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\tdisplayName: normalizedDisplayName,\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl,\n\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t});\n\t\t\t\t\treturn (\n\t\t\t\t\t\trenamed?.group_id === group.groupId && renamed.display_name === normalizedDisplayName\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t});\n\t\t\ttry {\n\t\t\t\toptions.onRecipientPolicyTeamRenamed?.();\n\t\t\t} catch {\n\t\t\t\t// Cache invalidation is best-effort after the authoritative rename commits.\n\t\t\t}\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (!(error instanceof RecipientPolicyTeamRenameError)) {\n\t\t\t\treturn c.json({ error: \"team_rename_failed\" as const }, 503);\n\t\t\t}\n\t\t\tconst status =\n\t\t\t\terror.code === \"team_name_invalid\"\n\t\t\t\t\t? 400\n\t\t\t\t\t: error.code === \"team_not_found\"\n\t\t\t\t\t\t? 404\n\t\t\t\t\t\t: error.code === \"team_coordinator_rename_failed\" ||\n\t\t\t\t\t\t\t\terror.code === \"team_local_rename_pending\" ||\n\t\t\t\t\t\t\t\terror.code === \"team_rename_failed\"\n\t\t\t\t\t\t\t? 503\n\t\t\t\t\t\t\t: 409;\n\t\t\treturn c.json({ error: error.code }, status);\n\t\t}\n\t});\n\n\tconst parseDeviceBindingRequest = (\n\t\tvalue: unknown,\n\t\tcommit: boolean,\n\t): DeviceIdentityBindingPreviewRequestV1 | DeviceIdentityBindingCommitRequestV1 | null => {\n\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n\t\tconst body = value as Record<string, unknown>;\n\t\tconst allowed = new Set(commit ? [\"bindings\", \"reviewedInventoryDigest\"] : [\"bindings\"]);\n\t\tif (Object.keys(body).some((key) => !allowed.has(key)) || !Array.isArray(body.bindings)) {\n\t\t\treturn null;\n\t\t}\n\t\tconst bindings = body.bindings.map((value) => {\n\t\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n\t\t\tconst binding = value as Record<string, unknown>;\n\t\t\tconst bindingKeys = new Set([\"deviceId\", \"targetIdentityId\", \"confirmed\", \"allowRebind\"]);\n\t\t\tif (\n\t\t\t\tObject.keys(binding).some((key) => !bindingKeys.has(key)) ||\n\t\t\t\ttypeof binding.deviceId !== \"string\" ||\n\t\t\t\ttypeof binding.targetIdentityId !== \"string\" ||\n\t\t\t\ttypeof binding.confirmed !== \"boolean\" ||\n\t\t\t\t(Object.hasOwn(binding, \"allowRebind\") && typeof binding.allowRebind !== \"boolean\")\n\t\t\t) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tdeviceId: binding.deviceId,\n\t\t\t\ttargetIdentityId: binding.targetIdentityId,\n\t\t\t\tconfirmed: binding.confirmed,\n\t\t\t\t...(typeof binding.allowRebind === \"boolean\" ? { allowRebind: binding.allowRebind } : {}),\n\t\t\t};\n\t\t});\n\t\tif (bindings.some((binding) => binding == null)) return null;\n\t\tif (commit && typeof body.reviewedInventoryDigest !== \"string\") return null;\n\t\treturn {\n\t\t\tbindings: bindings as DeviceIdentityBindingPreviewRequestV1[\"bindings\"],\n\t\t\t...(commit ? { reviewedInventoryDigest: body.reviewedInventoryDigest as string } : {}),\n\t\t};\n\t};\n\n\tapp.post(\"/api/sync/recipient-policy/v1/device-bindings/preview\", async (c) => {\n\t\tconst body = parseDeviceBindingRequest(await parseViewerJsonBody(c), false);\n\t\tif (!body) return c.json({ error: \"binding_request_invalid\" }, 400);\n\t\tconst store = getStore();\n\t\ttry {\n\t\t\tensureStableStoreIdentity(store);\n\t\t\tconst result = previewDeviceIdentityBindings(\n\t\t\t\tstore.db,\n\t\t\t\tawait localInventoryInput(store),\n\t\t\t\tbody,\n\t\t\t);\n\t\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\t\tif (result.status === \"conflict\") return c.json(result, 409);\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"binding_preview_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"binding_preview_failed\" }, 500);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/device-bindings/commit\", async (c) => {\n\t\tconst body = parseDeviceBindingRequest(await parseViewerJsonBody(c), true);\n\t\tif (!body || !(\"reviewedInventoryDigest\" in body)) {\n\t\t\treturn c.json({ error: \"binding_request_invalid\" }, 400);\n\t\t}\n\t\tconst store = getStore();\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tensureStableStoreIdentity(store);\n\t\t\tconst result = commitDeviceIdentityBindings(\n\t\t\t\tstore.db,\n\t\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\t\tawait localInventoryInput(store),\n\t\t\t\tbody,\n\t\t\t);\n\t\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\t\tif (result.status === \"stale\" || result.status === \"conflict\") {\n\t\t\t\treturn c.json(result, 409);\n\t\t\t}\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"binding_commit_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"binding_commit_failed\" }, 500);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\t// GET /api/sync/status\n\tapp.get(\"/api/sync/status\", async (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst traceSync = <T>(label: string, fn: () => T): T => {\n\t\t\t\tif (process.env.CODEMEM_TRACE_SYNC_STATUS !== \"1\") return fn();\n\t\t\t\tconst startedAt = Date.now();\n\t\t\t\tconsole.warn(`[codemem sync-status] ${label} start`);\n\t\t\t\ttry {\n\t\t\t\t\treturn fn();\n\t\t\t\t} finally {\n\t\t\t\t\tconsole.warn(`[codemem sync-status] ${label} ${Date.now() - startedAt}ms`);\n\t\t\t\t}\n\t\t\t};\n\t\t\tconst showDiag = queryBool(c.req.query(\"includeDiagnostics\"));\n\t\t\tconst includeJoinRequests = queryBool(c.req.query(\"includeJoinRequests\"));\n\t\t\tconst project = c.req.query(\"project\") || null;\n\t\t\tconst config = traceSync(\"readCoordinatorSyncConfig\", () => readCoordinatorSyncConfig());\n\t\t\tconst syncReset = traceSync(\"getSyncResetState\", () => getSyncResetState(store.db));\n\n\t\t\tconst d = drizzle(store.db, { schema });\n\n\t\t\tconst deviceRow = traceSync(\"deviceRow\", () =>\n\t\t\t\td\n\t\t\t\t\t.select({\n\t\t\t\t\t\tdevice_id: schema.syncDevice.device_id,\n\t\t\t\t\t\tfingerprint: schema.syncDevice.fingerprint,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.syncDevice)\n\t\t\t\t\t.limit(1)\n\t\t\t\t\t.get(),\n\t\t\t);\n\n\t\t\tconst daemonState = traceSync(\"daemonState\", () =>\n\t\t\t\td.select().from(schema.syncDaemonState).where(eq(schema.syncDaemonState.id, 1)).get(),\n\t\t\t);\n\n\t\t\tconst peerCountRow = traceSync(\"peerCountRow\", () =>\n\t\t\t\td.select({ total: count() }).from(schema.syncPeers).get(),\n\t\t\t);\n\t\t\tlet retentionState:\n\t\t\t\t| {\n\t\t\t\t\t\tlast_run_at?: string | null;\n\t\t\t\t\t\tlast_duration_ms?: number | null;\n\t\t\t\t\t\tlast_deleted_ops?: number | null;\n\t\t\t\t\t\tlast_estimated_bytes_before?: number | null;\n\t\t\t\t\t\tlast_estimated_bytes_after?: number | null;\n\t\t\t\t\t\tretained_floor_cursor?: string | null;\n\t\t\t\t\t\tlast_error?: string | null;\n\t\t\t\t\t\tlast_error_at?: string | null;\n\t\t\t\t }\n\t\t\t\t| undefined;\n\t\t\ttry {\n\t\t\t\tretentionState = traceSync(\"retentionState\", () =>\n\t\t\t\t\td\n\t\t\t\t\t\t.select()\n\t\t\t\t\t\t.from(schema.syncRetentionState)\n\t\t\t\t\t\t.where(eq(schema.syncRetentionState.id, 1))\n\t\t\t\t\t\t.get(),\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\tretentionState = undefined;\n\t\t\t}\n\n\t\t\tconst lastSyncRow = traceSync(\"lastSyncRow\", () =>\n\t\t\t\td\n\t\t\t\t\t.select({ last_sync_at: max(schema.syncPeers.last_sync_at) })\n\t\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t\t.get(),\n\t\t\t);\n\t\t\t// Always take the fast COUNT(DISTINCT) path. The slow\n\t\t\t// per-memory vec0 probe blocks the event loop for seconds on\n\t\t\t// larger DBs, which hangs every concurrent request — not\n\t\t\t// acceptable from a status endpoint. See codemem-00jn.\n\t\t\tconst semanticIndex = traceSync(\"semanticIndex\", () =>\n\t\t\t\tredactSemanticIndexDiagnostics(getSemanticIndexDiagnostics(store.db), showDiag),\n\t\t\t);\n\t\t\tconst enrollmentIssueSummary = traceSync(\"coordinatorEnrollmentIssues\", () =>\n\t\t\t\tgetCoordinatorEnrollmentReconciliationIssueSummary(store.db),\n\t\t\t);\n\t\t\tconst enrollmentIssueStatus = {\n\t\t\t\tcounts: enrollmentIssueSummary.counts,\n\t\t\t\t...(showDiag\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tissues: enrollmentIssueSummary.issues.map((issue) => ({\n\t\t\t\t\t\t\t\tcoordinator_id: issue.coordinatorId,\n\t\t\t\t\t\t\t\tgroup_id: issue.groupId,\n\t\t\t\t\t\t\t\tkind: issue.kind,\n\t\t\t\t\t\t\t\treference_id: issue.referenceId,\n\t\t\t\t\t\t\t\tcode: issue.code,\n\t\t\t\t\t\t\t\tstatus: issue.status,\n\t\t\t\t\t\t\t\tfirst_seen_at: issue.firstSeenAt,\n\t\t\t\t\t\t\t\tlast_seen_at: issue.lastSeenAt,\n\t\t\t\t\t\t\t\tresolved_at: issue.resolvedAt,\n\t\t\t\t\t\t\t\toccurrence_count: issue.occurrenceCount,\n\t\t\t\t\t\t\t\tupdated_at: issue.updatedAt,\n\t\t\t\t\t\t\t})),\n\t\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t};\n\n\t\t\tconst lastError = daemonState?.last_error as string | null;\n\t\t\tconst lastErrorAt = daemonState?.last_error_at as string | null;\n\t\t\tconst lastOkAt = daemonState?.last_ok_at as string | null;\n\t\t\tconst viewerBinding = traceSync(\"readViewerBinding\", () => readViewerBinding(store.dbPath));\n\t\t\t// The sync daemon runs inside the viewer-server process itself, so\n\t\t\t// if this request is being served, the daemon is by definition\n\t\t\t// running — the viewer is serving us right now. The prior\n\t\t\t// `portOpen` self-probe occasionally timed out under GC / socket\n\t\t\t// backlog pressure and mis-reported \"stopped · unreachable\" while\n\t\t\t// every other request kept succeeding. Trust the pidfile's\n\t\t\t// existence (a record was written at startup) and skip the loopback\n\t\t\t// probe.\n\t\t\tconst daemonRunning = Boolean(viewerBinding);\n\t\t\tconst daemonDetail = viewerBinding\n\t\t\t\t? `viewer pidfile at ${viewerBinding.host}:${viewerBinding.port}`\n\t\t\t\t: null;\n\n\t\t\tlet daemonStateValue = \"ok\";\n\t\t\tif (!config.syncEnabled) {\n\t\t\t\tdaemonStateValue = \"disabled\";\n\t\t\t} else if (lastError && (!lastOkAt || String(lastOkAt) < String(lastErrorAt ?? \"\"))) {\n\t\t\t\tdaemonStateValue = \"error\";\n\t\t\t} else if (!daemonRunning) {\n\t\t\t\tdaemonStateValue = \"stopped\";\n\t\t\t}\n\n\t\t\tconst statusPayload: Record<string, unknown> = {\n\t\t\t\tenabled: config.syncEnabled,\n\t\t\t\tinterval_s: config.syncIntervalS,\n\t\t\t\tretention: {\n\t\t\t\t\tenabled: config.syncRetentionEnabled,\n\t\t\t\t\tmax_age_days: config.syncRetentionMaxAgeDays,\n\t\t\t\t\tmax_size_mb: config.syncRetentionMaxSizeMb,\n\t\t\t\t\tretained_floor_cursor:\n\t\t\t\t\t\tsyncReset.retained_floor_cursor ??\n\t\t\t\t\t\t(retentionState?.retained_floor_cursor as string | null) ??\n\t\t\t\t\t\tnull,\n\t\t\t\t\tlast_run_at: (retentionState?.last_run_at as string | null) ?? null,\n\t\t\t\t\tlast_duration_ms:\n\t\t\t\t\t\ttypeof retentionState?.last_duration_ms === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_duration_ms\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_deleted_ops:\n\t\t\t\t\t\ttypeof retentionState?.last_deleted_ops === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_deleted_ops\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_estimated_bytes_before:\n\t\t\t\t\t\ttypeof retentionState?.last_estimated_bytes_before === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_estimated_bytes_before\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_estimated_bytes_after:\n\t\t\t\t\t\ttypeof retentionState?.last_estimated_bytes_after === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_estimated_bytes_after\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_error: (retentionState?.last_error as string | null) ?? null,\n\t\t\t\t\tlast_error_at: (retentionState?.last_error_at as string | null) ?? null,\n\t\t\t\t},\n\t\t\t\tsemantic_index: semanticIndex,\n\t\t\t\tcoordinator_enrollment_reconciliation_issues: enrollmentIssueStatus,\n\t\t\t\tpeer_count: Number(peerCountRow?.total ?? 0),\n\t\t\t\tlast_sync_at: lastSyncRow?.last_sync_at ?? null,\n\t\t\t\tdaemon_state: daemonStateValue,\n\t\t\t\tdaemon_running: daemonRunning,\n\t\t\t\tdaemon_detail: daemonDetail,\n\t\t\t\tproject_filter_active:\n\t\t\t\t\tconfig.syncProjectsInclude.length > 0 || config.syncProjectsExclude.length > 0,\n\t\t\t\tproject_filter: {\n\t\t\t\t\tinclude: config.syncProjectsInclude,\n\t\t\t\t\texclude: config.syncProjectsExclude,\n\t\t\t\t},\n\t\t\t\tcleanup_diagnostics: cleanupDiagnostics(\n\t\t\t\t\tstore,\n\t\t\t\t\t(deviceRow?.device_id as string | null | undefined) ?? null,\n\t\t\t\t\tshowDiag,\n\t\t\t\t),\n\t\t\t\tredacted: !showDiag,\n\t\t\t};\n\n\t\t\tif (showDiag) {\n\t\t\t\tstatusPayload.device_id = deviceRow?.device_id ?? null;\n\t\t\t\tstatusPayload.fingerprint = deviceRow?.fingerprint ?? null;\n\t\t\t\tstatusPayload.bind = `${config.syncHost}:${config.syncPort}`;\n\t\t\t\tstatusPayload.daemon_last_error = lastError;\n\t\t\t\tstatusPayload.daemon_last_error_at = lastErrorAt;\n\t\t\t\tstatusPayload.daemon_last_ok_at = lastOkAt;\n\t\t\t}\n\n\t\t\tconst runtimeStatus = getSyncRuntimeStatus?.() ?? null;\n\t\t\tif (runtimeStatus?.phase && runtimeStatus.phase !== \"running\") {\n\t\t\t\tdaemonStateValue = runtimeStatus.phase;\n\t\t\t\tstatusPayload.daemon_state = daemonStateValue;\n\t\t\t\tstatusPayload.daemon_running = runtimeStatus.phase === \"starting\" || daemonRunning;\n\t\t\t\tstatusPayload.daemon_detail = runtimeStatus.detail ?? daemonDetail;\n\t\t\t}\n\n\t\t\tconst coordinatorSnapshot = await coordinatorStatusSnapshot(store, config);\n\t\t\tconst coordinator = traceSync(\"coordinator\", () =>\n\t\t\t\tredactCoordinatorStatus(coordinatorSnapshot, showDiag),\n\t\t\t);\n\n\t\t\t// Build peers list using deduplicated mapPeerRow\n\t\t\tconst peerRows = traceSync(\n\t\t\t\t\"peerRows\",\n\t\t\t\t() => store.db.prepare(PEERS_QUERY).all() as Record<string, unknown>[],\n\t\t\t);\n\t\t\tconst recentOpsByPeer = traceSync(\"recentPeerOps\", () => recentPeerOps(store));\n\t\t\tconst scopeRejectionsByPeer = traceSync(\"recentScopeRejectionsByPeer\", () =>\n\t\t\t\trecentScopeRejectionsByPeer(store),\n\t\t\t);\n\t\t\tconst peersItems = peerRows.map((row) => {\n\t\t\t\tconst peer = mapPeerRow(\n\t\t\t\t\tstore,\n\t\t\t\t\trow,\n\t\t\t\t\tshowDiag,\n\t\t\t\t\trecentOpsByPeer,\n\t\t\t\t\tscopeRejectionsByPeer,\n\t\t\t\t\t(deviceRow?.device_id as string | null | undefined) ?? null,\n\t\t\t\t);\n\t\t\t\tpeer.status = peerStatus(peer);\n\t\t\t\treturn peer;\n\t\t\t});\n\n\t\t\tconst peersMap: Record<string, unknown> = {};\n\t\t\tfor (const peer of peersItems) {\n\t\t\t\tpeersMap[String(peer.peer_device_id)] = peer.status;\n\t\t\t}\n\n\t\t\t// Attempts\n\t\t\tconst attemptRows = traceSync(\"attemptRows\", () =>\n\t\t\t\td\n\t\t\t\t\t.select({\n\t\t\t\t\t\tpeer_device_id: schema.syncAttempts.peer_device_id,\n\t\t\t\t\t\tok: schema.syncAttempts.ok,\n\t\t\t\t\t\terror: schema.syncAttempts.error,\n\t\t\t\t\t\tstarted_at: schema.syncAttempts.started_at,\n\t\t\t\t\t\tfinished_at: schema.syncAttempts.finished_at,\n\t\t\t\t\t\tops_in: schema.syncAttempts.ops_in,\n\t\t\t\t\t\tops_out: schema.syncAttempts.ops_out,\n\t\t\t\t\t\tlocal_sync_capability: schema.syncAttempts.local_sync_capability,\n\t\t\t\t\t\tpeer_sync_capability: schema.syncAttempts.peer_sync_capability,\n\t\t\t\t\t\tnegotiated_sync_capability: schema.syncAttempts.negotiated_sync_capability,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.syncAttempts)\n\t\t\t\t\t.orderBy(desc(schema.syncAttempts.finished_at))\n\t\t\t\t\t.limit(25)\n\t\t\t\t\t.all(),\n\t\t\t);\n\t\t\tconst peerAddressMap = new Map<string, string[]>();\n\t\t\tconst peerAddressRows = traceSync(\n\t\t\t\t\"peerAddressRows\",\n\t\t\t\t() =>\n\t\t\t\t\tstore.db.prepare(\"SELECT peer_device_id, addresses_json FROM sync_peers\").all() as Array<{\n\t\t\t\t\t\tpeer_device_id: string | null;\n\t\t\t\t\t\taddresses_json: string | null;\n\t\t\t\t\t}>,\n\t\t\t);\n\t\t\tpeerAddressRows.forEach((peerRow) => {\n\t\t\t\tconst addrs = safeJsonList(peerRow.addresses_json as string | null);\n\t\t\t\tif (addrs.length) peerAddressMap.set(String(peerRow.peer_device_id ?? \"\"), addrs);\n\t\t\t});\n\t\t\tconst attemptsItems = attemptRows.map((row) => {\n\t\t\t\tconst addrs = showDiag ? peerAddressMap.get(String(row.peer_device_id ?? \"\")) : undefined;\n\t\t\t\treturn mapSyncAttemptRow(row, showDiag, addrs);\n\t\t\t});\n\t\t\tconst latestAttemptError = String(attemptRows[0]?.error || \"\").trim();\n\n\t\t\tconst statusBlock: Record<string, unknown> = {\n\t\t\t\t...statusPayload,\n\t\t\t\tbackground_maintenance: summarizeMaintenanceJobs(listMaintenanceJobs(store.db), showDiag),\n\t\t\t\tpeers: peersMap,\n\t\t\t\tpending: 0,\n\t\t\t\tsync: {},\n\t\t\t\tping: {},\n\t\t\t};\n\t\t\tconst legacyDevices = traceSync(\"legacyDevices\", () => store.claimableLegacyDeviceIds());\n\t\t\tconst legacyReview = traceSync(\"legacySharedReview\", () => legacySharedReviewSummary(store));\n\t\t\tconst sharingReview = traceSync(\"sharingReview\", () => store.sharingReviewSummary(project));\n\t\t\tconst recipientPolicyReconciliation = traceSync(\"recipientPolicyReconciliation\", () =>\n\t\t\t\tlistRecipientPolicyReconciliationStatus(store),\n\t\t\t);\n\t\t\tlet joinRequests: Record<string, unknown>[] = [];\n\t\t\tif (includeJoinRequests && showDiag && config.syncCoordinatorAdminSecret) {\n\t\t\t\ttry {\n\t\t\t\t\tjoinRequests = await listCoordinatorJoinRequests(config);\n\t\t\t\t} catch {\n\t\t\t\t\tjoinRequests = [];\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (daemonStateValue === \"ok\" && latestAttemptError.startsWith(\"needs_attention:\")) {\n\t\t\t\tdaemonStateValue = \"needs_attention\";\n\t\t\t\tstatusPayload.daemon_state = daemonStateValue;\n\t\t\t\tstatusPayload.daemon_detail = latestAttemptError.replace(/^needs_attention:/, \"\");\n\t\t\t\tstatusBlock.daemon_state = daemonStateValue;\n\t\t\t\tstatusBlock.daemon_detail = latestAttemptError.replace(/^needs_attention:/, \"\");\n\t\t\t}\n\n\t\t\tif (daemonStateValue === \"ok\") {\n\t\t\t\tconst peerStates = new Set(\n\t\t\t\t\tpeersItems.map((peer) =>\n\t\t\t\t\t\tString((peer.status as Record<string, unknown> | undefined)?.peer_state ?? \"\"),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tconst latestFailedRecently = Boolean(\n\t\t\t\t\tattemptsItems[0] &&\n\t\t\t\t\t\tattemptsItems[0].status === \"error\" &&\n\t\t\t\t\t\tisRecentIso(attemptsItems[0].finished_at),\n\t\t\t\t);\n\t\t\t\tconst allOffline =\n\t\t\t\t\tpeersItems.length > 0 &&\n\t\t\t\t\tpeersItems.every(\n\t\t\t\t\t\t(peer) =>\n\t\t\t\t\t\t\tString((peer.status as Record<string, unknown>)?.peer_state ?? \"\") === \"offline\",\n\t\t\t\t\t);\n\t\t\t\tif (latestFailedRecently) {\n\t\t\t\t\tconst hasLivePeer = peerStates.has(\"online\") || peerStates.has(\"degraded\");\n\t\t\t\t\tif (hasLivePeer) daemonStateValue = \"degraded\";\n\t\t\t\t\telse if (allOffline) daemonStateValue = \"offline-peers\";\n\t\t\t\t\telse if (peersItems.length > 0) daemonStateValue = \"stale\";\n\t\t\t\t} else if (peerStates.has(\"degraded\")) {\n\t\t\t\t\tdaemonStateValue = \"degraded\";\n\t\t\t\t} else if (allOffline) {\n\t\t\t\t\tdaemonStateValue = \"offline-peers\";\n\t\t\t\t} else if (peersItems.length > 0 && !peerStates.has(\"online\")) {\n\t\t\t\t\tdaemonStateValue = \"stale\";\n\t\t\t\t}\n\t\t\t\tstatusPayload.daemon_state = daemonStateValue;\n\t\t\t\tstatusBlock.daemon_state = daemonStateValue;\n\t\t\t}\n\n\t\t\tconst responsePayload: Record<string, unknown> = {\n\t\t\t\t...statusPayload,\n\t\t\t\tstatus: statusBlock,\n\t\t\t\tpeers: peersItems,\n\t\t\t\tattempts: attemptsItems.slice(0, 5),\n\t\t\t\tlegacy_devices: legacyDevices,\n\t\t\t\tlegacy_shared_review: legacyReview,\n\t\t\t\tsharing_review: sharingReview,\n\t\t\t\trecipient_policy_reconciliation: recipientPolicyReconciliation,\n\t\t\t\tcoordinator,\n\t\t\t};\n\t\t\tif (includeJoinRequests && showDiag) {\n\t\t\t\tresponsePayload.join_requests = joinRequests;\n\t\t\t}\n\t\t\treturn c.json(responsePayload);\n\t\t}\n\t});\n\n\t// GET /api/sync/peers\n\tapp.get(\"/api/sync/peers\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst showDiag = queryBool(c.req.query(\"includeDiagnostics\"));\n\t\t\tconst rows = store.db.prepare(PEERS_QUERY).all() as Record<string, unknown>[];\n\t\t\tconst recentOpsByPeer = recentPeerOps(store);\n\t\t\tconst scopeRejectionsByPeer = recentScopeRejectionsByPeer(store);\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst deviceRow = d\n\t\t\t\t.select({ device_id: schema.syncDevice.device_id })\n\t\t\t\t.from(schema.syncDevice)\n\t\t\t\t.limit(1)\n\t\t\t\t.get();\n\t\t\tconst localDeviceId = (deviceRow?.device_id as string | null | undefined) ?? null;\n\t\t\t// Use deduplicated mapPeerRow helper (fix #4)\n\t\t\tconst peers = rows.map((row) =>\n\t\t\t\tmapPeerRow(store, row, showDiag, recentOpsByPeer, scopeRejectionsByPeer, localDeviceId),\n\t\t\t);\n\t\t\treturn c.json({ items: peers, redacted: !showDiag });\n\t\t}\n\t});\n\n\t// GET /api/sync/peers/:peer_device_id/scope-rejections\n\t//\n\t// Recent scope-rejection records produced by the inbound fail-closed gate.\n\t// Each row is metadata only — op id, entity ref, scope id, reason code,\n\t// timestamp. The rejection log never stores op payloads, so this endpoint\n\t// can never leak inbound payload contents regardless of diagnostics state.\n\tapp.get(\"/api/sync/peers/:peer_device_id/scope-rejections\", (c) => {\n\t\tconst store = getStore();\n\t\tconst peerDeviceId = String(c.req.param(\"peer_device_id\") || \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"missing_peer_device_id\" }, 400);\n\t\tconst limit = queryInt(c.req.query(\"limit\"), 100);\n\t\tif (limit <= 0) return c.json({ error: \"invalid_limit\" }, 400);\n\t\tconst sinceMinutesRaw = queryInt(c.req.query(\"sinceMinutes\"), 24 * 60);\n\t\t// Cap at ~10 years so a hostile or fat-fingered query cannot push the\n\t\t// computed timestamp past the Date range and turn toISOString() into\n\t\t// a 500. Anything older than 10 years is effectively \"all rejections\".\n\t\tconst SINCE_MINUTES_MAX = 10 * 365 * 24 * 60;\n\t\tconst sinceMinutes = Math.min(Math.max(sinceMinutesRaw, 0), SINCE_MINUTES_MAX);\n\t\tconst sinceIso =\n\t\t\tsinceMinutes > 0 ? new Date(Date.now() - sinceMinutes * 60_000).toISOString() : undefined;\n\t\tconst records = listInboundScopeRejections(store.db, {\n\t\t\tpeerDeviceId,\n\t\t\tsinceIso,\n\t\t\tlimit,\n\t\t});\n\t\tconst summaries = summarizeInboundScopeRejections(store.db, {\n\t\t\tpeerDeviceId,\n\t\t\tsinceIso,\n\t\t});\n\t\tconst summary = summaries[0] ?? {\n\t\t\tpeer_device_id: peerDeviceId,\n\t\t\ttotal: 0,\n\t\t\tby_reason: {},\n\t\t\tlast_at: null,\n\t\t};\n\t\treturn c.json({\n\t\t\tpeer_device_id: peerDeviceId,\n\t\t\tsummary,\n\t\t\titems: records,\n\t\t});\n\t});\n\n\t// GET /api/sync/actors\n\tapp.get(\"/api/sync/actors\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tensureLocalActorRecord(store);\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst includeMerged = queryBool(c.req.query(\"includeMerged\"));\n\t\t\tconst query = d.select().from(schema.actors);\n\t\t\tconst rows = includeMerged\n\t\t\t\t? query.orderBy(schema.actors.display_name).all()\n\t\t\t\t: query\n\t\t\t\t\t\t.where(and(ne(schema.actors.status, \"merged\"), ne(schema.actors.status, \"deactivated\")))\n\t\t\t\t\t\t.orderBy(schema.actors.display_name)\n\t\t\t\t\t\t.all();\n\t\t\treturn c.json({ items: rows });\n\t\t}\n\t});\n\n\t// GET /api/sync/attempts\n\tapp.get(\"/api/sync/attempts\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tlet limit = queryInt(c.req.query(\"limit\"), 25);\n\t\t\tif (limit <= 0) return c.json({ error: \"invalid_limit\" }, 400);\n\t\t\tlimit = Math.min(limit, 500);\n\t\t\tconst rows = d\n\t\t\t\t.select({\n\t\t\t\t\tpeer_device_id: schema.syncAttempts.peer_device_id,\n\t\t\t\t\tok: schema.syncAttempts.ok,\n\t\t\t\t\terror: schema.syncAttempts.error,\n\t\t\t\t\tstarted_at: schema.syncAttempts.started_at,\n\t\t\t\t\tfinished_at: schema.syncAttempts.finished_at,\n\t\t\t\t\tops_in: schema.syncAttempts.ops_in,\n\t\t\t\t\tops_out: schema.syncAttempts.ops_out,\n\t\t\t\t\tlocal_sync_capability: schema.syncAttempts.local_sync_capability,\n\t\t\t\t\tpeer_sync_capability: schema.syncAttempts.peer_sync_capability,\n\t\t\t\t\tnegotiated_sync_capability: schema.syncAttempts.negotiated_sync_capability,\n\t\t\t\t})\n\t\t\t\t.from(schema.syncAttempts)\n\t\t\t\t.orderBy(desc(schema.syncAttempts.finished_at))\n\t\t\t\t.limit(limit)\n\t\t\t\t.all();\n\t\t\tconst showDiag = queryBool(c.req.query(\"includeDiagnostics\"));\n\t\t\tconst items = rows.map((row) => mapSyncAttemptRow(row, showDiag));\n\t\t\treturn c.json({ items, redacted: !showDiag });\n\t\t}\n\t});\n\n\t// GET /api/sync/pairing — uses ensureDeviceIdentity from core (fix #5 context)\n\t//\n\t// The pairing payload is not redacted by the generic diagnostics toggle:\n\t// it is the actual command the user shares with their own other devices,\n\t// and the UI already hides it inside a \"Show pairing command\" disclosure\n\t// that they explicitly open. Redacting the payload here broke the\n\t// happy-path pairing flow because the UI had nothing to render as the\n\t// command when diagnostics were off.\n\tapp.get(\"/api/sync/pairing\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tlet deviceId: string | undefined;\n\t\t\tlet publicKey: string | undefined;\n\t\t\tlet fingerprint: string | undefined;\n\n\t\t\ttry {\n\t\t\t\tconst [id, fp] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\t\tdeviceId = id;\n\t\t\t\tfingerprint = fp;\n\t\t\t\tconst row = d\n\t\t\t\t\t.select({ public_key: schema.syncDevice.public_key })\n\t\t\t\t\t.from(schema.syncDevice)\n\t\t\t\t\t.where(eq(schema.syncDevice.device_id, id))\n\t\t\t\t\t.get();\n\t\t\t\tpublicKey = row?.public_key ?? \"\";\n\t\t\t} catch {\n\t\t\t\treturn c.json({ error: \"device identity unavailable\" }, 500);\n\t\t\t}\n\n\t\t\tif (!deviceId || !fingerprint) {\n\t\t\t\treturn c.json({ error: \"public key missing\" }, 500);\n\t\t\t}\n\n\t\t\treturn c.json({\n\t\t\t\tdevice_id: deviceId,\n\t\t\t\tfingerprint,\n\t\t\t\tpublic_key: publicKey ?? null,\n\t\t\t\tpairing_filter_hint: PAIRING_FILTER_HINT,\n\t\t\t\taddresses: pairingAdvertiseAddresses(config),\n\t\t\t});\n\t\t}\n\t});\n\n\t// ------------------------------------------------------------------\n\t// POST mutations\n\t// ------------------------------------------------------------------\n\n\t// POST /api/sync/peers/rename\n\tapp.post(\"/api/sync/peers/rename\", async (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tlet body: Record<string, unknown>;\n\t\t\ttry {\n\t\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t\t} catch {\n\t\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t\t}\n\t\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\t\tconst rawName = String(body.name ?? \"\");\n\t\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\t\tif (!rawName.trim()) return c.json({ error: \"name required\" }, 400);\n\t\t\tlet name: string;\n\t\t\ttry {\n\t\t\t\tname = normalizeHumanPresentationName(rawName, \"name\");\n\t\t\t} catch (error) {\n\t\t\t\treturn c.json({ error: error instanceof Error ? error.message : \"name_invalid\" }, 400);\n\t\t\t}\n\t\t\tconst exists = d\n\t\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t.get();\n\t\t\tif (!exists) return c.json({ error: \"peer not found\" }, 404);\n\t\t\td.update(schema.syncPeers)\n\t\t\t\t.set({ name })\n\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t.run();\n\t\t\treturn c.json({ ok: true });\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/run\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown> = {};\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\tbody = {};\n\t\t}\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tif (!config.syncEnabled) {\n\t\t\treturn c.json({ error: \"sync_disabled\" }, 403);\n\t\t}\n\t\tconst address =\n\t\t\ttypeof body.address === \"string\" && body.address.trim() ? body.address.trim() : null;\n\t\tconst requestedPeerId =\n\t\t\ttypeof body.peer_device_id === \"string\" && body.peer_device_id.trim()\n\t\t\t\t? body.peer_device_id.trim()\n\t\t\t\t: null;\n\t\tlet peerIds: string[];\n\t\tif (address) {\n\t\t\tconst peerId = findPeerDeviceIdForAddress(store, address);\n\t\t\tif (!peerId) return c.json({ error: \"unknown peer address\" }, 404);\n\t\t\tpeerIds = [peerId];\n\t\t} else if (requestedPeerId) {\n\t\t\tconst requestedPeerRows = store.db\n\t\t\t\t.prepare(\"SELECT peer_device_id FROM sync_peers WHERE peer_device_id = ?\")\n\t\t\t\t.all(requestedPeerId) as Array<{ peer_device_id: string | null }>;\n\t\t\tpeerIds = requestedPeerRows\n\t\t\t\t.map((row) => String(row.peer_device_id ?? \"\").trim())\n\t\t\t\t.filter(Boolean);\n\t\t} else {\n\t\t\tconst allPeerRows = store.db.prepare(\"SELECT peer_device_id FROM sync_peers\").all() as Array<{\n\t\t\t\tpeer_device_id: string | null;\n\t\t\t}>;\n\t\t\tpeerIds = allPeerRows.map((row) => String(row.peer_device_id ?? \"\").trim()).filter(Boolean);\n\t\t}\n\t\tconst items = [] as Array<Record<string, unknown>>;\n\t\tfor (const peerId of peerIds) {\n\t\t\t// keysDir must match the sync daemon's key material — omitting it made\n\t\t\t// this route sign with a different device key whenever CODEMEM_KEYS_DIR\n\t\t\t// was set, so manual sync runs failed peer auth while daemon syncs worked.\n\t\t\tconst result = await runSyncPass(store.db, peerId, {\n\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\tdbPath: store.dbPath,\n\t\t\t\tscanner: store.scanner,\n\t\t\t});\n\t\t\titems.push({\n\t\t\t\tpeer_device_id: peerId,\n\t\t\t\t...result,\n\t\t\t\tskippedOut: undefined,\n\t\t\t\tskipped_out: safeSkippedSyncDetail(result.skippedOut),\n\t\t\t});\n\t\t}\n\t\treturn c.json({ items });\n\t});\n\n\tapp.post(\"/api/sync/peers/scope\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\tconst include = Array.isArray(body.include)\n\t\t\t? body.include\n\t\t\t\t\t.filter((value): value is string => typeof value === \"string\")\n\t\t\t\t\t.map((value) => value.trim())\n\t\t\t\t\t.filter(Boolean)\n\t\t\t: null;\n\t\tconst exclude = Array.isArray(body.exclude)\n\t\t\t? body.exclude\n\t\t\t\t\t.filter((value): value is string => typeof value === \"string\")\n\t\t\t\t\t.map((value) => value.trim())\n\t\t\t\t\t.filter(Boolean)\n\t\t\t: null;\n\t\tconst inheritGlobal = Boolean(body.inherit_global);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst exists = d\n\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t.from(schema.syncPeers)\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.get();\n\t\tif (!exists) return c.json({ error: \"peer not found\" }, 404);\n\t\td.update(schema.syncPeers)\n\t\t\t.set({\n\t\t\t\tprojects_include_json: inheritGlobal ? null : JSON.stringify(include ?? []),\n\t\t\t\tprojects_exclude_json: inheritGlobal ? null : JSON.stringify(exclude ?? []),\n\t\t\t})\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.run();\n\t\tconst row = d\n\t\t\t.select({\n\t\t\t\tprojects_include_json: schema.syncPeers.projects_include_json,\n\t\t\t\tprojects_exclude_json: schema.syncPeers.projects_exclude_json,\n\t\t\t})\n\t\t\t.from(schema.syncPeers)\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.get() as Record<string, unknown> | undefined;\n\t\tif (!row) return c.json({ error: \"peer not found\" }, 404);\n\t\treturn c.json({\n\t\t\tok: true,\n\t\t\tproject_scope: currentProjectScope(row, readPeerProjectFilters(store, peerDeviceId)),\n\t\t});\n\t});\n\n\tapp.get(\"/api/sync/sharing-domains/settings\", (c) => {\n\t\tconst store = getStore();\n\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 250));\n\t\treturn c.json({\n\t\t\tscopes: listSharingDomainSettingsScopes(store.db),\n\t\t\tmappings: listProjectScopeSettingsMappings(store.db),\n\t\t\tprojects: listProjectScopeCandidates(store.db, { limit }),\n\t\t\tlocal_default_scope_id: LOCAL_DEFAULT_SCOPE_ID,\n\t\t});\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/projection\", (c) => {\n\t\tconst store = getStore();\n\t\treturn c.json(\n\t\t\tlistLegacyRecipientPolicyProjections(store.db, {\n\t\t\t\tlocalActorId: store.actorId,\n\t\t\t\tlocalDeviceId: store.deviceId,\n\t\t\t}),\n\t\t);\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/review\", (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\treturn c.json(\n\t\t\tlistRecipientPolicyReview(store.db, {\n\t\t\t\tlocalActorId: store.actorId,\n\t\t\t\tlocalDeviceId: store.deviceId,\n\t\t\t}),\n\t\t);\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/intent\", (c) => {\n\t\tconst store = getStore();\n\t\treturn c.json(listRecipientPolicyIntent(store.db));\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/reconciliation-status\", (c) => {\n\t\treturn c.json(listRecipientPolicyReconciliationStatus(getStore()));\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/edges/preview\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\ttry {\n\t\t\treturn c.json(previewRecipientPolicyEdges(store.db, body));\n\t\t} catch (error) {\n\t\t\tif (error instanceof RecipientPolicyEdgeRequestError) {\n\t\t\t\tif (error.status === \"not_found\") {\n\t\t\t\t\treturn c.json({ error: error.errorCode }, 404);\n\t\t\t\t}\n\t\t\t\treturn c.json({ error: error.errorCode }, 400);\n\t\t\t}\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"edge_preview_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"edge_preview_failed\" }, 500);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/edges/commit\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\ttry {\n\t\t\tconst request = parseRecipientPolicyEdgeCommitRequest(body);\n\t\t\t// Acquire every affected Team queue in one stable order. Finish publication\n\t\t\t// uses the same Team boundary, so its reviewed snapshot cannot race a\n\t\t\t// successful user recipient commit.\n\t\t\tconst teamIds = request\n\t\t\t\t? [\n\t\t\t\t\t\t...new Set(\n\t\t\t\t\t\t\trequest.changes.flatMap((change) =>\n\t\t\t\t\t\t\t\tchange.recipient.recipientKind === \"team\" ? [change.recipient.teamId] : [],\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t].toSorted()\n\t\t\t\t: [];\n\t\t\tconst commit = async (\n\t\t\t\tindex: number,\n\t\t\t): Promise<ReturnType<typeof commitRecipientPolicyEdges>> => {\n\t\t\t\tconst teamId = teamIds[index];\n\t\t\t\tif (!teamId) return commitRecipientPolicyEdges(store.db, request ?? body);\n\t\t\t\treturn serializeRecipientPolicyTeamMutation(store.db, teamId, () => commit(index + 1));\n\t\t\t};\n\t\t\tconst result = await commit(0);\n\t\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\t\tif (result.status === \"stale\" || result.status === \"conflict\") {\n\t\t\t\treturn c.json(result, 409);\n\t\t\t}\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"edge_commit_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\tversion: 1,\n\t\t\t\t\tstatus: \"conflict\",\n\t\t\t\t\treviewedPolicyDigest: \"\",\n\t\t\t\t\terrorCode: \"edge_commit_conflict\",\n\t\t\t\t\toutcomes: [],\n\t\t\t\t\twriteCount: 0,\n\t\t\t\t\tidempotent: false,\n\t\t\t\t},\n\t\t\t\t409,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/invites/preview\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"request_invalid\" }, 400);\n\t\ttry {\n\t\t\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\t\tconst unavailable = recipientInviteCreationUnavailable(status, kind);\n\t\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\t\tconst targetId =\n\t\t\t\tkind === \"team_member\"\n\t\t\t\t\t? optionalViewerStrictString(body, \"policy_team_id\")\n\t\t\t\t\t: optionalViewerStrictString(body, \"target_identity_id\");\n\t\t\tif (!targetId) throw new Error(\"recipient_invite_metadata_invalid\");\n\t\t\tif (kind === \"add_device\" && targetId !== store.actorId) {\n\t\t\t\tthrow new Error(\"invite_identity_conflict\");\n\t\t\t}\n\t\t\tconst preview = recipientInviteOnboardingPreview(\n\t\t\t\tstore,\n\t\t\t\tbody,\n\t\t\t\trecipientInvitePreviewId(kind, targetId),\n\t\t\t);\n\t\t\treturn c.json({ kind, preview });\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"recipient_invite_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/invites\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"request_invalid\" }, 400);\n\t\ttry {\n\t\t\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\t\tconst unavailable = recipientInviteCreationUnavailable(status, kind);\n\t\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\t\tconst targetId =\n\t\t\t\tkind === \"team_member\"\n\t\t\t\t\t? optionalViewerStrictString(body, \"policy_team_id\")\n\t\t\t\t\t: optionalViewerStrictString(body, \"target_identity_id\");\n\t\t\tif (!targetId) throw new Error(\"recipient_invite_metadata_invalid\");\n\t\t\tif (kind === \"add_device\" && targetId !== store.actorId) {\n\t\t\t\tthrow new Error(\"invite_identity_conflict\");\n\t\t\t}\n\t\t\tconst preview = recipientInviteOnboardingPreview(\n\t\t\t\tstore,\n\t\t\t\tbody,\n\t\t\t\trecipientInvitePreviewId(kind, targetId),\n\t\t\t);\n\t\t\tconst reviewedDigest = optionalViewerStrictString(body, \"reviewed_onboarding_digest\");\n\t\t\tif (!reviewedDigest) throw new Error(\"reviewed_onboarding_digest_required\");\n\t\t\tif (reviewedDigest !== preview.reviewedOnboardingDigest) {\n\t\t\t\treturn c.json({ error: \"reviewed_onboarding_stale\", preview }, 409);\n\t\t\t}\n\t\t\tconst reviewedIntent = recipientInviteReviewedIntent(store, kind, targetId, preview);\n\t\t\tconst reviewedPreviewDigest = await recipientReviewedIntentDigest(reviewedIntent);\n\t\t\tconst groupId = resolveCoordinatorAdminGroup(optionalViewerString(body, \"group_id\"), status);\n\t\t\tconst ttlHours = parseInviteTtlHours(body.ttl_hours);\n\t\t\tif (!groupId) throw new Error(\"group_id_required\");\n\t\t\tif (ttlHours == null) throw new Error(\"ttl_hours_invalid\");\n\t\t\t// Initial owner enrollments intentionally remain Identity-unbound, so an explicitly\n\t\t\t// admin-configured owner selects admin issuance up front. Non-admin devices use the\n\t\t\t// signed Identity-bound endpoint; failures never fall back across this boundary.\n\t\t\tconst useAdminIssuance = kind === \"team_member\" || status.has_admin_secret;\n\t\t\tconst result = useAdminIssuance\n\t\t\t\t? await coordinatorCreateInviteAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tcoordinatorUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tpolicy: \"auto_admit\",\n\t\t\t\t\t\tttlHours,\n\t\t\t\t\t\tcreatedBy: store.actorId,\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t\t\tinviteKind: kind,\n\t\t\t\t\t\tpolicyTeamId: kind === \"team_member\" ? targetId : null,\n\t\t\t\t\t\ttargetIdentityId: kind === \"add_device\" ? targetId : null,\n\t\t\t\t\t\tinviterDeviceId: kind === \"add_device\" ? preview.binding.deviceId : null,\n\t\t\t\t\t\treviewedPreviewDigest,\n\t\t\t\t\t\treviewedIntent,\n\t\t\t\t\t})\n\t\t\t\t: await coordinatorCreateAddDeviceInviteAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tcoordinatorUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tttlHours,\n\t\t\t\t\t\tdeviceId: preview.binding.deviceId,\n\t\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\treviewedPreviewDigest,\n\t\t\t\t\t\treviewedIntent,\n\t\t\t\t\t});\n\t\t\treturn c.json({ ok: true, kind, preview, invite: result });\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"recipient_invite_failed\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/migrate\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst value = await parseViewerJsonBody(c);\n\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\t}\n\t\tconst body = value as Record<string, unknown>;\n\t\tif (\n\t\t\tObject.keys(body).some((key) => key !== \"dryRun\") ||\n\t\t\t(Object.hasOwn(body, \"dryRun\") && typeof body.dryRun !== \"boolean\")\n\t\t) {\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\treturn c.json(\n\t\t\t\tmigrateRecipientPolicyIntent(\n\t\t\t\t\tstore.db,\n\t\t\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\t\t\t{ dryRun: body.dryRun === true },\n\t\t\t\t),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"migration_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"migration_failed\" }, 500);\n\t\t}\n\t});\n\n\tconst parseReviewRequest = (value: unknown): RecipientPolicyReviewResolveRequestV1 | null => {\n\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n\t\tconst body = value as Record<string, unknown>;\n\t\tconst allowedKeys = new Set([\"reviewItemId\", \"sourceFingerprint\", \"decision\", \"decisionInput\"]);\n\t\tif (\n\t\t\tObject.keys(body).some((key) => !allowedKeys.has(key)) ||\n\t\t\ttypeof body.reviewItemId !== \"string\" ||\n\t\t\ttypeof body.sourceFingerprint !== \"string\" ||\n\t\t\ttypeof body.decision !== \"string\"\n\t\t) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\treviewItemId: body.reviewItemId,\n\t\t\tsourceFingerprint: body.sourceFingerprint,\n\t\t\tdecision: body.decision as RecipientPolicyReviewDecisionV1,\n\t\t\t...(Object.hasOwn(body, \"decisionInput\") ? { decisionInput: body.decisionInput } : {}),\n\t\t};\n\t};\n\n\tapp.post(\"/api/sync/recipient-policy/v1/review/resolve\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tconst request = parseReviewRequest(body);\n\t\tif (!request) return c.json({ error: \"request_invalid\" }, 400);\n\t\tensureLocalActorRecord(store);\n\t\tconst result = resolveRecipientPolicyReview(\n\t\t\tstore.db,\n\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\trequest,\n\t\t);\n\t\tif (result.status === \"stale\" || result.status === \"conflict\") return c.json(result, 409);\n\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\treturn c.json(result);\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/review/resolve-bulk\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (\n\t\t\t!body ||\n\t\t\t!Array.isArray(body.requests) ||\n\t\t\tbody.requests.length === 0 ||\n\t\t\tbody.requests.length > 100\n\t\t)\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\tconst requests = body.requests.map(parseReviewRequest);\n\t\tif (requests.some((request) => request == null))\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\tensureLocalActorRecord(store);\n\t\tconst result = resolveRecipientPolicyReviewBulk(\n\t\t\tstore.db,\n\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\trequests as RecipientPolicyReviewResolveRequestV1[],\n\t\t);\n\t\treturn c.json(result, result.results.some((item) => item.status !== \"applied\") ? 207 : 200);\n\t});\n\n\tapp.get(\"/api/sync/projects\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 50));\n\t\tconst offset = Math.max(0, queryInt(c.req.query(\"offset\"), 0));\n\t\tconst inventory = listProjectScopeInventory(store.db, {\n\t\t\tidentitySource: c.req.query(\"identity_source\"),\n\t\t\tlimit,\n\t\t\toffset,\n\t\t\tquery: c.req.query(\"q\"),\n\t\t\tscopeId: c.req.query(\"scope_id\"),\n\t\t\tstatus: c.req.query(\"status\"),\n\t\t});\n\t\tconst operations = await shareOperationReadModels(store, undefined, false);\n\t\tconst operationById = new Map(\n\t\t\toperations.map((operation) => [operation.operation_id, operation]),\n\t\t);\n\t\tconst sharingByProject = new Map<string, Array<Record<string, unknown>>>();\n\t\tconst reviewed = store.db\n\t\t\t.prepare(`SELECT p.operation_id, p.canonical_project_identity\n\t\t\t FROM share_operation_projects p\n\t\t\t JOIN share_operations o ON o.operation_id = p.operation_id\n\t\t\t WHERE o.inviter_actor_id = ? ORDER BY o.created_at, p.ordinal`)\n\t\t\t.all(store.actorId) as Array<{ operation_id: string; canonical_project_identity: string }>;\n\t\tfor (const item of reviewed) {\n\t\t\tconst operation = operationById.get(item.operation_id);\n\t\t\tif (!operation) continue;\n\t\t\tconst current = sharingByProject.get(item.canonical_project_identity) ?? [];\n\t\t\tcurrent.push({\n\t\t\t\tperson: operation.person,\n\t\t\t\tlifecycle: {\n\t\t\t\t\tstate: operation.lifecycle.state,\n\t\t\t\t\tlabel: operation.lifecycle.label,\n\t\t\t\t\texplanation: operation.lifecycle.explanation,\n\t\t\t\t},\n\t\t\t});\n\t\t\tsharingByProject.set(item.canonical_project_identity, current);\n\t\t}\n\t\treturn c.json({\n\t\t\t...inventory,\n\t\t\tprojects: inventory.projects.map((project) => ({\n\t\t\t\t...project,\n\t\t\t\tsharing: sharingByProject.get(project.workspace_identity) ?? [],\n\t\t\t})),\n\t\t});\n\t});\n\n\tapp.post(\"/api/sync/projects/reassign-project\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\ttry {\n\t\t\tconst workspaceIdentity = optionalViewerStrictString(body, \"workspace_identity\") ?? \"\";\n\t\t\tconst project = optionalViewerStrictString(body, \"project\") ?? \"\";\n\t\t\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst result = reassignProjectScopeInventoryProject(store.db, {\n\t\t\t\tdeviceId,\n\t\t\t\tproject,\n\t\t\t\tworkspaceIdentity,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, ...result });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message }, message.includes(\"not found\") ? 404 : 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/projects/forget\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\ttry {\n\t\t\tconst workspaceIdentity = optionalViewerStrictString(body, \"workspace_identity\") ?? \"\";\n\t\t\tconst confirmationToken = optionalViewerStrictString(body, \"confirmation_token\");\n\t\t\tconst confirmed = body.confirmed === true;\n\t\t\tconst result = forgetProjectInventoryLocalMemories(store, {\n\t\t\t\tconfirmationToken,\n\t\t\t\tconfirmed,\n\t\t\t\tworkspaceIdentity,\n\t\t\t});\n\t\t\tif (!confirmed) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"project_forget_confirmation_required\",\n\t\t\t\t\t\tpreview: result,\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json({ ok: true, ...result });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message }, message.includes(\"not found\") ? 404 : 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/project-invites/preview\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid_json\" }, 400);\n\t\ttry {\n\t\t\tassertProjectInviteBody(body, false);\n\t\t\tconst createdAt = new Date().toISOString();\n\t\t\tconst inviteExpiresAt = new Date(\n\t\t\t\tnew Date(createdAt).getTime() + PROJECT_INVITE_TTL_HOURS * 3600 * 1000,\n\t\t\t).toISOString();\n\t\t\tconst { plan } = projectInvitePlan(store, body, createdAt, inviteExpiresAt);\n\t\t\treturn c.json(projectInvitePreview(plan));\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"project_invite_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/project-invites\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid_json\" }, 400);\n\t\ttry {\n\t\t\tassertProjectInviteBody(body, true);\n\t\t\tconst createdAt = new Date().toISOString();\n\t\t\tconst inviteExpiresAt = new Date(\n\t\t\t\tnew Date(createdAt).getTime() + PROJECT_INVITE_TTL_HOURS * 3600 * 1000,\n\t\t\t).toISOString();\n\t\t\tconst { plan, config } = projectInvitePlan(store, body, createdAt, inviteExpiresAt);\n\t\t\tif (String(body.reviewed_project_set_digest).trim() !== plan.reviewedProjectSetDigest) {\n\t\t\t\treturn c.json({ error: \"reviewed_project_set_changed\" }, 409);\n\t\t\t}\n\t\t\tconst existingState = (() => {\n\t\t\t\ttry {\n\t\t\t\t\treturn store.db\n\t\t\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t\t\t.pluck()\n\t\t\t\t\t\t.get(plan.operationId) as string | undefined;\n\t\t\t\t} catch {\n\t\t\t\t\t// Local persistence below remains authoritative. Keeping this precheck\n\t\t\t\t\t// best-effort preserves coordinator idempotency if local storage is unavailable.\n\t\t\t\t\treturn undefined;\n\t\t\t\t}\n\t\t\t})();\n\t\t\tif (existingState && existingState !== \"waiting_for_acceptance\") {\n\t\t\t\treturn c.json({ error: \"operation_state_invalid\" }, 409);\n\t\t\t}\n\t\t\t// The coordinator invite is minted before local persistence. If the local\n\t\t\t// transaction fails, operationId makes coordinator creation return the\n\t\t\t// current invite. Expired or revoked waiting invites are renewed in place.\n\t\t\tconst result = await coordinatorCreateInviteAction({\n\t\t\t\tgroupId: plan.coordinatorGroupId,\n\t\t\t\tcoordinatorUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tpolicy: \"auto_admit\",\n\t\t\t\tttlHours: PROJECT_INVITE_TTL_HOURS,\n\t\t\t\tcreatedBy: store.actorId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\toperationId: plan.operationId,\n\t\t\t\treviewedProjectSetDigest: plan.reviewedProjectSetDigest,\n\t\t\t\tinviterActorId: plan.inviterActorId,\n\t\t\t\tinviterDisplayName: projectInviteInviterDisplayName(store.actorDisplayName),\n\t\t\t\tinviterDeviceId: plan.inviterDeviceIds[0],\n\t\t\t\tpendingPersonId: plan.personId,\n\t\t\t\tprojectSummaries: plan.projects.map((project) => ({\n\t\t\t\t\tdisplay_name: project.displayName,\n\t\t\t\t\texisting_memory_count: project.existingMemoryCount,\n\t\t\t\t})),\n\t\t\t\tprojectIntent: plan.projects.map((project) => ({\n\t\t\t\t\tcanonical_identity: project.canonicalIdentity,\n\t\t\t\t\tdisplay_name: project.displayName,\n\t\t\t\t\texisting_memory_count: project.existingMemoryCount,\n\t\t\t\t})),\n\t\t\t});\n\t\t\tif (\n\t\t\t\tString(result.operation_id ?? \"\").trim() !== plan.operationId ||\n\t\t\t\tString(result.reviewed_project_set_digest ?? \"\").trim() !== plan.reviewedProjectSetDigest\n\t\t\t) {\n\t\t\t\tthrow new Error(\"coordinator_invite_intent_mismatch\");\n\t\t\t}\n\t\t\tconst payload = result.payload;\n\t\t\tif (!payload || typeof payload !== \"object\" || Array.isArray(payload)) {\n\t\t\t\tthrow new Error(\"coordinator_invite_payload_missing\");\n\t\t\t}\n\t\t\tconst token = String((payload as Record<string, unknown>).token ?? \"\").trim();\n\t\t\tconst expiresAt = String((payload as Record<string, unknown>).expires_at ?? \"\").trim();\n\t\t\tconst link = String(result.link ?? \"\").trim();\n\t\t\tconst encoded = String(result.encoded ?? \"\").trim();\n\t\t\tif (!token || !expiresAt || !link || !encoded) {\n\t\t\t\tthrow new Error(\"coordinator_invite_payload_invalid\");\n\t\t\t}\n\t\t\tconst persistedPlan = { ...plan, inviteExpiresAt: new Date(expiresAt).toISOString() };\n\t\t\tpersistShareOperation(store.db, persistedPlan, {\n\t\t\t\tinviteId: String(result.invite_id ?? \"\").trim() || null,\n\t\t\t\ttokenDigest: inviteTokenDigest(token),\n\t\t\t});\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\t...projectInvitePreview(persistedPlan),\n\t\t\t\tinvite: {\n\t\t\t\t\tlink,\n\t\t\t\t\tencoded,\n\t\t\t\t\texpires_at: persistedPlan.inviteExpiresAt,\n\t\t\t\t},\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"project_invite_failed\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/project-invites/:operationId\", async (c) => {\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst { payload } = await coordinatorProjectInvitePayload(operationId);\n\t\t\treturn c.json(\n\t\t\t\tpayload.state === \"accepted\" ? { ...payload, state: \"pending_setup\" } : payload,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst mapped = projectInviteOwnerErrorResponse(error, {\n\t\t\t\tcode: \"operation_read_failed\",\n\t\t\t\tstatus: 400,\n\t\t\t});\n\t\t\treturn c.json({ error: mapped.code }, mapped.status);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/project-invites/:operationId/reconcile\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await reconcileProjectInviteAcceptance(store, operationId);\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\toperation_id: operationId,\n\t\t\t\treconciled: result.accepted,\n\t\t\t\tstate: result.accepted ? \"pending_setup\" : \"waiting_for_acceptance\",\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst mapped = projectInviteOwnerErrorResponse(error, {\n\t\t\t\tcode: \"operation_reconcile_failed\",\n\t\t\t\tstatus: 409,\n\t\t\t});\n\t\t\treturn c.json({ error: mapped.code }, mapped.status);\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/share-operations\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst items = await shareOperationReadModels(store, undefined, false);\n\t\treturn c.json({ items });\n\t});\n\n\tapp.get(\"/api/sync/share-operations/:operationId\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\tconst [item] = await shareOperationReadModels(store, operationId);\n\t\treturn item ? c.json(item) : c.json({ error: \"operation_not_found\" }, 404);\n\t});\n\n\tconst advanceProjectShare = async (c: Context) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst advanced = await advanceProjectShareOperation(store, operationId);\n\t\t\tif (!advanced.advanced) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror:\n\t\t\t\t\t\t\tadvanced.state === \"cancelled\" ? \"operation_superseded\" : \"invitation_not_accepted\",\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [operation] = await shareOperationReadModels(store, operationId);\n\t\t\treturn c.json({ ok: true, operation });\n\t\t} catch (error) {\n\t\t\tconst code = error instanceof Error ? error.message : \"provisioning_failed\";\n\t\t\tconst state = store.db\n\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t.pluck()\n\t\t\t\t.get(operationId);\n\t\t\tif (state === \"cancelled\") {\n\t\t\t\treturn c.json({ error: \"operation_superseded\" }, 409);\n\t\t\t}\n\t\t\treturn c.json({ error: code }, code === \"operation_not_found\" ? 404 : 409);\n\t\t}\n\t};\n\n\tapp.post(\"/api/sync/share-operations/:operationId/advance\", advanceProjectShare);\n\n\tapp.post(\"/api/sync/project-invites/:operationId/provision\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst plan = await executeProjectShareProvisioning(store, operationId);\n\t\t\tif (plan.superseded) {\n\t\t\t\t// Consistent with /advance: a supersession race is a conflict, not a\n\t\t\t\t// success with a flag.\n\t\t\t\treturn c.json({ error: \"operation_superseded\" }, 409);\n\t\t\t}\n\t\t\treturn c.json({ ok: true, operation_id: operationId, state: \"active\", plan });\n\t\t} catch (error) {\n\t\t\tconst code = error instanceof Error ? error.message : \"provisioning_failed\";\n\t\t\tconst state = store.db\n\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t.pluck()\n\t\t\t\t.get(operationId);\n\t\t\tif (state === \"cancelled\") {\n\t\t\t\treturn c.json({ error: \"operation_superseded\" }, 409);\n\t\t\t}\n\t\t\treturn c.json({ error: code }, code === \"operation_not_found\" ? 404 : 409);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/legacy-shared-review/reassign\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\ttry {\n\t\t\tconst workspaceIdentity = optionalViewerStrictString(body, \"workspace_identity\") ?? \"\";\n\t\t\tconst scopeId = optionalViewerStrictString(body, \"scope_id\") ?? \"\";\n\t\t\tconst confirmationToken = optionalViewerStrictString(body, \"confirmation_token\");\n\t\t\tconst confirmedOldCopies = body.confirmed_old_copies === true;\n\t\t\tconst preview = legacySharedReviewReassignmentPreview(store, {\n\t\t\t\tscopeId,\n\t\t\t\tworkspaceIdentity,\n\t\t\t});\n\t\t\tif (!confirmedOldCopies) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"legacy_review_confirmation_required\",\n\t\t\t\t\t\tmessage: preview.warning,\n\t\t\t\t\t\tpreview,\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\treassignLegacySharedReviewGroup(store, {\n\t\t\t\t\tconfirmationToken,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tworkspaceIdentity,\n\t\t\t\t}),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message }, message.includes(\"not found\") ? 404 : 400);\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/sharing-domains/project-mappings\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\tconst confirmedGuardrailTokens = optionalViewerStringList(body, \"confirmed_guardrail_tokens\");\n\t\t\tconst mappingInput = parseViewerProjectMappingInput(body);\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tconst analysis = analyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput);\n\t\t\tif (analysis.requested_workspace_identity?.startsWith(\"unmapped:\")) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"unmapped_project_local_only\",\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\"Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.\",\n\t\t\t\t\t\tguardrail_warnings: analysis.warnings,\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst missingConfirmations = missingGuardrailConfirmations(\n\t\t\t\tanalysis.warnings,\n\t\t\t\tconfirmedGuardrailTokens,\n\t\t\t);\n\t\t\tif (missingConfirmations.length > 0) {\n\t\t\t\tconst missingCodes = [...new Set(missingConfirmations.map((warning) => warning.code))];\n\t\t\t\tconst missingTokens = [\n\t\t\t\t\t...new Set(missingConfirmations.map((warning) => warning.confirmation_token)),\n\t\t\t\t].filter((token): token is string => typeof token === \"string\" && token.length > 0);\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"guardrail_confirmation_required\",\n\t\t\t\t\t\trequired_guardrails: missingCodes,\n\t\t\t\t\t\trequired_guardrail_tokens: missingTokens,\n\t\t\t\t\t\tguardrail_warnings: analysis.warnings,\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst mapping = upsertProjectScopeSettingsMapping(store.db, {\n\t\t\t\tdeviceId,\n\t\t\t\t...mappingInput,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, mapping, guardrail_warnings: analysis.warnings });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/sharing-domains/project-mappings/bulk\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\tconst rawMappings = body.mappings;\n\t\t\tif (!Array.isArray(rawMappings) || rawMappings.length === 0) {\n\t\t\t\treturn c.json({ error: \"mappings must be a non-empty array\" }, 400);\n\t\t\t}\n\t\t\tconst mappingInputs = rawMappings.map((raw) => {\n\t\t\t\tif (raw == null || typeof raw !== \"object\" || Array.isArray(raw)) {\n\t\t\t\t\tthrow new Error(\"each mapping must be an object\");\n\t\t\t\t}\n\t\t\t\treturn parseViewerProjectMappingInput(raw as Record<string, unknown>);\n\t\t\t});\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tconst analyses = mappingInputs.map((mappingInput) =>\n\t\t\t\tanalyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput),\n\t\t\t);\n\t\t\tconst unmapped = analyses.find((analysis) =>\n\t\t\t\tanalysis.requested_workspace_identity?.startsWith(\"unmapped:\"),\n\t\t\t);\n\t\t\tif (unmapped) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"unmapped_project_local_only\",\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\"Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.\",\n\t\t\t\t\t\tguardrail_warnings: unmapped.warnings,\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst missingConfirmations = analyses.flatMap((analysis) =>\n\t\t\t\tmissingGuardrailConfirmations(analysis.warnings, []),\n\t\t\t);\n\t\t\tif (missingConfirmations.length > 0) {\n\t\t\t\tconst missingCodes = [...new Set(missingConfirmations.map((warning) => warning.code))];\n\t\t\t\tconst missingTokens = [\n\t\t\t\t\t...new Set(missingConfirmations.map((warning) => warning.confirmation_token)),\n\t\t\t\t].filter((token): token is string => typeof token === \"string\" && token.length > 0);\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"guardrail_confirmation_required\",\n\t\t\t\t\t\trequired_guardrails: missingCodes,\n\t\t\t\t\t\trequired_guardrail_tokens: missingTokens,\n\t\t\t\t\t\tguardrail_warnings: analyses.flatMap((analysis) => analysis.warnings),\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst saveMappings = store.db.transaction(() =>\n\t\t\t\tmappingInputs.map((mappingInput) =>\n\t\t\t\t\tupsertProjectScopeSettingsMapping(store.db, { deviceId, ...mappingInput }),\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tmappings: saveMappings(),\n\t\t\t\tguardrail_warnings: analyses.flatMap((analysis) => analysis.warnings),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\tapp.delete(\"/api/sync/sharing-domains/project-mappings/:id\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst id = Number(c.req.param(\"id\"));\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tconst deleted = deleteProjectScopeSettingsMapping(store.db, id);\n\t\t\treturn c.json({ ok: true, deleted });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/peers/identity\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\tconst requestedActorId =\n\t\t\tbody.actor_id == null ? undefined : String(body.actor_id ?? \"\").trim() || null;\n\t\tconst claimedLocalActor =\n\t\t\ttypeof body.claimed_local_actor === \"boolean\" ? body.claimed_local_actor : undefined;\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst peer = d\n\t\t\t.select({\n\t\t\t\tpeer_device_id: schema.syncPeers.peer_device_id,\n\t\t\t\tactor_id: schema.syncPeers.actor_id,\n\t\t\t\tclaimed_local_actor: schema.syncPeers.claimed_local_actor,\n\t\t\t})\n\t\t\t.from(schema.syncPeers)\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.get();\n\t\tif (!peer) return c.json({ error: \"peer not found\" }, 404);\n\n\t\tlet nextActorId = peer.actor_id ?? null;\n\t\tlet nextClaimedLocalActor = Boolean(peer.claimed_local_actor);\n\t\tif (requestedActorId !== undefined) {\n\t\t\tnextActorId = requestedActorId;\n\t\t\tif (requestedActorId) {\n\t\t\t\tconst actor = d\n\t\t\t\t\t.select({\n\t\t\t\t\t\tactor_id: schema.actors.actor_id,\n\t\t\t\t\t\tis_local: schema.actors.is_local,\n\t\t\t\t\t\tstatus: schema.actors.status,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.actors)\n\t\t\t\t\t.where(eq(schema.actors.actor_id, requestedActorId))\n\t\t\t\t\t.get();\n\t\t\t\tif (!actor) return c.json({ error: \"actor not found\" }, 404);\n\t\t\t\tif (actor.status !== \"active\") return c.json({ error: \"actor not active\" }, 409);\n\t\t\t\tnextClaimedLocalActor = claimedLocalActor ?? Boolean(actor.is_local);\n\t\t\t} else {\n\t\t\t\tnextClaimedLocalActor = claimedLocalActor ?? false;\n\t\t\t}\n\t\t} else if (claimedLocalActor !== undefined) {\n\t\t\tnextClaimedLocalActor = claimedLocalActor;\n\t\t\tif (claimedLocalActor) {\n\t\t\t\tnextActorId = store.actorId;\n\t\t\t} else if (nextActorId === store.actorId) {\n\t\t\t\tnextActorId = null;\n\t\t\t}\n\t\t}\n\n\t\td.update(schema.syncPeers)\n\t\t\t.set({\n\t\t\t\tactor_id: nextActorId,\n\t\t\t\tclaimed_local_actor: nextClaimedLocalActor ? 1 : 0,\n\t\t\t})\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.run();\n\t\treturn c.json({ ok: true, actor_id: nextActorId, claimed_local_actor: nextClaimedLocalActor });\n\t});\n\n\tapp.post(\"/api/sync/actors\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst rawDisplayName = String(body.display_name ?? \"\");\n\t\tif (!rawDisplayName.trim()) return c.json({ error: \"display_name required\" }, 400);\n\t\tlet displayName: string;\n\t\ttry {\n\t\t\tdisplayName = normalizeHumanPresentationName(rawDisplayName, \"display_name\");\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"display_name_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst now = new Date().toISOString();\n\t\tconst actor = {\n\t\t\tactor_id: randomUUID(),\n\t\t\tdisplay_name: displayName,\n\t\t\tis_local: 0,\n\t\t\tstatus: \"active\",\n\t\t\tmerged_into_actor_id: null,\n\t\t\tcreated_at: now,\n\t\t\tupdated_at: now,\n\t\t};\n\t\td.insert(schema.actors).values(actor).run();\n\t\treturn c.json(actor);\n\t});\n\n\tapp.post(\"/api/sync/actors/rename\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst actorId = String(body.actor_id ?? \"\").trim();\n\t\tif (!actorId) return c.json({ error: \"actor_id required\" }, 400);\n\t\tlet displayName: string;\n\t\ttry {\n\t\t\tdisplayName = normalizeHumanPresentationName(String(body.display_name ?? \"\"), \"display_name\");\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"display_name_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst actor = d.select().from(schema.actors).where(eq(schema.actors.actor_id, actorId)).get();\n\t\tif (!actor) return c.json({ error: \"actor not found\" }, 404);\n\t\tconst updatedAt = new Date().toISOString();\n\t\td.update(schema.actors)\n\t\t\t.set({ display_name: displayName, updated_at: updatedAt })\n\t\t\t.where(eq(schema.actors.actor_id, actorId))\n\t\t\t.run();\n\t\treturn c.json({ ...actor, display_name: displayName, updated_at: updatedAt });\n\t});\n\n\tapp.post(\"/api/sync/actors/merge\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst primaryActorId = String(body.primary_actor_id ?? \"\").trim();\n\t\tconst secondaryActorId = String(body.secondary_actor_id ?? \"\").trim();\n\t\tif (!primaryActorId) return c.json({ error: \"primary_actor_id required\" }, 400);\n\t\tif (!secondaryActorId) return c.json({ error: \"secondary_actor_id required\" }, 400);\n\t\tif (primaryActorId === secondaryActorId) return c.json({ error: \"actor ids must differ\" }, 400);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst releaseActorMutations = await claimRecipientPolicyActorMutations(store.db, [\n\t\t\tprimaryActorId,\n\t\t\tsecondaryActorId,\n\t\t]);\n\t\t// This transaction is synchronous. Deferring release prevents a thrown transaction\n\t\t// from leaking the lock while keeping it held through every mutation below.\n\t\tqueueMicrotask(releaseActorMutations);\n\t\tconst now = new Date().toISOString();\n\t\tconst result = store.db\n\t\t\t.transaction(() => {\n\t\t\t\tconst primary = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.actors)\n\t\t\t\t\t.where(eq(schema.actors.actor_id, primaryActorId))\n\t\t\t\t\t.get();\n\t\t\t\tconst secondary = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.actors)\n\t\t\t\t\t.where(eq(schema.actors.actor_id, secondaryActorId))\n\t\t\t\t\t.get();\n\t\t\t\tif (!primary || !secondary) return { error: \"actor not found\", status: 404 as const };\n\t\t\t\tif (primary.status !== \"active\") {\n\t\t\t\t\treturn { error: \"primary actor not active\", status: 409 as const };\n\t\t\t\t}\n\t\t\t\tif (secondary.status !== \"active\") {\n\t\t\t\t\treturn { error: \"secondary actor not active\", status: 409 as const };\n\t\t\t\t}\n\t\t\t\tif (secondary.is_local && secondary.actor_id === store.actorId) {\n\t\t\t\t\treturn { error: \"cannot merge this device's own local actor\", status: 409 as const };\n\t\t\t\t}\n\t\t\t\tconst memberships = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.policyTeamMemberships)\n\t\t\t\t\t.where(eq(schema.policyTeamMemberships.identity_id, secondaryActorId))\n\t\t\t\t\t.all();\n\t\t\t\tconst primaryMemberships = new Map<string, (typeof memberships)[number] | undefined>();\n\t\t\t\tfor (const membership of memberships) {\n\t\t\t\t\tconst primaryMembership = d\n\t\t\t\t\t\t.select()\n\t\t\t\t\t\t.from(schema.policyTeamMemberships)\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.team_id, membership.team_id),\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.identity_id, primaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.get();\n\t\t\t\t\tif (\n\t\t\t\t\t\tprimaryMembership &&\n\t\t\t\t\t\t(primaryMembership.role !== membership.role ||\n\t\t\t\t\t\t\tprimaryMembership.status !== membership.status)\n\t\t\t\t\t) {\n\t\t\t\t\t\treturn { error: \"actor team memberships conflict\", status: 409 as const };\n\t\t\t\t\t}\n\t\t\t\t\tprimaryMemberships.set(membership.team_id, primaryMembership);\n\t\t\t\t}\n\t\t\t\tconst directRecipients = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.projectRecipients)\n\t\t\t\t\t.where(\n\t\t\t\t\t\tand(\n\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, secondaryActorId),\n\t\t\t\t\t\t),\n\t\t\t\t\t)\n\t\t\t\t\t.all();\n\t\t\t\tconst primaryRecipients = new Map<string, (typeof directRecipients)[number] | undefined>();\n\t\t\t\tfor (const recipient of directRecipients) {\n\t\t\t\t\tconst primaryRecipient = d\n\t\t\t\t\t\t.select()\n\t\t\t\t\t\t.from(schema.projectRecipients)\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(\n\t\t\t\t\t\t\t\t\tschema.projectRecipients.canonical_project_identity,\n\t\t\t\t\t\t\t\t\trecipient.canonical_project_identity,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, primaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.get();\n\t\t\t\t\tif (primaryRecipient && primaryRecipient.status !== recipient.status) {\n\t\t\t\t\t\treturn { error: \"actor project recipients conflict\", status: 409 as const };\n\t\t\t\t\t}\n\t\t\t\t\tprimaryRecipients.set(recipient.canonical_project_identity, primaryRecipient);\n\t\t\t\t}\n\n\t\t\t\tconst mergeDigest = createHash(\"sha256\")\n\t\t\t\t\t.update(\n\t\t\t\t\t\tJSON.stringify({\n\t\t\t\t\t\t\tkind: \"identity-merge-v1\",\n\t\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\t\tnonce: randomUUID(),\n\t\t\t\t\t\t}),\n\t\t\t\t\t)\n\t\t\t\t\t.digest(\"hex\");\n\t\t\t\tconst bindings = d\n\t\t\t\t\t.select({\n\t\t\t\t\t\tdeviceId: schema.identityDevices.device_id,\n\t\t\t\t\t\tassignmentVersion: schema.identityDevices.assignment_version,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.identityDevices)\n\t\t\t\t\t.where(eq(schema.identityDevices.identity_id, secondaryActorId))\n\t\t\t\t\t.all();\n\t\t\t\tif (bindings.length > 0) {\n\t\t\t\t\tconst commitDigest = mergeDigest;\n\t\t\t\t\tconst outcomes = bindings.map((binding) => ({\n\t\t\t\t\t\tdeviceId: binding.deviceId,\n\t\t\t\t\t\tpreviousIdentityId: secondaryActorId,\n\t\t\t\t\t\ttargetIdentityId: primaryActorId,\n\t\t\t\t\t\taction: \"rebind\",\n\t\t\t\t\t}));\n\t\t\t\t\tstore.db\n\t\t\t\t\t\t.prepare(`INSERT INTO device_identity_binding_commits(\n\t\t\t\t\t\tcommit_digest, reviewed_inventory_digest, request_json, outcomes_json, write_count,\n\t\t\t\t\t\tdecided_by_identity_id, decided_by_device_id, created_at\n\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)\n\t\t\t\t\t\t.run(\n\t\t\t\t\t\t\tcommitDigest,\n\t\t\t\t\t\t\t`identity-merge:${secondaryActorId}:${primaryActorId}`,\n\t\t\t\t\t\t\tJSON.stringify({ primaryActorId, secondaryActorId }),\n\t\t\t\t\t\t\tJSON.stringify(outcomes),\n\t\t\t\t\t\t\tbindings.length,\n\t\t\t\t\t\t\tstore.actorId,\n\t\t\t\t\t\t\tstore.deviceId,\n\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t);\n\n\t\t\t\t\tfor (const binding of bindings) {\n\t\t\t\t\t\tconst revision = createHash(\"sha256\")\n\t\t\t\t\t\t\t.update(`identity-merge-revision-v1\\0${commitDigest}\\0${binding.deviceId}`)\n\t\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\t\tconst idempotencyKey = createHash(\"sha256\")\n\t\t\t\t\t\t\t.update(`identity-merge-row-v1\\0${commitDigest}\\0${binding.deviceId}`)\n\t\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\t\tconst bindingUpdate = store.db\n\t\t\t\t\t\t\t.prepare(`UPDATE identity_devices SET\n\t\t\t\t\t\t\tidentity_id = ?, provenance = 'review_resolution', revision = ?,\n\t\t\t\t\t\t\tmigration_state = 'user_managed', source_fingerprint = ?,\n\t\t\t\t\t\t\tidempotency_key = ?, updated_at = ?\n\t\t\t\t\t\t WHERE device_id = ? AND identity_id = ?`)\n\t\t\t\t\t\t\t.run(\n\t\t\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\t\t\trevision,\n\t\t\t\t\t\t\t\tcommitDigest,\n\t\t\t\t\t\t\t\tidempotencyKey,\n\t\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t\t\tbinding.deviceId,\n\t\t\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\tif (bindingUpdate.changes !== 1)\n\t\t\t\t\t\t\tthrow new Error(\"identity_merge_binding_update_failed\");\n\t\t\t\t\t\tconst rebound = store.db\n\t\t\t\t\t\t\t.prepare(\"SELECT assignment_version FROM identity_devices WHERE device_id = ?\")\n\t\t\t\t\t\t\t.get(binding.deviceId) as { assignment_version: number } | undefined;\n\t\t\t\t\t\tif (!rebound || rebound.assignment_version !== binding.assignmentVersion + 1) {\n\t\t\t\t\t\t\tthrow new Error(\"identity_merge_assignment_version_unexpected\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tstore.db\n\t\t\t\t\t\t\t.prepare(\"DELETE FROM policy_team_device_decisions WHERE device_id = ?\")\n\t\t\t\t\t\t\t.run(binding.deviceId);\n\t\t\t\t\t\tstore.db\n\t\t\t\t\t\t\t.prepare(`INSERT INTO device_identity_binding_audit(\n\t\t\t\t\t\t\tevent_id, commit_digest, device_id, previous_identity_id, target_identity_id,\n\t\t\t\t\t\t\taction, previous_assignment_version, resulting_assignment_version,\n\t\t\t\t\t\t\tdecided_by_identity_id, decided_by_device_id, created_at\n\t\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, 'rebind', ?, ?, ?, ?, ?)`)\n\t\t\t\t\t\t\t.run(\n\t\t\t\t\t\t\t\tcreateHash(\"sha256\")\n\t\t\t\t\t\t\t\t\t.update(`identity-merge-event-v1\\0${commitDigest}\\0${binding.deviceId}`)\n\t\t\t\t\t\t\t\t\t.digest(\"hex\"),\n\t\t\t\t\t\t\t\tcommitDigest,\n\t\t\t\t\t\t\t\tbinding.deviceId,\n\t\t\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\t\t\tbinding.assignmentVersion,\n\t\t\t\t\t\t\t\trebound.assignment_version,\n\t\t\t\t\t\t\t\tstore.actorId,\n\t\t\t\t\t\t\t\tstore.deviceId,\n\t\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tfor (const membership of memberships) {\n\t\t\t\t\tconst primaryMembership = primaryMemberships.get(membership.team_id);\n\t\t\t\t\tif (primaryMembership) {\n\t\t\t\t\t\td.delete(schema.policyTeamMemberships)\n\t\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.team_id, membership.team_id),\n\t\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.identity_id, secondaryActorId),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.run();\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst revision = createHash(\"sha256\")\n\t\t\t\t\t\t.update(`identity-merge-membership-revision-v1\\0${mergeDigest}\\0${membership.team_id}`)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\tconst idempotencyKey = createHash(\"sha256\")\n\t\t\t\t\t\t.update(`identity-merge-membership-row-v1\\0${mergeDigest}\\0${membership.team_id}`)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\td.update(schema.policyTeamMemberships)\n\t\t\t\t\t\t.set({\n\t\t\t\t\t\t\tidentity_id: primaryActorId,\n\t\t\t\t\t\t\tprovenance: \"review_resolution\",\n\t\t\t\t\t\t\trevision,\n\t\t\t\t\t\t\tmigration_state: \"user_managed\",\n\t\t\t\t\t\t\tsource_fingerprint: mergeDigest,\n\t\t\t\t\t\t\tidempotency_key: idempotencyKey,\n\t\t\t\t\t\t\tupdated_at: now,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.team_id, membership.team_id),\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.identity_id, secondaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.run();\n\t\t\t\t}\n\t\t\t\tfor (const recipient of directRecipients) {\n\t\t\t\t\tconst primaryRecipient = primaryRecipients.get(recipient.canonical_project_identity);\n\t\t\t\t\tif (primaryRecipient) {\n\t\t\t\t\t\td.delete(schema.projectRecipients)\n\t\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\t\teq(\n\t\t\t\t\t\t\t\t\t\tschema.projectRecipients.canonical_project_identity,\n\t\t\t\t\t\t\t\t\t\trecipient.canonical_project_identity,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, secondaryActorId),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.run();\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst policyRevision = createHash(\"sha256\")\n\t\t\t\t\t\t.update(\n\t\t\t\t\t\t\t`identity-merge-recipient-revision-v1\\0${mergeDigest}\\0${recipient.canonical_project_identity}`,\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\tconst idempotencyKey = createHash(\"sha256\")\n\t\t\t\t\t\t.update(\n\t\t\t\t\t\t\t`identity-merge-recipient-row-v1\\0${mergeDigest}\\0${recipient.canonical_project_identity}`,\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\td.update(schema.projectRecipients)\n\t\t\t\t\t\t.set({\n\t\t\t\t\t\t\trecipient_id: primaryActorId,\n\t\t\t\t\t\t\tprovenance: \"review_resolution\",\n\t\t\t\t\t\t\tpolicy_revision: policyRevision,\n\t\t\t\t\t\t\tmigration_state: \"user_managed\",\n\t\t\t\t\t\t\tsource_fingerprint: mergeDigest,\n\t\t\t\t\t\t\tidempotency_key: idempotencyKey,\n\t\t\t\t\t\t\tupdated_at: now,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(\n\t\t\t\t\t\t\t\t\tschema.projectRecipients.canonical_project_identity,\n\t\t\t\t\t\t\t\t\trecipient.canonical_project_identity,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, secondaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.run();\n\t\t\t\t}\n\t\t\t\td.update(schema.recipientManagedProjectProjections)\n\t\t\t\t\t.set({ recipient_identity_id: primaryActorId, updated_at: now })\n\t\t\t\t\t.where(\n\t\t\t\t\t\teq(schema.recipientManagedProjectProjections.recipient_identity_id, secondaryActorId),\n\t\t\t\t\t)\n\t\t\t\t\t.run();\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(`UPDATE share_operations SET\n\t\t\t\t\t\tinviter_actor_id = CASE WHEN inviter_actor_id = ? THEN ? ELSE inviter_actor_id END,\n\t\t\t\t\t\trecipient_actor_id = CASE WHEN recipient_actor_id = ? THEN ? ELSE recipient_actor_id END,\n\t\t\t\t\t\tperson_id = CASE WHEN person_id = ? THEN ? ELSE person_id END,\n\t\t\t\t\t\tupdated_at = ?\n\t\t\t\t\t WHERE inviter_actor_id = ? OR recipient_actor_id = ? OR person_id = ?`)\n\t\t\t\t\t.run(\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\tnow,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t);\n\n\t\t\t\tconst peerUpdate = d\n\t\t\t\t\t.update(schema.syncPeers)\n\t\t\t\t\t.set({ actor_id: primaryActorId })\n\t\t\t\t\t.where(eq(schema.syncPeers.actor_id, secondaryActorId))\n\t\t\t\t\t.run();\n\t\t\t\tif (primary.is_local) {\n\t\t\t\t\td.update(schema.syncPeers)\n\t\t\t\t\t\t.set({ claimed_local_actor: 1 })\n\t\t\t\t\t\t.where(eq(schema.syncPeers.actor_id, primaryActorId))\n\t\t\t\t\t\t.run();\n\t\t\t\t}\n\t\t\t\td.update(schema.actors)\n\t\t\t\t\t.set({ status: \"merged\", merged_into_actor_id: primaryActorId, updated_at: now })\n\t\t\t\t\t.where(eq(schema.actors.actor_id, secondaryActorId))\n\t\t\t\t\t.run();\n\t\t\t\treturn { mergedCount: Number(peerUpdate.changes ?? 0) };\n\t\t\t})\n\t\t\t.immediate();\n\t\tif (\"error\" in result) return c.json({ error: result.error }, result.status);\n\t\treturn c.json({ merged_count: result.mergedCount });\n\t});\n\n\tapp.post(\"/api/sync/actors/deactivate\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst actorId = String(body.actor_id ?? \"\").trim();\n\t\tif (!actorId) return c.json({ error: \"actor_id required\" }, 400);\n\t\tif (actorId === store.actorId) {\n\t\t\treturn c.json({ error: \"cannot deactivate this device's own local actor\" }, 409);\n\t\t}\n\t\tconst releaseActorMutations = await claimRecipientPolicyActorMutations(store.db, [actorId]);\n\t\t// All following reads and writes are synchronous, so release after this turn.\n\t\tqueueMicrotask(releaseActorMutations);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst actor = d.select().from(schema.actors).where(eq(schema.actors.actor_id, actorId)).get();\n\t\tif (!actor) return c.json({ error: \"actor not found\" }, 404);\n\t\tif (actor.status !== \"active\") return c.json({ error: \"actor not active\" }, 409);\n\t\tconst now = new Date().toISOString();\n\t\td.update(schema.actors)\n\t\t\t.set({ status: \"deactivated\", updated_at: now })\n\t\t\t.where(eq(schema.actors.actor_id, actorId))\n\t\t\t.run();\n\t\td.update(schema.syncPeers)\n\t\t\t.set({ actor_id: null })\n\t\t\t.where(eq(schema.syncPeers.actor_id, actorId))\n\t\t\t.run();\n\t\treturn c.json({ ok: true });\n\t});\n\n\tapp.post(\"/api/sync/legacy-devices/claim\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst originDeviceId = String(body.origin_device_id ?? \"\").trim();\n\t\tif (!originDeviceId) return c.json({ error: \"origin_device_id required\" }, 400);\n\t\tconst updated = claimLegacyDeviceAsSelf(store, originDeviceId);\n\t\tif (updated <= 0) return c.json({ error: \"legacy device not found\" }, 404);\n\t\treturn c.json({ ok: true, origin_device_id: originDeviceId, updated });\n\t});\n\n\tapp.post(\"/api/sync/peers/accept-discovered\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\tconst fingerprint = String(body.fingerprint ?? \"\").trim();\n\t\tconst expectedGroupId = String(body.expected_group_id ?? \"\").trim();\n\t\tconst hasExpectedIncomingRequestId = Object.hasOwn(body, \"expected_incoming_request_id\");\n\t\tconst expectedIncomingRequestId = String(body.expected_incoming_request_id ?? \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\tif (hasExpectedIncomingRequestId && !expectedIncomingRequestId) {\n\t\t\treturn c.json({ error: \"expected_incoming_request_id must not be empty\" }, 400);\n\t\t}\n\t\tif (expectedIncomingRequestId && !expectedGroupId) {\n\t\t\treturn c.json({ error: \"expected_group_id required\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await acceptDiscoveredPeer(store, {\n\t\t\t\tpeerDeviceId,\n\t\t\t\tfingerprint: fingerprint || undefined,\n\t\t\t\texpectedGroupId: expectedGroupId || undefined,\n\t\t\t\texpectedIncomingRequestId: expectedIncomingRequestId || undefined,\n\t\t\t});\n\t\t\tif (!result.ok) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: result.error,\n\t\t\t\t\t\tdetail: result.detail,\n\t\t\t\t\t\t...(result.reason ? { reason: result.reason } : {}),\n\t\t\t\t\t},\n\t\t\t\t\t{ status: result.status as 400 | 404 | 409 },\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tpeer_device_id: result.peer_device_id,\n\t\t\t\tcreated: result.created,\n\t\t\t\tupdated: result.updated,\n\t\t\t\tname: result.name,\n\t\t\t\tneeds_scope_review: true,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (error instanceof CoordinatorReciprocalApprovalRequestChangedError) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: error.code,\n\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\"This approval request changed before it was submitted. Refresh sync status and review the current request.\",\n\t\t\t\t\t},\n\t\t\t\t\t{ status: 409 },\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"coordinator_lookup_failed\",\n\t\t\t\t\tdetail: error instanceof Error ? error.message : String(error),\n\t\t\t\t},\n\t\t\t\t{ status: 502 },\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/invites/create\", async (c) => {\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst groupId = String(body.group_id ?? \"\").trim();\n\t\tconst coordinatorUrl = body.coordinator_url == null ? null : String(body.coordinator_url ?? \"\");\n\t\tconst policy = String(body.policy ?? \"auto_admit\").trim();\n\t\tconst ttlHours = parseInviteTtlHours(body.ttl_hours);\n\t\tif (!groupId) return c.json({ error: \"group_id required\" }, 400);\n\t\tif (body.coordinator_url != null && typeof body.coordinator_url !== \"string\") {\n\t\t\treturn c.json({ error: \"coordinator_url must be string\" }, 400);\n\t\t}\n\t\tif (![\"auto_admit\", \"approval_required\"].includes(policy)) {\n\t\t\treturn c.json({ error: \"policy must be auto_admit or approval_required\" }, 400);\n\t\t}\n\t\tif (ttlHours == null) return c.json({ error: \"ttl_hours must be an integer >= 1\" }, 400);\n\t\ttry {\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst result = await coordinatorCreateInviteAction({\n\t\t\t\tgroupId,\n\t\t\t\tcoordinatorUrl,\n\t\t\t\tpolicy,\n\t\t\t\tttlHours,\n\t\t\t\tcreatedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/invites/inspect\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body || typeof body.invite !== \"string\") return c.json({ error: \"invite_invalid\" }, 400);\n\t\ttry {\n\t\t\tconst payload = decodeInvitePayload(extractInvitePayload(body.invite));\n\t\t\tconst recipientInvite = payload.kind === \"team_member\" || payload.kind === \"add_device\";\n\t\t\tif (recipientInvite) ensureStableStoreDeviceIdentity(store);\n\t\t\telse ensureStableStoreIdentity(store);\n\t\t\tif (!payload.operation_id && !recipientInvite) return c.json({ kind: \"legacy_team_invite\" });\n\t\t\tconst [status, inspected] = await requestJson(\n\t\t\t\t\"POST\",\n\t\t\t\t`${buildBaseUrl(payload.coordinator_url)}/v1/invites/inspect`,\n\t\t\t\t{ body: { token: payload.token }, timeoutS: 10 },\n\t\t\t);\n\t\t\tif (status < 200 || status >= 300) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: recipientInvite\n\t\t\t\t\t\t\t? safeRecipientInviteError(inspected?.error)\n\t\t\t\t\t\t\t: String(inspected?.error ?? \"invite_invalid\"),\n\t\t\t\t\t},\n\t\t\t\t\tstatus === 410 ? 410 : 400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst config = readCodememConfigFile();\n\t\t\tconst identityId = recipientInvite\n\t\t\t\t? recipientInviteAuthoritativeIdentityId({\n\t\t\t\t\t\tkind: payload.kind as \"team_member\" | \"add_device\",\n\t\t\t\t\t\tassigned_identity_id: inspected?.assigned_identity_id,\n\t\t\t\t\t\ttarget_identity_id: inspected?.target_identity_id,\n\t\t\t\t\t})\n\t\t\t\t: store.actorId;\n\t\t\tconst expectedTarget =\n\t\t\t\tpayload.kind === \"team_member\"\n\t\t\t\t\t? String(inspected?.policy_team_id ?? \"\").trim()\n\t\t\t\t\t: String(inspected?.target_identity_id ?? \"\").trim();\n\t\t\tif (recipientInvite) {\n\t\t\t\tif (\n\t\t\t\t\tString(inspected?.kind ?? \"\").trim() !== payload.kind ||\n\t\t\t\t\t!expectedTarget ||\n\t\t\t\t\tString(inspected?.reviewed_preview_digest ?? \"\").trim() !==\n\t\t\t\t\t\tString(payload.reviewed_preview_digest ?? \"\").trim() ||\n\t\t\t\t\t(payload.kind === \"team_member\" && expectedTarget !== payload.policy_team_id) ||\n\t\t\t\t\t(payload.kind === \"team_member\" &&\n\t\t\t\t\t\t(identityId !== String(payload.assigned_identity_id ?? \"\").trim() || !identityId)) ||\n\t\t\t\t\t(payload.kind === \"add_device\" && expectedTarget !== payload.target_identity_id)\n\t\t\t\t) {\n\t\t\t\t\treturn c.json({ error: \"recipient_invite_intent_mismatch\" }, 409);\n\t\t\t\t}\n\t\t\t\tif (inspected?.reviewed_intent == null) {\n\t\t\t\t\treturn c.json({ error: \"recipient_invite_review_unavailable\" }, 409);\n\t\t\t\t}\n\t\t\t\tlet reviewedIntent: RecipientReviewedIntentV1;\n\t\t\t\ttry {\n\t\t\t\t\treviewedIntent = await verifyRecipientReviewedIntent(inspected.reviewed_intent, {\n\t\t\t\t\t\ttarget:\n\t\t\t\t\t\t\tpayload.kind === \"team_member\"\n\t\t\t\t\t\t\t\t? { kind: \"team_member\", policyTeamId: expectedTarget }\n\t\t\t\t\t\t\t\t: { kind: \"add_device\", targetIdentityId: expectedTarget },\n\t\t\t\t\t\tdigest: String(payload.reviewed_preview_digest ?? \"\").trim(),\n\t\t\t\t\t});\n\t\t\t\t} catch {\n\t\t\t\t\treturn c.json({ error: \"recipient_invite_intent_mismatch\" }, 409);\n\t\t\t\t}\n\t\t\t\tconst preview = recipientInviteOnboardingPreviewFromReviewedIntent(\n\t\t\t\t\tstore,\n\t\t\t\t\t{\n\t\t\t\t\t\tkind: payload.kind,\n\t\t\t\t\t\tpolicy_team_id: payload.kind === \"team_member\" ? expectedTarget : null,\n\t\t\t\t\t\tassigned_identity_id: payload.kind === \"team_member\" ? identityId : null,\n\t\t\t\t\t\ttarget_identity_id: payload.kind === \"add_device\" ? identityId : null,\n\t\t\t\t\t\tdevice_name: optionalViewerString(body, \"device_name\"),\n\t\t\t\t\t},\n\t\t\t\t\tString(payload.token),\n\t\t\t\t\treviewedIntent,\n\t\t\t\t);\n\t\t\t\treturn c.json({\n\t\t\t\t\t...inspected,\n\t\t\t\t\trecipient_name:\n\t\t\t\t\t\treviewedIntent.journey === \"add_device\"\n\t\t\t\t\t\t\t? reviewedIntent.targetIdentity.displayName\n\t\t\t\t\t\t\t: store.actorDisplayName,\n\t\t\t\t\tdevice_name: preview.binding.deviceDisplayName,\n\t\t\t\t\tonboarding: preview,\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\t...inspected,\n\t\t\t\trecipient_name: store.actorDisplayName,\n\t\t\t\tdevice_name: friendlyDeviceName({\n\t\t\t\t\texplicitName: String(config.sync_device_name ?? \"\"),\n\t\t\t\t\tosName: hostname(),\n\t\t\t\t\tfallbackSeed: store.deviceId,\n\t\t\t\t}),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: safeRecipientInviteError(error) }, 400);\n\t\t}\n\t});\n\n\t// POST /api/sync/invites/import accepts both team invites (coordinator\n\t// invite envelope or codemem:// link) and device-pairing payloads\n\t// (base64 JSON with { device_id, fingerprint, public_key, addresses }).\n\t// The server discriminates by decoding the pasted text — UI callers get\n\t// one textarea for all flows. Response type distinguishes legacy Team joins,\n\t// exact-Project pending setup, recipient onboarding, and direct pairing.\n\tapp.post(\"/api/sync/invites/import\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst rawValue = String(body.invite ?? \"\").trim();\n\t\tif (!rawValue) return c.json({ error: \"invite required\" }, 400);\n\n\t\t// Users often paste the whole shell command emitted by the Pairing\n\t\t// diagnostics disclosure (`echo '<b64>' | base64 -d | codemem sync\n\t\t// pair --accept-file -`). Peel the base64 out if we see that shape.\n\t\tconst shellMatch = rawValue.match(\n\t\t\t/echo\\s+['\"]([A-Za-z0-9+/=]+)['\"]\\s*\\|\\s*base64\\s+-d\\s*\\|\\s*codemem/,\n\t\t);\n\t\tconst normalized = shellMatch?.[1]?.trim() || rawValue;\n\n\t\tconst pairingResult = tryParsePairingPayload(normalized);\n\t\tif (pairingResult?.kind === \"invalid-pair\") {\n\t\t\treturn c.json({ error: pairingResult.error }, 400);\n\t\t}\n\t\tif (pairingResult?.kind === \"pair\") {\n\t\t\ttry {\n\t\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\t\tconst existing = d\n\t\t\t\t\t.select({ pinned_fingerprint: schema.syncPeers.pinned_fingerprint })\n\t\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, pairingResult.device_id))\n\t\t\t\t\t.get();\n\t\t\t\tconst existingFingerprint = String(existing?.pinned_fingerprint ?? \"\").trim();\n\t\t\t\tif (existingFingerprint && existingFingerprint !== pairingResult.fingerprint) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror: \"peer_conflict\",\n\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\"Pairing payload conflicts with the existing trusted fingerprint for this device. Remove or repair the old peer before accepting this pairing payload.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t409,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tupdatePeerAddresses(store.db, pairingResult.device_id, pairingResult.addresses, {\n\t\t\t\t\tpinnedFingerprint: pairingResult.fingerprint,\n\t\t\t\t\tpublicKey: pairingResult.public_key,\n\t\t\t\t\treplaceTrust: true,\n\t\t\t\t});\n\t\t\t\treturn c.json({\n\t\t\t\t\tok: true,\n\t\t\t\t\ttype: \"pair\",\n\t\t\t\t\tpeer_device_id: pairingResult.device_id,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t\t}\n\t\t}\n\n\t\tlet projectInvite = false;\n\t\tlet recipientInvite = false;\n\t\ttry {\n\t\t\tconst decoded = decodeInvitePayload(extractInvitePayload(rawValue));\n\t\t\tprojectInvite = Boolean(decoded.operation_id);\n\t\t\trecipientInvite = decoded.kind === \"team_member\" || decoded.kind === \"add_device\";\n\t\t\tif (recipientInvite) ensureStableStoreDeviceIdentity(store);\n\t\t\telse ensureStableStoreIdentity(store);\n\t\t\tconst reviewedOnboardingDigest =\n\t\t\t\ttypeof body.reviewed_onboarding_digest === \"string\"\n\t\t\t\t\t? body.reviewed_onboarding_digest.trim()\n\t\t\t\t\t: \"\";\n\t\t\tif (recipientInvite && !reviewedOnboardingDigest) {\n\t\t\t\treturn c.json({ error: \"reviewed_onboarding_digest_required\" }, 400);\n\t\t\t}\n\t\t\tconst result = await coordinatorImportInviteAction({\n\t\t\t\tinviteValue: rawValue,\n\t\t\t\tdbPath: store.dbPath,\n\t\t\t\trecipientActorId: recipientInvite ? null : store.actorId,\n\t\t\t\trecipientDisplayName:\n\t\t\t\t\tdecoded.kind === \"add_device\"\n\t\t\t\t\t\t? null\n\t\t\t\t\t\t: typeof body.recipient_name === \"string\"\n\t\t\t\t\t\t\t? body.recipient_name\n\t\t\t\t\t\t\t: store.actorDisplayName,\n\t\t\t\tdeviceDisplayName: typeof body.device_name === \"string\" ? body.device_name : null,\n\t\t\t\treviewedOnboardingDigest: reviewedOnboardingDigest || null,\n\t\t\t});\n\t\t\tconst type = recipientInvite\n\t\t\t\t? \"recipient_onboarding\"\n\t\t\t\t: projectInvite\n\t\t\t\t\t? \"project_share\"\n\t\t\t\t\t: \"team_join\";\n\t\t\tif (recipientInvite) {\n\t\t\t\tconst persistedIdentityId = String(result.identity_id ?? \"\").trim();\n\t\t\t\tif (!store.refreshPersistedLocalIdentity(persistedIdentityId)) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\ttype,\n\t\t\t\t\t\t\tsetup_state: \"restart_required\",\n\t\t\t\t\t\t\trestart_required: true,\n\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\"The invitation was accepted and the reviewed Identity was persisted, but this process could not safely adopt it. Restart codemem before continuing.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t200,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\t\t\tif ((projectInvite || recipientInvite) && getSyncRuntimeStatus?.()?.phase === \"disabled\") {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\t...result,\n\t\t\t\t\t\ttype,\n\t\t\t\t\t\tsetup_state: \"restart_required\",\n\t\t\t\t\t\trestart_required: true,\n\t\t\t\t\t\tdetail: projectInvite\n\t\t\t\t\t\t\t? \"The invitation was accepted and sync was enabled. Restart codemem to start the sync service; Project setup remains pending until the first sync finishes.\"\n\t\t\t\t\t\t\t: \"The invitation was accepted and sync was enabled. Restart codemem to start the sync service and receive the reviewed Projects.\",\n\t\t\t\t\t},\n\t\t\t\t\t200,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\t...result,\n\t\t\t\ttype,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (projectInvite) return c.json(projectInviteAcceptanceFailure(error), 400);\n\t\t\tif (recipientInvite) return c.json({ error: safeRecipientInviteError(error) }, 400);\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/status\", async (c) => {\n\t\tconst status = coordinatorAdminStatusPayload();\n\t\treturn c.json(status);\n\t});\n\n\tapp.get(\"/api/coordinator/admin/groups\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst includeArchived = queryBool(c.req.query(\"include_archived\"));\n\t\ttry {\n\t\t\tconst items = await coordinatorListGroupsAction({\n\t\t\t\tincludeArchived,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst groupId = String(body.group_id ?? \"\").trim();\n\t\tconst displayName = String(body.display_name ?? \"\").trim() || null;\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorCreateGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tdisplayName,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\ttry {\n\t\t\t\tconst defaultSpace = await ensureDefaultSpaceForTeam({\n\t\t\t\t\tstore: getStore(),\n\t\t\t\t\tconfig,\n\t\t\t\t\tgroupId,\n\t\t\t\t\tdisplayName: displayName || group.display_name || null,\n\t\t\t\t});\n\t\t\t\treturn c.json({ ok: true, group, default_space: defaultSpace, status });\n\t\t\t} catch (setupError) {\n\t\t\t\treturn c.json({\n\t\t\t\t\tok: true,\n\t\t\t\t\tgroup,\n\t\t\t\t\tdefault_space: null,\n\t\t\t\t\tsetup_warning: {\n\t\t\t\t\t\tstep: \"default_space\",\n\t\t\t\t\t\terror: setupError instanceof Error ? setupError.message : String(setupError),\n\t\t\t\t\t},\n\t\t\t\t\tstatus,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/rename\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst displayName = String(body.display_name ?? \"\").trim();\n\t\tif (!displayName) return c.json({ error: \"display_name required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorRenameGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tdisplayName,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!group) return c.json({ error: \"group_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, group, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/archive\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorArchiveGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!group) return c.json({ error: \"group_not_found_or_already_archived\", status }, 404);\n\t\t\tconst groups = removeConfiguredCoordinatorGroup(groupId);\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tgroup,\n\t\t\t\tstatus: coordinatorAdminStatusPayload(),\n\t\t\t\tdisconnected_group_id: groupId,\n\t\t\t\tgroups,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/unarchive\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorUnarchiveGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!group) return c.json({ error: \"group_not_found_or_not_archived\", status }, 404);\n\t\t\treturn c.json({ ok: true, group, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/groups/:group_id/scopes\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListScopesAction({\n\t\t\t\tgroupId,\n\t\t\t\tincludeInactive: queryBool(c.req.query(\"include_inactive\")),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/scopes\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\tconst scopeId = optionalViewerString(body, \"scope_id\");\n\t\tconst label = optionalViewerString(body, \"label\");\n\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\tif (!scopeId || !label) return c.json({ error: \"scope_id and label required\", status }, 400);\n\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst scope = await coordinatorCreateScopeAction({\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tlabel,\n\t\t\t\tkind: optionalViewerString(body, \"kind\"),\n\t\t\t\tauthorityType: optionalViewerString(body, \"authority_type\"),\n\t\t\t\tcoordinatorId: optionalViewerString(body, \"coordinator_id\"),\n\t\t\t\tmanifestIssuerDeviceId: optionalViewerString(body, \"manifest_issuer_device_id\"),\n\t\t\t\tmembershipEpoch,\n\t\t\t\tmanifestHash: optionalViewerString(body, \"manifest_hash\"),\n\t\t\t\tstatus: optionalViewerString(body, \"status\"),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, scope, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.patch(\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst scope = await coordinatorUpdateScopeAction({\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tlabel: body.label === undefined ? undefined : optionalViewerString(body, \"label\"),\n\t\t\t\tkind: body.kind === undefined ? undefined : optionalViewerString(body, \"kind\"),\n\t\t\t\tauthorityType:\n\t\t\t\t\tbody.authority_type === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"authority_type\"),\n\t\t\t\tcoordinatorId:\n\t\t\t\t\tbody.coordinator_id === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"coordinator_id\"),\n\t\t\t\tmanifestIssuerDeviceId:\n\t\t\t\t\tbody.manifest_issuer_device_id === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"manifest_issuer_device_id\"),\n\t\t\t\tmembershipEpoch,\n\t\t\t\tmanifestHash:\n\t\t\t\t\tbody.manifest_hash === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"manifest_hash\"),\n\t\t\t\tstatus: body.status === undefined ? undefined : optionalViewerString(body, \"status\"),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!scope) return c.json({ error: \"scope_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, scope, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id/members\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListScopeMembershipsAction({\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tincludeRevoked: queryBool(c.req.query(\"include_revoked\")),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, scope_id: scopeId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id/members\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\tconst deviceId = optionalViewerString(body, \"device_id\");\n\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t}\n\t\tconst role = optionalViewerString(body, \"role\");\n\t\tconst coordinatorId = optionalViewerString(body, \"coordinator_id\");\n\t\tconst manifestIssuerDeviceId = optionalViewerString(body, \"manifest_issuer_device_id\");\n\t\tconst manifestHash = optionalViewerString(body, \"manifest_hash\");\n\t\tconst signedManifestJson = optionalViewerString(body, \"signed_manifest_json\");\n\t\tconst effectId =\n\t\t\toptionalViewerString(body, \"effect_id\") ??\n\t\t\tcoordinatorAdminMembershipEffectId(\"grant\", randomUUID(), {\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tdeviceId,\n\t\t\t\trole,\n\t\t\t\tmembershipEpoch,\n\t\t\t\tcoordinatorId,\n\t\t\t\tmanifestIssuerDeviceId,\n\t\t\t\tmanifestHash,\n\t\t\t\tsignedManifestJson,\n\t\t\t});\n\t\ttry {\n\t\t\tconst membership = await coordinatorGrantScopeMembershipAction({\n\t\t\t\teffectId,\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tdeviceId,\n\t\t\t\trole,\n\t\t\t\tmembershipEpoch,\n\t\t\t\tcoordinatorId,\n\t\t\t\tmanifestIssuerDeviceId,\n\t\t\t\tmanifestHash,\n\t\t\t\tsignedManifestJson,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, membership, group_id: groupId, scope_id: scopeId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\n\t\t\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id/members/:device_id/revoke\",\n\t\tasync (c) => {\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\t\tconst body = await parseViewerJsonBody(c, { allowEmpty: true });\n\t\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t\t}\n\t\t\tconst manifestHash = optionalViewerString(body, \"manifest_hash\");\n\t\t\tconst signedManifestJson = optionalViewerString(body, \"signed_manifest_json\");\n\t\t\tconst effectId =\n\t\t\t\toptionalViewerString(body, \"effect_id\") ??\n\t\t\t\tcoordinatorAdminMembershipEffectId(\"revoke\", randomUUID(), {\n\t\t\t\t\tgroupId,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tdeviceId,\n\t\t\t\t\tmembershipEpoch,\n\t\t\t\t\tmanifestHash,\n\t\t\t\t\tsignedManifestJson,\n\t\t\t\t});\n\t\t\ttry {\n\t\t\t\tconst ok = await coordinatorRevokeScopeMembershipAction({\n\t\t\t\t\teffectId,\n\t\t\t\t\tgroupId,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tdeviceId,\n\t\t\t\t\tmembershipEpoch,\n\t\t\t\t\tmanifestHash,\n\t\t\t\t\tsignedManifestJson,\n\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t});\n\t\t\t\tif (!ok) return c.json({ error: \"membership_not_found\", status }, 404);\n\t\t\t\treturn c.json({\n\t\t\t\t\tok: true,\n\t\t\t\t\tgroup_id: groupId,\n\t\t\t\t\tscope_id: scopeId,\n\t\t\t\t\tdevice_id: deviceId,\n\t\t\t\t\tstatus,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t\t}\n\t\t},\n\t);\n\n\tapp.post(\"/api/coordinator/admin/invites\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(String(body.group_id ?? \"\").trim(), status);\n\t\tconst coordinatorUrl = body.coordinator_url == null ? null : String(body.coordinator_url ?? \"\");\n\t\tconst policy = String(body.policy ?? \"auto_admit\").trim();\n\t\tconst ttlHours = parseInviteTtlHours(body.ttl_hours);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (body.coordinator_url != null && typeof body.coordinator_url !== \"string\") {\n\t\t\treturn c.json({ error: \"coordinator_url must be string\", status }, 400);\n\t\t}\n\t\tif (![\"auto_admit\", \"approval_required\"].includes(policy)) {\n\t\t\treturn c.json({ error: \"policy must be auto_admit or approval_required\", status }, 400);\n\t\t}\n\t\tif (ttlHours == null) {\n\t\t\treturn c.json({ error: \"ttl_hours must be an integer >= 1\", status }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await coordinatorCreateInviteAction({\n\t\t\t\tgroupId,\n\t\t\t\tcoordinatorUrl,\n\t\t\t\tpolicy,\n\t\t\t\tttlHours,\n\t\t\t\tcreatedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ ...result, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/join-requests\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id_required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListJoinRequestsAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: status.coordinator_url,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/join-requests/:request_id/approve\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst requestId = String(c.req.param(\"request_id\") ?? \"\").trim();\n\t\tif (!requestId) return c.json({ error: \"request_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst result = await coordinatorReviewJoinRequestAction({\n\t\t\t\trequestId,\n\t\t\t\tapprove: true,\n\t\t\t\treviewedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!result) return c.json({ error: \"join request not found\", status }, 404);\n\t\t\tlet defaultSpaceMembership = null;\n\t\t\tlet setupWarning = null;\n\t\t\ttry {\n\t\t\t\tdefaultSpaceMembership = await maybeGrantDefaultSpaceOnJoin({\n\t\t\t\t\tstore: getStore(),\n\t\t\t\t\tconfig,\n\t\t\t\t\tgroupId: result.group_id,\n\t\t\t\t\trequestId,\n\t\t\t\t\tdeviceId: result.device_id,\n\t\t\t\t});\n\t\t\t} catch (grantError) {\n\t\t\t\tsetupWarning = {\n\t\t\t\t\tstep: \"default_space_grant\",\n\t\t\t\t\terror: grantError instanceof Error ? grantError.message : String(grantError),\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\trequest: result,\n\t\t\t\tdefault_space_membership: defaultSpaceMembership,\n\t\t\t\tsetup_warning: setupWarning,\n\t\t\t\tstatus,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json(\n\t\t\t\t{ error: message, status },\n\t\t\t\tmessage.includes(\"request_not_found\") || message.includes(\"not found\") ? 404 : 400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/join-requests/:request_id/deny\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst requestId = String(c.req.param(\"request_id\") ?? \"\").trim();\n\t\tif (!requestId) return c.json({ error: \"request_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst result = await coordinatorReviewJoinRequestAction({\n\t\t\t\trequestId,\n\t\t\t\tapprove: false,\n\t\t\t\treviewedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!result) return c.json({ error: \"join request not found\", status }, 404);\n\t\t\treturn c.json({ ok: true, request: result, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json(\n\t\t\t\t{ error: message, status },\n\t\t\t\tmessage.includes(\"request_not_found\") || message.includes(\"not found\") ? 404 : 400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/devices\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id_required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListDevicesAction({\n\t\t\t\tgroupId,\n\t\t\t\tincludeDisabled: queryBool(c.req.query(\"include_disabled\")),\n\t\t\t\tremoteUrl: status.coordinator_url,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/rename\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(String(body.group_id ?? \"\").trim(), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tlet displayName: string;\n\t\ttry {\n\t\t\tdisplayName = normalizeHumanPresentationName(String(body.display_name ?? \"\"), \"display_name\");\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"display_name_invalid\", status },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\ttry {\n\t\t\tconst device = await coordinatorRenameDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tdisplayName,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!device) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/disable\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst ok = await coordinatorDisableDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device_id: deviceId, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/enable\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst ok = await coordinatorEnableDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device_id: deviceId, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\t// Unified peer-enrollment entry point. Mode is chosen by an explicit\n\t// body field so a legitimate coordinator group named (for example)\n\t// `none` cannot collide with the manual-pairing path:\n\t// - `mode: \"discovered\"` (default) → promote a coordinator-discovered\n\t// device, seed scope from the :group_id group's template when\n\t// auto_seed_scope is true and the caller didn't pass an override.\n\t// - `mode: \"manual\"` → manual pairing. Accepts peer_public_key +\n\t// optional name/fingerprint/addresses; :group_id path param is\n\t// ignored and both discovery columns are left null.\n\t// See docs/plans/2026-04-22-multi-team-coordinator-groups-design.md.\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/enroll-peer\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\t// Admin-secret gating happens inside the discovered branch below —\n\t\t// manual pairing only writes a local sync_peers row and doesn't need\n\t\t// coordinator-admin privileges, matching the pre-existing /peers/accept\n\t\t// path.\n\t\tconst rawGroupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!rawGroupId) return c.json({ error: \"group_id required\" }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid_json\" }, 400);\n\t\t}\n\t\tconst rawMode = String(body.mode ?? \"\")\n\t\t\t.trim()\n\t\t\t.toLowerCase();\n\t\tif (rawMode && rawMode !== \"manual\" && rawMode !== \"discovered\") {\n\t\t\treturn c.json(\n\t\t\t\t{ error: \"invalid_mode\", detail: `mode must be 'discovered' or 'manual', got ${rawMode}` },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst mode: \"discovered\" | \"manual\" = rawMode === \"manual\" ? \"manual\" : \"discovered\";\n\t\t// Per-field normalization: distinguish \"caller did not specify\" from\n\t\t// \"caller set empty\". `undefined` = inherit (template); `null` or empty\n\t\t// array = explicit clear; non-empty array = use as-is.\n\t\tconst normalizeOverride = (value: unknown): string[] | null | undefined => {\n\t\t\tif (value === undefined) return undefined;\n\t\t\tif (value === null) return null;\n\t\t\tif (!Array.isArray(value)) return undefined;\n\t\t\tconst cleaned = value\n\t\t\t\t.map((item) => String(item ?? \"\").trim())\n\t\t\t\t.filter((item) => item.length > 0);\n\t\t\treturn cleaned.length === 0 ? null : cleaned;\n\t\t};\n\t\tconst overrideInclude = normalizeOverride(body.projects_include);\n\t\tconst overrideExclude = normalizeOverride(body.projects_exclude);\n\t\tconst scopeOverride =\n\t\t\toverrideInclude === undefined && overrideExclude === undefined\n\t\t\t\t? undefined\n\t\t\t\t: { projects_include: overrideInclude, projects_exclude: overrideExclude };\n\t\tconst store = getStore();\n\n\t\tif (mode === \"manual\") {\n\t\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\t\tconst publicKey = String(body.peer_public_key ?? \"\").trim();\n\t\t\tconst name = String(body.name ?? \"\").trim() || null;\n\t\t\tconst requestedFingerprint = String(body.fingerprint ?? \"\").trim();\n\t\t\tconst addressesInput = Array.isArray(body.peer_addresses) ? body.peer_addresses : [];\n\t\t\tconst addresses = mergeAddresses(\n\t\t\t\t[],\n\t\t\t\taddressesInput.map((item) => String(item ?? \"\").trim()).filter((item) => item.length > 0),\n\t\t\t);\n\t\t\tif (!peerDeviceId || !publicKey) {\n\t\t\t\treturn c.json({ error: \"peer_device_id_and_public_key_required\" }, 400);\n\t\t\t}\n\t\t\tconst fingerprint = requestedFingerprint || fingerprintPublicKey(publicKey);\n\t\t\tif (fingerprintPublicKey(publicKey) !== fingerprint) {\n\t\t\t\treturn c.json({ error: \"fingerprint_mismatch\" }, 400);\n\t\t\t}\n\t\t\tconst manualInclude =\n\t\t\t\toverrideInclude && overrideInclude.length > 0 ? JSON.stringify(overrideInclude) : null;\n\t\t\tconst manualExclude =\n\t\t\t\toverrideExclude && overrideExclude.length > 0 ? JSON.stringify(overrideExclude) : null;\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\t// Wrap the duplicate check + insert in a transaction so two concurrent\n\t\t\t// enrolls for the same peer cannot both clear the check. SQLite\n\t\t\t// serializes transactions on the write lock, so the second one sees\n\t\t\t// the committed row and returns 409 instead of racing past.\n\t\t\ttry {\n\t\t\t\tconst created = store.db.transaction(() => {\n\t\t\t\t\tconst existing = d\n\t\t\t\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t\t\t.get();\n\t\t\t\t\tif (existing) return false;\n\t\t\t\t\td.insert(schema.syncPeers)\n\t\t\t\t\t\t.values({\n\t\t\t\t\t\t\tpeer_device_id: peerDeviceId,\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tpinned_fingerprint: fingerprint,\n\t\t\t\t\t\t\tpublic_key: publicKey,\n\t\t\t\t\t\t\taddresses_json: JSON.stringify(addresses),\n\t\t\t\t\t\t\tprojects_include_json: manualInclude,\n\t\t\t\t\t\t\tprojects_exclude_json: manualExclude,\n\t\t\t\t\t\t\tcreated_at: now,\n\t\t\t\t\t\t\tlast_seen_at: now,\n\t\t\t\t\t\t\tdiscovered_via_coordinator_id: null,\n\t\t\t\t\t\t\tdiscovered_via_group_id: null,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.run();\n\t\t\t\t\treturn true;\n\t\t\t\t})();\n\t\t\t\tif (!created) {\n\t\t\t\t\treturn c.json({ error: \"peer_exists\", detail: \"Peer is already enrolled.\" }, 409);\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\t// Primary-key constraint collision is the expected race signal; the\n\t\t\t\t// first writer wins, the second gets \"peer_exists\".\n\t\t\t\tconst msg = error instanceof Error ? error.message.toLowerCase() : \"\";\n\t\t\t\tif (msg.includes(\"unique\") || msg.includes(\"primary key\")) {\n\t\t\t\t\treturn c.json({ error: \"peer_exists\", detail: \"Peer is already enrolled.\" }, 409);\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tpeer_device_id: peerDeviceId,\n\t\t\t\tcreated: true,\n\t\t\t\tupdated: false,\n\t\t\t\tname,\n\t\t\t\tgroup_id: null,\n\t\t\t});\n\t\t}\n\n\t\t// Discovered mode calls out to the coordinator for reciprocal approval,\n\t\t// so it needs the admin secret. Manual mode never leaves this process.\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? body.discovered_device_id ?? \"\").trim();\n\t\tconst fingerprint = String(body.fingerprint ?? \"\").trim();\n\t\tif (!peerDeviceId || !fingerprint) {\n\t\t\treturn c.json({ error: \"peer_device_id_and_fingerprint_required\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await acceptDiscoveredPeer(store, {\n\t\t\t\tpeerDeviceId,\n\t\t\t\tfingerprint,\n\t\t\t\texpectedGroupId: rawGroupId,\n\t\t\t\tscopeOverride,\n\t\t\t});\n\t\t\tif (result.ok) {\n\t\t\t\treturn c.json(result);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: result.error,\n\t\t\t\t\tdetail: result.detail,\n\t\t\t\t\t...(result.reason ? { reason: result.reason } : {}),\n\t\t\t\t},\n\t\t\t\tresult.status as 400 | 404 | 409,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\t// acceptDiscoveredPeer shells out to the coordinator for reciprocal\n\t\t\t// approval and can throw on timeout / network / auth failures. Map\n\t\t\t// those to a structured 502 so clients get the same shape as the\n\t\t\t// legacy /api/sync/peers/accept-discovered path.\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"coordinator_lookup_failed\",\n\t\t\t\t\tdetail: error instanceof Error ? error.message : String(error),\n\t\t\t\t},\n\t\t\t\t502,\n\t\t\t);\n\t\t}\n\t});\n\n\t// Local-only preferences for a coordinator group — project-scope template\n\t// + auto-seed toggle applied when peers are enrolled through the group.\n\t// See docs/plans/2026-04-22-multi-team-coordinator-groups-design.md.\n\t// Local-only preferences — these rows live in the viewer's own DB and never\n\t// cross the wire to the coordinator. No admin-secret gate: the admin secret\n\t// authorizes remote coordinator mutations, not local settings.\n\tapp.get(\"/api/coordinator/admin/groups/:group_id/preferences\", (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tconst coordinatorId = status.coordinator_url;\n\t\tif (!coordinatorId) return c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\tconst store = getStore();\n\t\tconst existing = getCoordinatorGroupPreference(store.db, coordinatorId, groupId);\n\t\tif (existing) return c.json({ preferences: existing, status });\n\t\treturn c.json({\n\t\t\tpreferences: {\n\t\t\t\tcoordinator_id: coordinatorId,\n\t\t\t\tgroup_id: groupId,\n\t\t\t\tprojects_include: null,\n\t\t\t\tprojects_exclude: null,\n\t\t\t\tauto_seed_scope: true,\n\t\t\t\tdefault_space_scope_id: null,\n\t\t\t\tauto_grant_default_space_on_join: false,\n\t\t\t\tupdated_at: null,\n\t\t\t},\n\t\t\tstatus,\n\t\t});\n\t});\n\n\tapp.put(\"/api/coordinator/admin/groups/:group_id/preferences\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tconst coordinatorId = status.coordinator_url;\n\t\tif (!coordinatorId) return c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid_json\", status }, 400);\n\t\t}\n\t\tconst normalizeList = (value: unknown): string[] | null | undefined => {\n\t\t\tif (value === undefined) return undefined;\n\t\t\tif (value === null) return null;\n\t\t\tif (!Array.isArray(value)) return undefined;\n\t\t\tconst cleaned = value\n\t\t\t\t.map((item) => String(item ?? \"\").trim())\n\t\t\t\t.filter((item) => item.length > 0);\n\t\t\treturn cleaned.length === 0 ? null : cleaned;\n\t\t};\n\t\tconst autoSeed = typeof body.auto_seed_scope === \"boolean\" ? body.auto_seed_scope : undefined;\n\t\tconst autoGrantDefaultSpace =\n\t\t\ttypeof body.auto_grant_default_space_on_join === \"boolean\"\n\t\t\t\t? body.auto_grant_default_space_on_join\n\t\t\t\t: undefined;\n\t\tconst defaultSpaceScopeId =\n\t\t\tbody.default_space_scope_id === undefined\n\t\t\t\t? undefined\n\t\t\t\t: optionalViewerString(body, \"default_space_scope_id\");\n\t\tif (autoGrantDefaultSpace === true && !defaultSpaceScopeId) {\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"default_space_scope_id_required_for_auto_grant\",\n\t\t\t\t\tstatus,\n\t\t\t\t},\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst store = getStore();\n\t\ttry {\n\t\t\tconst preferences = upsertCoordinatorGroupPreference(store.db, {\n\t\t\t\tcoordinator_id: coordinatorId,\n\t\t\t\tgroup_id: groupId,\n\t\t\t\tprojects_include: normalizeList(body.projects_include),\n\t\t\t\tprojects_exclude: normalizeList(body.projects_exclude),\n\t\t\t\tauto_seed_scope: autoSeed,\n\t\t\t\tdefault_space_scope_id: defaultSpaceScopeId,\n\t\t\t\tauto_grant_default_space_on_join: autoGrantDefaultSpace,\n\t\t\t});\n\t\t\treturn c.json({ preferences, status });\n\t\t} catch (error) {\n\t\t\tconst msg = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: msg, status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/remove\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst ok = await coordinatorRemoveDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device_id: deviceId, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/bootstrap-grants\", async (c) => {\n\t\tconst groupId = String(c.req.query(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id_required\" }, 400);\n\t\tconst config = readCoordinatorSyncConfig();\n\t\ttry {\n\t\t\tconst items = await coordinatorListBootstrapGrantsAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message }, 500);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/bootstrap-grants/revoke\", async (c) => {\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst grantId = String(body.grant_id ?? \"\").trim();\n\t\tif (!grantId) return c.json({ error: \"grant_id_required\" }, 400);\n\t\tconst config = readCoordinatorSyncConfig();\n\t\ttry {\n\t\t\tconst ok = await coordinatorRevokeBootstrapGrantAction({\n\t\t\t\tgrantId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"grant_not_found\" }, 404);\n\t\t\treturn c.json({ ok: true, grant_id: grantId });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message }, 500);\n\t\t}\n\t});\n\n\t// DELETE /api/sync/peers/:peer_device_id\n\tapp.delete(\"/api/sync/peers/:peer_device_id\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst peerDeviceId = c.req.param(\"peer_device_id\")?.trim();\n\t\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\t\tconst exists = d\n\t\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t.get();\n\t\t\tif (!exists) return c.json({ error: \"peer not found\" }, 404);\n\t\t\td.delete(schema.replicationCursors)\n\t\t\t\t.where(eq(schema.replicationCursors.peer_device_id, peerDeviceId))\n\t\t\t\t.run();\n\t\t\td.delete(schema.syncPeers).where(eq(schema.syncPeers.peer_device_id, peerDeviceId)).run();\n\t\t\treturn c.json({ ok: true });\n\t\t}\n\t});\n\n\treturn app;\n}\n","import {\n\tgetUpdateStatus as defaultGetUpdateStatus,\n\tdetectInstallKind,\n\ttype GetUpdateStatusOptions,\n\ttype UpdateStatus,\n\tVERSION,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\nexport interface UpdateStatusRoutesOptions {\n\tgetUpdateStatus?: (options: GetUpdateStatusOptions) => Promise<UpdateStatus>;\n}\n\nexport function updateStatusRoutes(options: UpdateStatusRoutesOptions = {}) {\n\tconst getUpdateStatus = options.getUpdateStatus ?? defaultGetUpdateStatus;\n\tconst app = new Hono();\n\n\tapp.get(\"/api/update-status\", async (c) => {\n\t\ttry {\n\t\t\tconst installKind = detectInstallKind({\n\t\t\t\tentryPath: process.argv[1] ?? \"\",\n\t\t\t\tenv: process.env,\n\t\t\t});\n\t\t\tconst status = await getUpdateStatus({\n\t\t\t\tcurrentVersion: VERSION,\n\t\t\t\tinstallKind,\n\t\t\t});\n\t\t\treturn c.json(status);\n\t\t} catch {\n\t\t\treturn c.json({ error: \"Update status unavailable.\" }, 503);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * @codemem/server — HTTP server (viewer, sync, API).\n *\n * Single HTTP server handling viewer routes and sync daemon.\n * Shares one better-sqlite3 connection between viewer and sync.\n * Embedding inference runs in a worker_thread (lazy-started).\n *\n * Entry: `codemem serve`\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type {\n\tDeviceIdentityCoordinatorEvidence,\n\tGetUpdateStatusOptions,\n\tObserverClient,\n\tUpdateStatus,\n} from \"@codemem/core\";\nimport { MemoryStore, type RawEventSweeper, resolveDbPath, VERSION } from \"@codemem/core\";\nimport { serveStatic } from \"@hono/node-server/serve-static\";\nimport { Hono } from \"hono\";\nimport { originGuard, preflightHandler } from \"./middleware.js\";\nimport {\n\tcreateInMemoryRequestRateLimiter,\n\ttype InMemoryRequestRateLimiter,\n} from \"./request-rate-limit.js\";\nimport { configRoutes } from \"./routes/config.js\";\nimport { healthRoutes } from \"./routes/health.js\";\nimport { memoryRoutes } from \"./routes/memory.js\";\nimport { observerStatusRoutes } from \"./routes/observer-status.js\";\nimport { packTransportRoutes } from \"./routes/pack.js\";\nimport { rawEventsRoutes } from \"./routes/raw-events.js\";\nimport { statsRoutes } from \"./routes/stats.js\";\nimport { type SyncRoutesOptions, syncProtocolRoutes, syncRoutes } from \"./routes/sync.js\";\nimport {\n\ttype LegacyTeamCompletionDependencies,\n\ttype LegacyTeamConfiguredGroupSnapshotLoader,\n\tTEAM_SETUP_ROUTE_PREFIX,\n\tteamSetupRoutes,\n} from \"./routes/team-setup.js\";\nimport { updateStatusRoutes } from \"./routes/update-status.js\";\n\nexport type {\n\tAdvancePendingProjectSharesResult,\n\tAdvanceProjectShareOperationResult,\n\tRecipientPolicyReconciliationReadModel,\n\tRecipientPolicyReconciliationReadState,\n\tReconcileConfiguredCoordinatorEnrollmentResult,\n\tReconcileRecipientPolicyProjectsResult,\n} from \"./routes/sync.js\";\nexport {\n\tadvancePendingProjectShares,\n\tadvanceProjectShareOperation,\n\tcreateRecipientPolicyReconcilerEffects,\n\tlistRecipientPolicyReconciliationStatus,\n\trecipientPolicyCapabilityFromStatus,\n\treconcileConfiguredCoordinatorEnrollment,\n\treconcileRecipientPolicyProjects,\n} from \"./routes/sync.js\";\nexport type {\n\tLegacyTeamSetupActionBlockedReasonV1,\n\tLegacyTeamSetupActionGateV1,\n\tLegacyTeamSetupCandidateSummaryV1,\n\tLegacyTeamSetupDetailResponseV1,\n\tLegacyTeamSetupDeviceV1,\n\tLegacyTeamSetupErrorResponseV1,\n\tLegacyTeamSetupFinishResponseV1,\n\tLegacyTeamSetupIdentityChoiceV1,\n\tLegacyTeamSetupMutationResponseV1,\n\tLegacyTeamSetupPendingCandidateSummaryV1,\n\tLegacyTeamSetupProjectV1,\n\tLegacyTeamSetupSummaryResponseV1,\n\tLegacyTeamSetupViewerAccessDeltaV1,\n\tLegacyTeamSetupViewV1,\n} from \"./routes/team-setup.js\";\n\nexport { VERSION };\n\n/** Shared store instance — SQLite WAL mode handles concurrent reads safely. */\nlet sharedStore: MemoryStore | null = null;\n\n/** Get (or create) the shared store instance. Exported so the sweeper can share it. */\nexport function getStore(): MemoryStore {\n\tif (!sharedStore) {\n\t\tsharedStore = new MemoryStore(resolveDbPath());\n\t}\n\treturn sharedStore;\n}\n\n/** Close the shared store (called on shutdown). */\nexport function closeStore(): void {\n\tsharedStore?.close();\n\tsharedStore = null;\n}\n\n/**\n * Create the Hono app with all viewer routes.\n * Exported for testing — pass a custom store factory to inject test DBs.\n */\nexport interface AppOptions {\n\tstoreFactory?: () => MemoryStore;\n\tsweeper?: RawEventSweeper | null;\n\tobserver?: ObserverClient | null;\n\tgetUpdateStatus?: (options: GetUpdateStatusOptions) => Promise<UpdateStatus>;\n\tloadDeviceIdentityCoordinatorEvidence?: () => Promise<DeviceIdentityCoordinatorEvidence>;\n\tloadLegacyTeamConfiguredGroupSnapshots?: LegacyTeamConfiguredGroupSnapshotLoader;\n\tteamSetupCompletionDependencies?: LegacyTeamCompletionDependencies | null;\n\treadCoordinatorConfig?: SyncRoutesOptions[\"readCoordinatorConfig\"];\n\trenameCoordinatorGroup?: SyncRoutesOptions[\"renameCoordinatorGroup\"];\n\tsyncRequestRateLimit?: {\n\t\tlimiter?: InMemoryRequestRateLimiter;\n\t\treadLimit?: number;\n\t\tmutationLimit?: number;\n\t\tunauthenticatedReadLimit?: number;\n\t\tunauthenticatedMutationLimit?: number;\n\t};\n\tgetSyncRuntimeStatus?: () => {\n\t\tphase:\n\t\t\t| \"starting\"\n\t\t\t| \"running\"\n\t\t\t| \"stopping\"\n\t\t\t| \"error\"\n\t\t\t| \"disabled\"\n\t\t\t| \"rebootstrapping\"\n\t\t\t| \"needs_attention\"\n\t\t\t| null;\n\t\tdetail?: string | null;\n\t} | null;\n}\n\nexport function createApp(opts?: AppOptions) {\n\tconst storeFactory = opts?.storeFactory ?? getStore;\n\tconst sweeper = opts?.sweeper ?? null;\n\tconst observer = opts?.observer ?? null;\n\tconst getSyncRuntimeStatus = opts?.getSyncRuntimeStatus ?? (() => null);\n\tlet invalidateTeamSetupSummary = () => {};\n\tconst app = new Hono();\n\n\t// CORS / origin guard\n\tapp.use(\"*\", preflightHandler());\n\tapp.use(\"*\", originGuard({ unsafeGetPathPrefixes: [TEAM_SETUP_ROUTE_PREFIX] }));\n\n\t// API routes\n\tapp.route(\"/\", healthRoutes(storeFactory));\n\tapp.route(\"/\", statsRoutes(storeFactory));\n\tapp.route(\"/\", memoryRoutes(storeFactory));\n\tapp.route(\"/\", packTransportRoutes(storeFactory));\n\tapp.route(\n\t\t\"/\",\n\t\tobserverStatusRoutes({\n\t\t\tgetStore: storeFactory,\n\t\t\tgetSweeper: () => sweeper,\n\t\t\tgetObserver: () => observer,\n\t\t}),\n\t);\n\tapp.route(\"/\", configRoutes({ getSweeper: () => sweeper }));\n\tapp.route(\"/\", rawEventsRoutes(storeFactory, sweeper));\n\tapp.route(\n\t\t\"/\",\n\t\tsyncRoutes(storeFactory, getSyncRuntimeStatus, {\n\t\t\tloadDeviceIdentityCoordinatorEvidence: opts?.loadDeviceIdentityCoordinatorEvidence,\n\t\t\tonRecipientPolicyTeamRenamed: () => invalidateTeamSetupSummary(),\n\t\t\treadCoordinatorConfig: opts?.readCoordinatorConfig,\n\t\t\trenameCoordinatorGroup: opts?.renameCoordinatorGroup,\n\t\t}),\n\t);\n\tapp.route(\n\t\t\"/\",\n\t\tteamSetupRoutes({\n\t\t\tgetStore: storeFactory,\n\t\t\tloadLegacyTeamConfiguredGroupSnapshots: opts?.loadLegacyTeamConfiguredGroupSnapshots,\n\t\t\tcompletionDependencies: opts?.teamSetupCompletionDependencies,\n\t\t\treadCoordinatorConfig: opts?.readCoordinatorConfig,\n\t\t\tregisterSummaryInvalidator: (invalidate) => {\n\t\t\t\tinvalidateTeamSetupSummary = invalidate;\n\t\t\t},\n\t\t}),\n\t);\n\tapp.route(\"/\", updateStatusRoutes({ getUpdateStatus: opts?.getUpdateStatus }));\n\n\t// Static assets — serve under /assets/*\n\t// Resolves to packages/viewer-server/static/ both in dev and when installed from npm.\n\tconst staticRoot =\n\t\tprocess.env.CODEMEM_VIEWER_STATIC_DIR ?? join(import.meta.dirname ?? \".\", \"../static\");\n\n\tapp.use(\"/assets/*\", async (c, next) => {\n\t\tc.header(\"Cache-Control\", \"no-cache\");\n\t\tawait next();\n\t});\n\n\tapp.use(\n\t\t\"/assets/*\",\n\t\tserveStatic({\n\t\t\troot: staticRoot,\n\t\t\trewriteRequestPath: (path) => path.replace(/^\\/assets/, \"\"),\n\t\t\tprecompressed: true,\n\t\t}),\n\t);\n\n\t// SPA — serve index.html for root and all client-side routes\n\tconst indexPath = join(staticRoot, \"index.html\");\n\tif (!existsSync(indexPath)) {\n\t\tthrow new Error(\n\t\t\t`Viewer assets missing at ${indexPath}. Run \\`pnpm build\\` from the repo root before starting the viewer.`,\n\t\t);\n\t}\n\tconst indexHtml = readFileSync(indexPath, \"utf-8\");\n\tapp.get(\"*\", (c) => {\n\t\tif (c.req.path.startsWith(\"/api/\")) {\n\t\t\treturn c.json({ error: \"not found\" }, 404);\n\t\t}\n\t\tc.header(\"Cache-Control\", \"no-store\");\n\t\treturn c.html(indexHtml);\n\t});\n\n\treturn app;\n}\n\n/**\n * Create the Hono app for peer-to-peer sync protocol routes only.\n *\n * This app is bound to a separate network-accessible listener\n * (default 0.0.0.0:7337) so remote peers can reach the sync\n * endpoints without exposing the viewer UI or local API routes.\n *\n * No CORS/origin guard is applied — sync requests are authenticated\n * via cryptographic signature verification instead.\n */\nexport function createSyncApp(opts?: AppOptions) {\n\tconst storeFactory = opts?.storeFactory ?? getStore;\n\tconst requestRateLimit = opts?.syncRequestRateLimit ?? {};\n\tconst rateLimiter = requestRateLimit.limiter ?? createInMemoryRequestRateLimiter();\n\tconst readLimit = Math.max(1, Math.trunc(requestRateLimit.readLimit ?? 120));\n\tconst mutationLimit = Math.max(1, Math.trunc(requestRateLimit.mutationLimit ?? 30));\n\tconst app = new Hono();\n\tapp.route(\n\t\t\"/\",\n\t\tsyncProtocolRoutes(storeFactory, {\n\t\t\trouteRateLimit: {\n\t\t\t\tlimiter: rateLimiter,\n\t\t\t\treadLimit,\n\t\t\t\tmutationLimit,\n\t\t\t\tunauthenticatedReadLimit: Math.max(\n\t\t\t\t\t1,\n\t\t\t\t\tMath.trunc(requestRateLimit.unauthenticatedReadLimit ?? Math.min(20, readLimit)),\n\t\t\t\t),\n\t\t\t\tunauthenticatedMutationLimit: Math.max(\n\t\t\t\t\t1,\n\t\t\t\t\tMath.trunc(requestRateLimit.unauthenticatedMutationLimit ?? Math.min(10, mutationLimit)),\n\t\t\t\t),\n\t\t\t},\n\t\t}),\n\t);\n\n\t// Catch-all — return generic 404 to avoid fingerprinting the server.\n\tapp.all(\"*\", (c) => c.json({ error: \"not found\" }, 404));\n\n\treturn app;\n}\n\n// No auto-start — the CLI's `serve` command owns server startup.\n"],"mappings":";;;;;;;;;;;;AAaA,IAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;AAAK,CAAC;;;;;AAMhE,SAAS,iBAAiB,QAAyB;CAClD,IAAI;CACJ,IAAI;EACH,MAAM,IAAI,IAAI,MAAM;CACrB,QAAQ;EACP,OAAO;CACR;CACA,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU,OAAO;CAClE,IAAI,IAAI,YAAY,IAAI,UAAU,OAAO;CACzC,MAAM,WAAW,IAAI,SAAS,WAAW,GAAG,IAAI,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI,IAAI;CAChF,OAAO,eAAe,IAAI,QAAQ;AACnC;;AAGA,IAAM,iCAAiB,IAAI,IAAI;CAAC;CAAQ;CAAU;CAAS;AAAK,CAAC;;;;;;;;;AAUjE,SAAS,sBAAsB,GAAqB;CACnD,MAAM,gBAAgB,EAAE,IAAI,OAAO,gBAAgB,KAAK,GAAA,CAAI,KAAK,CAAC,CAAC,YAAY;CAC/E,IAAI,gBAAgB,CAAC;EAAC;EAAe;EAAa;CAAM,CAAC,CAAC,SAAS,YAAY,GAC9E,OAAO;CAER,MAAM,UAAU,EAAE,IAAI,OAAO,SAAS;CACtC,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,CAAC,iBAAiB,OAAO;AACjC;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,YAAY,SAAyD;CACpF,OAAO,iBAAiB,OAAO,GAAY,SAAe;EACzD,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;EACpC,MAAM,SAAS,EAAE,IAAI;EACrB,MAAM,aACJ,WAAW,SAAS,WAAW,WAChC,SAAS,uBAAuB,MAAM,WAAW,EAAE,IAAI,KAAK,WAAW,MAAM,CAAC;EAE/E,IAAI,eAAe,IAAI,MAAM,KAAK,WAAW;GAC5C,IAAI,QAAQ;IAEX,IAAI,CAAC,iBAAiB,MAAM,GAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;IAG1C,EAAE,OAAO,+BAA+B,MAAM;IAC9C,EAAE,OAAO,gCAAgC,iCAAiC;IAC1E,EAAE,OAAO,gCAAgC,cAAc;GACxD,OAGC,IAAI,sBAAsB,CAAC,GAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;EAI5C,OAAO,IAAI,UAAU,iBAAiB,MAAM,GAAG;GAE9C,EAAE,OAAO,+BAA+B,MAAM;GAC9C,EAAE,OAAO,gCAAgC,iCAAiC;GAC1E,EAAE,OAAO,gCAAgC,cAAc;EACxD;EAIA,MAAM,KAAK;CACZ,CAAC;AACF;;;;;AAMA,SAAgB,mBAAmB;CAClC,OAAO,iBAAiB,OAAO,GAAY,SAAe;EACzD,IAAI,EAAE,IAAI,WAAW,WAAW;GAC/B,MAAM,KAAK;GACX;EACD;EACA,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;EACpC,IAAI,UAAU,iBAAiB,MAAM,GAAG;GACvC,EAAE,OAAO,+BAA+B,MAAM;GAC9C,EAAE,OAAO,gCAAgC,iCAAiC;GAC1E,EAAE,OAAO,gCAAgC,cAAc;GACvD,EAAE,OAAO,0BAA0B,OAAO;GAC1C,OAAO,EAAE,KAAK,MAAM,GAAG;EACxB;EACA,OAAO,EAAE,KAAK,MAAM,GAAG;CACxB,CAAC;AACF;;;AC3HA,SAAgB,iCAAiC,WAAW,KAAoC;CAC/F,MAAM,eAAe,KAAK,IAAI,KAAM,KAAK,MAAM,QAAQ,CAAC;CACxD,MAAM,0BAAU,IAAI,IAA0D;CAC9E,IAAI,SAAS;CAEb,SAAS,qBAAqB,OAAuB;EACpD,OAAO,KAAK,IAAI,GAAG,KAAK,KAAK,eAAe,KAAK,IAAI,GAAG,KAAK,IAAI,GAAI,CAAC;CACvE;CAEA,SAAS,sBAAsB,YAA0B;EACxD,IAAI,QAAQ,OAAO,MAAM,SAAS,OAAO,GAAG;EAC5C,MAAM,cAAc,aAAa,eAAe;EAChD,KAAK,MAAM,CAAC,KAAK,WAAW,SAC3B,IAAI,OAAO,aAAa,aAAa,QAAQ,OAAO,GAAG;CAEzD;CAEA,OAAO,EACN,MAAM,KAAa,OAAe;EACjC,UAAU;EACV,MAAM,aAAa,KAAK,IAAI;EAC5B,sBAAsB,UAAU;EAChC,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,CAAC;EAC/C,MAAM,YAAY,GAAG,UAAU,GAAG;EAClC,IAAI,SAAS,QAAQ,IAAI,SAAS;EAClC,IAAI,CAAC,QAAQ;GACZ,SAAS;IACR,SAAS,IAAI,YAAY;KACxB,mBAAmB;KACnB,UAAU;KACV,iBAAiB;IAClB,CAAC;IACD,YAAY;GACb;GACA,QAAQ,IAAI,WAAW,MAAM;EAC9B;EACA,OAAO,aAAa;EACpB,IAAI,OAAO,QAAQ,gBAAgB,CAAC,GACnC,OAAO;GAAE,SAAS;GAAM,aAAa;EAAE;EAExC,OAAO;GAAE,SAAS;GAAO,aAAa,qBAAqB,SAAS;EAAE;CACvE,EACD;AACD;;;;;;;;;AC5BA,IAAM,iBAAiB;AAEvB,IAAM,2BAAW,IAAI,IAAI;CAAC;CAAY;CAAkB;AAAe,CAAC;AACxE,IAAM,+BAAe,IAAI,IAAI;CAAC;CAAQ;CAAO;CAAQ;CAAW;AAAM,CAAC;AACvE,IAAM,kCAAkB,IAAI,IAAI,CAAC,+BAA+B,CAAC;AACjE,IAAM,uCAAuB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;AACV,IAAM,qCAAqB,IAAI,IAAY;CAC1C;CACA;CACA;CACA;AACD,CAAU;AACV,IAAM,sCAAsB,IAAI,IAAY,CAAC,oCAAoC,CAAC;AAClF,IAAM,eAAe;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD;AAEA,IAAM,WAAuB;CAC5B,gBAAgB,CAAC,QAAQ;CACzB,eAAe,CAAC,OAAO;CACvB,kBAAkB;CAClB,sBAAsB;CACtB,+BAA+B;CAC/B,uBAAuB,CAAC;CACxB,0BAA0B;CAC1B,2BAA2B;CAC3B,kBAAkB,CAAC;CACnB,oBAAoB;CACpB,wBAAwB;CACxB,oBAAoB;CACpB,cAAc;CACd,wBAAwB;CACxB,6BAA6B;CAC7B,4BAA4B;CAC5B,WAAW;CACX,WAAW;CACX,iBAAiB;CACjB,WAAW;CACX,4BAA4B;CAC5B,iCAAiC;CACjC,+BAA+B;AAChC;AAMA,SAAS,sBAAgC;CACxC,OAAO,4BAA4B;AACpC;AAEA,SAAS,yBAAyB,YAAoC;CACrE,MAAM,OAAO,EAAE,GAAG,WAAW;CAC7B,KAAK,MAAM,OAAO,qBACjB,OAAO,KAAK;CAEb,OAAO;AACR;AAEA,SAAS,mBAAmB,YAAoC;CAC/D,MAAM,YAAwB;EAAE,GAAG;EAAU,GAAG;CAAW;CAC3D,KAAK,MAAM,OAAO,CAAC,kBAAkB,eAAe,GACnD,UAAU,OAAO,sBAAsB,UAAU,IAAI,KAAK,SAAS;CAEpE,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,4BAA4B,GAEpE;EACF,MAAM,MAAM,QAAQ,IAAI;EACxB,IAAI,OAAO,QAAQ,QAAQ,IAAI;EAC/B,IAAI,QAAQ,oBAAoB,QAAQ,iBACvC,UAAU,OAAO,sBAAsB,GAAG,KAAK,UAAU;OAEzD,UAAU,OAAO;CAEnB;CACA,OAAO;AACR;AAEA,SAAS,kBAAkB,KAAa,OAAyB;CAChE,IAAI,SAAS,QAAQ,CAAC,mBAAmB,IAAI,GAAG,GAAG,OAAO;CAC1D,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,SAAS,IAAI,iBAAiB,CAAC;CACtE,IAAI,OAAO,UAAU,UACpB,OAAO,OAAO,KAAK,KAAgC,CAAC,CAAC,SAAS,IAAI,iBAAiB,CAAC;CAErF,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,KAAK,IAAI,iBAAiB;CACtE,OAAO;AACR;AAEA,SAAS,0BAA0B,YAAoC;CACtE,MAAM,YAAwB,CAAC;CAC/B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GACnD,UAAU,OAAO,kBAAkB,KAAK,KAAK;CAE9C,OAAO;AACR;AAEA,SAAS,kBAAkB,MAAe,OAAyB;CAClE,IAAI,OAAO,GAAG,MAAM,KAAK,GAAG,OAAO;CACnC,IAAI,QAAQ,QAAQ,SAAS,MAAM,OAAO,QAAQ,QAAQ,SAAS;CACnE,IAAI,OAAO,SAAS,YAAY,OAAO,UAAU,UAChD,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;CAErD,OAAO;AACR;AAEA,SAAS,uBACR,SACA,cACuD;CACvD,MAAM,iBAA6B,CAAC;CACpC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;EACnD,IAAI,CAAC,qBAAqB,IAAI,GAAG,GAAG;GACnC,eAAe,OAAO;GACtB;EACD;EACA,IAAI,mBAAmB,IAAI,GAAG,KAAK,UAAU,gBAC5C;EAED,IAAI,kBAAkB,OAAO,aAAa,IAAI,GAC7C;EAED,OAAO;GACN,gBAAgB,CAAC;GACjB,OAAO,GAAG,IAAI;EACf;CACD;CACA,OAAO;EAAE;EAAgB,OAAO;CAAK;AACtC;AAEA,SAAS,iBAAiB,OAAgB,YAAY,OAAsB;CAC3E,IAAI,OAAO,UAAU,WAAW,OAAO;CACvC,MAAM,SACL,OAAO,UAAU,WACd,QACA,OAAO,UAAU,YAAY,UAAU,KAAK,MAAM,KAAK,CAAC,IACvD,OAAO,MAAM,KAAK,CAAC,IACnB;CACL,IAAI,CAAC,OAAO,SAAS,MAAM,KAAK,CAAC,OAAO,UAAU,MAAM,GAAG,OAAO;CAClE,IAAI,WAAW,OAAO,UAAU,IAAI,SAAS;CAC7C,OAAO,SAAS,IAAI,SAAS;AAC9B;AAEA,SAAS,kBAAkB,OAAgB,YAAY,MAAqB;CAC3E,IAAI,OAAO,UAAU,WAAW,OAAO;CACvC,MAAM,SACL,OAAO,UAAU,WACd,QACA,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAClD,OAAO,MAAM,KAAK,CAAC,IACnB;CACL,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO;CACrC,IAAI,WAAW,OAAO,UAAU,IAAI,SAAS;CAC7C,OAAO,SAAS,IAAI,SAAS;AAC9B;AAEA,SAAS,YAAY,OAA+C;CACnE,IAAI,SAAS,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;CAC/E,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,MAAM,WAAW,IAAI,KAAK;EAC1B,IAAI,CAAC,UAAU,OAAO;EACtB,OAAO,YAAY;CACpB;CACA,OAAO;AACR;AAEA,SAAS,iBAAiB,OAAiC;CAC1D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO;CAClC,MAAM,OAAiB,CAAC;CACxB,KAAK,MAAM,QAAQ,OAAO;EACzB,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,MAAM,QAAQ,KAAK,KAAK;EACxB,IAAI,CAAC,OAAO,OAAO;EACnB,KAAK,KAAK,KAAK;CAChB;CACA,OAAO;AACR;AAEA,SAAS,uBACR,YACA,KACA,OACA,WACgB;CAChB,IAAI,SAAS,QAAQ,UAAU,IAAI;EAClC,OAAO,WAAW;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,qBAAqB;EAChC,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,MAAM,WAAW,MAAM,KAAK,CAAC,CAAC,YAAY;EAC1C,MAAM,eAAe,WAAW;EAChC,MAAM,kBAAkB,OAAO,iBAAiB,YAAY,aAAa,KAAK,CAAC,CAAC,SAAS;EACzF,IAAI,CAAC,UAAU,IAAI,QAAQ,KAAK,CAAC,iBAChC,OAAO;EAER,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,oBAAoB;EAC/B,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,MAAM,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY;EACzC,IAAI,CAAC,SAAS,IAAI,OAAO,GACxB,OAAO;EAER,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,wBAAwB;EACnC,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,MAAM,SAAS,MAAM,KAAK,CAAC,CAAC,YAAY;EACxC,IAAI,CAAC,aAAa,IAAI,MAAM,GAC3B,OAAO;EAER,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,oBAAoB,QAAQ,mBAAmB,QAAQ,yBAAyB;EAC3F,MAAM,OAAO,iBAAiB,KAAK;EACnC,IAAI,QAAQ,MAAM,OAAO,GAAG,IAAI;EAChC,IAAI,KAAK,SAAS,GAAG,WAAW,OAAO;OAClC,OAAO,WAAW;EACvB,OAAO;CACR;CACA,IAAI,QAAQ,oBAAoB;EAC/B,MAAM,UAAU,YAAY,KAAK;EACjC,IAAI,WAAW,MAAM,OAAO;EAC5B,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG,WAAW,OAAO;OAClD,OAAO,WAAW;EACvB,OAAO;CACR;CACA,IAAI,QAAQ,kBAAkB,QAAQ,4BAA4B,QAAQ,aAAa;EACtF,IAAI,OAAO,UAAU,WAAW,OAAO,GAAG,IAAI;EAC9C,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,iCAAiC;EAC5C,IAAI,OAAO,UAAU,WAAW,OAAO,GAAG,IAAI;EAC9C,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IACC,QAAQ,uBACR,QAAQ,oBACR,QAAQ,2BACR,QAAQ,+BACR,QAAQ,gCACR,QAAQ,yBACR,QAAQ,oCACR,QAAQ,qCACR,QAAQ,wBACR,QAAQ,eACR,QAAQ,0BACR,QAAQ,0BACP;EACD,IAAI,OAAO,UAAU,UAAU,OAAO,GAAG,IAAI;EAC7C,MAAM,UAAU,MAAM,KAAK;EAC3B,IAAI,CAAC,SAAS,OAAO,WAAW;OAC3B,WAAW,OAAO;EACvB,OAAO;CACR;CACA,IAAI,QAAQ,iCAAiC,QAAQ,6BAA6B;EACjF,MAAM,SAAS,kBAAkB,OAAO,IAAI;EAC5C,IAAI,UAAU,MAAM,OAAO,GAAG,IAAI;EAClC,WAAW,OAAO;EAClB,OAAO;CACR;CACA,MAAM,YAAY,QAAQ;CAC1B,MAAM,SAAS,iBAAiB,OAAO,SAAS;CAChD,IAAI,UAAU,MAAM,OAAO,GAAG,IAAI,WAAW,YAAY,qBAAqB;CAC9E,WAAW,OAAO;CAClB,OAAO;AACR;AAEA,SAAS,oBAAoB,aAAuB,MAAoC;CACvF,MAAM,UAAoB,CAAC;CAC3B,IAAI,YAAY,SAAS,+BAA+B,GAAG;EAC1D,MAAM,cAAc,sBAAsB,CAAC,CAAC;EAC5C,MAAM,UACL,OAAO,gBAAgB,WACpB,cACA,OAAO,SAAS,OAAO,eAAe,EAAE,GAAG,EAAE;EACjD,IAAI,OAAO,SAAS,OAAO,KAAK,UAAU,GACzC,QAAQ,IAAI,yCAAyC,OAAO,UAAU,GAAI;OAE1E,OAAO,QAAQ,IAAI;EAEpB,KAAK,aAAa,CAAC,EAAE,oBAAoB;EACzC,QAAQ,KAAK,+BAA+B;CAC7C;CACA,OAAO;AACR;AAEA,SAAgB,aAAa,OAA2B,CAAC,GAAG;CAC3D,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,gBAAgB,MAAM;EAK7B,MAAM,aAAa,qBAAqB;EACxC,MAAM,aAAa,yBAAyB,sBAAsB,CAAC;EACnE,MAAM,YAAY,mBAAmB,UAAU;EAC/C,OAAO,EAAE,KAAK;GACb,MAAM;GACN,QAAQ,0BAA0B,UAAU;GAC5C,UAAU;GACV,WAAW,0BAA0B,SAAS;GAC9C,eAAe,uBAAuB;GACtC,gBAAgB,CAAC,GAAG,oBAAoB,CAAC,CAAC,KAAK;GAC/C,WAAW,oBAAoB;EAChC,CAAC;CACF,CAAC;CAED,IAAI,KAAK,eAAe,OAAO,MAAM;EACpC,IAAI;EACJ,IAAI;GACH,UAAW,MAAM,EAAE,IAAI,KAAK;EAC7B,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,IAAI,WAAW,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAC1E,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAE1D,IACC,YAAY,WACX,QAAuB,UAAU,SACjC,OAAQ,QAAuB,WAAW,YAC1C,MAAM,QAAS,QAAuB,MAAM,IAE7C,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAEzD,MAAM,UACL,YAAY,WACX,QAAuB,UAAU,QAClC,OAAQ,QAAuB,WAAW,YAC1C,CAAC,MAAM,QAAS,QAAuB,MAAM,IACxC,QAAuB,SACxB;EAEL,MAAM,aAAa,qBAAqB;EACxC,MAAM,eAAe,yBAAyB,sBAAsB,CAAC;EACrE,MAAM,EAAE,gBAAgB,OAAO,sBAAsB,uBACpD,SACA,YACD;EACA,IAAI,mBACH,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAGhD,MAAM,kBAAkB,mBAAmB,YAAY;EACvD,MAAM,aAAyB,EAAE,GAAG,aAAa;EACjD,MAAM,YAAY,IAAI,IAAI,oBAAoB,CAAC;EAE/C,MAAM,cAAc,aAAa,QAAQ,QAAQ,OAAO,cAAc;EACtE,KAAK,MAAM,OAAO,cAAc;GAC/B,IAAI,EAAE,OAAO,iBAAiB;GAC9B,MAAM,QAAQ,uBAAuB,YAAY,KAAK,eAAe,MAAM,SAAS;GACpF,IAAI,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG;EACxC;EAEA,IAAI;EACJ,IAAI;GACH,YAAY,uBAAuB,YAAY,UAAU;EAC1D,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACvD;EAEA,MAAM,iBAAiB,mBAAmB,UAAU;EACpD,MAAM,mBAAmB,aAAa,QAAQ,QAAQ,aAAa,SAAS,WAAW,IAAI;EAC3F,MAAM,uBAAuB,aAAa,QACxC,QAAQ,CAAC,kBAAkB,gBAAgB,MAAM,eAAe,IAAI,CACtE;EACA,MAAM,eAAe,uBAAuB;EAC5C,MAAM,mBAAmB,iBAAiB,QACxC,QAAQ,CAAC,qBAAqB,SAAS,GAAG,KAAK,OAAO,YACxD;EAIA,MAAM,kBAAkB,oBAAoB,CAF3C,mBAAG,IAAI,IAAI;GAAC,GAAG;GAAa,GAAG;GAAkB,GAAG;EAAoB,CAAC,CAE9B,GAAoB,IAAI;EACpE,MAAM,sBAAsB,qBAAqB,QAC/C,QAAQ,CAAC,gBAAgB,IAAI,GAAG,KAAK,EAAE,OAAO,aAChD;EAEA,OAAO,EAAE,KAAK;GACb,MAAM;GACN,QAAQ,0BAA0B,UAAU;GAC5C,WAAW,0BAA0B,cAAc;GACnD,gBAAgB,CAAC,GAAG,oBAAoB,CAAC,CAAC,KAAK;GAC/C,SAAS;IACR,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,UAAU,iBAAiB,KACzB,QACA,GAAG,IAAI,8BAA8B,aAAa,KAAK,oEACzD;GACD;EACD,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;ACpdA,SAAS,kBAAkB,UAAiC;CAC3D,IAAI;EACH,SAAS,CAAC,CAAC,GAAG,OAAO,kBAAkB,EAAE,QAAQ,KAAK,CAAC;EACvD,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAgB,aAAa,UAAwB;CACpD,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,gBAAgB,MAAM;EAC7B,MAAM,YAAY,kBAAkB,QAAQ;EAC5C,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK;GAGb,SAAS;GACT,SAAS;GACT,KAAK,QAAQ;GACb,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,OAAO,IAAI,GAAK,CAAC;GAE3D,OAAO;GACP,UAAU,EAAE,UAAU;EACvB,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;;;;;;;;;ACvBA,SAAgB,aAAa,KAA0C;CACtE,IAAI,OAAO,MAAM,OAAO,CAAC;CACzB,IAAI;EACH,MAAM,SAAkB,KAAK,MAAM,GAAG;EACtC,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC;EACpC,OAAO,OAAO,QAAQ,SAAyB,OAAO,SAAS,QAAQ;CACxE,QAAQ;EACP,OAAO,CAAC;CACT;AACD;;;;AAKA,SAAgB,SAAS,OAA2B,cAA8B;CACjF,IAAI,SAAS,MAAM,OAAO;CAC1B,MAAM,SAAS,mBAAmB,KAAK;CACvC,OAAO,UAAU,OAAO,eAAe;AACxC;;;;;AAMA,SAAgB,UAAU,OAAoC;CAC7D,IAAI,SAAS,MAAM,OAAO;CAC1B,OAAO,UAAU,OAAO,UAAU,UAAU,UAAU;AACvD;;;;;AAMA,eAAsB,oBACrB,GAIA,UAC8C;CAC9C,MAAM,gBAAgB,OAAO,SAAS,EAAE,IAAI,OAAO,gBAAgB,KAAK,KAAK,EAAE;CAC/E,IAAI,OAAO,MAAM,aAAa,KAAK,gBAAgB,GAClD,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;CAEvD,IAAI,gBAAgB,UACnB,OAAO,EAAE,KAAK;EAAE,OAAO;EAAqB,WAAW;CAAS,GAAG,GAAG;CAEvE,IAAI,MAAM;CACV,IAAI;EACH,MAAM,OAAO,EAAE,IAAI,IAAI;EACvB,IAAI,SAAS,MAAM;GAClB,MAAM,SAAS,KAAK,UAAU;GAC9B,MAAM,SAAuB,CAAC;GAC9B,IAAI,aAAa;GACjB,IAAI;IACH,OAAO,MAAM;KACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;KAC1C,IAAI,MAAM;KACV,cAAc,MAAM;KACpB,IAAI,aAAa,UAAU;MAC1B,IAAI;OACH,MAAM,OAAO,OAAO;MACrB,QAAQ,CAER;MACA,OAAO,EAAE,KAAK;OAAE,OAAO;OAAqB,WAAW;MAAS,GAAG,GAAG;KACvE;KACA,OAAO,KAAK,KAAK;IAClB;GACD,UAAU;IACT,OAAO,YAAY;GACpB;GAEA,MAAM,QAAQ,IAAI,WAAW,UAAU;GACvC,IAAI,SAAS;GACb,KAAK,MAAM,SAAS,QAAQ;IAC3B,MAAM,IAAI,OAAO,MAAM;IACvB,UAAU,MAAM;GACjB;GACA,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;EAC7D;CACD,QAAQ;EACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;CAC7C;CACA,IAAI;CACJ,IAAI;EACH,SAAS,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnC,QAAQ;EACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;CAC7C;CACA,IAAI,UAAU,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACvE,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;CAE1D,OAAO;AACR;;;AClFA,IAAM,4BAA4B;AAClC,IAAM,kDAAkC,IAAI,QAAqB;AAEjE,SAAS,SAAS,OAAwB;CACzC,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC,YAAY;AACxC;AAEA,SAAS,2BAA2B,OAA+C;CAElF,OADmB,SAAS,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,yBAC7C,KAAc,KAAA;AACtB;AAEA,SAAS,4BAA4B,OAA0B;CAC9D,IAAI,gCAAgC,IAAI,KAAK,GAAG;CAChD,MAAM,GAAG,SAAS,oBAAoB,EAAE,eAAe,KAAK,GAAG,QAAQ;CACvE,MAAM,GAAG,SAAS,4BAA4B,EAAE,eAAe,KAAK,IAAI,UACvE,gBAAgB,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAC3C;CACA,gCAAgC,IAAI,KAAK;AAC1C;AAoBA,IAAM,6BAA6B;AAEnC,SAAS,cAAc,MAA+B,KAAqB;CAC1E,MAAM,SAAS,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,KAAK;CAC5C,IAAI,QAAQ,OAAO;CACnB,MAAM,cAAc,KAAK,YAAY,KAAK;CAC1C,MAAM,WAAW,OAAO,gBAAgB,WAAW,SAAS,WAAW,IAAI;CAC3E,IAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG,OAAO;CACjF,OAAO,OAAQ,SAAqC,QAAQ,EAAE,CAAC,CAAC,KAAK;AACtE;AAEA,SAAS,cAAc,OAAkC,KAAuB;CAC/E,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,SAAS,cAAc,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;AAClF;AAEA,SAAS,cACR,OACA,QACA,OACM;CACN,MAAM,OAAY,CAAC;CACnB,KAAK,IAAI,SAAS,GAAG,SAAS,OAAO,QAAQ,UAAU,4BAA4B;EAClF,MAAM,QAAQ,OAAO,MAAM,QAAQ,SAAS,0BAA0B;EACtE,MAAM,eAAe,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;EACnD,KAAK,KAAK,GAAI,MAAM,GAAG,QAAQ,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAS;CAC1E;CACA,OAAO;AACR;AAEA,SAAS,UAAU,OAAoC;CACtD,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,IAAI;EACH,OAAO,+BAA+B,OAAO,cAAc;CAC5D,QAAQ;EACP;CACD;AACD;;;;;;AAOA,SAAS,mCACR,OACA,OACO;CACP,MAAM,WAAW,cAAc,OAAO,UAAU;CAChD,MAAM,YAAY,cAAc,OAAO,kBAAkB;CACzD,MAAM,QAAQ,cACb,OACA,YACC,iBACA;8BAC2B,aAAa;sDAE1C;CACA,MAAM,eAAe,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,KAAK,gBAAgB,IAAI,CAAC,CAAC;CAC7E,MAAM,eAAe,MACnB,KAAK,SAAS,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACjD,QAAQ,YAAY,QAAQ,SAAS,CAAC;CACxC,MAAM,YAAY,cACjB,OACA,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC,IAC1C,iBACA;yBACsB,aAAa,EACrC;CACA,MAAM,UAAU,cACf,OACA,YACC,iBACA;yBACsB,aAAa,wBACrC;CACA,MAAM,YAAY,IAAI,IAAI,UAAU,KAAK,UAAU,CAAC,MAAM,UAAU,KAAK,CAAU,CAAC;CACpF,IAAI,sBAAsB,CACzB,GAAG,IAAI,IACN,UACE,KAAK,UAAU,OAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC/D,QAAQ,YAAY,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,CACzD,CACD;CACA,OAAO,oBAAoB,SAAS,GAAG;EACtC,MAAM,aAAa,cAClB,OACA,sBACC,iBACA;0BACsB,aAAa,EACrC;EACA,KAAK,MAAM,SAAS,YAAY,UAAU,IAAI,MAAM,UAAU,KAAK;EACnE,sBAAsB,CACrB,GAAG,IAAI,IACN,WACE,KAAK,UAAU,OAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC/D,QAAQ,YAAY,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,CACzD,CACD;CACD;CACA,MAAM,qBAAqB,YAAwC;EAClE,MAAM,uBAAO,IAAI,IAAY;EAC7B,IAAI,iBAAiB;EACrB,OAAO,kBAAkB,CAAC,KAAK,IAAI,cAAc,GAAG;GACnD,KAAK,IAAI,cAAc;GACvB,MAAM,QAAQ,UAAU,IAAI,cAAc;GAC1C,IAAI,CAAC,OAAO,OAAO,KAAA;GACnB,IAAI,MAAM,WAAW,YAAY,MAAM,yBAAyB,MAC/D,OAAO,UAAU,MAAM,YAAY;GAEpC,iBAAiB,OAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,KAAK;EAChE;CAED;CACA,MAAM,iBAAiB,IAAI,IAC1B,QACE,KAAK,WAAW,CAAC,OAAO,WAAW,UAAU,OAAO,YAAY,CAAC,CAAU,CAAC,CAC5E,QAAQ,UAA8C,MAAM,OAAO,KAAA,CAAS,CAC/E;CAEA,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,UAAU,cAAc,MAAM,UAAU;EAC9C,MAAM,WAAW,cAAc,MAAM,kBAAkB;EACvD,MAAM,OAAO,aAAa,IAAI,QAAQ;EACtC,MAAM,cAAc,OAAO,MAAM,YAAY,EAAE,CAAC,CAAC,KAAK;EAEtD,MAAM,YADmB,UAAU,IAAI,OACrB,IACd,kBAAkB,OAAO,KAAK,UAAU,KAAK,kBAAkB,IAC/D,kBAAkB,WAAW,KAAK,UAAU,KAAK,kBAAkB;EACvE,MAAM,aAAa,eAAe,IAAI,QAAQ,KAAK,UAAU,MAAM,IAAI;EACvE,IAAI,WAAW,KAAK,8BAA8B;EAClD,IAAI,YAAY,KAAK,+BAA+B;CACrD;AACD;AAEA,SAAS,6BAA6B,OAAoB,OAAwC;CACjG,IAAI;EACH,mCAAmC,OAAO,KAAK;CAChD,QAAQ,CAGR;AACD;AAEA,SAAS,mBACR,aACA,KAC0B;CAC1B,MAAM,WAAW,SAAU,IAAI,iBAA4B,IAAI;CAG/D,MAAM,gBAAgB,YAAY,GAAG;CACrC,OAAO;EACN,GAAG;EACH,MAAM,oBAAqB,IAAI,QAAsC,MAAM,IAAI,aAAa;EAC5F,eAAe;EACf;CACD;AACD;;;;AAKA,SAAS,oBAAoB,OAAoB,OAAwC;CACxF,MAAM,aAAuB,CAAC;CAC9B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,QAAQ,KAAK;EACnB,IAAI,SAAS,MAAM;EACnB,MAAM,MAAM,OAAO,KAAK;EACxB,IAAI,OAAO,MAAM,GAAG,KAAK,KAAK,IAAI,GAAG,GAAG;EACxC,KAAK,IAAI,GAAG;EACZ,WAAW,KAAK,GAAG;CACpB;CACA,IAAI,WAAW,WAAW,GAAG;CAG7B,MAAM,OADI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACxB,CAAA,CACX,OAAO;EACP,IAAI,OAAO,SAAS;EACpB,SAAS,OAAO,SAAS;EACzB,KAAK,OAAO,SAAS;CACtB,CAAC,CAAC,CACD,KAAK,OAAO,QAAQ,CAAC,CACrB,MAAM,QAAQ,OAAO,SAAS,IAAI,UAAU,CAAC,CAAC,CAC9C,IAAI;CAEN,MAAM,4BAAY,IAAI,IAA8C;CACpE,KAAK,MAAM,OAAO,MAAM;EACvB,MAAM,aAAa,OAAO,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK;EAClD,MAAM,UAAU,aAAa,gBAAgB,UAAU,IAAI;EAC3D,MAAM,MAAM,OAAO,IAAI,OAAO,EAAE;EAChC,UAAU,IAAI,IAAI,IAAI;GAAE;GAAS;EAAI,CAAC;CACvC;CAEA,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,MAAM,OAAO,KAAK,UAAU;EAClC,IAAI,OAAO,MAAM,GAAG,GAAG;EACvB,MAAM,SAAS,UAAU,IAAI,GAAG;EAChC,IAAI,CAAC,QAAQ;EACb,KAAK,YAAY,OAAO;EACxB,KAAK,QAAQ,OAAO;CACrB;AACD;;;;;AAMA,SAAS,gBAAgB,KAAqB;CAC7C,IAAI,IAAI,YAAY,CAAC,CAAC,WAAW,QAAQ,GAAG,OAAO;CACnD,MAAM,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG;CAC/C,OAAO,MAAM,MAAM,SAAS,MAAM;AACnC;AAEA,SAAS,eAAe,KAAwD;CAC/E,MAAM,QAAQ,OAAO,OAAO,EAAE,CAAC,CAC7B,KAAK,CAAC,CACN,YAAY;CACd,IAAI,UAAU,UAAU,UAAU,UAAU,OAAO;AAEpD;AAEA,SAAS,yBAAyB,OAAoB,SAAgC;CACrF,OAAO,8BAA8B,SAAS,MAAM,uBAAuB,CAAC;AAC7E;AAEA,SAAS,uBAAuB,OAAoB,SAAwC;CAC3F,MAAM,eAAe,yBAAyB,OAAO,OAAO;CAC5D,MAAM,UAAU,CAAC,2BAA2B,GAAG,aAAa,OAAO;CACnE,MAAM,OAAO,aAAa,eACvB,wEACA;CACH,MAAM,MAAM,MAAM,GAChB,QAAQ,iCAAiC,KAAK,SAAS,QAAQ,KAAK,OAAO,GAAG,CAAC,CAC/E,IAAI,GAAG,aAAa,MAAM;CAC5B,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,0BAAkC;CAC1C,OAAO;;;;;;;;;;AAUR;AAEA,SAAS,gBAAgB,OAAsD;CAC9E,MAAM,aAAa;;;cAGN,wBAAwB,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsBvC,MAAM,iBAAiB,sBAAsB,KAAK;CAClD,MAAM,WACL,kBAAkB,QAAQ,OAAO,cAAc,MAAM,QAAQ,iBAAiB;CAC/E,IAAI,YAAY,MACf,OAAO;EAAE,QAAQ,2BAA2B,WAAW;EAAI,QAAQ,CAAC,UAAU,KAAK;CAAE;CAEtF,OAAO;EAAE,QAAQ;EAAY,QAAQ,CAAC,KAAK;CAAE;AAC9C;AAEA,SAAS,4BAA4B,OAAoB,SAAwC;CAChG,MAAM,eAAe,yBAAyB,OAAO,OAAO;CAC5D,MAAM,UAAU;EACf;EACA,OAAO,wBAAwB;EAC/B,GAAG,aAAa;CACjB;CACA,MAAM,OAAO,aAAa,eACvB,wEACA;CACH,MAAM,MAAM,MAAM,GAChB,QAAQ,iCAAiC,KAAK,SAAS,QAAQ,KAAK,OAAO,GAAG,CAAC,CAC/E,IAAI,GAAG,aAAa,MAAM;CAC5B,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,4BAA4B,OAAoB,WAA4B;CACpF,MAAM,eAAe,uBAAuB,OAAO,EAAE,YAAY,UAAU,CAAC;CAC5E,IAAI,iBAAiB,GAAG,OAAO;CAC/B,MAAM,MAAM,MAAM,GAChB,QACA;wCAED,CAAC,CACA,IAAI,SAAS;CACf,OAAO,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAC/C;AAEA,SAAS,uBAAuB,OAAoB,SAAiC;CACpF,MAAM,eAAe,yBAAyB,OAAO,IAAI;CACzD,MAAM,UAAU,CACf,uCACA;;;;WAIS,aAAa,QAAQ,KAAK,OAAO,EAAE;IAE7C;CACA,MAAM,SAAoB,CAAC,GAAG,aAAa,MAAM;CACjD,IAAI,SAAS;EACZ,QAAQ,QAAQ,0BAA0B;EAC1C,OAAO,QAAQ,OAAO;CACvB;CACA,MAAM,MAAM,MAAM,GAChB,QAAQ,oDAAoD,QAAQ,KAAK,OAAO,GAAG,CAAC,CACpF,IAAI,GAAG,MAAM;CACf,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,yBAAyB,OAAoB,SAAiC;CACtF,MAAM,eAAe,yBAAyB,OAAO,IAAI;CACzD,MAAM,UAAU,CACf;;;;WAIS,aAAa,QAAQ,KAAK,OAAO,EAAE;IAE7C;CACA,MAAM,SAAoB,CAAC,GAAG,aAAa,MAAM;CACjD,MAAM,OAAO,UACV,kEACA;CACH,IAAI,SAAS;EACZ,QAAQ,QAAQ,sBAAsB;EACtC,OAAO,QAAQ,OAAO;CACvB;CACA,MAAM,MAAM,MAAM,GAChB,QAAQ,iCAAiC,KAAK,SAAS,QAAQ,KAAK,OAAO,GAAG,CAAC,CAC/E,IAAI,GAAG,MAAM;CACf,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,gBACR,OACA,SAQ4B;CAC5B,4BAA4B,KAAK;CACjC,MAAM,UAAyB,CAAC;CAChC,IAAI,QAAQ,SAAS,QAAQ,UAAU,QAAQ;CAC/C,IAAI,QAAQ,OAAO,QAAQ,kBAAkB,QAAQ;CAErD,MAAM,eAAe,yBAAyB,OAAO,OAAO;CAC5D,MAAM,mBAAmB,wBAAwB;CACjD,MAAM,UAAU;EACf;EACA,QAAQ,mBAAmB,YAAY,mBAAmB,OAAO;EACjE,GAAG,aAAa;CACjB;CACA,MAAM,SAAoB,CAAC,GAAG,aAAa,MAAM;CACjD,IAAI,QAAQ,GAAG;EACd,MAAM,SAAS,gBAAgB,QAAQ,CAAC;EACxC,QAAQ,KAAK,OAAO,MAAM;EAC1B,OAAO,KAAK,GAAG,OAAO,MAAM;CAC7B;CACA,MAAM,QAAQ,QAAQ,KAAK,OAAO;CAClC,MAAM,OAAO,aAAa,eACvB,wEACA;CAEH,MAAM,OAAO,MAAM,GACjB,QACA,8BAA8B,KAAK;YAC1B,MAAM;;qBAGhB,CAAC,CACA,IAAI,GAAG,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,MAAM;CAElD,MAAM,cAAc,MAAM,wBAAwB;CAClD,OAAO,KAAK,KAAK,QAAQ,mBAAmB,aAAa,GAAG,CAAC;AAC9D;AAEA,SAAgB,aAAa,UAAwB;CACpD,MAAM,MAAM,IAAI,KAAK;CAGrB,IAAI,IAAI,kBAAkB,MAAM;EAC/B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC/C,MAAM,eAAe,yBAAyB,OAAO,IAAI;GACzD,MAAM,UAAU;IACf;IACA;IACA,GAAG,aAAa;GACjB;GASA,MAAM,QARO,MAAM,GACjB,QACA;uDACkD,QAAQ,KAAK,OAAO,EAAE;;cAGzE,CAAC,CACA,IAAI,GAAG,aAAa,QAAQ,KAChB,CAAA,CAAK,KAAK,SAAS;IAChC,GAAG;IACH,eAAe,SAAU,IAAI,iBAA+C,IAAI;GACjF,EAAE;GACF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;EACxB;CACD,CAAC;CAGD,IAAI,IAAI,kBAAkB,MAAM;EAC/B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,eAAe,yBAAyB,OAAO,IAAI;GACzD,MAAM,UAAU;IACf;IACA;IACA;IACA,GAAG,aAAa;GACjB;GACA,MAAM,OAAO,MAAM,GACjB,QACA;;cAES,QAAQ,KAAK,OAAO,GAC9B,CAAC,CACA,IAAI,GAAG,aAAa,MAAM;GAC5B,MAAM,WAAW,CAChB,GAAG,IAAI,IACN,KACE,KAAK,MAAM,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC1C,QAAQ,MAAM,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,CACzD,KAAK,MAAM,gBAAgB,CAAC,CAAC,CAAC,CAC9B,OAAO,OAAO,CACjB,CACD,CAAC,CAAC,KAAK;GACP,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;EAC3B;CACD,CAAC;CAGD,IAAI,IAAI,kBAAkB,MAAM;EAC/B,MAAM,SAAS,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;EAClC,OAAO,EAAE,SAAS,oBAAoB,UAAU,GAAG;CACpD,CAAC;CAED,IAAI,IAAI,sBAAsB,MAAM;EACnC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,CAAC;GAC5D,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;GAI7D,MAAM,QAAQ,gBAAgB,OAAO;IACpC;IACA;IACA,SANe,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;IAOzC,OANa,eAAe,EAAE,IAAI,MAAM,OAAO,CAM/C;IACA,GANS,2BAA2B,EAAE,IAAI,MAAM,GAAG,CAMnD;IACA,gBAAgB;GACjB,CAAC;GACD,MAAM,UAAU,MAAM,SAAS;GAC/B,MAAM,SAAS,UAAU,MAAM,MAAM,GAAG,KAAK,IAAI;GACjD,MAAM,YAAY;GAClB,oBAAoB,OAAO,SAAS;GACpC,6BAA6B,OAAO,SAAS;GAC7C,OAAO,EAAE,KAAK;IACb,OAAO;IACP,YAAY;KACX;KACA;KACA,aAAa,UAAU,SAAS,OAAO,SAAS;KAChD,UAAU;IACX;GACD,CAAC;EACF;CACD,CAAC;CAGD,IAAI,IAAI,mBAAmB,MAAM;EAChC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,CAAC;GAC5D,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;GAI7D,MAAM,QAAQ,gBAAgB,OAAO;IACpC;IACA;IACA,SANe,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;IAOzC,OANa,eAAe,EAAE,IAAI,MAAM,OAAO,CAM/C;IACA,GANS,2BAA2B,EAAE,IAAI,MAAM,GAAG,CAMnD;IACA,gBAAgB;GACjB,CAAC;GACD,MAAM,UAAU,MAAM,SAAS;GAC/B,MAAM,SAAS,UAAU,MAAM,MAAM,GAAG,KAAK,IAAI;GACjD,MAAM,YAAY;GAClB,oBAAoB,OAAO,SAAS;GACpC,6BAA6B,OAAO,SAAS;GAC7C,OAAO,EAAE,KAAK;IACb,OAAO;IACP,YAAY;KACX;KACA;KACA,aAAa,UAAU,SAAS,OAAO,SAAS;KAChD,UAAU;IACX;GACD,CAAC;EACF;CACD,CAAC;CAGD,IAAI,IAAI,iBAAiB,MAAM;EAC9B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK;GAC1C,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI,SAAS;IACZ,UAAU,uBAAuB,OAAO,OAAO;IAC/C,YAAY,yBAAyB,OAAO,OAAO;IACnD,WAAW,uBAAuB,OAAO,EAAE,QAAQ,CAAC;IACpD,eAAe,4BAA4B,OAAO,EAAE,QAAQ,CAAC;GAC9D,OAAO;IACN,UAAU,uBAAuB,KAAK;IACtC,YAAY,yBAAyB,KAAK;IAC1C,WAAW,uBAAuB,KAAK;IACvC,eAAe,4BAA4B,KAAK;GACjD;GACA,MAAM,QAAQ,UAAU,YAAY;GACpC,OAAO,EAAE,KAAK;IAAE;IAAO;IAAU;IAAW;IAAS;GAAa,CAAC;EACpE;CACD,CAAC;CAGD,IAAI,IAAI,aAAa,OAAO,MAAM;EACjC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK;GAC1C,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;GAEjD,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC/C,MAAM,iBAAiB,EAAE,IAAI,MAAM,cAAc;GACjD,IAAI;GACJ,IAAI,gBAAgB;IACnB,cAAc,mBAAmB,cAAc,KAAK,KAAA;IACpD,IAAI,gBAAgB,KAAA,GACnB,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;GAE1D;GACA,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;GAC1C,MAAM,UAAgC,CAAC;GACvC,IAAI,SAAS,QAAQ,UAAU;GAC/B,MAAM,OAAO,MAAM,MAAM,qBAAqB,SAAS,OAAO,eAAe,MAAM,OAAO;GAC1F,OAAO,EAAE,KAAK,IAAI;EACnB;CACD,CAAC;CAED,IAAI,KAAK,mBAAmB,OAAO,MAAM;EACxC,MAAM,QAAQ,SAAS;EACvB,MAAM,SAAS,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,OAAO,IAAI,cAAc,CAAC;EACxE,IAAI,WAAW,OAAO,IAAI,cAAc,GACvC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAElD,MAAM,OAAO;EAOb,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI;EAC1E,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,MAAM,QACL,MAAM,SAAS,OACZ,KACA,OAAO,KAAK,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,KAAK,KAAK,SAAS,IAC/E,KAAK,QACL;EACL,IAAI,SAAS,MACZ,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;EAE7D,IAAI,cAA6B;EACjC,IAAI,MAAM,gBAAgB,MAAM;GAC/B,IACC,OAAO,KAAK,iBAAiB,YAC7B,CAAC,OAAO,UAAU,KAAK,YAAY,KACnC,KAAK,eAAe,GAEpB,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;GAEzD,cAAc,KAAK;EACpB;EACA,MAAM,UAAU,OAAO,MAAM,YAAY,YAAY,KAAK,QAAQ,KAAK,IAAI,KAAK,UAAU;EAC1F,IAAI,MAAM,qBAAqB,QAAQ,CAAC,MAAM,QAAQ,KAAK,iBAAiB,GAC3E,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAE9E,IACC,MAAM,QAAQ,MAAM,iBAAiB,KACrC,KAAK,kBAAkB,MAAM,UAAU,OAAO,UAAU,QAAQ,GAEhE,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAE9E,MAAM,kBAAkB,MAAM,QAAQ,MAAM,iBAAiB,IAAI,KAAK,oBAAoB,CAAC;EAC3F,MAAM,UAA8D,CAAC;EACrE,IAAI,SAAS,QAAQ,UAAU;EAC/B,IAAI,gBAAgB,SAAS,GAAG,QAAQ,oBAAoB;EAC5D,MAAM,QAAQ,MAAM,MAAM,0BAA0B,SAAS,OAAO,aAAa,OAAO;EACxF,OAAO,EAAE,KAAK,KAAK;CACpB,CAAC;CAGD,IAAI,IAAI,gBAAgB,MAAM;EAC7B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC/C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK,KAAA;GACpC,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;GAC1C,MAAM,UAAyB,CAAC;GAChC,IAAI,MAAM,QAAQ,OAAO;GACzB,IAAI,SAAS,QAAQ,UAAU;GAE/B,MAAM,YADQ,MAAM,OAAO,OAAO,OAChB;GAClB,oBAAoB,OAAO,SAAS;GACpC,6BAA6B,OAAO,SAAS;GAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,UAAU,CAAC;EACnC;CACD,CAAC;CAGD,IAAI,IAAI,mBAAmB,MAAM;EAChC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,eAAe,EAAE,IAAI,MAAM,YAAY;GAC7C,IAAI,CAAC,cACJ,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;GAEpD,MAAM,YAAY,mBAAmB,YAAY;GACjD,IAAI,aAAa,MAChB,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;GAEvD,IAAI,CAAC,4BAA4B,OAAO,SAAS,GAChD,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAGlD,MAAM,OADI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACxB,CAAA,CACX,OAAO,CAAC,CACR,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,YAAY,SAAS,CAAC,CAAC,CACjD,IAAI;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,CAAC;EAC9B;CACD,CAAC;CAGD,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,mBAChB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,OAAO,KAAK,aAAa,EAAE,CAClF;EACA,IAAI,YAAY,QAAQ,YAAY,GACnC,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAEtD,IAAI,CAAC,MAAM,IAAI,QAAQ,GACtB,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,MAAM,aAAa,OAAO,KAAK,cAAc,EAAE,CAAC,CAAC,KAAK;EACtD,IAAI,eAAe,aAAa,eAAe,UAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;EAErE,IAAI;GACH,MAAM,OAAO,MAAM,uBAAuB,UAAU,UAAU;GAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;EACvB,SAAS,KAAK;GACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC3D,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;EAClC;CACD,CAAC;CAGD,IAAI,KAAK,yBAAyB,OAAO,MAAM;EAC9C,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,mBAChB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,OAAO,KAAK,aAAa,EAAE,CAClF;EACA,IAAI,YAAY,QAAQ,YAAY,GACnC,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAEtD,MAAM,UAAU,OAAO,KAAK,WAAW,EAAE,CAAC,CAAC,KAAK;EAChD,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,qCAAqC,GAAG,GAAG;EAEnE,IAAI,CAAC,MAAM,IAAI,QAAQ,GACtB,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,IAAI;GACH,MAAM,SAAS,MAAM,kBAAkB,UAAU,OAAO;GACxD,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,KAAK;GACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC3D,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;EAClC;CACD,CAAC;CAGD,IAAI,KAAK,wBAAwB,OAAO,MAAM;EAC7C,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,mBAChB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,OAAO,KAAK,aAAa,EAAE,CAClF;EACA,IAAI,YAAY,QAAQ,YAAY,GACnC,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAEtD,IAAI,CAAC,MAAM,IAAI,QAAQ,GACtB,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAGjD,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC,CAAC,CACvC,OAAO,CAAC,CACR,KAAK,OAAO,WAAW,CAAC,CACxB,MAAM,GAAG,OAAO,YAAY,IAAI,QAAQ,CAAC,CAAC,CAC1C,IAAI;EACN,IAAI,CAAC,KACJ,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,IAAI,CAAC,MAAM,kBAAkB,GAA8B,GAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,GAAG,GAAG;EAEhE,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,cAAc,MACtD,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,CAAC;EAG/B,IAAI;GACH,MAAM,OAAO,QAAQ;GACrB,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,CAAC;EAC/B,SAAS,KAAK;GACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC3D,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,8BAA8B,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GACnF,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;EAClC;CACD,CAAC;CAED,OAAO;AACR;;;AC90BA,SAAS,wBAAwB,QAAwD;CACxF,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO;EACN,GAAG;EACH,MAAM;GACL,GAAG,OAAO;GACV,QAAQ,OAAO,KAAK;GACpB,eAAe,OAAO,KAAK;EAC5B;CACD;AACD;AAEA,SAAS,mBACR,eACA,aACA,aACgB;CAChB,IAAI,CAAC,eAAe,OAAO;CAC3B,IAAI,YAAY,QACf,OAAO,6BAA6B,YAAY,WAAW;CAE5D,IAAI,YAAY,UAAU,GACzB,OAAO,GAAG,YAAY,QAAQ,4BAA4B,YAAY,SAAS;CAEhF,OAAO;AACR;AAEA,SAAgB,qBAAqB,MAA2B;CAC/D,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,yBAAyB,MAAM;EACtC,MAAM,QAAQ,MAAM,SAAS;EAC7B,MAAM,UAAU,MAAM,WAAW;EACjC,MAAM,WAAW,MAAM,cAAc,KAAK;EAG1C,IAAI,CAAC,SAAS,OAAO,MAAM,0BAA0B,YACpD,OAAO,EAAE,KAAK;GACb,QAAQ;GACR,uBAAuB,CAAC;GACxB,gBAAgB;GAChB,OAAO;IACN,SAAS;IACT,UAAU;IACV,qBAAqB;IACrB,0BAA0B;GAC3B;EACD,CAAC;EAGF,MAAM,cAAc,MAAM,sBAAsB;EAChD,MAAM,cAAc,SAAS,kBAAkB,KAAK;GAAE,QAAQ;GAAO,YAAY;EAAE;EACnF,MAAM,gBAAgB,MAAM,2BAA2B;EACvD,MAAM,SAAS,wBAAwB,UAAU,UAAU,KAAK,IAAI;EACpE,MAAM,uBAAuB,0BAA0B;EAIvD,MAAM,oBAFL,iBAAiB,SAAS,YAAY,UAAU,YAAY,UAAU,MAGjD,gBAClB;GAAE,GAAG;GAAe,QAAQ,mBAAmB,eAAe,aAAa,WAAW;EAAE,IACxF;EAEJ,OAAO,EAAE,KAAK;GACb;GACA,uBAAuB;GACvB,gBAAgB;GAChB,OAAO;IACN,GAAG;IACH,qBAAqB,YAAY;IACjC,0BAA0B,YAAY;GACvC;EACD,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;ACvFA,IAAM,uBAAuB,IAAI,IAAY,2BAA2B;AACxE,IAAM,+CAA+B,IAAI,IAAI;CAC5C;CACA;CACA;AACD,CAAC;AAMD,SAAS,iBAAe,SAAyC;CAChE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAK,MAAM,EAAE,OAAO;GAAE,MAAM;GAAmB;EAAQ,EAAE;CAAE;AACxF;AAEA,SAAS,SAAS,MAAc,SAAyC;CACxE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAK,MAAM,EAAE,OAAO;GAAE;GAAM;EAAQ,EAAE;CAAE;AACrE;AAEA,SAAS,WAAS,OAAkD;CACnE,OAAO,SAAS,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC1E;AAEA,SAAgB,wBAA8C;CAC7D,OAAO,0BAA0B;AAClC;AAEA,SAAS,mBAAmB,OAAoB,OAAgC;CAC/E,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG,OAAO;CACvD,OAAO,QAAY,cAAc,MAAM,KAAK,CAAC,CAAC,MAAM,QAAY,MAAM,MAAM;AAC7E;AAEA,SAAS,yBAAyB,OAAgD;CACjF,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,CAAC,WAAS,KAAK,GAAG,OAAO;CAC7B,IACC,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,qBAAqB,QACnD,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,qBAAqB,IAAI,GAAG,CAAC,GAE/D,OAAO;CACR,MAAM,WAAW,sBAAsB;CACvC,KAAK,MAAM,OAAO,6BAA6B;EAC9C,MAAM,YAAY,MAAM;EACxB,IAAI,6BAA6B,IAAI,GAAG,GACnC;OAAA,OAAO,cAAc,WAAW,OAAO;EAAA,OACrC,IAAI,cAAc,QAAQ,OAAO,cAAc,UACrD,OAAO;EAER,IAAI,cAAc,SAAS,MAAM,OAAO;CACzC;CACA,OAAO;AACR;AAEA,SAAgB,qBACf,OACA,SACA,UAAgF,CAAC,GACxD;CACzB,IAAI,QAAQ,sBAAsB;EACjC,MAAM,YAAY,OAAO,OAAO,SAAS,SAAS;EAElD,IAAI,cADsB,OAAO,OAAO,SAAS,iBAC/B,GACjB,OAAO,iBAAe,uDAAuD;EAE9E,IAAI,cAAc,QAAQ,WAAW,QAAQ,QAAQ,mBAAmB,OACvE,OAAO,iBAAe,yDAAyD;CAEjF;CACA,MAAM,YAAY,mBAAmB,OAAO,QAAQ,OAAO;CAC3D,IAAI,aAAa,MAAM,OAAO,iBAAe,oCAAoC;CACjF,IAAI,CAAC,WACJ,OAAO,SAAS,sBAAsB,wCAAwC;CAG/E,MAAM,kBAAkB,yBAAyB,QAAQ,eAAe;CACxE,IAAI,oBAAoB,eACvB,OAAO,SAAS,+BAA+B,yCAAyC;CAEzF,IAAI,mBAAmB,MAAM,OAAO,iBAAe,4BAA4B;CAC/E,IAAI,CAAC,iBACJ,OAAO,SAAS,4BAA4B,wCAAwC;CAErF,KACE,QAAQ,0BAA0B,QAAQ,mBAAmB,SAC9D,CAAC,MAAM,mBAAmB,GAE1B,OAAO,SAAS,4BAA4B,wCAAwC;CAErF,OAAO,EAAE,IAAI,KAAK;AACnB;;;ACzEA,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,wBAAwB;AAC9B,IAAM,6BAA6B;AACnC,IAAM,eAAe,OAAO,cAAc;AAE1C,IAAM,4BAAY,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,8BAAc,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,+BAAe,IAAI,IAAI;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,wCAAwB,IAAI,IAAI;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAWD,SAAS,eAAe,SAAiB;CACxC,OAAO,EAAE,OAAO;EAAE,MAAM;EAAmB;CAAQ,EAAE;AACtD;AAEA,SAAS,yBAAyB;CACjC,OAAO,EACN,OAAO;EACN,MAAM;EACN,SAAS;CACV,EACD;AACD;AAEA,SAAS,4BAA4B;CACpC,OAAO,EACN,OAAO;EACN,MAAM;EACN,SAAS;CACV,EACD;AACD;AAEA,SAAS,SAAS,OAAkD;CACnE,OAAO,SAAS,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC1E;AAEA,SAAS,eAAe,OAAwB;CAC/C,OAAO,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,KAAK;AACzD;AAEA,SAAS,wBAAwB,OAA8B;CAC9D,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,WAAW,QAAQ,SAAS,8BAA8B,eAAe,OAAO,GACpF,OAAO;CAER,MAAM,aAAa,MAAM,UAAU,QAAQ,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE;CACrF,IAAI,CAAC,cAAc,eAAe,OAAO,eAAe,QAAQ,WAAW,WAAW,KAAK,GAC1F,OAAO;CAER,OAAO;AACR;AAEA,SAAS,uBACR,SACA,aACgB;CAChB,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,GAAG,MAAM,IAAI,0BACxD,OAAO;CAER,KAAK,MAAM,OAAO,OAAO,KAAK,OAAO,GAAG;EACvC,IAAI,sBAAsB,IAAI,GAAG,GAAG,OAAO,4CAA4C;EACvF,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,OAAO,+CAA+C;CAClF;CACA,IAAI,OAAO,QAAQ,eAAe,YAAY,QAAQ,WAAW,WAAW,GAC3E,OAAO;CAER,IACC,QAAQ,iBAAiB,SACxB,OAAO,QAAQ,kBAAkB,YACjC,CAAC,OAAO,UAAU,QAAQ,aAAa,KACvC,QAAQ,gBAAgB,IAEzB,OAAO;CAER,KAAK,MAAM,OAAO;EACjB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD,GAAY;EACX,MAAM,QAAQ,QAAQ;EACtB,IAAI,SAAS,SAAS,OAAO,UAAU,YAAY,MAAM,SAAS,2BACjE,OAAO,yBAAyB,IAAI;EAErC,IAAI,OAAO,UAAU,YAAY,eAAe,KAAK,GACpD,OAAO,oDAAoD;CAE7D;CACA,OAAO;AACR;AAEA,SAAS,gBAAgB,SAA6D;CACrF,OAAO;EACN,WAAW,QAAQ;EACnB,WAAY,QAAQ,+BAAqC,IAAI,KAAK,EAAA,CAAE,YAAY;EAChF,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,QAAS,QAAQ,UAAiC;EAClD,UAAW,QAAQ,aAAoC;EACvD,iBAAkB,QAAQ,qBAA4C;EACtE,cAAe,QAAQ,iBAAwC;EAC/D,WAAY,QAAQ,cAAqC;CAC1D;AACD;AAEA,SAAS,oBAAoB,OAA+C;CAC3E,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GAClC,IAAI,CAAC,UAAU,IAAI,GAAG,GAAG,OAAO,4CAA4C;CAE7E,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,QAAQ,KAAK,IAAI;CAC3E,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,QAAQ,MAAM,SAAS;CAC7B,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GACpE,OAAO;CAER,MAAM,cAAc,MAAM,gBAAgB;CAC1C,IACC,gBAAgB,SACf,OAAO,gBAAgB,YAAY,CAAC,OAAO,UAAU,WAAW,KAAK,cAAc,IAEpF,OAAO;CAER,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,iBAAiB,WAC/D,OAAO;CAER,IAAI,MAAM,WAAW,SAAS,OAAO,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,KAAK,IACtF,OAAO;CAER,IACC,MAAM,OAAO,SACZ,OAAO,MAAM,QAAQ,YAAY,CAAC,MAAM,IAAI,KAAK,KAAK,CAAC,WAAW,MAAM,GAAG,IAE5E,OAAO;CAER,IAAI,MAAM,qBAAqB,QAAQ,CAAC,MAAM,QAAQ,MAAM,iBAAiB,GAC5E,OAAO;CAER,MAAM,mBAAoB,MAAM,qBAAqB,CAAC;CACtD,IAAI,iBAAiB,SAAS,uBAC7B,OAAO,0CAA0C,sBAAsB;CAExE,MAAM,kBAA4B,CAAC;CACnC,KAAK,MAAM,SAAS,kBAAkB;EACrC,IAAI,OAAO,UAAU,UACpB,OAAO;EAER,MAAM,aAAa,wBAAwB,KAAK;EAChD,IAAI,CAAC,YAAY,OAAO;EACxB,IAAI,CAAC,gBAAgB,SAAS,UAAU,GAAG,gBAAgB,KAAK,UAAU;CAC3E;CACA,IAAI,MAAM,WAAW,QAAQ,OAAO,MAAM,YAAY,WACrD,OAAO;CAER,IACC,MAAM,wBAAwB,SAC7B,OAAO,MAAM,yBAAyB,YACtC,CAAC,OAAO,UAAU,MAAM,oBAAoB,KAC5C,MAAM,uBAAuB,IAE9B,OAAO;CAER,IAAI;CACJ,IAAI,MAAM,WAAW,MAAM;EAC1B,IAAI,CAAC,SAAS,MAAM,OAAO,GAAG,OAAO;EACrC,MAAM,eAAe,uBAAuB,MAAM,SAAS,YAAY;EACvE,IAAI,cAAc,OAAO;EACzB,UAAU,MAAM;CACjB;CAEA,MAAM,UAAyB,CAAC;CAChC,IAAI,MAAM,iBAAiB,MAAM;EAChC,MAAM,aAAa,QAAQ,IAAI,iBAAiB,KAAK,KAAK;EAC1D,MAAM,aAAa,MAAM;EACzB,MAAM,iBAAiB,MAAM;EAC7B,MAAM,UAAU,eACf,cAAc,QAAQ,IAAI,GAC1B,mBAAmB,cAAc,OAAO,aAAa,KAAA,EACtD;EACA,IAAI,SAAS,QAAQ,UAAU;CAChC;CACA,IAAI,gBAAgB,SAAS,GAAG,QAAQ,oBAAoB;CAE5D,IAAI;CACJ,IAAI,MAAM,WAAW,QAAQ,MAAM,wBAAwB,MAC1D,gBAAgB;EACf,SAAS,MAAM,YAAY,QAAQ,MAAM,wBAAwB;EACjE,GAAI,MAAM,wBAAwB,OAC/B,EAAE,oBAAoB,MAAM,qBAA+B,IAC3D,CAAC;CACL;CAED,OAAO;EACN;EACA;EACa;EACb;EACA;EACA;CACD;AACD;AAEA,SAAS,oBAAoB,QAA6D;CACzF,IAAI,WAAW,wBAAwB,OAAO;CAC9C,IAAI,WAAW,qBAAqB,OAAO;CAC3C,IAAI,WAAW,uBAAuB,OAAO;CAC7C,OAAO;AACR;AAEA,SAAS,eACR,OACA,SACyB;CACzB,MAAM,SAAS,QAAQ;CACvB,IAAI,WAAW,YAAY,WAAW,cAAc,WAAW,eAC9D,OAAO;CAER,MAAM,WAAW,gBAAgB,OAAO;CACxC,IAAI,WAAW,YAAY;EAC1B,MAAM,SAAS,QAAQ;EACvB,IAAI,WAAW,gBAAgB,WAAW,YAAY,WAAW,WAChE,OAAO;EAER,OAAO,2BAA2B,MAAM,IAAI,SAAS,WAAW,MAAM;CACvE;CACA,IAAI,WAAW,eAAe;EAC7B,IAAI,OAAO,QAAQ,wBAAwB,YAAY,CAAC,QAAQ,qBAC/D,OAAO;EAER,OAAO,uBAAuB,MAAM,IAAI,QAAQ,qBAAqB,QAAQ;CAC9E;CACA,IACE,QAAQ,qBAAqB,aAAa,QAAQ,qBAAqB,YACxE,OAAO,QAAQ,iBAAiB,YAChC,CAAC,QAAQ,gBACT,OAAO,QAAQ,kBAAkB,YACjC,CAAC,QAAQ,eAET,OAAO;CAER,OAAO,yBACN,MAAM,IACN,UACA,QAAQ,kBACR,QAAQ,cACR,QAAQ,aACT;AACD;AAEA,SAAgB,oBAAoB,UAAwB;CAC3D,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,6BAA6B,MAAM;EAC1C,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,IAAI,CAAC,MAAM,mBAAmB,GAAG,OAAO,EAAE,KAAK,uBAAuB,GAAG,GAAG;GAC5E,OAAO,EAAE,KAAK;IACb,SAAS;IACT,kBAAkB,gCAAgC;IAClD,gCAAgC,gCAAgC;IAChE,SAAS,QAAY,MAAM,MAAM;IACjC,iBAAiB,sBAAsB;GACxC,CAAC;EACF,QAAQ;GACP,OAAO,EAAE,KACR,EAAE,OAAO;IAAE,MAAM;IAAkB,SAAS;GAAmC,EAAE,GACjF,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,aAAa,OAAO,MAAM;EAClC,MAAM,SAAS,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,YAAY;EAC1D,IAAI,WAAW,cAAc,OAAO,EAAE,KAAK,eAAe,mBAAmB,GAAG,GAAG;EACnF,MAAM,UAAU,oBAAoB,MAAM;EAC1C,IAAI,OAAO,YAAY,UAAU;GAChC,IAAI,QAAQ,WAAW,0CAA0C,GAChE,OAAO,EAAE,KAAK,0BAA0B,GAAG,GAAG;GAC/C,OAAO,EAAE,KAAK,eAAe,OAAO,GAAG,GAAG;EAC3C;EACA,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,QAAQ,EAAE,wBAAwB,KAAK,CAAC;GACnF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,IAAI,CAAC,QAAQ,SAAS;IACrB,MAAM,OAAO,MAAM,MAAM,qBACxB,QAAQ,SACR,QAAQ,OACR,QAAQ,aACR,QAAQ,SACR,QAAQ,aACT;IACA,OAAO,EAAE,KAAK,IAAI;GACnB;GACA,MAAM,YAAY,MAAM,MAAM,8BAC7B,QAAQ,SACR,QAAQ,OACR,QAAQ,aACR,QAAQ,SACR,QAAQ,aACT;GACA,IAAI;GACJ,IAAI;IACH,4BAA4B,8BAC3B,MAAM,IACN,QAAQ,SACR,QAAQ,SACR,SACD;GACD,QAAQ,CAER;GACA,IAAI;GACJ,IAAI;IACH,gBAAgB,0BACf,MAAM,IACN,gBAAgB,QAAQ,OAAO,GAC/B,QAAQ,SACR,QAAQ,SACR,SACD;GACD,QAAQ,CAER;GACA,OAAO,EAAE,KAAK;IACb,GAAG,UAAU;IACb,GAAI,4BACD,EAAE,6BAA6B,0BAA0B,IACzD,CAAC;IACJ,GAAI,eAAe,OAAO,SAAS,cAAc,WAAW,yBACzD,EAAE,gBAAgB,cAAc,IAChC,CAAC;GACL,CAAC;EACF,QAAQ;GACP,OAAO,EAAE,KACR,EAAE,OAAO;IAAE,MAAM;IAAe,SAAS;GAAiC,EAAE,GAC5E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,2BAA2B,OAAO,MAAM;EAChD,MAAM,SAAS,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,YAAY;EAC1D,IAAI,WAAW,cAAc,OAAO,EAAE,KAAK,eAAe,mBAAmB,GAAG,GAAG;EACnF,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,EAAE,KAAK,eAAe,gCAAgC,GAAG,GAAG;EAC1F,MAAM,kBAAkB,uBAAuB,QAAQ,WAAW;EAClE,IAAI,iBAAiB;GACpB,IAAI,gBAAgB,WAAW,6CAA6C,GAC3E,OAAO,EAAE,KAAK,0BAA0B,GAAG,GAAG;GAC/C,OAAO,EAAE,KAAK,eAAe,eAAe,GAAG,GAAG;EACnD;EACA,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,QAAQ,EAAE,wBAAwB,KAAK,CAAC;GACnF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,MAAM,UAAU,eAAe,OAAO,MAAM;GAC5C,IAAI,OAAO,YAAY,UAAU,OAAO,EAAE,KAAK,eAAe,OAAO,GAAG,GAAG;GAC3E,IAAI,QAAQ,IAAI,OAAO,EAAE,KAAK,OAAO;GACrC,OAAO,EAAE,KAAK,SAAS,oBAAoB,QAAQ,MAAM,CAAC;EAC3D,QAAQ;GACP,OAAO,EAAE,KACR,EAAE,OAAO;IAAE,MAAM;IAAiB,SAAS;GAAsC,EAAE,GACnF,GACD;EACD;CACD,CAAC;CAED,OAAO;AACR;;;;;;;AC7aA,IAAM,oCAAoC;AAE1C,SAAS,kCAA0C;CAClD,MAAM,SAAS,OAAO,QAAQ,IAAI,mCAAmC,KAAK,KAAK,EAAE;CACjF,OAAO,OAAO,cAAc,MAAM,KAAK,SAAS,IAAI,SAAS;AAC9D;AAEA,IAAM,4BAA4B,gCAAgC;AAIlE,SAAS,+BAAwD;CAChE,OAAO;EACN,IAAI;EACJ,cAAc;EACd,eAAe;EACf,YAAY;EACZ,oBAAoB;EACpB,qBAAqB;CACtB;AACD;AAEA,SAAS,8BAA8B;CACtC,MAAM,SAAkE;EACvE,QAAQ,6BAA6B;EACrC,OAAO,6BAA6B;CACrC;CACA,OAAO;EACN,OAAO,QAAgC,SAAsC;GAC5E,OAAO,OAAO,CAAC,YAAY;EAC5B;EACA,WAAW;GACV,OAAO;IACN,OAAO;IACP,QAAQ;KACP,QAAQ,EAAE,GAAG,OAAO,OAAO;KAC3B,OAAO,EAAE,GAAG,OAAO,MAAM;IAC1B;GACD;EACD;CACD;AACD;AAEA,SAAS,uBAAuB,SAAuC;CACtE,IAAI,YAAY,QAAQ,YAAY,MACnC,OAAO;EACN,UAAU;EACV,SAAS;EACT,aAAa;EACb,aAAa;CACd;CAED,OAAO;EAAE,UAAU;EAAG,SAAS;EAAG,aAAa;CAA4B;AAC5E;AAEA,SAAS,uBAA+B;CACvC,OAAO,KAAK,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAK,QAAQ,GAAG,SAAS,GAAG,UAAU;AAC5F;AAEA,SAAS,sBAA8B;CACtC,OAAO,KAAK,QAAQ,IAAI,YAAY,KAAK,KAAK,KAAK,QAAQ,GAAG,QAAQ,GAAG,UAAU;AACpF;;AAGA,SAAS,aACR,SACA,UACO;CACP,KAAK,MAAM,WAAW,UACrB,IAAI;EACH,SAAS,MAAM,QAAQ,UAAU,QAAQ,MAAM;CAChD,QAAQ,CAER;AAEF;AAEA,eAAe,sBACd,SACA,UACgB;CAChB,KAAK,MAAM,WAAW,UACrB,IAAI;EACH,MAAM,SAAS,cAAc,QAAQ,UAAU,QAAQ,MAAM;CAC9D,QAAQ,CAER;AAEF;AAEA,SAAS,yBAAyB,UAA2B;CAC5D,MAAM,SAAS;CACf,IACC,OAAO,OAAO,UAAU,EAAE,CAAC,CACzB,KAAK,CAAC,CACN,YAAY,MAAM,UAEpB,OAAO;CACR,MAAM,UAAU,OAAO;CACvB,IAAI,WAAW,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG,OAAO;CACrF,MAAM,UAAW,QAAoC;CACrD,IAAI,WAAW,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG,OAAO;CACrF,MAAM,OAAQ,QAAoC;CAClD,IAAI,QAAQ,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG,OAAO;CAC5E,MAAM,gBAAiB,KAAiC;CACxD,OAAO,kBAAkB,gBAAgB,kBAAkB;AAC5D;AAEA,IAAM,gDAAgC,IAAI,IAAI;CAC7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAS,+BAA+B,OAA8C;CACrF,OAAO,8BAA8B,IAAI,MAAM,OAAO,IACnD,MAAM,UACN;AACJ;AAEA,SAAS,2BAA2B,GAAkB,OAA0B;CAC/E,IAAI,iBAAiB,+BACpB,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,KAAK,EAAE,GAAG,GAAG;CAEpE,MAAM,WAAoC,EAAE,OAAO,wBAAwB;CAC3E,IAAI,QAAQ,IAAI,yBAAyB,KACxC,SAAS,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CAExE,OAAO,EAAE,KAAK,UAAU,GAAG;AAC5B;AAEA,SAAS,kBAAkB,SAA2D;CACrF,MAAM,EAAE,SAAS,SAAS,iBAAiB,iBAAiB,GAAG,SAAS;CACxE,OAAO;AACR;AAEA,eAAe,yBACd,OACA,SACA,UACA,gBAAgB,OACf;CACD,MAAM,SAAS,gBAAgB,OAAO,QAAQ;CAC9C,aAAa,SAAS,OAAO,QAAQ;CACrC,IAAI,iBAAiB,yBAAyB,QAAQ,GACrD,MAAM,sBAAsB,SAAS,OAAO,QAAQ;CAErD,OAAO;AACR;AAEA,SAAgB,gBAAgB,UAAwB,SAAkC;CACzF,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,wBAAwB,4BAA4B;CAG1D,IAAI,IAAI,oBAAoB,MAAM;EAEjC,MAAM,SADQ,SACC,CAAA,CAAM,sBAAsB;EAC3C,OAAO,EAAE,KAAK,MAAM;CACrB,CAAC;CAGD,IAAI,IAAI,2BAA2B,MAAM;EACxC,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;EAmB/C,MAAM,QAlBI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACxB,CAAA,CACX,OAAO;GACP,QAAQ,OAAO,iBAAiB;GAChC,WAAW,OAAO,iBAAiB;GACnC,qBAAqB,OAAO,iBAAiB;GAC7C,KAAK,OAAO,iBAAiB;GAC7B,SAAS,OAAO,iBAAiB;GACjC,YAAY,OAAO,iBAAiB;GACpC,sBAAsB,OAAO,iBAAiB;GAC9C,yBAAyB,OAAO,iBAAiB;GACjD,wBAAwB,OAAO,iBAAiB;GAChD,YAAY,OAAO,iBAAiB;EACrC,CAAC,CAAC,CACD,KAAK,OAAO,gBAAgB,CAAC,CAC7B,QAAQ,KAAK,OAAO,iBAAiB,UAAU,CAAC,CAAC,CACjD,MAAM,KAAK,CAAC,CACZ,IACY,CAAA,CAAK,KAAK,QAAQ;GAC/B,MAAM,WAAW,OAAO,IAAI,aAAa,IAAI,uBAAuB,EAAE;GACtE,OAAO;IACN,GAAG;IACH,mBAAmB;IACnB,YAAY;GACb;EACD,CAAC;EACD,MAAM,SAAS,MAAM,sBAAsB;EAC3C,OAAO,EAAE,KAAK;GACb;GACA;GACA,QAAQ;IACP,WAAW;IACX,MAAM;IACN,gBAAgB;GACjB;GACA,wBAAwB,sBAAsB,SAAS;EACxD,CAAC;CACF,CAAC;CAGD,IAAI,KAAK,mBAAmB,OAAO,MAAM;EACxC,MAAM,SAAS,MAAM,oBAAoB,GAAG,yBAAyB;EACrE,IAAI,kBAAkB,UAAU,OAAO;EACvC,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,QAAQ,EAAE,sBAAsB,KAAK,CAAC;GACjF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,MAAM,eAAe,MAAM,yBAC1B,OACA,SACA,kBAAkB,MAAM,GACxB,EAAE,IAAI,OAAO,0BAA0B,MAAM,GAC9C;GACA,OAAO,EAAE,KAAK;IACb,UAAU,aAAa;IACvB,SAAS,aAAa;IACtB,UAAU,aAAa;GACxB,CAAC;EACF,SAAS,KAAK;GACb,OAAO,2BAA2B,GAAG,GAAG;EACzC;CACD,CAAC;CAGD,IAAI,KAAK,qBAAqB,OAAO,MAAM;EAC1C,MAAM,SAAS,MAAM,oBAAoB,GAAG,yBAAyB;EACrE,IAAI,kBAAkB,UAAU,OAAO;EACvC,MAAM,UAAU;EAEhB,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,SAAS,EAAE,sBAAsB,KAAK,CAAC;GAClF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,IAAI,oBAAkD;GACtD,MAAM,WAAW,8BAA8B,kBAAkB,OAAO,GAAG;IAC1E,kBAAkB;KAAE,OAAO;KAAc,eAAe,CAAC,qBAAqB,CAAC;IAAE;IACjF,sBAAsB,YAAY;KACjC,oBAAoB;KACpB,sBAAsB,OAAO,UAAU,OAAO;IAC/C;GACD,CAAC;GACD,IAAI,aAAa,MAChB,OAAO,EAAE,KAAK,uBAAuB,iBAAiB,CAAC;GAExD,MAAM,eAAe,MAAM,yBAC1B,OACA,SACA,UACA,EAAE,IAAI,OAAO,0BAA0B,MAAM,GAC9C;GACA,OAAO,EAAE,KAAK;IAAE,UAAU,aAAa;IAAU,SAAS,aAAa;GAAQ,CAAC;EACjF,SAAS,KAAK;GACb,OAAO,2BAA2B,GAAG,GAAG;EACzC;CACD,CAAC;CAGD,IAAI,KAAK,oBAAoB,OAAO,MAAM;EACzC,MAAM,SAAS,MAAM,oBAAoB,GAAG,yBAAyB;EACrE,IAAI,kBAAkB,UAAU,OAAO;EACvC,MAAM,UAAU;EAEhB,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,SAAS,EAAE,sBAAsB,KAAK,CAAC;GAClF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,IAAI,oBAAkD;GACtD,MAAM,WAAW,mCAAmC,kBAAkB,OAAO,GAAG;IAC/E,kBAAkB;KAAE,OAAO;KAAc,eAAe,CAAC,oBAAoB,CAAC;IAAE;IAChF,sBAAsB,YAAY;KACjC,oBAAoB;KACpB,sBAAsB,OAAO,SAAS,OAAO;IAC9C;GACD,CAAC;GACD,IAAI,aAAa,MAChB,OAAO,EAAE,KAAK,uBAAuB,iBAAiB,CAAC;GAExD,MAAM,eAAe,MAAM,yBAAyB,OAAO,SAAS,QAAQ;GAC5E,OAAO,EAAE,KAAK;IAAE,UAAU,aAAa;IAAU,SAAS,aAAa;GAAQ,CAAC;EACjF,SAAS,KAAK;GACb,OAAO,2BAA2B,GAAG,GAAG;EACzC;CACD,CAAC;CAED,OAAO;AACR;;;;;;;;ACrUA,SAAS,sBAAsB,KAIV;CACpB,OAAO,CAAC,IAAI,cAAc,IAAI,YAAY,IAAI,IAAI;AACnD;AAEA,SAAS,4BAEP,MAAgB;CACjB,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM;EAC/B,MAAM,CAAC,OAAO,SAAS,sBAAsB,CAAC;EAC9C,MAAM,CAAC,OAAO,SAAS,sBAAsB,CAAC;EAC9C,IAAI,UAAU,OAAO,OAAO,MAAM,cAAc,KAAK;EACrD,OAAO,MAAM,cAAc,KAAK;CACjC,CAAC;AACF;AAEA,IAAM,0BAA0B;CAAC;CAAiB;CAAa;CAAe;AAAc;AAkB5F,SAAS,WACR,KACA,UACW;CACX,OAAO;EACN,IAAI,OAAO,IAAI,MAAM,CAAC;EACtB,YAAY,IAAI,cAAc,OAAO,OAAO,OAAO,IAAI,UAAU;EACjE,OAAO,OAAO,IAAI,SAAS,MAAM;EACjC,aAAa,OAAO,IAAI,eAAe,CAAC;EACxC,gBAAgB,OAAO,IAAI,kBAAkB,CAAC;EAC9C,cAAc,OAAO,IAAI,gBAAgB,CAAC;EAC1C,YAAY,OAAO,IAAI,cAAc,EAAE;EACvC,eAAe;CAChB;AACD;AAEA,SAAS,kBAAkB,OAA0B;CACpD,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MACL,KAAK,SAAU,OAAO,SAAS,WAAW,OAAO,OAAO,IAAI,CAAE,CAAC,CAC/D,QAAQ,SAAS,OAAO,UAAU,IAAI,KAAK,OAAO,CAAC;AACtD;AAEA,SAAS,aAAa,QAAkB,YAAY,KAAiB;CACpE,MAAM,SAAqB,CAAC;CAC5B,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,WACnD,OAAO,KAAK,OAAO,MAAM,OAAO,QAAQ,SAAS,CAAC;CAEnD,OAAO;AACR;AAEA,SAAS,mBAAmB,OAAoB,WAAqC;CACpF,IAAI,UAAU,SAAS,GAAG,uBAAO,IAAI,IAAI;CACzC,MAAM,eAAe,8BAA8B,MAAM;EACxD,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,wBAAwB;CACzB,CAAC;CACD,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,SAAS,aAAa,CAAC,GAAG,SAAS,CAAC,GAAG;EAEjD,MAAM,UAAU;GACf;GACA,uBAHoB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAGvB,EAAa;GACpC,GAAG,aAAa;EACjB;EACA,MAAM,OAAO,MAAM,GACjB,QAAQ,kDAAkD,QAAQ,KAAK,OAAO,GAAG,CAAC,CAClF,IAAI,GAAG,OAAO,GAAG,aAAa,MAAM;EACtC,KAAK,MAAM,OAAO,MAAM,WAAW,IAAI,OAAO,IAAI,EAAE,CAAC;CACtD;CACA,OAAO;AACR;AAEA,SAAS,oBAAoB,OAAoB,YAAsC;CACtF,IAAI,WAAW,SAAS,GAAG,uBAAO,IAAI,IAAI;CAC1C,MAAM,eAAe,8BAA8B,MAAM;EACxD,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,wBAAwB;CACzB,CAAC;CACD,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,SAAS,aAAa,CAAC,GAAG,UAAU,CAAC,GAAG;EAElD,MAAM,UAAU;GACf;GACA,+BAHoB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAGf,EAAa;GAC5C,GAAG,aAAa;EACjB;EACA,MAAM,OAAO,MAAM,GACjB,QACA;;aAES,QAAQ,KAAK,OAAO,GAC9B,CAAC,CACA,IAAI,GAAG,OAAO,GAAG,aAAa,MAAM;EACtC,KAAK,MAAM,OAAO,MACjB,IAAI,OAAO,IAAI,eAAe,UAAU,WAAW,IAAI,IAAI,UAAU;CAEvE;CACA,OAAO;AACR;AAEA,SAAS,qBAAqB,OAAoB,MAAmC;CACpF,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,OAAO,MAAM;EACvB,IAAI,OAAO,IAAI,eAAe,UAAU,WAAW,IAAI,IAAI,UAAU;EACrE,KAAK,MAAM,OAAO,yBACjB,KAAK,MAAM,YAAY,kBAAkB,IAAI,gBAAgB,IAAI,GAChE,UAAU,IAAI,QAAQ;CAGzB;CACA,OAAO;EACN,kBAAkB,mBAAmB,OAAO,SAAS;EACrD,mBAAmB,oBAAoB,OAAO,UAAU;CACzD;AACD;AAEA,SAAS,gBAAgB,KAAe,YAAsC;CAC7E,MAAM,oBACL,IAAI,cAAc,QAAQ,WAAW,kBAAkB,IAAI,IAAI,UAAU;CAC1E,MAAM,cAAc,IAAI,eAAe;CACvC,IAAI,MAAM,QAAQ,WAAW,GAAG;EAC/B,IAAI,YAAY,WAAW,GAC1B,OAAO,IAAI,cAAc,QAAQ,WAAW,kBAAkB,IAAI,IAAI,UAAU;EAEjF,OACC,qBACA,kBAAkB,WAAW,CAAC,CAAC,MAAM,aAAa,WAAW,iBAAiB,IAAI,QAAQ,CAAC;CAE7F;CACA,OAAO,IAAI,cAAc,QAAQ,WAAW,kBAAkB,IAAI,IAAI,UAAU;AACjF;AAEA,SAAS,0BACR,UACA,YACiC;CACjC,IAAI,CAAC,UAAU,OAAO;CACtB,MAAM,YAAY,EAAE,GAAG,SAAS;CAChC,KAAK,MAAM,OAAO,yBACjB,IAAI,MAAM,QAAQ,UAAU,IAAI,GAC/B,UAAU,OAAO,kBAAkB,UAAU,IAAI,CAAC,CAAC,QAAQ,aAC1D,WAAW,iBAAiB,IAAI,QAAQ,CACzC;CAGF,OAAO;AACR;;;;;;AAeA,SAAS,mBAAmB,MAAsD;CACjF,OAAO,KACL,KAAK,SAAS;EACd,OAAO,IAAI;EACX,mBAAmB,IAAI;EACvB,sBAAsB,IAAI;EAC1B,oBAAoB,IAAI;EACxB,OAAO,IAAI;CACZ,EAAE,CAAC,CACF,MAAM,GAAG,MAAM,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AAChD;;;;AAKA,SAAS,oBAAoB,MAK3B;CACD,OAAO,KAAK,QACV,KAAK,SAAS;EACd,aAAa,IAAI,cAAc,IAAI;EACnC,gBAAgB,IAAI,iBAAiB,IAAI;EACzC,cAAc,IAAI,eAAe,IAAI;EACrC,OAAO,IAAI,QAAQ,IAAI;CACxB,IACA;EAAE,aAAa;EAAG,gBAAgB;EAAG,cAAc;EAAG,OAAO;CAAE,CAChE;AACD;;;;;;;;;;;;AAoBA,IAAM,oCAAoB,IAAI,IAA6B;AAC3D,IAAM,yBAAyB;;;;;;;;;AAU/B,IAAM,kCAAkC;;;;;;;;;;;;;AAcxC,SAAS,uBAAuB,OAAqC,OAAqB;CACzF,KAAK,MAAM,CAAC,KAAK,UAAU,OAC1B,IAAI,MAAM,eAAe,OAAO,MAAM,OAAO,GAAG;CAEjD,IAAI,MAAM,OAAO,iCAAiC;CAGlD,MAAM,WAAW,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,WAAW;CACxF,IAAI,WAAW,MAAM,OAAO,kCAAkC;CAC9D,KAAK,MAAM,CAAC,QAAQ,UAAU;EAC7B,IAAI,YAAY,GAAG;EACnB,MAAM,OAAO,GAAG;EAChB,YAAY;CACb;AACD;;;;;;;;;;;AAYA,SAAS,0BAA0B,OAA4B;CAC9D,IAAI;EACH,MAAM,MAAM,MAAM,GAChB,QACA;;;;;;;iFAQD,CAAC,CACA,IAAI;EACN,IAAI,CAAC,KAAK,OAAO;EACjB,OAAO;GACN,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;EACL,CAAC,CAAC,KAAK,GAAG;CACX,QAAQ;EAGP,OAAO,UAAU,KAAK,IAAI,EAAE,GAAG,KAAK,OAAO;CAC5C;AACD;AAEA,SAAS,cAAc,OAAoB,eAAsC;CAChF,MAAM,uBAAuB,0BAA0B,KAAK;CAC5D,OAAO,GAAG,MAAM,OAAO,GAAG,MAAM,QAAQ,GAAG,MAAM,SAAS,GAAG,iBAAiB,GAAG,GAAG;AACrF;;;;;AAMA,SAAgB,YAAY,UAA6B;CACxD,MAAM,MAAM,IAAI,KAAK;CAErB,MAAM,qBAAqB,UAAmD;EAC7E,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG,OAAO;EACvD,IAAI;GACH,OAAO,KAAK,MAAM,KAAK;EACxB,QAAQ;GACP,OAAO;EACR;CACD;CAKA,MAAM,+BAA+B;CAErC,IAAI,IAAI,eAAe,MAAM;EAC5B,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,oBAAoB,MAAM,EAAE;EACzC,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,eAAe,4BACpB,KAAK,QAAQ,QAAQ;GACpB,IAAI,IAAI,WAAW,aAAa,IAAI,WAAW,aAAa,IAAI,WAAW,UAC1E,OAAO;GAER,IAAI,IAAI,WAAW,eAAe,IAAI,aAAa;IAClD,MAAM,WAAW,KAAK,MAAM,IAAI,WAAW;IAC3C,IAAI,OAAO,SAAS,QAAQ,KAAK,MAAM,YAAY,8BAClD,OAAO;GAET;GACA,OAAO;EACR,CAAC,CACF,CAAC,CAAC,KAAK,SAAS;GACf,MAAM,IAAI;GACV,OAAO,IAAI;GACX,QAAQ,IAAI;GACZ,SAAS,IAAI;GACb,UAAU,IAAI;GACd,aAAa,IAAI;GACjB,OAAO,IAAI;EACZ,EAAE;EACF,OAAO,EAAE,KAAK;GACb,GAAG,MAAM,MAAM;GACf,YAAY,QAAQ;GACpB,kBAAkB;EACnB,CAAC;CACF,CAAC;CAED,IAAI,IAAI,iBAAiB,MAAM;EAC9B,OAAO,EAAE,KAAK,EACb,SAAS,UACV,CAAC;CACF,CAAC;CAED,IAAI,IAAI,eAAe,MAAM;EAC5B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,gBAAgB,EAAE,IAAI,MAAM,SAAS,KAAK;GAChD,MAAM,WAAW,cAAc,OAAO,aAAa;GACnD,MAAM,QAAQ,KAAK,IAAI;GACvB,MAAM,SAAS,kBAAkB,IAAI,QAAQ;GAC7C,IAAI,UAAU,QAAQ,OAAO,aAC5B,OAAO,EAAE,KAAK,OAAO,OAAO;GAO7B,MAAM,kBAAkB,MAAM,eAAe;GAC7C,MAAM,eAAe,mBAAmB,eAAe;GACvD,MAAM,eAAe,oBAAoB,eAAe;GACxD,MAAM,oBAAoB,gBAAgB,MAAM,eAAe,aAAa,IAAI;GAChF,MAAM,iBAAiB,oBAAoB,mBAAmB,iBAAiB,IAAI;GACnF,MAAM,iBAAiB,oBAAoB,oBAAoB,iBAAiB,IAAI;GAYpF,MAAM,yBAAyB;GAC/B,MAAM,wBAAwB,YAAwC;IAwBrE,QAvBa,UACT,MAAM,GACN,QACA;;;;;;;iBAQD,CAAC,CACA,IAAI,SAAS,sBAAsB,IACnC,MAAM,GACN,QACA;;;;;iBAMD,CAAC,CACA,IAAI,sBAAsB,EAAA,CAClB,KAAK,QAAQ,WAAW,KAAK,kBAAkB,IAAI,aAAa,CAAC,CAAC;GAC/E;GACA,MAAM,eAAe,qBAAqB,aAAa;GACvD,MAAM,mBAAmB,qBAAqB,OAAO,YAAY;GACjE,MAAM,cAAc,aAClB,QAAQ,QAAQ,gBAAgB,KAAK,gBAAgB,CAAC,CAAC,CACvD,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,SAAS;IACd,GAAG;IACH,eAAe,0BAA0B,IAAI,eAAe,gBAAgB;GAC7E,EAAE;GAEH,MAAM,UAAwB;IAC7B,SAAS;IACT,QAAQ,gBAAgB,iBAAiB;IACzC,QAAQ,gBAAgB,iBAAiB;IACzC,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;GACf;GACA,MAAM,UAAU,KAAK,IAAI;GACzB,uBAAuB,mBAAmB,OAAO;GACjD,kBAAkB,IAAI,UAAU;IAC/B;IACA,aAAa,UAAU;GACxB,CAAC;GACD,OAAO,EAAE,KAAK,OAAO;EACtB;CACD,CAAC;CAED,OAAO;AACR;;;AChRA,IAAM,UAAU;CAAE,SAAS;CAAM,eAAe;AAAK;AAErD,SAAS,QACR,QAC4C;CAC5C,OAAO;EAAE,SAAS;EAAO,eAAe;CAAO;AAChD;AAEA,SAAS,cACR,QACA,iBACA,OACqC;CACrC,IAAI,UAAU,aAAa,OAAO,sBAAsB,iBAAiB;CACzE,IAAI,UAAU,eAAe,OAAO,sBAAsB,mBAAmB;CAC7E,MAAM,6BACL,OAAO,YAAY,SAAS,cAAc,OAAO,yBAAyB;CAC3E,MAAM,kBAAkB,gBAAgB,MACtC,aAAa,SAAS,gBAAgB,OAAO,iBAC/C;CACA,OAAO;EACN,gBAAgB,CAAC,OAAO,UACrB,QAAQ,iBAAiB,IACzB,6BACC,QAAQ,8BAA8B,IACtC,gBAAgB,WAAW,IAC1B,QAAQ,wBAAwB,IAChC;EACL,SAAS,CAAC,OAAO,UACd,QAAQ,iBAAiB,IACzB,6BACC,QAAQ,8BAA8B,IACtC,CAAC,OAAO,oBACP,QAAQ,qBAAqB,IAC7B,CAAC,kBACA,QAAQ,wBAAwB,IAChC;EACN,SAAS,OAAO,UAAU,UAAU,QAAQ,iBAAiB;EAC7D,QAAQ,OAAO,UAAU,QAAQ,eAAe,IAAI;EACpD,eAAe,OAAO,aAAa,eAAe,QAAQ,qBAAqB,IAAI;CACpF;AACD;AAEA,SAAS,sBACR,QACqC;CACrC,MAAM,OAAO,QAAQ,MAAM;CAC3B,OAAO;EACN,gBAAgB;EAChB,SAAS;EACT,SAAS;EACT,QAAQ;EACR,eAAe;CAChB;AACD;AAEA,SAAS,eACR,SACA,OACsC;CACtC,IAAI,UAAU,aAAa,OAAO,EAAE,KAAK,QAAQ,iBAAiB,EAAE;CACpE,IAAI,UAAU,eAAe,OAAO,EAAE,KAAK,QAAQ,mBAAmB,EAAE;CACxE,OAAO,EACN,KACC,QAAQ,eAAe,kBACpB,QAAQ,mBAAmB,IAC3B,QAAQ,eAAe,WAAW,IACjC,QAAQ,qBAAqB,IAC7B,QACN;AACD;AAEA,SAAS,UAAU,OAAyD;CAC3E,IAAI,MAAM,eAAe,aAAa,OAAO;CAC7C,IAAI,MAAM,eAAe,WAAW,MAAM,mBAAmB,OAAO;CACpE,IAAI,MAAM,SAAS,OAAO;CAC1B,OAAO;AACR;AAEA,SAAgB,2BAA2B,OAAgD;CAC1F,MAAM,QAAQ,UAAU,KAAK;CAC7B,MAAM,OAAO;EACZ,SAAS,MAAM;EACf,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;EAC9B,SAAS,MAAM,QAAQ,KAAK,YAAY;GACvC,GAAG;GACH,SAAS,cAAc,QAAQ,MAAM,iBAAiB,KAAK;EAC5D,EAAE;EACF,UAAU,MAAM,SAAS,KAAK,aAAa;GAC1C,GAAG;GACH,SAAS,eAAe,SAAS,KAAK;EACvC,EAAE;EACF,iBAAiB,MAAM;CACxB;CACA,IAAI,UAAU,aACb,OAAO;EACN,GAAG;EACH;EACA,SAAS;GACR,SAAS,QAAQ,iBAAiB;GAClC,QAAQ,QAAQ,iBAAiB;EAClC;CACD;CAED,IAAI,UAAU,eACb,OAAO;EACN,GAAG;EACH;EACA,mBAAmB,MAAM,qBAAqB;EAC9C,SAAS;GAAE,SAAS;GAAS,QAAQ,QAAQ,mBAAmB;EAAE;CACnE;CAED,IAAI,UAAU,qBAAqB,MAAM,SACxC,OAAO;EACN,GAAG;EACH;EACA,SAAS;GAAE,SAAS;GAAS,QAAQ;EAAQ;EAC7C,GAAG,MAAM;CACV;CAED,OAAO;EACN,GAAG;EACH,OAAO;EACP,SAAS;GAAE,SAAS;GAAS,QAAQ,QAAQ,kBAAkB;EAAE;CAClE;AACD;;;ACvPA,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;AAC9B,IAAM,kCAAkC;AACxC,IAAM,cAAc;AACpB,IAAM,eAAe;AACrB,IAAM,uBAAuB;AAC7B,IAAM,iCAAiC,cAAc;AACrD,IAAM,8BAA8B;AACpC,IAAM,oCAAoC;AAC1C,IAAM,gCAAgC;AACtC,IAAM,oCAAoC;AAC1C,IAAM,0BAA0B;AAChC,IAAM,gCAAgC;AACtC,IAAM,oCAAoC;AAC1C,IAAa,0BAA0B;AACvC,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;AACrC,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;AAC9B,IAAM,8BAA8B;AACpC,IAAM,qCAAqC;AAC3C,IAAM,2CAA2B,IAAI,QAAuD;AAE5F,SAAS,uBAAuB,IAAuB,cAA2C;CACjG,IAAI,SAAS,yBAAyB,IAAI,EAAE;CAC5C,IAAI,CAAC,QAAQ;EACZ,yBAAS,IAAI,IAAI;EACjB,yBAAyB,IAAI,IAAI,MAAM;CACxC;CACA,IAAI,OAAO,IAAI,YAAY,GAAG,OAAO;CACrC,IAAI,eAA2B,KAAA;CAC/B,MAAM,UAAU,IAAI,SAAe,YAAY;EAC9C,SAAS;CACV,CAAC;CACD,OAAO,IAAI,cAAc,OAAO;CAChC,IAAI,WAAW;CACf,aAAa;EACZ,IAAI,UAAU;EACd,WAAW;EACX,QAAQ,OAAO,YAAY;EAC3B,OAAO;CACR;AACD;;AAGA,SAAS,yBAAyB,IAAuB,cAAqC;CAC7F,OAAO,yBAAyB,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,KAAK,QAAQ,QAAQ;AAC/E;AAEA,eAAe,qBACd,IACA,cACA,WACmB;CACnB,MAAM,UAAU,uBAAuB,IAAI,YAAY;CACvD,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI;EACH,MAAM,UAAU;EAChB,OAAO;CACR,UAAU;EACT,QAAQ;CACT;AACD;AA+BA,IAAM,gCAAkE;CACvE,QAAQ;CACR,KAAK;CACL,MAAM;AACP;AAQA,IAAM,oCAA0E;CAC/E,YAAY;CACZ,YAAY;CACZ,aAAa;AACd;AAEA,SAAS,uBAA8B;CACtC,uBAAO,IAAI,MAAM,+BAA+B;AACjD;AAEA,SAAS,iCAAiC,OAAyB;CAClE,OAAO,iBAAiB,SAAS,MAAM,YAAY;AACpD;AAEA,SAAS,4BAA4B,OAA+B;CACnE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,kDAAkD,KAAK,MAAM,OAAO,CAAC,GAAG;CACvF,OAAO,SAAS,OAAO,MAAM,IAAI;AAClC;AAEA,SAAS,gCAAgC,OAAyB;CACjE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,eAAe,4BAA4B,KAAK;CACtD,IAAI,cAAc,OAAO;EAAC;EAAK;EAAK;EAAK;EAAK;EAAK;CAAG,CAAC,CAAC,SAAS,YAAY;CAC7E,OACC,MAAM,SAAS,kBACf,MAAM,SAAS,gBACf,mDAAmD,KAAK,MAAM,OAAO;AAEvE;AAEA,SAAS,6BAA6B,OAAyB;CAC9D,MAAM,SAAS,4BAA4B,KAAK;CAChD,OAAO,WAAW,OAAO,WAAW;AACrC;;;;;AAMA,SAAS,qCAAqC,OAAyB;CACtE,OACC,iBAAiB,UAChB,MAAM,YAAY,+CAClB,MAAM,YAAY;AAErB;AAEA,eAAe,8BACd,UACA,MACmD;CAEnD,IAAI,SAAS,SAAS,GAAG,OAAO,CAAC;CACjC,MAAM,UAAmD,CAAC;CAC1D,KAAK,MAAM,WAAW,UACrB,IAAI;EACH,QAAQ,KAAK,GAAI,MAAM,KAAK,CAAC,OAAO,CAAC,CAAE;CACxC,SAAS,OAAO;EACf,IAAI,CAAC,qCAAqC,KAAK,GAAG,MAAM;CACzD;CAED,OAAO;AACR;AAEA,eAAe,8BACd,MACA,oBACA,YACa;CACb,IAAI;CACJ,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;EAChD,MAAM,cAAc,aAAa,KAAK,IAAI;EAC1C,IAAI,eAAe,GAAG,MAAM,aAAa,qBAAqB;EAC9D,IAAI;GACH,OAAO,MAAM,KAAK,KAAK,IAAI,IAAK,KAAK,IAAI,oBAAoB,cAAc,GAAK,CAAC,CAAC;EACnF,SAAS,OAAO;GACf,YAAY;GACZ,IAAI,CAAC,gCAAgC,KAAK,KAAK,YAAY,GAAG,MAAM;GACpE,MAAM,UAAU,KAAK,IAAI,MAAM,KAAK,SAAS,KAAO,aAAa,KAAK,IAAI,CAAC;GAC3E,IAAI,WAAW,GAAG,MAAM;GACxB,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,OAAO,CAAC;EAC5D;CACD;CACA,MAAM;AACP;AAEA,SAAgB,6BACf,oBACA,YACA,QAAQ,KAAK,IAAI,GACD;CAChB,MAAM,cAAc,aAAa;CACjC,OAAO,eAAe,IAAI,OAAO,KAAK,IAAI,IAAK,KAAK,IAAI,oBAAoB,cAAc,GAAK,CAAC;AACjG;AAEA,SAAS,mBAAmB,QAA4B;CACvD,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;CAC/E,IAAI,OAAO,SAAS,uBAAuB,MAAM,qBAAqB;CACtE,OAAO;AACR;AAEA,SAAgB,wBAAwB,OAA8B;CACrE,IAAI;EACH,MAAM,aAAa,aAAa,KAAK;EACrC,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,SAAS,IAAI,IAAI,UAAU;EACjC,IACE,OAAO,aAAa,WAAW,OAAO,aAAa,YACpD,CAAC,OAAO,QACR,OAAO,YACP,OAAO,UAEP,OAAO;EAER,MAAM,OAAO,OAAO,aAAa,MAAM,KAAK,OAAO;EACnD,OAAO,GAAG,OAAO,SAAS,IAAI,OAAO,OAAO,OAAO,OAAO;CAC3D,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAgB,oCACf,OACA,gBACA,QACuC;CACvC,MAAM,gBAAgB,mBAAmB,MAAM;CAC/C,MAAM,0BAA0B,aAAa,cAAc;CAC3D,MAAM,oCAAoC,wBAAwB,uBAAuB;CACzF,IAAI,CAAC,2BAA2B,CAAC,mCAAmC,MAAM,qBAAqB;CAC/F,IAAI,yBAA+D,CAAC;CACpE,IAAI,OACH,IAAI;EACH,yBAAyB,4BACxB,OACA,mCACA,wBAAwB,cAAc,QACtC,aACD;CACD,QAAQ;EAGP,yBAAyB,CAAC;CAC3B;CAED,OAAO,CACN,GAAG,cAAc,KAAK,aAAa;EAAE;EAAS,eAAe;CAAwB,EAAE,GACvF,GAAG,sBACJ;AACD;AAEA,SAAS,4BACR,OACA,mCACA,OACA,kBACuC;CACvC,IAAI,SAAS,GAAG,OAAO,CAAC;CACxB,MAAM,wBAAwB,MAAM,GAClC,QACA;;;;;oCAMD,CAAC,CACA,MAAM,CAAC,CACP,IAAI,GAAmC;CACzC,IAAI,sBAAsB,SAAS,iCAClC,OAAO,CAAC;CAET,MAAM,qBAAqB,sBAAsB,QAC/C,UAAU,wBAAwB,KAAK,MAAM,iCAC/C;CACA,IAAI,mBAAmB,WAAW,GAAG,OAAO,CAAC;CAC7C,MAAM,0BAA0B,mBAAmB,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAC3E,MAAM,sBACL,iBAAiB,WAAW,IACzB,KACA,8BAA8B,iBAAiB,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE;CAC7E,MAAM,WAAW,MAAM,GACrB,QACA;;;+BAG4B,wBAAwB;;QAE/C,oBAAoB;oCAE1B,CAAC,CACA,MAAM,CAAC,CACP,IAAI,GAAG,oBAAoB,GAAG,kBAAkB,KAAK;CACvD,IAAI,SAAS,WAAW,GAAG,OAAO,CAAC;CACnC,MAAM,oBAAoB,SAAS,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAC3D,MAAM,UAAU,MAAM,GACpB,QACA;;;+BAG4B,wBAAwB;+BACxB,kBAAkB;4CAE/C,CAAC,CACA,IAAI,GAAG,oBAAoB,GAAG,QAAQ;CAIxC,MAAM,wCAAwB,IAAI,IAAsB;CACxD,KAAK,MAAM,UAAU,SAAS;EAC7B,MAAM,iBAAiB,sBAAsB,IAAI,OAAO,QAAQ,KAAK,CAAC;EACtE,eAAe,KAAK,OAAO,cAAc;EACzC,sBAAsB,IAAI,OAAO,UAAU,cAAc;CAC1D;CACA,OAAO,SAAS,SAAS,YAAY;EACpC,MAAM,iBAAiB,sBAAsB,IAAI,OAAO,KAAK,CAAC;EAG9D,MAAM,gBAAgB,eAAe;EACrC,OAAO,eAAe,WAAW,KAAK,gBAAgB,CAAC;GAAE;GAAS;EAAc,CAAC,IAAI,CAAC;CACvF,CAAC;AACF;AAEA,eAAe,2CACd,cACA,UAAwD,CAAC,GACzD,UAC+C;CAC/C,IAAI;CACJ,IAAI;EACH,SAAS,aAAa,WAAW;CAClC,QAAQ;EACP,MAAM,qBAAqB;CAC5B;CACA,MAAM,SAAS,QAAQ,OAAO,kBAAkB;CAChD,MAAM,YAAY,QAAQ,OAAO,0BAA0B;CAC3D,IAAI,CAAC,UAAU,CAAC,aAAa,OAAO,sBAAsB,WAAW,GAAG,OAAO,CAAC;CAChF,IAAI,CAAC,UAAU,CAAC,WAAW,MAAM,qBAAqB;CAEtD,IAAI;EACH,MAAM,0BAA0B,aAAa,OAAO,kBAAkB;EACtE,IAAI,CAAC,yBAAyB,MAAM,qBAAqB;EACzD,MAAM,YAAY;EAClB,IAAI;EACJ,IAAI;GACH,QAAQ,WAAW;EACpB,QAAQ;GAGP,QAAQ,KAAA;EACT;EACA,MAAM,mBAAmB,oCACxB,OACA,OAAO,oBACP,OAAO,qBACR;EACA,IAAI,iBAAiB,WAAW,GAAG,MAAM,qBAAqB;EAC9D,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,uBAAuB;EAC3D,MAAM,aAAa,QAAQ,cAAc,KAAK,IAAI,IAAI;EACtD,MAAM,4BAA4B,QAAQ,eACvC,iBAAiB,QAChB,EAAE,eAAe,cACjB,sBAAsB,eAAe,OAAO,MAAM,QAAQ,YAC5D,IACC;EACH,MAAM,SAAS,MAAM,+BACnB,oBACA,aAAa,WAAW;GACvB;GACA,aAAa,OAAO;GACpB,iBAAiB;GACjB,UAAU;EACX,CAAC,GACF,UACA,UACD;EACA,MAAM,YAAY,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,MAAM,UAAU,KAAK,CAAC,CAAC;EACxE,MAAM,WAAW,MAAM,QAAQ,IAC9B,0BAA0B,IAAI,OAAO,EAAE,eAAe,cAAc;GAInE,MAAM,QAAQ,UAAU,IAAI,OAAO;GACnC,IAAI,CAAC,SAAS,MAAM,eAAe,MAClC,OAAO,EAAE,MAAM,SAAkB;GAElC,IACC,MAAM,aAAa,WAClB,MAAM,iBAAiB,QAAQ,OAAO,MAAM,iBAAiB,UAC7D;IACD,IAAI,QAAQ,cAAc,MAAM,qBAAqB;IACrD,OAAO,EAAE,MAAM,cAAuB;GACvC;GACA,IAAI;GACJ,IAAI;IACH,UAAU,MAAM,+BACd,oBACA,aAAa,YAAY;KACxB;KACA,iBAAiB;KACjB;KACA,aAAa,OAAO;KACpB,UAAU;IACX,CAAC,GACF,UACA,UACD;GACD,SAAS,OAAO;IACf,IAAI,CAAC,QAAQ,cAAc,OAAO,EAAE,MAAM,cAAuB;IACjE,IAAI,iCAAiC,KAAK,GACzC,MAAM,IAAI,MAAM,oCAAoC;IAErD,MAAM,qBAAqB;GAC5B;GACA,IAAI,QAAQ,SAAS,aAAa;IACjC,IAAI,QAAQ,cAAc,MAAM,IAAI,MAAM,oCAAoC;IAC9E,OAAO,EAAE,MAAM,cAAuB;GACvC;GACA,IACC,QAAQ,MACN,WACA,qBAAqB,OAAO,UAAU,MAAM,OAAO,eAClD,OAAO,YAAY,KAAK,OAAO,YAAY,CAC9C,GACC;IACD,IAAI,QAAQ,cAAc,MAAM,qBAAqB;IACrD,OAAO,EAAE,MAAM,cAAuB;GACvC;GACA,OAAO;IACN,MAAM;IACN,UAAU;KACT;KACA;KACA,aAAa,MAAM,gBAAgB;KACnC,SAAS,QAAQ,KAAK,YAAY;MACjC,UAAU,OAAO;MACjB,aAAa,OAAO;MACpB,aAAa,OAAO,gBAAgB;MACpC,SAAS,OAAO,YAAY;MAC5B,mBAAmB,CAAC,OAAO,eAAe,IAAI,OAAO,UAAU,CAAC,CAAC,OAAO,OAAO;KAChF,EAAE;IACH;GACD;EACD,CAAC,CACF;EACA,MAAM,iBAAiB,SAAS,SAAS,YACxC,QAAQ,SAAS,aAAa,CAAC,QAAQ,QAAQ,IAAI,CAAC,CACrD;EACA,IAAI,eAAe,WAAW,KAAK,SAAS,MAAM,YAAY,QAAQ,SAAS,aAAa,GAC3F,MAAM,qBAAqB;EAE5B,OAAO;CACR,SAAS,OAAO;EACf,IAAI,iBAAiB,SAAS,MAAM,YAAY,sCAC/C,MAAM;EAEP,MAAM,qBAAqB;CAC5B;AACD;AAEA,SAAS,wBAAwB,QAAmD;CACnF,IAAI,OAAO,SAAS,uBACnB,MAAM,IAAI,MAAM,oCAAoC;AAEtD;AAEA,SAAS,kBAAkB,OAAoB;CAC9C,OAAO;EAAE,cAAc,MAAM;EAAS,eAAe,MAAM;CAAS;AACrE;AAEA,SAAS,mBACR,OACA,QAC4B;CAC5B,wBAAwB,MAAM;CAC9B,OAAO,6BAA6B,MAAM,IAAI;EAC7C,YAAY,kBAAkB,KAAK;EACnC;CACD,CAAC;AACF;AAEA,SAAS,iBAAiB,WAAuE;CAChG,OAAO;EACN,cAAc,UAAU;EACxB,aAAa,UAAU;EACvB,QAAQ,UAAU;EAClB,aAAa,UAAU;EACvB,cAAc,UAAU;EACxB,uBAAuB,UAAU;EACjC,wBAAwB,UAAU;CACnC;AACD;AAEA,SAAS,yBACR,WACA,OACoC;CACpC,OAAO;EACN,GAAG,iBAAiB,SAAS;EAC7B,QAAQ,MAAM,UAAU,cAAc,UAAU,MAAM;EACtD,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;CAC/B;AACD;AAEA,SAAS,mBAAmB,OAA0D;CACrF,OAAO;EACN,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,QAAQ,MAAM,UAAU,cAAc,UAAU,MAAM;EACtD,aAAa,MAAM,QAAQ;EAC3B,cAAc,MAAM,SAAS;EAC7B,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;CAC/B;AACD;AAEA,SAAS,uBACR,OACA,QAC4B;CAC5B,MAAM,WAAsC,CAAC;CAC7C,MAAM,eAAoD,CAAC;CAC3D,KAAK,MAAM,SAAS,QAAQ;EAC3B,MAAM,eAAe,sBAAsB,MAAM,eAAe,MAAM,OAAO;EAC7E,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;EAC5D,IAAI,4BAA4B,OAAO,YAAY,GAAG;GAGrD,IAAI,gCAAgC,MAAM,IAAI,YAAY,GAAG,aAAa,KAAK,KAAK;GACpF;EACD;EACA,IAAI,CAAC,SAAS,MAAM,UAAU,aAAa;GAC1C,aAAa,KAAK,KAAK;GACvB;EACD;EACA,SAAS,KAAK,mBAAmB,KAAK,CAAC;CACxC;CACA,OAAO,CAAC,GAAG,UAAU,GAAG,mBAAmB,OAAO,YAAY,CAAC,CAAC,CAC9D,QAAQ,cAAc,CAAC,4BAA4B,OAAO,UAAU,YAAY,CAAC,CAAC,CAClF,UAAU,MAAM,UAChB,KAAK,eAAe,MAAM,eAAe,KAAK,KAAK,eAAe,MAAM,eAAe,IAAI,CAC5F;AACF;AAEA,SAAS,4BAA4B,OAAoB,cAA+B;CACvF,OAAO,QACN,MAAM,GACJ,QACA;;;iDAID,CAAC,CACA,MAAM,CAAC,CACP,IAAI,0BAA0B,YAAY,CAAC,CAC9C;AACD;AAEA,SAAS,YAAY,cAAsB,YAA0C;CACpF,OAAO,aACJ,sBAAsB,sCAAsC,CAAC,cAAc,UAAU,CAAC,IACtF;AACJ;AAEA,SAAS,oBAAoB,cAAsB,YAA4B;CAC9E,OAAO,sBAAsB,sCAAsC,CAAC,cAAc,UAAU,CAAC;AAC9F;AAEA,SAAS,QAAQ,cAAsB,QAAwB;CAC9D,OAAO,sBAAsB,kCAAkC,CAAC,cAAc,MAAM,CAAC;AACtF;AAEA,SAAS,mBAAmB,YAAoB,iBAA+C;CAC9F,OAAO,kBAAkB,6BAA6B,YAAY,eAAe,IAAI;AACtF;AAEA,SAAS,sBACR,cACA,OACA,QAMqC;CACrC,MAAM,iCAAiB,IAAI,IAAoB;CAC/C,MAAM,sCAAsB,IAAI,IAAoB;CACpD,MAAM,iBAAiB,IAAI,IAC1B;EACC,QAAQ;EACR,GAAI,QAAQ,QAAQ,KAAK,WAAW,OAAO,WAAW,KAAK,CAAC;EAC5D,GAAI,QAAQ,SAAS,SAAS,YAAY,CACzC,QAAQ,aACR,GAAG,QAAQ,eAAe,KAAK,WAAW,OAAO,WAAW,CAC7D,CAAC,KAAK,CAAC;EACP,GAAI,QAAQ,gBAAgB,KAAK,aAAa,SAAS,WAAW,KAAK,CAAC;CACzE,CAAC,CACC,QAAQ,UAA2B,QAAQ,KAAK,CAAC,CAAC,CAClD,KAAK,UAAU,yBAAyB,KAAK,CAAC,CAAC,YAAY,CAAC,CAC/D;CACA,MAAM,iBAAiB,MAAc,QAAgB;EACpD,MAAM,MAAM,GAAG,KAAK,GAAG;EACvB,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UAAU,OAAO;EACrB,IAAI,SAAS,oBAAoB,IAAI,IAAI,KAAK,KAAK;EACnD,IAAI,QAAQ,GAAG,KAAK,uBAAuB,MAAM;EACjD,OAAO,eAAe,IAAI,yBAAyB,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG;GACzE,SAAS;GACT,QAAQ,GAAG,KAAK,uBAAuB,MAAM;EAC9C;EACA,oBAAoB,IAAI,MAAM,KAAK;EACnC,eAAe,IAAI,yBAAyB,KAAK,CAAC,CAAC,YAAY,CAAC;EAChE,eAAe,IAAI,KAAK,KAAK;EAC7B,OAAO;CACR;CACA,MAAM,gBAAgB,IAAI,IAAI,QAAQ,SAAS,KAAK,YAAY,CAAC,QAAQ,YAAY,OAAO,CAAC,CAAC;CAC9F,MAAM,yBAAyB,IAAI,IAClC,QAAQ,SAAS,SAAS,YACzB,QAAQ,sBAAsB,CAAC,CAAC,QAAQ,qBAAqB,OAAO,CAAU,IAAI,CAAC,CACpF,CACD;CACA,MAAM,kBAAkB,IAAI,IAC3B,QAAQ,gBAAgB,KAAK,aAAa,CAAC,SAAS,aAAa,QAAQ,CAAC,CAC3E;CACA,MAAM,eAAe,IAAI,IAAI,QAAQ,QAAQ,KAAK,WAAW,CAAC,OAAO,WAAW,MAAM,CAAC,CAAC;CACxF,MAAM,gCAAgC,UAAkB,QAAgB;EACvE,IAAI,aAAa,kBAChB,OAAO;GAAE,aAAa;GAA0B,MAAM;EAAkC;EAEzF,OAAO;GACN,aAAa,uBAAuB,IAAI,GAAG,CAAC,EAAE,eAAe,cAAc,WAAW,GAAG;GACzF,MAAM;EACP;CACD;CACA,MAAM,uBAAuB,YAAoB,QAAsC;EACtF,IAAI,CAAC,KAAK,OAAO;EACjB,MAAM,UAAU,cAAc,IAAI,UAAU;EAC5C,MAAM,SAAS,SAAS,eAAe,MAAM,SAAS,KAAK,uBAAuB,GAAG;EACrF,IAAI,QAAQ,OAAO,OAAO;EAC1B,IAAI,SAAS,uBAAuB,OAAO,QAAQ,eAAe,iBACjE,OAAO,GAAG,QAAQ,YAAY;EAE/B,OAAO,cAAc,WAAW,GAAG;CACpC;CACA,OAAO;EACN,aAAa,MAAM,YAAY,KAAK,YAAY;GAC/C,SAAS,QAAQ,cAAc,OAAO,MAAM;GAC5C,iBACC,QAAQ,mBAAmB,cAAc,QAAQ,QAAQ,cAAc,OAAO,MAAM,CAAC;GACtF,QAAQ,OAAO;GACf,2BAA2B,OAAO;GAClC,yBAAyB,OAAO;EACjC,EAAE;EACF,mBAAmB,MAAM,kBAAkB,KAAK,WAAW;GAC1D,MAAM,cAAc,oBAAoB,cAAc,OAAO,UAAU;GACvE,MAAM,oBAAoB,QAAQ,cAAc,OAAO,MAAM;GAC7D,OAAO;IACN,SAAS;IACT,iBAAiB,QAAQ,mBAAmB,cAAc,QAAQ,iBAAiB;IACnF;IACA,qBACC,gBAAgB,IAAI,WAAW,CAAC,EAAE,eAAe,cAAc,UAAU,WAAW;IACrF,QAAQ,OAAO;GAChB;EACD,CAAC;EACD,gBAAgB,MAAM,eAAe,KAAK,WAAW;GACpD,MAAM,UAAU,mBAAmB,OAAO,YAAY,OAAO,mBAAmB;GAChF,MAAM,QAAQ,mBAAmB,OAAO,YAAY,OAAO,iBAAiB;GAC5E,OAAO;IACN,YAAY,OAAO;IACnB,oBACC,cAAc,IAAI,OAAO,UAAU,CAAC,EAAE,eACtC,cAAc,WAAW,OAAO,UAAU;IAC3C,yBAAyB,OAAO,sBAC7B,8BAA8B,cAAc,OAAO,mBAAmB,IACtE;IACH,wBAAwB;IACxB,gCAAgC,oBAAoB,OAAO,YAAY,OAAO;IAC9E,uBAAuB,OAAO,oBAC3B,8BAA8B,cAAc,OAAO,iBAAiB,IACpE;IACH,sBAAsB;IACtB,8BAA8B,oBAAoB,OAAO,YAAY,KAAK;IAC1E,QAAQ,OAAO;GAChB;EACD,CAAC;EACD,kBAAkB,MAAM,iBAAiB,KAAK,WAAW;GACxD,MAAM,sBAAsB,8BAC3B,cACA,OAAO,wBACR;GACA,MAAM,eAAe,QAAQ,cAAc,OAAO,WAAW;GAC7D,MAAM,sBAAsB,6BAC3B,OAAO,0BACP,mBACD;GACA,OAAO;IACN;IACA,6BAA6B,oBAAoB;IACjD,sBAAsB,oBAAoB;IAC1C,eAAe,OAAO;IACtB;IACA,sBAAsB,QAAQ,mBAAmB,cAAc,QAAQ,YAAY;IACnF,QAAQ,OAAO;GAChB;EACD,CAAC;EACD,qBAAqB,MAAM,oBAAoB,KAAK,WAAW;GAC9D,MAAM,sBAAsB,8BAC3B,cACA,OAAO,wBACR;GACA,MAAM,YAAY,oBAAoB,cAAc,OAAO,QAAQ;GACnE,MAAM,sBAAsB,6BAC3B,OAAO,0BACP,mBACD;GACA,OAAO;IACN;IACA,6BAA6B,oBAAoB;IACjD,sBAAsB,oBAAoB;IAC1C;IACA,mBACC,aAAa,IAAI,SAAS,CAAC,EAAE,eAAe,cAAc,UAAU,SAAS;IAC9E,QAAQ,OAAO;GAChB;EACD,CAAC;CACF;AACD;AAEA,SAAS,wBAAwB,OAAmD;CACnF,OAAO,sBAAsB,sCAAsC,KAAK;AACzE;AAEA,IAAM,4BAA4B;AAIlC,SAAS,yBAAyB,OAAuB;CACxD,OAAO,MACL,UAAU,MAAM,CAAC,CACjB,QAAQ,YAAY,EAAE,CAAC,CACvB,QAAQ,YAAY,GAAG,CAAC,CACxB,QAAQ,SAAS,GAAG,CAAC,CACrB,KAAK;AACR;AAEA,SAAS,gBACR,OACA,UACA,cACA,WACS;CACT,MAAM,aAAa,yBAAyB,MAAM,MAAM,GAAG,GAAG,CAAC;CAC/D,MAAM,QAAQ,WAAW,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;CAC5C,MAAM,uBAAuB,aAC3B,KAAK,gBAAgB,yBAAyB,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CACzE,OAAO,OAAO;CAChB,MAAM,aAAa,WAAW,YAAY;CAC1C,IACC,CAAC,SACD,CAAC,0BAA0B,KAAK,KAAK,KACrC,8BAA8B,KAAK,KAAK,KACxC,6CAA6C,KAAK,KAAK,KACvD,qBAAqB,MAAM,wBAAwB,WAAW,SAAS,mBAAmB,CAAC,GAC1F;EACD,MAAM,SAAS,WAAW,MAAM,EAAE;EAClC,OAAO,SAAS,GAAG,SAAS,GAAG,WAAW;CAC3C;CACA,OAAO;AACR;AAEA,SAAS,yBACR,SACA,WACM;CACN,MAAM,yBAAS,IAAI,IAAoB;CACvC,MAAM,iCAAiB,IAAI,IAAY;CACvC,KAAK,MAAM,UAAU,SAAS;EAC7B,MAAM,aAAa,yBAAyB,OAAO,WAAW,CAAC,CAAC,YAAY;EAC5E,OAAO,IAAI,aAAa,OAAO,IAAI,UAAU,KAAK,KAAK,CAAC;EACxD,eAAe,IAAI,UAAU;CAC9B;CACA,MAAM,6BAAa,IAAI,IAAY;CACnC,OAAO,QAAQ,KAAK,QAAQ,UAAU;EACrC,MAAM,aAAa,yBAAyB,OAAO,WAAW,CAAC,CAAC,YAAY;EAC5E,KAAK,OAAO,IAAI,UAAU,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI,UAAU,GAAG;GACrE,WAAW,IAAI,UAAU;GACzB,OAAO;EACR;EACA,MAAM,MAAM,UAAU,MAAM;EAC5B,IAAI,eAAe,KAAK,IAAI,GAAG,IAAI,MAAM;EACzC,IAAI,SAAS,IAAI,MAAM,CAAC,YAAY;EACpC,MAAM,cAAc,IAAI,SAAS,eAAe,OAAO,WAAW,OAAO;EACzE,KAAK,IAAI,UAAU,GAAG,UAAU,aAAa,WAAW,GAAG;GAC1D,MAAM,aAAa,KAAK,IAAI,GAAG,MAAM,OAAO,MAAM;GAClD,MAAM,OAAO,OAAO,YAAY,MAAM,GAAG,UAAU,CAAC,CAAC,QAAQ;GAC7D,MAAM,cAAc,OAAO,GAAG,KAAK,GAAG,WAAW,OAAO,MAAM,IAAI;GAClE,MAAM,kBAAkB,yBAAyB,WAAW,CAAC,CAAC,YAAY;GAC1E,IAAI,CAAC,WAAW,IAAI,eAAe,KAAK,CAAC,eAAe,IAAI,eAAe,GAAG;IAC7E,WAAW,IAAI,eAAe;IAC9B,OAAO;KAAE,GAAG;KAAQ;IAAY;GACjC;GACA,IAAI,eAAe,IAAI,QAAQ;IAC9B,eAAe,KAAK,IAAI,IAAI,QAAQ,eAAe,CAAC;IACpD,SAAS,IAAI,MAAM,CAAC,YAAY;IAChC;GACD;GACA,SAAS,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU;EAC5E;EACA,MAAM,IAAI,MAAM,oCAAoC;CACrD,CAAC;AACF;AAEA,SAAS,8BAA8B,cAAsB,aAA2B;CACvF,IAAI,eAAe,cAAc,mCAChC,MAAM,IAAI,MAAM,oCAAoC;AAEtD;AAEA,SAAS,2BACR,MACA,OACA,MAAoB,KAAK,KAIxB;CACD,IAAI,SAAuF;CAC3F,IAAI,WAAgE;CACpE,IAAI,aAAa;CACjB,MAAM,mBAAmB;EACxB,IAAI,UAAU,IAAI,IAAI,OAAO,WAAW,OAAO,QAAQ,QAAQ,OAAO,SAAS;EAC/E,IAAI,UAAU,OAAO;EACrB,MAAM,sBAAsB;EAC5B,IAAI;EACJ,YAAY,KAAK,CAAC,CAChB,MAAM,cAAc;GACpB,IAAI,eAAe,qBAAqB,OAAO,WAAW;GAC1D,SAAS;IAAE,WAAW,IAAI,IAAI;IAAO;GAAU;GAC/C,OAAO;EACR,CAAC,CAAC,CACD,cAAc;GACd,IAAI,aAAa,WAAW,WAAW;EACxC,CAAC;EACF,WAAW;EACX,OAAO;CACR;CACA,WAAW,mBAAmB;EAC7B,cAAc;EACd,SAAS;EACT,WAAW;CACZ;CACA,WAAW,aAAc,UAAU,IAAI,IAAI,OAAO,YAAY,OAAO,YAAY;CACjF,OAAO;AACR;AAEA,eAAe,8BACd,OACA,cACA,MAC+C;CAC/C,IAAI,wBAAwB,MAAM,IAAI,YAAY,CAAC,EAAE,UAAU,aAC9D,MAAM,IAAI,MAAM,+BAA+B;CAEhD,OAAO,KAAK;AACb;AAEA,SAAS,0BACR,OACA,QACA,SACa;CACb,OAAO,MAAM,GAAG,kBAAkB,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU;AAChE;AAoBA,SAAS,wBACR,MACA,cACA,aAAa,sBACc;CAC3B,IAAI,KAAK,SAAS,YACjB,MAAM,IAAI,MAAM,oCAAoC;CAErD,MAAM,WAAW,KAAK,KAAK,QAAQ,IAAI,QAAQ;CAC/C,OAAO,yBACN,KAAK,KAAK,QAAQ;EACjB,MAAM,oBAAoB,oBAAoB,cAAc,IAAI,QAAQ;EACxE,OAAO;GACN,YAAY,IAAI;GAChB,aAAa;GACb,aAAa,gBAAgB,IAAI,cAAc,UAAU,UAAU,iBAAiB;EACrF;CACD,CAAC,IACA,WAAW,OAAO,WACpB;AACD;AAEA,SAAS,gBAAgB,OAAoB,cAAgD;CAQ5F,OAAO,wBAPM,MAAM,GACjB,QACA;;4CAGD,CAAC,CACA,IAAI,GACyB,GAAM,YAAY;AAClD;AAEA,SAAS,8BACR,OACA,OAC2B;CAC3B,MAAM,WAAW,CAChB,GAAG,IAAI,IACN,MAAM,QAAQ,SAAS,WAAW;EACjC,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO,YAAY,SAAS,aAAa,OAAO,YAAY,aAAa;CAC1E,CAAC,CACF,CACD,CAAC,CAAC,QAAQ,YAA+B,YAAY,IAAI;CACzD,IAAI,SAAS,WAAW,GAAG,OAAO,CAAC;CACnC,MAAM,eAAe,SAAS,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAStD,OAAO,wBARM,MAAM,GACjB,QACA;;yBAEsB,aAAa;oCAEpC,CAAC,CACA,IAAI,GAAG,QACsB,GAAM,MAAM,cAAc,8BAA8B;AACxF;AAOA,SAAS,sBAAsB,OAAoD;CAClF,IAAI;CACJ,IAAI;EACH,aAAa,2BAA2B,MAAM,IAAI;GACjD,OAAO;GACP,gBAAgB;GAChB,iBAAiB;GACjB,qBAAqB;EACtB,CAAC,CAAC,CAAC,QACD,cACA,CAAC,UAAU,aACX,wCAAwC,UAAU,oBAAoB,MAAM,EAAE,CAChF;CACD,SAAS,OAAO;EACf,IACC,iBAAiB,UAChB,MAAM,YAAY,4CAClB,MAAM,YAAY,+CAEnB,MAAM,IAAI,MAAM,oCAAoC;EAErD,MAAM;CACP;CACA,IAAI,WAAW,SAAS,6BACvB,MAAM,IAAI,MAAM,oCAAoC;CAErD,OAAO,WAAW,KAAK,eAAe;EACrC,iBAAiB,UAAU;EAC3B,mBAAmB,UAAU;CAC9B,EAAE;AACH;AAQA,SAAS,gBAAgB,OAAoB,OAAkD;CAC9F,IAAI,MAAM,QAAQ,SAAS,eAAe,MAAM,SAAS,SAAS,cACjE,MAAM,IAAI,MAAM,oCAAoC;CAErD,MAAM,YAAY,MAAM,UAAU;CAClC,MAAM,aAAa,YAChB,8BAA8B,OAAO,KAAK,IAC1C,gBAAgB,OAAO,MAAM,YAAY;CAC5C,MAAM,uBAAuB,YAC1B,IACA,MAAM,SAAS,QAAQ,YAAY,QAAQ,eAAe,eAAe,CAAC,CAAC;CAC9E,MAAM,iBAAiB,yBAAyB,IAAI,CAAC,IAAI,sBAAsB,KAAK;CACpF,8BAA8B,sBAAsB,eAAe,MAAM;CACzE,MAAM,0BAA0B,eAAe,KAAK,WAAW,OAAO,eAAe;CACrF,OAAO;EACN,SAAS,MAAM,QAAQ,KAAK,YAAY;GACvC,WAAW,OAAO;GAClB,aAAa,OAAO;GACpB,SAAS,OAAO;GAChB,qBAAqB,YAAY,MAAM,cAAc,OAAO,kBAAkB;GAC9E,sBAAsB,YAAY,MAAM,cAAc,OAAO,mBAAmB;GAChF,sBAAsB,OAAO;GAC7B,UAAU,OAAO;GACjB,mBAAmB,YAAY,MAAM,cAAc,OAAO,gBAAgB;GAC1E,aACC,OAAO,YAAY,SAAS,aACzB;IACA,MAAM;IACN,mBAAmB,OAAO,YAAY;IACtC,aAAa,oBAAoB,MAAM,cAAc,OAAO,YAAY,UAAU;GACnF,IACC,EAAE,MAAM,SAAkB;EAC/B,EAAE;EACF,UAAU,MAAM,SAAS,KAAK,aAAa;GAC1C,YAAY,QAAQ;GACpB,aAAa,QAAQ;GACrB,YAAY,QAAQ;GACpB,qBAAqB,QAAQ;GAC7B,oBAAoB,QAAQ;GAC5B,gBACC,QAAQ,eAAe,kBACpB,CAAC,IACD,yBACA,eAAe,KAAK,WAAW;IAC9B,MAAM,2BAA2B,6BAChC,QAAQ,YACR,OAAO,eACR;IACA,OAAO;KACN,oBAAoB;KACpB,aAAa,gBACZ,OAAO,mBACP,WACA,yBACA,wBACD;IACD;GACD,CAAC,IACA,WAAW,OAAO,kBACpB;EACJ,EAAE;EACF,iBAAiB,WAAW,KAAK,EAAE,aAAa,mBAAmB;GAClE;GACA;EACD,EAAE;CACH;AACD;AAEA,SAAS,kBACR,OACA,WACA,SACC;CACD,MAAM,cAAc,sBAAsB,MAAM,cAAc,QAAQ,aAAa;EAClF,iBAAiB,MAAM;EACvB,GAAG;CACJ,CAAC;CACD,OAAO;EACN,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,yBAAyB,wBAAwB,WAAW;EAC5D;CACD;AACD;AAEA,SAAS,cAAY,MAA2D;CAC/E,IAAI,SAAS,mCAAmC,SAAS,qCACxD,OAAO;CACR,IAAI,SAAS,qBAAqB,OAAO;CACzC,IAAI,SAAS,yBAAyB,OAAO;CAC7C,OAAO;AACR;AAEA,SAAS,aAAa,OAAoD;CACzE,MAAM,OAAO,4BAA4B,KAAK;CAC9C,OAAO,SAAS,kCAAkC,wBAAwB;AAC3E;AAEA,SAAS,mBAAmB,OAAoD;CAC/E,MAAM,OAAO,4BAA4B,KAAK;CAC9C,OAAO,SAAS,sBAAsB,sCAAsC;AAC7E;AAIA,eAAe,uBAAuB,GAAwC;CAE7E,IADoB,EAAE,IAAI,OAAO,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MACnE,oBAAoB,OAAO,EAAE,IAAI,MAAM;CAC3D,MAAM,eAAe,EAAE,IAAI,OAAO,gBAAgB;CAClD,IAAI,gBAAgB,QAAQ,CAAC,SAAS,KAAK,aAAa,KAAK,CAAC,GAAG,OAAO,EAAE,IAAI,MAAM;CACpF,MAAM,gBAAgB,gBAAgB,OAAO,OAAO,OAAO,YAAY;CACvE,IAAI,iBAAiB,QAAQ,gBAAgB,yBAAyB,OAAO,EAAE,IAAI,MAAM;CACzF,MAAM,OAAO,EAAE,IAAI,IAAI;CACvB,IAAI,CAAC,MAAM,OAAO,EAAE,IAAI,MAAM;CAC9B,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CACZ,IAAI;EACH,OAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,IAAI,CAAC,OAAO;GACZ,SAAS,MAAM;GACf,IAAI,QAAQ,yBAAyB;IACpC,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;IAC3C,OAAO,EAAE,IAAI,MAAM;GACpB;GACA,OAAO,KAAK,KAAK;EAClB;CACD,QAAQ;EACP,OAAO,EAAE,IAAI,MAAM;CACpB,UAAU;EACT,OAAO,YAAY;CACpB;CACA,IAAI;EACH,MAAM,QAAQ,IAAI,WAAW,KAAK;EAClC,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,QAAQ;GAC3B,MAAM,IAAI,OAAO,MAAM;GACvB,UAAU,MAAM;EACjB;EACA,MAAM,SAAS,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;EACjF,OAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IACjE;GAAE,IAAI;GAAM,OAAO;EAAkC,IACrD,EAAE,IAAI,MAAM;CAChB,QAAQ;EACP,OAAO,EAAE,IAAI,MAAM;CACpB;AACD;AAEA,SAAS,aAAa,OAAgC,MAAkC;CACvF,MAAM,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS;CAC3C,MAAM,WAAW,KAAK,SAAS;CAC/B,OAAO,OAAO,WAAW,SAAS,UAAU,OAAO,OAAO,KAAK,UAAU,QAAQ,SAAS,MAAM;AACjG;AAEA,SAAS,eACR,OACA,OACA,YAAqC,mBAAmB,KAAK,GAC3B;CAClC,IAAI,oBAA+D;CACnE,IAAI,UAAsE;CAC1E,IAAI,MAAM,UAAU,aACnB,IAAI;EACH,UAAU,iCAAiC,MAAM,IAAI;GACpD,cAAc,MAAM;GACpB,WAAW,MAAM;EAClB,CAAC;CACF,SAAS,OAAO;EACf,MAAM,OAAO,aAAa,KAAK;EAC/B,IAAI,SAAS,qBAAqB,MAAM;EACxC,IAAI,SAAS,iCAAiC,oBAAoB;OAC7D,IAAI,SAAS,yBAAyB,oBAAoB;CAChE;CAED,IAAI,SAAS,6CAA6C,QAAQ,WAAW;CAC7E,MAAM,YAAY,gBAAgB,OAAO,KAAK;CAC9C,MAAM,cAAc,UAAU,kBAAkB,OAAO,WAAW,OAAO,IAAI;CAC7E,OAAO,2BAA2B;EACjC,SAAS;EACT,WAAW,yBAAyB,WAAW,KAAK;EACpD,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;EAC9B,GAAG;EACH;EACA,SAAS;CACV,CAAC;AACF;AAEA,SAAS,eACR,cACA,QACkC;CAClC,OAAO;EACN,SAAS;EACT,QAAQ,OAAO;EACf,SAAS,QAAQ,cAAc,OAAO,MAAM;EAC5C,WAAW,OAAO;EAClB,mBAAmB,OAAO;EAC1B,aAAa,OAAO;CACrB;AACD;AAEA,SAAgB,gBAAgB,SAAuC;CACtE,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,gBACL,QAAQ,4CACN,gBACD,2CACC,QAAQ,8BAA8B,mCACtC,aACA,QAAQ,QACT;CAEF,eAAe,gBACd,cACA,YAC+C;EAC/C,IAAI;GACH,OAAO,MAAM,cACZ,gBAAgB,cAAc,OAAO;IAAE;IAAc;GAAW,IAAI,KAAA,CACrE;EACD,SAAS,OAAO;GACf,IAAI,iBAAiB,SAAS,MAAM,YAAY,sCAC/C,MAAM;GAEP,MAAM,qBAAqB;EAC5B;CACD;CACA,MAAM,yBAAyB,iCACxB,gBAAgB,GACtB,6BACD;CACA,QAAQ,mCAAmC,uBAAuB,WAAW,CAAC;CAC9E,MAAM,yBACL,QAAQ,2BAA2B,KAAA,IAChC,gCACA,QAAQ;;;;;;CAcZ,SAAS,iCAAiE;EACzE,MAAM,UACL,QAAQ,yBACR,QAAQ,4BAA4B,cACpC,0BAAA,CACC;EACF,MAAM,YAAY,aAAa,OAAO,kBAAkB;EACxD,IAAI,CAAC,aAAa,CAAC,OAAO,4BAA4B,OAAO;EAC7D,MAAM,0BAA0B,wBAAwB,SAAS;EACjE,IAAI,CAAC,yBAAyB,OAAO;EACrC,IAAI;EACJ,IAAI;GACH,kBAAkB,IAAI,IAAI,mBAAmB,OAAO,qBAAqB,CAAC;EAC3E,QAAQ;GACP,OAAO;EACR;EACA,OAAO;GAAE;GAAQ;GAAW;GAAyB;EAAgB;CACtE;CAIA,SAAS,gBACR,eACA,OACU;EACV,OACC,cAAc,gBAAgB,IAAI,MAAM,OAAO,KAC/C,wBAAwB,MAAM,aAAa,MAAM,cAAc;CAEjE;;;;;;CAOA,SAAS,qBACR,SACA,OACU;EACV,IAAI;EACJ,IAAI;GACH,UAAU,+BAA+B;EAC1C,QAAQ;GACP,OAAO;EACR;EACA,OACC,YAAY,QACZ,QAAQ,4BAA4B,QAAQ,2BAC5C,QAAQ,cAAc,QAAQ,aAC9B,QAAQ,OAAO,+BAA+B,QAAQ,OAAO,8BAC7D,gBAAgB,SAAS,KAAK;CAEhC;CAEA,SAAS,qBACR,UACA,OACU;EACV,OACC,SAAS,YAAY,MAAM,WAC3B,wBAAwB,SAAS,aAAa,MAC7C,wBAAwB,MAAM,aAAa;CAE9C;CAEA,SAAS,cAAc,OAA2D;EACjF,OAAO,GAAG,wBAAwB,MAAM,aAAa,KAAK,MAAM,cAAc,IAAI,MAAM;CACzF;;;;;;;CAQA,eAAe,uBACd,OACA,WACA,YACyD;EACzD,MAAM,gBAAgB,CACrB,mBAAG,IAAI,IAAI,CACV,sBAAsB,WAAW,MAAM,OAAO,GAC9C,sBAAsB,MAAM,eAAe,MAAM,OAAO,CACzD,CAAC,CACF;EACA,KAAK,MAAM,gBAAgB,eAAe;GAEzC,MAAM,WAAU,MADQ,gBAAgB,cAAc,UAAU,EAAA,CACtC,QAAQ,aAAa,qBAAqB,UAAU,KAAK,CAAC;GACpF,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,+BAA+B;GACvE,IAAI,QAAQ,IAAI,OAAO,QAAQ;EAChC;CAED;CAEA,SAAS,6BAA6B,QAA8C;EACnF,MAAM,WAAW,OAAO;EACxB,IAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG,OAAO;EACjF,MAAM,eAAgB,SAAyC;EAC/D,OAAO,OAAO,iBAAiB,WAAW,eAAe;CAC1D;CAKA,SAAS,wBACR,QACA,OACU;EACV,MAAM,eAAe,6BAA6B,MAAM;EACxD,OACC,iBAAiB,QACjB,iBAAiB,sBAAsB,MAAM,eAAe,MAAM,OAAO;CAE3E;;;;;;;CAQA,eAAe,wCACd,OACA,eACA,OACA,UACA,aACkD;EAClD,IAAI,UAAsC;EAqB1C,OAAO,MApBW,qBACjB,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,4CAA4C,MAAM,UACjD,qCAAqC,MAAM,IAAI,SAAS,eACvD,iDAAiD,MAAM,IAAI,MAAM,SAAS,YAAY;GACrF,IAAI,CAAC,qBAAqB,eAAe,KAAK,GAAG;GACjD,MAAM,uCAAuC,MAAM,IAAI;IACtD,eAAe,MAAM;IACrB,SAAS,MAAM;IACf;IACA;IACA,0BAA0B;KAAE,aAAa;KAAM,MAAM;KAAM,kBAAkB;IAAK;GACnF,CAAC;GACD,UAAU;EACX,CAAC,CACF,CACD,CACF,IACa,UAAU;CACxB;CAEA,eAAe,qBACd,OACA,QACA,wBAA4D,CAAC,GAC7C;EAChB,IAAI,CAAC,0BAA0B,OAAO,WAAW,GAAG;EACpD,IAAI;EACJ,IAAI;GACH,gBAAgB,+BAA+B;EAChD,SAAS,OAAO;GACf,MAAM,IAAI,MAAM,mBAAmB,KAAK,CAAC;EAC1C;EAGA,IAAI,CAAC,eAAe;EACpB,MAAM,EAAE,QAAQ,cAAc;EAC9B,MAAM,eAAe,OAAO,QAAQ,UAAU,gBAAgB,eAAe,KAAK,CAAC;EACnF,IAAI,aAAa,WAAW,GAAG;EAC/B,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,uBAAuB;EAC3D,IAAI;GACH,MAAM,2BAA2B,KAAK,IAAI,IAAI;GAC9C,MAAM,YAAY,IAAI,IAAI,aAAa,KAAK,UAAU,CAAC,MAAM,SAAS,KAAK,CAAC,CAAC;GAC7E,MAAM,yBAAyB,aAC9B,+BACE,oBACA,uBAAuB,KAAK;IAC3B;IACA;IACA,aAAa,OAAO;IACpB,UAAU;GACX,CAAC,GACF,UACA,wBACD;GACD,MAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,aAAa,KAAK,UAAU,MAAM,OAAO,CAAC,CAAC;GAC9E,IAAI;GACJ,IAAI;IACH,UAAU,MAAM,sBAAsB,cAAc;GACrD,SAAS,OAAO;IAIf,IAAI,6BAA6B,KAAK,GACrC,UAAU,CAAC;SACL,IACN,sBAAsB,wBACtB,qCAAqC,KAAK,GAM1C,UAAU,MAAM,8BAA8B,gBAAgB,qBAAqB;SAEnF,MAAM;GAER;GACA,MAAM,kCAAkB,IAAI,IAA+C;GAC3E,IAAI,QAAQ,SAAS,GACpB,IAAI;IACH,MAAM,YAAY,aAAa,WAAW,IAAI,aAAa,KAAK,KAAA;IAChE,MAAM,cAAc,YACjB,CAAC,MAAM,uBAAuB,WAAW,WAAW,wBAAwB,CAAC,IAC7E,MAAM,gBAAgB,KAAA,GAAW,wBAAwB;IAC5D,KAAK,MAAM,cAAc,aAAa;KACrC,IAAI,CAAC,YAAY;KACjB,MAAM,MAAM,cAAc,UAAU;KACpC,IAAI,gBAAgB,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,+BAA+B;KAC7E,gBAAgB,IAAI,KAAK,UAAU;IACpC;GACD,SAAS,OAAO;IACf,KAAK,MAAM,UAAU,SAAS;KAC7B,MAAM,QAAQ,UAAU,IAAI,OAAO,QAAQ;KAC3C,IAAI,CAAC,SAAS,CAAC,wBAAwB,QAAQ,KAAK,GAAG;KACvD,IAAI;MACH,iDAAiD,OAAO,UAAU;OACjE,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC;KACF,SAAS,cAAc;MACtB,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;MACvD;KACD;KACA,IAAI;KACJ,IAAI;MACH,oBAAoB,0CAA0C,OAAO,UAAU;OAC9E,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC;KACF,SAAS,iBAAiB;MACzB,IAAI;OAUH,IAAI,CAAC,MATmB,qBACvB,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,yCAAyC,MAAM,IAAI;QAClD,eAAe,MAAM;QACrB,SAAS,MAAM;OAChB,CAAC,CACH,GACgB;QACf,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;QACvD;OACD;MACD,SAAS,kBAAkB;OAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;MACxD;MACA,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;MACvD;KACD;KACA,IAAI;MACH,MAAM,gBAAgB,6CAA6C,MAAM,IAAI,EAC5E,cAAc,kBAAkB,cACjC,CAAC;MACD,IACC,qDAAqD,aAAa,MAClE,qDAAqD,iBAAiB,GAEtE;MAED,IACC,4DACC,eACA,iBACD,GAEA;KAEF,QAAQ,CAGR;KACA,IAAI;MACH,MAAM,qBAAqB,MAAM,IAAI,kBAAkB,qBACtD,yCAAyC,MAAM,IAAI;OAClD,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC,CACF;KACD,SAAS,kBAAkB;MAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACxD;IACD;IACA,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;IACvD;GACD;GAED,MAAM,gDAAgC,IAAI,IAAY;GACtD,KAAK,MAAM,UAAU,SAAS;IAC7B,MAAM,QAAQ,UAAU,IAAI,OAAO,QAAQ;IAC3C,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,+BAA+B;IAC3D,IAAI,CAAC,wBAAwB,QAAQ,KAAK,GAAG;IAC7C,IAAI;KACH,iDAAiD,OAAO,UAAU;MACjE,eAAe,MAAM;MACrB,SAAS,MAAM;KAChB,CAAC;IACF,SAAS,cAAc;KACtB,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACvD;IACD;IACA,IAAI;IACJ,IAAI;KACH,oBAAoB,0CAA0C,OAAO,UAAU;MAC9E,eAAe,MAAM;MACrB,SAAS,MAAM;KAChB,CAAC;IACF,SAAS,iBAAiB;KACzB,IAAI;MACH,MAAM,qBACL,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,yCAAyC,MAAM,IAAI;OAClD,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC,CACH;KACD,SAAS,kBAAkB;MAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACxD;KACA,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACvD;IACD;IACA,8BAA8B,IAAI,OAAO,QAAQ;IACjD,IAAI;KACH,IAAI,aAAa,gBAAgB,IAAI,cAAc,KAAK,CAAC;KACzD,IAAI,CAAC,cAAc,aAAa,SAAS,GAAG;MAC3C,IAAI,6BAA6B,UAAU,wBAAwB,KAAK,MACvE,MAAM,IAAI,MAAM,+BAA+B;MAEhD,aAAa,MAAM,uBAAuB,OAAO,WAAW,wBAAwB;KACrF;KACA,IAAI,CAAC,YAAY;MAUhB,IAAI,CAAC,MATmB,qBACvB,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,yCAAyC,MAAM,IAAI;OAClD,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC,CACH,GACgB;OACf,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,+BAA+B;OAEhD;MACD;MACA,MAAM,IAAI,MAAM,+BAA+B;KAChD;KAQA,IAAI,MAPkB,wCACrB,OACA,eACA,OACA,mBACA,WAAW,OACZ,MACgB,WAAW;IAC5B,SAAS,OAAO;KACf,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;IACxD;GACD;GACA,KAAK,MAAM,SAAS,cAAc;IACjC,IAAI,8BAA8B,IAAI,MAAM,OAAO,GAAG;IACtD,MAAM,sBAAsB,6BAC3B,UACA,wBACD;IACA,IAAI,uBAAuB,MAAM;IACjC,IACC,CAAC,4BACA,OACA,sBAAsB,MAAM,eAAe,MAAM,OAAO,CACzD,GAEA;IAED,MAAM,eAAe,sBAAsB,MAAM,eAAe,MAAM,OAAO;IAC7E,IAAI,uBAAuB;IAC3B,IAAI;KAiCH,IAAI,CAAC,MAhCmB,qBAAqB,MAAM,IAAI,oBACtD,4CAA4C,MAAM,UACjD,qCACC,MAAM,IACN,0BAA0B,YAAY,GACtC,YAAY;MACX,IAAI;MACJ,IAAI;OACH,WAAW,6CAA6C,MAAM,IAAI,EACjE,aACD,CAAC;MACF,QAAQ;OACP,uBAAuB;OACvB;MACD;MAGA,IAAI,CAAC,qBAAqB,eAAe,KAAK,GAAG;OAChD,uBAAuB;OACvB;MACD;MACA,MAAM,uBAAuB,OAAO;OACnC,SAAS,MAAM;OACf;OACA;OACA,aAAa,OAAO;OACpB,UAAU;MACX,CAAC;KACF,CACD,CACD,CACD,KACkB,sBAAsB;IACzC,SAAS,OAAO;KAGf,IAAI,mBAAmB,KAAK,MAAM,kCAAkC;KACpE,MAAM,gBAAgB,uBAAuB;KAC7C,IAAI,oBAA4E;KAChF,IAAI;MACH,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,gCAAgC;MACpE,oBAAoB,MAAM,+BACxB,oBACA,cAAc;OACb,SAAS,MAAM;OACf;OACA;OACA,aAAa,OAAO;OACpB,UAAU;MACX,CAAC,GACF,UACA,wBACD;MACA,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,gCAAgC;KACzE,QAAQ;MACP,IAAI;OAOH,IAAI,CAAC,MANmB,qBAAqB,MAAM,IAAI,oBACtD,yCAAyC,MAAM,IAAI;QAClD,eAAe,MAAM;QACrB,SAAS,MAAM;OAChB,CAAC,CACF,GACgB;QACf,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,gCAAgC;QAEjD;OACD;MACD,SAAS,kBAAkB;OAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;OACvD;MACD;MACA,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,gCAAgC;MAEjD;KACD;KACA,IAAI;MACH,MAAM,aAAa,MAAM,uBACxB,OACA,WACA,wBACD;MACA,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,+BAA+B;MAQhE,IAAI,MAPkB,wCACrB,OACA,eACA,OACA,mBACA,WAAW,OACZ,MACgB,WAAW;KAC5B,SAAS,YAAY;MACpB,IAAI,sBAAsB,yCAAyC;OAClE,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;OACvD;MACD;MACA,IAAI;OAOH,IAAI,CAAC,MANmB,qBAAqB,MAAM,IAAI,oBACtD,yCAAyC,MAAM,IAAI;QAClD,eAAe,MAAM;QACrB,SAAS,MAAM;OAChB,CAAC,CACF,GACgB;QACf,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,kCAAkC,EAAE,OAAO,WAAW,CAAC;QAExE;OACD;MACD,SAAS,kBAAkB;OAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;OACvD;MACD;MACA,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,kCAAkC,EAAE,OAAO,WAAW,CAAC;KAEzE;IACD;GACD;EACD,SAAS,OAAO;GACf,MAAM,IAAI,MAAM,mBAAmB,KAAK,CAAC;EAC1C;CACD;CACA,eAAe,yBACd,cACA,cAII,CAAC,GAC0C;EAC/C,MAAM,6BAA6B,YAAY,8BAA8B;EAC7E,MAAM,yBAAyB,YAAY,0BAA0B;EACrE,IAAI,wBAAwB,uBAAuB,WAAW;EAC9D,IAAI;GACH,OAAO,MAAM,gBAAgB,cAAc,YAAY,UAAU;EAClE,SAAS,OAAO;GACf,IAAI,CAAC,4BAA4B,MAAM;GACvC,MAAM,eAAe,uBAAuB,KAAK;GACjD,IAAI,CAAC,cAAc,MAAM;GACzB,MAAM,WAAW,aAAa,QAC5B,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;GACA,IAAI,SAAS,WAAW,GAAG,MAAM;GACjC,OAAO;EACR,UAAU;GACT,IAAI,wBAAwB,uBAAuB,WAAW;EAC/D;CACD;CAEA,SAAS,yBACR,OACA,cAC4C;EAC5C,MAAM,MAAM,MAAM,GAChB,QACA;wDAED,CAAC,CACA,IAAI,YAAY;EAClB,IAAI,CAAC,OAAO,sBAAsB,IAAI,gBAAgB,IAAI,QAAQ,MAAM,cACvE,OAAO;EACR,OAAO;GAAE,eAAe,IAAI;GAAgB,SAAS,IAAI;EAAS;CACnE;CAEA,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC/C,IAAI;EACJ,IAAI;GACH,SAAS,MAAM,uBAAuB;EACvC,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;EACA,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,uBAAuB,OAAO,MAAM;GACpC,MAAM,qBAAqB,OAAO,QAAQ,EAAE,sBAAsB,KAAK,CAAC;GACxE,MAAM,WAAW;IAChB,SAAS;IACT,YAAY,uBAAuB,OAAO,MAAM,CAAC,CAC/C,IAAI,gBAAgB,CAAC,CACrB,QACC,cACA,UAAU,WAAW,OACvB;GACF;GACA,OAAO,EAAE,KAAK,QAAQ;EACvB,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC7D,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,IAAI,CAAC,sBAAsB,KAAK,YAAY,GAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAG/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,IAAI,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC1D,MAAM,WAAW,4BAA4B,OAAO,YAAY;GAChE,IAAI,+BAA2E;GAC/E,IAAI,YAAY,OAAO,UAAU,aAChC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;GACJ,IAAI,UAAU,MAAM,UAAU,eAAe,WAC5C,YAAY,mBAAmB,KAAK;QAC9B;IAQN,MAAM,mBAAkB,MAJH,yBAAyB,cAAc;KAC3D,4BAA4B,SAAS;KACrC,wBAAwB;IACzB,CAAC,EAAA,CAC8B,QAC7B,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;IACA,+BAA+B;IAC/B,MAAM,gBAAgB,wBAAwB,MAAM,IAAI,YAAY;IACpE,IAAI,4BAA4B,OAAO,YAAY,GAAG;KACrD,IAAI,eAAe,UAAU,aAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;KAEvE,QAAQ;KACR,YAAY,mBAAmB,aAAa;IAC7C,OAAO;KACN,MAAM,sBAAsB,mBAAmB,OAAO,eAAe,CAAC,CAAC,MACrE,SAAS,KAAK,iBAAiB,YACjC;KACA,IAAI,CAAC,qBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;KAEvE,YAAY;KACZ,QAAQ,wBAAwB,MAAM,IAAI,YAAY;IACvD;GACD;GACA,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,MAAM,wBAAwB,uBAC5B,KAAK,CAAC,EACL,QACA,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;GACD,IAAI,mBACH,iCACC,uBAAuB,SAAS,wBAAwB;GAC1D,IAAI,CAAC,kBAAkB;IACtB,MAAM,iBAAiB,yBAAyB,OAAO,YAAY;IACnE,mBAAmB,iBAAiB,CAAC,cAAc,IAAI;GACxD;GACA,MAAM,+BAA+B,4BAA4B,OAAO,YAAY;GACpF,IAAI,kBAAkB,MAAM,qBAAqB,OAAO,gBAAgB;GACxE,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GACtD,IACC,CAAC,SACA,CAAC,gCAAgC,4BAA4B,OAAO,YAAY,GAEjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,kBAAkB,YAAY,mBAAmB,KAAK;GAE1D,OAAO,EAAE,KAAK,eAAe,OAAO,OAAO,SAAS,CAAC;EACtD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,uEAAuE,OAAO,MAAM;EAC3F,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EACzC,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,mBAAmB,KAAK,SAAS,GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IACC,CAAC,OAAO,MACR,CAAC,aAAa,OAAO,OAAO;GAAC;GAAa;GAAe;EAAmB,CAAC,GAE7E,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,WAAW,aAAa,sBAAsB,OAAO;EAC7D,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,OAAO,sBAAsB,YAC7B,CAAC,qBAAqB,KAAK,iBAAiB,KAC5C,CAAC,eACD,OAAO,gBAAgB,YACvB,MAAM,QAAQ,WAAW,GAEzB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,KAAK,cAAc,SAAS;GACxE,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACnF,MAAM,uBAAuB;GAS7B,IAAI,EAPH,OAAO,YAAY,SAAS,WACzB,aAAa,sBAAsB,CAAC,MAAM,CAAC,KAAK,qBAAqB,SAAS,WAC9E,aAAa,sBAAsB;IAAC;IAAqB;IAAe;GAAM,CAAC,KAChF,qBAAqB,SAAS,cAC9B,qBAAqB,sBAAsB,OAAO,YAAY,qBAC9D,qBAAqB,gBACpB,oBAAoB,cAAc,OAAO,YAAY,UAAU,IAElE,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,gBAAgB,OAAO,YAAY,CAAC,CAAC,MAClD,WAAW,OAAO,gBAAgB,iBACpC;GACA,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACnF,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aAEC,mCAAmC,MAAM,IAAI;KAC5C;KACA;KACA,kBAAkB,OAAO;KACzB,aAAa,OAAO;IACrB,CAAC,IACD,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACzF,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EACzC,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,mBAAmB,KAAK,SAAS,GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,IACX,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,WAAW,UAAU,8BAA8B,OAAO;EAClE,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,CAAE;GAAC;GAAY;GAAY;EAAS,CAAC,CAAe,SAAS,QAAQ,MACpE,aAAa,aACX,CAAC,aAAa,OAAO,OAAO;GAAC;GAAa;GAAY;EAA2B,CAAC,KACnF,OAAO,8BAA8B,YACrC,CAAC,qBAAqB,KAAK,yBAAyB,IACnD,CAAC,aAAa,OAAO,OAAO,CAAC,aAAa,UAAU,CAAC,IAExD,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,KAAK,cAAc,SAAS;GACxE,IAAI,CAAC,QACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IACC,aAAa,eACZ,OAAO,qBAAqB,QAC5B,oBAAoB,cAAc,OAAO,gBAAgB,MAAM,4BAEhE,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aAEC,iCAAiC,MAAM,IAAI;KAC1C;KACA;KACU;IACX,CAAC,IACD,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,OAAO,qEAAqE,OAAO,MAAM;EAC5F,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EACzC,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,mBAAmB,KAAK,SAAS,GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,WAAW,CAAC,GAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,cAAc,OAAO;EAC7B,IAAI,OAAO,cAAc,YAAY,CAAC,mBAAmB,KAAK,SAAS,GACtE,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,KAAK,cAAc,SAAS,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aACM,mCAAmC,MAAM,IAAI;KAAE;KAAW;IAAU,CAAC,IAC1E,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,sEAAsE,OAAO,MAAM;EAC1F,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;EAC3C,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,oBAAoB,KAAK,UAAU,GACpF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,aAAa,oBAAoB,CAAC,GAChF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,WAAW,uBAAuB,OAAO;EACjD,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,OAAO,uBAAuB,YAC9B,CAAC,6BAA6B,KAAK,kBAAkB,GAErD,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,UAAU,MAAM,SAAS,MAAM,SAAS,KAAK,eAAe,UAAU;GAC5E,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,QAAQ,eAAe,iBAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;GAE/D,MAAM,SAAS,sBAAsB,KAAK,CAAC,CAAC,MAC1C,WACA,6BAA6B,YAAY,OAAO,eAAe,MAAM,kBACvE;GACA,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACnF,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aAEC,iCAAiC,MAAM,IAAI;KAC1C;KACA;KACA,yBAAyB,OAAO;IACjC,CAAC,IACD,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,KAAK,iDAAiD,OAAO,MAAM;EACtE,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,IAAI,CAAC,sBAAsB,KAAK,YAAY,GAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,CAAC,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;EACJ,IAAI;GACH,QAAQ,QAAQ,SAAS;GAEzB,IADqB,wBAAwB,MAAM,IAAI,YACnD,CAAA,EAAc,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACzF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;EAExE,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;EACA,IAAI;EACJ,IAAI;GACH,SAAS,MAAM,8BAA8B,OAAO,oBACnD,yBAAyB,YAAY,CACtC;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;EACA,IACC,OAAO,QACL,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E,CAAC,CAAC,WAAW,GAEb,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;EAEvE,IAAI;GACH,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aACM;KAEL,IADqB,wBAAwB,MAAM,IAAI,YAEtD,CAAA,EAAc,UAAU,eACxB,4BAA4B,OAAO,YAAY,GAE/C,MAAM,IAAI,MAAM,+BAA+B;KAEhD,OAAO,2BACN,MAAM,IACN;MAAE,YAAY,kBAAkB,KAAK;MAAG;KAAO,GAC/C,YACD;IACD,IACC,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,KAAK,gDAAgD,OAAO,MAAM;EACrE,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,IAAI,CAAC,sBAAsB,KAAK,YAAY,GAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,IACX,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,aAAa;GAClB;GACA;GACA;GACA;EACD;EACA,IAAI,CAAC,aAAa,OAAO,OAAO,UAAU,GACzC,OAAO,OAAO,KAAK,OAAO,KAAK,CAAC,CAAC,OAAO,QACvC,WAAW,SAAS,GAAkC,CACvD,IACG,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG,IAC/D,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE3D,MAAM,EACL,WACA,4BACA,kCACA,iBACG,OAAO;EACX,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,OAAO,iBAAiB,YACxB,CAAC,sBAAsB,KAAK,YAAY,KACxC,OAAO,+BAA+B,YACtC,CAAC,4BAA4B,KAAK,0BAA0B,KAC5D,OAAO,qCAAqC,YAC5C,CAAC,mCAAmC,KAAK,gCAAgC,GAEzE,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,gCAAgC,MAAM,IAAI;IACxD;IACA;IACA;IACA;GACD,CAAC;GACD,IAAI,QAAQ,OAAO,EAAE,KAAK,eAAe,cAAc,MAAM,CAAC;GAC9D,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,UAAU,iCAAiC,MAAM,IAAI;IAC1D;IACA,WAAW,MAAM;GAClB,CAAC;GACD,6CAA6C,QAAQ,WAAW;GAChE,MAAM,YAAY,gBAAgB,OAAO,KAAK;GAO9C,IAN4B,wBAC3B,sBAAsB,cAAc,QAAQ,aAAa;IACxD,iBAAiB,MAAM;IACvB,GAAG;GACJ,CAAC,CAEE,MAAwB,kCAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAGvE,MAAM,kBAAiB,MADG,yBAAyB,YAAY,EAAA,CAC5B,QACjC,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;GACA,IAAI,eAAe,WAAW,GAAG,MAAM,qBAAqB;GAC5D,MAAM,QAAQ,eAAe;GAC7B,IAAI,CAAC,OAAO,MAAM,qBAAqB;GACvC,kBAAkB,uBAAuB,MAAM,IAAI,YAAY,KAAK,KAAA;GACpE,IAAI,CAAC,iBAAiB;IAGrB,MAAM,yBAAyB,MAAM,IAAI,YAAY;IACrD,MAAM,oBAAoB,gCAAgC,MAAM,IAAI;KACnE;KACA;KACA;KACA;IACD,CAAC;IACD,IAAI,mBAAmB,OAAO,EAAE,KAAK,eAAe,cAAc,iBAAiB,CAAC;IACpF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACvE;GAEA,MAAM,gBAAgB,gCAAgC,MAAM,IAAI;IAC/D;IACA;IACA;IACA;GACD,CAAC;GACD,IAAI,eAAe,OAAO,EAAE,KAAK,eAAe,cAAc,aAAa,CAAC;GAC5E,MAAM,eAAe,wBAAwB,MAAM,IAAI,YAAY;GACnE,IAAI,CAAC,gBAAgB,aAAa,cAAc,WAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,wBAAwB,KAAK,IAAI,IAAI;GAC3C,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GAMnF,wBAAwB,MAAM,mCAC7B,MAAM,IACN,aAAa,QAAQ,SAAS,WAAW,CACxC,GAAI,OAAO,aAAa,cAAc,OAAO,mBAC1C,CAAC,OAAO,gBAAgB,IACxB,CAAC,GACJ,GAAI,OAAO,qBAAqB,CAAC,OAAO,kBAAkB,IAAI,CAAC,CAChE,CAAC,CACF;GAmKA,OAAO,MAlKgB,qCACtB,MAAM,IACN,0BAA0B,YAAY,SAErC,iDAAiD,MAAM,IAAI,MAAM,SAAS,YAAY;IACrF,IAAI;IACJ,IAAI;KACH,gBAAgB,+BAA+B;IAChD,SAAS,OAAO;KACf,MAAM,IAAI,MAAM,mBAAmB,KAAK,CAAC;IAC1C;IACA,IAAI,CAAC,0BAA0B,CAAC,eAC/B,MAAM,IAAI,MAAM,mCAAmC;IAEpD,IAAI,CAAC,gBAAgB,eAAe,KAAK,GACxC,MAAM,IAAI,MAAM,+BAA+B;IAEhD,MAAM,EAAE,QAAQ,cAAc;IAC9B,MAAM,aAAa,MAAM,uBACxB,OACA,WACA,qBACD;IACA,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,+BAA+B;IAChE,IAAI,CAAC,qBAAqB,eAAe,KAAK,GAC7C,MAAM,IAAI,MAAM,+BAA+B;IAEhD,MAAM,mBAAmB,oCACxB,MAAM,IACN,kBAAkB,KAAK,GACvB,YACD;IACA,MAAM,eAAe,sCAAsC,MAAM,IAAI;KACpE;KACA;KACA,aAAa,WAAW;KACxB;IACD,CAAC;IACD,IACC,aAAa,iBAAiB,gBAC9B,aAAa,sBAAsB,4BAEnC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;IAEvE,MAAM,aAAa,wBAAwB,MAAM,IAAI,YAAY;IACjE,IAAI,CAAC,cAAc,WAAW,cAAc,WAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;IAEvE,MAAM,iBAAiB,gBAAgB,OAAO,UAAU;IACxD,IACC,wBACC,sBAAsB,cAAc,aAAa,aAAa;KAC7D,iBAAiB,WAAW;KAC5B,GAAG;IACJ,CAAC,CACF,MAAM,kCAEN,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;IAEvE,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;IAC3C,MAAM,mBAAmB,wCAAwC,MAAM,IAAI;KAC1E;KACA;KACA;IACD,CAAC;IACD,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,uBAAuB;IAC3D,MAAM,sBAAsB,6BAC3B,UACA,qBACD;IACA,IAAI,uBAAuB,MAC1B,MAAM,IAAI,MAAM,mCAAmC;IAEpD,IAAI;IACJ,IAAI;KACH,oBAAoB,2CAElB,MAAM,uBAAuB,OAAO;MACnC,SAAS,MAAM;MACf,UAAU;MACV;MACA,aAAa,OAAO;MACpB,UAAU;KACX,CAAC,EAAA,CACA,UACF;MAAE,eAAe,MAAM;MAAe,SAAS,MAAM;KAAQ,CAC9D;KACA,IACC,qDAAqD,iBAAiB,MACtE,qDAAqD,gBAAgB,GAErE,MAAM,IAAI,MAAM,gCAAgC;IAElD,SAAS,OAAO;KACf,MAAM,OAAO,mBAAmB,KAAK;KACrC,MAAM,gBAAgB,uBAAuB;KAC7C,IAAI,SAAS,oCAAoC,CAAC,eACjD,MAAM,IAAI,MAAM,IAAI;KAErB,IAAI;MACH,MAAM,WAAW,MAAM,+BACrB,oBACA,cAAc;OACb,SAAS,MAAM;OACf;OACA;OACA,aAAa,OAAO;OACpB,UAAU;MACX,CAAC,GACF,UACA,qBACD;MACA,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,gCAAgC;MAC/D,oBAAoB,0CAA0C,UAAU;OACvE,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC;MAID,IAAI,kBAAkB,kBAAkB,iBAAiB,eACxD,MAAM,IAAI,MAAM,gCAAgC;KAElD,SAAS,eAAe;MACvB,MAAM,IAAI,MAAM,mBAAmB,aAAa,CAAC;KAClD;IACD;IAIA,IAAI;IACJ,IAAI;KACH,uBAAuB,MAAM,uBAC5B,OACA,WACA,qBACD;IACD,SAAS,OAAO;KACf,IAAI,4BAA4B,KAAK,MAAM,iCAC1C,MAAM,IAAI,MAAM,+BAA+B;KAEhD,MAAM;IACP;IACA,IAAI,CAAC,sBAAsB,MAAM,IAAI,MAAM,+BAA+B;IAC1E,MAAM,SAAS,MAAM,0DACpB,MAAM,IACN;KACC,eAAe,MAAM;KACrB,SAAS,MAAM;KACf,aAAa,qBAAqB;KAClC,UAAU;KACV,uBAAuB;KACvB,0BAA0B;MACzB,aAAa;MACb,MAAM;MACN,kBAAkB;KACnB;IACD,CACD;IACA,OAAO,EAAE,KAAK,eAAe,cAAc,MAAM,CAAC;GACnD,CAAC,CACH;EAED,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD,UAAU;GACT,wBAAwB;GACxB,6BAA6B;GAC7B,kBAAkB;EACnB;CACD,CAAC;CAED,OAAO;AACR;;;;;;ACp5EA,SAAS,sBACR,QAC+B;CAC/B,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO;EACN,QAAQ,OAAO;EACf,eAAe,OAAO;EACtB,UAAU,OAAO,YAAY;EAC7B,SAAS,OAAO,WAAW;EAC3B,YAAY,OAAO,cAAc;CAClC;AACD;AAYA,IAAM,2BAA2B;AACjC,IAAM,wBAAwB;AAC9B,IAAM,iCAAiC;AACvC,IAAM,6BAA6B;;;;;;;;;;;;;AAcnC,SAAS,uBAAuB,OASxB;CAIP,IAAI;CACJ,IAAI,MAAM,UAAU,CAAC,CAAC,WAAW,GAAG,GACnC,IAAI;EACH,SAAS,KAAK,MAAM,KAAK;CAC1B,QAAQ;EACP,OAAO;CACR;MACM;EACN,IAAI;EACJ,IAAI;GACH,UAAU,OAAO,KAAK,OAAO,QAAQ,CAAC,CAAC,SAAS,MAAM;EACvD,QAAQ;GACP,OAAO;EACR;EACA,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC,WAAW,GAAG,GAAG,OAAO;EAClD,IAAI;GACH,SAAS,KAAK,MAAM,OAAO;EAC5B,QAAQ;GACP,OAAO;EACR;CACD;CACA,MAAM,WAAW,OAAO,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK;CACrD,MAAM,cAAc,OAAO,OAAO,eAAe,EAAE,CAAC,CAAC,KAAK;CAC1D,MAAM,YAAY,OAAO,OAAO,cAAc,EAAE,CAAC,CAAC,KAAK;CAIvD,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,OAAO;CAEpD,MAAM,aADe,MAAM,QAAQ,OAAO,SAAS,IAAI,OAAO,YAAY,CAAC,EAAA,CAEzE,QAAQ,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CACpF,KAAK,SAAS,KAAK,KAAK,CAAC;CAC3B,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,aAAa,UAAU,WAAW,GACnE,OAAO;EACN,MAAM;EACN,OAAO;CACR;CAED,IAAI,qBAAqB,SAAS,MAAM,aACvC,OAAO;EAAE,MAAM;EAAgB,OAAO;CAAuC;CAE9E,OAAO;EACN,MAAM;EACN,WAAW;EACX;EACA,YAAY;EACZ;CACD;AACD;AAIA,SAAS,8BAA8B,SAAS,0BAA0B,GAAG;CAC5E,MAAM,SAAS,OAAO;CACtB,MAAM,cAAc,OAAO,MAAM;CACjC,MAAM,SAAS,QAAQ,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,SAAS;CAClC,MAAM,iBAAiB,QAAQ,OAAO,0BAA0B;CAChE,IAAI,YAAuC;CAC3C,IAAI,CAAC,QAAQ,YAAY;MACpB,IAAI,CAAC,aAAa,CAAC,gBAAgB,YAAY;CACpD,OAAO;EACN;EACA,iBAAiB,OAAO,sBAAsB;EAC9C;EACA,cAAc;EACd,kBAAkB;EAClB,YAAY;CACb;AACD;AAEA,eAAe,0BAA0B,MAStC;CACF,MAAM,gBAAgB,KAAK,OAAO,sBAAsB;CACxD,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,4BAA4B;CAChE,MAAM,UAAU,4BAA4B,KAAK,OAAO;CACxD,MAAM,QAAQ,KAAK,eAAe,KAAK;CAQvC,MAAM,SADgB,MANO,4BAA4B;EACxD,SAAS,KAAK;EACd,iBAAiB;EACjB,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC,EAAA,CACoC,MAAM,UAAU,MAAM,aAAa,OAAO,KAAK,QAGlF,MAAM,6BAA6B;EACnC,SAAS,KAAK;EACd;EACA;EACA,MAAM;EACN,eAAe;EACf;EACA,iBAAiB;EACjB,QAAQ;EACR,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC;CACF,MAAM,CAAC,YAAY,qBAAqB,KAAK,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CAkBjF,OAAO;EAAE;EAAO,YAAA,MAjBS,sCAAsC;GAC9D,UAAU,sBAAsB,KAAK,QAAQ,GAAG,QAAQ,GAAG,SAAS;GACpE,SAAS,KAAK;GACd;GACA;GACA,MAAM;GACN,iBAAiB;GACjB;GACA,WAAW,KAAK,OAAO,sBAAsB;GAC7C,aAAa,KAAK,OAAO,8BAA8B;EACxD,CAAC;EAO2B,aANR,iCAAiC,KAAK,MAAM,IAAI;GACnE,gBAAgB;GAChB,UAAU,KAAK;GACf,wBAAwB;GACxB,kCAAkC;EACnC,CAC4B;CAAY;AACzC;AAEA,eAAe,6BAA6B,MAMG;CAC9C,MAAM,gBAAgB,KAAK,OAAO,sBAAsB;CACxD,IAAI,CAAC,eAAe,OAAO;CAC3B,MAAM,cAAc,8BAA8B,KAAK,MAAM,IAAI,eAAe,KAAK,OAAO;CAC5F,IAAI,CAAC,aAAa,kCAAkC,OAAO;CAC3D,MAAM,UAAU,YAAY,wBAAwB,KAAK;CACzD,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,YAAY,4BAA4B,KAAK,OAAO,GAAG,OAAO;CAQlE,MADqB,MANA,4BAA4B;EAChD,SAAS,KAAK;EACd,iBAAiB;EACjB,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC,EAAA,CAC2B,MAAM,UAAU,MAAM,aAAa,OAAO,KAAK,KAAA,EACzD,SAAS,gBAAgB,OAAO;CAClD,OAAO,MAAM,sCAAsC;EAClD,UAAU,qBAAqB,KAAK,UAAU,GAAG,QAAQ,GAAG,KAAK,SAAS;EAC1E,SAAS,KAAK;EACd;EACA,UAAU,KAAK;EACf,MAAM;EACN,iBAAiB;EACjB;EACA,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC;AACF;AAEA,SAAS,iCAAiC,SAA2B;CACpE,MAAM,cAAc,QAAQ,KAAK;CACjC,IAAI,CAAC,aAAa,OAAO,CAAC;CAC1B,MAAM,SAAS,sBAAsB;CACrC,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,MAAM,QAAQ,SAAS,IACnC,UAAU,KAAK,UAAU,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IAC7D,OAAO,cAAc,WACpB,UACC,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACf,OAAO,OAAO,2BAA2B,YAAY,OAAO,uBAAuB,KAAK,IACvF,CAAC,OAAO,uBAAuB,KAAK,CAAC,IACrC,CAAC;CACN,MAAM,aAAa,OAAO,QAAQ,UAAU,UAAU,WAAW;CACjE,IAAI,WAAW,WAAW,OAAO,QAAQ,OAAO;CAChD,OAAO,0BAA0B;CACjC,IAAI,WAAW,QAAQ,OAAO,yBAAyB,WAAW;MAC7D,OAAO,OAAO;CACnB,uBAAuB,MAAM;CAC7B,OAAO;AACR;AAEA,SAAS,4BAA4B,QAG5B;CACR,IAAI,OAAO,cAAc,kBACxB,OAAO;EAAE,MAAM;GAAE,OAAO;GAA8B;EAAO;EAAG,YAAY;CAAI;CAEjF,IAAI,CAAC,OAAO,kBACX,OAAO;EAAE,MAAM;GAAE,OAAO;GAAoC;EAAO;EAAG,YAAY;CAAI;CAEvF,OAAO;AACR;AAEA,SAAS,mCACR,QACA,MAC4D;CAC5D,IAAI,OAAO,cAAc,kBACxB,OAAO;EAAE,MAAM;GAAE,OAAO;GAA8B;EAAO;EAAG,YAAY;CAAI;CAEjF,IAAI,CAAC,OAAO,YACX,OAAO;EAAE,MAAM;GAAE,OAAO;GAA6B;EAAO;EAAG,YAAY;CAAI;CAEhF,IAAI,SAAS,iBAAiB,CAAC,OAAO,kBACrC,OAAO;EAAE,MAAM;GAAE,OAAO;GAAoC;EAAO;EAAG,YAAY;CAAI;CAEvF,OAAO;AACR;AAEA,eAAe,oBACd,GACA,UAAoC,CAAC,GACK;CAC1C,MAAM,MAAM,MAAM,EAAE,IAAI,KAAK;CAC7B,IAAI,CAAC,IAAI,KAAK,GAAG,OAAO,QAAQ,aAAa,CAAC,IAAI;CAClD,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG,OAAO;EAC3E,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,qBAAqB,MAA+B,KAA4B;CACxF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,MAAM,OAAO;CAC1B,OAAO,OAAO,KAAK,CAAC,CAAC,KAAK,KAAK;AAChC;AAEA,SAAS,2BAA2B,MAA+B,KAA4B;CAC9F,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,OAAO,UAAU,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI,gBAAgB;CACtE,OAAO,MAAM,KAAK,KAAK;AACxB;AAEA,SAAS,yBAAyB,MAA+B,KAAuB;CACvF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,MAAM,OAAO,CAAC;CAC3B,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,6BAA6B;CAC/E,OAAO,CACN,GAAG,IAAI,IACN,MACE,KAAK,SAAS;EACd,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI,6BAA6B;EAClF,OAAO,KAAK,KAAK;CAClB,CAAC,CAAC,CACD,OAAO,OAAO,CACjB,CACD;AACD;AAEA,SAAS,qBAAqB,MAA+B,KAA4B;CACxF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,QAAQ,UAAU,IAAI,OAAO;CAC1C,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;CAC/D,OAAO,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI;AACvD;AAEA,SAAS,mCACR,QACA,WACA,OAWS;CAkBT,OAAO,2BAA2B,OAAO,GAjBrB,WAAW,QAAQ,CAAC,CACtC,OACA,KAAK,UAAU;EACd;EACA;EACA,SAAS,MAAM;EACf,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,MAAM,MAAM,QAAQ;EACpB,iBAAiB,MAAM;EACvB,eAAe,MAAM,iBAAiB;EACtC,wBAAwB,MAAM,0BAA0B;EACxD,cAAc,MAAM;EACpB,oBAAoB,MAAM;CAC3B,CAAC,CACF,CAAC,CACA,OAAO,KACmC;AAC7C;AAEA,SAAS,sBAAsB,MAA+B,KAA4B;CACzF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,QAAQ,UAAU,IAAI,OAAO;CAC1C,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;CAC/D,OAAO,OAAO,UAAU,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,8BACR,UACA,iBACiC;CACjC,MAAM,YAAY,IAAI,IAAI,eAAe;CACzC,OAAO,SAAS,QACd,YACA,QAAQ,0BACP,CAAC,QAAQ,sBAAsB,CAAC,UAAU,IAAI,QAAQ,kBAAkB,EAC3E;AACD;AAEA,SAAS,+BAA+B,MAA+B;CACtE,MAAM,KAAK,sBAAsB,MAAM,IAAI;CAC3C,MAAM,WAAW,sBAAsB,MAAM,UAAU;CACvD,IAAI,OAAO,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,uBAAuB;CAC7D,IAAI,OAAO,MAAM,QAAQ,GAAG,MAAM,IAAI,MAAM,6BAA6B;CACzE,OAAO;EACN;EACA,oBAAoB,2BAA2B,MAAM,oBAAoB;EACzE,iBAAiB,2BAA2B,MAAM,iBAAiB;EACnE,UAAU,2BAA2B,MAAM,UAAU,KAAK;EAC1D;EACA,QAAQ,2BAA2B,MAAM,QAAQ,KAAK;CACvD;AACD;AAEA,SAAS,+BAA+B,SAAwC;CAC/E,IACC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,sBAAsB,KACvC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,qCAAqC,KACtD,QAAQ,SAAS,yBAAyB,GAE1C,OAAO;CAER,IACC,QAAQ,SAAS,YAAY,KAC7B,QAAQ,SAAS,kBAAkB,KACnC,QAAQ,SAAS,kCAAkC,KACnD,QAAQ,SAAS,gBAAgB,KACjC,QAAQ,SAAS,mBAAmB,GAEpC,OAAO;CAER,IACC,QAAQ,SAAS,sCAAsC,KACvD,QAAQ,SAAS,cAAc,KAC/B,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,WAAW,GAE5B,OAAO;CAER,OAAO;AACR;AAEA,SAAS,0BAA0B,SAAS,0BAA0B,GAAa;CAClF,MAAM,YAAY,OAAO,OAAO,iBAAiB,MAAM,CAAC,CACtD,KAAK,CAAC,CACN,YAAY;CACd,IAAI,aAAa,cAAc,UAAU,cAAc,WACtD,OAAO,eACN,CAAC,GACD,OAAO,OAAO,iBAAiB,EAAE,CAAC,CAChC,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,OAAO,OAAO,GAChB,EAAE,iBAAiB,OAAO,SAAS,CACpC;CAED,IAAI,OAAO,YAAY,OAAO,aAAa,WAC1C,OAAO,CAAC,iBAAiB,eAAe,OAAO,UAAU,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO;CAE3F,MAAM,YAAY,OAAO,OAAO,kBAAkB,CAAC,CAAC,CAClD,SAAS,YAAY,WAAW,CAAC,CAAC,CAAC,CACnC,QAAQ,UAAU,CAAC,MAAM,QAAQ,CAAC,CAClC,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7B,QAAQ,YAAY,WAAW,YAAY,eAAe,YAAY,KAAK,CAAC,CAC5E,KAAK,YAAY,iBAAiB,eAAe,SAAS,OAAO,QAAQ,CAAC,CAAC,CAAC,CAC5E,OAAO,OAAO;CAChB,OAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;AAC9B;AAEA,SAAS,6BACR,gBACA,QACgB;CAChB,MAAM,WAAW,OAAO,kBAAkB,EAAE,CAAC,CAAC,KAAK;CACnD,IAAI,UAAU,OAAO;CACrB,OAAO,OAAO;AACf;AAEA,SAAS,oBAAoB,OAA+B;CAC3D,MAAM,WAAW,OAAO,OAAO,SAAS,EAAE,CAAC;CAC3C,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,GAAG,OAAO;CACxD,OAAO;AACR;AAEA,SAAS,+BAA+B,OAGtC;CACD,IAAI,6BAA6B,KAAK,GACrC,OAAO;EAAE,OAAO,MAAM;EAAM,QAAQ,MAAM;CAAO;CAElD,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU;CACtD,MAAM,eAAuC;EAC5C,sBACC;EACD,gBAAgB;EAChB,0BACC;EACD,gBAAgB;EAChB,0BACC;EACD,0CACC;EACD,qCACC;EACD,oCACC;EACD,gCACC;EACD,iCAAiC;EACjC,iCAAiC;EACjC,6BACC;EACD,8BAA8B;EAC9B,8BAA8B;CAC/B;CAEA,OAAO;EACN,OAFgB,OAAO,OAAO,cAAc,IAAI,IAAI,OAAO;EAG3D,QACC,aAAa,SACb;CACF;AACD;AAEA,IAAM,2BAA2B;AACjC,IAAM,gCAAgC;AACtC,IAAM,2CAA2B,IAAI,IAAI;CACxC;CACA;CACA;AACD,CAAC;AAED,SAAS,gCAAgC,OAAuB;CAC/D,IAAI;EACH,OAAO,+BAA+B,OAAO,sBAAsB;CACpE,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,wBAAwB,MAA+B,KAAuB;CACtF,MAAM,QAAQ,KAAK;CACnB,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,sBAAsB;CACxE,IAAI,MAAM,SAAS,KAAK,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW;CAC1D,MAAM,QAAQ,MAAM,KAAK,SAAS;EACjC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI,sBAAsB;EAC3E,OAAO,KAAK,KAAK;CAClB,CAAC;CACD,IAAI,MAAM,MAAM,SAAS,CAAC,IAAI,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,sBAAsB;CAC9E,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAAQ,MAAM,IAAI,MAAM,GAAG,IAAI,qBAAqB;CACtF,OAAO;AACR;AAEA,SAAS,wBAAwB,MAA+B,UAAyB;CACxF,MAAM,UAAU,WAAW,2CAA2B,IAAI,IAAI,CAAC,iBAAiB,aAAa,CAAC;CAC9F,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,GACpD,MAAM,IAAI,MAAM,kCAAkC;CAEnD,IAAI,OAAO,KAAK,kBAAkB,UAAU,MAAM,IAAI,MAAM,8BAA8B;CAC1F,IAAI,YAAY,OAAO,KAAK,gCAAgC,UAC3D,MAAM,IAAI,MAAM,sCAAsC;CAEvD,IAAI,YAAY,CAAC,kBAAkB,KAAK,OAAO,KAAK,2BAA2B,CAAC,CAAC,KAAK,CAAC,GACtF,MAAM,IAAI,MAAM,qCAAqC;AAEvD;AAEA,SAAS,oBAAoB,SAAS,0BAA0B,GAG9D;CACD,MAAM,SAAS,8BAA8B,MAAM;CACnD,IAAI,OAAO,cAAc,SAAS,MAAM,IAAI,MAAM,6BAA6B;CAC/E,IAAI,OAAO,OAAO,WAAW,GAAG,MAAM,IAAI,MAAM,0BAA0B;CAC1E,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,MAAM,6BAA6B;CACvE,OAAO;EAAE,SAAS,OAAO;EAAc;CAAO;AAC/C;AAIA,SAAS,oBAAoB,OAAqC;CACjE,IAAI,UAAU,iBAAiB,UAAU,cAAc,OAAO;CAC9D,MAAM,IAAI,MAAM,+BAA+B;AAChD;AAEA,SAAS,uBACR,OACA,YACA,UAA0C,CAAC,GAK1C;CACD,MAAM,WACL,QAAQ,qBAAqB,QAC1B,gCAAgC,KAAK,IACrC,0BAA0B,KAAK;CACnC,MAAM,kBAAkB,OACvB,MAAM,GACJ,QAAQ,wDAAwD,CAAC,CACjE,MAAM,CAAC,CACP,IAAI,QAAQ,KAAK,EACpB,CAAC,CAAC,KAAK;CACP,IAAI,CAAC,iBAAiB,MAAM,IAAI,MAAM,2BAA2B;CACjE,MAAM,SAAS,sBAAsB;CACrC,OAAO;EACN;EACA;EACA,mBAAmB,mBAAmB;GACrC,cAAc,cAAc,OAAO,OAAO,oBAAoB,EAAE;GAChE,QAAQ,SAAS;GACjB,cAAc;EACf,CAAC;CACF;AACD;AAEA,SAAS,iCACR,OACA,MACA,cACC;CACD,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;CAC9D,MAAM,UAAU,uBAAuB,OAAO,qBAAqB,MAAM,aAAa,CAAC;CACvF,MAAM,SAAS,2BAA2B,MAAM,gBAAgB;CAChE,MAAM,mBAAmB,2BAA2B,MAAM,oBAAoB;CAC9E,IAAI,SAAS,eAAe;EAC3B,IAAI,CAAC,UAAU,kBAAkB,MAAM,IAAI,MAAM,mCAAmC;EACpF,OAAO,iCAAiC,MAAM,IAAI;GACjD,SAAS;GACT,SAAS;GACT;GACA,YAAY,MAAM;GAClB,GAAG;GACH;EACD,CAAC;CACF;CACA,IAAI,CAAC,oBAAoB,QAAQ,MAAM,IAAI,MAAM,mCAAmC;CACpF,OAAO,iCACN,MAAM,IACN;EACC,SAAS;EACT,SAAS;EACT;EACA,YAAY;EACZ,GAAG;CACJ,GACA,EACC,0BAA0B,qBAC3B,CACD;AACD;AAEA,SAAS,8BACR,OACA,MACA,UACA,SAC4B;CAC5B,IAAI,SAAS,eAAe;EAC3B,IAAI,QAAQ,YAAY,UAAU,CAAC,QAAQ,QAAQ,QAAQ,KAAK,WAAW,UAC1E,MAAM,IAAI,MAAM,kCAAkC;EAEnD,OAAO;GACN,SAAS;GACT,SAAS;GACT,MAAM,QAAQ;GACd,UAAU,QAAQ;GAClB,kBAAkB,CAAC;EACpB;CACD;CACA,IAAI,QAAQ,YAAY,gBAAgB,QAAQ,QAAQ,eAAe,UACtE,MAAM,IAAI,MAAM,kCAAkC;CAEnD,MAAM,iBAAiB,MAAM,GAC3B,QACA;8EAED,CAAC,CACA,IAAI,QAAQ;CACd,IAAI,CAAC,gBAAgB,cAAc,MAAM,IAAI,MAAM,oBAAoB;CACvE,OAAO;EACN,SAAS;EACT,SAAS;EACT,gBAAgB;GAAE,YAAY;GAAU,aAAa,eAAe;EAAa;EACjF,UAAU,QAAQ;EAClB,kBAAkB,QAAQ;CAC3B;AACD;AAEA,SAAS,mDACR,OACA,MACA,cACA,gBACC;CACD,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;CAC9D,MAAM,UAAU,uBAAuB,OAAO,qBAAqB,MAAM,aAAa,GAAG,EACxF,kBAAkB,MACnB,CAAC;CACD,MAAM,SAAS,2BAA2B,MAAM,gBAAgB;CAChE,MAAM,mBAAmB,2BAA2B,MAAM,oBAAoB;CAC9E,MAAM,qBAAqB,2BAA2B,MAAM,sBAAsB;CAClF,IAAI,SAAS,eAAe;EAC3B,IAAI,CAAC,UAAU,CAAC,sBAAsB,kBACrC,MAAM,IAAI,MAAM,mCAAmC;EAEpD,OAAO,mDAAmD,gBAAgB;GACzE,SAAS;GACT,SAAS;GACT;GACA,YAAY;GACZ,GAAG;GACH;EACD,CAAC;CACF;CACA,IAAI,CAAC,oBAAoB,UAAU,oBAClC,MAAM,IAAI,MAAM,mCAAmC;CAEpD,OAAO,mDAAmD,gBAAgB;EACzE,SAAS;EACT,SAAS;EACT;EACA,YAAY;EACZ,GAAG;CACJ,CAAC;AACF;AAEA,IAAM,+CAA+B,IAAI,IAAI;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAS,yBAAyB,OAAgB,WAAW,kBAA0B;CACtF,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC/E,OAAO,6BAA6B,IAAI,IAAI,IAAI,OAAO;AACxD;AAEA,SAAS,yBAAyB,MAA2B,UAA0B;CACtF,OAAO,4BAA4B,KAAK,GAAG;AAC5C;AAEA,SAAgB,oCAAoC,SAGlB;CACjC,IAAI,CAAC,uBAAuB,wBAAwB,QAAQ,eAAe,CAAC,GAC3E,OAAO;CAER,OAAO,oBAAoB,QAAQ,eAAe,gBAAgB,IAAI,cAAc;AACrF;AAEA,eAAsB,6BACrB,OACA,UACA,cACyC;CACzC,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,IAAI,aAAa,eAAe,OAAO;CACvC,MAAM,MAAM,MAAM,GAChB,QACA,gGACD,CAAC,CACA,IAAI,QAAQ;CAOd,MAAM,sBACL,OAAO,KAAK,sBAAsB,EAAE,CAAC,CAAC,KAAK,MAC1C,KAAK,aAAa,qBAAqB,IAAI,UAAU,IAAI;CAC3D,MAAM,YAAY,aAAa,KAAK,kBAAkB,IAAI;CAC1D,KAAK,MAAM,WAAW,WACrB,IAAI;EACH,MAAM,MAAM,GAAG,aAAa,OAAO,EAAE;EACrC,MAAM,UAAU;GACf,GAAG,2BAA2B;IAC7B,UAAU;IACV,aAAa;IACb,QAAQ,MAAM;IACd,QAAQ;IACR;IACA,WAAW,OAAO,MAAM,CAAC;IACzB,SAAS,YAAY;GACtB,CAAC;IACA,yBAAyB;IACzB,uBAAuB,oBAAoB,KAAK,GAAG;EACrD;EACA,MAAM,CAAC,QAAQ,WAAW,MAAM,YAAY,OAAO,KAAK;GAAE;GAAS,UAAU;EAAE,CAAC;EAChF,IAAI,SAAS,OAAO,UAAU,KAAK;EACnC,IAAI,OAAO,SAAS,aAAa,EAAE,CAAC,CAAC,KAAK,MAAM,UAAU;EAC1D,IACC,uBACA,OAAO,SAAS,eAAe,EAAE,CAAC,CAAC,KAAK,MAAM,qBAE9C;EAED,IACC,aAAa,UACb,aAAa,iBACb,oCAAoC,WAAW,CAAC,CAAC,MAAM,aAEvD,OAAO;EAER,IACC,aAAa,UACb,CAAC,uBAAuB,wBAAwB,SAAS,eAAe,CAAC,GAEzE,OAAO;EAER,IACC,aAAa,iBACb,CAAC,oBAAoB,SAAS,eAAe,gBAAgB,GAE7D,OAAO;EAER,OAAO;CACR,QAAQ,CAER;CAED,OAAO;AACR;AAEA,eAAe,0BACd,OACA,UACmC;CACnC,OAAO,6BAA6B,OAAO,UAAU;EACpD,QAAQ;EACR,eAAe;CAChB,CAAC;AACF;AAEA,SAAS,8BACR,OACA,cACA,oBACuB;CACvB,IAAI,aAAa,WAAW,GAAG,MAAM,IAAI,MAAM,yBAAyB;CACxE,MAAM,YAAY,IAAI,IAAI,YAAY;CACtC,MAAM,6BAAa,IAAI,IAGrB;CACF,IAAI,SAAS;CACb,OAAO,WAAW,OAAO,UAAU,MAAM;EACxC,MAAM,OAAO,0BAA0B,MAAM,IAAI;GAAE,OAAO;GAAK;EAAO,CAAC;EACvE,KAAK,MAAM,WAAW,KAAK,UAC1B,IAAI,UAAU,IAAI,QAAQ,kBAAkB,GAC3C,WAAW,IAAI,QAAQ,oBAAoB,OAAO;EAGpD,IAAI,CAAC,KAAK,UAAU;EACpB,UAAU,KAAK;CAChB;CACA,OAAO,aAAa,KAAK,cAAc;EACtC,MAAM,UAAU,WAAW,IAAI,SAAS;EACxC,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,2BAA2B;EAIzD,IAHkB,QAAQ,mBAAmB,MAC3C,YAAY,QAAQ,SAAS,+BAA+B,QAAQ,qBAElE,GAAW,MAAM,IAAI,MAAM,6BAA6B;EAC5D,IACC,QAAQ,aACR,QAAQ,oBAAoB,cAC5B,QAAQ,gBAAgB,QACxB,QAAQ,mBAAmB,MAAM,YAAY,QAAQ,qBAAqB,GAE1E,MAAM,IAAI,MAAM,+BAA+B;EAEhD,OAAO;GACN,mBAAmB,QAAQ;GAC3B,aAAa,QAAQ;GACrB,gBAAgB,QAAQ;GACxB,qBAAqB,8BAA8B,MAAM,IAAI;IAC5D,mBAAmB,QAAQ;IAC3B;GACD,CAAC;EACF;CACD,CAAC;AACF;AAEA,SAAS,mBAAmB,OAAoB,cAAyC;CACxF,MAAM,UAAU,MAAM,GACpB,QACA;;;sBAID,CAAC,CACA,IAAI,YAAY;CAClB,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,0BAA0B;CAClE,MAAM,QAAQ,QAAQ;CACtB,IAAI,OACH,OAAO,MAAM,WAAW,YACrB;EAAE,MAAM;EAAW,UAAU,MAAM;EAAU,aAAa,MAAM;CAAa,IAC7E;EAAE,MAAM;EAAY,UAAU,MAAM;EAAU,aAAa,MAAM;CAAa;CAElF,OAAO;EAAE,MAAM;EAAW,aAAa;CAAa;AACrD;AAEA,SAAS,kBACR,OACA,MACA,WACA,iBACqF;CACrF,MAAM,eAAe,sBAAsB,OAAO,KAAK,aAAa,CAAC;CACrE,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,MAAM,2BAA2B,aAAa;CAC9C,MAAM,WAAW,8BAChB,OACA,wBAAwB,MAAM,aAAa,GAC3C,aACD;CACA,MAAM,EAAE,SAAS,WAAW,oBAAoB;CAChD,OAAO;EACN,MAAM,mBAAmB;GACxB,gBAAgB,MAAM;GACtB,kBAAkB,CAAC,aAAa;GAChC,QAAQ,mBAAmB,OAAO,YAAY;GAC9C;GACA,oBAAoB;GACpB;GACA;EACD,CAAC;EACD;CACD;AACD;AAEA,SAAS,qBAAqB,MAA0B;CACvD,OAAO;EACN,cAAc,KAAK;EACnB,UAAU;GACT,cAAc,KAAK;GACnB,OAAO,KAAK;GACZ,GAAI,KAAK,eAAe,aAAa,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC;EACtE;EACA,UAAU,KAAK,SAAS,KAAK,aAAa;GACzC,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,uBAAuB,QAAQ;EAChC,EAAE;EACF,uBAAuB,KAAK,SAAS,QACnC,OAAO,YAAY,QAAQ,QAAQ,qBACpC,CACD;EACA,wBAAwB;EACxB,gBAAgB,KAAK;EACrB,6BAA6B,KAAK;CACnC;AACD;AAQA,eAAe,gCAAgC,aAI5C;CACF,MAAM,EAAE,SAAS,WAAW,oBAAoB;CAChD,MAAM,CAAC,QAAQ,WAAW,MAAM,YAC/B,OACA,GAAG,aAAa,OAAO,kBAAkB,EAAE,4BAA4B,mBAAmB,WAAW,EAAE,YAAY,mBAAmB,OAAO,KAC7I;EACC,SAAS,EAAE,+BAA+B,OAAO,2BAA2B;EAC5E,UAAU;CACX,CACD,CAAC,CAAC,OAAO,UAAmB;EAC3B,MAAM,QAAQ,IAAI,MAAM,2BAA2B,EAAE,MAAM,CAAC;EAC5D,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP,CAAC;CACD,IAAI,SAAS,OAAO,UAAU,KAAK;EAClC,MAAM,QAAQ,IAAI,MAAM,OAAO,SAAS,SAAS,uBAAuB,CAAC;EACzE,OAAO,OAAO,OAAO,EAAE,OAAO,CAAC;EAC/B,MAAM;CACP;CACA,IAAI,CAAC,WAAW,QAAQ,iBAAiB,eAAe,QAAQ,aAAa,SAAS;EACrF,MAAM,wBAAQ,IAAI,MAAM,0BAA0B;EAClD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CACA,OAAO;EAAE;EAAS;EAAiB;CAA2C;AAC/E;AAEA,eAAe,iCACd,OACA,aAC2E;CAC3E,MAAM,QAAQ,MAAM,GAClB,QAAQ,sEAAsE,CAAC,CAC/E,MAAM,CAAC,CACP,IAAI,WAAW;CACjB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,qBAAqB;CACjD,IAAI,UAAU,MAAM,SAAS,MAAM,IAAI,MAAM,0BAA0B;CACvE,uBAAuB,KAAK;CAC5B,MAAM,EAAE,SAAS,YAAY,MAAM,gCAAgC,WAAW;CAC9E,IAAI,QAAQ,UAAU,0BAA0B,OAAO;EAAE,UAAU;EAAO;CAAQ;CAClF,IAAI,QAAQ,UAAU,YAAY;EACjC,MAAM,wBAAQ,IAAI,MAAM,yBAAyB;EACjD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CAYA,IAAI;EAVH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CAEG,CAAA,CAAS,MAAM,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,OAAO,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG;EAC7F,MAAM,wBAAQ,IAAI,MAAM,8BAA8B;EACtD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CACA,MAAM,aAAa,OAAO,QAAQ,WAAW;CAC7C,MAAM,mBACL,OAAO,QAAQ,uBAAuB,YAAY,QAAQ,mBAAmB,KAAK,IAC/E,QAAQ,qBACR;CACJ,IACE,eAAe,4BAA4B,eAAe,6BAC1D,eAAe,8BAA+B,QAAQ,gBAAgB,GACtE;EACD,MAAM,wBAAQ,IAAI,MAAM,+BAA+B;EACvD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CACA,MAAM,WAAW,2BAA2B,QAAQ,QAAQ;CAC5D,kCAAkC,MAAM,IAAI;EAC3C;EACA,qBAAqB,MAAM;EAC3B,oBAAoB;EACpB,0BAA0B,OAAO,QAAQ,2BAA2B;EACpE,kBAAkB,OAAO,QAAQ,kBAAkB;EACnD,sBAAsB,OAAO,QAAQ,sBAAsB;EAC3D,mBAAmB,OAAO,QAAQ,mBAAmB;EACrD,4BAA4B,OAAO,QAAQ,6BAA6B;EACxE,oBAAoB,OAAO,QAAQ,oBAAoB;EACvD,sBAAsB,OAAO,QAAQ,qBAAqB;EAC1D,YAAY,OAAO,QAAQ,WAAW;EACtC;EACA;EACA;CACD,CAAC;CACD,OAAO;EAAE,UAAU;EAAM;CAAQ;AAClC;AAqBA,eAAe,yBACd,OACA,aACA,qBAAqB,MACpB;CACD,MAAM,OAAO,MAAM,GACjB,QAAQ;;;;;;;;;;8CAUmC,CAAC,CAC5C,IAAI,MAAM,SAAS,eAAe,MAAM,eAAe,IAAI;CAC7D,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,OAAO,QAAQ,IACd,KAAK,IAAI,OAAO,QAAQ;EACvB,MAAM,WAAW,MAAM,GACrB,QAAQ;2EAC8D,CAAC,CACvE,IAAI,IAAI,YAAY;EAKtB,MAAM,QACL,MAAM,GACJ,QAAQ;oFACsE,CAAC,CAC/E,IAAI,IAAI,YAAY,CAAC,CAStB,KACA,UAA4C;GAC5C,cAAc,KAAK;GACnB,eAAe,KAAK;GACpB,eAAe,KAAK;GACpB,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,WAAW,KAAK;EACjB,EACD;EACA,IAAI,aAA4B;EAChC,IAAI,iBAAiB,IAAI;EACzB,IAAI,sBAAsB,IAAI,UAAU,0BACvC,IAAI;GACH,MAAM,SAAS,MAAM,gCAAgC,IAAI,YAAY;GACrE,IAAI,OAAO,QAAQ,UAAU,YAAY,iBAAiB;GAC1D,aACC,OAAO,OAAO,QAAQ,gBAAgB,YAAY,OAAO,QAAQ,YAAY,KAAK,IAC/E,OAAO,QAAQ,cACf;EACL,QAAQ,CAER;EAED,MAAM,WAAW,IAAI,sBAAsB,IAAI;EAC/C,MAAM,aAAa,IAAI,0BAA0B,IAAI,sBAAsB,IAAI;EAC/E,MAAM,aAAa,IAAI,iCAAiC,IAAI;EAC5D,MAAM,YAAY,sBAAsB;GACvC,kBAAkB,IAAI;GACtB,qBAAqB,IAAI;GACzB;GACA;GACA;GACA;GACA,OAAO;GACP;EACD,CAAC;EACD,OAAO;GACN,cAAc,IAAI;GAClB,QAAQ;IAAE,UAAU;IAAU,cAAc;GAAW;GACvD,SACC,IAAI,uBAAuB,aACxB,CACA;IACC,WAAW,IAAI;IACf,cAAc;IACd,cAAc,IAAI;GACnB,CACD,IACC,CAAC;GACL;GACA,eAAe,SAAS;GACxB,WAAW;IACV,OAAO,UAAU;IACjB,OAAO,UAAU;IACjB,aAAa,UAAU;IACvB,gBACC,UAAU,eAAe,SAAS,gBAC/B;KACA,MAAM;KACN,OAAO,UAAU,cAAc;KAC/B,aAAa,UAAU,cAAc;IACtC,IACC,CAAC,sBAAsB,UAAU,cAAc,2BAC9C;KAAE,MAAM;KAAe,OAAO;IAAc,IAC5C,UAAU;GAChB;GACA,YAAY;IACX,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB,aAAa,IAAI;IACjB,mBAAmB,IAAI;GACxB;EACD;CACD,CAAC,CACF;AACD;AAEA,eAAe,gCAAgC,OAAoB,aAAqB;CACvF,MAAM,EAAE,SAAS,WAAW,oBAAoB;CAChD,MAAM,gBAAgB,OAAO,sBAAsB;CACnD,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,4BAA4B;CAChE,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,OAAO,yBACN,MAAM,IACN;EAAE;EAAa,oBAAoB;CAAc,GACjD;EACC,qBAAqB,OAAO,SAAS,oBAAoB;GACxD,IAAI,oBAAoB,SAAS,MAAM,IAAI,MAAM,0BAA0B;GAC3E,MAAM,eAAe,aAEnB,MAAM,4BAA4B;IACjC;IACA,iBAAiB;IACjB,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,EAAA,CACA,MAAM,UAAU,MAAM,aAAa,QAAQ,UAAU,KAAK;GAC7D,MAAM,WAAW,MAAM,aAAa;GACpC,IAAI,UAAU,OAAO;GACrB,IAAI;IACH,OAAO,MAAM,6BAA6B;KACzC;KACA,SAAS,QAAQ;KACjB,OAAO,QAAQ;KACf,MAAM;KACN,eAAe;KACf;KACA,iBAAiB;KACjB,QAAQ;KACR,WAAW,OAAO,sBAAsB;KACxC,aAAa,OAAO,8BAA8B;IACnD,CAAC;GACF,SAAS,OAAO;IACf,MAAM,SAAS,MAAM,aAAa;IAClC,IAAI,QAAQ,OAAO;IACnB,MAAM;GACP;EACD;EACA,kBAAkB,EAAE,UAAU,SAAS,iBAAiB,SAAS,UAAU,WAAW;GACrF,IAAI,oBAAoB,SAAS,MAAM,IAAI,MAAM,0BAA0B;GAC3E,OAAO,sCAAsC;IAC5C;IACA;IACA;IACA;IACA;IACA,iBAAiB;IACjB;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;EACF;EACA,wBAAwB,aAAa,0BAA0B,OAAO,QAAQ;EAC9E,sBAAsB,OAAO,oBAAoB;GAChD,IAAI,oBAAoB,SAAS,MAAM,IAAI,MAAM,0BAA0B;GAM3E,KADc,MAJU,sCAAsC,MAAM,IAAI,QAAQ;IAC/E,SAAS,YAAY;IACrB,QAAQ,MAAM;GACf,CAAC,EAAA,CACuB,OAAO,MAAM,SAAS,KAAK,YAAY,OAC3D,CAAA,EAAO,WAAW,aAAa,MAAM,IAAI,MAAM,8BAA8B;EAClF;EACA,iBAAiB,sBAChB,YAAY,MAAM,IAAI,mBAAmB;GACxC,SAAS,YAAY;GACrB,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,sBAAsB;EACvB,CAAC;CACH,CACD;AACD;AAOA,eAAsB,6BACrB,OACA,aAC8C;CAC9C,MAAM,YAAY,MAAM,GACtB,QACA,kGACD,CAAC,CACA,IAAI,WAAW;CAGjB,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,qBAAqB;CACrD,IAAI,UAAU,qBAAqB,MAAM,SAAS,MAAM,IAAI,MAAM,0BAA0B;CAC5F,IAAI,UAAU,UAAU,aAIvB,OAAO;EAAE,UAAU;EAAO,OAAO;CAAY;CAE9C,IAAI,CAAC,UAAU,qBAEV;MAAA,EAAC,MADwB,iCAAiC,OAAO,WAAW,EAAA,CAC5D,UACnB,OAAO;GAAE,UAAU;GAAO,OAAO;EAAyB;CAAA;CAI5D,KAAI,MADe,gCAAgC,OAAO,WAAW,EAAA,CAC5D,YAGR,OAAO;EAAE,UAAU;EAAO,OAAO;CAAY;CAE9C,OAAO;EAAE,UAAU;EAAM,OAAO;CAAS;AAC1C;AAsBA,IAAM,mCAAmC;CACxC;CACA;CACA;CACA;CACA;AACD;AAEA,IAAM,iDAAiD;AACvD,IAAM,6CAA6C;AACnD,IAAM,oDAAoC,IAAI,IAAI;CACjD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,uDAAuC,IAAI,IAAI;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,iDAAiC,IAAI,IAAI;CAC9C;CACA;CACA;CACA;CACA,GAAG;AACJ,CAAC;AAED,SAAS,YAAY,OAA+B;CACnD,MAAM,QAAQ,SAAS,OAAO,UAAU,WAAY,MAA+B,SAAS;CAC5F,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,OAAO,SAAS,MACrF,QACA;AACJ;AAEA,SAAS,gCACR,OACA,UAIC;CACD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;CACzD,MAAM,SAAS,YAAY,KAAK;CAChC,IAAI,YAAY,0BAA0B,UAAU,QAAQ,WAAW,MACtE,OAAO;EAAE,MAAM;EAAS,QAAQ;CAAI;CAErC,IAAI,qCAAqC,IAAI,OAAO,MAAM,UAAU,QAAQ,WAAW,MACtF,OAAO;EAAE,MAAM;EAAS,QAAQ;CAAI;CAErC,IAAI,UAAU,QAAQ,UAAU,OAAO,YAAY,2BAClD,OAAO;EAAE,MAAM;EAA+B,QAAQ;CAAI;CAE3D,IAAI,YAAY,6BAA6B,WAAW,OAAO,WAAW,OAAO,WAAW,KAC3F,OAAO;EAAE,MAAM;EAA2B,QAAQ;CAAI;CAEvD,OAAO;AACR;AAEA,SAAS,+BAA+B,OAAyB;CAChE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,IAAI,+BAA+B,IAAI,OAAO,GAAG,OAAO;CACxD,MAAM,SAAS,YAAY,KAAK;CAChC,OAAO,UAAU,QAAQ,WAAW,OAAO,WAAW,OAAO,UAAU;AACxE;AAEA,SAAS,4BAA4B,OAAwB;CAC5D,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,+BAA+B,IAAI,OAAO,IAAI,UAAU;AAChE;AAEA,SAAS,kCACR,OACA,aACA,OACA,KACwC;CACxC,MAAM,gBAAgB,4BAA4B,KAAK;CACvD,MAAM,YAAY,+BAA+B,KAAK;CACtD,MAAM,GACJ,QAAQ;;;8DAGmD,CAAC,CAC5D,IAAI,YAAY,IAAI,GAAG,KAAK,eAAe,KAAK,WAAW;CAC7D,MAAM,UAAU,YAAY,oBAAoB;CAChD,MAAM,GACJ,QAAQ,8EAA8E,CAAC,CACvF,IACA,YAAY,oBAAoB,oBAAoB,0BACpD,KACA,WACD;CACD,OAAO;AACR;AAEA,eAAsB,4BACrB,OACA,UAOI,CAAC,GACwC;CAC7C,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,CAAC;CACtE,MAAM,eAAe,iCAAiC,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAC9E,MAAM,iBAAiB,QAAQ,uBAAO,IAAI,KAAK;CAC/C,MAAM,gDAA+B,IAAI,KACxC,eAAe,QAAQ,IAAI,8CAC5B,EAAA,CAAE,YAAY;CACd,MAAM,sCAAqB,IAAI,KAC9B,eAAe,QAAQ,IAAI,0CAC5B,EAAA,CAAE,YAAY;CAEd,MAAM,OAAO,MAAM,GACjB,QAAQ;;6BAEkB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoC/B,CAAC,CACT,IACA,MAAM,SACN,GAAG,kCACH,8BACA,oBACA,KACD;CAGD,MAAM,mBAAmB,QAAQ,oBAAoB;CACrD,MAAM,SAA4C;EACjD,WAAW;EACX,UAAU;EACV,SAAS;EACT,WAAW;EACX,QAAQ;EACR,OAAO,CAAC;CACT;CACA,KAAK,MAAM,OAAO,MAAM;EACvB,OAAO,aAAa;EACpB,IAAI;GACH,MAAM,WAAW,MAAM,iBAAiB,OAAO,IAAI,YAAY;GAC/D,IAAI,CAAC,SAAS,UAAU;IACvB,IAAI,SAAS,UAAU,aAAa;KAEnC,OAAO,MAAM,KAAK;MAAE,aAAa,IAAI;MAAc,SAAS;KAAa,CAAC;KAC1E;IACD;IACA,MAAM,GACJ,QAAQ,mEAAmE,CAAC,CAC5E,IAAI,eAAe,YAAY,GAAG,IAAI,YAAY;IACpD,OAAO,WAAW;IAClB,OAAO,MAAM,KAAK;KACjB,aAAa,IAAI;KACjB,SAAS;IACV,CAAC;IACD;GACD;GACA,OAAO,YAAY;GACnB,OAAO,MAAM,KAAK;IAAE,aAAa,IAAI;IAAc,SAAS;GAAW,CAAC;EACzE,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,QAAQ,MAAM,GAClB,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,IAAI,YAAY;GACtB,IAAI,UAAU,aAAa;IAI1B,OAAO,MAAM,KAAK;KAAE,aAAa,IAAI;KAAc,SAAS;IAAa,CAAC;IAC1E;GACD;GACA,IAAI,YAAY,wBAAwB,UAAU,sBAAsB;IACvE,OAAO,WAAW;IAClB,OAAO,MAAM,KAAK;KAAE,aAAa,IAAI;KAAc,SAAS;IAAqB,CAAC;IAClF;GACD;GACA,IAAI,UAAU,mBAAmB;IAChC,OAAO,aAAa;IACpB,OAAO,MAAM,KAAK;KACjB,aAAa,IAAI;KACjB,SAAS;KACT,OAAO;IACR,CAAC;IACD;GACD;GACA,IAAI,UAAU,0BAA0B;IACvC,MAAM,UAAU,kCACf,OACA,IAAI,cACJ,OACA,eAAe,YAAY,CAC5B;IACA,IAAI,YAAY,mBAAmB,OAAO,aAAa;SAClD,OAAO,WAAW;IACvB,OAAO,MAAM,KAAK;KAAE,aAAa,IAAI;KAAc;KAAS,OAAO;IAAQ,CAAC;IAC5E;GACD;GACA,IAAI,kCAAkC,IAAI,OAAO,GAAG;IACnD,MAAM,GACJ,QACA,8FACD,CAAC,CACA,IAAI,eAAe,YAAY,GAAG,IAAI,YAAY;IACpD,OAAO,aAAa;IACpB,OAAO,MAAM,KAAK;KACjB,aAAa,IAAI;KACjB,SAAS;KACT,OAAO;IACR,CAAC;IACD;GACD;GACA,OAAO,UAAU;GACjB,OAAO,MAAM,KAAK;IACjB,aAAa,IAAI;IACjB,SAAS;IACT,OAAO;GACR,CAAC;EACF;CACD;CACA,OAAO;AACR;AAyBA,SAAS,iCAAiC,OAAwB;CACjE,MAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAA,CAAG,KAAK;CAC9E,MAAM,aAAa,QAAQ,MAAM,oBAAoB,CAAC,GAAG;CACzD,IAAI,YAAY,OAAO,QAAQ;CAC/B,qBACC,IAAI,IAAI;EACP;EACA;EACA;EACA;EACA;EACA;EACA;CACD,CAAC,EAAA,CAAE,IAAI,OAAO,GAEd,OAAO;CAER,IAAI,4BAA4B,KAAK,OAAO,GAAG,OAAO;CACtD,IAAI,yCAAyC,KAAK,OAAO,GAAG,OAAO;CACnE,OAAO;AACR;AAEA,SAAS,6BACR,SACA,OACA,OAC0C;CAI1C,OAAO;EAAE,SAHW,0BAA0B,KAAK,OAAO,IACvD,UACA,SAAS,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;EAC3C;EAAO,MAAM,iCAAiC,KAAK;CAAE;AACrF;AAEA,eAAsB,yCACrB,OACA,UAeI,CAAC,GACqD;CAC1D,MAAM,SAAS,QAAQ,UAAU,0BAA0B;CAC3D,MAAM,YAAY,OAAO,mBAAmB,KAAK;CACjD,MAAM,cAAc,OAAO,2BAA2B,KAAK;CAC3D,IAAI,CAAC,aAAa,CAAC,eAAe,OAAO,sBAAsB,WAAW,GACzE,OAAO;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACd,UAAU,CAAC;EACX,cAAc;EACd,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,QAAQ;CACT;CAED,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,0BACL,QAAQ,2BAA2B;CACpC,MAAM,oBACL,QAAQ,uBACN,UAAU,uCAAuC,MAAM,IAAI,KAAK;CACnE,MAAM,QAAwD;EAC7D,SAAS;EACT,iBAAiB;EACjB,cAAc;EACd,UAAU,CAAC;EACX,cAAc;EACd,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,QAAQ;CACT;CACA,KAAK,MAAM,WAAW,OAAO,uBAAuB;EACnD,MAAM,CAAC,mBAAmB,6BAA6B,MAAM,QAAQ,WAAW,CAC/E,YAAY;GAAE;GAAS;GAAW;EAAY,CAAC,GAC/C,wBAAwB;GAAE;GAAS;GAAW;EAAY,CAAC,CAC5D,CAAC;EACD,IAAI,kBAAkB,WAAW,YAChC,MAAM,SAAS,KACd,6BAA6B,SAAS,gBAAgB,kBAAkB,MAAM,CAC/E;EAED,IAAI,0BAA0B,WAAW,YACxC,MAAM,SAAS,KACd,6BACC,SACA,8BACA,0BAA0B,MAC3B,CACD;EAED,IACC,kBAAkB,WAAW,cAC7B,0BAA0B,WAAW,YACpC;GACD,MAAM,gBAAgB;GACtB;EACD;EACA,IAAI;GACH,MAAM,SAAS,MAAM,kBAAkB;IACtC,eAAe,aAAa,SAAS;IACrC;IACA,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,eAAe,MAAM;GACtB,CAAC;GACD,MAAM,mBAAmB;GACzB,MAAM,gBAAgB,OAAO;GAC7B,MAAM,oBAAoB,OAAO;GACjC,MAAM,mBAAmB,OAAO;GAChC,MAAM,aAAa,OAAO;GAC1B,MAAM,UAAU,OAAO,OAAO;EAC/B,SAAS,OAAO;GACf,MAAM,gBAAgB;GACtB,MAAM,SAAS,KAAK,6BAA6B,SAAS,sBAAsB,KAAK,CAAC;EACvF;CACD;CACA,OAAO;AACR;AAEA,IAAM,yCAAyC;AAC/C,IAAM,6CAA6C;AACnD,IAAM,0CAA0C;AAChD,IAAM,kDAAkC,IAAI,IAAI;CAC/C;CACA;CACA;AACD,CAAC;AAQD,SAAS,mCACR,OACA,SACqC;CACrC,MAAM,MAAM,MAAM,GAChB,QACA;;0BAGD,CAAC,CACA,IAAI,OAAO;CAOb,MAAM,gBAAgB,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;CAC7D,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;CACjD,MAAM,kBAAkB,OAAO,KAAK,gBAAgB;CACpD,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,cAAc,eAAe,KAAK,kBAAkB,GAC7F,MAAM,IAAI,MAAM,gDAAgD;CAEjE,OAAO;EAAE;EAAe;EAAS;CAAgB;AAClD;AAEA,SAAS,mCACR,SACA,sBACA,aAKS;CACT,MAAM,YAAY,YAChB,UACC,MAAM,UACN,KAAK,SAAS,cAAc,MAAM,QAAQ,KAC1C,KAAK,OAAO,cAAc,MAAM,MAAM,KACtC,KAAK,kBAAkB,MAAM,eAC/B,CAAC,CACA,KACC,eACA,GAAG,WAAW,SAAS,QAAQ,WAAW,OAAO,QAAQ,WAAW,iBACtE,CAAC,CACA,KAAK,GAAQ;CACf,OAAO,4CAA4C,WAAW,QAAQ,CAAC,CACrE,OAAO,GAAG,QAAQ,QAAQ,qBAAqB,QAAQ,WAAW,CAAC,CACnE,OAAO,KAAK;AACf;AAEA,SAAS,2CACR,YACA,YACgB;CAChB,MAAM,YAAY,WAAW;CAC7B,MAAM,eAAe,WAAW;CAChC,IAAI,OAAO,cAAc,YAAY,CAAC,cAAc,OAAO;CAC3D,MAAM,cAAc,KAAK,MAAM,SAAS;CACxC,MAAM,eAAe,KAAK,MAAM,UAAU;CAC1C,IACC,CAAC,OAAO,SAAS,WAAW,KAC5B,CAAC,OAAO,SAAS,YAAY,KAC7B,IAAI,KAAK,WAAW,CAAC,CAAC,YAAY,MAAM,aACxC,eAAe,gBACf,aAAa,oBAAoB,YACjC,CAAC,MAAM,QAAQ,aAAa,aAAa,KACzC,CAAC,aAAa,cAAc,OAAO,YAAY,OAAO,YAAY,QAAQ,KAC1E,CAAC,aAAa,cAAc,SAAS,gBAAgB,GAErD,OAAO;CAER,OAAO;AACR;AAEA,SAAS,sCAAsC,OAAiC;CAC/E,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK,UAAU,MAAM,KAAK;AAC9E;AAEA,SAAgB,uCACf,OACA,UAKI,CAAC,GAC8B;CACnC,MAAM,SAAS,QAAQ,UAAU,0BAA0B;CAC3D,MAAM,MAAM,QAAQ,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;CACzD,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,sCACL,QAAQ,uCACR;CACD,MAAM,kDAAkC,IAAI,IAG1C;CACF,MAAM,uCAAuC,YAAoB;EAChE,IAAI,WAAW,gCAAgC,IAAI,OAAO;EAC1D,IAAI,CAAC,UAAU;GACd,WAAW,oCAAoC;IAC9C;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,gCAAgC,IAAI,SAAS,QAAQ;EACtD;EACA,OAAO;CACR;CACA,MAAM,sCAAsB,IAAI,IAW9B;CACF,MAAM,UAAU,YAAoB,mCAAmC,OAAO,OAAO;CACrF,MAAM,sBAAsB,YAAoB;EAC/C,MAAM,WAAW,OAAO,OAAO;EAC/B,MAAM,YAAY,OAAO,oBAAoB,KAAK;EAClD,MAAM,cAAc,OAAO,4BAA4B,KAAK;EAC5D,IAAI,CAAC,aAAa,CAAC,aAAa,MAAM,IAAI,MAAM,gCAAgC;EAChF,IAAI,CAAC,OAAO,sBAAsB,SAAS,SAAS,OAAO,GAC1D,MAAM,IAAI,MAAM,gCAAgC;EAEjD,IAAI;GACH,IAAI,aAAa,SAAS,aAAa,MAAM,aAAa,SAAS,GAClE,MAAM,IAAI,MAAM,gCAAgC;EAElD,QAAQ;GACP,MAAM,IAAI,MAAM,gCAAgC;EACjD;EACA,OAAO;GACN,GAAG;GACH;GACA;EACD;CACD;CACA,OAAO;EACN;EACA,UAAU,OAAO,EAAE,cAAc;GAChC,MAAM,gBAAgB,mBAAmB,OAAO;GAUhD,MAAM,uBAAsB,MATF,sCAAsC;IAC/D,SAAS,cAAc;IACvB;IACA,gBAAgB;IAChB,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC,CAAC,CAAC,YAAY;IACd,MAAM,IAAI,MAAM,qCAAqC;GACtD,CAAC,EAAA,CACuC,KAAK,eAAe;IAC3D,IACC,OAAO,WAAW,cAAc,YAC/B,WAAW,WAAW,YAAY,WAAW,WAAW,WAEzD,MAAM,IAAI,MAAM,mCAAmC;IAEpD,MAAM,SAA+B,WAAW;IAChD,OAAO;KACN,UAAU,WAAW;KACrB;KACA,iBAAiB,WAAW;IAC7B;GACD,CAAC;GACD,OAAO;IACN,eAAe;IACf;IACA,sBAAsB,cAAc;IACpC,aAAa,mCACZ,SACA,cAAc,iBACd,mBACD;IACA,YAAY,IAAI;IAChB,aAAa;GACd;EACD;EACA,yBAAyB,OAAO,EAAE,cAAc;GAC/C,MAAM,gBAAgB,mBAAmB,OAAO;GAChD,MAAM,aAAa,IAAI;GACvB,MAAM,cAAc,MAAM,YAAY;IACrC,SAAS,cAAc;IACvB,iBAAiB;IACjB,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC,CAAC,CAAC,YAAY;IACd,MAAM,IAAI,MAAM,qCAAqC;GACtD,CAAC;GACD,MAAM,6BAA6B,IAAI,IACtC,YAAY,KAAK,eAAe,CAC/B,WAAW,WACX,2CAA2C,YAAY,UAAU,CAClE,CAAC,CACF;GACA,MAAM,SAAS,YAAY,KAAK,eAAe;IAC9C,IACC,WAAW,aAAa,cAAc,WACtC,CAAC,sCAAsC,WAAW,SAAS,KAC3D,CAAC,sCAAsC,WAAW,UAAU,KAC5D,CAAC,sCAAsC,WAAW,WAAW,KAC7D,qBAAqB,WAAW,UAAU,MAAM,WAAW,eAC1D,WAAW,YAAY,KAAK,WAAW,YAAY,KACnD,WAAW,gBAAgB,QAC3B,CAAC,sCAAsC,WAAW,WAAW,GAE9D,MAAM,IAAI,MAAM,mCAAmC;IAEpD,OAAO;KACN,UAAU,WAAW;KACrB,YAAY,WAAW;KACvB,WAAW,WAAW;KACtB,aAAa,WAAW;KACxB,SAAS,WAAW,YAAY;IACjC;GACD,CAAC;GACD,oBAAoB,IACnB,SACA,IAAI,IACH,OAAO,SAAS,eACf,WAAW,WAAW,WAAW,eAAe,OAC7C,CACA,CACC,WAAW,UACX;IACC,YAAY,WAAW;IACvB,WAAW,WAAW;IACtB,aAAa,WAAW;IACxB,+BACC,2BAA2B,IAAI,WAAW,QAAQ,KAAK;GACzD,CACD,CACD,IACC,CAAC,CACL,CACD,CACD;GACA,OAAO;EACR;EACA,iBAAiB,OAAO,EAAE,UAAU,cAAc;GACjD,IAAI,aAAa,MAAM,UAAU,OAAO;GAGxC,MAAM,gBAAgB,mBAAmB,OAAO;GAChD,MAAM,aAAa,oBAAoB,IAAI,OAAO,CAAC,EAAE,IAAI,QAAQ;GACjE,IAAI,CAAC,YAAY,OAAO;GACxB,MAAM,OAAO,MAAM,GACjB,QAAQ,gFAAgF,CAAC,CACzF,IAAI,QAAQ;GAGd,IAAI,MAAM;IACT,MAAM,gBAAgB,OAAO,KAAK,cAAc,EAAE,CAAC,CAAC,KAAK;IACzD,MAAM,kBACL,OAAO,KAAK,sBAAsB,EAAE,CAAC,CAAC,KAAK,MAC1C,gBAAgB,qBAAqB,aAAa,IAAI;IACxD,KACE,mBAAmB,mBACnB,oBAAoB,WAAW,eAC9B,iBAAiB,kBAAkB,WAAW,YAEhD,OAAO;GAET;GACA,MAAM,WAAW,MAAM,6BAA6B,OAAO,UAAU;IACpE,QAAQ;IACR,eAAe;GAChB,CAAC;GACD,IAAI,aAAa,gBAAgB,OAAO;GACxC,MAAM,eAAe,KAAK,MAAM,IAAI,CAAC;GACrC,IACC,WAAW,iCAAiC,QAC5C,CAAC,OAAO,SAAS,YAAY,KAC7B,WAAW,iCAAiC,cAE5C,OAAO;GAQR,QAAO,MAHgB,oCAAoC,cAAc,OAAO,CAAC,CAAC,YAC3E,CAAC,CACR,EAAA,CACgB,MACd,WACA,OAAO,aAAa,cAAc,WAClC,OAAO,oBAAoB,YAC3B,OAAO,uBAAuB,WAAW,cACzC,OAAO,qBAAqB,WAAW,aACvC,OAAO,sBAAsB,WAAW,WAC1C,IACG,cACA;EACJ;EACA,QAAQ,OAAO,UAA4D;GAC1E,MAAM,gBAAgB,mBAAmB,MAAM,OAAO;GACtD,MAAM,uCAAuC;IAC5C,UAAU,MAAM;IAChB,SAAS,cAAc;IACvB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC;GACD,OAAO;IACN,UAAU,MAAM;IAChB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,QAAQ;GACT;EACD;EACA,OAAO,OAAO,UAA4D;GACzE,MAAM,gBAAgB,mBAAmB,MAAM,OAAO;GACtD,MAAM,aAAa,MAAM,sCAAsC;IAC9D,UAAU,MAAM;IAChB,SAAS,cAAc;IACvB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,MAAM,MAAM;IACZ,eAAe,cAAc;IAC7B,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC;GACD,OAAO;IACN,UAAU,MAAM;IAChB,SAAS,WAAW;IACpB,UAAU,WAAW;IACrB,QAAQ,WAAW,WAAW,WAAW,WAAW;GACrD;EACD;EACA,SAAS,OAAO,EAAE,cAAc;GAC/B,MAAM,WAAW,OAAO,OAAO;GAM/B,KADc,MAJU,sCAAsC,MAAM,IAAI,QAAQ;IAC/E,SAAS,YAAY;IACrB,QAAQ,MAAM;GACf,CAAC,EAAA,CACuB,OAAO,MAAM,SAAS,KAAK,YAAY,SAAS,OACpE,CAAA,EAAO,WAAW,aAAa,MAAM,IAAI,MAAM,gCAAgC;GACnF,MAAM,sCAAsC,OAAO,MAAM;EAC1D;CACD;AACD;AAeA,eAAsB,iCACrB,OACA,UAOI,CAAC,GAC6C;CAClD,MAAM,QAAQ,KAAK,IAClB,GACA,KAAK,IACJ,KAAK,MAAM,QAAQ,SAAS,0CAA0C,GACtE,sCACD,CACD;CACA,MAAM,iBAAiB,QAAQ,uBAAO,IAAI,KAAK;CAC/C,MAAM,YAAY,KAAK,IACtB,GACA,KAAK,MAAM,QAAQ,aAAa,uCAAuC,CACxE;CACA,MAAM,cAAc,IAAI,KAAK,eAAe,QAAQ,IAAI,SAAS,CAAC,CAAC,YAAY;CAC/E,MAAM,OAAO,MAAM,GACjB,QACA;;;;;;;;;;;;;YAcD,CAAC,CACA,IAAI,aAAa,KAAK;CACxB,MAAM,UAAU,QAAQ,WAAW,uCAAuC,KAAK;CAC/E,MAAM,mBAAmB,QAAQ,oBAAoB;CACrD,MAAM,SAAiD;EACtD,WAAW;EACX,QAAQ;EACR,SAAS;EACT,WAAW;EACX,QAAQ;EACR,OAAO,CAAC;CACT;CACA,KAAK,MAAM,OAAO,MAAM;EACvB,OAAO,aAAa;EACpB,IAAI;GACH,MAAM,UAAU,MAAM,iBACrB,MAAM,IACN;IACC,0BAA0B,IAAI;IAC9B,YACC,QAAQ,cAAc,gCAAgC,MAAM,YAAY,QAAQ;GAClF,GACA,OACD;GACA,IAAI,QAAQ,WAAW,UAAU,OAAO,UAAU;QAC7C,IAAI,QAAQ,WAAW,mBAAmB,OAAO,aAAa;QAC9D,OAAO,WAAW;GACvB,OAAO,MAAM,KAAK;IACjB,0BAA0B,IAAI;IAC9B,QAAQ,QAAQ;IAChB,eAAe,QAAQ;GACxB,CAAC;EACF,QAAQ;GACP,OAAO,UAAU;GACjB,OAAO,MAAM,KAAK;IACjB,0BAA0B,IAAI;IAC9B,QAAQ;IACR,eAAe;GAChB,CAAC;EACF;CACD;CACA,OAAO;AACR;AAqBA,SAAS,yBACR,WACyC;CACzC,IAAI,CAAC,WAAW,OAAO;CACvB,IAAI,UAAU,iBAAiB,gCAAgC,IAAI,UAAU,aAAa,GACzF,OAAO;CAER,IAAI,UAAU,iBAAiB,UAAU,mBAAmB,eAC3D,OAAO;CAER,IAAI,UAAU,mBAAmB,UAAU,OAAO;CAClD,IAAI,UAAU,mBAAmB,YAAY,OAAO;CACpD,OAAO;AACR;AAEA,SAAS,wBAAwB,OAG/B;CACD,IAAI,UAAU,UACb,OAAO;EACN,OAAO;EACP,aAAa;CACd;CAED,IAAI,UAAU,aACb,OAAO;EACN,OAAO;EACP,aAAa;CACd;CAED,IAAI,UAAU,WACb,OAAO;EACN,OAAO;EACP,aACC;CACF;CAED,IAAI,UAAU,mBACb,OAAO;EACN,OAAO;EACP,aACC;CACF;CAED,OAAO;EACN,OAAO;EACP,aAAa;CACd;AACD;AAEA,SAAgB,wCACf,OACyC;CAUzC,OAAO;EACN,SAAS;EACT,OAVA,MAAM,GACJ,QACA;;yCAGD,CAAC,CACA,IAAI,CAAC,CACN,KAAK,QAAQ,IAAI,0BAGX,CAAA,CAAW,KAAK,6BAA6B;GACnD,MAAM,QAAQ,yBACb,iCAAiC,MAAM,IAAI,wBAAwB,CACpE;GACA,OAAO;IACN;IACA;IACA,GAAG,wBAAwB,KAAK;IAChC,0BAA0B;IAC1B,mBAAmB;GACpB;EACD,CAAC;CACF;AACD;AAEA,SAAS,0BAEP,MAAgB;CACjB,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM;EAC/B,MAAM,QAAQ,EAAE,cAAc,EAAE;EAChC,MAAM,QAAQ,EAAE,cAAc,EAAE;EAChC,IAAI,UAAU,OAAO,OAAO,MAAM,cAAc,KAAK;EACrD,OAAO,EAAE,KAAK,cAAc,EAAE,IAAI;CACnC,CAAC;AACF;AAEA,SAAS,yBACR,MACA,iBACiC;CACjC,OAAO,0BACN,KAAK,QAAQ,QAAQ;EAAC;EAAW;EAAW;CAAQ,CAAC,CAAC,SAAS,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC,CACzF,CAAC,CAAC,KAAK,SAAS;EACf,MAAM,IAAI;EACV,OAAO,IAAI;EACX,QAAQ,IAAI;EACZ,UAAU,IAAI;EACd,GAAI,kBACD;GACA,SAAS,IAAI;GACb,OAAO,IAAI;GACX,UAAU,IAAI;EACf,IACC,CAAC;CACL,EAAE;AACH;AAEA,SAAS,+BACR,aACA,iBAC2B;CAC3B,IAAI,mBAAmB,CAAC,YAAY,iBACnC,OAAO;CAER,MAAM,UACL,YAAY,UAAU,YACnB,uCACA,YAAY,UAAU,WACrB,mCACA,YAAY,UAAU,aACrB,+CACA,YAAY;CAClB,OAAO;EACN,GAAG;EACH;EACA,iBAAiB;GAChB,GAAG,YAAY;GACf,SAAS;GACT,OAAO;EACR;CACD;AACD;AAEA,SAAS,cAAkC;CAC1C,OAAO,QAAQ,IAAI,kBAAkB,KAAK,KAAK,KAAA;AAChD;;;AAIA,SAAS,oBAAoB,OAAmC;CAK/D,QAJmB,SAAS,GAAA,CAC1B,QAAQ,oBAAoB,EAAE,CAAC,CAC/B,MAAM,GAAG,EAAE,CAAC,CACZ,KACK,KAAa;AACrB;AAEA,SAAS,SAAS,MAAc,UAA0B;CACzD,MAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,SAAS,IAAI,EAAE;CACzD,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AACzC;AAEA,IAAM,sBAAsB,SAAS,+BAA+B,OAAS;AAC7E,IAAM,eAAe,SAAS,wBAAwB,GAAI;AAE1D,eAAe,wBAAwB,SAAkB,UAA0C;CAClG,MAAM,gBAAgB,OAAO,SAAS,QAAQ,QAAQ,IAAI,gBAAgB,KAAK,IAAI,EAAE;CACrF,IAAI,OAAO,SAAS,aAAa,KAAK,gBAAgB,UACrD,OAAO;CAER,MAAM,SAAS,QAAQ;CACvB,IAAI,CAAC,QAAQ,OAAO,OAAO,MAAM,CAAC;CAClC,MAAM,SAAS,OAAO,UAAU;CAChC,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CACZ,IAAI;EACH,OAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,IAAI,CAAC,OAAO;GACZ,SAAS,MAAM;GACf,IAAI,QAAQ,UAAU;IACrB,MAAM,OAAO,OAAO;IACpB,OAAO;GACR;GACA,OAAO,KAAK,KAAK;EAClB;CACD,UAAU;EACT,OAAO,YAAY;CACpB;CACA,OAAO,OAAO,OAAO,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC;AAC/D;AAEA,IAAM,sBACL;AAGD,SAAS,cAAc,KAAqB;CAC3C,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,OAAO,OAAO,SAAS,GAAG,OAAO,WAAW,OAAO,WAAW,OAAO;AACtE;AAEA,SAAS,sBAA8C;CACtD,OAAO,EAAE,OAAO,eAAe;AAChC;AAEA,IAAM,8BAA8B;AAKpC,IAAM,uCAAuC;AAE7C,SAAS,4BAA4B,GAAG,SAAqC;CAC5E,MAAM,SAAS,QAAQ,MACrB,cAAc,cAAc,wBAAwB,cAAc,qBACpE;CACA,IAAI,QAAQ,QAAQ,KAAK,mCAAmC,QAAQ;AACrE;AAEA,SAAS,aAAa,KAAuB;CAC5C,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU,OAAO;CAC5C,MAAM,OAAO,UAAU,MAAM,OAAQ,IAA2B,QAAQ,EAAE,IAAI;CAC9E,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;CACrD,OAAO,SAAS,iBAAiB,QAAQ,SAAS,oBAAoB;AACvE;AAEA,SAAS,oBACR,OACA,UACA,OACA,WACwB;CACxB,IAAI;EACH,IAAI,CAAC,YAAY,MAAM,IAAI,UAAU,OAAO,SAAS,GACpD,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAgB;EAAS;CAEvD,SAAS,KAAK;EACb,IAAI,aAAa,GAAG,GACnB,OAAO;GAAE,IAAI;GAAO,QAAQ;GAA6B;EAAS;EAEnE,MAAM;CACP;CAEA,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,wBAAwB,IAAI,GAAI,EAAA,CAAE,YAAY;CACnF,IAAI;EACH,cAAc,MAAM,IAAI,MAAM;CAC/B,SAAS,KAAK;EACb,IAAI,CAAC,aAAa,GAAG,GAAG,MAAM;CAG/B;CACA,OAAO;AACR;AAEA,SAAS,oBAAoB,MAA+B;CAC3D,OAAO,CAAC,KAAK,MAAM,KAAK,WAAW;AACpC;AAEA,SAAS,0BAA0B,GAAY;CAC9C,EAAE,OAAO,eAAe,GAAG;CAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;AAC1D;AAEA,SAAS,iCACR,SACA,MACA,SAM8B;CAC9B,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,QAAQ,QAAQ,OAAO,kBAAkB,KAAK;CACpD,MAAM,kBAAkB,QAAQ,OAAO,sBAAsB,KAAK;CAClE,MAAM,kBAAkB,QAAQ,OAAO,qBAAqB;CAC5D,MAAM,wBAAwB,QAAQ,OAAO,qBAAqB;CAClE,MAAM,oBAAoB,oBAAoB,KAAA,KAAa,0BAA0B,KAAA;CACrF,MAAM,SAAS,0BAA0B;EACxC,QAAQ,QAAQ;EAChB,eAAe,cAAc,QAAQ,GAAG;EACxC,WAAW;EACX;EACA;EACA,aAAa;EACb,qBAAqB,QAAQ;EAC7B,WAAW;EACX,WAAW,QAAQ;CACpB,CAAC;CACD,IAAI,qBAAqB,OAAO,WAAW,UAC1C,OAAO;EAAE,IAAI;EAAO,QAAQ;CAA2B;CAExD,IAAI,OAAO,WAAW,WACrB,OAAO;EACN,IAAI;EACJ,QAAQ,OAAO,WAAW,uBAAuB,OAAO,SAAS;CAClE;CAaD,IAAI,CAVgB,gBAAgB;EACnC,QAAQ,QAAQ;EAChB,eAAe,cAAc,QAAQ,GAAG;EACxC,WAAW;EACX;EACA;EACA,WAAW;EACX,WAAW,QAAQ;EACnB,UAAU,QAAQ;CACnB,CACK,GAAa,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAoB;CAClE,IACC,OAAO,WAAW,aACjB,QAAQ,0BAA0B,MAAM,sCAEzC,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAsB;CAEnD,OAAO;EAAE,IAAI;EAAM,SAAS,OAAO,WAAW,UAAU,IAAI;CAAE;AAC/D;AAEA,SAAS,iCACR,OACA,UACA,SACwB;CACxB,IAAI;EAEH,IAAI,CADa,4CAA4C,MAAM,IAAI,UAAU,OAC5E,GACa;OAAA,MAAM,GACrB,QACA;;;kDAID,CAAC,CACA,MAAM,CAAC,CACP,IAAI,QACF,MAAa,KAAA,GAAW,OAAO;IAAE,IAAI;IAAO,QAAQ;IAAgB;GAAS;EAAA;EAElF,OAAO;CACR,SAAS,KAAK;EACb,IAAI,aAAa,GAAG,GACnB,OAAO;GAAE,IAAI;GAAO,QAAQ;GAA6B;EAAS;EAEnE,MAAM;CACP;AACD;AAEA,SAAS,qBACR,OACA,SACA,MACiB;CACjB,MAAM,YAAY,QAAQ,OAAO,mBAAmB,KAAK,GAAA,CAAI,KAAK;CAClE,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,QAAQ,QAAQ,OAAO,kBAAkB,KAAK;CACpD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,OAC7C,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmB;CAAS;CAGzD,MAAM,UAAU,MAAM,GACpB,QACA;;;;gDAKD,CAAC,CACA,IAAI,QAAQ;CAOd,IAAI,CAAC,SACJ,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAgB;CAAS;CAGtD,MAAM,oBAAoB,OAAO,QAAQ,sBAAsB,EAAE,CAAC,CAAC,KAAK;CACxE,MAAM,YAAY,OAAO,QAAQ,cAAc,EAAE,CAAC,CAAC,KAAK;CACxD,IAAI,CAAC,qBAAqB,CAAC,WAC1B,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA0B;CAAS;CAEhE,IAAI,qBAAqB,SAAS,MAAM,mBACvC,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAwB;CAAS;CAG9D,IAAI;CACJ,IAAI;EACH,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;EACjF,eAAe,iCAAiC,SAAS,MAAM;GAC9D;GACA;GACA,qBAAqB;GACrB,wBAAwB,QAAQ;EACjC,CAAC;CACF,QAAQ;EACP,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAgC;EAAS;CACtE;CACA,IAAI,CAAC,aAAa,IACjB,OAAO;EAAE,IAAI;EAAO,QAAQ,aAAa;EAAQ;CAAS;CAI3D,MAAM,cAAc,oBAAoB,OAAO,UAAU,wBADvC,IAAI,KAAK,EAAA,CAAE,YACmC,CAAS;CACzE,IAAI,aAAa,OAAO;CACxB,IAAI,aAAa,YAAY,sCAAsC;EAClE,MAAM,gBAAgB,iCAAiC,OAAO,UAAU,aAAa,OAAO;EAC5F,IAAI,eAAe,OAAO;CAC3B;CACA,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAM;CAAS;AAC3C;AAEA,eAAe,+BACd,OACA,SACA,MAC0B;CAC1B,MAAM,WAAW,QAAQ,OAAO,2BAA2B,KAAK,GAAA,CAAI,KAAK;CACzE,MAAM,YAAY,QAAQ,OAAO,mBAAmB,KAAK,GAAA,CAAI,KAAK;CAClE,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,QAAQ,QAAQ,OAAO,kBAAkB,KAAK;CACpD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,OACzD,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAGzE,MAAM,SAAS,0BAA0B;CACzC,IAAI,CAAC,OAAO,oBACX,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA8C;CAAS;CAGpF,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,IAAI;CACJ,IAAI;EACH,IAAI,UAA0C;EAC9C,IAAI,OAAO,4BAA4B;GACtC,MAAM,CAAC,QAAQ,gBAAgB,MAAM,YACpC,OACA,GAAG,aAAa,OAAO,kBAAkB,EAAE,6BAA6B,mBAAmB,OAAO,KAClG;IACC,SAAS,EAAE,+BAA+B,OAAO,2BAA2B;IAC5E,UAAU,KAAK,IAAI,GAAG,OAAO,uBAAuB;GACrD,CACD;GACA,IAAI,WAAW,KAAK,UAAU;EAC/B,OACC,KAAK,MAAM,WAAW,OAAO,uBAAuB;GACnD,MAAM,YAAY,GAAG,aAAa,OAAO,kBAAkB,EAAE,uBAAuB,mBAAmB,OAAO,EAAE,YAAY,mBAAmB,OAAO;GACtJ,MAAM,CAAC,QAAQ,iBAAiB,MAAM,YAAY,OAAO,WAAW;IACnE,SAAS,iBAAiB;KACzB,UAAU;KACV,QAAQ,MAAM;KACd,QAAQ;KACR,KAAK;KACL,WAAW,OAAO,MAAM,CAAC;KACzB,SAAS,YAAY;IACtB,CAAC;IACD,UAAU,KAAK,IAAI,GAAG,OAAO,uBAAuB;GACrD,CAAC;GACD,IAAI,WAAW,KAAK;IACnB,UAAU;IACV;GACD;EACD;EAED,IAAI,CAAC,SAAS,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAiC;EAAS;EACpF,eAAe;CAChB,QAAQ;EACP,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAiC;EAAS;CACvE;CAEA,MAAM,QAAQ,aAAa;CAC3B,MAAM,mBAAmB,aAAa;CACtC,IAAI,CAAC,SAAS,CAAC,kBACd,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAEzE,IACC,OAAO,sBAAsB,SAAS,KACtC,CAAC,OAAO,sBAAsB,SAAS,OAAO,MAAM,QAAQ,CAAC,GAE7D,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAkC;CAAS;CAExE,IAAI,MAAM,YAAY,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA2B;CAAS;CACtF,IAAI,OAAO,iBAAiB,SAAS,MAAM,OAAO,MAAM,gBAAgB,GACvE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA8C;CAAS;CAEpF,IAAI,OAAO,iBAAiB,QAAQ,MAAM,OAAO,MAAM,QAAQ,GAC9D,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAkC;CAAS;CAExE,IAAI,OAAO,iBAAiB,OAAO,MAAM,GACxC,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAEzE,MAAM,kBAAkB,OAAO,iBAAiB,cAAc,EAAE,CAAC,CAAC,KAAK;CACvE,MAAM,oBAAoB,OAAO,iBAAiB,eAAe,EAAE,CAAC,CAAC,KAAK;CAC1E,IAAI,CAAC,mBAAmB,qBAAqB,eAAe,MAAM,mBACjE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA2C;CAAS;CAEjF,IAAI,MAAM,qBAAqB,UAC9B,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAEzE,IAAI,MAAM,mBAAmB,eAC5B,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAiC;CAAS;CAEvE,IAAI,IAAI,KAAK,MAAM,UAAU,qBAAK,IAAI,KAAK,GAC1C,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA2B;CAAS;CAGjE,MAAM,eAAe,MAAM,GACzB,QACA;oEAED,CAAC,CACA,IAAI,QAAQ;CACd,IAAI;CACJ,IAAI;EACH,wBAAwB,iCAAiC,SAAS,MAAM;GACvE;GACA,WAAW;GACX,qBAAqB;GACrB,wBAAwB,cAAc,6CAA6C;EACpF,CAAC;CACF,QAAQ;EACP,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAgD;EAAS;CACtF;CACA,IAAI,CAAC,sBAAsB,IAC1B,OAAO;EAAE,IAAI;EAAO,QAAQ,sBAAsB;EAAQ;CAAS;CAEpE,IAAI,CAAC,6BAA6B,MAAM,IAAI,UAAU,iBAAiB,iBAAiB,GACvF,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAuC;CAAS;CAI7E,MAAM,cAAc,oBAAoB,OAAO,UAAU,wBADvC,IAAI,KAAK,EAAA,CAAE,YACmC,CAAS;CACzE,IAAI,aAAa,OAAO;CACxB,oBAAoB,MAAM,IAAI,UAAU,CAAC,GAAG;EAC3C,MAAM,OAAO,iBAAiB,gBAAgB,EAAE,CAAC,CAAC,KAAK,KAAK,KAAA;EAC5D,mBAAmB;EACnB,WAAW;EACX,cAAc;CACf,CAAC;CACD,IAAI,sBAAsB,YAAY,sCAAsC;EAC3E,MAAM,gBAAgB,iCACrB,OACA,UACA,sBAAsB,OACvB;EACA,IAAI,eAAe,OAAO;CAC3B;CACA,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAM;CAAS;AAC3C;AAEA,SAAS,cAAc,OAA0B;CAChD,IAAI,SAAS,MAAM,OAAO,CAAC;CAC3B,IAAI,OAAO,UAAU,UACpB,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,KAAK;EAC/B,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC;EACpC,OAAO,OAAO,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;CACxE,QAAQ;EACP,OAAO,CAAC;CACT;CAED,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;AACvE;AAEA,SAAS,uBACR,OACA,cAC2C;CAC3C,MAAM,eAAe,0BAA0B;CAC/C,MAAM,MAAM,MAAM,GAChB,QACA,sGACD,CAAC,CACA,IAAI,YAAY;CAGlB,IAAI,CAAC,KACJ,OAAO;EACN,SAAS,aAAa;EACtB,SAAS,aAAa;CACvB;CAGD,IAAI,EADgB,IAAI,yBAAyB,QAAQ,IAAI,yBAAyB,OAErF,OAAO;EACN,SAAS,aAAa;EACtB,SAAS,aAAa;CACvB;CAED,OAAO;EACN,SAAS,cAAc,IAAI,qBAAqB;EAChD,SAAS,cAAc,IAAI,qBAAqB;CACjD;AACD;AAEA,SAAS,oBACR,KACA,WAC0B;CAC1B,OAAO;EACN,SAAS,aAAa,IAAI,qBAAsC;EAChE,SAAS,aAAa,IAAI,qBAAsC;EAChE,mBACC,WAAW,WAAW,aAAa,IAAI,qBAAsC;EAC9E,mBACC,WAAW,WAAW,aAAa,IAAI,qBAAsC;EAC9E,iBAAiB,IAAI,yBAAyB,QAAQ,IAAI,yBAAyB;CACpF;AACD;AAEA,SAAS,mBAAmB,OAA+B;CAE1D,OADa,OAAO,SAAS,EAAE,CAAC,CAAC,KAC1B,KAAQ;AAChB;AAEA,SAAS,qBAAqB,OAAoB,cAAiD;CAClG,MAAM,WAAW,aAAa,KAAK;CACnC,IAAI,CAAC,UAAU,OAAO,CAAC;CAwBvB,OAvBa,MAAM,GACjB,QACA;;;;;;;;;;;;;;;;;;yBAmBD,CAAC,CACA,IAAI,QACC,CAAA,CAAK,KAAK,SAAS;EACzB,UAAU,OAAO,IAAI,YAAY,EAAE;EACnC,OAAO,OAAO,IAAI,SAAS,IAAI,YAAY,EAAE;EAC7C,MAAM,OAAO,IAAI,QAAQ,MAAM;EAC/B,gBAAgB,OAAO,IAAI,kBAAkB,OAAO;EACpD,gBAAgB,mBAAmB,IAAI,cAAc;EACrD,UAAU,mBAAmB,IAAI,QAAQ;EACzC,MAAM,OAAO,IAAI,QAAQ,QAAQ;EACjC,kBAAkB,OAAO,IAAI,oBAAoB,CAAC;EAClD,YAAY,mBAAmB,IAAI,UAAU;CAC9C,EAAE;AACH;AAEA,SAAS,uBAAuB,OAA0B;CACzD,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;CACtC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CAMnC,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;EAAE,UAAU;EAAG,YAAY;CAAI,CAAC,CAAC,CACrC,MAAM,IAAI,GAAG,OAAO,OAAO,UAAU,CAAC,GAAG,GAAG,OAAO,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC,CAAC,CACpF,IAAI;CACN,MAAM,WAAW,EACf,OAAO;EAAE,UAAU,OAAO,OAAO;EAAU,UAAU,OAAO,OAAO;CAAS,CAAC,CAAC,CAC9E,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC,CAChD,IAAI;CACN,IAAI,UAAU;EAKb,IAAI,SAAS,aAAa,GACzB,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;GAAE,UAAU;GAAG,YAAY;EAAI,CAAC,CAAC,CACrC,MAAM,GAAG,OAAO,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC,CAChD,IAAI;EAEP;CACD;CACA,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,OAAO;EACP,UAAU,MAAM;EAChB,cAAc,MAAM;EACpB,UAAU;EACV,QAAQ;EACR,sBAAsB;EACtB,YAAY;EACZ,YAAY;CACb,CAAC,CAAC,CACD,IAAI;AACP;AAEA,SAAS,0BAA0B,OAA4B;CAC9D,MAAM,WAAW,gCAAgC,KAAK;CACtD,uBAAuB,KAAK;CAC5B,OAAO;AACR;AAEA,SAAS,gCAAgC,OAA4B;CACpE,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CAC5E,MAAM,2BAA2B,QAAQ;CACzC,OAAO;AACR;AAEA,SAAS,2BAA2B,OAAoB,SAAgC;CACvF,MAAM,OAAO,MAAM,GACjB,QAAQ,uDAAuD,CAAC,CAChE,IAAI;CACN,KAAK,MAAM,OAAO,MAEjB,IADkB,aAAa,IAAI,cAC/B,CAAA,CAAU,SAAS,OAAO,GAAG,OAAO,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK,KAAK;CAEpF,OAAO;AACR;AAEA,SAAS,wBAAwB,OAAoB,gBAAgC;CACpF,MAAM,WAAW,OAAO,kBAAkB,EAAE,CAAC,CAAC,KAAK;CACnD,IAAI,CAAC,YAAY,aAAa,aAAa,aAAa,MAAM,UAAU,OAAO;CAC/E,MAAM,sBAAsB,YAAY,MAAM;CAC9C,MAAM,SAAS,MAAM,GACnB,QACA;;;;;;;;;;;;;;;;;;;;;;;;;;UA2BD,CAAC,CACA,IACA,MAAM,SACN,MAAM,kBACN,qBACA,UACA,MAAM,SACN,gCACA,0BACD;CACD,OAAO,OAAO,OAAO,WAAW,CAAC;AAClC;AAEA,SAAS,wBACR,aACA,UAC0B;CAC1B,IAAI,UAAU,OAAO;CACrB,MAAM,aAAa,MAAM,QAAQ,YAAY,kBAAkB,IAC5D,YAAY,mBAAmB,KAAK,SAAS;EAC7C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;EAC9C,MAAM,SAAS;EACf,MAAM,eAAe,MAAM,QAAQ,OAAO,SAAS,IAAI,OAAO,UAAU,SAAS;EACjF,OAAO;GACN,WAAW,OAAO;GAClB,cAAc,OAAO,gBAAgB;GACrC,QAAQ,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;GACxD,cAAc,OAAO,gBAAgB;GACrC,YAAY,OAAO,cAAc;GACjC,OAAO,QAAQ,OAAO,KAAK;GAC3B,sBAAsB,QAAQ,OAAO,oBAAoB;GACzD,2BAA2B,QAAQ,OAAO,yBAAyB;GACnE,gCAAgC,OAAO,kCAAkC;GACzE,gCAAgC,OAAO,kCAAkC;GACzE,aAAa;GACb,WAAW,CAAC;GACZ,eAAe;EAChB;CACD,CAAC,IACA,CAAC;CACJ,OAAO;EACN,GAAG;EACH,oBAAoB;CACrB;AACD;AA8BA,SAAS,6BAA6B,QAAyD;CAC9F,QAAQ,QAAR;EACC,KAAK,2BACJ,OAAO;EACR,KAAK,4BACJ,OAAO;EACR,KAAK,iBACJ,OAAO;CACT;AACD;AAEA,eAAe,qBACd,OACA,OAiBC;CACD,MAAM,SAAS,0BAA0B;CAGzC,IAAI,sBAAsE;CAC1E,IAAI,CAAC,OAAO,oBACX,sBAAsB;MAChB,IAAI,OAAO,sBAAsB,WAAW,GAClD,sBAAsB;MAChB,IAAI,CAAC,OAAO,aAClB,sBAAsB;CAEvB,IAAI,qBACH,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,QAAQ,6BAA6B,mBAAmB;CACzD;CAED,MAAM,aAAa,MAAM,uBAAuB,OAAO,MAAM;CAC7D,MAAM,mBAAmB,OAAO,MAAM,eAAe,EAAE,CAAC,CAAC,KAAK;CAC9D,MAAM,aAAa,WAAW,QAC5B,SAAS,OAAO,KAAK,aAAa,EAAE,CAAC,CAAC,KAAK,MAAM,MAAM,YACzD;CACA,MAAM,qBAAqB,mBACxB,WAAW,QAAQ,SAAS,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK,MAAM,gBAAgB,IACtF;CACH,MAAM,qBAAqB,IAAI,IAC9B,mBAAmB,KAAK,SAAS,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CACvF;CACA,IAAI,CAAC,oBAAoB,mBAAmB,OAAO,GAClD,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,MAAM,QAAQ,mBAAmB;CACjC,IAAI,CAAC,OACJ,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QAAQ;CACT;CAED,MAAM,YAAY,OAAO,MAAM,cAAc,EAAE,CAAC,CAAC,KAAK;CACtD,MAAM,UAAU,YAAY,KAAK,MAAM,SAAS,KAAK,KAAK,IAAI,IAAI;CAClE,IAAI,MAAM,SAAS,SAClB,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,MAAM,kBAAkB,OAAO,MAAM,eAAe,EAAE,CAAC,CAAC,KAAK;CAC7D,MAAM,gBAAgB,OAAO,MAAM,cAAc,EAAE,CAAC,CAAC,KAAK;CAC1D,MAAM,WAAW,OAAO,MAAM,gBAAgB,EAAE,CAAC,CAAC,KAAK,KAAK;CAC5D,MAAM,gBAAgB,MAAM,QAAQ,MAAM,SAAS,IAChD,MAAM,UAAU,QAAQ,UAA2B,OAAO,UAAU,QAAQ,IAC5E,CAAC;CACJ,IAAI,CAAC,eACJ,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,IAAI,CAAC,mBAAmB,qBAAqB,aAAa,MAAM,iBAC/D,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAGD,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM,IACxC,MAAM,OAAO,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IACtE,CAAC;CACJ,MAAM,gBAAgB,MAAM,QAAQ,MAAM,YAAY,IACnD,MAAM,aAAa,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IAC5E,CAAC;CACJ,IAAI;CACJ,IAAI,MAAM,iBAAiB;EAC1B,IAAI,CAAC,SAAS,SAAS,MAAM,eAAe,GAC3C,OAAO;GACN,IAAI;GACJ,QAAQ;GACR,OAAO;GACP,QACC;EACF;EAED,IAAI,CAAC,cAAc,SAAS,MAAM,eAAe,GAChD,OAAO;GACN,IAAI;GACJ,QAAQ;GACR,OAAO;GACP,QACC;EACF;EAED,UAAU,MAAM;CACjB,OAAO;EACN,IAAI,SAAS,WAAW,GACvB,OAAO;GACN,IAAI;GACJ,QAAQ;GACR,OAAO;GACP,QACC,SAAS,SAAS,IACf,gHACA;EACL;EAED,UAAU,SAAS;CACpB;CACA,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;CACtC,MAAM,WAAW,EACf,OAAO;EACP,gBAAgB,OAAO,UAAU;EACjC,oBAAoB,OAAO,UAAU;EACrC,YAAY,OAAO,UAAU;EAC7B,gBAAgB,OAAO,UAAU;EACjC,yBAAyB,OAAO,UAAU;CAC3C,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,MAAM,YAAY,CAAC,CAAC,CAC9D,IAAI;CACN,MAAM,sBAAsB,OAAO,UAAU,sBAAsB,EAAE,CAAC,CAAC,KAAK;CAC5E,IAAI,YAAY,uBAAuB,wBAAwB,iBAC9D,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,MAAM,2BAA2B;EAChC,IAAI;GACH,MAAM,MAAM,KAAK,MAAM,OAAO,UAAU,kBAAkB,IAAI,CAAC;GAC/D,OAAO,MAAM,QAAQ,GAAG,IACrB,IAAI,QAAQ,UAA2B,OAAO,UAAU,QAAQ,IAChE,CAAC;EACL,QAAQ;GACP,OAAO,CAAC;EACT;CACD,EAAA,CAAG;CACH,MAAM,gBAAgB,KAAK,UAAU,eAAe,eAAe,iBAAiB,CAAC;CACrF,MAAM,oCAAoC,OAAO,QAAQ;EACxD;EACA,mBAAmB,MAAM;EACzB,GAAI,MAAM,4BACP,EAAE,2BAA2B,MAAM,0BAA0B,IAC7D,CAAC;CACL,CAAC;CAOD,MAAM,iBAAiB,OAAO,sBAAsB;CACpD,IAAI;CACJ,IAAI;CACJ,IAAI,CAAC,UAAU;EACd,IAAI,kBAAmC;EACvC,IAAI,kBAAmC;EACvC,IAAI,gBAAgB;GACnB,MAAM,QAAQ,8BAA8B,MAAM,IAAI,gBAAgB,OAAO;GAC7E,IAAI,OAAO,iBAAiB;IAC3B,kBAAkB,MAAM,oBAAoB;IAC5C,kBAAkB,MAAM,oBAAoB;GAC7C;EACD;EACA,MAAM,kBAAkB,MAAM,eAAe;EAC7C,MAAM,kBAAkB,MAAM,eAAe;EAC7C,MAAM,kBAAkB,oBAAoB,KAAA,IAAY,kBAAkB;EAC1E,MAAM,kBAAkB,oBAAoB,KAAA,IAAY,kBAAkB;EAC1E,eAAe,kBAAkB,KAAK,UAAU,eAAe,IAAI;EACnE,eAAe,kBAAkB,KAAK,UAAU,eAAe,IAAI;CACpE;CAEA,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CAqDnC,OApDe,MAAM,GAAG,kBAAkB;EACzC,IAAI,CAAC,UAAU;GACd,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,OAAO;IACP,gBAAgB,MAAM;IACtB,MAAM;IACN,oBAAoB,mBAAmB;IACvC,YAAY;IACZ,gBAAgB;IAChB,uBAAuB,gBAAgB;IACvC,uBAAuB,gBAAgB;IACvC,YAAY;IACZ,cAAc;IACd,+BAA+B;IAC/B,yBAAyB;GAC1B,CAAC,CAAC,CACD,IAAI;GACN,OAAO;IACN,IAAI;IACJ,gBAAgB,MAAM;IACtB,SAAS;IACT,SAAS;IACT,MAAM;IACN,UAAU;GACX;EACD;EACA,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI;GACJ,MAAM;GACN,oBAAoB,mBAAmB,SAAS,sBAAsB;GACtE,YAAY,iBAAiB,SAAS,cAAc;GACpD,gBAAgB;GAChB,cAAc;GAKd,GAAK,SAAyD,0BAC3D,CAAC,IACD;IAAE,yBAAyB;IAAS,+BAA+B;GAAe;EACtF,CAAC,CAAC,CACD,MAAM,GAAG,OAAO,UAAU,gBAAgB,MAAM,YAAY,CAAC,CAAC,CAC9D,IAAI;EACN,OAAO;GACN,IAAI;GACJ,gBAAgB,MAAM;GACtB,SAAS;GACT,SAAS;GACT,MAAM;GACN,UAAU;EACX;CACD,CAAC,CAAC,CACK;AACR;AAEA,SAAS,iBACR,OACA,cACA,eACA,KACA,UAA2E,CAAC,GACiB;CAC7F,MAAM,CAAC,WAAW,WAAW,sCAAsC,MAAM,IAAI,KAAK,cAAc;EAC/F;EACA,kBAAkB,QAAQ;EAC1B,uBAAuB,QAAQ;CAChC,CAAC;CACD,OAAO;EACN;EACA,SAAS,SAAS,iBAAiB;EACnC,eAAe,UAAU,sBAAsB,OAAO,IAAI;CAC3D;AACD;AAMA,SAAS,6BACR,OACA,KACiC;CACjC,IAAI,CAAC,IAAI,qBAAqB,OAAO;CACrC,MAAM,eAAe,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK;CAC3D,MAAM,UAAU,OAAO,IAAI,YAAY,MAAM,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM;CACtE,MAAM,QAAQ,gCAAgC,MAAM,IAAI;EAAE;EAAc;CAAQ,CAAC;CACjF,OAAO;EACN,UAAU,MAAM;EAChB,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,iBAAiB,CAAC,MAAM;CACzB;AACD;;;;;;AAOA,SAAS,WACR,OACA,KACA,UACA,iBACA,uBACA,eAC0B;CAC1B,MAAM,SAAS,OAAO,IAAI,kBAAkB,EAAE;CAC9C,MAAM,YAAY,iBAAiB,IAAI,MAAM,KAAK;EAAE,IAAI;EAAG,KAAK;CAAE;CAClE,MAAM,kBAAkB,uBAAuB,IAAI,MAAM;CACzD,MAAM,YAAY,aAAa,IAAI,cAA+B;CAClE,MAAM,eAAe,0BAA0B,MAAM,IAAI;EACxD,eAAe,iBAAiB;EAChC,cAAc;CACf,CAAC;CACD,OAAO;EACN,gBAAgB,IAAI;EACpB,MAAM,IAAI;EACV,aAAa,WAAW,IAAI,qBAAqB;EACjD,QAAQ,QAAQ,IAAI,kBAAkB;EACtC,WAAW,WAAW,YAAY,CAAC;EACnC,eAAe,UAAU;EACzB,cAAc,IAAI;EAClB,cAAc,IAAI;EAClB,YAAY,WAAW,IAAI,aAAa;EACxC,iBAAiB,IAAI,mBAAmB;EACxC,6BAA6B,IAAI,+BAA+B;EAChE,WAAW,QAAQ,IAAI,UAAU;EACjC,qBAAqB,QAAQ,IAAI,mBAAmB;EACpD,2BAA2B,6BAA6B,OAAO,GAAG;EAClE,UAAU,IAAI,YAAY;EAC1B,oBAAoB,IAAI,sBAAsB;EAC9C,mBAAmB,qBAAqB,OAAO,MAAM;EAKrD,gBAAgB;EAChB,eAAe,EACd,GAAG,oBAAoB,KAAK,uBAAuB,OAAO,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,EAC5F;EACA,YAAY;GAAE,IAAI,UAAU;GAAI,KAAK,UAAU;EAAI;EACnD,kBAAkB;GACjB,OAAO,iBAAiB,SAAS;GACjC,WAAW,iBAAiB,aAAa,CAAC;GAC1C,SAAS,iBAAiB,WAAW;EACtC;EACA,+BACC,OAAO,IAAI,kCAAkC,WAC1C,IAAI,gCACJ;EACJ,yBACC,OAAO,IAAI,4BAA4B,WAAW,IAAI,0BAA0B;CAClF;AACD;AAEA,SAAS,uBAAuB,OAA+B;CAE9D,IAAI,CADS,OAAO,SAAS,EAAE,CAAC,CAAC,KAC5B,GAAM,OAAO;CAClB,OAAO;AACR;AAEA,SAAS,kBACR,KACA,UACA,WAC0B;CAC1B,MAAM,gBAAgB,uBAAuB,IAAI,KAAK;CACtD,OAAO;EACN,GAAG;EACH,OAAO,WAAW,IAAI,QAAQ;EAC9B,gBAAgB,CAAC,YAAY,iBAAiB;EAC9C,QAAQ,cAAc,GAAG;EACzB,SAAS,YAAY,WAAW,SAAS,UAAU,KAAK;CACzD;AACD;AAEA,IAAM,sCAAsC;AAC5C,IAAM,+BAA+B;AAErC,SAAS,4BACR,OACgD;CAChD,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,sCAAsC,GAAI,EAAA,CAAE,YAAY;CAC7F,MAAM,YAAY,gCAAgC,MAAM,IAAI,EAAE,UAAU,OAAO,CAAC;CAChF,MAAM,sBAAM,IAAI,IAA8C;CAC9D,KAAK,MAAM,WAAW,WAAW;EAChC,MAAM,KAAK,OAAO,QAAQ,kBAAkB,EAAE,CAAC,CAAC,KAAK;EACrD,IAAI,CAAC,IAAI;EACT,IAAI,IAAI,IAAI,OAAO;CACpB;CACA,OAAO;AACR;AAEA,SAAS,mBACR,OACA,eACA,UAC0B;CAC1B,MAAM,SAAS,MAAM,GACnB,QACA;;;;;sBAMD,CAAC,CACA,IAAI,iBAAiB,IAAI,iBAAiB,IAAI,sBAAsB;CAGtE,MAAM,QACL,iBAAiB,WACd,8BAA8B,MAAM,IAAI;EACxC;EACA,SAAS;CACV,CAAC,IACA;EAAE,WAAW,CAAC;EAAG,SAAS;EAAG,UAAU;EAAG,cAAc;EAAG,yBAAyB,CAAC;CAAE;CAC3F,MAAM,oBAA4C,CAAC;CACnD,KAAK,MAAM,QAAQ,MAAM,WACxB,kBAAkB,KAAK,WAAW,kBAAkB,KAAK,WAAW,KAAK;CAE1E,MAAM,iBAAiB,OAAO,QAAQ,mBAAmB,CAAC;CAC1D,MAAM,UAAU,OAAO,QAAQ,WAAW,CAAC;CAC3C,MAAM,YAAY,MAAM,UAAU;CAUlC,OAAO;EACN,OAVa,MAAM,eACjB,oBACA,YACC,iBACA,UACC,oBACA,iBACC,sBACA;EAGL,oBAAoB;GACnB,iBAAiB;GACjB;GACA,WAAW,QAAQ,aAAa;EACjC;EACA,iBAAiB;GAChB,SAAS,MAAM;GACf,kBAAkB,WAAW,+BAA+B;GAC5D,cAAc,CAAC,YAAY,CAAC;GAC5B,cAAc,MAAM;GACpB;GACA,qBAAqB;GACrB,UAAU,MAAM;GAChB,OAAO,WAAW,MAAM,UAAU,MAAM,GAAG,EAAE,IAAI,KAAA;EAClD;EACA,UAAU,CAAC;CACZ;AACD;AAEA,SAAS,0BAA0B,OAA6C;CAC/E,MAAM,OAAO,uBAAuB,KAAK;CACzC,MAAM,cAAc,KAAK;CACzB,MAAM,gBAAgB,KAAK,QACzB,SAAS,QACT,IAAI,eAAe,CAAC,WAAW,IAAI,aAAa,WAAW,IAAI,aAAa,SAC7E,IACD;CACA,MAAM,cAAc,MAAM,wBAAwB;CAClD,MAAM,uBAAuB,IAAI,IAChC,2BAA2B,MAAM,IAAI,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,CACxE,UAAU,oBACV,SACD,CAAC,CACF;CACA,MAAM,mCAAmB,IAAI,IAc3B;CACF,KAAK,MAAM,OAAO,MAAM;EACvB,MAAM,WAAW,2BAA2B;GAC3C,KAAK,IAAI;GACT,WAAW,IAAI;GACf,WAAW,IAAI;GACf,SAAS,IAAI;GACb,aAAa,IAAI;EAClB,CAAC;EACD,MAAM,YAAY,qBAAqB,IAAI,SAAS,KAAK;EACzD,MAAM,gBAAgB,WAAW,qBAAqB;EACtD,MAAM,iBACL,iBACA,kBAAkB,0BAClB,kBAAkB,gCACf,gBACA,WAAW;EACf,MAAM,WAAW,iBAAiB,IAAI,SAAS,KAAK;EACpD,MAAM,gBAAgB,YAAY,GAAyC;EAC3E,MAAM,eAAe,IAAI,cAAc;EACvC,IAAI,UAAU;GACb,SAAS,gBAAgB;GACzB,IAAI,eAAe,SAAS,6BAA6B;QACpD,SAAS,2BAA2B;GACzC,IAAI,iBAAiB,CAAC,SAAS,mBAAmB,eAAe,SAAS,kBACzE,SAAS,kBAAkB;GAE5B,IAAI,SAAS,eAAe,SAAS,mCACpC,SAAS,eAAe,KAAK,+BAA+B,KAAK,aAAa,CAAC;GAEhF;EACD;EACA,iBAAiB,IAAI,SAAS,OAAO;GACpC,oBAAoB,SAAS;GAC7B,iBAAiB,SAAS;GAC1B,iBAAiB,SAAS,kBAAkB,IAAI,WAAW,IAAI,OAAO,SAAS;GAC/E,cAAc;GACd,2BAA2B,gBAAgB,IAAI;GAC/C,yBAAyB,gBAAgB,IAAI;GAC7C,iBAAiB;GACjB,gBAAgB,CAAC,+BAA+B,KAAK,aAAa,CAAC;GACnE,oBAAoB,kBAAkB;GACtC,mBAAmB,iBACf,WAAW,qBACb,8GACC;EACJ,CAAC;CACF;CACA,MAAM,kBAAkB,iBAAiB;CACzC,MAAM,SAAS,CAAC,GAAG,iBAAiB,OAAO,CAAC,CAAC,CAAC,MAC5C,MAAM,UACN,MAAM,eAAe,KAAK,iBACzB,MAAM,mBAAmB,GAAA,CAAI,cAAc,KAAK,mBAAmB,EAAE,KACtE,KAAK,mBAAmB,cAAc,MAAM,kBAAkB,CAChE;CACA,MAAM,eAAe,gCAAgC,MAAM,EAAE,CAAC,CAC5D,QACC,UACA,MAAM,aAAa,0BACnB,MAAM,aAAa,6BACrB,CAAC,CACA,KAAK,WAAW;EAChB,gBAAgB,MAAM;EACtB,OAAO,MAAM,SAAS,MAAM;EAC5B,UAAU,MAAM;CACjB,EAAE;CACH,OAAO;EACN,UAAU;EACV,cAAc;EACd,UAAU,cAAc;EACxB,iBAAiB;EACjB;EACA,mBAAmB;EACnB,eAAe;CAChB;AACD;AAuBA,IAAM,oCAAoC;AAC1C,IAAM,8CAA8C;AAepD,SAAS,YAAY,OAAkC,QAAQ,KAAoB;CAClF,MAAM,aAAa,OAAO,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;CACpD,IAAI,CAAC,YAAY,OAAO;CACxB,OAAO,WAAW,SAAS,QAAQ,GAAG,WAAW,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK;AAC3E;AAEA,SAAS,+BACR,KACA,eACiC;CACjC,OAAO;EACN,IAAI,IAAI;EACR,MAAM,IAAI;EACV,OAAO,YAAY,IAAI,OAAO,GAAG,KAAK,UAAU,IAAI;EACpD,cAAc,YAAY,IAAI,SAAS;EACvC,YAAY,IAAI,cAAc;EAC9B,YAAY,IAAI,cAAc;EAC9B,WAAW,gBAAgB,UAAU;EACrC,SAAS,IAAI,WAAW;EACxB,KAAK,IAAI,OAAO;EAChB,YAAY,IAAI,cAAc;CAC/B;AACD;AAEA,SAAS,uBAAuB,OAA+D;CAC9F,OAAO,MAAM,GACX,QACA;;;;;;;;;;;;;;;;;;;;;;;sEAwBD,CAAC,CACA,IACA,6CACA,6BACD;AACF;AAEA,SAAS,oCAAoC,OAKlC;CACV,MAAM,cAAc,MAAM,MAAM,wBAAwB;CACxD,MAAM,UAAU,MAAM,KACpB,KAAK,QAAQ;EACb,MAAM,YAAY,YAAY,GAAyC,IAAI,UAAU;EACrF,OAAO,GAAG,IAAI,GAAG,GAAG,IAAI,OAAO,EAAE,GAAG,IAAI,YAAY,GAAG,GAAG;CAC3D,CAAC,CAAC,CACD,KAAK,CAAC,CACN,KAAK,GAAG;CACV,OAAO,OAAO,KAAK,GAAG,MAAM,kBAAkB,GAAG,MAAM,QAAQ,GAAG,WAAW,MAAM,CAAC,CAAC,SACpF,WACD;AACD;AA4BA,SAAS,iCACR,OACA,mBAC8B;CAmB9B,OAlBa,MAAM,GACjB,QACA;;;;;;;;;;;;;+BAcD,CAAC,CACA,IACK,CAAA,CAAK,QAAQ,QAAQ;EAQ3B,OAPiB,2BAA2B;GAC3C,KAAK,IAAI;GACT,WAAW,IAAI;GACf,WAAW,IAAI;GACf,SAAS,IAAI;GACb,aAAa,IAAI;EAClB,CACO,CAAA,CAAS,UAAU;CAC3B,CAAC;AACF;AAEA,SAAS,+BACR,OACA,MACS;CACT,MAAM,cAAc,MAAM,wBAAwB;CAClD,MAAM,UAAU,KACd,KAAK,QAAQ;EACb,MAAM,YAAY,YAAY,GAAyC,IAAI,UAAU;EACrF,OAAO,GAAG,IAAI,GAAG,GAAG,IAAI,OAAO,EAAE,GAAG;CACrC,CAAC,CAAC,CACD,KAAK,CAAC,CACN,KAAK,GAAG;CACV,OAAO,OAAO,KAAK,SAAS,MAAM,CAAC,CAAC,SAAS,WAAW;AACzD;AAEA,SAAS,oCACR,OACA,OAC0B;CAC1B,IAAI,CAAC,MAAM,kBAAkB,KAAK,GACjC,MAAM,IAAI,MAAM,+CAA+C;CAEhE,MAAM,OAAO,iCAAiC,OAAO,MAAM,iBAAiB;CAC5E,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,MAAM,cAAc,MAAM,wBAAwB;CAClD,MAAM,YAAY,KAAK,QAAQ,QAAQ,YAAY,GAAyC,CAAC;CAC7F,MAAM,oBAAoB,+BAA+B,OAAO,IAAI;CACpE,MAAM,UAAU;EACf,oBAAoB;EACpB,0BAA0B,UAAU;EACpC,yBAAyB,KAAK,SAAS,UAAU;EACjD,oBAAoB,MAAM;CAC3B;CACA,IAAI,CAAC,MAAM,WACV,OAAO;EAAE,WAAW;EAAO,GAAG;CAAQ;CAEvC,IAAI,MAAM,sBAAsB,mBAC/B,MAAM,IAAI,MAAM,gEAAgE;CAEjF,MAAM,GAAG,kBAAkB;EAC1B,KAAK,MAAM,OAAO,WAAW,MAAM,OAAO,IAAI,EAAE;CACjD,CAAC,CAAC,CAAC;CACH,OAAO;EAAE,WAAW;EAAM,wBAAwB,UAAU;EAAQ,GAAG;CAAQ;AAChF;AAEA,SAAS,iCAAiC,OAAoB,SAAuB;CACpF,IAAI,YAAY,wBAAwB;CAcxC,IAAI,CAbQ,MAAM,GAChB,QACA;;;;;;;;YASD,CAAC,CACA,IAAI,SAAS,MAAM,QAChB,GAAK,MAAM,IAAI,MAAM,kDAAkD,SAAS;AACtF;AAEA,SAAS,mCACR,OACA,mBAC4C;CAC5C,OAAO,uBAAuB,KAAK,CAAC,CAAC,QAAQ,QAAQ;EAQpD,OAPiB,2BAA2B;GAC3C,KAAK,IAAI;GACT,WAAW,IAAI;GACf,WAAW,IAAI;GACf,SAAS,IAAI;GACb,aAAa,IAAI;EAClB,CACO,CAAA,CAAS,UAAU;CAC3B,CAAC;AACF;AAEA,SAAS,mCACR,OACA,MAC4C;CAC5C,MAAM,mBAAmB,KAAK,QAAQ,QACrC,MAAM,kBAAkB,GAAyC,CAClE;CACA,IAAI,iBAAiB,WAAW,GAC/B,MAAM,IAAI,MACT,mHACD;CAED,MAAM,cAAc,MAAM,GACxB,QACA;;mBAEgB,iBAAiB,UAAU,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,EAC3D,CAAC,CACA,IAAI,GAAG,iBAAiB,KAAK,QAAQ,IAAI,EAAE,CAAC;CAM9C,MAAM,cAAc,IAAI,IAAI,YAAY,KAAK,QAAQ,CAAC,OAAO,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;CAC3E,KAAK,MAAM,OAAO,kBAAkB;EACnC,MAAM,UAAU,YAAY,IAAI,IAAI,EAAE;EACtC,IACC,SAAS,aAAa,iCACtB,QAAQ,WAAW,KACnB,QAAQ,YAER,MAAM,IAAI,MACT,+EACD;CAEF;CACA,OAAO;AACR;AAEA,SAAS,sCACR,OACA,OACwC;CACxC,IAAI,CAAC,MAAM,kBAAkB,KAAK,GACjC,MAAM,IAAI,MAAM,+CAA+C;CAChE,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,qCAAqC;CAChF,IAAI,MAAM,YAAY,wBACrB,MAAM,IAAI,MAAM,2EAA2E;CAE5F,IAAI,MAAM,YAAY,+BACrB,MAAM,IAAI,MAAM,2EAA2E;CAE5F,MAAM,cAAc,gCAAgC,MAAM,EAAE,CAAC,CAAC,MAC5D,UAAU,MAAM,aAAa,MAAM,OACrC;CACA,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,YAAY,MAAM,QAAQ,iCAAiC;CAC7F,iCAAiC,OAAO,MAAM,OAAO;CACrD,MAAM,OAAO,mCAAmC,OAAO,MAAM,iBAAiB;CAC9E,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,sCAAsC;CAC7E,MAAM,mBAAmB,mCAAmC,OAAO,IAAI;CACvE,MAAM,gBAAgB,CACrB,GAAG,IAAI,IACN,KACE,KAAK,QAAQ,OAAO,IAAI,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACvD,QAAQ,aAAa,YAAY,aAAa,MAAM,QAAQ,CAC/D,CACD,CAAC,CAAC,KAAK;CACP,OAAO;EACN,4BAA4B,cAAc;EAC1C,0BAA0B,cAAc,MAAM,GAAG,CAAC;EAClD,oBAAoB,oCAAoC;GACvD;GACA,SAAS,MAAM;GACf;GACA,mBAAmB,MAAM;EAC1B,CAAC;EACD,cAAc,KAAK;EACnB,2BAA2B,iBAAiB;EAC5C,UAAU,MAAM;EAChB,sBAAsB,KAAK,SAAS,iBAAiB;EACrD,oBAAoB,YAAY,SAAS,YAAY;EACrD,SACC;EACD,oBAAoB,MAAM;CAC3B;AACD;AAEA,SAAS,gCACR,OACA,OAC0B;CAC1B,MAAM,UAAU,sCAAsC,OAAO,KAAK;CAClE,IAAI,MAAM,sBAAsB,QAAQ,oBACvC,MAAM,IAAI,MACT,+EACD;CAED,MAAM,OAAO,mCACZ,OACA,mCAAmC,OAAO,MAAM,iBAAiB,CAClE;CACA,MAAM,GAAG,kBAAkB;EAC1B,KAAK,MAAM,OAAO,MAAM,MAAM,oBAAoB,IAAI,IAAI,MAAM,OAAO;CACxE,CAAC,CAAC,CAAC;CACH,OAAO;EACN,IAAI;EACJ,GAAG;EACH,yBAAyB,KAAK;EAC9B,sBAAsB,0BAA0B,KAAK;CACtD;AACD;AAMA,IAAM,gCAAgC;AAEtC,SAAS,cAAc,OAA8D;CACpF,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,gCAAgC,GAAI,EAAA,CAAE,YAAY;CACvF,MAAM,OAAO,MAAM,GACjB,QACA;;;;;6BAMD,CAAC,CACA,IAAI,MAAM;CAKZ,MAAM,sBAAM,IAAI,IAAyC;CACzD,KAAK,MAAM,OAAO,MAAM;EACvB,MAAM,KAAK,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,IAAI;EACT,IAAI,IAAI,IAAI;GAAE,IAAI,OAAO,IAAI,UAAU,CAAC;GAAG,KAAK,OAAO,IAAI,WAAW,CAAC;EAAE,CAAC;CAC3E;CACA,OAAO;AACR;AAMA,SAAS,YAAY,OAAgB,UAAU,0BAAmC;CACjF,MAAM,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CACrC,IAAI,CAAC,KAAK,OAAO;CACjB,MAAM,aAAa,IAAI,QAAQ,KAAK,QAAQ;CAC5C,MAAM,YAAY,2BAA2B,KAAK,GAAG;CACrD,MAAM,KAAK,IAAI,KAAK,YAAY,aAAa,GAAG,WAAW,OAAO;CAClE,IAAI,OAAO,MAAM,GAAG,QAAQ,CAAC,GAAG,OAAO;CACvC,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG,QAAQ,KAAK;CAC3C,OAAO,QAAQ,KAAK,QAAQ;AAC7B;AAEA,SAAS,WAAW,MAAwD;CAC3E,MAAM,aAAa,KAAK;CACxB,MAAM,aAAa,KAAK;CACxB,MAAM,WAAW,QAAQ,KAAK,SAAS;CAEvC,MAAM,YAAY,YAAY,UAAU;CACxC,MAAM,YAAY,YAAY,UAAU;CAExC,IAAI;CACJ,IAAI,YAAY,EAAE,aAAa,YAAY,YAAY;MAClD,IAAI,UAAU,YAAY;MAC1B,IAAI,aAAa,WAAW,YAAY;MACxC,IAAI,cAAc,YAAY,YAAY;MAC1C,YAAY;CAKjB,OAAO;EACN,aAJkB,WAAW,UAAU,YAAY,OAAO,aAAa,UAAU;EAKjF,aAJkB,YAAY,OAAO,aAAa,UAAU;EAK5D,YAAY;EACZ,OAAO,aAAa;EACpB,cAAc;EACd,cAAc;CACf;AACD;AAEA,SAAS,cAAc,SAA0C;CAChE,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,QAAQ,OAAO,OAAO;CAC1B,OAAO;AACR;AAEA,SAAS,kBAAkB,QAAuD;CACjF,IAAI;EACH,MAAM,MAAM,aAAa,KAAK,QAAQ,MAAM,GAAG,YAAY,GAAG,MAAM;EACpE,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,SAAS,UAC7D,OAAO;GAAE,MAAM,OAAO;GAAM,MAAM,OAAO;EAAK;CAEhD,QAAQ,CAER;CACA,OAAO;AACR;AAEA,IAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCpB,SAAS,yBAAyB,GAAY;CAC7C,MAAM,SAAS,EAAE,IAAI,OAAO,sBAAsB,KAAK;CACvD,OAAO,wBAAwB,uBAAuB,wBAAwB,MAAM,CAAC;AACtF;;;;;;;;AASA,SAAgB,mBAAmB,UAAwB,OAAiC,CAAC,GAAG;CAC/F,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,iBAAiB,KAAK,kBAAkB;CAE9C,SAAS,oBAAoB,GAAY,KAAa,eAAwB;EAC7E,IAAI,CAAC,gBAAgB,OAAO;EAC5B,MAAM,SAAS,EAAE,IAAI,WAAW,SAAS,EAAE,IAAI,WAAW,UAAU,EAAE,IAAI,WAAW;EACrF,MAAM,SAAS,eAAe,QAAQ,MACrC,GAAG,EAAE,IAAI,OAAO,GAAG,gBAAgB,SAAS,OAAO,GAAG,OACtD,gBACG,SACC,eAAe,YACf,eAAe,gBAChB,SACC,eAAe,2BACf,eAAe,4BACpB;EACA,IAAI,OAAO,SAAS,OAAO;EAC3B,EAAE,OAAO,eAAe,OAAO,OAAO,WAAW,CAAC;EAClD,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB,eAAe,OAAO;EAAY,GAAG,GAAG;CAChF;CAGA,IAAI,IAAI,eAAe,MAAM;EAC5B,MAAM,QAAQ,SAAS;EACvB,QAAQ,YAAY;GACnB,IAAI,OAAO,qBAAqB,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;GAC7D,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,iBAAiB;GACrB,IAAI,qBAAqB;GACzB,IAAI,mBAAkC;GACtC,IAAI,CAAC,KAAK,IAAI;IAEb,KAD0B,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KACvE,GAAkB;KACrB,iBAAiB;KAGjB,MAAM,mBAAmB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KACjE,IAAI,kBAAkB,OAAO;IAC9B,OAAO;KACN,iBAAiB;KACjB,MAAM,gBAAgB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KAC9D,IAAI,eAAe,OAAO;IAC3B;IACA,mBAAmB,KAAK;IACxB,OAAO,MAAM,+BAA+B,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;IACzE,qBAAqB;GACtB;GACA,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,CAAC,KAAK,IAAI;IAEb,MAAM,eAAe,SAAS,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KAAK,CAAC;IAMrF,IAAI,uBADH,gBAAiB,oBAAoB,QAAQ,qBAAqB,oBAElE,QAAQ,KACP,mCAAmC,KAAK,OAAO,sBAAsB,oBAAoB,OAAO,iBAAiB,aAAa,QAAQ,EAAE,IAAI,KAAK,UAAU,oBAAoB,EAAE,IAAI,OAAO,mBAAmB,CAAC,GACjN;SAEA,4BAA4B,kBAAkB,KAAK,MAAM;IAE1D,QACE,iBAAiB,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,MACjE,EAAE,KAAK,oBAAoB,GAAG,GAAG;GAEnC;GACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;GAC1D,IAAI,SAAS,OAAO;GAEpB,IAAI;IACH,IACC,EAAE,IAAI,OAAO,iCAAiC,MAAM,OACpD,oBAAoB,EAAE,IAAI,OAAO,oBAAoB,GAAG,gBAAgB,GAKxE,MAAM,sCAAsC,MAAM,IAAI,KAAA,GAAW;KAChE,SAAS,YAAY;KACrB,QAAQ,MAAM;IACf,CAAC;IAEF,MAAM,CAAC,UAAU,eAAe,qBAAqB,MAAM,IAAI,EAC9D,SAAS,YAAY,EACtB,CAAC;IACD,MAAM,YAAY,kBAAkB,MAAM,EAAE;IAC5C,MAAM,aAAa,yBAAyB,CAAC;IAC7C,MAAM,mBAAmB,uBAAuB,UAAU,IACvD,4BAA4B,MAAM,IAAI;KACtC,eAAe;KACf,cAAc,KAAK;IACpB,CAAC,IACA;IACH,MAAM,WAAoC;KACzC,WAAW;KACX,kBAAkB;KAClB;KACA,iBAAiB;KACjB,YAAY,uBAAuB,WAAW,IAAI;KAClD,iBAAiB;KACjB,eAAe;IAChB;IACA,IAAI,qBAAqB,MACxB,SAAS,oBAAoB;IAE9B,OAAO,EAAE,KAAK,QAAQ;GACvB,QAAQ;IACP,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC/C;EACD,EAAA,CAAG;CACJ,CAAC;CAGD,IAAI,IAAI,YAAY,MAAM;EACzB,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,qBAAqB,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;EAC/D,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;EACjE,IAAI,CAAC,KAAK,IAAI;GACb,4BAA4B,KAAK,MAAM;GACvC,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,oBAAoB,GAAG,GAAG;EACtF;EACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;EAC1D,IAAI,SAAS,OAAO;EACpB,MAAM,eAAe,KAAK;EAE1B,IAAI;GACH,MAAM,aAAa,EAAE,IAAI,MAAM,sBAAsB;GACrD,MAAM,aAAa,yBAAyB,CAAC;GAC7C,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GACjF,MAAM,eAAe,sBAAsB,YAAY,eAAe,KAAA,GAAW;IAChF,IAAI,MAAM;IACV;IACA,sBAAsB;IACtB;GACD,CAAC;GACD,IAAI,CAAC,aAAa,IACjB,OAAO,EAAE,KACR,8BACC,kBAAkB,MAAM,EAAE,GAC1B,aAAa,QACb,uBACA,IACD,GACA,GACD;GAED,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;GACtC,MAAM,WAAW,OAAO,SAAS,EAAE,IAAI,MAAM,OAAO,KAAK,OAAO,EAAE;GAClE,MAAM,gBAAgB,EAAE,IAAI,MAAM,YAAY;GAC9C,MAAM,aACL,iBAAiB,QAAQ,cAAc,KAAK,CAAC,CAAC,SAAS,IACpD,OAAO,SAAS,eAAe,EAAE,IACjC;GACJ,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,KAAK;GACjD,MAAM,iBAAiB,EAAE,IAAI,MAAM,iBAAiB,KAAK;GACzD,MAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,GAAI,CAAC,IAAI;GAClF,MAAM,SAAS,0BAA0B,MAAM,IAAI;IAClD;IACA;IACA,UAAU;IACV,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa;IACvD;IACA;IACA,SAAS,aAAa,SAAS,WAAW,aAAa,WAAW,KAAA;GACnE,CAAC;GACD,IAAI,OAAO,gBACV,OAAO,EAAE,KACR;IACC,OAAO;IACP,iBAAiB;IACjB,GAAG,uBAAuB,OAAO,OAAO,aAAa,QAAQ;GAC9D,GACA,GACD;GAED,MAAM,EAAE,KAAK,YAAY,aAAa;GACtC,MAAM,WAAW,iBAAiB,OAAO,cAAc,eAAe,KAAK,EAC1E,uBAAuB,oBACtB,EAAE,IAAI,OAAO,oBAAoB,GACjC,gBACD,EACD,CAAC;GACD,OAAO,EAAE,KAAK;IACb,gBAAgB;IAChB,iBAAiB;IACjB,UAAU,aAAa;IACvB,YAAY,SAAS;IACrB,aAAa,SAAS;IACtB,iBAAiB,SAAS;IAC1B,uBAAuB,SAAS;IAChC,KAAK,SAAS;IACd,aAAa;IACb,SAAS,SAAS;IAClB,gBAAgB,SAAS;GAC1B,CAAC;EACF,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAC/C;CACD,CAAC;CAGD,IAAI,IAAI,iBAAiB,MAAM;EAC9B,MAAM,QAAQ,SAAS;EACvB,QAAQ,YAAY;GACnB,IAAI,OAAO,qBAAqB,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;GAC7D,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,iBAAiB;GACrB,IAAI,qBAAqB;GACzB,IAAI,mBAAkC;GACtC,IAAI,CAAC,KAAK,IAAI;IAEb,KAD0B,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KACvE,GAAkB;KACrB,iBAAiB;KAGjB,MAAM,mBAAmB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KACjE,IAAI,kBAAkB,OAAO;IAC9B,OAAO;KACN,iBAAiB;KACjB,MAAM,gBAAgB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KAC9D,IAAI,eAAe,OAAO;IAC3B;IACA,mBAAmB,KAAK;IACxB,OAAO,MAAM,+BAA+B,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;IACzE,qBAAqB;GACtB;GACA,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,CAAC,KAAK,IAAI;IAEb,MAAM,eAAe,SAAS,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KAAK,CAAC;IAMrF,IAAI,uBADH,gBAAiB,oBAAoB,QAAQ,qBAAqB,oBAElE,QAAQ,KACP,mCAAmC,KAAK,OAAO,sBAAsB,oBAAoB,OAAO,iBAAiB,aAAa,QAAQ,EAAE,IAAI,KAAK,UAAU,oBAAoB,EAAE,IAAI,OAAO,mBAAmB,CAAC,GACjN;SAEA,4BAA4B,kBAAkB,KAAK,MAAM;IAE1D,QACE,iBAAiB,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,MACjE,EAAE,KAAK,oBAAoB,GAAG,GAAG;GAEnC;GACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;GAC1D,IAAI,SAAS,OAAO;GAEpB,IAAI;IACH,MAAM,aAAa,EAAE,IAAI,MAAM,sBAAsB;IACrD,MAAM,aAAa,yBAAyB,CAAC;IAC7C,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IACjF,MAAM,eAAe,sBAAsB,YAAY,eAAe,KAAA,GAAW;KAChF,IAAI,MAAM;KACV;KACA,sBAAsB;KACtB,cAAc,KAAK;IACpB,CAAC;IACD,IAAI,CAAC,aAAa,IACjB,OAAO,EAAE,KACR,8BACC,kBAAkB,MAAM,EAAE,GAC1B,aAAa,QACb,uBACA,IACD,GACA,GACD;IAED,MAAM,gBAAgB,EAAE,IAAI,MAAM,YAAY;IAC9C,MAAM,aACL,iBAAiB,QAAQ,cAAc,KAAK,CAAC,CAAC,SAAS,IACpD,OAAO,SAAS,eAAe,EAAE,IACjC;IACJ,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,KAAK;IACjD,MAAM,iBAAiB,EAAE,IAAI,MAAM,iBAAiB,KAAK;IACzD,MAAM,YAAY,EAAE,IAAI,MAAM,YAAY,KAAK;IAC/C,MAAM,WAAW,OAAO,SAAS,EAAE,IAAI,MAAM,OAAO,KAAK,OAAO,EAAE;IAElE,MAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,GAAI,CAAC,IAAI;IAElF,IAAI,cAAc,QAAQ,CAAC,OAAO,SAAS,UAAU,GACpD,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAEnD,IAAI,CAAC,YACJ,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IAGpD,MAAM,SAAS,8BAA8B,MAAM,IAAI;KACtD;KACA;KACA;KACA;KACA;KACA,cAAc,KAAK;KACnB,SAAS,aAAa,SAAS,WAAW,aAAa,WAAW,KAAA;IACnE,CAAC;IAED,OAAO,EAAE,KAAK;KACb,UAAU,aAAa;KACvB,YAAY,OAAO,SAAS;KAC5B,aAAa,OAAO,SAAS;KAC7B,iBAAiB,OAAO,SAAS;KACjC,uBAAuB,OAAO,SAAS;KACvC,iBAAiB;KACjB,OAAO,OAAO;KACd,iBAAiB,OAAO;KACxB,UAAU,OAAO;IAClB,CAAC;GACF,SAAS,KAAK;IACb,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;IACrD,IAAI,YAAY,yBAAyB,YAAY,qBACpD,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,GAAG;IAEtC,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC/C;EACD,EAAA,CAAG;CACJ,CAAC;CAGD,IAAI,KAAK,WAAW,OAAO,MAAM;EAChC,MAAM,QAAQ,SAAS;EACvB,MAAM,MAAM,MAAM,wBAAwB,EAAE,IAAI,KAAK,mBAAmB;EACxE,IAAI,OAAO,MACV,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAGlD,MAAM,OAAO,qBAAqB,OAAO,EAAE,KAAK,GAAG;EACnD,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;EACjE,IAAI,CAAC,KAAK,IAAI;GACb,4BAA4B,KAAK,MAAM;GACvC,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,oBAAoB,GAAG,GAAG;EACtF;EACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;EAC1D,IAAI,SAAS,OAAO;EACpB,MAAM,eAAe,KAAK;EAE1B,IAAI;EACJ,IAAI;GACH,MAAM,SAAS,KAAK,MAAM,IAAI,SAAS,OAAO,CAAC;GAC/C,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;GAE7C,OAAO;EACR,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EAEA,MAAM,aAAa,wBAClB,uBACA,wBAAwB,KAAK,eAAe,CAC7C;EACA,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;EACjF,MAAM,eAAe,sBAAsB,KAAK,UAAU,OAAO,OAAO,MAAM,UAAU,GAAG;GAC1F,IAAI,MAAM;GACV;GACA,sBAAsB;GACtB;EACD,CAAC;EACD,IAAI,CAAC,aAAa,IACjB,OAAO,EAAE,KACR,8BACC,kBAAkB,MAAM,EAAE,GAC1B,aAAa,QACb,uBACA,IACD,GACA,GACD;EAED,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,GAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,cAAc,GAAG,GAAG;EAE5C,IAAI,KAAK,IAAI,SAAS,cACrB,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAG7C,MAAM,gBAAgB,sBAAsB,IAAI;EAChD,MAAM,eAAe,sBAAsB,KAAK,aAAa;EAC7D,MAAM,cAAc,cAAc,QAAQ,OAAO,GAAG,YAAY,gBAAgB;EAChF,IAAI,YAAY,SAAS,KAAK,CAAC,aAAa,SAAS,gBAAgB,GACpE,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;EAE7D,IAAI;GACH,KAAK,MAAM,MAAM,aAAa,0BAA0B,EAAE;EAC3D,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EACzD;EACA,KAAK,MAAM,MAAM,eAChB,IAAI,GAAG,cAAc,gBAAgB,GAAG,oBAAoB,cAC3D,OAAO,EAAE,KACR;GACC,OAAO;GACP,QAAQ;GACR,OAAO,GAAG;EACX,GACA,GACD;EAMF,MAAM,WAAW,iBAAiB,OAAO,cAAc,eAAe,eAAe;GACpF,kBAAkB;GAClB,uBAAuB,aAAa,SAAS,gBAAgB;EAC9D,CAAC;EAGD,MAAM,WAAW,2BAA2B,MAAM,IAAI,eAAe,eAAe;GACnF,SAAS,eAAe;GACxB;EACD,CAAC;EACD,IAAI,UACH,OAAO,EAAE,KACR;GACC,OAAO;GACP,QAAQ,SAAS,WAAW,EAAE,EAAE,UAAU;GAC1C,YAAY,SAAS;GACrB,iBAAiB;GACjB,UAAU,aAAa;EACxB,GACA,GACD;EAGD,MAAM,SAAS,oBAAoB,MAAM,IAAI,SAAS,SAAS,eAAe,MAAM,OAAO;EAC3F,MAAM,UAAU,OAAO,UAAU,SAAS;EAC1C,OAAO,EAAE,KAAK;GACb,GAAG;GACH;GACA,gBAAgB,SAAS;GACzB,iBAAiB;GACjB,UAAU,aAAa;EACxB,CAAC;CACF,CAAC;CAED,OAAO;AACR;AAEA,eAAe,kDAA8F;CAC5G,MAAM,SAAS,0BAA0B;CACzC,MAAM,8BACL,OAAO,mBAAmB,SAAS,KAAK,OAAO,sBAAsB,SAAS;CAC/E,MAAM,YAAY,OAAO,mBAAmB,KAAK;CACjD,MAAM,cAAc,OAAO,2BAA2B,KAAK;CAC3D,MAAM,WAAW,CAChB,GAAG,IAAI,IAAI,OAAO,sBAAsB,KAAK,YAAY,QAAQ,KAAK,CAAC,CAAC,CACzE,CAAC,CAAC,OAAO,OAAO;CAChB,IAAI,CAAC,6BACJ,OAAO;EACN,cAAc;EACd,eAAe;EACf,aAAa,CAAC;CACf;CAED,IAAI,CAAC,aAAa,CAAC,eAAe,SAAS,WAAW,GACrD,OAAO;EACN,cAAc;EACd,eAAe;EACf,aAAa,CAAC;CACf;CAED,IAAI,SAAS,SAAS,IACrB,OAAO;EACN,cAAc;EACd,eAAe;EACf,aAAa,CAAC;CACf;CAED,IAAI;EACH,MAAM,eACL,MAAM,QAAQ,IACb,SAAS,KAAK,YACb,6BAA6B;GAC5B;GACA,iBAAiB;GACjB;GACA;EACD,CAAC,CACF,CACD,EAAA,CACC,KAAK;EACP,IAAI,YAAY,SAAS,KACxB,OAAO;GACN,cAAc;GACd,eAAe;GACf,aAAa,CAAC;EACf;EAED,OAAO;GAAE,cAAc;GAAa,eAAe;GAAM;EAAY;CACtE,QAAQ;EACP,OAAO;GACN,cAAc;GACd,eAAe;GACf,aAAa,CAAC;EACf;CACD;AACD;;;;;;;;AASA,SAAgB,WACf,UACA,sBACA,UAA6B,CAAC,GAC7B;CACD,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,wBAAwB,QAAQ,yBAAyB;CAC/D,MAAM,yBAAyB,QAAQ,0BAA0B;CACjE,MAAM,0BACL,QAAQ,yCACR;CACD,MAAM,6BAA6B,YAAwD;EAC1F,IAAI;GACH,OAAO,MAAM,wBAAwB;EACtC,QAAQ;GACP,OAAO;IACN,cAAc;IACd,eAAe;IACf,aAAa,CAAC;GACf;EACD;CACD;CACA,MAAM,sBAAsB,OAAO,UAAuB;EACzD,IAAI,qBAAqB;EACzB,IAAI;GACH,qBAAqB,OAAO,sBAAsB,CAAC,CAAC,oBAAoB,EAAE;EAC3E,QAAQ;GACP,qBAAqB;EACtB;EACA,OAAO;GACN,eAAe,MAAM;GACrB,kBAAkB,mBAAmB;IACpC,cAAc;IACd,QAAQ,SAAS;IACjB,cAAc,MAAM;GACrB,CAAC;GACD,aAAa,MAAM,2BAA2B;EAC/C;CACD;CAEA,IAAI,IAAI,kDAAkD,OAAO,MAAM;EACtE,MAAM,QAAQ,SAAS;EACvB,0BAA0B,KAAK;EAC/B,OAAO,EAAE,KAAK,4BAA4B,MAAM,IAAI,MAAM,oBAAoB,KAAK,CAAC,CAAC;CACtF,CAAC;CAED,IAAI,MAAM,+CAA+C,OAAO,MAAM;EACrE,MAAM,MAAM,MAAM,wBAAwB,EAAE,IAAI,KAAK,IAAK;EAC1D,IAAI,CAAC,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;EACpE,IAAI;EACJ,IAAI;GACH,MAAM,SAAS,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;GAC9C,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;GAE3D,OAAO;EACR,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;EAC3D;EACA,IACC,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,KAC7B,CAAC,OAAO,OAAO,MAAM,aAAa,KAClC,CAAC,OAAO,OAAO,MAAM,qBAAqB,KAC1C,OAAO,KAAK,gBAAgB,YAC5B,OAAO,KAAK,wBAAwB,UAEpC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;EAE3D,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,sBAAsB;GACrC,MAAM,gBAAgB,OAAO,qBAC1B,aAAa,OAAO,kBAAkB,IACtC;GACH,MAAM,oCAAoC,gBACvC,wBAAwB,aAAa,IACrC;GACH,IAAI,8BAAsF,CAAC;GAC3F,IAAI,eACH,IAAI;IAGH,8BAA8B,oCAC7B,OACA,OAAO,oBACP,OAAO,qBACR;GACD,QAAQ;IAGP,8BAA8B,CAAC;GAChC;GAED,MAAM,SAAS,MAAM,0BAA0B,MAAM,IAAI;IACxD,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC5B,aAAa,KAAK;IAClB,qBAAqB,KAAK;IAC1B;IACA,2BAA2B,MAAM,UAAU;KAC1C,MAAM,iBAAiB,wBAAwB,IAAI;KACnD,MAAM,kBAAkB,wBAAwB,KAAK;KACrD,OAAO,mBAAmB,QAAQ,mBAAmB;IACtD;IACA,wBAAwB,OAAO,OAAO,0BAA0B;KAC/D,MAAM,gCAAgC,wBAAwB,MAAM,aAAa;KACjF,IACC,CAAC,OAAO,sBACR,CAAC,OAAO,8BACR,CAAC,qCACD,CAAC,iCACD,kCAAkC,mCAElC,OAAO;KAER,MAAM,UAAU,MAAM,uBAAuB;MAC5C,SAAS,MAAM;MACf,aAAa;MACb,WAAW,OAAO;MAClB,aAAa,OAAO;KACrB,CAAC;KACD,OACC,SAAS,aAAa,MAAM,WAAW,QAAQ,iBAAiB;IAElE;GACD,CAAC;GACD,IAAI;IACH,QAAQ,+BAA+B;GACxC,QAAQ,CAER;GACA,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,EAAE,iBAAiB,iCACtB,OAAO,EAAE,KAAK,EAAE,OAAO,qBAA8B,GAAG,GAAG;GAE5D,MAAM,SACL,MAAM,SAAS,sBACZ,MACA,MAAM,SAAS,mBACd,MACA,MAAM,SAAS,oCACf,MAAM,SAAS,+BACf,MAAM,SAAS,uBACd,MACA;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,KAAK,GAAG,MAAM;EAC5C;CACD,CAAC;CAED,MAAM,6BACL,OACA,WACyF;EACzF,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;EACxE,MAAM,OAAO;EACb,MAAM,UAAU,IAAI,IAAI,SAAS,CAAC,YAAY,yBAAyB,IAAI,CAAC,UAAU,CAAC;EACvF,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,QAAQ,KAAK,QAAQ,GACrF,OAAO;EAER,MAAM,WAAW,KAAK,SAAS,KAAK,UAAU;GAC7C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;GACxE,MAAM,UAAU;GAChB,MAAM,8BAAc,IAAI,IAAI;IAAC;IAAY;IAAoB;IAAa;GAAa,CAAC;GACxF,IACC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,IAAI,GAAG,CAAC,KACxD,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,qBAAqB,YACpC,OAAO,QAAQ,cAAc,aAC5B,OAAO,OAAO,SAAS,aAAa,KAAK,OAAO,QAAQ,gBAAgB,WAEzE,OAAO;GAER,OAAO;IACN,UAAU,QAAQ;IAClB,kBAAkB,QAAQ;IAC1B,WAAW,QAAQ;IACnB,GAAI,OAAO,QAAQ,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;GACxF;EACD,CAAC;EACD,IAAI,SAAS,MAAM,YAAY,WAAW,IAAI,GAAG,OAAO;EACxD,IAAI,UAAU,OAAO,KAAK,4BAA4B,UAAU,OAAO;EACvE,OAAO;GACI;GACV,GAAI,SAAS,EAAE,yBAAyB,KAAK,wBAAkC,IAAI,CAAC;EACrF;CACD;CAEA,IAAI,KAAK,yDAAyD,OAAO,MAAM;EAC9E,MAAM,OAAO,0BAA0B,MAAM,oBAAoB,CAAC,GAAG,KAAK;EAC1E,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAClE,MAAM,QAAQ,SAAS;EACvB,IAAI;GACH,0BAA0B,KAAK;GAC/B,MAAM,SAAS,8BACd,MAAM,IACN,MAAM,oBAAoB,KAAK,GAC/B,IACD;GACA,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC1D,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC5D,IAAI,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC3D,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GACrD;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACvD;CACD,CAAC;CAED,IAAI,KAAK,wDAAwD,OAAO,MAAM;EAC7E,MAAM,OAAO,0BAA0B,MAAM,oBAAoB,CAAC,GAAG,IAAI;EACzE,IAAI,CAAC,QAAQ,EAAE,6BAA6B,OAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAExD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,0BAA0B,KAAK;GAC/B,MAAM,SAAS,6BACd,MAAM,IACN;IAAE,cAAc,MAAM;IAAS,eAAe,MAAM;GAAS,GAC7D,MAAM,oBAAoB,KAAK,GAC/B,IACD;GACA,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC1D,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC5D,IAAI,OAAO,WAAW,WAAW,OAAO,WAAW,YAClD,OAAO,EAAE,KAAK,QAAQ,GAAG;GAE1B,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;GACpD;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EACtD,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAGD,IAAI,IAAI,oBAAoB,OAAO,MAAM;EACxC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,aAAgB,OAAe,OAAmB;IACvD,IAAI,QAAQ,IAAI,8BAA8B,KAAK,OAAO,GAAG;IAC7D,MAAM,YAAY,KAAK,IAAI;IAC3B,QAAQ,KAAK,yBAAyB,MAAM,OAAO;IACnD,IAAI;KACH,OAAO,GAAG;IACX,UAAU;KACT,QAAQ,KAAK,yBAAyB,MAAM,GAAG,KAAK,IAAI,IAAI,UAAU,GAAG;IAC1E;GACD;GACA,MAAM,WAAW,UAAU,EAAE,IAAI,MAAM,oBAAoB,CAAC;GAC5D,MAAM,sBAAsB,UAAU,EAAE,IAAI,MAAM,qBAAqB,CAAC;GACxE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK;GAC1C,MAAM,SAAS,UAAU,mCAAmC,0BAA0B,CAAC;GACvF,MAAM,YAAY,UAAU,2BAA2B,kBAAkB,MAAM,EAAE,CAAC;GAElF,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GAEtC,MAAM,YAAY,UAAU,mBAC3B,EACE,OAAO;IACP,WAAW,OAAO,WAAW;IAC7B,aAAa,OAAO,WAAW;GAChC,CAAC,CAAC,CACD,KAAK,OAAO,UAAU,CAAC,CACvB,MAAM,CAAC,CAAC,CACR,IAAI,CACP;GAEA,MAAM,cAAc,UAAU,qBAC7B,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,eAAe,CAAC,CAAC,MAAM,GAAG,OAAO,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACrF;GAEA,MAAM,eAAe,UAAU,sBAC9B,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,CAAC,CAAC,IAAI,CACzD;GACA,IAAI;GAYJ,IAAI;IACH,iBAAiB,UAAU,wBAC1B,EACE,OAAO,CAAC,CACR,KAAK,OAAO,kBAAkB,CAAC,CAC/B,MAAM,GAAG,OAAO,mBAAmB,IAAI,CAAC,CAAC,CAAC,CAC1C,IAAI,CACP;GACD,QAAQ;IACP,iBAAiB,KAAA;GAClB;GAEA,MAAM,cAAc,UAAU,qBAC7B,EACE,OAAO,EAAE,cAAc,IAAI,OAAO,UAAU,YAAY,EAAE,CAAC,CAAC,CAC5D,KAAK,OAAO,SAAS,CAAC,CACtB,IAAI,CACP;GAKA,MAAM,gBAAgB,UAAU,uBAC/B,+BAA+B,4BAA4B,MAAM,EAAE,GAAG,QAAQ,CAC/E;GACA,MAAM,yBAAyB,UAAU,qCACxC,mDAAmD,MAAM,EAAE,CAC5D;GACA,MAAM,wBAAwB;IAC7B,QAAQ,uBAAuB;IAC/B,GAAI,WACD,EACA,QAAQ,uBAAuB,OAAO,KAAK,WAAW;KACrD,gBAAgB,MAAM;KACtB,UAAU,MAAM;KAChB,MAAM,MAAM;KACZ,cAAc,MAAM;KACpB,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,eAAe,MAAM;KACrB,cAAc,MAAM;KACpB,aAAa,MAAM;KACnB,kBAAkB,MAAM;KACxB,YAAY,MAAM;IACnB,EAAE,EACH,IACC,CAAC;GACL;GAEA,MAAM,YAAY,aAAa;GAC/B,MAAM,cAAc,aAAa;GACjC,MAAM,WAAW,aAAa;GAC9B,MAAM,gBAAgB,UAAU,2BAA2B,kBAAkB,MAAM,MAAM,CAAC;GAS1F,MAAM,gBAAgB,QAAQ,aAAa;GAC3C,MAAM,eAAe,gBAClB,qBAAqB,cAAc,KAAK,GAAG,cAAc,SACzD;GAEH,IAAI,mBAAmB;GACvB,IAAI,CAAC,OAAO,aACX,mBAAmB;QACb,IAAI,cAAc,CAAC,YAAY,OAAO,QAAQ,IAAI,OAAO,eAAe,EAAE,IAChF,mBAAmB;QACb,IAAI,CAAC,eACX,mBAAmB;GAGpB,MAAM,gBAAyC;IAC9C,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,WAAW;KACV,SAAS,OAAO;KAChB,cAAc,OAAO;KACrB,aAAa,OAAO;KACpB,uBACC,UAAU,yBACT,gBAAgB,yBACjB;KACD,aAAc,gBAAgB,eAAiC;KAC/D,kBACC,OAAO,gBAAgB,qBAAqB,WACzC,eAAe,mBACf;KACJ,kBACC,OAAO,gBAAgB,qBAAqB,WACzC,eAAe,mBACf;KACJ,6BACC,OAAO,gBAAgB,gCAAgC,WACpD,eAAe,8BACf;KACJ,4BACC,OAAO,gBAAgB,+BAA+B,WACnD,eAAe,6BACf;KACJ,YAAa,gBAAgB,cAAgC;KAC7D,eAAgB,gBAAgB,iBAAmC;IACpE;IACA,gBAAgB;IAChB,8CAA8C;IAC9C,YAAY,OAAO,cAAc,SAAS,CAAC;IAC3C,cAAc,aAAa,gBAAgB;IAC3C,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,uBACC,OAAO,oBAAoB,SAAS,KAAK,OAAO,oBAAoB,SAAS;IAC9E,gBAAgB;KACf,SAAS,OAAO;KAChB,SAAS,OAAO;IACjB;IACA,qBAAqB,mBACpB,OACC,WAAW,aAA2C,MACvD,QACD;IACA,UAAU,CAAC;GACZ;GAEA,IAAI,UAAU;IACb,cAAc,YAAY,WAAW,aAAa;IAClD,cAAc,cAAc,WAAW,eAAe;IACtD,cAAc,OAAO,GAAG,OAAO,SAAS,GAAG,OAAO;IAClD,cAAc,oBAAoB;IAClC,cAAc,uBAAuB;IACrC,cAAc,oBAAoB;GACnC;GAEA,MAAM,gBAAgB,uBAAuB,KAAK;GAClD,IAAI,eAAe,SAAS,cAAc,UAAU,WAAW;IAC9D,mBAAmB,cAAc;IACjC,cAAc,eAAe;IAC7B,cAAc,iBAAiB,cAAc,UAAU,cAAc;IACrE,cAAc,gBAAgB,cAAc,UAAU;GACvD;GAEA,MAAM,sBAAsB,MAAM,0BAA0B,OAAO,MAAM;GACzE,MAAM,cAAc,UAAU,qBAC7B,wBAAwB,qBAAqB,QAAQ,CACtD;GAGA,MAAM,WAAW,UAChB,kBACM,MAAM,GAAG,QAAQ,WAAW,CAAC,CAAC,IAAI,CACzC;GACA,MAAM,kBAAkB,UAAU,uBAAuB,cAAc,KAAK,CAAC;GAC7E,MAAM,wBAAwB,UAAU,qCACvC,4BAA4B,KAAK,CAClC;GACA,MAAM,aAAa,SAAS,KAAK,QAAQ;IACxC,MAAM,OAAO,WACZ,OACA,KACA,UACA,iBACA,uBACC,WAAW,aAA2C,IACxD;IACA,KAAK,SAAS,WAAW,IAAI;IAC7B,OAAO;GACR,CAAC;GAED,MAAM,WAAoC,CAAC;GAC3C,KAAK,MAAM,QAAQ,YAClB,SAAS,OAAO,KAAK,cAAc,KAAK,KAAK;GAI9C,MAAM,cAAc,UAAU,qBAC7B,EACE,OAAO;IACP,gBAAgB,OAAO,aAAa;IACpC,IAAI,OAAO,aAAa;IACxB,OAAO,OAAO,aAAa;IAC3B,YAAY,OAAO,aAAa;IAChC,aAAa,OAAO,aAAa;IACjC,QAAQ,OAAO,aAAa;IAC5B,SAAS,OAAO,aAAa;IAC7B,uBAAuB,OAAO,aAAa;IAC3C,sBAAsB,OAAO,aAAa;IAC1C,4BAA4B,OAAO,aAAa;GACjD,CAAC,CAAC,CACD,KAAK,OAAO,YAAY,CAAC,CACzB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,CAAC,CAC9C,MAAM,EAAE,CAAC,CACT,IAAI,CACP;GACA,MAAM,iCAAiB,IAAI,IAAsB;GASjD,UAPC,yBAEC,MAAM,GAAG,QAAQ,uDAAuD,CAAC,CAAC,IAAI,CAKhF,CAAA,CAAgB,SAAS,YAAY;IACpC,MAAM,QAAQ,aAAa,QAAQ,cAA+B;IAClE,IAAI,MAAM,QAAQ,eAAe,IAAI,OAAO,QAAQ,kBAAkB,EAAE,GAAG,KAAK;GACjF,CAAC;GACD,MAAM,gBAAgB,YAAY,KAAK,QAAQ;IAC9C,MAAM,QAAQ,WAAW,eAAe,IAAI,OAAO,IAAI,kBAAkB,EAAE,CAAC,IAAI,KAAA;IAChF,OAAO,kBAAkB,KAAK,UAAU,KAAK;GAC9C,CAAC;GACD,MAAM,qBAAqB,OAAO,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK;GAEpE,MAAM,cAAuC;IAC5C,GAAG;IACH,wBAAwB,yBAAyB,oBAAoB,MAAM,EAAE,GAAG,QAAQ;IACxF,OAAO;IACP,SAAS;IACT,MAAM,CAAC;IACP,MAAM,CAAC;GACR;GACA,MAAM,gBAAgB,UAAU,uBAAuB,MAAM,yBAAyB,CAAC;GACvF,MAAM,eAAe,UAAU,4BAA4B,0BAA0B,KAAK,CAAC;GAC3F,MAAM,gBAAgB,UAAU,uBAAuB,MAAM,qBAAqB,OAAO,CAAC;GAC1F,MAAM,gCAAgC,UAAU,uCAC/C,wCAAwC,KAAK,CAC9C;GACA,IAAI,eAA0C,CAAC;GAC/C,IAAI,uBAAuB,YAAY,OAAO,4BAC7C,IAAI;IACH,eAAe,MAAM,4BAA4B,MAAM;GACxD,QAAQ;IACP,eAAe,CAAC;GACjB;GAGD,IAAI,qBAAqB,QAAQ,mBAAmB,WAAW,kBAAkB,GAAG;IACnF,mBAAmB;IACnB,cAAc,eAAe;IAC7B,cAAc,gBAAgB,mBAAmB,QAAQ,qBAAqB,EAAE;IAChF,YAAY,eAAe;IAC3B,YAAY,gBAAgB,mBAAmB,QAAQ,qBAAqB,EAAE;GAC/E;GAEA,IAAI,qBAAqB,MAAM;IAC9B,MAAM,aAAa,IAAI,IACtB,WAAW,KAAK,SACf,OAAQ,KAAK,QAAgD,cAAc,EAAE,CAC9E,CACD;IACA,MAAM,uBAAuB,QAC5B,cAAc,MACb,cAAc,EAAE,CAAC,WAAW,WAC5B,YAAY,cAAc,EAAE,CAAC,WAAW,CAC1C;IACA,MAAM,aACL,WAAW,SAAS,KACpB,WAAW,OACT,SACA,OAAQ,KAAK,QAAoC,cAAc,EAAE,MAAM,SACzE;IACD,IAAI,sBAAsB;KAEzB,IADoB,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,GACxD,mBAAmB;UAC/B,IAAI,YAAY,mBAAmB;UACnC,IAAI,WAAW,SAAS,GAAG,mBAAmB;IACpD,OAAO,IAAI,WAAW,IAAI,UAAU,GACnC,mBAAmB;SACb,IAAI,YACV,mBAAmB;SACb,IAAI,WAAW,SAAS,KAAK,CAAC,WAAW,IAAI,QAAQ,GAC3D,mBAAmB;IAEpB,cAAc,eAAe;IAC7B,YAAY,eAAe;GAC5B;GAEA,MAAM,kBAA2C;IAChD,GAAG;IACH,QAAQ;IACR,OAAO;IACP,UAAU,cAAc,MAAM,GAAG,CAAC;IAClC,gBAAgB;IAChB,sBAAsB;IACtB,gBAAgB;IAChB,iCAAiC;IACjC;GACD;GACA,IAAI,uBAAuB,UAC1B,gBAAgB,gBAAgB;GAEjC,OAAO,EAAE,KAAK,eAAe;EAC9B;CACD,CAAC;CAGD,IAAI,IAAI,oBAAoB,MAAM;EACjC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,WAAW,UAAU,EAAE,IAAI,MAAM,oBAAoB,CAAC;GAC5D,MAAM,OAAO,MAAM,GAAG,QAAQ,WAAW,CAAC,CAAC,IAAI;GAC/C,MAAM,kBAAkB,cAAc,KAAK;GAC3C,MAAM,wBAAwB,4BAA4B,KAAK;GAO/D,MAAM,gBANI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACnB,CAAA,CAChB,OAAO,EAAE,WAAW,OAAO,WAAW,UAAU,CAAC,CAAC,CAClD,KAAK,OAAO,UAAU,CAAC,CACvB,MAAM,CAAC,CAAC,CACR,IACqB,CAAA,EAAW,aAA2C;GAE7E,MAAM,QAAQ,KAAK,KAAK,QACvB,WAAW,OAAO,KAAK,UAAU,iBAAiB,uBAAuB,aAAa,CACvF;GACA,OAAO,EAAE,KAAK;IAAE,OAAO;IAAO,UAAU,CAAC;GAAS,CAAC;EACpD;CACD,CAAC;CAQD,IAAI,IAAI,qDAAqD,MAAM;EAClE,MAAM,QAAQ,SAAS;EACvB,MAAM,eAAe,OAAO,EAAE,IAAI,MAAM,gBAAgB,KAAK,EAAE,CAAC,CAAC,KAAK;EACtE,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACzE,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,GAAG;EAChD,IAAI,SAAS,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;EAC7D,MAAM,kBAAkB,SAAS,EAAE,IAAI,MAAM,cAAc,GAAG,IAAO;EAKrE,MAAM,eAAe,KAAK,IAAI,KAAK,IAAI,iBAAiB,CAAC,GAAG,MAAiB;EAC7E,MAAM,WACL,eAAe,qBAAI,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,GAAM,EAAA,CAAE,YAAY,IAAI,KAAA;EACjF,MAAM,UAAU,2BAA2B,MAAM,IAAI;GACpD;GACA;GACA;EACD,CAAC;EAKD,MAAM,UAJY,gCAAgC,MAAM,IAAI;GAC3D;GACA;EACD,CACgB,CAAA,CAAU,MAAM;GAC/B,gBAAgB;GAChB,OAAO;GACP,WAAW,CAAC;GACZ,SAAS;EACV;EACA,OAAO,EAAE,KAAK;GACb,gBAAgB;GAChB;GACA,OAAO;EACR,CAAC;CACF,CAAC;CAGD,IAAI,IAAI,qBAAqB,MAAM;EAClC,MAAM,QAAQ,SAAS;EACvB;GACC,uBAAuB,KAAK;GAC5B,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,MAAM,gBAAgB,UAAU,EAAE,IAAI,MAAM,eAAe,CAAC;GAC5D,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM;GAC3C,MAAM,OAAO,gBACV,MAAM,QAAQ,OAAO,OAAO,YAAY,CAAC,CAAC,IAAI,IAC9C,MACC,MAAM,IAAI,GAAG,OAAO,OAAO,QAAQ,QAAQ,GAAG,GAAG,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,CAAC,CACvF,QAAQ,OAAO,OAAO,YAAY,CAAC,CACnC,IAAI;GACR,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,CAAC;EAC9B;CACD,CAAC;CAGD,IAAI,IAAI,uBAAuB,MAAM;EACpC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,IAAI,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC7C,IAAI,SAAS,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;GAC7D,QAAQ,KAAK,IAAI,OAAO,GAAG;GAC3B,MAAM,OAAO,EACX,OAAO;IACP,gBAAgB,OAAO,aAAa;IACpC,IAAI,OAAO,aAAa;IACxB,OAAO,OAAO,aAAa;IAC3B,YAAY,OAAO,aAAa;IAChC,aAAa,OAAO,aAAa;IACjC,QAAQ,OAAO,aAAa;IAC5B,SAAS,OAAO,aAAa;IAC7B,uBAAuB,OAAO,aAAa;IAC3C,sBAAsB,OAAO,aAAa;IAC1C,4BAA4B,OAAO,aAAa;GACjD,CAAC,CAAC,CACD,KAAK,OAAO,YAAY,CAAC,CACzB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,CAAC,CAC9C,MAAM,KAAK,CAAC,CACZ,IAAI;GACN,MAAM,WAAW,UAAU,EAAE,IAAI,MAAM,oBAAoB,CAAC;GAC5D,MAAM,QAAQ,KAAK,KAAK,QAAQ,kBAAkB,KAAK,QAAQ,CAAC;GAChE,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU,CAAC;GAAS,CAAC;EAC7C;CACD,CAAC;CAUD,IAAI,IAAI,sBAAsB,MAAM;EACnC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,SAAS,0BAA0B;GACzC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,IAAI;GACJ,IAAI;GACJ,IAAI;GAEJ,IAAI;IACH,MAAM,CAAC,IAAI,MAAM,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1E,WAAW;IACX,cAAc;IAMd,YALY,EACV,OAAO,EAAE,YAAY,OAAO,WAAW,WAAW,CAAC,CAAC,CACpD,KAAK,OAAO,UAAU,CAAC,CACvB,MAAM,GAAG,OAAO,WAAW,WAAW,EAAE,CAAC,CAAC,CAC1C,IACU,CAAA,EAAK,cAAc;GAChC,QAAQ;IACP,OAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;GAC5D;GAEA,IAAI,CAAC,YAAY,CAAC,aACjB,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAGnD,OAAO,EAAE,KAAK;IACb,WAAW;IACX;IACA,YAAY,aAAa;IACzB,qBAAqB;IACrB,WAAW,0BAA0B,MAAM;GAC5C,CAAC;EACF;CACD,CAAC;CAOD,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC/C,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,IAAI;GACJ,IAAI;IACH,OAAO,MAAM,EAAE,IAAI,KAA8B;GAClD,QAAQ;IACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;GAC7C;GACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;GAC5D,MAAM,UAAU,OAAO,KAAK,QAAQ,EAAE;GACtC,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;GAC1E,IAAI,CAAC,QAAQ,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;GAClE,IAAI;GACJ,IAAI;IACH,OAAO,+BAA+B,SAAS,MAAM;GACtD,SAAS,OAAO;IACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,eAAe,GAAG,GAAG;GACtF;GAMA,IAAI,CALW,EACb,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACG,GAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC3D,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,KAAK,CAAC,CAAC,CACb,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;GACN,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;EAC3B;CACD,CAAC;CAED,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACtC,MAAM,QAAQ,SAAS;EACvB,IAAI,OAAgC,CAAC;EACrC,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,CAAC;EACT;EAEA,IAAI,CADW,0BACV,CAAA,CAAO,aACX,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;EAE9C,MAAM,UACL,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,KAAK,IAAI,KAAK,QAAQ,KAAK,IAAI;EACjF,MAAM,kBACL,OAAO,KAAK,mBAAmB,YAAY,KAAK,eAAe,KAAK,IACjE,KAAK,eAAe,KAAK,IACzB;EACJ,IAAI;EACJ,IAAI,SAAS;GACZ,MAAM,SAAS,2BAA2B,OAAO,OAAO;GACxD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GACjE,UAAU,CAAC,MAAM;EAClB,OAAO,IAAI,iBAIV,UAH0B,MAAM,GAC9B,QAAQ,gEAAgE,CAAC,CACzE,IAAI,eACI,CAAA,CACR,KAAK,QAAQ,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACrD,OAAO,OAAO;OAKhB,UAHoB,MAAM,GAAG,QAAQ,uCAAuC,CAAC,CAAC,IAGpE,CAAA,CAAY,KAAK,QAAQ,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;EAE3F,MAAM,QAAQ,CAAC;EACf,KAAK,MAAM,UAAU,SAAS;GAI7B,MAAM,SAAS,MAAM,YAAY,MAAM,IAAI,QAAQ;IAClD,SAAS,YAAY;IACrB,QAAQ,MAAM;IACd,SAAS,MAAM;GAChB,CAAC;GACD,MAAM,KAAK;IACV,gBAAgB;IAChB,GAAG;IACH,YAAY,KAAA;IACZ,aAAa,sBAAsB,OAAO,UAAU;GACrD,CAAC;EACF;EACA,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;CAED,IAAI,KAAK,yBAAyB,OAAO,MAAM;EAC9C,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;EAC5D,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAC1E,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,IACvC,KAAK,QACJ,QAAQ,UAA2B,OAAO,UAAU,QAAQ,CAAC,CAC7D,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACf;EACH,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,IACvC,KAAK,QACJ,QAAQ,UAA2B,OAAO,UAAU,QAAQ,CAAC,CAC7D,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACf;EACH,MAAM,gBAAgB,QAAQ,KAAK,cAAc;EACjD,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EAMtC,IAAI,CALW,EACb,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACG,GAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAC3D,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI;GACJ,uBAAuB,gBAAgB,OAAO,KAAK,UAAU,WAAW,CAAC,CAAC;GAC1E,uBAAuB,gBAAgB,OAAO,KAAK,UAAU,WAAW,CAAC,CAAC;EAC3E,CAAC,CAAC,CACD,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,MAAM,MAAM,EACV,OAAO;GACP,uBAAuB,OAAO,UAAU;GACxC,uBAAuB,OAAO,UAAU;EACzC,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,IAAI,CAAC,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EACxD,OAAO,EAAE,KAAK;GACb,IAAI;GACJ,eAAe,oBAAoB,KAAK,uBAAuB,OAAO,YAAY,CAAC;EACpF,CAAC;CACF,CAAC;CAED,IAAI,IAAI,uCAAuC,MAAM;EACpD,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,GAAG,CAAC;EAC7D,OAAO,EAAE,KAAK;GACb,QAAQ,gCAAgC,MAAM,EAAE;GAChD,UAAU,iCAAiC,MAAM,EAAE;GACnD,UAAU,2BAA2B,MAAM,IAAI,EAAE,MAAM,CAAC;GACxD,wBAAwB;EACzB,CAAC;CACF,CAAC;CAED,IAAI,IAAI,6CAA6C,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,OAAO,EAAE,KACR,qCAAqC,MAAM,IAAI;GAC9C,cAAc,MAAM;GACpB,eAAe,MAAM;EACtB,CAAC,CACF;CACD,CAAC;CAED,IAAI,IAAI,yCAAyC,MAAM;EACtD,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,OAAO,EAAE,KACR,0BAA0B,MAAM,IAAI;GACnC,cAAc,MAAM;GACpB,eAAe,MAAM;EACtB,CAAC,CACF;CACD,CAAC;CAED,IAAI,IAAI,yCAAyC,MAAM;EACtD,MAAM,QAAQ,SAAS;EACvB,OAAO,EAAE,KAAK,0BAA0B,MAAM,EAAE,CAAC;CAClD,CAAC;CAED,IAAI,IAAI,wDAAwD,MAAM;EACrE,OAAO,EAAE,KAAK,wCAAwC,SAAS,CAAC,CAAC;CAClE,CAAC;CAED,IAAI,KAAK,+CAA+C,OAAO,MAAM;EACpE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI;GACH,OAAO,EAAE,KAAK,4BAA4B,MAAM,IAAI,IAAI,CAAC;EAC1D,SAAS,OAAO;GACf,IAAI,iBAAiB,iCAAiC;IACrD,IAAI,MAAM,WAAW,aACpB,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,UAAU,GAAG,GAAG;IAE9C,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,UAAU,GAAG,GAAG;GAC9C;GACA,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAClD;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;EACpD;CACD,CAAC;CAED,IAAI,KAAK,8CAA8C,OAAO,MAAM;EACnE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI;GACH,MAAM,UAAU,sCAAsC,IAAI;GAI1D,MAAM,UAAU,UACb,CACA,GAAG,IAAI,IACN,QAAQ,QAAQ,SAAS,WACxB,OAAO,UAAU,kBAAkB,SAAS,CAAC,OAAO,UAAU,MAAM,IAAI,CAAC,CAC1E,CACD,CACD,CAAC,CAAC,SAAS,IACV,CAAC;GACJ,MAAM,SAAS,OACd,UAC4D;IAC5D,MAAM,SAAS,QAAQ;IACvB,IAAI,CAAC,QAAQ,OAAO,2BAA2B,MAAM,IAAI,WAAW,IAAI;IACxE,OAAO,qCAAqC,MAAM,IAAI,cAAc,OAAO,QAAQ,CAAC,CAAC;GACtF;GACA,MAAM,SAAS,MAAM,OAAO,CAAC;GAC7B,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC1D,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC5D,IAAI,OAAO,WAAW,WAAW,OAAO,WAAW,YAClD,OAAO,EAAE,KAAK,QAAQ,GAAG;GAE1B,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;GACjD;GACA,OAAO,EAAE,KACR;IACC,SAAS;IACT,QAAQ;IACR,sBAAsB;IACtB,WAAW;IACX,UAAU,CAAC;IACX,YAAY;IACZ,YAAY;GACb,GACA,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,iDAAiD,OAAO,MAAM;EACtE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC1D,IAAI;GACH,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;GAG9D,MAAM,cAAc,mCADL,8BADA,0BAC8B,CACU,GAAQ,IAAI;GACnE,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;GACvE,MAAM,WACL,SAAS,gBACN,2BAA2B,MAAM,gBAAgB,IACjD,2BAA2B,MAAM,oBAAoB;GACzD,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,mCAAmC;GAClE,IAAI,SAAS,gBAAgB,aAAa,MAAM,SAC/C,MAAM,IAAI,MAAM,0BAA0B;GAE3C,MAAM,UAAU,iCACf,OACA,MACA,yBAAyB,MAAM,QAAQ,CACxC;GACA,OAAO,EAAE,KAAK;IAAE;IAAM;GAAQ,CAAC;EAChC,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,2BAA2B,GAC7E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,yCAAyC,OAAO,MAAM;EAC9D,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC1D,IAAI;GACH,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;GAC9D,MAAM,SAAS,0BAA0B;GACzC,MAAM,SAAS,8BAA8B,MAAM;GACnD,MAAM,cAAc,mCAAmC,QAAQ,IAAI;GACnE,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;GACvE,MAAM,WACL,SAAS,gBACN,2BAA2B,MAAM,gBAAgB,IACjD,2BAA2B,MAAM,oBAAoB;GACzD,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,mCAAmC;GAClE,IAAI,SAAS,gBAAgB,aAAa,MAAM,SAC/C,MAAM,IAAI,MAAM,0BAA0B;GAE3C,MAAM,UAAU,iCACf,OACA,MACA,yBAAyB,MAAM,QAAQ,CACxC;GACA,MAAM,iBAAiB,2BAA2B,MAAM,4BAA4B;GACpF,IAAI,CAAC,gBAAgB,MAAM,IAAI,MAAM,qCAAqC;GAC1E,IAAI,mBAAmB,QAAQ,0BAC9B,OAAO,EAAE,KAAK;IAAE,OAAO;IAA6B;GAAQ,GAAG,GAAG;GAEnE,MAAM,iBAAiB,8BAA8B,OAAO,MAAM,UAAU,OAAO;GACnF,MAAM,wBAAwB,MAAM,8BAA8B,cAAc;GAChF,MAAM,UAAU,6BAA6B,qBAAqB,MAAM,UAAU,GAAG,MAAM;GAC3F,MAAM,WAAW,oBAAoB,KAAK,SAAS;GACnD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,mBAAmB;GACjD,IAAI,YAAY,MAAM,MAAM,IAAI,MAAM,mBAAmB;GAKzD,MAAM,SADmB,SAAS,iBAAiB,OAAO,mBAEvD,MAAM,8BAA8B;IACpC;IACA,gBAAgB,OAAO,sBAAsB;IAC7C,QAAQ;IACR;IACA,WAAW,MAAM;IACjB,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;IAClD,YAAY;IACZ,cAAc,SAAS,gBAAgB,WAAW;IAClD,kBAAkB,SAAS,eAAe,WAAW;IACrD,iBAAiB,SAAS,eAAe,QAAQ,QAAQ,WAAW;IACpE;IACA;GACD,CAAC,IACA,MAAM,uCAAuC;IAC7C;IACA,gBAAgB,OAAO,sBAAsB;IAC7C;IACA,UAAU,QAAQ,QAAQ;IAC1B,SAAS,YAAY;IACrB,WAAW,OAAO,sBAAsB;IACxC;IACA;GACD,CAAC;GACH,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAM;IAAS,QAAQ;GAAO,CAAC;EAC1D,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,0BAA0B,GAC5E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,yCAAyC,OAAO,MAAM;EAC9D,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,MAAM,oBAAoB,CAAC;EACzC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAEhD,MAAM,OAAO;EACb,IACC,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,QAAQ,QAAQ,KAC/C,OAAO,OAAO,MAAM,QAAQ,KAAK,OAAO,KAAK,WAAW,WAEzD,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAEhD,IAAI;GACH,OAAO,EAAE,KACR,6BACC,MAAM,IACN;IAAE,cAAc,MAAM;IAAS,eAAe,MAAM;GAAS,GAC7D,EAAE,QAAQ,KAAK,WAAW,KAAK,CAChC,CACD;EACD,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC/C;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EACjD;CACD,CAAC;CAED,MAAM,sBAAsB,UAAiE;EAC5F,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;EACxE,MAAM,OAAO;EACb,MAAM,8BAAc,IAAI,IAAI;GAAC;GAAgB;GAAqB;GAAY;EAAe,CAAC;EAC9F,IACC,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,IAAI,GAAG,CAAC,KACrD,OAAO,KAAK,iBAAiB,YAC7B,OAAO,KAAK,sBAAsB,YAClC,OAAO,KAAK,aAAa,UAEzB,OAAO;EAER,OAAO;GACN,cAAc,KAAK;GACnB,mBAAmB,KAAK;GACxB,UAAU,KAAK;GACf,GAAI,OAAO,OAAO,MAAM,eAAe,IAAI,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;EACrF;CACD;CAEA,IAAI,KAAK,gDAAgD,OAAO,MAAM;EACrE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,MAAM,UAAU,mBAAmB,IAAI;EACvC,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC7D,uBAAuB,KAAK;EAC5B,MAAM,SAAS,6BACd,MAAM,IACN;GAAE,cAAc,MAAM;GAAS,eAAe,MAAM;EAAS,GAC7D,OACD;EACA,IAAI,OAAO,WAAW,WAAW,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,QAAQ,GAAG;EACxF,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;EAC5D,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;EAC1D,OAAO,EAAE,KAAK,MAAM;CACrB,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EAC1E,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IACC,CAAC,QACD,CAAC,MAAM,QAAQ,KAAK,QAAQ,KAC5B,KAAK,SAAS,WAAW,KACzB,KAAK,SAAS,SAAS,KAEvB,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAChD,MAAM,WAAW,KAAK,SAAS,IAAI,kBAAkB;EACrD,IAAI,SAAS,MAAM,YAAY,WAAW,IAAI,GAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAChD,uBAAuB,KAAK;EAC5B,MAAM,SAAS,iCACd,MAAM,IACN;GAAE,cAAc,MAAM;GAAS,eAAe,MAAM;EAAS,GAC7D,QACD;EACA,OAAO,EAAE,KAAK,QAAQ,OAAO,QAAQ,MAAM,SAAS,KAAK,WAAW,SAAS,IAAI,MAAM,GAAG;CAC3F,CAAC;CAED,IAAI,IAAI,sBAAsB,OAAO,MAAM;EAC1C,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,CAAC;EAC5D,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;EAC7D,MAAM,YAAY,0BAA0B,MAAM,IAAI;GACrD,gBAAgB,EAAE,IAAI,MAAM,iBAAiB;GAC7C;GACA;GACA,OAAO,EAAE,IAAI,MAAM,GAAG;GACtB,SAAS,EAAE,IAAI,MAAM,UAAU;GAC/B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC7B,CAAC;EACD,MAAM,aAAa,MAAM,yBAAyB,OAAO,KAAA,GAAW,KAAK;EACzE,MAAM,gBAAgB,IAAI,IACzB,WAAW,KAAK,cAAc,CAAC,UAAU,cAAc,SAAS,CAAC,CAClE;EACA,MAAM,mCAAmB,IAAI,IAA4C;EACzE,MAAM,WAAW,MAAM,GACrB,QAAQ;;;kEAGsD,CAAC,CAC/D,IAAI,MAAM,OAAO;EACnB,KAAK,MAAM,QAAQ,UAAU;GAC5B,MAAM,YAAY,cAAc,IAAI,KAAK,YAAY;GACrD,IAAI,CAAC,WAAW;GAChB,MAAM,UAAU,iBAAiB,IAAI,KAAK,0BAA0B,KAAK,CAAC;GAC1E,QAAQ,KAAK;IACZ,QAAQ,UAAU;IAClB,WAAW;KACV,OAAO,UAAU,UAAU;KAC3B,OAAO,UAAU,UAAU;KAC3B,aAAa,UAAU,UAAU;IAClC;GACD,CAAC;GACD,iBAAiB,IAAI,KAAK,4BAA4B,OAAO;EAC9D;EACA,OAAO,EAAE,KAAK;GACb,GAAG;GACH,UAAU,UAAU,SAAS,KAAK,aAAa;IAC9C,GAAG;IACH,SAAS,iBAAiB,IAAI,QAAQ,kBAAkB,KAAK,CAAC;GAC/D,EAAE;EACH,CAAC;CACF,CAAC;CAED,IAAI,KAAK,uCAAuC,OAAO,MAAM;EAC5D,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB,KAAK;GACpF,MAAM,UAAU,2BAA2B,MAAM,SAAS,KAAK;GAC/D,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GAC5E,MAAM,SAAS,qCAAqC,MAAM,IAAI;IAC7D;IACA;IACA;GACD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;GAAO,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,QAAQ,SAAS,WAAW,IAAI,MAAM,GAAG;EAC5E;CACD,CAAC;CAED,IAAI,KAAK,6BAA6B,OAAO,MAAM;EAClD,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB,KAAK;GACpF,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB;GAC/E,MAAM,YAAY,KAAK,cAAc;GACrC,MAAM,SAAS,oCAAoC,OAAO;IACzD;IACA;IACA;GACD,CAAC;GACD,IAAI,CAAC,WACJ,OAAO,EAAE,KACR;IACC,OAAO;IACP,SAAS;GACV,GACA,GACD;GAED,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;GAAO,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,QAAQ,SAAS,WAAW,IAAI,MAAM,GAAG;EAC5E;CACD,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,wBAAwB,MAAM,KAAK;GACnC,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;GAIzC,MAAM,EAAE,SAAS,kBAAkB,OAAO,MAAM,WAHxB,IAAI,KAC3B,IAAI,KAAK,SAAS,CAAC,CAAC,QAAQ,IAAI,2BAA2B,OAAO,GACnE,CAAC,CAAC,YACyD,CAAe;GAC1E,OAAO,EAAE,KAAK,qBAAqB,IAAI,CAAC;EACzC,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,yBAAyB,GAC3E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,6BAA6B,OAAO,MAAM;EAClD,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,wBAAwB,MAAM,IAAI;GAClC,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;GAIzC,MAAM,EAAE,MAAM,WAAW,kBAAkB,OAAO,MAAM,WAHhC,IAAI,KAC3B,IAAI,KAAK,SAAS,CAAC,CAAC,QAAQ,IAAI,2BAA2B,OAAO,GACnE,CAAC,CAAC,YACiE,CAAe;GAClF,IAAI,OAAO,KAAK,2BAA2B,CAAC,CAAC,KAAK,MAAM,KAAK,0BAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;GAE7D,MAAM,uBAAuB;IAC5B,IAAI;KACH,OAAO,MAAM,GACX,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,KAAK,WAAW;IACvB,QAAQ;KAGP;IACD;GACD,EAAA,CAAG;GACH,IAAI,iBAAiB,kBAAkB,0BACtC,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;GAKxD,MAAM,SAAS,MAAM,8BAA8B;IAClD,SAAS,KAAK;IACd,gBAAgB,OAAO,sBAAsB;IAC7C,QAAQ;IACR,UAAU;IACV,WAAW,MAAM;IACjB,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;IAClD,aAAa,KAAK;IAClB,0BAA0B,KAAK;IAC/B,gBAAgB,KAAK;IACrB,oBAAoB,gCAAgC,MAAM,gBAAgB;IAC1E,iBAAiB,KAAK,iBAAiB;IACvC,iBAAiB,KAAK;IACtB,kBAAkB,KAAK,SAAS,KAAK,aAAa;KACjD,cAAc,QAAQ;KACtB,uBAAuB,QAAQ;IAChC,EAAE;IACF,eAAe,KAAK,SAAS,KAAK,aAAa;KAC9C,oBAAoB,QAAQ;KAC5B,cAAc,QAAQ;KACtB,uBAAuB,QAAQ;IAChC,EAAE;GACH,CAAC;GACD,IACC,OAAO,OAAO,gBAAgB,EAAE,CAAC,CAAC,KAAK,MAAM,KAAK,eAClD,OAAO,OAAO,+BAA+B,EAAE,CAAC,CAAC,KAAK,MAAM,KAAK,0BAEjE,MAAM,IAAI,MAAM,oCAAoC;GAErD,MAAM,UAAU,OAAO;GACvB,IAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GACnE,MAAM,IAAI,MAAM,oCAAoC;GAErD,MAAM,QAAQ,OAAQ,QAAoC,SAAS,EAAE,CAAC,CAAC,KAAK;GAC5E,MAAM,YAAY,OAAQ,QAAoC,cAAc,EAAE,CAAC,CAAC,KAAK;GACrF,MAAM,OAAO,OAAO,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK;GAC5C,MAAM,UAAU,OAAO,OAAO,WAAW,EAAE,CAAC,CAAC,KAAK;GAClD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,SACrC,MAAM,IAAI,MAAM,oCAAoC;GAErD,MAAM,gBAAgB;IAAE,GAAG;IAAM,iBAAiB,IAAI,KAAK,SAAS,CAAC,CAAC,YAAY;GAAE;GACpF,sBAAsB,MAAM,IAAI,eAAe;IAC9C,UAAU,OAAO,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK,KAAK;IACnD,aAAa,kBAAkB,KAAK;GACrC,CAAC;GACD,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,GAAG,qBAAqB,aAAa;IACrC,QAAQ;KACP;KACA;KACA,YAAY,cAAc;IAC3B;GACD,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,wBAAwB,GAC1E,GACD;EACD;CACD,CAAC;CAED,IAAI,IAAI,0CAA0C,OAAO,MAAM;EAC9D,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,EAAE,YAAY,MAAM,gCAAgC,WAAW;GACrE,OAAO,EAAE,KACR,QAAQ,UAAU,aAAa;IAAE,GAAG;IAAS,OAAO;GAAgB,IAAI,OACzE;EACD,SAAS,OAAO;GACf,MAAM,SAAS,gCAAgC,OAAO;IACrD,MAAM;IACN,QAAQ;GACT,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM;EACpD;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,SAAS,MAAM,iCAAiC,OAAO,WAAW;GACxE,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,cAAc;IACd,YAAY,OAAO;IACnB,OAAO,OAAO,WAAW,kBAAkB;GAC5C,CAAC;EACF,SAAS,OAAO;GACf,MAAM,SAAS,gCAAgC,OAAO;IACrD,MAAM;IACN,QAAQ;GACT,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM;EACpD;CACD,CAAC;CAED,IAAI,IAAI,8BAA8B,OAAO,MAAM;EAElD,MAAM,QAAQ,MAAM,yBADN,SAC+B,GAAO,KAAA,GAAW,KAAK;EACpE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;CAED,IAAI,IAAI,2CAA2C,OAAO,MAAM;EAC/D,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,MAAM,CAAC,QAAQ,MAAM,yBAAyB,OAAO,WAAW;EAChE,OAAO,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;CAC1E,CAAC;CAED,MAAM,sBAAsB,OAAO,MAAe;EACjD,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,WAAW,MAAM,6BAA6B,OAAO,WAAW;GACtE,IAAI,CAAC,SAAS,UACb,OAAO,EAAE,KACR,EACC,OACC,SAAS,UAAU,cAAc,yBAAyB,0BAC5D,GACA,GACD;GAED,MAAM,CAAC,aAAa,MAAM,yBAAyB,OAAO,WAAW;GACrE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;GAAU,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAKtD,IAJc,MAAM,GAClB,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,WACF,MAAU,aACb,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,SAAS,wBAAwB,MAAM,GAAG;EAC1E;CACD;CAEA,IAAI,KAAK,mDAAmD,mBAAmB;CAE/E,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,OAAO,MAAM,gCAAgC,OAAO,WAAW;GACrE,IAAI,KAAK,YAGR,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,cAAc;IAAa,OAAO;IAAU;GAAK,CAAC;EAC7E,SAAS,OAAO;GACf,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAKtD,IAJc,MAAM,GAClB,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,WACF,MAAU,aACb,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,SAAS,wBAAwB,MAAM,GAAG;EAC1E;CACD,CAAC;CAED,IAAI,KAAK,2CAA2C,OAAO,MAAM;EAChE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB,KAAK;GACpF,MAAM,UAAU,2BAA2B,MAAM,UAAU,KAAK;GAChE,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB;GAC/E,MAAM,qBAAqB,KAAK,yBAAyB;GACzD,MAAM,UAAU,sCAAsC,OAAO;IAC5D;IACA;GACD,CAAC;GACD,IAAI,CAAC,oBACJ,OAAO,EAAE,KACR;IACC,OAAO;IACP,SAAS,QAAQ;IACjB;GACD,GACA,GACD;GAED,OAAO,EAAE,KACR,gCAAgC,OAAO;IACtC;IACA;IACA;GACD,CAAC,CACF;EACD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,QAAQ,SAAS,WAAW,IAAI,MAAM,GAAG;EAC5E;CACD,CAAC;CAED,IAAI,IAAI,8CAA8C,OAAO,MAAM;EAClE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;EACJ,IAAI;GACH,MAAM,2BAA2B,yBAAyB,MAAM,4BAA4B;GAC5F,MAAM,eAAe,+BAA+B,IAAI;GACxD,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,MAAM,WAAW,2CAA2C,MAAM,IAAI,YAAY;GAClF,IAAI,SAAS,8BAA8B,WAAW,WAAW,GAChE,OAAO,EAAE,KACR;IACC,OAAO;IACP,SACC;IACD,oBAAoB,SAAS;GAC9B,GACA,GACD;GAED,MAAM,uBAAuB,8BAC5B,SAAS,UACT,wBACD;GACA,IAAI,qBAAqB,SAAS,GAAG;IACpC,MAAM,eAAe,CAAC,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,IAAI,CAAC,CAAC;IACrF,MAAM,gBAAgB,CACrB,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,kBAAkB,CAAC,CAC7E,CAAC,CAAC,QAAQ,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;IAClF,OAAO,EAAE,KACR;KACC,OAAO;KACP,qBAAqB;KACrB,2BAA2B;KAC3B,oBAAoB,SAAS;IAC9B,GACA,GACD;GACD;GACA,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GAC5E,MAAM,UAAU,kCAAkC,MAAM,IAAI;IAC3D;IACA,GAAG;GACJ,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,oBAAoB,SAAS;GAAS,CAAC;EAC3E,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAED,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACvE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;EACJ,IAAI;GACH,MAAM,cAAc,KAAK;GACzB,IAAI,CAAC,MAAM,QAAQ,WAAW,KAAK,YAAY,WAAW,GACzD,OAAO,EAAE,KAAK,EAAE,OAAO,qCAAqC,GAAG,GAAG;GAEnE,MAAM,gBAAgB,YAAY,KAAK,QAAQ;IAC9C,IAAI,OAAO,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAC9D,MAAM,IAAI,MAAM,gCAAgC;IAEjD,OAAO,+BAA+B,GAA8B;GACrE,CAAC;GACD,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,MAAM,WAAW,cAAc,KAAK,iBACnC,2CAA2C,MAAM,IAAI,YAAY,CAClE;GACA,MAAM,WAAW,SAAS,MAAM,aAC/B,SAAS,8BAA8B,WAAW,WAAW,CAC9D;GACA,IAAI,UACH,OAAO,EAAE,KACR;IACC,OAAO;IACP,SACC;IACD,oBAAoB,SAAS;GAC9B,GACA,GACD;GAED,MAAM,uBAAuB,SAAS,SAAS,aAC9C,8BAA8B,SAAS,UAAU,CAAC,CAAC,CACpD;GACA,IAAI,qBAAqB,SAAS,GAAG;IACpC,MAAM,eAAe,CAAC,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,IAAI,CAAC,CAAC;IACrF,MAAM,gBAAgB,CACrB,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,kBAAkB,CAAC,CAC7E,CAAC,CAAC,QAAQ,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;IAClF,OAAO,EAAE,KACR;KACC,OAAO;KACP,qBAAqB;KACrB,2BAA2B;KAC3B,oBAAoB,SAAS,SAAS,aAAa,SAAS,QAAQ;IACrE,GACA,GACD;GACD;GACA,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GAC5E,MAAM,eAAe,MAAM,GAAG,kBAC7B,cAAc,KAAK,iBAClB,kCAAkC,MAAM,IAAI;IAAE;IAAU,GAAG;GAAa,CAAC,CAC1E,CACD;GACA,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,UAAU,aAAa;IACvB,oBAAoB,SAAS,SAAS,aAAa,SAAS,QAAQ;GACrE,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAED,IAAI,OAAO,kDAAkD,OAAO,MAAM;EACzE,MAAM,QAAQ,SAAS;EACvB,MAAM,KAAK,OAAO,EAAE,IAAI,MAAM,IAAI,CAAC;EACnC,IAAI;EACJ,IAAI;GACH,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,MAAM,UAAU,kCAAkC,MAAM,IAAI,EAAE;GAC9D,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;GAAQ,CAAC;EACpC,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAED,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;EAC5D,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAC1E,MAAM,mBACL,KAAK,YAAY,OAAO,KAAA,IAAY,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,KAAK;EAC3E,MAAM,oBACL,OAAO,KAAK,wBAAwB,YAAY,KAAK,sBAAsB,KAAA;EAC5E,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,OAAO,EACX,OAAO;GACP,gBAAgB,OAAO,UAAU;GACjC,UAAU,OAAO,UAAU;GAC3B,qBAAqB,OAAO,UAAU;EACvC,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAEzD,IAAI,cAAc,KAAK,YAAY;EACnC,IAAI,wBAAwB,QAAQ,KAAK,mBAAmB;EAC5D,IAAI,qBAAqB,KAAA,GAAW;GACnC,cAAc;GACd,IAAI,kBAAkB;IACrB,MAAM,QAAQ,EACZ,OAAO;KACP,UAAU,OAAO,OAAO;KACxB,UAAU,OAAO,OAAO;KACxB,QAAQ,OAAO,OAAO;IACvB,CAAC,CAAC,CACD,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,gBAAgB,CAAC,CAAC,CACnD,IAAI;IACN,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;IAC3D,IAAI,MAAM,WAAW,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;IAC/E,wBAAwB,qBAAqB,QAAQ,MAAM,QAAQ;GACpE,OACC,wBAAwB,qBAAqB;EAE/C,OAAO,IAAI,sBAAsB,KAAA,GAAW;GAC3C,wBAAwB;GACxB,IAAI,mBACH,cAAc,MAAM;QACd,IAAI,gBAAgB,MAAM,SAChC,cAAc;EAEhB;EAEA,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI;GACJ,UAAU;GACV,qBAAqB,wBAAwB,IAAI;EAClD,CAAC,CAAC,CACD,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,UAAU;GAAa,qBAAqB;EAAsB,CAAC;CAC9F,CAAC;CAED,IAAI,KAAK,oBAAoB,OAAO,MAAM;EACzC,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,iBAAiB,OAAO,KAAK,gBAAgB,EAAE;EACrD,IAAI,CAAC,eAAe,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EACjF,IAAI;EACJ,IAAI;GACH,cAAc,+BAA+B,gBAAgB,cAAc;EAC5E,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBAAuB,GACzE,GACD;EACD;EACA,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,QAAQ;GACb,UAAU,WAAW;GACrB,cAAc;GACd,UAAU;GACV,QAAQ;GACR,sBAAsB;GACtB,YAAY;GACZ,YAAY;EACb;EACA,EAAE,OAAO,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI;EAC1C,OAAO,EAAE,KAAK,KAAK;CACpB,CAAC;CAED,IAAI,KAAK,2BAA2B,OAAO,MAAM;EAChD,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,IAAI;EACJ,IAAI;GACH,cAAc,+BAA+B,OAAO,KAAK,gBAAgB,EAAE,GAAG,cAAc;EAC7F,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBAAuB,GACzE,GACD;EACD;EACA,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAAC,IAAI;EAC5F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC3D,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACzC,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;GAAE,cAAc;GAAa,YAAY;EAAU,CAAC,CAAC,CACzD,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAC1C,IAAI;EACN,OAAO,EAAE,KAAK;GAAE,GAAG;GAAO,cAAc;GAAa,YAAY;EAAU,CAAC;CAC7E,CAAC;CAED,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC/C,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,iBAAiB,OAAO,KAAK,oBAAoB,EAAE,CAAC,CAAC,KAAK;EAChE,MAAM,mBAAmB,OAAO,KAAK,sBAAsB,EAAE,CAAC,CAAC,KAAK;EACpE,IAAI,CAAC,gBAAgB,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAC9E,IAAI,CAAC,kBAAkB,OAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;EAClF,IAAI,mBAAmB,kBAAkB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAC9F,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,wBAAwB,MAAM,mCAAmC,MAAM,IAAI,CAChF,gBACA,gBACD,CAAC;EAGD,eAAe,qBAAqB;EACpC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,SAAS,MAAM,GACnB,kBAAkB;GAClB,MAAM,UAAU,EACd,OAAO,CAAC,CACR,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,cAAc,CAAC,CAAC,CACjD,IAAI;GACN,MAAM,YAAY,EAChB,OAAO,CAAC,CACR,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,gBAAgB,CAAC,CAAC,CACnD,IAAI;GACN,IAAI,CAAC,WAAW,CAAC,WAAW,OAAO;IAAE,OAAO;IAAmB,QAAQ;GAAa;GACpF,IAAI,QAAQ,WAAW,UACtB,OAAO;IAAE,OAAO;IAA4B,QAAQ;GAAa;GAElE,IAAI,UAAU,WAAW,UACxB,OAAO;IAAE,OAAO;IAA8B,QAAQ;GAAa;GAEpE,IAAI,UAAU,YAAY,UAAU,aAAa,MAAM,SACtD,OAAO;IAAE,OAAO;IAA8C,QAAQ;GAAa;GAEpF,MAAM,cAAc,EAClB,OAAO,CAAC,CACR,KAAK,OAAO,qBAAqB,CAAC,CAClC,MAAM,GAAG,OAAO,sBAAsB,aAAa,gBAAgB,CAAC,CAAC,CACrE,IAAI;GACN,MAAM,qCAAqB,IAAI,IAAsD;GACrF,KAAK,MAAM,cAAc,aAAa;IACrC,MAAM,oBAAoB,EACxB,OAAO,CAAC,CACR,KAAK,OAAO,qBAAqB,CAAC,CAClC,MACA,IACC,GAAG,OAAO,sBAAsB,SAAS,WAAW,OAAO,GAC3D,GAAG,OAAO,sBAAsB,aAAa,cAAc,CAC5D,CACD,CAAC,CACA,IAAI;IACN,IACC,sBACC,kBAAkB,SAAS,WAAW,QACtC,kBAAkB,WAAW,WAAW,SAEzC,OAAO;KAAE,OAAO;KAAmC,QAAQ;IAAa;IAEzE,mBAAmB,IAAI,WAAW,SAAS,iBAAiB;GAC7D;GACA,MAAM,mBAAmB,EACvB,OAAO,CAAC,CACR,KAAK,OAAO,iBAAiB,CAAC,CAC9B,MACA,IACC,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,gBAAgB,CAC3D,CACD,CAAC,CACA,IAAI;GACN,MAAM,oCAAoB,IAAI,IAA2D;GACzF,KAAK,MAAM,aAAa,kBAAkB;IACzC,MAAM,mBAAmB,EACvB,OAAO,CAAC,CACR,KAAK,OAAO,iBAAiB,CAAC,CAC9B,MACA,IACC,GACC,OAAO,kBAAkB,4BACzB,UAAU,0BACX,GACA,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,cAAc,CACzD,CACD,CAAC,CACA,IAAI;IACN,IAAI,oBAAoB,iBAAiB,WAAW,UAAU,QAC7D,OAAO;KAAE,OAAO;KAAqC,QAAQ;IAAa;IAE3E,kBAAkB,IAAI,UAAU,4BAA4B,gBAAgB;GAC7E;GAEA,MAAM,cAAc,WAAW,QAAQ,CAAC,CACtC,OACA,KAAK,UAAU;IACd,MAAM;IACN;IACA;IACA,OAAO,WAAW;GACnB,CAAC,CACF,CAAC,CACA,OAAO,KAAK;GACd,MAAM,WAAW,EACf,OAAO;IACP,UAAU,OAAO,gBAAgB;IACjC,mBAAmB,OAAO,gBAAgB;GAC3C,CAAC,CAAC,CACD,KAAK,OAAO,eAAe,CAAC,CAC5B,MAAM,GAAG,OAAO,gBAAgB,aAAa,gBAAgB,CAAC,CAAC,CAC/D,IAAI;GACN,IAAI,SAAS,SAAS,GAAG;IACxB,MAAM,eAAe;IACrB,MAAM,WAAW,SAAS,KAAK,aAAa;KAC3C,UAAU,QAAQ;KAClB,oBAAoB;KACpB,kBAAkB;KAClB,QAAQ;IACT,EAAE;IACF,MAAM,GACJ,QAAQ;;;uCAGwB,CAAC,CACjC,IACA,cACA,kBAAkB,iBAAiB,GAAG,kBACtC,KAAK,UAAU;KAAE;KAAgB;IAAiB,CAAC,GACnD,KAAK,UAAU,QAAQ,GACvB,SAAS,QACT,MAAM,SACN,MAAM,UACN,GACD;IAED,KAAK,MAAM,WAAW,UAAU;KAC/B,MAAM,WAAW,WAAW,QAAQ,CAAC,CACnC,OAAO,+BAA+B,aAAa,IAAI,QAAQ,UAAU,CAAC,CAC1E,OAAO,KAAK;KACd,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OAAO,0BAA0B,aAAa,IAAI,QAAQ,UAAU,CAAC,CACrE,OAAO,KAAK;KAgBd,IAfsB,MAAM,GAC1B,QAAQ;;;;+CAI+B,CAAC,CACxC,IACA,gBACA,UACA,cACA,gBACA,KACA,QAAQ,UACR,gBAEE,CAAA,CAAc,YAAY,GAC7B,MAAM,IAAI,MAAM,sCAAsC;KACvD,MAAM,UAAU,MAAM,GACpB,QAAQ,qEAAqE,CAAC,CAC9E,IAAI,QAAQ,QAAQ;KACtB,IAAI,CAAC,WAAW,QAAQ,uBAAuB,QAAQ,oBAAoB,GAC1E,MAAM,IAAI,MAAM,8CAA8C;KAE/D,MAAM,GACJ,QAAQ,8DAA8D,CAAC,CACvE,IAAI,QAAQ,QAAQ;KACtB,MAAM,GACJ,QAAQ;;;;wDAIwC,CAAC,CACjD,IACA,WAAW,QAAQ,CAAC,CAClB,OAAO,4BAA4B,aAAa,IAAI,QAAQ,UAAU,CAAC,CACvE,OAAO,KAAK,GACd,cACA,QAAQ,UACR,kBACA,gBACA,QAAQ,mBACR,QAAQ,oBACR,MAAM,SACN,MAAM,UACN,GACD;IACF;GACD;GAEA,KAAK,MAAM,cAAc,aAAa;IAErC,IAD0B,mBAAmB,IAAI,WAAW,OACxD,GAAmB;KACtB,EAAE,OAAO,OAAO,qBAAqB,CAAC,CACpC,MACA,IACC,GAAG,OAAO,sBAAsB,SAAS,WAAW,OAAO,GAC3D,GAAG,OAAO,sBAAsB,aAAa,gBAAgB,CAC9D,CACD,CAAC,CACA,IAAI;KACN;IACD;IACA,MAAM,WAAW,WAAW,QAAQ,CAAC,CACnC,OAAO,0CAA0C,YAAY,IAAI,WAAW,SAAS,CAAC,CACtF,OAAO,KAAK;IACd,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OAAO,qCAAqC,YAAY,IAAI,WAAW,SAAS,CAAC,CACjF,OAAO,KAAK;IACd,EAAE,OAAO,OAAO,qBAAqB,CAAC,CACpC,IAAI;KACJ,aAAa;KACb,YAAY;KACZ;KACA,iBAAiB;KACjB,oBAAoB;KACpB,iBAAiB;KACjB,YAAY;IACb,CAAC,CAAC,CACD,MACA,IACC,GAAG,OAAO,sBAAsB,SAAS,WAAW,OAAO,GAC3D,GAAG,OAAO,sBAAsB,aAAa,gBAAgB,CAC9D,CACD,CAAC,CACA,IAAI;GACP;GACA,KAAK,MAAM,aAAa,kBAAkB;IAEzC,IADyB,kBAAkB,IAAI,UAAU,0BACrD,GAAkB;KACrB,EAAE,OAAO,OAAO,iBAAiB,CAAC,CAChC,MACA,IACC,GACC,OAAO,kBAAkB,4BACzB,UAAU,0BACX,GACA,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,gBAAgB,CAC3D,CACD,CAAC,CACA,IAAI;KACN;IACD;IACA,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OACA,yCAAyC,YAAY,IAAI,UAAU,4BACpE,CAAC,CACA,OAAO,KAAK;IACd,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OACA,oCAAoC,YAAY,IAAI,UAAU,4BAC/D,CAAC,CACA,OAAO,KAAK;IACd,EAAE,OAAO,OAAO,iBAAiB,CAAC,CAChC,IAAI;KACJ,cAAc;KACd,YAAY;KACZ,iBAAiB;KACjB,iBAAiB;KACjB,oBAAoB;KACpB,iBAAiB;KACjB,YAAY;IACb,CAAC,CAAC,CACD,MACA,IACC,GACC,OAAO,kBAAkB,4BACzB,UAAU,0BACX,GACA,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,gBAAgB,CAC3D,CACD,CAAC,CACA,IAAI;GACP;GACA,EAAE,OAAO,OAAO,kCAAkC,CAAC,CACjD,IAAI;IAAE,uBAAuB;IAAgB,YAAY;GAAI,CAAC,CAAC,CAC/D,MACA,GAAG,OAAO,mCAAmC,uBAAuB,gBAAgB,CACrF,CAAC,CACA,IAAI;GACN,MAAM,GACJ,QAAQ;;;;;4EAK8D,CAAC,CACvE,IACA,kBACA,gBACA,kBACA,gBACA,kBACA,gBACA,KACA,kBACA,kBACA,gBACD;GAED,MAAM,aAAa,EACjB,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,UAAU,eAAe,CAAC,CAAC,CACjC,MAAM,GAAG,OAAO,UAAU,UAAU,gBAAgB,CAAC,CAAC,CACtD,IAAI;GACN,IAAI,QAAQ,UACX,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAC/B,MAAM,GAAG,OAAO,UAAU,UAAU,cAAc,CAAC,CAAC,CACpD,IAAI;GAEP,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;IAAE,QAAQ;IAAU,sBAAsB;IAAgB,YAAY;GAAI,CAAC,CAAC,CAChF,MAAM,GAAG,OAAO,OAAO,UAAU,gBAAgB,CAAC,CAAC,CACnD,IAAI;GACN,OAAO,EAAE,aAAa,OAAO,WAAW,WAAW,CAAC,EAAE;EACvD,CAAC,CAAC,CACD,UAAU;EACZ,IAAI,WAAW,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,OAAO,MAAM,GAAG,OAAO,MAAM;EAC3E,OAAO,EAAE,KAAK,EAAE,cAAc,OAAO,YAAY,CAAC;CACnD,CAAC;CAED,IAAI,KAAK,+BAA+B,OAAO,MAAM;EACpD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,IAAI,YAAY,MAAM,SACrB,OAAO,EAAE,KAAK,EAAE,OAAO,kDAAkD,GAAG,GAAG;EAEhF,MAAM,wBAAwB,MAAM,mCAAmC,MAAM,IAAI,CAAC,OAAO,CAAC;EAE1F,eAAe,qBAAqB;EACpC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAAC,IAAI;EAC5F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC3D,IAAI,MAAM,WAAW,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAC/E,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;GAAE,QAAQ;GAAe,YAAY;EAAI,CAAC,CAAC,CAC/C,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAC1C,IAAI;EACN,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,UAAU,KAAK,CAAC,CAAC,CACvB,MAAM,GAAG,OAAO,UAAU,UAAU,OAAO,CAAC,CAAC,CAC7C,IAAI;EACN,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC3B,CAAC;CAED,IAAI,KAAK,kCAAkC,OAAO,MAAM;EACvD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,iBAAiB,OAAO,KAAK,oBAAoB,EAAE,CAAC,CAAC,KAAK;EAChE,IAAI,CAAC,gBAAgB,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAC9E,MAAM,UAAU,wBAAwB,OAAO,cAAc;EAC7D,IAAI,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EACzE,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,kBAAkB;GAAgB;EAAQ,CAAC;CACtE,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;EAC5D,MAAM,cAAc,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK;EACxD,MAAM,kBAAkB,OAAO,KAAK,qBAAqB,EAAE,CAAC,CAAC,KAAK;EAClE,MAAM,+BAA+B,OAAO,OAAO,MAAM,8BAA8B;EACvF,MAAM,4BAA4B,OAAO,KAAK,gCAAgC,EAAE,CAAC,CAAC,KAAK;EACvF,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAC1E,IAAI,gCAAgC,CAAC,2BACpC,OAAO,EAAE,KAAK,EAAE,OAAO,iDAAiD,GAAG,GAAG;EAE/E,IAAI,6BAA6B,CAAC,iBACjC,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;EAE3D,IAAI;GACH,MAAM,SAAS,MAAM,qBAAqB,OAAO;IAChD;IACA,aAAa,eAAe,KAAA;IAC5B,iBAAiB,mBAAmB,KAAA;IACpC,2BAA2B,6BAA6B,KAAA;GACzD,CAAC;GACD,IAAI,CAAC,OAAO,IACX,OAAO,EAAE,KACR;IACC,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;GAClD,GACA,EAAE,QAAQ,OAAO,OAA0B,CAC5C;GAED,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,gBAAgB,OAAO;IACvB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,oBAAoB;GACrB,CAAC;EACF,SAAS,OAAO;GACf,IAAI,iBAAiB,kDACpB,OAAO,EAAE,KACR;IACC,OAAO,MAAM;IACb,QACC;GACF,GACA,EAAE,QAAQ,IAAI,CACf;GAED,OAAO,EAAE,KACR;IACC,OAAO;IACP,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAC9D,GACA,EAAE,QAAQ,IAAI,CACf;EACD;CACD,CAAC;CAED,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,MAAM,iBAAiB,KAAK,mBAAmB,OAAO,OAAO,OAAO,KAAK,mBAAmB,EAAE;EAC9F,MAAM,SAAS,OAAO,KAAK,UAAU,YAAY,CAAC,CAAC,KAAK;EACxD,MAAM,WAAW,oBAAoB,KAAK,SAAS;EACnD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,IAAI,KAAK,mBAAmB,QAAQ,OAAO,KAAK,oBAAoB,UACnE,OAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;EAE/D,IAAI,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC,SAAS,MAAM,GACvD,OAAO,EAAE,KAAK,EAAE,OAAO,iDAAiD,GAAG,GAAG;EAE/E,IAAI,YAAY,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;EACvF,IAAI;GACH,MAAM,SAAS,0BAA0B;GACzC,MAAM,SAAS,MAAM,8BAA8B;IAClD;IACA;IACA;IACA;IACA,WAAW;IACX,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF;CACD,CAAC;CAED,IAAI,KAAK,6BAA6B,OAAO,MAAM;EAClD,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,QAAQ,OAAO,KAAK,WAAW,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAC5F,IAAI;GACH,MAAM,UAAU,oBAAoB,qBAAqB,KAAK,MAAM,CAAC;GACrE,MAAM,kBAAkB,QAAQ,SAAS,iBAAiB,QAAQ,SAAS;GAC3E,IAAI,iBAAiB,gCAAgC,KAAK;QACrD,0BAA0B,KAAK;GACpC,IAAI,CAAC,QAAQ,gBAAgB,CAAC,iBAAiB,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;GAC3F,MAAM,CAAC,QAAQ,aAAa,MAAM,YACjC,QACA,GAAG,aAAa,QAAQ,eAAe,EAAE,sBACzC;IAAE,MAAM,EAAE,OAAO,QAAQ,MAAM;IAAG,UAAU;GAAG,CAChD;GACA,IAAI,SAAS,OAAO,UAAU,KAC7B,OAAO,EAAE,KACR,EACC,OAAO,kBACJ,yBAAyB,WAAW,KAAK,IACzC,OAAO,WAAW,SAAS,gBAAgB,EAC/C,GACA,WAAW,MAAM,MAAM,GACxB;GAED,MAAM,SAAS,sBAAsB;GACrC,MAAM,aAAa,kBAChB,uCAAuC;IACvC,MAAM,QAAQ;IACd,sBAAsB,WAAW;IACjC,oBAAoB,WAAW;GAChC,CAAC,IACA,MAAM;GACT,MAAM,iBACL,QAAQ,SAAS,gBACd,OAAO,WAAW,kBAAkB,EAAE,CAAC,CAAC,KAAK,IAC7C,OAAO,WAAW,sBAAsB,EAAE,CAAC,CAAC,KAAK;GACrD,IAAI,iBAAiB;IACpB,IACC,OAAO,WAAW,QAAQ,EAAE,CAAC,CAAC,KAAK,MAAM,QAAQ,QACjD,CAAC,kBACD,OAAO,WAAW,2BAA2B,EAAE,CAAC,CAAC,KAAK,MACrD,OAAO,QAAQ,2BAA2B,EAAE,CAAC,CAAC,KAAK,KACnD,QAAQ,SAAS,iBAAiB,mBAAmB,QAAQ,kBAC7D,QAAQ,SAAS,kBAChB,eAAe,OAAO,QAAQ,wBAAwB,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,eACtE,QAAQ,SAAS,gBAAgB,mBAAmB,QAAQ,oBAE7D,OAAO,EAAE,KAAK,EAAE,OAAO,mCAAmC,GAAG,GAAG;IAEjE,IAAI,WAAW,mBAAmB,MACjC,OAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;IAEpE,IAAI;IACJ,IAAI;KACH,iBAAiB,MAAM,8BAA8B,UAAU,iBAAiB;MAC/E,QACC,QAAQ,SAAS,gBACd;OAAE,MAAM;OAAe,cAAc;MAAe,IACpD;OAAE,MAAM;OAAc,kBAAkB;MAAe;MAC3D,QAAQ,OAAO,QAAQ,2BAA2B,EAAE,CAAC,CAAC,KAAK;KAC5D,CAAC;IACF,QAAQ;KACP,OAAO,EAAE,KAAK,EAAE,OAAO,mCAAmC,GAAG,GAAG;IACjE;IACA,MAAM,UAAU,mDACf,OACA;KACC,MAAM,QAAQ;KACd,gBAAgB,QAAQ,SAAS,gBAAgB,iBAAiB;KAClE,sBAAsB,QAAQ,SAAS,gBAAgB,aAAa;KACpE,oBAAoB,QAAQ,SAAS,eAAe,aAAa;KACjE,aAAa,qBAAqB,MAAM,aAAa;IACtD,GACA,OAAO,QAAQ,KAAK,GACpB,cACD;IACA,OAAO,EAAE,KAAK;KACb,GAAG;KACH,gBACC,eAAe,YAAY,eACxB,eAAe,eAAe,cAC9B,MAAM;KACV,aAAa,QAAQ,QAAQ;KAC7B,YAAY;IACb,CAAC;GACF;GACA,OAAO,EAAE,KAAK;IACb,GAAG;IACH,gBAAgB,MAAM;IACtB,aAAa,mBAAmB;KAC/B,cAAc,OAAO,OAAO,oBAAoB,EAAE;KAClD,QAAQ,SAAS;KACjB,cAAc,MAAM;IACrB,CAAC;GACF,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,KAAK,EAAE,GAAG,GAAG;EAC9D;CACD,CAAC;CAQD,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,KAAK;EAChD,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAU9D,MAAM,gBAAgB,uBALH,SAAS,MAC3B,oEAEkB,CAAA,GAAa,EAAE,EAAE,KAAK,KAAK,QAES;EACvD,IAAI,eAAe,SAAS,gBAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,cAAc,MAAM,GAAG,GAAG;EAElD,IAAI,eAAe,SAAS,QAC3B,IAAI;GAEH,MAAM,WADI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACpB,CAAA,CACf,OAAO,EAAE,oBAAoB,OAAO,UAAU,mBAAmB,CAAC,CAAC,CACnE,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,cAAc,SAAS,CAAC,CAAC,CACnE,IAAI;GACN,MAAM,sBAAsB,OAAO,UAAU,sBAAsB,EAAE,CAAC,CAAC,KAAK;GAC5E,IAAI,uBAAuB,wBAAwB,cAAc,aAChE,OAAO,EAAE,KACR;IACC,OAAO;IACP,QACC;GACF,GACA,GACD;GAED,oBAAoB,MAAM,IAAI,cAAc,WAAW,cAAc,WAAW;IAC/E,mBAAmB,cAAc;IACjC,WAAW,cAAc;IACzB,cAAc;GACf,CAAC;GACD,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,MAAM;IACN,gBAAgB,cAAc;GAC/B,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF;EAGD,IAAI,gBAAgB;EACpB,IAAI,kBAAkB;EACtB,IAAI;GACH,MAAM,UAAU,oBAAoB,qBAAqB,QAAQ,CAAC;GAClE,gBAAgB,QAAQ,QAAQ,YAAY;GAC5C,kBAAkB,QAAQ,SAAS,iBAAiB,QAAQ,SAAS;GACrE,IAAI,iBAAiB,gCAAgC,KAAK;QACrD,0BAA0B,KAAK;GACpC,MAAM,2BACL,OAAO,KAAK,+BAA+B,WACxC,KAAK,2BAA2B,KAAK,IACrC;GACJ,IAAI,mBAAmB,CAAC,0BACvB,OAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;GAEpE,MAAM,SAAS,MAAM,8BAA8B;IAClD,aAAa;IACb,QAAQ,MAAM;IACd,kBAAkB,kBAAkB,OAAO,MAAM;IACjD,sBACC,QAAQ,SAAS,eACd,OACA,OAAO,KAAK,mBAAmB,WAC9B,KAAK,iBACL,MAAM;IACX,mBAAmB,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;IAC7E,0BAA0B,4BAA4B;GACvD,CAAC;GACD,MAAM,OAAO,kBACV,yBACA,gBACC,kBACA;GACJ,IAAI,iBAAiB;IACpB,MAAM,sBAAsB,OAAO,OAAO,eAAe,EAAE,CAAC,CAAC,KAAK;IAClE,IAAI,CAAC,MAAM,8BAA8B,mBAAmB,GAC3D,OAAO,EAAE,KACR;KACC,GAAG;KACH;KACA,aAAa;KACb,kBAAkB;KAClB,QACC;IACF,GACA,GACD;GAEF;GACA,KAAK,iBAAiB,oBAAoB,uBAAuB,CAAC,EAAE,UAAU,YAC7E,OAAO,EAAE,KACR;IACC,GAAG;IACH;IACA,aAAa;IACb,kBAAkB;IAClB,QAAQ,gBACL,8JACA;GACJ,GACA,GACD;GAED,OAAO,EAAE,KAAK;IACb,GAAG;IACH;GACD,CAAC;EACF,SAAS,OAAO;GACf,IAAI,eAAe,OAAO,EAAE,KAAK,+BAA+B,KAAK,GAAG,GAAG;GAC3E,IAAI,iBAAiB,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,KAAK,EAAE,GAAG,GAAG;GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF;CACD,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACrD,MAAM,SAAS,8BAA8B;EAC7C,OAAO,EAAE,KAAK,MAAM;CACrB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACrD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,kBAAkB,UAAU,EAAE,IAAI,MAAM,kBAAkB,CAAC;EACjE,IAAI;GACH,MAAM,QAAQ,MAAM,4BAA4B;IAC/C;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO;GAAO,CAAC;EAChC,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,iCAAiC,OAAO,MAAM;EACtD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,MAAM,cAAc,OAAO,KAAK,gBAAgB,EAAE,CAAC,CAAC,KAAK,KAAK;EAC9D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI;IACH,MAAM,eAAe,MAAM,0BAA0B;KACpD,OAAO,SAAS;KAChB;KACA;KACA,aAAa,eAAe,MAAM,gBAAgB;IACnD,CAAC;IACD,OAAO,EAAE,KAAK;KAAE,IAAI;KAAM;KAAO,eAAe;KAAc;IAAO,CAAC;GACvE,SAAS,YAAY;IACpB,OAAO,EAAE,KAAK;KACb,IAAI;KACJ;KACA,eAAe;KACf,eAAe;MACd,MAAM;MACN,OAAO,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;KAC5E;KACA;IACD,CAAC;GACF;EACD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,kDAAkD,OAAO,MAAM;EACvE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,cAAc,OAAO,KAAK,gBAAgB,EAAE,CAAC,CAAC,KAAK;EACzD,IAAI,CAAC,aAAa,OAAO,EAAE,KAAK;GAAE,OAAO;GAAyB;EAAO,GAAG,GAAG;EAC/E,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB;GAAO,GAAG,GAAG;GACnE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO;GAAO,CAAC;EAC1C,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACxE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,8BAA8B;IACjD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAuC;GAAO,GAAG,GAAG;GACvF,MAAM,SAAS,iCAAiC,OAAO;GACvD,OAAO,EAAE,KAAK;IACb,IAAI;IACJ;IACA,QAAQ,8BAA8B;IACtC,uBAAuB;IACvB;GACD,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EAC1E,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,gCAAgC;IACnD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmC;GAAO,GAAG,GAAG;GACnF,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO;GAAO,CAAC;EAC1C,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,IAAI,kDAAkD,OAAO,MAAM;EACtE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,4BAA4B;IAC/C;IACA,iBAAiB,UAAU,EAAE,IAAI,MAAM,kBAAkB,CAAC;IAC1D,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS;GAAO,CAAC;EACnD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,kDAAkD,OAAO,MAAM;EACvE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,UAAU,qBAAqB,MAAM,UAAU;EACrD,MAAM,QAAQ,qBAAqB,MAAM,OAAO;EAChD,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,CAAC,WAAW,CAAC,OAAO,OAAO,EAAE,KAAK;GAAE,OAAO;GAA+B;EAAO,GAAG,GAAG;EAC3F,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA;IACA,MAAM,qBAAqB,MAAM,MAAM;IACvC,eAAe,qBAAqB,MAAM,gBAAgB;IAC1D,eAAe,qBAAqB,MAAM,gBAAgB;IAC1D,wBAAwB,qBAAqB,MAAM,2BAA2B;IAC9E;IACA,cAAc,qBAAqB,MAAM,eAAe;IACxD,QAAQ,qBAAqB,MAAM,QAAQ;IAC3C,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO,UAAU;IAAS;GAAO,CAAC;EAC7D,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,MAAM,4DAA4D,OAAO,MAAM;EAClF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA,OAAO,KAAK,UAAU,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,OAAO;IAChF,MAAM,KAAK,SAAS,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,MAAM;IAC7E,eACC,KAAK,mBAAmB,KAAA,IACrB,KAAA,IACA,qBAAqB,MAAM,gBAAgB;IAC/C,eACC,KAAK,mBAAmB,KAAA,IACrB,KAAA,IACA,qBAAqB,MAAM,gBAAgB;IAC/C,wBACC,KAAK,8BAA8B,KAAA,IAChC,KAAA,IACA,qBAAqB,MAAM,2BAA2B;IAC1D;IACA,cACC,KAAK,kBAAkB,KAAA,IACpB,KAAA,IACA,qBAAqB,MAAM,eAAe;IAC9C,QAAQ,KAAK,WAAW,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,QAAQ;IACnF,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB;GAAO,GAAG,GAAG;GACnE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO,UAAU;IAAS;GAAO,CAAC;EAC7D,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,IAAI,oEAAoE,OAAO,MAAM;EACxF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,sCAAsC;IACzD;IACA;IACA,gBAAgB,UAAU,EAAE,IAAI,MAAM,iBAAiB,CAAC;IACxD,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS,UAAU;IAAS;GAAO,CAAC;EACtE,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,oEAAoE,OAAO,MAAM;EACzF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,WAAW,qBAAqB,MAAM,WAAW;EACvD,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,MAAM,OAAO,qBAAqB,MAAM,MAAM;EAC9C,MAAM,gBAAgB,qBAAqB,MAAM,gBAAgB;EACjE,MAAM,yBAAyB,qBAAqB,MAAM,2BAA2B;EACrF,MAAM,eAAe,qBAAqB,MAAM,eAAe;EAC/D,MAAM,qBAAqB,qBAAqB,MAAM,sBAAsB;EAC5E,MAAM,WACL,qBAAqB,MAAM,WAAW,KACtC,mCAAmC,SAAS,WAAW,GAAG;GACzD;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD,CAAC;EACF,IAAI;GACH,MAAM,aAAa,MAAM,sCAAsC;IAC9D;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,UAAU;IAAS,UAAU;IAAS;GAAO,CAAC;EACrF,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KACH,sFACA,OAAO,MAAM;EACZ,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,OAAO,MAAM,oBAAoB,GAAG,EAAE,YAAY,KAAK,CAAC;EAC9D,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,MAAM,eAAe,qBAAqB,MAAM,eAAe;EAC/D,MAAM,qBAAqB,qBAAqB,MAAM,sBAAsB;EAC5E,MAAM,WACL,qBAAqB,MAAM,WAAW,KACtC,mCAAmC,UAAU,WAAW,GAAG;GAC1D;GACA;GACA;GACA;GACA;GACA;EACD,CAAC;EACF,IAAI;GAYH,IAAI,CAAC,MAXY,uCAAuC;IACvD;IACA;IACA;IACA;IACA;IACA;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB;GAAO,GAAG,GAAG;GACrE,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,UAAU;IACV,UAAU;IACV,WAAW;IACX;GACD,CAAC;EACF,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CACD;CAEA,IAAI,KAAK,kCAAkC,OAAO,MAAM;EACvD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,UAAU,6BAA6B,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,GAAG,MAAM;EACvF,MAAM,iBAAiB,KAAK,mBAAmB,OAAO,OAAO,OAAO,KAAK,mBAAmB,EAAE;EAC9F,MAAM,SAAS,OAAO,KAAK,UAAU,YAAY,CAAC,CAAC,KAAK;EACxD,MAAM,WAAW,oBAAoB,KAAK,SAAS;EACnD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,KAAK,mBAAmB,QAAQ,OAAO,KAAK,oBAAoB,UACnE,OAAO,EAAE,KAAK;GAAE,OAAO;GAAkC;EAAO,GAAG,GAAG;EAEvE,IAAI,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC,SAAS,MAAM,GACvD,OAAO,EAAE,KAAK;GAAE,OAAO;GAAkD;EAAO,GAAG,GAAG;EAEvF,IAAI,YAAY,MACf,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqC;EAAO,GAAG,GAAG;EAE1E,IAAI;GACH,MAAM,SAAS,MAAM,8BAA8B;IAClD;IACA;IACA;IACA;IACA,WAAW;IACX,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,GAAG;IAAQ;GAAO,CAAC;EACpC,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC5D,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,kCAAkC;IACrD;IACA,WAAW,OAAO;IAClB,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS;GAAO,CAAC;EACnD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,4DAA4D,OAAO,MAAM;EACjF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,YAAY,OAAO,EAAE,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,KAAK;EAC/D,IAAI,CAAC,WAAW,OAAO,EAAE,KAAK;GAAE,OAAO;GAAuB;EAAO,GAAG,GAAG;EAC3E,IAAI;GACH,MAAM,SAAS,MAAM,mCAAmC;IACvD;IACA,SAAS;IACT,YAAY;IACZ,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B;GAAO,GAAG,GAAG;GAC3E,IAAI,yBAAyB;GAC7B,IAAI,eAAe;GACnB,IAAI;IACH,yBAAyB,MAAM,6BAA6B;KAC3D,OAAO,SAAS;KAChB;KACA,SAAS,OAAO;KAChB;KACA,UAAU,OAAO;IAClB,CAAC;GACF,SAAS,YAAY;IACpB,eAAe;KACd,MAAM;KACN,OAAO,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;IAC5E;GACD;GACA,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,SAAS;IACT,0BAA0B;IAC1B,eAAe;IACf;GACD,CAAC;EACF,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KACR;IAAE,OAAO;IAAS;GAAO,GACzB,QAAQ,SAAS,mBAAmB,KAAK,QAAQ,SAAS,WAAW,IAAI,MAAM,GAChF;EACD;CACD,CAAC;CAED,IAAI,KAAK,yDAAyD,OAAO,MAAM;EAC9E,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,YAAY,OAAO,EAAE,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,KAAK;EAC/D,IAAI,CAAC,WAAW,OAAO,EAAE,KAAK;GAAE,OAAO;GAAuB;EAAO,GAAG,GAAG;EAC3E,IAAI;GACH,MAAM,SAAS,MAAM,mCAAmC;IACvD;IACA,SAAS;IACT,YAAY;IACZ,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B;GAAO,GAAG,GAAG;GAC3E,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ;GAAO,CAAC;EACpD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KACR;IAAE,OAAO;IAAS;GAAO,GACzB,QAAQ,SAAS,mBAAmB,KAAK,QAAQ,SAAS,WAAW,IAAI,MAAM,GAChF;EACD;CACD,CAAC;CAED,IAAI,IAAI,kCAAkC,OAAO,MAAM;EACtD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA,iBAAiB,UAAU,EAAE,IAAI,MAAM,kBAAkB,CAAC;IAC1D,WAAW,OAAO;IAClB,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS;GAAO,CAAC;EACnD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,UAAU,6BAA6B,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,GAAG,MAAM;EACvF,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;EACJ,IAAI;GACH,cAAc,+BAA+B,OAAO,KAAK,gBAAgB,EAAE,GAAG,cAAc;EAC7F,SAAS,OAAO;GACf,OAAO,EAAE,KACR;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAAwB;GAAO,GACjF,GACD;EACD;EACA,IAAI;GACH,MAAM,SAAS,MAAM,8BAA8B;IAClD;IACA;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACrE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAQ;GAAO,CAAC;EAC3C,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EAC1E,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GAOH,IAAI,CAAC,MANY,+BAA+B;IAC/C;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACjE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;IAAU;GAAO,CAAC;EACxD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GAOH,IAAI,CAAC,MANY,8BAA8B;IAC9C;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACjE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;IAAU;GAAO,CAAC;EACxD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAYD,IAAI,KAAK,uDAAuD,OAAO,MAAM;EAE5E,MAAM,SAAS,8BADA,0BAC8B,CAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAMnE,MAAM,aAAa,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC9D,IAAI,CAAC,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAClE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,QAAQ,EAAE,CAAC,CACrC,KAAK,CAAC,CACN,YAAY;EACd,IAAI,WAAW,YAAY,YAAY,YAAY,cAClD,OAAO,EAAE,KACR;GAAE,OAAO;GAAgB,QAAQ,8CAA8C;EAAU,GACzF,GACD;EAED,MAAM,OAAgC,YAAY,WAAW,WAAW;EAIxE,MAAM,qBAAqB,UAAgD;GAC1E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;GAChC,IAAI,UAAU,MAAM,OAAO;GAC3B,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,KAAA;GAClC,MAAM,UAAU,MACd,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACxC,QAAQ,SAAS,KAAK,SAAS,CAAC;GAClC,OAAO,QAAQ,WAAW,IAAI,OAAO;EACtC;EACA,MAAM,kBAAkB,kBAAkB,KAAK,gBAAgB;EAC/D,MAAM,kBAAkB,kBAAkB,KAAK,gBAAgB;EAC/D,MAAM,gBACL,oBAAoB,KAAA,KAAa,oBAAoB,KAAA,IAClD,KAAA,IACA;GAAE,kBAAkB;GAAiB,kBAAkB;EAAgB;EAC3E,MAAM,QAAQ,SAAS;EAEvB,IAAI,SAAS,UAAU;GACtB,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;GAC5D,MAAM,YAAY,OAAO,KAAK,mBAAmB,EAAE,CAAC,CAAC,KAAK;GAC1D,MAAM,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,KAAK,KAAK;GAC/C,MAAM,uBAAuB,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK;GACjE,MAAM,iBAAiB,MAAM,QAAQ,KAAK,cAAc,IAAI,KAAK,iBAAiB,CAAC;GACnF,MAAM,YAAY,eACjB,CAAC,GACD,eAAe,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,CAAC,CACzF;GACA,IAAI,CAAC,gBAAgB,CAAC,WACrB,OAAO,EAAE,KAAK,EAAE,OAAO,yCAAyC,GAAG,GAAG;GAEvE,MAAM,cAAc,wBAAwB,qBAAqB,SAAS;GAC1E,IAAI,qBAAqB,SAAS,MAAM,aACvC,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,MAAM,gBACL,mBAAmB,gBAAgB,SAAS,IAAI,KAAK,UAAU,eAAe,IAAI;GACnF,MAAM,gBACL,mBAAmB,gBAAgB,SAAS,IAAI,KAAK,UAAU,eAAe,IAAI;GACnF,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;GACnC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GAKtC,IAAI;IAyBH,IAAI,CAxBY,MAAM,GAAG,kBAAkB;KAM1C,IALiB,EACf,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACE,GAAU,OAAO;KACrB,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,OAAO;MACP,gBAAgB;MAChB;MACA,oBAAoB;MACpB,YAAY;MACZ,gBAAgB,KAAK,UAAU,SAAS;MACxC,uBAAuB;MACvB,uBAAuB;MACvB,YAAY;MACZ,cAAc;MACd,+BAA+B;MAC/B,yBAAyB;KAC1B,CAAC,CAAC,CACD,IAAI;KACN,OAAO;IACR,CAAC,CAAC,CACG,GACJ,OAAO,EAAE,KAAK;KAAE,OAAO;KAAe,QAAQ;IAA4B,GAAG,GAAG;GAElF,SAAS,OAAO;IAGf,MAAM,MAAM,iBAAiB,QAAQ,MAAM,QAAQ,YAAY,IAAI;IACnE,IAAI,IAAI,SAAS,QAAQ,KAAK,IAAI,SAAS,aAAa,GACvD,OAAO,EAAE,KAAK;KAAE,OAAO;KAAe,QAAQ;IAA4B,GAAG,GAAG;IAEjF,MAAM;GACP;GACA,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT;IACA,UAAU;GACX,CAAC;EACF;EAIA,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,eAAe,OAAO,KAAK,kBAAkB,KAAK,wBAAwB,EAAE,CAAC,CAAC,KAAK;EACzF,MAAM,cAAc,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK;EACxD,IAAI,CAAC,gBAAgB,CAAC,aACrB,OAAO,EAAE,KAAK,EAAE,OAAO,0CAA0C,GAAG,GAAG;EAExE,IAAI;GACH,MAAM,SAAS,MAAM,qBAAqB,OAAO;IAChD;IACA;IACA,iBAAiB;IACjB;GACD,CAAC;GACD,IAAI,OAAO,IACV,OAAO,EAAE,KAAK,MAAM;GAErB,OAAO,EAAE,KACR;IACC,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;GAClD,GACA,OAAO,MACR;EACD,SAAS,OAAO;GAKf,OAAO,EAAE,KACR;IACC,OAAO;IACP,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAC9D,GACA,GACD;EACD;CACD,CAAC;CAQD,IAAI,IAAI,wDAAwD,MAAM;EAErE,MAAM,SAAS,8BADA,0BAC8B,CAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,gBAAgB,OAAO;EAC7B,IAAI,CAAC,eAAe,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EACtF,MAAM,QAAQ,SAAS;EACvB,MAAM,WAAW,8BAA8B,MAAM,IAAI,eAAe,OAAO;EAC/E,IAAI,UAAU,OAAO,EAAE,KAAK;GAAE,aAAa;GAAU;EAAO,CAAC;EAC7D,OAAO,EAAE,KAAK;GACb,aAAa;IACZ,gBAAgB;IAChB,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,kCAAkC;IAClC,YAAY;GACb;GACA;EACD,CAAC;CACF,CAAC;CAED,IAAI,IAAI,uDAAuD,OAAO,MAAM;EAE3E,MAAM,SAAS,8BADA,0BAC8B,CAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,gBAAgB,OAAO;EAC7B,IAAI,CAAC,eAAe,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EACtF,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,iBAAiB,UAAgD;GACtE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;GAChC,IAAI,UAAU,MAAM,OAAO;GAC3B,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,KAAA;GAClC,MAAM,UAAU,MACd,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACxC,QAAQ,SAAS,KAAK,SAAS,CAAC;GAClC,OAAO,QAAQ,WAAW,IAAI,OAAO;EACtC;EACA,MAAM,WAAW,OAAO,KAAK,oBAAoB,YAAY,KAAK,kBAAkB,KAAA;EACpF,MAAM,wBACL,OAAO,KAAK,qCAAqC,YAC9C,KAAK,mCACL,KAAA;EACJ,MAAM,sBACL,KAAK,2BAA2B,KAAA,IAC7B,KAAA,IACA,qBAAqB,MAAM,wBAAwB;EACvD,IAAI,0BAA0B,QAAQ,CAAC,qBACtC,OAAO,EAAE,KACR;GACC,OAAO;GACP;EACD,GACA,GACD;EAED,MAAM,QAAQ,SAAS;EACvB,IAAI;GACH,MAAM,cAAc,iCAAiC,MAAM,IAAI;IAC9D,gBAAgB;IAChB,UAAU;IACV,kBAAkB,cAAc,KAAK,gBAAgB;IACrD,kBAAkB,cAAc,KAAK,gBAAgB;IACrD,iBAAiB;IACjB,wBAAwB;IACxB,kCAAkC;GACnC,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAa;GAAO,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACjE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAK;GAAO,GAAG,GAAG;EAC1C;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GAOH,IAAI,CAAC,MANY,8BAA8B;IAC9C;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACjE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;IAAU;GAAO,CAAC;EACxD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,IAAI,8BAA8B,OAAO,MAAM;EAClD,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,MAAM,SAAS,0BAA0B;EACzC,IAAI;GACH,MAAM,QAAQ,MAAM,qCAAqC;IACxD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;EACxB,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,GAAG;EACtC;CACD,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EAC1D,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,MAAM,SAAS,0BAA0B;EACzC,IAAI;GAMH,IAAI,CAAC,MALY,sCAAsC;IACtD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;GACxD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,UAAU;GAAQ,CAAC;EAC9C,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,GAAG;EACtC;CACD,CAAC;CAGD,IAAI,OAAO,oCAAoC,MAAM;EACpD,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,MAAM,eAAe,EAAE,IAAI,MAAM,gBAAgB,CAAC,EAAE,KAAK;GACzD,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;GAM1E,IAAI,CALW,EACb,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACG,GAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC3D,EAAE,OAAO,OAAO,kBAAkB,CAAC,CACjC,MAAM,GAAG,OAAO,mBAAmB,gBAAgB,YAAY,CAAC,CAAC,CACjE,IAAI;GACN,EAAE,OAAO,OAAO,SAAS,CAAC,CAAC,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CAAC,IAAI;GACxF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;EAC3B;CACD,CAAC;CAED,OAAO;AACR;;;ACpyQA,SAAgB,mBAAmB,UAAqC,CAAC,GAAG;CAC3E,MAAM,oBAAkB,QAAQ,mBAAmB;CACnD,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,sBAAsB,OAAO,MAAM;EAC1C,IAAI;GACH,MAAM,cAAc,kBAAkB;IACrC,WAAW,QAAQ,KAAK,MAAM;IAC9B,KAAK,QAAQ;GACd,CAAC;GACD,MAAM,SAAS,MAAM,kBAAgB;IACpC,gBAAgB;IAChB;GACD,CAAC;GACD,OAAO,EAAE,KAAK,MAAM;EACrB,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;EAC3D;CACD,CAAC;CAED,OAAO;AACR;;;;;;;;;;;;;AC6CA,IAAI,cAAkC;;AAGtC,SAAgB,WAAwB;CACvC,IAAI,CAAC,aACJ,cAAc,IAAI,YAAY,cAAc,CAAC;CAE9C,OAAO;AACR;;AAGA,SAAgB,aAAmB;CAClC,aAAa,MAAM;CACnB,cAAc;AACf;AAqCA,SAAgB,UAAU,MAAmB;CAC5C,MAAM,eAAe,MAAM,gBAAgB;CAC3C,MAAM,UAAU,MAAM,WAAW;CACjC,MAAM,WAAW,MAAM,YAAY;CACnC,MAAM,uBAAuB,MAAM,+BAA+B;CAClE,IAAI,mCAAmC,CAAC;CACxC,MAAM,MAAM,IAAI,KAAK;CAGrB,IAAI,IAAI,KAAK,iBAAiB,CAAC;CAC/B,IAAI,IAAI,KAAK,YAAY,EAAE,uBAAuB,CAAC,uBAAuB,EAAE,CAAC,CAAC;CAG9E,IAAI,MAAM,KAAK,aAAa,YAAY,CAAC;CACzC,IAAI,MAAM,KAAK,YAAY,YAAY,CAAC;CACxC,IAAI,MAAM,KAAK,aAAa,YAAY,CAAC;CACzC,IAAI,MAAM,KAAK,oBAAoB,YAAY,CAAC;CAChD,IAAI,MACH,KACA,qBAAqB;EACpB,UAAU;EACV,kBAAkB;EAClB,mBAAmB;CACpB,CAAC,CACF;CACA,IAAI,MAAM,KAAK,aAAa,EAAE,kBAAkB,QAAQ,CAAC,CAAC;CAC1D,IAAI,MAAM,KAAK,gBAAgB,cAAc,OAAO,CAAC;CACrD,IAAI,MACH,KACA,WAAW,cAAc,sBAAsB;EAC9C,uCAAuC,MAAM;EAC7C,oCAAoC,2BAA2B;EAC/D,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;CAC/B,CAAC,CACF;CACA,IAAI,MACH,KACA,gBAAgB;EACf,UAAU;EACV,wCAAwC,MAAM;EAC9C,wBAAwB,MAAM;EAC9B,uBAAuB,MAAM;EAC7B,6BAA6B,eAAe;GAC3C,6BAA6B;EAC9B;CACD,CAAC,CACF;CACA,IAAI,MAAM,KAAK,mBAAmB,EAAE,iBAAiB,MAAM,gBAAgB,CAAC,CAAC;CAI7E,MAAM,aACL,QAAQ,IAAI,6BAA6B,KAAK,YAAY,WAAW,KAAK,WAAW;CAEtF,IAAI,IAAI,aAAa,OAAO,GAAG,SAAS;EACvC,EAAE,OAAO,iBAAiB,UAAU;EACpC,MAAM,KAAK;CACZ,CAAC;CAED,IAAI,IACH,aACA,YAAY;EACX,MAAM;EACN,qBAAqB,SAAS,KAAK,QAAQ,aAAa,EAAE;EAC1D,eAAe;CAChB,CAAC,CACF;CAGA,MAAM,YAAY,KAAK,YAAY,YAAY;CAC/C,IAAI,CAAC,WAAW,SAAS,GACxB,MAAM,IAAI,MACT,4BAA4B,UAAU,oEACvC;CAED,MAAM,YAAY,aAAa,WAAW,OAAO;CACjD,IAAI,IAAI,MAAM,MAAM;EACnB,IAAI,EAAE,IAAI,KAAK,WAAW,OAAO,GAChC,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;EAE1C,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,SAAS;CACxB,CAAC;CAED,OAAO;AACR;;;;;;;;;;;AAYA,SAAgB,cAAc,MAAmB;CAChD,MAAM,eAAe,MAAM,gBAAgB;CAC3C,MAAM,mBAAmB,MAAM,wBAAwB,CAAC;CACxD,MAAM,cAAc,iBAAiB,WAAW,iCAAiC;CACjF,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,iBAAiB,aAAa,GAAG,CAAC;CAC3E,MAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,iBAAiB,iBAAiB,EAAE,CAAC;CAClF,MAAM,MAAM,IAAI,KAAK;CACrB,IAAI,MACH,KACA,mBAAmB,cAAc,EAChC,gBAAgB;EACf,SAAS;EACT;EACA;EACA,0BAA0B,KAAK,IAC9B,GACA,KAAK,MAAM,iBAAiB,4BAA4B,KAAK,IAAI,IAAI,SAAS,CAAC,CAChF;EACA,8BAA8B,KAAK,IAClC,GACA,KAAK,MAAM,iBAAiB,gCAAgC,KAAK,IAAI,IAAI,aAAa,CAAC,CACxF;CACD,EACD,CAAC,CACF;CAGA,IAAI,IAAI,MAAM,MAAM,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG,CAAC;CAEvD,OAAO;AACR"}
1
+ {"version":3,"file":"index.js","names":[],"sources":["../src/middleware.ts","../src/request-rate-limit.ts","../src/routes/config.ts","../src/routes/diagnostics.ts","../src/routes/health.ts","../src/helpers.ts","../src/routes/memory.ts","../src/routes/observer-status.ts","../src/routes/target-validation.ts","../src/routes/pack.ts","../src/routes/raw-events.ts","../src/routes/stats.ts","../src/routes/team-setup-view.ts","../src/routes/team-setup.ts","../src/routes/sync.ts","../src/routes/update-status.ts","../src/index.ts"],"sourcesContent":["/**\n * CORS and cross-origin protection middleware.\n *\n * Ports Python's reject_cross_origin() logic from codemem/viewer_http.py.\n * GETs are allowed from any origin by default (viewer is local-only).\n * Callers can mark side-effecting GET path prefixes as unsafe.\n * Mutations (POST/DELETE/PATCH/PUT) require an Origin header matching a\n * loopback address, or are rejected with 403.\n */\n\nimport type { Context, Next } from \"hono\";\nimport { createMiddleware } from \"hono/factory\";\n\nconst LOOPBACK_HOSTS = new Set([\"127.0.0.1\", \"localhost\", \"::1\"]);\n\n/**\n * Check whether an Origin header value is a valid loopback URL.\n * Mirrors Python's _is_allowed_loopback_origin_url().\n */\nfunction isLoopbackOrigin(origin: string): boolean {\n\tlet url: URL;\n\ttry {\n\t\turl = new URL(origin);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (url.protocol !== \"http:\" && url.protocol !== \"https:\") return false;\n\tif (url.username || url.password) return false;\n\tconst hostname = url.hostname.startsWith(\"[\") ? url.hostname.slice(1, -1) : url.hostname;\n\treturn LOOPBACK_HOSTS.has(hostname);\n}\n\n/** HTTP methods that mutate state and require origin validation. */\nconst UNSAFE_METHODS = new Set([\"POST\", \"DELETE\", \"PATCH\", \"PUT\"]);\n\n/**\n * Check whether a missing-Origin request looks like a cross-site browser\n * request. Matches Python's `_is_unsafe_missing_origin()`:\n *\n * - Sec-Fetch-Site present and NOT same-origin/same-site/none → unsafe\n * - Referer present and NOT loopback → unsafe\n * - Otherwise → safe (CLI / programmatic caller, no browser context)\n */\nfunction isUnsafeMissingOrigin(c: Context): boolean {\n\tconst secFetchSite = (c.req.header(\"Sec-Fetch-Site\") ?? \"\").trim().toLowerCase();\n\tif (secFetchSite && ![\"same-origin\", \"same-site\", \"none\"].includes(secFetchSite)) {\n\t\treturn true;\n\t}\n\tconst referer = c.req.header(\"Referer\");\n\tif (!referer) return false;\n\treturn !isLoopbackOrigin(referer);\n}\n\n/**\n * Cross-origin protection middleware.\n *\n * Ports Python's `reject_cross_origin(missing_origin_policy=\"reject_if_unsafe\")`:\n *\n * - GET/HEAD/OPTIONS: allowed from any origin unless the caller marks a\n * side-effecting GET path prefix as unsafe.\n * - POST/DELETE/PATCH/PUT:\n * - Origin present + loopback → allowed (browser on localhost)\n * - Origin present + non-loopback → rejected 403\n * - No Origin + no suspicious browser signals → allowed (CLI callers)\n * - No Origin + suspicious Sec-Fetch-Site/Referer → rejected 403\n *\n * For same-origin requests (no Origin header) on safe methods, no\n * Access-Control-Allow-Origin is set — the browser doesn't need it.\n * For valid loopback origins, ACAO is echoed back.\n */\nexport function originGuard(options?: { unsafeGetPathPrefixes?: readonly string[] }) {\n\treturn createMiddleware(async (c: Context, next: Next) => {\n\t\tconst origin = c.req.header(\"Origin\");\n\t\tconst method = c.req.method;\n\t\tconst unsafeGet =\n\t\t\t(method === \"GET\" || method === \"HEAD\") &&\n\t\t\toptions?.unsafeGetPathPrefixes?.some((prefix) => c.req.path.startsWith(prefix));\n\n\t\tif (UNSAFE_METHODS.has(method) || unsafeGet) {\n\t\t\tif (origin) {\n\t\t\t\t// Origin present — must be loopback\n\t\t\t\tif (!isLoopbackOrigin(origin)) {\n\t\t\t\t\treturn c.json({ error: \"forbidden\" }, 403);\n\t\t\t\t}\n\t\t\t\t// Valid loopback origin — echo it for CORS\n\t\t\t\tc.header(\"Access-Control-Allow-Origin\", origin);\n\t\t\t\tc.header(\"Access-Control-Allow-Methods\", \"GET, POST, PUT, DELETE, OPTIONS\");\n\t\t\t\tc.header(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\t\t\t} else {\n\t\t\t\t// No Origin — reject only if browser signals indicate cross-site\n\t\t\t\t// (matches Python's reject_if_unsafe policy for API endpoints)\n\t\t\t\tif (isUnsafeMissingOrigin(c)) {\n\t\t\t\t\treturn c.json({ error: \"forbidden\" }, 403);\n\t\t\t\t}\n\t\t\t\t// CLI / programmatic caller — no CORS headers needed\n\t\t\t}\n\t\t} else if (origin && isLoopbackOrigin(origin)) {\n\t\t\t// Safe method with valid origin — echo for preflight\n\t\t\tc.header(\"Access-Control-Allow-Origin\", origin);\n\t\t\tc.header(\"Access-Control-Allow-Methods\", \"GET, POST, PUT, DELETE, OPTIONS\");\n\t\t\tc.header(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\t\t}\n\t\t// No origin or non-loopback on safe method: no ACAO header set.\n\t\t// Browser enforces same-origin; we don't set permissive headers.\n\n\t\tawait next();\n\t});\n}\n\n/**\n * Handle OPTIONS preflight requests.\n * Returns 204 with appropriate CORS headers for loopback origins.\n */\nexport function preflightHandler() {\n\treturn createMiddleware(async (c: Context, next: Next) => {\n\t\tif (c.req.method !== \"OPTIONS\") {\n\t\t\tawait next();\n\t\t\treturn;\n\t\t}\n\t\tconst origin = c.req.header(\"Origin\");\n\t\tif (origin && isLoopbackOrigin(origin)) {\n\t\t\tc.header(\"Access-Control-Allow-Origin\", origin);\n\t\t\tc.header(\"Access-Control-Allow-Methods\", \"GET, POST, PUT, DELETE, OPTIONS\");\n\t\t\tc.header(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\t\t\tc.header(\"Access-Control-Max-Age\", \"86400\");\n\t\t\treturn c.body(null, 204);\n\t\t}\n\t\treturn c.body(null, 204);\n\t});\n}\n","import { RateLimiter } from \"limiter\";\n\nexport interface InMemoryRequestRateLimiter {\n\tcheck(key: string, limit: number): { allowed: boolean; retryAfterS: number };\n}\n\nexport function createInMemoryRequestRateLimiter(windowMs = 60_000): InMemoryRequestRateLimiter {\n\tconst safeWindowMs = Math.max(1000, Math.trunc(windowMs));\n\tconst buckets = new Map<string, { limiter: RateLimiter; lastUsedAt: number }>();\n\tlet checks = 0;\n\n\tfunction estimatedRetryAfterS(limit: number): number {\n\t\treturn Math.max(1, Math.ceil(safeWindowMs / Math.max(1, limit) / 1000));\n\t}\n\n\tfunction cleanupExpiredBuckets(currentNow: number): void {\n\t\tif (buckets.size < 64 || checks % 64 !== 0) return;\n\t\tconst staleBefore = currentNow - safeWindowMs * 10;\n\t\tfor (const [key, bucket] of buckets) {\n\t\t\tif (bucket.lastUsedAt < staleBefore) buckets.delete(key);\n\t\t}\n\t}\n\n\treturn {\n\t\tcheck(key: string, limit: number) {\n\t\t\tchecks += 1;\n\t\t\tconst currentNow = Date.now();\n\t\t\tcleanupExpiredBuckets(currentNow);\n\t\t\tconst safeLimit = Math.max(1, Math.trunc(limit));\n\t\t\tconst bucketKey = `${safeLimit}:${key}`;\n\t\t\tlet bucket = buckets.get(bucketKey);\n\t\t\tif (!bucket) {\n\t\t\t\tbucket = {\n\t\t\t\t\tlimiter: new RateLimiter({\n\t\t\t\t\t\ttokensPerInterval: safeLimit,\n\t\t\t\t\t\tinterval: safeWindowMs,\n\t\t\t\t\t\tfireImmediately: true,\n\t\t\t\t\t}),\n\t\t\t\t\tlastUsedAt: currentNow,\n\t\t\t\t};\n\t\t\t\tbuckets.set(bucketKey, bucket);\n\t\t\t}\n\t\t\tbucket.lastUsedAt = currentNow;\n\t\t\tif (bucket.limiter.tryRemoveTokens(1)) {\n\t\t\t\treturn { allowed: true, retryAfterS: 0 };\n\t\t\t}\n\t\t\treturn { allowed: false, retryAfterS: estimatedRetryAfterS(safeLimit) };\n\t\t},\n\t};\n}\n","/**\n * Config routes — GET /api/config, POST /api/config.\n *\n * Ports the user-facing config read/write path from Python's\n * codemem/viewer_routes/config.py, scoped to the TS runtime's current needs.\n */\n\nimport {\n\tCODEMEM_CONFIG_ENV_OVERRIDES,\n\tcoerceObserverCommand,\n\tgetCodememConfigPath,\n\tgetCodememEnvOverrides,\n\tlistObserverProviderOptions,\n\ttype RawEventSweeper,\n\treadCodememConfigFile,\n\twriteCodememConfigFile,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\ntype ConfigData = Record<string, unknown>;\n\nconst REDACTED_VALUE = \"[redacted]\";\n\nconst RUNTIMES = new Set([\"api_http\", \"claude_sidecar\", \"codex_sidecar\"]);\nconst AUTH_SOURCES = new Set([\"auto\", \"env\", \"file\", \"command\", \"none\"]);\nconst HOT_RELOAD_KEYS = new Set([\"raw_events_sweeper_interval_s\"]);\nconst PROTECTED_WRITE_KEYS = new Set<string>([\n\t\"claude_command\",\n\t\"codex_command\",\n\t\"observer_base_url\",\n\t\"observer_auth_file\",\n\t\"observer_auth_command\",\n\t\"observer_headers\",\n\t\"sync_coordinator_url\",\n] as const);\nconst SECRET_CONFIG_KEYS = new Set<string>([\n\t\"observer_auth_file\",\n\t\"observer_auth_command\",\n\t\"observer_headers\",\n\t\"sync_coordinator_admin_secret\",\n] as const);\nconst REMOVED_CONFIG_KEYS = new Set<string>([\"observer_rich_openai_use_responses\"]);\nconst ALLOWED_KEYS = [\n\t\"claude_command\",\n\t\"codex_command\",\n\t\"observer_base_url\",\n\t\"observer_provider\",\n\t\"observer_model\",\n\t\"observer_tier_routing_enabled\",\n\t\"observer_simple_model\",\n\t\"observer_simple_temperature\",\n\t\"observer_reasoning_effort\",\n\t\"observer_reasoning_summary\",\n\t\"observer_rich_model\",\n\t\"observer_rich_temperature\",\n\t\"observer_rich_reasoning_effort\",\n\t\"observer_rich_reasoning_summary\",\n\t\"observer_rich_max_output_tokens\",\n\t\"observer_runtime\",\n\t\"observer_auth_source\",\n\t\"observer_auth_file\",\n\t\"observer_auth_command\",\n\t\"observer_auth_timeout_ms\",\n\t\"observer_auth_cache_ttl_s\",\n\t\"observer_headers\",\n\t\"observer_max_chars\",\n\t\"pack_observation_limit\",\n\t\"pack_session_limit\",\n\t\"sync_enabled\",\n\t\"sync_retention_enabled\",\n\t\"sync_retention_max_age_days\",\n\t\"sync_retention_max_size_mb\",\n\t\"sync_host\",\n\t\"sync_port\",\n\t\"sync_interval_s\",\n\t\"sync_mdns\",\n\t\"sync_coordinator_url\",\n\t\"sync_coordinator_group\",\n\t\"sync_coordinator_timeout_s\",\n\t\"sync_coordinator_presence_ttl_s\",\n\t\"raw_events_sweeper_interval_s\",\n] as const;\n\nconst DEFAULTS: ConfigData = {\n\tclaude_command: [\"claude\"],\n\tcodex_command: [\"codex\"],\n\tobserver_runtime: \"api_http\",\n\tobserver_auth_source: \"auto\",\n\tobserver_tier_routing_enabled: false,\n\tobserver_auth_command: [],\n\tobserver_auth_timeout_ms: 1500,\n\tobserver_auth_cache_ttl_s: 300,\n\tobserver_headers: {},\n\tobserver_max_chars: 12000,\n\tpack_observation_limit: 50,\n\tpack_session_limit: 10,\n\tsync_enabled: false,\n\tsync_retention_enabled: false,\n\tsync_retention_max_age_days: 30,\n\tsync_retention_max_size_mb: 512,\n\tsync_host: \"0.0.0.0\",\n\tsync_port: 7337,\n\tsync_interval_s: 120,\n\tsync_mdns: true,\n\tsync_coordinator_timeout_s: 3,\n\tsync_coordinator_presence_ttl_s: 180,\n\traw_events_sweeper_interval_s: 30,\n};\n\nexport interface ConfigRouteOptions {\n\tgetSweeper?: () => RawEventSweeper | null;\n}\n\nfunction loadProviderOptions(): string[] {\n\treturn listObserverProviderOptions();\n}\n\nfunction withoutRemovedConfigKeys(configData: ConfigData): ConfigData {\n\tconst next = { ...configData };\n\tfor (const key of REMOVED_CONFIG_KEYS) {\n\t\tdelete next[key];\n\t}\n\treturn next;\n}\n\nfunction getEffectiveConfig(configData: ConfigData): ConfigData {\n\tconst effective: ConfigData = { ...DEFAULTS, ...configData };\n\tfor (const key of [\"claude_command\", \"codex_command\"] as const) {\n\t\teffective[key] = coerceObserverCommand(effective[key]) ?? DEFAULTS[key];\n\t}\n\tfor (const [key, envVar] of Object.entries(CODEMEM_CONFIG_ENV_OVERRIDES) as Array<\n\t\t[string, string]\n\t>) {\n\t\tconst val = process.env[envVar];\n\t\tif (val == null || val === \"\") continue;\n\t\tif (key === \"claude_command\" || key === \"codex_command\") {\n\t\t\teffective[key] = coerceObserverCommand(val) ?? effective[key];\n\t\t} else {\n\t\t\teffective[key] = val;\n\t\t}\n\t}\n\treturn effective;\n}\n\nfunction redactConfigValue(key: string, value: unknown): unknown {\n\tif (value == null || !SECRET_CONFIG_KEYS.has(key)) return value;\n\tif (Array.isArray(value)) return value.length > 0 ? REDACTED_VALUE : [];\n\tif (typeof value === \"object\") {\n\t\treturn Object.keys(value as Record<string, unknown>).length > 0 ? REDACTED_VALUE : {};\n\t}\n\tif (typeof value === \"string\") return value.trim() ? REDACTED_VALUE : \"\";\n\treturn REDACTED_VALUE;\n}\n\nfunction sanitizeConfigForResponse(configData: ConfigData): ConfigData {\n\tconst sanitized: ConfigData = {};\n\tfor (const [key, value] of Object.entries(configData)) {\n\t\tsanitized[key] = redactConfigValue(key, value);\n\t}\n\treturn sanitized;\n}\n\nfunction configValuesEqual(left: unknown, right: unknown): boolean {\n\tif (Object.is(left, right)) return true;\n\tif (left == null || right == null) return left == null && right == null;\n\tif (typeof left === \"object\" || typeof right === \"object\") {\n\t\treturn JSON.stringify(left) === JSON.stringify(right);\n\t}\n\treturn false;\n}\n\nfunction partitionViewerUpdates(\n\tupdates: ConfigData,\n\tbeforeConfig: ConfigData,\n): { allowedUpdates: ConfigData; error: string | null } {\n\tconst allowedUpdates: ConfigData = {};\n\tfor (const [key, value] of Object.entries(updates)) {\n\t\tif (!PROTECTED_WRITE_KEYS.has(key)) {\n\t\t\tallowedUpdates[key] = value;\n\t\t\tcontinue;\n\t\t}\n\t\tif (SECRET_CONFIG_KEYS.has(key) && value === REDACTED_VALUE) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (configValuesEqual(value, beforeConfig[key])) {\n\t\t\tcontinue;\n\t\t}\n\t\treturn {\n\t\t\tallowedUpdates: {},\n\t\t\terror: `${key} cannot be changed from the viewer API; edit the config file or environment instead`,\n\t\t};\n\t}\n\treturn { allowedUpdates, error: null };\n}\n\nfunction parsePositiveInt(value: unknown, allowZero = false): number | null {\n\tif (typeof value === \"boolean\") return null;\n\tconst parsed =\n\t\ttypeof value === \"number\"\n\t\t\t? value\n\t\t\t: typeof value === \"string\" && /^-?\\d+$/.test(value.trim())\n\t\t\t\t? Number(value.trim())\n\t\t\t\t: Number.NaN;\n\tif (!Number.isFinite(parsed) || !Number.isInteger(parsed)) return null;\n\tif (allowZero) return parsed >= 0 ? parsed : null;\n\treturn parsed > 0 ? parsed : null;\n}\n\nfunction parseFiniteNumber(value: unknown, allowZero = true): number | null {\n\tif (typeof value === \"boolean\") return null;\n\tconst parsed =\n\t\ttypeof value === \"number\"\n\t\t\t? value\n\t\t\t: typeof value === \"string\" && value.trim().length > 0\n\t\t\t\t? Number(value.trim())\n\t\t\t\t: Number.NaN;\n\tif (!Number.isFinite(parsed)) return null;\n\tif (allowZero) return parsed >= 0 ? parsed : null;\n\treturn parsed > 0 ? parsed : null;\n}\n\nfunction asStringMap(value: unknown): Record<string, string> | null {\n\tif (value == null || typeof value !== \"object\" || Array.isArray(value)) return null;\n\tconst parsed: Record<string, string> = {};\n\tfor (const [key, item] of Object.entries(value)) {\n\t\tif (typeof item !== \"string\") return null;\n\t\tconst stripped = key.trim();\n\t\tif (!stripped) return null;\n\t\tparsed[stripped] = item;\n\t}\n\treturn parsed;\n}\n\nfunction asExecutableArgv(value: unknown): string[] | null {\n\tif (!Array.isArray(value)) return null;\n\tconst argv: string[] = [];\n\tfor (const item of value) {\n\t\tif (typeof item !== \"string\") return null;\n\t\tconst token = item.trim();\n\t\tif (!token) return null;\n\t\targv.push(token);\n\t}\n\treturn argv;\n}\n\nfunction validateAndApplyUpdate(\n\tconfigData: ConfigData,\n\tkey: (typeof ALLOWED_KEYS)[number],\n\tvalue: unknown,\n\tproviders: Set<string>,\n): string | null {\n\tif (value == null || value === \"\") {\n\t\tdelete configData[key];\n\t\treturn null;\n\t}\n\tif (key === \"observer_provider\") {\n\t\tif (typeof value !== \"string\") return \"observer_provider must be string\";\n\t\tconst provider = value.trim().toLowerCase();\n\t\tconst savedBaseUrl = configData.observer_base_url;\n\t\tconst hasSavedBaseUrl = typeof savedBaseUrl === \"string\" && savedBaseUrl.trim().length > 0;\n\t\tif (!providers.has(provider) && !hasSavedBaseUrl) {\n\t\t\treturn \"observer_provider must match a configured provider\";\n\t\t}\n\t\tconfigData[key] = provider;\n\t\treturn null;\n\t}\n\tif (key === \"observer_runtime\") {\n\t\tif (typeof value !== \"string\") return \"observer_runtime must be string\";\n\t\tconst runtime = value.trim().toLowerCase();\n\t\tif (!RUNTIMES.has(runtime)) {\n\t\t\treturn \"observer_runtime must be one of: api_http, claude_sidecar, codex_sidecar\";\n\t\t}\n\t\tconfigData[key] = runtime;\n\t\treturn null;\n\t}\n\tif (key === \"observer_auth_source\") {\n\t\tif (typeof value !== \"string\") return \"observer_auth_source must be string\";\n\t\tconst source = value.trim().toLowerCase();\n\t\tif (!AUTH_SOURCES.has(source)) {\n\t\t\treturn \"observer_auth_source must be one of: auto, env, file, command, none\";\n\t\t}\n\t\tconfigData[key] = source;\n\t\treturn null;\n\t}\n\tif (key === \"claude_command\" || key === \"codex_command\" || key === \"observer_auth_command\") {\n\t\tconst argv = asExecutableArgv(value);\n\t\tif (argv == null) return `${key} must be string array`;\n\t\tif (argv.length > 0) configData[key] = argv;\n\t\telse delete configData[key];\n\t\treturn null;\n\t}\n\tif (key === \"observer_headers\") {\n\t\tconst headers = asStringMap(value);\n\t\tif (headers == null) return \"observer_headers must be object of string values\";\n\t\tif (Object.keys(headers).length > 0) configData[key] = headers;\n\t\telse delete configData[key];\n\t\treturn null;\n\t}\n\tif (key === \"sync_enabled\" || key === \"sync_retention_enabled\" || key === \"sync_mdns\") {\n\t\tif (typeof value !== \"boolean\") return `${key} must be boolean`;\n\t\tconfigData[key] = value;\n\t\treturn null;\n\t}\n\tif (key === \"observer_tier_routing_enabled\") {\n\t\tif (typeof value !== \"boolean\") return `${key} must be boolean`;\n\t\tconfigData[key] = value;\n\t\treturn null;\n\t}\n\tif (\n\t\tkey === \"observer_base_url\" ||\n\t\tkey === \"observer_model\" ||\n\t\tkey === \"observer_simple_model\" ||\n\t\tkey === \"observer_reasoning_effort\" ||\n\t\tkey === \"observer_reasoning_summary\" ||\n\t\tkey === \"observer_rich_model\" ||\n\t\tkey === \"observer_rich_reasoning_effort\" ||\n\t\tkey === \"observer_rich_reasoning_summary\" ||\n\t\tkey === \"observer_auth_file\" ||\n\t\tkey === \"sync_host\" ||\n\t\tkey === \"sync_coordinator_url\" ||\n\t\tkey === \"sync_coordinator_group\"\n\t) {\n\t\tif (typeof value !== \"string\") return `${key} must be string`;\n\t\tconst trimmed = value.trim();\n\t\tif (!trimmed) delete configData[key];\n\t\telse configData[key] = trimmed;\n\t\treturn null;\n\t}\n\tif (key === \"observer_simple_temperature\" || key === \"observer_rich_temperature\") {\n\t\tconst parsed = parseFiniteNumber(value, true);\n\t\tif (parsed == null) return `${key} must be non-negative number`;\n\t\tconfigData[key] = parsed;\n\t\treturn null;\n\t}\n\tconst allowZero = key === \"observer_auth_cache_ttl_s\";\n\tconst parsed = parsePositiveInt(value, allowZero);\n\tif (parsed == null) return `${key} must be ${allowZero ? \"non-negative int\" : \"int\"}`;\n\tconfigData[key] = parsed;\n\treturn null;\n}\n\nfunction applyRuntimeEffects(changedKeys: string[], opts: ConfigRouteOptions): string[] {\n\tconst applied: string[] = [];\n\tif (changedKeys.includes(\"raw_events_sweeper_interval_s\")) {\n\t\tconst configValue = readCodememConfigFile().raw_events_sweeper_interval_s;\n\t\tconst seconds =\n\t\t\ttypeof configValue === \"number\"\n\t\t\t\t? configValue\n\t\t\t\t: Number.parseInt(String(configValue ?? \"\"), 10);\n\t\tif (Number.isFinite(seconds) && seconds > 0) {\n\t\t\tprocess.env.CODEMEM_RAW_EVENTS_SWEEPER_INTERVAL_MS = String(seconds * 1000);\n\t\t} else {\n\t\t\tdelete process.env.CODEMEM_RAW_EVENTS_SWEEPER_INTERVAL_MS;\n\t\t}\n\t\topts.getSweeper?.()?.notifyConfigChanged();\n\t\tapplied.push(\"raw_events_sweeper_interval_s\");\n\t}\n\treturn applied;\n}\n\nexport function configRoutes(opts: ConfigRouteOptions = {}) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/config\", (c) => {\n\t\t// Resolve via the core resolver so GET reflects the same file POST\n\t\t// writes — including workspace-scoped overrides honored through\n\t\t// CODEMEM_RUNTIME_ROOT / CODEMEM_WORKSPACE_ID, which the legacy local\n\t\t// getConfigPath() ignored.\n\t\tconst configPath = getCodememConfigPath();\n\t\tconst configData = withoutRemovedConfigKeys(readCodememConfigFile());\n\t\tconst effective = getEffectiveConfig(configData);\n\t\treturn c.json({\n\t\t\tpath: configPath,\n\t\t\tconfig: sanitizeConfigForResponse(configData),\n\t\t\tdefaults: DEFAULTS,\n\t\t\teffective: sanitizeConfigForResponse(effective),\n\t\t\tenv_overrides: getCodememEnvOverrides(),\n\t\t\tprotected_keys: [...PROTECTED_WRITE_KEYS].sort(),\n\t\t\tproviders: loadProviderOptions(),\n\t\t});\n\t});\n\n\tapp.post(\"/api/config\", async (c) => {\n\t\tlet payload: unknown;\n\t\ttry {\n\t\t\tpayload = (await c.req.json()) as unknown;\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tif (payload == null || typeof payload !== \"object\" || Array.isArray(payload)) {\n\t\t\treturn c.json({ error: \"payload must be an object\" }, 400);\n\t\t}\n\t\tif (\n\t\t\t\"config\" in payload &&\n\t\t\t(payload as ConfigData).config != null &&\n\t\t\t(typeof (payload as ConfigData).config !== \"object\" ||\n\t\t\t\tArray.isArray((payload as ConfigData).config))\n\t\t) {\n\t\t\treturn c.json({ error: \"config must be an object\" }, 400);\n\t\t}\n\t\tconst updates =\n\t\t\t\"config\" in payload &&\n\t\t\t(payload as ConfigData).config != null &&\n\t\t\ttypeof (payload as ConfigData).config === \"object\" &&\n\t\t\t!Array.isArray((payload as ConfigData).config)\n\t\t\t\t? ((payload as ConfigData).config as ConfigData)\n\t\t\t\t: (payload as ConfigData);\n\n\t\tconst configPath = getCodememConfigPath();\n\t\tconst beforeConfig = withoutRemovedConfigKeys(readCodememConfigFile());\n\t\tconst { allowedUpdates, error: protectedKeyError } = partitionViewerUpdates(\n\t\t\tupdates,\n\t\t\tbeforeConfig,\n\t\t);\n\t\tif (protectedKeyError) {\n\t\t\treturn c.json({ error: protectedKeyError }, 403);\n\t\t}\n\n\t\tconst beforeEffective = getEffectiveConfig(beforeConfig);\n\t\tconst nextConfig: ConfigData = { ...beforeConfig };\n\t\tconst providers = new Set(loadProviderOptions());\n\n\t\tconst touchedKeys = ALLOWED_KEYS.filter((key) => key in allowedUpdates);\n\t\tfor (const key of ALLOWED_KEYS) {\n\t\t\tif (!(key in allowedUpdates)) continue;\n\t\t\tconst error = validateAndApplyUpdate(nextConfig, key, allowedUpdates[key], providers);\n\t\t\tif (error) return c.json({ error }, 400);\n\t\t}\n\n\t\tlet savedPath: string;\n\t\ttry {\n\t\t\tsavedPath = writeCodememConfigFile(nextConfig, configPath);\n\t\t} catch {\n\t\t\treturn c.json({ error: \"failed to write config\" }, 500);\n\t\t}\n\n\t\tconst afterEffective = getEffectiveConfig(nextConfig);\n\t\tconst savedChangedKeys = ALLOWED_KEYS.filter((key) => beforeConfig[key] !== nextConfig[key]);\n\t\tconst effectiveChangedKeys = ALLOWED_KEYS.filter(\n\t\t\t(key) => !configValuesEqual(beforeEffective[key], afterEffective[key]),\n\t\t);\n\t\tconst envOverrides = getCodememEnvOverrides();\n\t\tconst ignoredByEnvKeys = savedChangedKeys.filter(\n\t\t\t(key) => !effectiveChangedKeys.includes(key) && key in envOverrides,\n\t\t);\n\t\tconst runtimeChangedKeys = [\n\t\t\t...new Set([...touchedKeys, ...savedChangedKeys, ...effectiveChangedKeys]),\n\t\t];\n\t\tconst hotReloadedKeys = applyRuntimeEffects(runtimeChangedKeys, opts);\n\t\tconst restartRequiredKeys = effectiveChangedKeys.filter(\n\t\t\t(key) => !HOT_RELOAD_KEYS.has(key) && !(key in envOverrides),\n\t\t);\n\n\t\treturn c.json({\n\t\t\tpath: savedPath,\n\t\t\tconfig: sanitizeConfigForResponse(nextConfig),\n\t\t\teffective: sanitizeConfigForResponse(afterEffective),\n\t\t\tprotected_keys: [...PROTECTED_WRITE_KEYS].sort(),\n\t\t\teffects: {\n\t\t\t\tsaved_keys: savedChangedKeys,\n\t\t\t\teffective_keys: effectiveChangedKeys,\n\t\t\t\thot_reloaded_keys: hotReloadedKeys,\n\t\t\t\trestart_required_keys: restartRequiredKeys,\n\t\t\t\tignored_by_env_keys: ignoredByEnvKeys,\n\t\t\t\twarnings: ignoredByEnvKeys.map(\n\t\t\t\t\t(key) =>\n\t\t\t\t\t\t`${key} is currently controlled by ${envOverrides[key]}; saved config will not take effect until that override is removed.`,\n\t\t\t\t),\n\t\t\t},\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { createCipheriv, createDecipheriv, createHash, randomBytes } from \"node:crypto\";\nimport type { MemoryStore } from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\nconst DEFAULT_LIMIT = 50;\nconst MAX_LIMIT = 100;\nconst CURSOR_KEY = randomBytes(32);\n\nexport const DIAGNOSTIC_SEVERITIES = [\"info\", \"warning\", \"error\"] as const;\nexport const DIAGNOSTIC_SUBSYSTEMS = [\n\t\"viewer\",\n\t\"observer\",\n\t\"capture\",\n\t\"sync\",\n\t\"storage\",\n\t\"maintenance\",\n] as const;\n\nexport type DiagnosticSeverity = (typeof DIAGNOSTIC_SEVERITIES)[number];\nexport type DiagnosticSubsystem = (typeof DIAGNOSTIC_SUBSYSTEMS)[number];\n\nexport type DiagnosticEvent = {\n\tid: string;\n\toccurred_at: string;\n\tseverity: DiagnosticSeverity;\n\tsubsystem: DiagnosticSubsystem;\n\tcode: string;\n\tmessage: string;\n\trecovery?: { label: string; href?: string; command?: string };\n\tcorrelation?: { kind: \"session\" | \"device\" | \"operation\"; label: string };\n\ttechnical_detail?: { available: boolean; text?: string };\n};\n\ntype Cursor = { occurredAt: string; orderKey: string };\ntype StoreFactory = () => MemoryStore;\ntype EventOptions = {\n\tcursor: Cursor | null;\n\tincludeTechnical: boolean;\n\tlimit: number;\n\tseverities: Set<DiagnosticSeverity>;\n\tsubsystems: Set<DiagnosticSubsystem>;\n};\n\ntype OrderedDiagnosticEvent = DiagnosticEvent & { orderKey: string };\n\nfunction opaqueId(kind: string, sourceId: unknown): string {\n\treturn createHash(\"sha256\")\n\t\t.update(`${kind}\\0${String(sourceId)}`)\n\t\t.digest(\"base64url\")\n\t\t.slice(0, 22);\n}\n\nfunction encodeCursor(event: OrderedDiagnosticEvent): string {\n\tconst iv = randomBytes(12);\n\tconst cipher = createCipheriv(\"aes-256-gcm\", CURSOR_KEY, iv);\n\tconst plaintext = JSON.stringify({ occurredAt: event.occurred_at, orderKey: event.orderKey });\n\tconst encrypted = Buffer.concat([cipher.update(plaintext, \"utf8\"), cipher.final()]);\n\treturn Buffer.concat([iv, cipher.getAuthTag(), encrypted]).toString(\"base64url\");\n}\n\nfunction parseCursor(raw: string | undefined): Cursor | null | \"invalid\" {\n\tif (!raw) return null;\n\ttry {\n\t\tconst encoded = Buffer.from(raw, \"base64url\");\n\t\tif (encoded.length < 29) return \"invalid\";\n\t\tconst decipher = createDecipheriv(\"aes-256-gcm\", CURSOR_KEY, encoded.subarray(0, 12));\n\t\tdecipher.setAuthTag(encoded.subarray(12, 28));\n\t\tconst plaintext = Buffer.concat([\n\t\t\tdecipher.update(encoded.subarray(28)),\n\t\t\tdecipher.final(),\n\t\t]).toString(\"utf8\");\n\t\tconst parsed = JSON.parse(plaintext) as Record<string, unknown>;\n\t\tif (\n\t\t\ttypeof parsed.occurredAt !== \"string\" ||\n\t\t\t!/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9:.+-]+Z$/.test(parsed.occurredAt) ||\n\t\t\t!Number.isFinite(Date.parse(parsed.occurredAt))\n\t\t) {\n\t\t\treturn \"invalid\";\n\t\t}\n\t\tif (\n\t\t\ttypeof parsed.orderKey !== \"string\" ||\n\t\t\tparsed.orderKey.length < 3 ||\n\t\t\tparsed.orderKey.length > 2_048\n\t\t) {\n\t\t\treturn \"invalid\";\n\t\t}\n\t\treturn { occurredAt: parsed.occurredAt, orderKey: parsed.orderKey };\n\t} catch {\n\t\treturn \"invalid\";\n\t}\n}\n\nfunction parseLimit(raw: string | undefined): number | \"invalid\" {\n\tif (raw == null || raw === \"\") return DEFAULT_LIMIT;\n\tif (!/^\\d+$/.test(raw)) return \"invalid\";\n\tconst parsed = Number(raw);\n\tif (!Number.isSafeInteger(parsed) || parsed <= 0) return \"invalid\";\n\treturn Math.min(parsed, MAX_LIMIT);\n}\n\nfunction parseFilter<T extends string>(\n\traw: string | undefined,\n\tallowed: readonly T[],\n): Set<T> | \"invalid\" {\n\tif (raw == null) return new Set(allowed);\n\tconst values = raw\n\t\t.split(\",\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n\tif (!values.length || values.some((value) => !allowed.includes(value as T))) return \"invalid\";\n\treturn new Set(values as T[]);\n}\n\nfunction parseTechnical(raw: string | undefined): boolean | \"invalid\" {\n\tif (raw == null || raw === \"0\") return false;\n\tif (raw === \"1\") return true;\n\treturn \"invalid\";\n}\n\nfunction technicalDetail(available: boolean, text: string, include: boolean) {\n\tif (!available) return { available: false };\n\treturn include ? { available: true, text: text.slice(0, 2_000) } : { available: true };\n}\n\ntype DiagnosticSourceRow = {\n\tsource_type: \"sync\" | \"observer\" | \"capture_failure\" | \"backlog\" | \"maintenance\";\n\tsource_id: number | string;\n\torder_key: string;\n\toccurred_at: string;\n\tstatus: string;\n\tmetric_a: number | null;\n\tmetric_b: number | null;\n\tcategory: string | null;\n};\n\nconst SYNC_OCCURRED_AT_SQL = \"CASE WHEN finished_at IS NULL THEN started_at ELSE finished_at END\";\n\nfunction syncSelect(options: EventOptions): string | null {\n\tif (!options.subsystems.has(\"sync\")) return null;\n\tconst predicates: string[] = [];\n\tif (!options.severities.has(\"info\")) predicates.push(\"ok = 0\");\n\tif (!options.severities.has(\"error\")) predicates.push(\"ok <> 0\");\n\tif (!options.severities.has(\"info\") && !options.severities.has(\"error\")) return null;\n\tif (options.cursor) {\n\t\tpredicates.push(`(${SYNC_OCCURRED_AT_SQL} < @cursorOccurredAt OR\n\t\t\t(${SYNC_OCCURRED_AT_SQL} = @cursorOccurredAt AND\n\t\t\t's:' || printf('%020d', id) < @cursorOrderKey))`);\n\t}\n\tconst where = predicates.length ? `WHERE ${predicates.join(\" AND \")}` : \"\";\n\treturn `SELECT 'sync' AS source_type, id AS source_id,\n\t\t's:' || printf('%020d', id) AS order_key,\n\t\t${SYNC_OCCURRED_AT_SQL} AS occurred_at,\n\t\tCASE WHEN ok <> 0 THEN 'succeeded' ELSE 'failed' END AS status,\n\t\tops_in AS metric_a, ops_out AS metric_b,\n\t\tCASE\n\t\t\tWHEN lower(error) LIKE '%auth%' OR lower(error) LIKE '%unauthorized%' THEN 'authentication'\n\t\t\tWHEN lower(error) LIKE '%timeout%' OR lower(error) LIKE '%timed out%' THEN 'timeout'\n\t\t\tWHEN lower(error) LIKE '%version%' OR lower(error) LIKE '%capability%' THEN 'compatibility'\n\t\t\tWHEN lower(error) LIKE '%connect%' OR lower(error) LIKE '%network%'\n\t\t\t\tOR lower(error) LIKE '%dns%' THEN 'connectivity'\n\t\t\tELSE 'unspecified'\n\t\tEND AS category\n\t\tFROM sync_attempts ${where}\n\t\tORDER BY ${SYNC_OCCURRED_AT_SQL} DESC, id DESC\n\t\tLIMIT @sourceLimit`;\n}\n\nfunction observerSelect(options: EventOptions): string | null {\n\tif (!options.severities.has(\"error\")) return null;\n\tconst observer = options.subsystems.has(\"observer\");\n\tconst capture = options.subsystems.has(\"capture\");\n\tif (!observer && !capture) return null;\n\tlet providerFilter = \"\";\n\tif (observer && !capture) providerFilter = \"AND observer_provider IS NOT NULL\";\n\tif (capture && !observer) providerFilter = \"AND observer_provider IS NULL\";\n\tconst cursorFilter = options.cursor\n\t\t? `AND (updated_at < @cursorOccurredAt OR\n\t\t\t(updated_at = @cursorOccurredAt AND\n\t\t\t'o:' || printf('%020d', id) < @cursorOrderKey))`\n\t\t: \"\";\n\treturn [\"error\", \"failed\", \"gave_up\"]\n\t\t.map(\n\t\t\t(status) => `SELECT * FROM (\n\t\t\t\tSELECT\n\t\t\t\t\tCASE WHEN observer_provider IS NULL THEN 'capture_failure' ELSE 'observer' END AS source_type,\n\t\t\t\t\tid AS source_id, 'o:' || printf('%020d', id) AS order_key,\n\t\t\t\t\tupdated_at AS occurred_at, status, attempt_count AS metric_a,\n\t\t\t\t\tNULL AS metric_b,\n\t\t\t\t\tCASE\n\t\t\t\t\t\tWHEN lower(COALESCE(observer_error_code, error_type)) LIKE '%auth%' THEN 'authentication'\n\t\t\t\t\t\tWHEN lower(COALESCE(observer_error_code, error_type)) LIKE '%rate%'\n\t\t\t\t\t\t\tOR lower(COALESCE(observer_error_code, error_type)) LIKE '%limit%' THEN 'rate limit'\n\t\t\t\t\t\tWHEN lower(COALESCE(observer_error_code, error_type)) LIKE '%timeout%' THEN 'timeout'\n\t\t\t\t\t\tWHEN lower(COALESCE(observer_error_code, error_type)) LIKE '%schema%'\n\t\t\t\t\t\t\tOR lower(COALESCE(observer_error_code, error_type)) LIKE '%parse%' THEN 'response format'\n\t\t\t\t\t\tELSE 'unspecified'\n\t\t\t\t\tEND AS category\n\t\t\t\tFROM raw_event_flush_batches\n\t\t\t\tWHERE status = '${status}' ${providerFilter} ${cursorFilter}\n\t\t\t\tORDER BY updated_at DESC, id DESC\n\t\t\t\tLIMIT @sourceLimit\n\t\t\t)`,\n\t\t)\n\t\t.join(\" UNION ALL \");\n}\n\nfunction maintenanceSelect(options: EventOptions): string | null {\n\tif (!options.subsystems.has(\"maintenance\")) return null;\n\tconst statuses: string[] = [];\n\tif (options.severities.has(\"info\")) statuses.push(\"'pending'\", \"'running'\");\n\tif (options.severities.has(\"warning\")) statuses.push(\"'cancelled'\");\n\tif (options.severities.has(\"error\")) statuses.push(\"'failed'\");\n\tif (!statuses.length) return null;\n\treturn `SELECT 'maintenance' AS source_type, kind AS source_id,\n\t\t'm:' || hex(kind) AS order_key, updated_at AS occurred_at,\n\t\tstatus, progress_current AS metric_a, progress_total AS metric_b,\n\t\tNULL AS category\n\t\tFROM maintenance_jobs WHERE status IN (${statuses.join(\", \")})`;\n}\n\nfunction backlogSelect(options: EventOptions): string | null {\n\tif (!options.subsystems.has(\"capture\")) return null;\n\tconst warning = options.severities.has(\"warning\");\n\tconst error = options.severities.has(\"error\");\n\tif (!warning && !error) return null;\n\tlet having = \"pending >= 200\";\n\tif (!warning) having = \"pending >= 1000\";\n\tif (!error) having = \"pending >= 200 AND pending < 1000\";\n\treturn `WITH candidate_sessions AS MATERIALIZED (\n\t\t\tSELECT source, stream_id, last_flushed_event_seq, updated_at\n\t\t\tFROM raw_event_sessions\n\t\t\tWHERE last_received_event_seq > last_flushed_event_seq\n\t\t\tORDER BY updated_at DESC\n\t\t\tLIMIT 1001\n\t\t), bounded_sessions AS MATERIALIZED (\n\t\t\tSELECT source, stream_id, last_flushed_event_seq, updated_at\n\t\t\tFROM candidate_sessions\n\t\t\tORDER BY updated_at DESC\n\t\t\tLIMIT 1000\n\t\t), retained_sessions AS MATERIALIZED (\n\t\t\tSELECT updated_at,\n\t\t\t\t(SELECT COUNT(*) FROM raw_events AS events\n\t\t\t\t\tWHERE events.source = sessions.source\n\t\t\t\t\t\tAND events.stream_id = sessions.stream_id\n\t\t\t\t\t\tAND events.event_seq > sessions.last_flushed_event_seq) AS pending\n\t\t\tFROM bounded_sessions AS sessions\n\t\t)\n\t\tSELECT 'backlog' AS source_type, 0 AS source_id,\n\t\t'b:' || printf('%020d', 0) AS order_key, occurred_at,\n\t\tCASE WHEN pending >= 1000 THEN 'error' ELSE 'warning' END AS status,\n\t\tpending AS metric_a, sessions AS metric_b,\n\t\tCASE WHEN candidate_count > 1000 THEN 'capped' ELSE NULL END AS category\n\t\tFROM (\n\t\t\tSELECT MAX(updated_at) AS occurred_at,\n\t\t\t\tSUM(pending) AS pending,\n\t\t\t\tCOUNT(*) FILTER (WHERE pending > 0) AS sessions,\n\t\t\t\t(SELECT COUNT(*) FROM candidate_sessions) AS candidate_count\n\t\t\tFROM retained_sessions\n\t\t\tWHERE pending > 0\n\t\t) WHERE ${having}`;\n}\n\nfunction sourceSelects(options: EventOptions): string[] {\n\treturn [\n\t\tsyncSelect(options),\n\t\tobserverSelect(options),\n\t\tmaintenanceSelect(options),\n\t\tbacklogSelect(options),\n\t].filter((select): select is string => select != null);\n}\n\nfunction boundedSourceSelect(select: string, hasCursor: boolean): string {\n\tconst cursorWhere = hasCursor\n\t\t? \"WHERE occurred_at < @cursorOccurredAt OR (occurred_at = @cursorOccurredAt AND order_key < @cursorOrderKey)\"\n\t\t: \"\";\n\treturn `SELECT * FROM (\n\t\tSELECT * FROM (${select})\n\t\t${cursorWhere}\n\t\tORDER BY occurred_at DESC, order_key DESC\n\t\tLIMIT @sourceLimit\n\t)`;\n}\n\nfunction loadSourceRows(store: MemoryStore, options: EventOptions): DiagnosticSourceRow[] {\n\tconst selects = sourceSelects(options);\n\tif (!selects.length) return [];\n\tconst boundedSelects = selects.map((select) =>\n\t\tboundedSourceSelect(select, options.cursor != null),\n\t);\n\tconst params: Record<string, unknown> = {\n\t\tresultLimit: options.limit + 1,\n\t\tsourceLimit: options.limit + 1,\n\t};\n\tif (options.cursor) {\n\t\tparams.cursorOccurredAt = options.cursor.occurredAt;\n\t\tparams.cursorOrderKey = options.cursor.orderKey;\n\t}\n\treturn store.db\n\t\t.prepare(\n\t\t\t`SELECT * FROM (${boundedSelects.join(\" UNION ALL \")})\n\t\t\t ORDER BY occurred_at DESC, order_key DESC\n\t\t\t LIMIT @resultLimit`,\n\t\t)\n\t\t.all(params) as DiagnosticSourceRow[];\n}\n\nfunction syncEvent(row: DiagnosticSourceRow, includeTechnical: boolean): OrderedDiagnosticEvent {\n\tconst succeeded = row.status === \"succeeded\";\n\tconst opsIn = Number(row.metric_a ?? 0);\n\tconst opsOut = Number(row.metric_b ?? 0);\n\tconst category = row.category ?? \"unspecified\";\n\treturn {\n\t\tid: opaqueId(\"sync-attempt\", row.source_id),\n\t\torderKey: row.order_key,\n\t\toccurred_at: row.occurred_at,\n\t\tseverity: succeeded ? \"info\" : \"error\",\n\t\tsubsystem: \"sync\",\n\t\tcode: succeeded ? \"sync_attempt_succeeded\" : \"sync_attempt_failed\",\n\t\tmessage: succeeded\n\t\t\t? \"A sync attempt completed.\"\n\t\t\t: \"A sync attempt failed before all work completed.\",\n\t\trecovery: succeeded\n\t\t\t? undefined\n\t\t\t: { label: \"Open advanced sync diagnostics\", href: \"#advanced/sync/diagnostics\" },\n\t\ttechnical_detail: technicalDetail(\n\t\t\ttrue,\n\t\t\tsucceeded\n\t\t\t\t? `${opsIn} inbound and ${opsOut} outbound operations.`\n\t\t\t\t: `Failure category: ${category}. ${opsIn} inbound and ${opsOut} outbound operations.`,\n\t\t\tincludeTechnical,\n\t\t),\n\t};\n}\n\nfunction failureEvent(row: DiagnosticSourceRow, includeTechnical: boolean): OrderedDiagnosticEvent {\n\tconst subsystem = row.source_type === \"observer\" ? \"observer\" : \"capture\";\n\tconst attempts = Math.max(0, Number(row.metric_a ?? 0));\n\tconst gaveUp = row.status === \"gave_up\";\n\treturn {\n\t\tid: opaqueId(\"processing-failure\", row.source_id),\n\t\torderKey: row.order_key,\n\t\toccurred_at: row.occurred_at,\n\t\tseverity: \"error\",\n\t\tsubsystem,\n\t\tcode: `${subsystem}_flush_${gaveUp ? \"gave_up\" : \"failed\"}`,\n\t\tmessage: gaveUp\n\t\t\t? \"Processing stopped after all retry attempts were exhausted.\"\n\t\t\t: \"Processing failed and queued events are waiting for retry.\",\n\t\trecovery: { label: \"Open Health\", href: \"#health\" },\n\t\ttechnical_detail: technicalDetail(\n\t\t\ttrue,\n\t\t\t`Failure category: ${row.category ?? \"unspecified\"}. Attempts: ${attempts}.`,\n\t\t\tincludeTechnical,\n\t\t),\n\t};\n}\n\nfunction maintenanceEvent(\n\trow: DiagnosticSourceRow,\n\tincludeTechnical: boolean,\n): OrderedDiagnosticEvent {\n\tlet severity: DiagnosticSeverity = \"info\";\n\tlet code = \"maintenance_job_active\";\n\tlet message = \"A background maintenance task is active.\";\n\tif (row.status === \"failed\") {\n\t\tseverity = \"error\";\n\t\tcode = \"maintenance_job_failed\";\n\t\tmessage = \"A background maintenance task failed.\";\n\t} else if (row.status === \"cancelled\") {\n\t\tseverity = \"warning\";\n\t\tcode = \"maintenance_job_cancelled\";\n\t\tmessage = \"A background maintenance task was cancelled.\";\n\t}\n\tconst total = row.metric_b == null ? \"unknown\" : String(row.metric_b);\n\treturn {\n\t\tid: opaqueId(\"maintenance\", row.source_id),\n\t\torderKey: row.order_key,\n\t\toccurred_at: row.occurred_at,\n\t\tseverity,\n\t\tsubsystem: \"maintenance\",\n\t\tcode,\n\t\tmessage,\n\t\trecovery: severity === \"error\" ? { label: \"Open Health\", href: \"#health\" } : undefined,\n\t\ttechnical_detail: technicalDetail(\n\t\t\ttrue,\n\t\t\t`Progress: ${Number(row.metric_a ?? 0)} of ${total}.`,\n\t\t\tincludeTechnical,\n\t\t),\n\t};\n}\n\nfunction backlogEvent(row: DiagnosticSourceRow, includeTechnical: boolean): OrderedDiagnosticEvent {\n\tconst severity = row.status === \"error\" ? \"error\" : \"warning\";\n\tconst pending = Number(row.metric_a ?? 0);\n\tconst sessions = Number(row.metric_b ?? 0);\n\tconst countPrefix = row.category === \"capped\" ? \"At least \" : \"\";\n\tconst sessionLabel = sessions === 1 ? \"session\" : \"sessions\";\n\treturn {\n\t\tid: opaqueId(\"capture-backlog\", 0),\n\t\torderKey: row.order_key,\n\t\toccurred_at: row.occurred_at,\n\t\tseverity,\n\t\tsubsystem: \"capture\",\n\t\tcode: severity === \"error\" ? \"capture_backlog_high\" : \"capture_backlog_growing\",\n\t\tmessage:\n\t\t\tseverity === \"error\"\n\t\t\t\t? \"The capture queue has a high pending backlog.\"\n\t\t\t\t: \"The capture queue is growing and may need attention.\",\n\t\trecovery: { label: \"Open Health\", href: \"#health\" },\n\t\ttechnical_detail: technicalDetail(\n\t\t\ttrue,\n\t\t\t`${countPrefix}${pending} pending events across ${sessions} ${sessionLabel}.`,\n\t\t\tincludeTechnical,\n\t\t),\n\t};\n}\n\nfunction collectEvents(store: MemoryStore, options: EventOptions): OrderedDiagnosticEvent[] {\n\treturn loadSourceRows(store, options).map((row) => {\n\t\tif (row.source_type === \"sync\") return syncEvent(row, options.includeTechnical);\n\t\tif (row.source_type === \"maintenance\") {\n\t\t\treturn maintenanceEvent(row, options.includeTechnical);\n\t\t}\n\t\tif (row.source_type === \"backlog\") return backlogEvent(row, options.includeTechnical);\n\t\treturn failureEvent(row, options.includeTechnical);\n\t});\n}\n\nexport function diagnosticsRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/diagnostics/events\", (c) => {\n\t\tconst limit = parseLimit(c.req.query(\"limit\"));\n\t\tconst cursor = parseCursor(c.req.query(\"cursor\"));\n\t\tconst severities = parseFilter(c.req.query(\"severity\"), DIAGNOSTIC_SEVERITIES);\n\t\tconst subsystems = parseFilter(c.req.query(\"subsystem\"), DIAGNOSTIC_SUBSYSTEMS);\n\t\tconst includeTechnical = parseTechnical(c.req.query(\"includeTechnical\"));\n\t\tif (\n\t\t\tlimit === \"invalid\" ||\n\t\t\tcursor === \"invalid\" ||\n\t\t\tseverities === \"invalid\" ||\n\t\t\tsubsystems === \"invalid\" ||\n\t\t\tincludeTechnical === \"invalid\"\n\t\t) {\n\t\t\treturn c.json({ error: \"invalid_diagnostics_query\" }, 400);\n\t\t}\n\n\t\tconst generatedAt = new Date().toISOString();\n\t\tconst events = collectEvents(getStore(), {\n\t\t\tcursor,\n\t\t\tincludeTechnical,\n\t\t\tlimit,\n\t\t\tseverities,\n\t\t\tsubsystems,\n\t\t});\n\t\tconst orderedItems = events.slice(0, limit);\n\t\tconst items = orderedItems.map(({ orderKey: _orderKey, ...event }) => event);\n\t\tconst lastItem = orderedItems.at(-1);\n\t\tconst nextCursor = events.length > limit && lastItem ? encodeCursor(lastItem) : null;\n\t\tc.header(\"Cache-Control\", \"no-store\");\n\t\treturn c.json({\n\t\t\tcontract_version: 1,\n\t\t\titems,\n\t\t\tnext_cursor: nextCursor,\n\t\t\tredacted: true,\n\t\t\tgenerated_at: generatedAt,\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { type MemoryStore, VERSION, VIEWER_SERVICE_DISCRIMINATOR } from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\ntype StoreFactory = () => MemoryStore;\n\nfunction databaseReachable(getStore: StoreFactory): boolean {\n\ttry {\n\t\tgetStore().db.pragma(\"schema_version\", { simple: true });\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function healthRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/health\", (c) => {\n\t\tconst reachable = databaseReachable(getStore);\n\t\tc.header(\"Cache-Control\", \"no-store\");\n\t\treturn c.json({\n\t\t\t// Bound to the shared probe contract so producer and clients\n\t\t\t// cannot drift independently.\n\t\t\tservice: VIEWER_SERVICE_DISCRIMINATOR,\n\t\t\tversion: VERSION,\n\t\t\tpid: process.pid,\n\t\t\tuptime_ms: Math.max(0, Math.floor(process.uptime() * 1_000)),\n\t\t\t// Database reachability is the only readiness dependency in this endpoint.\n\t\t\tready: reachable,\n\t\t\tdatabase: { reachable },\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { parseStrictInteger } from \"@codemem/core\";\n\n/**\n * Shared helpers for viewer-server routes.\n */\n\n/**\n * Parse a JSON string that should be an array of strings.\n * Returns an empty array on null, invalid JSON, or non-array values.\n * Mirrors Python's store._safe_json_list().\n */\nexport function safeJsonList(raw: string | null | undefined): string[] {\n\tif (raw == null) return [];\n\ttry {\n\t\tconst parsed: unknown = JSON.parse(raw);\n\t\tif (!Array.isArray(parsed)) return [];\n\t\treturn parsed.filter((item): item is string => typeof item === \"string\");\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n/**\n * Parse a query parameter as an integer, returning the default on failure.\n */\nexport function queryInt(value: string | undefined, defaultValue: number): number {\n\tif (value == null) return defaultValue;\n\tconst parsed = parseStrictInteger(value);\n\treturn parsed == null ? defaultValue : parsed;\n}\n\n/**\n * Parse a query parameter as a boolean flag.\n * Recognizes \"1\", \"true\", \"yes\" as truthy.\n */\nexport function queryBool(value: string | undefined): boolean {\n\tif (value == null) return false;\n\treturn value === \"1\" || value === \"true\" || value === \"yes\";\n}\n\n/**\n * Parse and validate a JSON object body, enforcing size limits.\n * Returns the parsed payload or a Hono Response on error.\n */\nexport async function parseJsonObjectBody(\n\tc: {\n\t\treq: { header: (name: string) => string | undefined; raw: Request };\n\t\tjson: (data: unknown, status?: number) => Response;\n\t},\n\tmaxBytes: number,\n): Promise<Record<string, unknown> | Response> {\n\tconst contentLength = Number.parseInt(c.req.header(\"content-length\") ?? \"0\", 10);\n\tif (Number.isNaN(contentLength) || contentLength < 0) {\n\t\treturn c.json({ error: \"invalid content-length\" }, 400);\n\t}\n\tif (contentLength > maxBytes) {\n\t\treturn c.json({ error: \"payload too large\", max_bytes: maxBytes }, 413);\n\t}\n\tlet raw = \"\";\n\ttry {\n\t\tconst body = c.req.raw.body;\n\t\tif (body !== null) {\n\t\t\tconst reader = body.getReader();\n\t\t\tconst chunks: Uint8Array[] = [];\n\t\t\tlet totalBytes = 0;\n\t\t\ttry {\n\t\t\t\twhile (true) {\n\t\t\t\t\tconst { done, value } = await reader.read();\n\t\t\t\t\tif (done) break;\n\t\t\t\t\ttotalBytes += value.byteLength;\n\t\t\t\t\tif (totalBytes > maxBytes) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tawait reader.cancel();\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// The size rejection is authoritative even if cancellation fails.\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn c.json({ error: \"payload too large\", max_bytes: maxBytes }, 413);\n\t\t\t\t\t}\n\t\t\t\t\tchunks.push(value);\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\treader.releaseLock();\n\t\t\t}\n\n\t\t\tconst bytes = new Uint8Array(totalBytes);\n\t\t\tlet offset = 0;\n\t\t\tfor (const chunk of chunks) {\n\t\t\t\tbytes.set(chunk, offset);\n\t\t\t\toffset += chunk.byteLength;\n\t\t\t}\n\t\t\traw = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n\t\t}\n\t} catch {\n\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = raw ? JSON.parse(raw) : {};\n\t} catch {\n\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t}\n\tif (parsed == null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\treturn c.json({ error: \"payload must be an object\" }, 400);\n\t}\n\treturn parsed as Record<string, unknown>;\n}\n","/**\n * Memory routes — observations, summaries, sessions, projects, pack, artifacts.\n */\n\nimport type { MemoryFilters, MemoryStore } from \"@codemem/core\";\nimport {\n\tbuildFilterClausesWithContext,\n\tcanonicalMemoryKind,\n\tfromJson,\n\tnormalizeHumanPresentationName,\n\tparsePositiveMemoryId,\n\tparseStrictInteger,\n\tschema,\n\tsummaryLikeSqlPredicate,\n} from \"@codemem/core\";\nimport { eq, inArray } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/better-sqlite3\";\nimport { Hono } from \"hono\";\nimport { queryInt } from \"../helpers.js\";\n\ntype StoreFactory = () => MemoryStore;\n\ntype OwnershipPredicate = (item: Record<string, unknown>) => boolean;\n\nconst MAX_FEED_QUERY_CODE_UNITS = 256;\nconst searchFunctionsRegisteredStores = new WeakSet<MemoryStore>();\n\nfunction casefold(value: unknown): string {\n\treturn String(value ?? \"\").toLowerCase();\n}\n\nfunction normalizeMemorySearchQuery(value: string | undefined): string | undefined {\n\tconst normalized = casefold(value?.trim()).slice(0, MAX_FEED_QUERY_CODE_UNITS);\n\treturn normalized || undefined;\n}\n\nfunction ensureMemorySearchFunctions(store: MemoryStore): void {\n\tif (searchFunctionsRegisteredStores.has(store)) return;\n\tstore.db.function(\"codemem_casefold\", { deterministic: true }, casefold);\n\tstore.db.function(\"codemem_project_basename\", { deterministic: true }, (value: unknown) =>\n\t\tprojectBasename(String(value ?? \"\").trim()),\n\t);\n\tsearchFunctionsRegisteredStores.add(store);\n}\n\ninterface ActorPresentationRow {\n\tactor_id: string;\n\tdisplay_name: string;\n\tstatus: string;\n\tmerged_into_actor_id: string | null;\n}\n\ninterface DevicePresentationRow {\n\tdevice_id: string;\n\tdisplay_name: string;\n}\n\ninterface PeerPresentationRow {\n\tpeer_device_id: string;\n\tname: string | null;\n\tactor_id: string | null;\n}\n\nconst IDENTITY_LOOKUP_BATCH_SIZE = 500;\n\nfunction identityValue(item: Record<string, unknown>, key: string): string {\n\tconst direct = String(item[key] ?? \"\").trim();\n\tif (direct) return direct;\n\tconst rawMetadata = item.metadata ?? item.metadata_json;\n\tconst metadata = typeof rawMetadata === \"string\" ? fromJson(rawMetadata) : rawMetadata;\n\tif (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) return \"\";\n\treturn String((metadata as Record<string, unknown>)[key] ?? \"\").trim();\n}\n\nfunction uniqueStrings(items: Record<string, unknown>[], key: string): string[] {\n\treturn [...new Set(items.map((item) => identityValue(item, key)).filter(Boolean))];\n}\n\nfunction batchedLookup<T>(\n\tstore: MemoryStore,\n\tvalues: string[],\n\tquery: (placeholders: string) => string,\n): T[] {\n\tconst rows: T[] = [];\n\tfor (let offset = 0; offset < values.length; offset += IDENTITY_LOOKUP_BATCH_SIZE) {\n\t\tconst batch = values.slice(offset, offset + IDENTITY_LOOKUP_BATCH_SIZE);\n\t\tconst placeholders = batch.map(() => \"?\").join(\", \");\n\t\trows.push(...(store.db.prepare(query(placeholders)).all(...batch) as T[]));\n\t}\n\treturn rows;\n}\n\nfunction humanName(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\ttry {\n\t\treturn normalizeHumanPresentationName(value, \"display_name\");\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Add presentation-only identity labels without changing persisted provenance.\n * Resolved names are display hints, not authority or ownership evidence; legacy\n * metadata receives the same top-level-first fallback as existing read paths.\n */\nfunction attachResolvedIdentityFieldsUnsafe(\n\tstore: MemoryStore,\n\titems: Record<string, unknown>[],\n): void {\n\tconst actorIds = uniqueStrings(items, \"actor_id\");\n\tconst deviceIds = uniqueStrings(items, \"origin_device_id\");\n\tconst peers = batchedLookup<PeerPresentationRow>(\n\t\tstore,\n\t\tdeviceIds,\n\t\t(placeholders) =>\n\t\t\t`SELECT peer_device_id, name, actor_id FROM sync_peers\n\t\t WHERE peer_device_id IN (${placeholders})\n\t\t AND TRIM(COALESCE(pinned_fingerprint, '')) <> ''`,\n\t);\n\tconst peerByDevice = new Map(peers.map((peer) => [peer.peer_device_id, peer]));\n\tconst peerActorIds = peers\n\t\t.map((peer) => String(peer.actor_id ?? \"\").trim())\n\t\t.filter((actorId) => actorId.length > 0);\n\tconst actorRows = batchedLookup<ActorPresentationRow>(\n\t\tstore,\n\t\t[...new Set([...actorIds, ...peerActorIds])],\n\t\t(placeholders) =>\n\t\t\t`SELECT actor_id, display_name, status, merged_into_actor_id FROM actors\n\t\t\t WHERE actor_id IN (${placeholders})`,\n\t);\n\tconst devices = batchedLookup<DevicePresentationRow>(\n\t\tstore,\n\t\tdeviceIds,\n\t\t(placeholders) =>\n\t\t\t`SELECT device_id, display_name FROM identity_devices\n\t\t WHERE device_id IN (${placeholders}) AND status = 'active'`,\n\t);\n\tconst actorById = new Map(actorRows.map((actor) => [actor.actor_id, actor] as const));\n\tlet pendingMergeTargets = [\n\t\t...new Set(\n\t\t\tactorRows\n\t\t\t\t.map((actor) => String(actor.merged_into_actor_id ?? \"\").trim())\n\t\t\t\t.filter((actorId) => actorId && !actorById.has(actorId)),\n\t\t),\n\t];\n\twhile (pendingMergeTargets.length > 0) {\n\t\tconst targetRows = batchedLookup<ActorPresentationRow>(\n\t\t\tstore,\n\t\t\tpendingMergeTargets,\n\t\t\t(placeholders) =>\n\t\t\t\t`SELECT actor_id, display_name, status, merged_into_actor_id FROM actors\n\t\t\t\t WHERE actor_id IN (${placeholders})`,\n\t\t);\n\t\tfor (const actor of targetRows) actorById.set(actor.actor_id, actor);\n\t\tpendingMergeTargets = [\n\t\t\t...new Set(\n\t\t\t\ttargetRows\n\t\t\t\t\t.map((actor) => String(actor.merged_into_actor_id ?? \"\").trim())\n\t\t\t\t\t.filter((actorId) => actorId && !actorById.has(actorId)),\n\t\t\t),\n\t\t];\n\t}\n\tconst resolvedActorName = (actorId: string): string | undefined => {\n\t\tconst seen = new Set<string>();\n\t\tlet currentActorId = actorId;\n\t\twhile (currentActorId && !seen.has(currentActorId)) {\n\t\t\tseen.add(currentActorId);\n\t\t\tconst actor = actorById.get(currentActorId);\n\t\t\tif (!actor) return undefined;\n\t\t\tif (actor.status === \"active\" && actor.merged_into_actor_id === null) {\n\t\t\t\treturn humanName(actor.display_name);\n\t\t\t}\n\t\t\tcurrentActorId = String(actor.merged_into_actor_id ?? \"\").trim();\n\t\t}\n\t\treturn undefined;\n\t};\n\tconst deviceNameById = new Map(\n\t\tdevices\n\t\t\t.map((device) => [device.device_id, humanName(device.display_name)] as const)\n\t\t\t.filter((entry): entry is readonly [string, string] => entry[1] !== undefined),\n\t);\n\n\tfor (const item of items) {\n\t\tconst actorId = identityValue(item, \"actor_id\");\n\t\tconst deviceId = identityValue(item, \"origin_device_id\");\n\t\tconst peer = peerByDevice.get(deviceId);\n\t\tconst peerActorId = String(peer?.actor_id ?? \"\").trim();\n\t\tconst knownMemoryActor = actorById.has(actorId);\n\t\tconst actorName = knownMemoryActor\n\t\t\t? (resolvedActorName(actorId) ?? humanName(item.actor_display_name))\n\t\t\t: (resolvedActorName(peerActorId) ?? humanName(item.actor_display_name));\n\t\tconst deviceName = deviceNameById.get(deviceId) ?? humanName(peer?.name);\n\t\tif (actorName) item.resolved_actor_display_name = actorName;\n\t\tif (deviceName) item.resolved_device_display_name = deviceName;\n\t}\n}\n\nfunction attachResolvedIdentityFields(store: MemoryStore, items: Record<string, unknown>[]): void {\n\ttry {\n\t\tattachResolvedIdentityFieldsUnsafe(store, items);\n\t} catch {\n\t\t// Presentation enrichment is optional; neutral Feed fallbacks must remain\n\t\t// available for legacy or partially initialized databases.\n\t}\n}\n\nfunction serializeMemoryRow(\n\townedBySelf: OwnershipPredicate,\n\trow: Record<string, unknown>,\n): Record<string, unknown> {\n\tconst metadata = fromJson((row.metadata_json as string) ?? null);\n\t// Evaluate ownership against the raw row (top-level columns + metadata_json\n\t// fallback) before we overwrite metadata_json with the parsed object.\n\tconst owned_by_self = ownedBySelf(row);\n\treturn {\n\t\t...row,\n\t\tkind: canonicalMemoryKind((row.kind as string | null | undefined) ?? null, row.metadata_json),\n\t\tmetadata_json: metadata,\n\t\towned_by_self,\n\t};\n}\n\n/**\n * Attach session project/cwd fields to memory items.\n */\nfunction attachSessionFields(store: MemoryStore, items: Record<string, unknown>[]): void {\n\tconst sessionIds: number[] = [];\n\tconst seen = new Set<number>();\n\tfor (const item of items) {\n\t\tconst value = item.session_id;\n\t\tif (value == null) continue;\n\t\tconst sid = Number(value);\n\t\tif (Number.isNaN(sid) || seen.has(sid)) continue;\n\t\tseen.add(sid);\n\t\tsessionIds.push(sid);\n\t}\n\tif (sessionIds.length === 0) return;\n\n\tconst d = drizzle(store.db, { schema });\n\tconst rows = d\n\t\t.select({\n\t\t\tid: schema.sessions.id,\n\t\t\tproject: schema.sessions.project,\n\t\t\tcwd: schema.sessions.cwd,\n\t\t})\n\t\t.from(schema.sessions)\n\t\t.where(inArray(schema.sessions.id, sessionIds))\n\t\t.all();\n\n\tconst bySession = new Map<number, { project: string; cwd: string }>();\n\tfor (const row of rows) {\n\t\tconst projectRaw = String(row.project ?? \"\").trim();\n\t\tconst project = projectRaw ? projectBasename(projectRaw) : \"\";\n\t\tconst cwd = String(row.cwd ?? \"\");\n\t\tbySession.set(row.id, { project, cwd });\n\t}\n\n\tfor (const item of items) {\n\t\tconst sid = Number(item.session_id);\n\t\tif (Number.isNaN(sid)) continue;\n\t\tconst fields = bySession.get(sid);\n\t\tif (!fields) continue;\n\t\titem.project ??= fields.project;\n\t\titem.cwd ??= fields.cwd;\n\t}\n}\n\n/**\n * Extract the basename of a project path.\n * Strips \"fatal:\" prefixed values.\n */\nfunction projectBasename(raw: string): string {\n\tif (raw.toLowerCase().startsWith(\"fatal:\")) return \"\";\n\tconst parts = raw.replace(/\\\\/g, \"/\").split(\"/\");\n\treturn parts[parts.length - 1] ?? raw;\n}\n\nfunction normalizeScope(raw: string | undefined): \"mine\" | \"theirs\" | undefined {\n\tconst value = String(raw ?? \"\")\n\t\t.trim()\n\t\t.toLowerCase();\n\tif (value === \"mine\" || value === \"theirs\") return value;\n\treturn undefined;\n}\n\nfunction buildViewerMemoryFilters(store: MemoryStore, filters?: MemoryFilters | null) {\n\treturn buildFilterClausesWithContext(filters, store.ownershipFilterContext());\n}\n\nfunction countVisibleMemoryRows(store: MemoryStore, filters?: MemoryFilters | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, filters);\n\tconst clauses = [\"memory_items.active = 1\", ...filterResult.clauses];\n\tconst from = filterResult.joinSessions\n\t\t? \"memory_items JOIN sessions ON sessions.id = memory_items.session_id\"\n\t\t: \"memory_items\";\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM ${from} WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...filterResult.params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction memorySearchSql(query: string): { clause: string; params: unknown[] } {\n\tconst textClause = `INSTR(codemem_casefold(\n\t\tCOALESCE(memory_items.title, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.body_text, '') || CHAR(10) ||\n\t\tCASE WHEN ${summaryLikeSqlPredicate()} THEN 'session_summary' ELSE\n\t\t\tCOALESCE(NULLIF(LOWER(TRIM(COALESCE(memory_items.kind, ''))), ''), 'change')\n\t\tEND || CHAR(10) ||\n\t\tCOALESCE(\n\t\t\tmemory_items.project,\n\t\t\tcodemem_project_basename(\n\t\t\t\t(SELECT sessions.project FROM sessions WHERE sessions.id = memory_items.session_id)\n\t\t\t),\n\t\t\t''\n\t\t) || CHAR(10) ||\n\t\tCOALESCE(memory_items.tags_text, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.facts, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.subtitle, '') || CHAR(10) ||\n\t\tCOALESCE(memory_items.narrative, '') || CHAR(10) ||\n\t\tCASE WHEN json_valid(COALESCE(memory_items.metadata_json, '')) THEN\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.request'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.subtitle'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.narrative'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.facts'), '') || CHAR(10) ||\n\t\t\tCOALESCE(json_extract(memory_items.metadata_json, '$.summary'), '')\n\t\tELSE '' END\n\t), codemem_casefold(?)) > 0`;\n\tconst parsedMemoryId = parsePositiveMemoryId(query);\n\tconst memoryId =\n\t\tparsedMemoryId != null && String(parsedMemoryId) === query ? parsedMemoryId : null;\n\tif (memoryId != null) {\n\t\treturn { clause: `(memory_items.id = ? OR ${textClause})`, params: [memoryId, query] };\n\t}\n\treturn { clause: textClause, params: [query] };\n}\n\nfunction countVisibleObservationRows(store: MemoryStore, filters?: MemoryFilters | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, filters);\n\tconst clauses = [\n\t\t\"memory_items.active = 1\",\n\t\t`NOT ${summaryLikeSqlPredicate()}`,\n\t\t...filterResult.clauses,\n\t];\n\tconst from = filterResult.joinSessions\n\t\t? \"memory_items JOIN sessions ON sessions.id = memory_items.session_id\"\n\t\t: \"memory_items\";\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM ${from} WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...filterResult.params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction sessionAllowsArtifactAccess(store: MemoryStore, sessionId: number): boolean {\n\tconst visibleCount = countVisibleMemoryRows(store, { session_id: sessionId });\n\tif (visibleCount === 0) return false;\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t`SELECT COUNT(*) AS total FROM memory_items\n\t\t\t WHERE session_id = ? AND active = 1`,\n\t\t)\n\t\t.get(sessionId) as Record<string, unknown> | undefined;\n\treturn visibleCount === Number(row?.total ?? 0);\n}\n\nfunction countVisiblePromptRows(store: MemoryStore, project?: string | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, null);\n\tconst clauses = [\n\t\t\"user_prompts.session_id IS NOT NULL\",\n\t\t`EXISTS (\n\t\t\tSELECT 1 FROM memory_items\n\t\t\tWHERE memory_items.session_id = user_prompts.session_id\n\t\t\t AND memory_items.active = 1\n\t\t\t AND ${filterResult.clauses.join(\" AND \")}\n\t\t)`,\n\t];\n\tconst params: unknown[] = [...filterResult.params];\n\tif (project) {\n\t\tclauses.unshift(\"user_prompts.project = ?\");\n\t\tparams.unshift(project);\n\t}\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM user_prompts WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction countVisibleArtifactRows(store: MemoryStore, project?: string | null): number {\n\tconst filterResult = buildViewerMemoryFilters(store, null);\n\tconst clauses = [\n\t\t`EXISTS (\n\t\t\tSELECT 1 FROM memory_items\n\t\t\tWHERE memory_items.session_id = artifacts.session_id\n\t\t\t AND memory_items.active = 1\n\t\t\t AND ${filterResult.clauses.join(\" AND \")}\n\t\t)`,\n\t];\n\tconst params: unknown[] = [...filterResult.params];\n\tconst from = project\n\t\t? \"artifacts JOIN sessions ON sessions.id = artifacts.session_id\"\n\t\t: \"artifacts\";\n\tif (project) {\n\t\tclauses.unshift(\"sessions.project = ?\");\n\t\tparams.unshift(project);\n\t}\n\tconst row = store.db\n\t\t.prepare(`SELECT COUNT(*) AS total FROM ${from} WHERE ${clauses.join(\" AND \")}`)\n\t\t.get(...params) as Record<string, unknown> | undefined;\n\treturn Number(row?.total ?? 0);\n}\n\nfunction queryMemoryPage(\n\tstore: MemoryStore,\n\toptions: {\n\t\tlimit: number;\n\t\toffset: number;\n\t\tproject?: string;\n\t\tscope?: \"mine\" | \"theirs\";\n\t\tq?: string;\n\t\tclassification: \"observation\" | \"summary\";\n\t},\n): Record<string, unknown>[] {\n\tensureMemorySearchFunctions(store);\n\tconst filters: MemoryFilters = {};\n\tif (options.project) filters.project = options.project;\n\tif (options.scope) filters.ownership_scope = options.scope;\n\n\tconst filterResult = buildViewerMemoryFilters(store, filters);\n\tconst summaryPredicate = summaryLikeSqlPredicate();\n\tconst clauses = [\n\t\t\"memory_items.active = 1\",\n\t\toptions.classification === \"summary\" ? summaryPredicate : `NOT ${summaryPredicate}`,\n\t\t...filterResult.clauses,\n\t];\n\tconst params: unknown[] = [...filterResult.params];\n\tif (options.q) {\n\t\tconst search = memorySearchSql(options.q);\n\t\tclauses.push(search.clause);\n\t\tparams.push(...search.params);\n\t}\n\tconst where = clauses.join(\" AND \");\n\tconst from = filterResult.joinSessions\n\t\t? \"memory_items JOIN sessions ON sessions.id = memory_items.session_id\"\n\t\t: \"memory_items\";\n\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT memory_items.* FROM ${from}\n\t\t\t WHERE ${where}\n\t\t\t ORDER BY memory_items.created_at DESC, memory_items.id DESC\n\t\t\t LIMIT ? OFFSET ?`,\n\t\t)\n\t\t.all(...params, options.limit + 1, options.offset) as Record<string, unknown>[];\n\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\treturn rows.map((row) => serializeMemoryRow(ownedBySelf, row));\n}\n\nexport function memoryRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\t// GET /api/sessions\n\tapp.get(\"/api/sessions\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = queryInt(c.req.query(\"limit\"), 20);\n\t\t\tconst filterResult = buildViewerMemoryFilters(store, null);\n\t\t\tconst clauses = [\n\t\t\t\t\"memory_items.session_id = sessions.id\",\n\t\t\t\t\"memory_items.active = 1\",\n\t\t\t\t...filterResult.clauses,\n\t\t\t];\n\t\t\tconst rows = store.db\n\t\t\t\t.prepare(\n\t\t\t\t\t`SELECT sessions.* FROM sessions\n\t\t\t\t\t WHERE EXISTS (SELECT 1 FROM memory_items WHERE ${clauses.join(\" AND \")})\n\t\t\t\t\t ORDER BY sessions.started_at DESC\n\t\t\t\t\t LIMIT ?`,\n\t\t\t\t)\n\t\t\t\t.all(...filterResult.params, limit) as Record<string, unknown>[];\n\t\t\tconst items = rows.map((row) => ({\n\t\t\t\t...row,\n\t\t\t\tmetadata_json: fromJson((row.metadata_json as string | null | undefined) ?? null),\n\t\t\t}));\n\t\t\treturn c.json({ items });\n\t\t}\n\t});\n\n\t// GET /api/projects\n\tapp.get(\"/api/projects\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst filterResult = buildViewerMemoryFilters(store, null);\n\t\t\tconst clauses = [\n\t\t\t\t\"memory_items.session_id = sessions.id\",\n\t\t\t\t\"memory_items.active = 1\",\n\t\t\t\t\"sessions.project IS NOT NULL\",\n\t\t\t\t...filterResult.clauses,\n\t\t\t];\n\t\t\tconst rows = store.db\n\t\t\t\t.prepare(\n\t\t\t\t\t`SELECT DISTINCT sessions.project AS project FROM sessions\n\t\t\t\t\t JOIN memory_items ON memory_items.session_id = sessions.id\n\t\t\t\t\t WHERE ${clauses.join(\" AND \")}`,\n\t\t\t\t)\n\t\t\t\t.all(...filterResult.params) as Record<string, unknown>[];\n\t\t\tconst projects = [\n\t\t\t\t...new Set(\n\t\t\t\t\trows\n\t\t\t\t\t\t.map((r) => String(r.project ?? \"\").trim())\n\t\t\t\t\t\t.filter((p) => p && !p.toLowerCase().startsWith(\"fatal:\"))\n\t\t\t\t\t\t.map((p) => projectBasename(p))\n\t\t\t\t\t\t.filter(Boolean),\n\t\t\t\t),\n\t\t\t].sort();\n\t\t\treturn c.json({ projects });\n\t\t}\n\t});\n\n\t// GET /api/observations (aliased from /api/memories)\n\tapp.get(\"/api/memories\", (c) => {\n\t\tconst search = new URL(c.req.url).search;\n\t\treturn c.redirect(`/api/observations${search}`, 301);\n\t});\n\n\tapp.get(\"/api/observations\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 20));\n\t\t\tconst offset = Math.max(0, queryInt(c.req.query(\"offset\"), 0));\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst scope = normalizeScope(c.req.query(\"scope\"));\n\t\t\tconst q = normalizeMemorySearchQuery(c.req.query(\"q\"));\n\t\t\tconst items = queryMemoryPage(store, {\n\t\t\t\tlimit,\n\t\t\t\toffset,\n\t\t\t\tproject,\n\t\t\t\tscope,\n\t\t\t\tq,\n\t\t\t\tclassification: \"observation\",\n\t\t\t});\n\t\t\tconst hasMore = items.length > limit;\n\t\t\tconst result = hasMore ? items.slice(0, limit) : items;\n\t\t\tconst asRecords = result as unknown as Record<string, unknown>[];\n\t\t\tattachSessionFields(store, asRecords);\n\t\t\tattachResolvedIdentityFields(store, asRecords);\n\t\t\treturn c.json({\n\t\t\t\titems: asRecords,\n\t\t\t\tpagination: {\n\t\t\t\t\tlimit,\n\t\t\t\t\toffset,\n\t\t\t\t\tnext_offset: hasMore ? offset + result.length : null,\n\t\t\t\t\thas_more: hasMore,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\t});\n\n\t// GET /api/summaries\n\tapp.get(\"/api/summaries\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 50));\n\t\t\tconst offset = Math.max(0, queryInt(c.req.query(\"offset\"), 0));\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst scope = normalizeScope(c.req.query(\"scope\"));\n\t\t\tconst q = normalizeMemorySearchQuery(c.req.query(\"q\"));\n\t\t\tconst items = queryMemoryPage(store, {\n\t\t\t\tlimit,\n\t\t\t\toffset,\n\t\t\t\tproject,\n\t\t\t\tscope,\n\t\t\t\tq,\n\t\t\t\tclassification: \"summary\",\n\t\t\t});\n\t\t\tconst hasMore = items.length > limit;\n\t\t\tconst result = hasMore ? items.slice(0, limit) : items;\n\t\t\tconst asRecords = result as unknown as Record<string, unknown>[];\n\t\t\tattachSessionFields(store, asRecords);\n\t\t\tattachResolvedIdentityFields(store, asRecords);\n\t\t\treturn c.json({\n\t\t\t\titems: asRecords,\n\t\t\t\tpagination: {\n\t\t\t\t\tlimit,\n\t\t\t\t\toffset,\n\t\t\t\t\tnext_offset: hasMore ? offset + result.length : null,\n\t\t\t\t\thas_more: hasMore,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\t});\n\n\t// GET /api/session (aggregate counts)\n\tapp.get(\"/api/session\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst project = c.req.query(\"project\") || null;\n\t\t\tlet prompts: number;\n\t\t\tlet artifacts: number;\n\t\t\tlet memories: number;\n\t\t\tlet observations: number;\n\t\t\tif (project) {\n\t\t\t\tprompts = countVisiblePromptRows(store, project);\n\t\t\t\tartifacts = countVisibleArtifactRows(store, project);\n\t\t\t\tmemories = countVisibleMemoryRows(store, { project });\n\t\t\t\tobservations = countVisibleObservationRows(store, { project });\n\t\t\t} else {\n\t\t\t\tprompts = countVisiblePromptRows(store);\n\t\t\t\tartifacts = countVisibleArtifactRows(store);\n\t\t\t\tmemories = countVisibleMemoryRows(store);\n\t\t\t\tobservations = countVisibleObservationRows(store);\n\t\t\t}\n\t\t\tconst total = prompts + artifacts + memories;\n\t\t\treturn c.json({ total, memories, artifacts, prompts, observations });\n\t\t}\n\t});\n\n\t// GET /api/pack\n\tapp.get(\"/api/pack\", async (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst context = c.req.query(\"context\") || \"\";\n\t\t\tif (!context) {\n\t\t\t\treturn c.json({ error: \"context required\" }, 400);\n\t\t\t}\n\t\t\tconst limit = queryInt(c.req.query(\"limit\"), 10);\n\t\t\tconst tokenBudgetStr = c.req.query(\"token_budget\");\n\t\t\tlet tokenBudget: number | undefined;\n\t\t\tif (tokenBudgetStr) {\n\t\t\t\ttokenBudget = parseStrictInteger(tokenBudgetStr) ?? undefined;\n\t\t\t\tif (tokenBudget === undefined) {\n\t\t\t\t\treturn c.json({ error: \"token_budget must be int\" }, 400);\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst filters: { project?: string } = {};\n\t\t\tif (project) filters.project = project;\n\t\t\tconst pack = await store.buildMemoryPackAsync(context, limit, tokenBudget ?? null, filters);\n\t\t\treturn c.json(pack);\n\t\t}\n\t});\n\n\tapp.post(\"/api/pack/trace\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst parsed = await c.req.json().catch(() => Symbol.for(\"invalid-json\"));\n\t\tif (parsed === Symbol.for(\"invalid-json\")) {\n\t\t\treturn c.json({ error: \"invalid json body\" }, 400);\n\t\t}\n\t\tconst body = parsed as {\n\t\t\tcontext?: unknown;\n\t\t\tlimit?: unknown;\n\t\t\ttoken_budget?: unknown;\n\t\t\tproject?: unknown;\n\t\t\tworking_set_files?: unknown;\n\t\t} | null;\n\t\tconst context = typeof body?.context === \"string\" ? body.context.trim() : \"\";\n\t\tif (!context) {\n\t\t\treturn c.json({ error: \"context required\" }, 400);\n\t\t}\n\t\tconst limit =\n\t\t\tbody?.limit == null\n\t\t\t\t? 10\n\t\t\t\t: typeof body.limit === \"number\" && Number.isInteger(body.limit) && body.limit >= 1\n\t\t\t\t\t? body.limit\n\t\t\t\t\t: null;\n\t\tif (limit == null) {\n\t\t\treturn c.json({ error: \"limit must be a positive int\" }, 400);\n\t\t}\n\t\tlet tokenBudget: number | null = null;\n\t\tif (body?.token_budget != null) {\n\t\t\tif (\n\t\t\t\ttypeof body.token_budget !== \"number\" ||\n\t\t\t\t!Number.isInteger(body.token_budget) ||\n\t\t\t\tbody.token_budget < 0\n\t\t\t) {\n\t\t\t\treturn c.json({ error: \"token_budget must be int\" }, 400);\n\t\t\t}\n\t\t\ttokenBudget = body.token_budget;\n\t\t}\n\t\tconst project = typeof body?.project === \"string\" && body.project.trim() ? body.project : null;\n\t\tif (body?.working_set_files != null && !Array.isArray(body.working_set_files)) {\n\t\t\treturn c.json({ error: \"working_set_files must be an array of strings\" }, 400);\n\t\t}\n\t\tif (\n\t\t\tArray.isArray(body?.working_set_files) &&\n\t\t\tbody.working_set_files.some((value) => typeof value !== \"string\")\n\t\t) {\n\t\t\treturn c.json({ error: \"working_set_files must be an array of strings\" }, 400);\n\t\t}\n\t\tconst workingSetFiles = Array.isArray(body?.working_set_files) ? body.working_set_files : [];\n\t\tconst filters: { project?: string; working_set_paths?: string[] } = {};\n\t\tif (project) filters.project = project;\n\t\tif (workingSetFiles.length > 0) filters.working_set_paths = workingSetFiles;\n\t\tconst trace = await store.buildMemoryPackTraceAsync(context, limit, tokenBudget, filters);\n\t\treturn c.json(trace);\n\t});\n\n\t// GET /api/memory\n\tapp.get(\"/api/memory\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst limit = queryInt(c.req.query(\"limit\"), 20);\n\t\t\tconst kind = c.req.query(\"kind\") || undefined;\n\t\t\tconst project = c.req.query(\"project\") || undefined;\n\t\t\tconst filters: MemoryFilters = {};\n\t\t\tif (kind) filters.kind = kind;\n\t\t\tif (project) filters.project = project;\n\t\t\tconst items = store.recent(limit, filters);\n\t\t\tconst asRecords = items as unknown as Record<string, unknown>[];\n\t\t\tattachSessionFields(store, asRecords);\n\t\t\tattachResolvedIdentityFields(store, asRecords);\n\t\t\treturn c.json({ items: asRecords });\n\t\t}\n\t});\n\n\t// GET /api/artifacts\n\tapp.get(\"/api/artifacts\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst sessionIdStr = c.req.query(\"session_id\");\n\t\t\tif (!sessionIdStr) {\n\t\t\t\treturn c.json({ error: \"session_id required\" }, 400);\n\t\t\t}\n\t\t\tconst sessionId = parseStrictInteger(sessionIdStr);\n\t\t\tif (sessionId == null) {\n\t\t\t\treturn c.json({ error: \"session_id must be int\" }, 400);\n\t\t\t}\n\t\t\tif (!sessionAllowsArtifactAccess(store, sessionId)) {\n\t\t\t\treturn c.json({ error: \"session not found\" }, 404);\n\t\t\t}\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst rows = d\n\t\t\t\t.select()\n\t\t\t\t.from(schema.artifacts)\n\t\t\t\t.where(eq(schema.artifacts.session_id, sessionId))\n\t\t\t\t.all();\n\t\t\treturn c.json({ items: rows });\n\t\t}\n\t});\n\n\t// POST /api/memories/visibility\n\tapp.post(\"/api/memories/visibility\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid JSON\" }, 400);\n\t\t}\n\t\tconst memoryId = parseStrictInteger(\n\t\t\ttypeof body.memory_id === \"string\" ? body.memory_id : String(body.memory_id ?? \"\"),\n\t\t);\n\t\tif (memoryId == null || memoryId <= 0) {\n\t\t\treturn c.json({ error: \"memory_id must be int\" }, 400);\n\t\t}\n\t\tif (!store.get(memoryId)) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\t\tconst visibility = String(body.visibility ?? \"\").trim();\n\t\tif (visibility !== \"private\" && visibility !== \"shared\") {\n\t\t\treturn c.json({ error: \"visibility must be private or shared\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst item = store.updateMemoryVisibility(memoryId, visibility);\n\t\t\treturn c.json({ item });\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tif (msg.includes(\"not found\")) return c.json({ error: msg }, 404);\n\t\t\tif (msg.includes(\"not owned\")) return c.json({ error: msg }, 403);\n\t\t\treturn c.json({ error: msg }, 400);\n\t\t}\n\t});\n\n\t// POST /api/memories/project\n\tapp.post(\"/api/memories/project\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid JSON\" }, 400);\n\t\t}\n\t\tconst memoryId = parseStrictInteger(\n\t\t\ttypeof body.memory_id === \"string\" ? body.memory_id : String(body.memory_id ?? \"\"),\n\t\t);\n\t\tif (memoryId == null || memoryId <= 0) {\n\t\t\treturn c.json({ error: \"memory_id must be int\" }, 400);\n\t\t}\n\t\tconst project = String(body.project ?? \"\").trim();\n\t\tif (!project) {\n\t\t\treturn c.json({ error: \"project must be a non-empty string\" }, 400);\n\t\t}\n\t\tif (!store.get(memoryId)) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\t\ttry {\n\t\t\tconst result = store.moveMemoryProject(memoryId, project);\n\t\t\treturn c.json(result);\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tif (msg.includes(\"not found\")) return c.json({ error: msg }, 404);\n\t\t\tif (msg.includes(\"not owned\")) return c.json({ error: msg }, 403);\n\t\t\treturn c.json({ error: msg }, 400);\n\t\t}\n\t});\n\n\t// POST /api/memories/forget\n\tapp.post(\"/api/memories/forget\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid JSON\" }, 400);\n\t\t}\n\t\tconst memoryId = parseStrictInteger(\n\t\t\ttypeof body.memory_id === \"string\" ? body.memory_id : String(body.memory_id ?? \"\"),\n\t\t);\n\t\tif (memoryId == null || memoryId <= 0) {\n\t\t\treturn c.json({ error: \"memory_id must be int\" }, 400);\n\t\t}\n\t\tif (!store.get(memoryId)) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\n\t\tconst row = drizzle(store.db, { schema })\n\t\t\t.select()\n\t\t\t.from(schema.memoryItems)\n\t\t\t.where(eq(schema.memoryItems.id, memoryId))\n\t\t\t.get();\n\t\tif (!row) {\n\t\t\treturn c.json({ error: \"memory not found\" }, 404);\n\t\t}\n\t\tif (!store.memoryOwnedBySelf(row as Record<string, unknown>)) {\n\t\t\treturn c.json({ error: \"memory not owned by this device\" }, 403);\n\t\t}\n\t\tif (Number(row.active ?? 1) === 0 || row.deleted_at != null) {\n\t\t\treturn c.json({ status: \"ok\" });\n\t\t}\n\n\t\ttry {\n\t\t\tstore.forget(memoryId);\n\t\t\treturn c.json({ status: \"ok\" });\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tif (msg.includes(\"not found\")) return c.json({ error: msg }, 404);\n\t\t\tif (msg.includes(\"not owned\")) return c.json({ error: msg }, 403);\n\t\t\tif (msg.includes(\"sync_rebootstrap_in_progress\")) return c.json({ error: msg }, 409);\n\t\t\treturn c.json({ error: msg }, 400);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Observer status route — GET /api/observer-status.\n *\n * Ports Python's viewer_routes/observer_status.py.\n * Returns observer runtime info, credential availability, and queue status.\n */\n\nimport type { ObserverClient } from \"@codemem/core\";\nimport { type MemoryStore, probeAvailableCredentials, type RawEventSweeper } from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\ntype StoreFactory = () => MemoryStore;\n\nexport interface ObserverStatusDeps {\n\tgetStore: StoreFactory;\n\tgetSweeper: () => RawEventSweeper | null;\n\tgetObserver?: () => ObserverClient | null;\n}\n\nfunction normalizeActiveObserver(active: ReturnType<ObserverClient[\"getStatus\"]> | null) {\n\tif (!active) return null;\n\treturn {\n\t\t...active,\n\t\tauth: {\n\t\t\t...active.auth,\n\t\t\tmethod: active.auth.type,\n\t\t\ttoken_present: active.auth.hasToken,\n\t\t},\n\t};\n}\n\nfunction buildFailureImpact(\n\tlatestFailure: Record<string, unknown> | null,\n\tqueueTotals: { pending: number; sessions: number },\n\tauthBackoff: { active: boolean; remainingS: number },\n): string | null {\n\tif (!latestFailure) return null;\n\tif (authBackoff.active) {\n\t\treturn `Queue retries paused for ~${authBackoff.remainingS}s after an observer auth failure.`;\n\t}\n\tif (queueTotals.pending > 0) {\n\t\treturn `${queueTotals.pending} queued raw events across ${queueTotals.sessions} session(s) are waiting on a successful flush.`;\n\t}\n\treturn \"Failed flush batches are pending retry.\";\n}\n\nexport function observerStatusRoutes(deps?: ObserverStatusDeps) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/observer-status\", (c) => {\n\t\tconst store = deps?.getStore();\n\t\tconst sweeper = deps?.getSweeper();\n\t\tconst observer = deps?.getObserver?.() ?? null;\n\n\t\t// Stub fallback when store doesn't have the required methods (e.g. tests with mock store)\n\t\tif (!store || typeof store.rawEventBacklogTotals !== \"function\") {\n\t\t\treturn c.json({\n\t\t\t\tactive: null,\n\t\t\t\tavailable_credentials: {},\n\t\t\t\tlatest_failure: null,\n\t\t\t\tqueue: {\n\t\t\t\t\tpending: 0,\n\t\t\t\t\tsessions: 0,\n\t\t\t\t\tauth_backoff_active: false,\n\t\t\t\t\tauth_backoff_remaining_s: 0,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\tconst queueTotals = store.rawEventBacklogTotals();\n\t\tconst authBackoff = sweeper?.authBackoffStatus() ?? { active: false, remainingS: 0 };\n\t\tconst latestFailure = store.latestRawEventFlushFailure();\n\t\tconst active = normalizeActiveObserver(observer?.getStatus() ?? null);\n\t\tconst availableCredentials = probeAvailableCredentials();\n\t\tconst shouldShowFailure =\n\t\t\tlatestFailure != null && (authBackoff.active || queueTotals.pending > 0);\n\n\t\tconst failureWithImpact =\n\t\t\tshouldShowFailure && latestFailure\n\t\t\t\t? { ...latestFailure, impact: buildFailureImpact(latestFailure, queueTotals, authBackoff) }\n\t\t\t\t: null;\n\n\t\treturn c.json({\n\t\t\tactive,\n\t\t\tavailable_credentials: availableCredentials,\n\t\t\tlatest_failure: failureWithImpact,\n\t\t\tqueue: {\n\t\t\t\t...queueTotals,\n\t\t\t\tauth_backoff_active: authBackoff.active,\n\t\t\t\tauth_backoff_remaining_s: authBackoff.remainingS,\n\t\t\t},\n\t\t});\n\t});\n\n\treturn app;\n}\n","import { resolve as resolvePath } from \"node:path\";\nimport type { MemoryStore, ViewerIdentityTarget } from \"@codemem/core\";\nimport {\n\tbuildViewerIdentityTarget,\n\tresolveDbPath,\n\tVIEWER_IDENTITY_TARGET_KEYS,\n} from \"@codemem/core\";\n\nconst IDENTITY_TARGET_KEYS = new Set<string>(VIEWER_IDENTITY_TARGET_KEYS);\nconst BOOLEAN_IDENTITY_TARGET_KEYS = new Set([\n\t\"actor_id_present\",\n\t\"embedding_disabled\",\n\t\"embedding_offline\",\n]);\n\nexport type ViewerTargetValidation =\n\t| { ok: true }\n\t| { ok: false; status: 400 | 409; body: { error: { code: string; message: string } } };\n\nfunction invalidRequest(message: string): ViewerTargetValidation {\n\treturn { ok: false, status: 400, body: { error: { code: \"invalid_request\", message } } };\n}\n\nfunction conflict(code: string, message: string): ViewerTargetValidation {\n\treturn { ok: false, status: 409, body: { error: { code, message } } };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn value != null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function currentIdentityTarget(): ViewerIdentityTarget {\n\treturn buildViewerIdentityTarget();\n}\n\nfunction requestedDbMatches(store: MemoryStore, value: unknown): boolean | null {\n\tif (value == null) return true;\n\tif (typeof value !== \"string\" || !value.trim()) return null;\n\treturn resolvePath(resolveDbPath(value.trim())) === resolvePath(store.dbPath);\n}\n\nfunction requestedIdentityMatches(value: unknown): boolean | null | \"unsupported\" {\n\tif (value == null) return true;\n\tif (!isRecord(value)) return null;\n\tif (\n\t\tObject.keys(value).length !== IDENTITY_TARGET_KEYS.size ||\n\t\tObject.keys(value).some((key) => !IDENTITY_TARGET_KEYS.has(key))\n\t)\n\t\treturn \"unsupported\";\n\tconst expected = currentIdentityTarget();\n\tfor (const key of VIEWER_IDENTITY_TARGET_KEYS) {\n\t\tconst requested = value[key];\n\t\tif (BOOLEAN_IDENTITY_TARGET_KEYS.has(key)) {\n\t\t\tif (typeof requested !== \"boolean\") return null;\n\t\t} else if (requested !== null && typeof requested !== \"string\") {\n\t\t\treturn null;\n\t\t}\n\t\tif (requested !== expected[key]) return false;\n\t}\n\treturn true;\n}\n\nexport function validateViewerTarget(\n\tstore: MemoryStore,\n\tpayload: Record<string, unknown>,\n\toptions: { requireCurrentIdentity?: boolean; requirePairedTargets?: boolean } = {},\n): ViewerTargetValidation {\n\tif (options.requirePairedTargets) {\n\t\tconst hasDbPath = Object.hasOwn(payload, \"db_path\");\n\t\tconst hasIdentityTarget = Object.hasOwn(payload, \"identity_target\");\n\t\tif (hasDbPath !== hasIdentityTarget) {\n\t\t\treturn invalidRequest(\"db_path and identity_target must be provided together\");\n\t\t}\n\t\tif (hasDbPath && (payload.db_path == null || payload.identity_target == null)) {\n\t\t\treturn invalidRequest(\"db_path and identity_target must be valid when provided\");\n\t\t}\n\t}\n\tconst dbMatches = requestedDbMatches(store, payload.db_path);\n\tif (dbMatches == null) return invalidRequest(\"db_path must be a non-empty string\");\n\tif (!dbMatches) {\n\t\treturn conflict(\"viewer_db_mismatch\", \"viewer database does not match request\");\n\t}\n\n\tconst identityMatches = requestedIdentityMatches(payload.identity_target);\n\tif (identityMatches === \"unsupported\") {\n\t\treturn conflict(\"viewer_contract_unsupported\", \"viewer request contract is incompatible\");\n\t}\n\tif (identityMatches == null) return invalidRequest(\"identity_target is invalid\");\n\tif (!identityMatches) {\n\t\treturn conflict(\"viewer_identity_mismatch\", \"viewer identity does not match request\");\n\t}\n\tif (\n\t\t(options.requireCurrentIdentity || payload.identity_target != null) &&\n\t\t!store.hasCurrentIdentity()\n\t) {\n\t\treturn conflict(\"viewer_identity_mismatch\", \"viewer identity does not match request\");\n\t}\n\treturn { ok: true };\n}\n","import { isAbsolute, posix, resolve as resolvePath, win32 } from \"node:path\";\nimport type {\n\tAutomaticContext,\n\tAutomaticRecallWriteOutcome,\n\tMemoryFilters,\n\tMemoryStore,\n\tPackRenderOptions,\n\tPromptPackAttemptMetadata,\n\tRetrievalLedgerDeliveryOutcome,\n\tRetrievalLedgerFailureReason,\n\tRetrievalLedgerWriteOutcome,\n} from \"@codemem/core\";\nimport {\n\tclonePromptPackAttempt,\n\tisAutomaticRecallMeasurement,\n\tPROMPT_TRANSPORT_PROTOCOL_RANGE,\n\tpromptPackArtifactFingerprint,\n\trecordAutomaticRecall,\n\trecordPromptPackArtifacts,\n\trecordPromptPackTerminal,\n\tresolveProject,\n\ttryUpdateRetrievalDelivery,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\nimport { currentIdentityTarget, validateViewerTarget } from \"./target-validation.js\";\n\ntype StoreFactory = () => MemoryStore;\ntype LedgerOutcome =\n\t| RetrievalLedgerWriteOutcome\n\t| RetrievalLedgerDeliveryOutcome\n\t| AutomaticRecallWriteOutcome;\n\nconst MAX_LEDGER_PAYLOAD_BYTES = 16 * 1024;\nconst MAX_METADATA_FIELD_CHARS = 512;\nconst MAX_WORKING_SET_FILES = 50;\nconst MAX_WORKING_SET_PATH_CHARS = 512;\nconst INVALID_JSON = Symbol(\"invalid-json\");\n\nconst PACK_KEYS = new Set([\n\t\"context\",\n\t\"limit\",\n\t\"token_budget\",\n\t\"project\",\n\t\"cwd\",\n\t\"all_projects\",\n\t\"working_set_files\",\n\t\"compact\",\n\t\"compact_detail_count\",\n\t\"db_path\",\n\t\"identity_target\",\n\t\"attempt\",\n\t\"automatic_context\",\n]);\nconst LEDGER_KEYS = new Set([\n\t\"automatic_recall\",\n\t\"evaluation_key\",\n\t\"action\",\n\t\"attempt_id\",\n\t\"started_at\",\n\t\"source\",\n\t\"stream_id\",\n\t\"source_session_id\",\n\t\"prompt_number\",\n\t\"request_id\",\n\t\"retrieval_status\",\n\t\"delivery_status\",\n\t\"failure_code\",\n\t\"failure_stage\",\n\t\"original_attempt_id\",\n\t\"db_path\",\n\t\"identity_target\",\n]);\nconst ATTEMPT_KEYS = new Set([\n\t\"attempt_id\",\n\t\"started_at\",\n\t\"source\",\n\t\"stream_id\",\n\t\"source_session_id\",\n\t\"prompt_number\",\n\t\"request_id\",\n]);\nconst FORBIDDEN_LEDGER_KEYS = new Set([\n\t\"body\",\n\t\"context\",\n\t\"pack\",\n\t\"pack_text\",\n\t\"path\",\n\t\"preview\",\n\t\"prompt\",\n\t\"query\",\n\t\"raw_prompt\",\n\t\"title\",\n]);\n\ntype ValidatedPackRequest = {\n\tcontext: string;\n\tlimit: number;\n\ttokenBudget: number | null;\n\tfilters: MemoryFilters;\n\trenderOptions?: PackRenderOptions;\n\tattempt?: Record<string, unknown>;\n\tautomaticContext?: AutomaticContext | null;\n};\n\nfunction invalidRequest(message: string) {\n\treturn { error: { code: \"invalid_request\", message } };\n}\n\nfunction viewerIdentityMismatch() {\n\treturn {\n\t\terror: {\n\t\t\tcode: \"viewer_identity_mismatch\",\n\t\t\tmessage: \"viewer identity does not match request\",\n\t\t},\n\t};\n}\n\nfunction viewerContractUnsupported() {\n\treturn {\n\t\terror: {\n\t\t\tcode: \"viewer_contract_unsupported\",\n\t\t\tmessage: \"viewer request contract is incompatible\",\n\t\t},\n\t};\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn value != null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction isAbsolutePath(value: string): boolean {\n\treturn posix.isAbsolute(value) || win32.isAbsolute(value);\n}\n\nfunction normalizeWorkingSetPath(value: string): string | null {\n\tconst trimmed = value.trim();\n\tif (!trimmed || trimmed.length > MAX_WORKING_SET_PATH_CHARS || isAbsolutePath(trimmed)) {\n\t\treturn null;\n\t}\n\tconst normalized = posix.normalize(trimmed.replaceAll(\"\\\\\", \"/\")).replace(/^\\.\\//, \"\");\n\tif (!normalized || normalized === \".\" || normalized === \"..\" || normalized.startsWith(\"../\")) {\n\t\treturn null;\n\t}\n\treturn normalized;\n}\n\nfunction validateMetadataFields(\n\tpayload: Record<string, unknown>,\n\tallowedKeys: ReadonlySet<string>,\n): string | null {\n\tif (Buffer.byteLength(JSON.stringify(payload), \"utf8\") > MAX_LEDGER_PAYLOAD_BYTES) {\n\t\treturn \"ledger metadata exceeds 16384 bytes\";\n\t}\n\tfor (const key of Object.keys(payload)) {\n\t\tif (FORBIDDEN_LEDGER_KEYS.has(key)) return `ledger metadata rejects sensitive field: ${key}`;\n\t\tif (!allowedKeys.has(key)) return `ledger metadata contains unsupported field: ${key}`;\n\t}\n\tif (typeof payload.attempt_id !== \"string\" || payload.attempt_id.length === 0) {\n\t\treturn \"ledger metadata requires attempt_id\";\n\t}\n\tif (\n\t\tpayload.prompt_number != null &&\n\t\t(typeof payload.prompt_number !== \"number\" ||\n\t\t\t!Number.isInteger(payload.prompt_number) ||\n\t\t\tpayload.prompt_number < 0)\n\t) {\n\t\treturn \"ledger metadata prompt_number must be a non-negative integer\";\n\t}\n\tfor (const key of [\n\t\t\"attempt_id\",\n\t\t\"started_at\",\n\t\t\"source\",\n\t\t\"stream_id\",\n\t\t\"source_session_id\",\n\t\t\"request_id\",\n\t\t\"failure_code\",\n\t\t\"failure_stage\",\n\t\t\"original_attempt_id\",\n\t] as const) {\n\t\tconst field = payload[key];\n\t\tif (field != null && (typeof field !== \"string\" || field.length > MAX_METADATA_FIELD_CHARS)) {\n\t\t\treturn `ledger metadata field ${key} is invalid`;\n\t\t}\n\t\tif (typeof field === \"string\" && isAbsolutePath(field)) {\n\t\t\treturn `ledger metadata rejects absolute paths in field: ${key}`;\n\t\t}\n\t}\n\treturn null;\n}\n\nfunction attemptMetadata(payload: Record<string, unknown>): PromptPackAttemptMetadata {\n\treturn {\n\t\tattemptId: payload.attempt_id as string,\n\t\tstartedAt: (payload.started_at as string | undefined) ?? new Date().toISOString(),\n\t\tcompletedAt: new Date().toISOString(),\n\t\tsource: (payload.source as string | undefined) ?? \"opencode\",\n\t\tstreamId: (payload.stream_id as string | undefined) ?? null,\n\t\tsourceSessionId: (payload.source_session_id as string | undefined) ?? null,\n\t\tpromptNumber: (payload.prompt_number as number | undefined) ?? null,\n\t\trequestId: (payload.request_id as string | undefined) ?? null,\n\t};\n}\n\nfunction validateAutomaticContext(value: unknown): AutomaticContext | null | string {\n\tif (value === null) return null;\n\tif (!isRecord(value)) return \"automatic_context must be an object or null\";\n\tfor (const key of Object.keys(value)) {\n\t\tif (key !== \"source\" && key !== \"host_session_id\") {\n\t\t\treturn `automatic_context contains unsupported field: ${key}`;\n\t\t}\n\t}\n\tconst source = value.source;\n\tconst hostSessionId = value.host_session_id;\n\tif (typeof source !== \"string\" || !source.trim() || source.length > 64) {\n\t\treturn \"automatic_context source is invalid\";\n\t}\n\tif (\n\t\ttypeof hostSessionId !== \"string\" ||\n\t\t!hostSessionId.trim() ||\n\t\thostSessionId.length > MAX_METADATA_FIELD_CHARS ||\n\t\tisAbsolutePath(hostSessionId)\n\t) {\n\t\treturn \"automatic_context host_session_id is invalid\";\n\t}\n\treturn { source: source.trim(), hostSessionId: hostSessionId.trim() };\n}\n\nfunction resolveRequestAutomaticContext(\n\tvalue: Record<string, unknown>,\n\tattempt: Record<string, unknown> | undefined,\n): AutomaticContext | null | undefined | string {\n\tif (Object.hasOwn(value, \"automatic_context\")) {\n\t\treturn validateAutomaticContext(value.automatic_context);\n\t}\n\tif (!attempt) return undefined;\n\t// Only the OpenCode plugin's older attempt metadata implies an automatic request.\n\t// Named non-OpenCode hook sources keep generic behavior so Viewer and their local\n\t// fallbacks agree; an attempt with no source is unknown origin and stays fail-closed.\n\tconst source = typeof attempt.source === \"string\" ? attempt.source.trim().toLowerCase() : \"\";\n\tif (source && source !== \"opencode\") return undefined;\n\tconst hostSessionId = attempt.source_session_id;\n\tif (source === \"opencode\" && typeof hostSessionId === \"string\" && hostSessionId.trim()) {\n\t\treturn { source, hostSessionId: hostSessionId.trim() };\n\t}\n\treturn null;\n}\n\nfunction packRenderOptions(value: Record<string, unknown>): PackRenderOptions | undefined {\n\tif (value.compact == null && value.compact_detail_count == null) return undefined;\n\treturn {\n\t\tcompact: value.compact === true || value.compact_detail_count != null,\n\t\t...(value.compact_detail_count != null\n\t\t\t? { compactDetailCount: value.compact_detail_count as number }\n\t\t\t: {}),\n\t};\n}\n\nfunction packRequestArgs(request: ValidatedPackRequest) {\n\treturn [\n\t\trequest.context,\n\t\trequest.limit,\n\t\trequest.tokenBudget,\n\t\trequest.filters,\n\t\trequest.renderOptions,\n\t\trequest.automaticContext,\n\t] as const;\n}\n\nfunction validatePackRequest(value: unknown): ValidatedPackRequest | string {\n\tif (!isRecord(value)) return \"request body must be an object\";\n\tfor (const key of Object.keys(value)) {\n\t\tif (!PACK_KEYS.has(key)) return `request body contains unsupported field: ${key}`;\n\t}\n\tconst context = typeof value.context === \"string\" ? value.context.trim() : \"\";\n\tif (!context) return \"context required\";\n\tconst limit = value.limit ?? 10;\n\tif (typeof limit !== \"number\" || !Number.isInteger(limit) || limit < 1) {\n\t\treturn \"limit must be a positive int\";\n\t}\n\tconst tokenBudget = value.token_budget ?? null;\n\tif (\n\t\ttokenBudget !== null &&\n\t\t(typeof tokenBudget !== \"number\" || !Number.isInteger(tokenBudget) || tokenBudget < 0)\n\t) {\n\t\treturn \"token_budget must be a non-negative int\";\n\t}\n\tif (value.all_projects != null && typeof value.all_projects !== \"boolean\") {\n\t\treturn \"all_projects must be a boolean\";\n\t}\n\tif (value.project != null && (typeof value.project !== \"string\" || !value.project.trim())) {\n\t\treturn \"project must be a non-empty string\";\n\t}\n\tif (\n\t\tvalue.cwd != null &&\n\t\t(typeof value.cwd !== \"string\" || !value.cwd.trim() || !isAbsolute(value.cwd))\n\t) {\n\t\treturn \"cwd must be an absolute path\";\n\t}\n\tif (value.working_set_files != null && !Array.isArray(value.working_set_files)) {\n\t\treturn \"working_set_files must be an array of repository-relative strings\";\n\t}\n\tconst workingSetValues = (value.working_set_files ?? []) as unknown[];\n\tif (workingSetValues.length > MAX_WORKING_SET_FILES) {\n\t\treturn `working_set_files must contain at most ${MAX_WORKING_SET_FILES} entries`;\n\t}\n\tconst workingSetFiles: string[] = [];\n\tfor (const entry of workingSetValues) {\n\t\tif (typeof entry !== \"string\") {\n\t\t\treturn \"working_set_files must be an array of repository-relative strings\";\n\t\t}\n\t\tconst normalized = normalizeWorkingSetPath(entry);\n\t\tif (!normalized) return \"working_set_files contains an invalid repository-relative path\";\n\t\tif (!workingSetFiles.includes(normalized)) workingSetFiles.push(normalized);\n\t}\n\tif (value.compact != null && typeof value.compact !== \"boolean\") {\n\t\treturn \"compact must be a boolean\";\n\t}\n\tif (\n\t\tvalue.compact_detail_count != null &&\n\t\t(typeof value.compact_detail_count !== \"number\" ||\n\t\t\t!Number.isInteger(value.compact_detail_count) ||\n\t\t\tvalue.compact_detail_count < 0)\n\t) {\n\t\treturn \"compact_detail_count must be a non-negative int\";\n\t}\n\tlet attempt: Record<string, unknown> | undefined;\n\tif (value.attempt != null) {\n\t\tif (!isRecord(value.attempt)) return \"attempt must be an object\";\n\t\tconst attemptError = validateMetadataFields(value.attempt, ATTEMPT_KEYS);\n\t\tif (attemptError) return attemptError;\n\t\tattempt = value.attempt;\n\t}\n\tconst automaticContext = resolveRequestAutomaticContext(value, attempt);\n\tif (typeof automaticContext === \"string\") return automaticContext;\n\n\tconst filters: MemoryFilters = {};\n\tif (value.all_projects !== true) {\n\t\tconst envProject = process.env.CODEMEM_PROJECT?.trim() || null;\n\t\tconst requestCwd = value.cwd as string | undefined;\n\t\tconst requestProject = value.project as string | undefined;\n\t\tconst project = resolveProject(\n\t\t\trequestCwd ?? process.cwd(),\n\t\t\trequestProject ?? (requestCwd == null ? envProject : undefined),\n\t\t);\n\t\tif (project) filters.project = project;\n\t}\n\tif (workingSetFiles.length > 0) filters.working_set_paths = workingSetFiles;\n\n\treturn {\n\t\tcontext,\n\t\tlimit,\n\t\ttokenBudget: tokenBudget as number | null,\n\t\tfilters,\n\t\trenderOptions: packRenderOptions(value),\n\t\tattempt,\n\t\tautomaticContext,\n\t};\n}\n\nfunction ledgerFailureStatus(reason: RetrievalLedgerFailureReason): 400 | 409 | 422 | 503 {\n\tif (reason === \"idempotency_conflict\") return 409;\n\tif (reason === \"attempt_not_found\") return 422;\n\tif (reason === \"storage_unavailable\") return 503;\n\treturn 400;\n}\n\nfunction dispatchRecallMeasurement(\n\tstore: MemoryStore,\n\tpayload: Record<string, unknown>,\n): AutomaticRecallWriteOutcome | string | null {\n\tconst action = payload.action;\n\tif (payload.automatic_recall === undefined && action !== \"recall\") return null;\n\tconst isValidMeasurement =\n\t\tisAutomaticRecallMeasurement(payload.automatic_recall) &&\n\t\ttypeof payload.evaluation_key === \"string\" &&\n\t\t/^[a-f0-9]{64}$/.test(payload.evaluation_key);\n\tif (action === \"delivery\") {\n\t\tif (!isValidMeasurement) return null;\n\t\ttry {\n\t\t\trecordAutomaticRecall(\n\t\t\t\tstore.db,\n\t\t\t\tpayload.attempt_id as string,\n\t\t\t\tpayload.evaluation_key,\n\t\t\t\tpayload.automatic_recall,\n\t\t\t);\n\t\t} catch {\n\t\t\t// Delivery diagnostics are best-effort after the receipt has been accepted.\n\t\t}\n\t\treturn null;\n\t}\n\tif (action !== \"recall\" || !isValidMeasurement) {\n\t\treturn \"invalid automatic recall measurement\";\n\t}\n\treturn recordAutomaticRecall(\n\t\tstore.db,\n\t\tpayload.attempt_id as string,\n\t\tpayload.evaluation_key,\n\t\tpayload.automatic_recall,\n\t);\n}\n\nfunction dispatchLedger(\n\tstore: MemoryStore,\n\tpayload: Record<string, unknown>,\n): LedgerOutcome | string {\n\tconst action = payload.action;\n\tconst metadata = attemptMetadata(payload);\n\tif (action === \"delivery\") {\n\t\tconst status = payload.delivery_status;\n\t\tif (status !== \"handed_off\" && status !== \"failed\" && status !== \"unknown\") {\n\t\t\treturn \"delivery action requires a valid delivery_status\";\n\t\t}\n\t\tconst outcome = tryUpdateRetrievalDelivery(store.db, metadata.attemptId, status);\n\t\tif (outcome.ok) dispatchRecallMeasurement(store, payload);\n\t\treturn outcome;\n\t}\n\tconst measurement = dispatchRecallMeasurement(store, payload);\n\tif (measurement !== null) return measurement;\n\tif (action === \"cache_reuse\") {\n\t\tif (typeof payload.original_attempt_id !== \"string\" || !payload.original_attempt_id) {\n\t\t\treturn \"cache_reuse action requires original_attempt_id\";\n\t\t}\n\t\treturn clonePromptPackAttempt(store.db, payload.original_attempt_id, metadata);\n\t}\n\tif (action !== \"record\") return \"ledger action is invalid\";\n\tif (\n\t\t(payload.retrieval_status !== \"skipped\" && payload.retrieval_status !== \"failed\") ||\n\t\ttypeof payload.failure_code !== \"string\" ||\n\t\t!payload.failure_code ||\n\t\ttypeof payload.failure_stage !== \"string\" ||\n\t\t!payload.failure_stage\n\t) {\n\t\treturn \"record action requires retrieval_status, failure_code, and failure_stage\";\n\t}\n\treturn recordPromptPackTerminal(\n\t\tstore.db,\n\t\tmetadata,\n\t\tpayload.retrieval_status,\n\t\tpayload.failure_code,\n\t\tpayload.failure_stage,\n\t);\n}\n\nexport function packTransportRoutes(getStore: StoreFactory) {\n\tconst app = new Hono();\n\n\tapp.get(\"/api/prompt-pack-profile\", (c) => {\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tif (!store.hasCurrentIdentity()) return c.json(viewerIdentityMismatch(), 409);\n\t\t\treturn c.json({\n\t\t\t\tservice: \"codemem-viewer\",\n\t\t\t\tprotocol_version: PROMPT_TRANSPORT_PROTOCOL_RANGE.protocolVersion,\n\t\t\t\tmin_supported_protocol_version: PROMPT_TRANSPORT_PROTOCOL_RANGE.minSupportedProtocolVersion,\n\t\t\t\tdb_path: resolvePath(store.dbPath),\n\t\t\t\tidentity_target: currentIdentityTarget(),\n\t\t\t});\n\t\t} catch {\n\t\t\treturn c.json(\n\t\t\t\t{ error: { code: \"profile_failed\", message: \"viewer profile could not be read\" } },\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/pack\", async (c) => {\n\t\tconst parsed = await c.req.json().catch(() => INVALID_JSON);\n\t\tif (parsed === INVALID_JSON) return c.json(invalidRequest(\"invalid json body\"), 400);\n\t\tconst request = validatePackRequest(parsed);\n\t\tif (typeof request === \"string\") {\n\t\t\tif (request.startsWith(\"request body contains unsupported field:\"))\n\t\t\t\treturn c.json(viewerContractUnsupported(), 409);\n\t\t\treturn c.json(invalidRequest(request), 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, parsed, { requireCurrentIdentity: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tif (!request.attempt) {\n\t\t\t\tconst pack = await store.buildMemoryPackAsync(...packRequestArgs(request));\n\t\t\t\treturn c.json(pack);\n\t\t\t}\n\t\t\tconst artifacts = await store.buildMemoryPackWithTraceAsync(...packRequestArgs(request));\n\t\t\tlet ledgerArtifactFingerprint: string | undefined;\n\t\t\ttry {\n\t\t\t\tledgerArtifactFingerprint = promptPackArtifactFingerprint(\n\t\t\t\t\tstore.db,\n\t\t\t\t\trequest.context,\n\t\t\t\t\trequest.filters,\n\t\t\t\t\tartifacts,\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\t// Fingerprinting is instrumentation and must not block pack delivery.\n\t\t\t}\n\t\t\tlet ledgerOutcome: RetrievalLedgerWriteOutcome | undefined;\n\t\t\ttry {\n\t\t\t\tledgerOutcome = recordPromptPackArtifacts(\n\t\t\t\t\tstore.db,\n\t\t\t\t\tattemptMetadata(request.attempt),\n\t\t\t\t\trequest.context,\n\t\t\t\t\trequest.filters,\n\t\t\t\t\tartifacts,\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\t// Ledger instrumentation is best-effort and must not block pack delivery.\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\t...artifacts.response,\n\t\t\t\t...(ledgerArtifactFingerprint\n\t\t\t\t\t? { ledger_artifact_fingerprint: ledgerArtifactFingerprint }\n\t\t\t\t\t: {}),\n\t\t\t\t...(ledgerOutcome?.ok === false && ledgerOutcome.reason === \"idempotency_conflict\"\n\t\t\t\t\t? { ledger_outcome: ledgerOutcome }\n\t\t\t\t\t: {}),\n\t\t\t});\n\t\t} catch {\n\t\t\treturn c.json(\n\t\t\t\t{ error: { code: \"pack_failed\", message: \"memory pack could not be built\" } },\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/prompt-pack-ledger\", async (c) => {\n\t\tconst parsed = await c.req.json().catch(() => INVALID_JSON);\n\t\tif (parsed === INVALID_JSON) return c.json(invalidRequest(\"invalid json body\"), 400);\n\t\tif (!isRecord(parsed)) return c.json(invalidRequest(\"request body must be an object\"), 400);\n\t\tconst validationError = validateMetadataFields(parsed, LEDGER_KEYS);\n\t\tif (validationError) {\n\t\t\tif (validationError.startsWith(\"ledger metadata contains unsupported field:\"))\n\t\t\t\treturn c.json(viewerContractUnsupported(), 409);\n\t\t\treturn c.json(invalidRequest(validationError), 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, parsed, { requireCurrentIdentity: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tconst outcome = dispatchLedger(store, parsed);\n\t\t\tif (typeof outcome === \"string\") return c.json(invalidRequest(outcome), 400);\n\t\t\tif (outcome.ok) return c.json(outcome);\n\t\t\treturn c.json(outcome, ledgerFailureStatus(outcome.reason));\n\t\t} catch {\n\t\t\treturn c.json(\n\t\t\t\t{ error: { code: \"ledger_failed\", message: \"prompt-pack ledger operation failed\" } },\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Raw events routes — GET & POST /api/raw-events, GET /api/raw-events/status,\n * POST /api/claude-hooks, POST /api/codex-hooks.\n */\n\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { HookTranscriptOutcome, MemoryStore, RawEventSweeper } from \"@codemem/core\";\nimport {\n\tbuildRawEventEnvelopeFromCodexHook,\n\tbuildRawEventEnvelopeFromHook,\n\tingestRawEvents,\n\tRawEventIngestValidationError,\n\tschema,\n} from \"@codemem/core\";\nimport { desc } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/better-sqlite3\";\nimport { Hono } from \"hono\";\nimport { parseJsonObjectBody, queryInt } from \"../helpers.js\";\nimport { validateViewerTarget } from \"./target-validation.js\";\n\ntype StoreFactory = () => MemoryStore;\ntype JsonResponder = {\n\tjson: (data: unknown, status?: number) => Response;\n};\n\nconst DEFAULT_MAX_RAW_EVENTS_BODY_BYTES = 1_048_576;\n\nfunction configuredMaxRawEventsBodyBytes(): number {\n\tconst parsed = Number(process.env.CODEMEM_RAW_EVENTS_MAX_BODY_BYTES?.trim() ?? \"\");\n\treturn Number.isSafeInteger(parsed) && parsed > 0 ? parsed : DEFAULT_MAX_RAW_EVENTS_BODY_BYTES;\n}\n\nconst MAX_RAW_EVENTS_BODY_BYTES = configuredMaxRawEventsBodyBytes();\ntype LegacyTranscriptSource = \"claude\" | \"codex\";\ntype TranscriptOutcomeCounts = Record<HookTranscriptOutcome, number>;\n\nfunction emptyTranscriptOutcomeCounts(): TranscriptOutcomeCounts {\n\treturn {\n\t\tok: 0,\n\t\tnot_provided: 0,\n\t\tpath_rejected: 0,\n\t\tunreadable: 0,\n\t\tno_complete_record: 0,\n\t\tno_assistant_record: 0,\n\t} satisfies TranscriptOutcomeCounts;\n}\n\nfunction createTranscriptDiagnostics() {\n\tconst counts: Record<LegacyTranscriptSource, TranscriptOutcomeCounts> = {\n\t\tclaude: emptyTranscriptOutcomeCounts(),\n\t\tcodex: emptyTranscriptOutcomeCounts(),\n\t};\n\treturn {\n\t\trecord(source: LegacyTranscriptSource, outcome: HookTranscriptOutcome): void {\n\t\t\tcounts[source][outcome] += 1;\n\t\t},\n\t\tsnapshot() {\n\t\t\treturn {\n\t\t\t\tscope: \"legacy_compatibility_routes\" as const,\n\t\t\t\tcounts: {\n\t\t\t\t\tclaude: { ...counts.claude },\n\t\t\t\t\tcodex: { ...counts.codex },\n\t\t\t\t},\n\t\t\t};\n\t\t},\n\t};\n}\n\nfunction transcriptSkipResponse(outcome: HookTranscriptOutcome | null) {\n\tif (outcome !== null && outcome !== \"ok\") {\n\t\treturn {\n\t\t\tinserted: 0,\n\t\t\tskipped: 1,\n\t\t\tskip_reason: \"transcript_unavailable\" as const,\n\t\t\tskip_detail: outcome,\n\t\t};\n\t}\n\treturn { inserted: 0, skipped: 1, skip_reason: \"unsupported_hook\" as const };\n}\n\nfunction claudeTranscriptRoot(): string {\n\treturn join(process.env.CLAUDE_CONFIG_DIR?.trim() || join(homedir(), \".claude\"), \"projects\");\n}\n\nfunction codexTranscriptRoot(): string {\n\treturn join(process.env.CODEX_HOME?.trim() || join(homedir(), \".codex\"), \"sessions\");\n}\n\n/** Nudge the sweeper safely — never crashes the caller. */\nfunction nudgeSweeper(\n\tsweeper: RawEventSweeper | null | undefined,\n\tsessions: Iterable<{ source: string; streamId: string }>,\n): void {\n\tfor (const session of sessions) {\n\t\ttry {\n\t\t\tsweeper?.nudge(session.streamId, session.source);\n\t\t} catch {\n\t\t\t// A failed nudge must not block later validated sessions.\n\t\t}\n\t}\n}\n\nasync function flushBoundarySessions(\n\tsweeper: RawEventSweeper | null | undefined,\n\tsessions: Iterable<{ source: string; streamId: string }>,\n): Promise<void> {\n\tfor (const session of sessions) {\n\t\ttry {\n\t\t\tawait sweeper?.flushBoundary(session.streamId, session.source);\n\t\t} catch {\n\t\t\t// Boundary extraction remains best-effort, matching the legacy CLI path.\n\t\t}\n\t}\n}\n\nfunction isClaudeBoundaryEnvelope(envelope: object): boolean {\n\tconst record = envelope as Record<string, unknown>;\n\tif (\n\t\tString(record.source ?? \"\")\n\t\t\t.trim()\n\t\t\t.toLowerCase() !== \"claude\"\n\t)\n\t\treturn false;\n\tconst payload = record.payload;\n\tif (payload == null || typeof payload !== \"object\" || Array.isArray(payload)) return false;\n\tconst adapter = (payload as Record<string, unknown>)._adapter;\n\tif (adapter == null || typeof adapter !== \"object\" || Array.isArray(adapter)) return false;\n\tconst meta = (adapter as Record<string, unknown>).meta;\n\tif (meta == null || typeof meta !== \"object\" || Array.isArray(meta)) return false;\n\tconst hookEventName = (meta as Record<string, unknown>).hook_event_name;\n\treturn hookEventName === \"SessionEnd\" || hookEventName === \"Stop\";\n}\n\nconst SAFE_INGEST_VALIDATION_ERRORS = new Set([\n\t\"source must be string\",\n\t\"source is required\",\n\t\"source must use 1-64 letters, digits, dots, underscores, or hyphens\",\n\t\"session_stream_id must be string\",\n\t\"session_id must be string\",\n\t\"stream_id must be string\",\n\t\"opencode_session_id must be string\",\n\t\"conflicting session id fields\",\n\t\"invalid session id\",\n\t\"event source conflicts with request source\",\n\t\"session id required\",\n\t\"event_type must be string\",\n\t\"event_type required\",\n\t\"event_type has invalid syntax\",\n\t\"event_id must be string\",\n\t\"event_id required\",\n\t\"event_id has invalid syntax\",\n\t\"event_seq must be int\",\n\t\"ts_wall_ms must be number\",\n\t\"ts_mono_ms must be number\",\n\t\"payload must be an object\",\n\t\"cwd must be string\",\n\t\"project must be string\",\n\t\"started_at must be string\",\n\t\"events must be a list\",\n\t\"event must be an object\",\n]);\n\nfunction boundedIngestValidationMessage(error: RawEventIngestValidationError): string {\n\treturn SAFE_INGEST_VALIDATION_ERRORS.has(error.message)\n\t\t? error.message\n\t\t: \"invalid raw event request\";\n}\n\nfunction boundedIngestErrorResponse(c: JsonResponder, error: unknown): Response {\n\tif (error instanceof RawEventIngestValidationError) {\n\t\treturn c.json({ error: boundedIngestValidationMessage(error) }, 400);\n\t}\n\tconst response: Record<string, unknown> = { error: \"internal server error\" };\n\tif (process.env.CODEMEM_VIEWER_DEBUG === \"1\") {\n\t\tresponse.detail = error instanceof Error ? error.message : String(error);\n\t}\n\treturn c.json(response, 500);\n}\n\nfunction untargetedPayload(payload: Record<string, unknown>): Record<string, unknown> {\n\tconst { db_path: _dbPath, identity_target: _identityTarget, ...body } = payload;\n\treturn body;\n}\n\nasync function ingestNormalizedEnvelope(\n\tstore: MemoryStore,\n\tsweeper: RawEventSweeper | null | undefined,\n\tenvelope: object,\n\tflushBoundary = false,\n) {\n\tconst result = ingestRawEvents(store, envelope);\n\tnudgeSweeper(sweeper, result.sessions);\n\tif (flushBoundary && isClaudeBoundaryEnvelope(envelope)) {\n\t\tawait flushBoundarySessions(sweeper, result.sessions);\n\t}\n\treturn result;\n}\n\nexport function rawEventsRoutes(getStore: StoreFactory, sweeper?: RawEventSweeper | null) {\n\tconst app = new Hono();\n\tconst transcriptDiagnostics = createTranscriptDiagnostics();\n\n\t// GET /api/raw-events (compat endpoint for stats panel)\n\tapp.get(\"/api/raw-events\", (c) => {\n\t\tconst store = getStore();\n\t\tconst totals = store.rawEventBacklogTotals();\n\t\treturn c.json(totals);\n\t});\n\n\t// GET /api/raw-events/status\n\tapp.get(\"/api/raw-events/status\", (c) => {\n\t\tconst store = getStore();\n\t\tconst limit = queryInt(c.req.query(\"limit\"), 25);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst rows = d\n\t\t\t.select({\n\t\t\t\tsource: schema.rawEventSessions.source,\n\t\t\t\tstream_id: schema.rawEventSessions.stream_id,\n\t\t\t\topencode_session_id: schema.rawEventSessions.opencode_session_id,\n\t\t\t\tcwd: schema.rawEventSessions.cwd,\n\t\t\t\tproject: schema.rawEventSessions.project,\n\t\t\t\tstarted_at: schema.rawEventSessions.started_at,\n\t\t\t\tlast_seen_ts_wall_ms: schema.rawEventSessions.last_seen_ts_wall_ms,\n\t\t\t\tlast_received_event_seq: schema.rawEventSessions.last_received_event_seq,\n\t\t\t\tlast_flushed_event_seq: schema.rawEventSessions.last_flushed_event_seq,\n\t\t\t\tupdated_at: schema.rawEventSessions.updated_at,\n\t\t\t})\n\t\t\t.from(schema.rawEventSessions)\n\t\t\t.orderBy(desc(schema.rawEventSessions.updated_at))\n\t\t\t.limit(limit)\n\t\t\t.all();\n\t\tconst items = rows.map((row) => {\n\t\t\tconst streamId = String(row.stream_id ?? row.opencode_session_id ?? \"\");\n\t\t\treturn {\n\t\t\t\t...row,\n\t\t\t\tsession_stream_id: streamId,\n\t\t\t\tsession_id: streamId,\n\t\t\t};\n\t\t});\n\t\tconst totals = store.rawEventBacklogTotals();\n\t\treturn c.json({\n\t\t\titems,\n\t\t\ttotals,\n\t\t\tingest: {\n\t\t\t\tavailable: true,\n\t\t\t\tmode: \"stream_queue\",\n\t\t\t\tmax_body_bytes: MAX_RAW_EVENTS_BODY_BYTES,\n\t\t\t},\n\t\t\ttranscript_diagnostics: transcriptDiagnostics.snapshot(),\n\t\t});\n\t});\n\n\t// POST /api/raw-events — ingest raw events from plugin\n\tapp.post(\"/api/raw-events\", async (c) => {\n\t\tconst result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);\n\t\tif (result instanceof Response) return result;\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, result, { requirePairedTargets: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tconst ingestResult = await ingestNormalizedEnvelope(\n\t\t\t\tstore,\n\t\t\t\tsweeper,\n\t\t\t\tuntargetedPayload(result),\n\t\t\t\tc.req.header(\"x-codemem-boundary-flush\") === \"1\",\n\t\t\t);\n\t\t\treturn c.json({\n\t\t\t\tinserted: ingestResult.inserted,\n\t\t\t\tskipped: ingestResult.skipped,\n\t\t\t\treceived: ingestResult.received,\n\t\t\t});\n\t\t} catch (err) {\n\t\t\treturn boundedIngestErrorResponse(c, err);\n\t\t}\n\t});\n\n\t// POST /api/claude-hooks — ingest Claude Code hook events\n\tapp.post(\"/api/claude-hooks\", async (c) => {\n\t\tconst result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);\n\t\tif (result instanceof Response) return result;\n\t\tconst payload = result;\n\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, payload, { requirePairedTargets: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tlet transcriptOutcome: HookTranscriptOutcome | null = null;\n\t\t\tconst envelope = buildRawEventEnvelopeFromHook(untargetedPayload(payload), {\n\t\t\t\ttranscriptPolicy: { trust: \"restricted\", approvedRoots: [claudeTranscriptRoot()] },\n\t\t\t\tonTranscriptOutcome: (outcome) => {\n\t\t\t\t\ttranscriptOutcome = outcome;\n\t\t\t\t\ttranscriptDiagnostics.record(\"claude\", outcome);\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (envelope === null) {\n\t\t\t\treturn c.json(transcriptSkipResponse(transcriptOutcome));\n\t\t\t}\n\t\t\tconst ingestResult = await ingestNormalizedEnvelope(\n\t\t\t\tstore,\n\t\t\t\tsweeper,\n\t\t\t\tenvelope,\n\t\t\t\tc.req.header(\"x-codemem-boundary-flush\") === \"1\",\n\t\t\t);\n\t\t\treturn c.json({ inserted: ingestResult.inserted, skipped: ingestResult.skipped });\n\t\t} catch (err) {\n\t\t\treturn boundedIngestErrorResponse(c, err);\n\t\t}\n\t});\n\n\t// POST /api/codex-hooks — ingest Codex hook events\n\tapp.post(\"/api/codex-hooks\", async (c) => {\n\t\tconst result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);\n\t\tif (result instanceof Response) return result;\n\t\tconst payload = result;\n\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst target = validateViewerTarget(store, payload, { requirePairedTargets: true });\n\t\t\tif (!target.ok) return c.json(target.body, target.status);\n\t\t\tlet transcriptOutcome: HookTranscriptOutcome | null = null;\n\t\t\tconst envelope = buildRawEventEnvelopeFromCodexHook(untargetedPayload(payload), {\n\t\t\t\ttranscriptPolicy: { trust: \"restricted\", approvedRoots: [codexTranscriptRoot()] },\n\t\t\t\tonTranscriptOutcome: (outcome) => {\n\t\t\t\t\ttranscriptOutcome = outcome;\n\t\t\t\t\ttranscriptDiagnostics.record(\"codex\", outcome);\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (envelope === null) {\n\t\t\t\treturn c.json(transcriptSkipResponse(transcriptOutcome));\n\t\t\t}\n\t\t\tconst ingestResult = await ingestNormalizedEnvelope(store, sweeper, envelope);\n\t\t\treturn c.json({ inserted: ingestResult.inserted, skipped: ingestResult.skipped });\n\t\t} catch (err) {\n\t\t\treturn boundedIngestErrorResponse(c, err);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Stats routes — GET /api/stats, GET /api/usage.\n *\n * Ports Python's viewer_routes/stats.py.\n */\n\nimport {\n\tautomaticRecallHealth,\n\tbuildFilterClausesWithContext,\n\tlistMaintenanceJobs,\n\ttype MemoryStore,\n\tVERSION,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\nfunction maintenanceJobSortKey(job: {\n\tstarted_at: string | null;\n\tupdated_at: string;\n\tkind: string;\n}): [string, string] {\n\treturn [job.started_at ?? job.updated_at, job.kind];\n}\n\nfunction sortActiveMaintenanceJobs<\n\tT extends { started_at: string | null; updated_at: string; kind: string },\n>(jobs: T[]): T[] {\n\treturn [...jobs].sort((a, b) => {\n\t\tconst [aTime, aKind] = maintenanceJobSortKey(a);\n\t\tconst [bTime, bKind] = maintenanceJobSortKey(b);\n\t\tif (aTime !== bTime) return aTime.localeCompare(bTime);\n\t\treturn aKind.localeCompare(bKind);\n\t});\n}\n\nconst MEMORY_ID_METADATA_KEYS = [\"pack_item_ids\", \"added_ids\", \"removed_ids\", \"retained_ids\"];\n\ntype UsageRow = {\n\tid: number;\n\tsession_id: number | null;\n\tevent: string;\n\ttokens_read: number;\n\ttokens_written: number;\n\ttokens_saved: number;\n\tcreated_at: string;\n\tmetadata_json: Record<string, unknown> | null;\n};\n\ntype UsageVisibility = {\n\tvisibleMemoryIds: Set<number>;\n\tvisibleSessionIds: Set<number>;\n};\n\nfunction toUsageRow(\n\trow: Record<string, unknown>,\n\tmetadata: Record<string, unknown> | null,\n): UsageRow {\n\treturn {\n\t\tid: Number(row.id ?? 0),\n\t\tsession_id: row.session_id == null ? null : Number(row.session_id),\n\t\tevent: String(row.event ?? \"pack\"),\n\t\ttokens_read: Number(row.tokens_read ?? 0),\n\t\ttokens_written: Number(row.tokens_written ?? 0),\n\t\ttokens_saved: Number(row.tokens_saved ?? 0),\n\t\tcreated_at: String(row.created_at ?? \"\"),\n\t\tmetadata_json: metadata,\n\t};\n}\n\nfunction metadataMemoryIds(value: unknown): number[] {\n\tif (!Array.isArray(value)) return [];\n\treturn value\n\t\t.map((item) => (typeof item === \"number\" ? item : Number(item)))\n\t\t.filter((item) => Number.isInteger(item) && item > 0);\n}\n\nfunction chunkNumbers(values: number[], chunkSize = 500): number[][] {\n\tconst chunks: number[][] = [];\n\tfor (let start = 0; start < values.length; start += chunkSize) {\n\t\tchunks.push(values.slice(start, start + chunkSize));\n\t}\n\treturn chunks;\n}\n\nfunction visibleMemoryIdSet(store: MemoryStore, memoryIds: Set<number>): Set<number> {\n\tif (memoryIds.size === 0) return new Set();\n\tconst filterResult = buildFilterClausesWithContext(null, {\n\t\tactorId: store.actorId,\n\t\tdeviceId: store.deviceId,\n\t\tenforceScopeVisibility: true,\n\t});\n\tconst visibleIds = new Set<number>();\n\tfor (const chunk of chunkNumbers([...memoryIds])) {\n\t\tconst placeholders = chunk.map(() => \"?\").join(\", \");\n\t\tconst clauses = [\n\t\t\t\"memory_items.active = 1\",\n\t\t\t`memory_items.id IN (${placeholders})`,\n\t\t\t...filterResult.clauses,\n\t\t];\n\t\tconst rows = store.db\n\t\t\t.prepare(`SELECT memory_items.id FROM memory_items WHERE ${clauses.join(\" AND \")}`)\n\t\t\t.all(...chunk, ...filterResult.params) as Array<{ id: number }>;\n\t\tfor (const row of rows) visibleIds.add(Number(row.id));\n\t}\n\treturn visibleIds;\n}\n\nfunction visibleSessionIdSet(store: MemoryStore, sessionIds: Set<number>): Set<number> {\n\tif (sessionIds.size === 0) return new Set();\n\tconst filterResult = buildFilterClausesWithContext(null, {\n\t\tactorId: store.actorId,\n\t\tdeviceId: store.deviceId,\n\t\tenforceScopeVisibility: true,\n\t});\n\tconst visibleIds = new Set<number>();\n\tfor (const chunk of chunkNumbers([...sessionIds])) {\n\t\tconst placeholders = chunk.map(() => \"?\").join(\", \");\n\t\tconst clauses = [\n\t\t\t\"memory_items.active = 1\",\n\t\t\t`memory_items.session_id IN (${placeholders})`,\n\t\t\t...filterResult.clauses,\n\t\t];\n\t\tconst rows = store.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT DISTINCT memory_items.session_id AS session_id\n\t\t\t\t FROM memory_items\n\t\t\t\t WHERE ${clauses.join(\" AND \")}`,\n\t\t\t)\n\t\t\t.all(...chunk, ...filterResult.params) as Array<{ session_id: number | null }>;\n\t\tfor (const row of rows) {\n\t\t\tif (typeof row.session_id === \"number\") visibleIds.add(row.session_id);\n\t\t}\n\t}\n\treturn visibleIds;\n}\n\nfunction buildUsageVisibility(store: MemoryStore, rows: UsageRow[]): UsageVisibility {\n\tconst memoryIds = new Set<number>();\n\tconst sessionIds = new Set<number>();\n\tfor (const row of rows) {\n\t\tif (typeof row.session_id === \"number\") sessionIds.add(row.session_id);\n\t\tfor (const key of MEMORY_ID_METADATA_KEYS) {\n\t\t\tfor (const memoryId of metadataMemoryIds(row.metadata_json?.[key])) {\n\t\t\t\tmemoryIds.add(memoryId);\n\t\t\t}\n\t\t}\n\t}\n\treturn {\n\t\tvisibleMemoryIds: visibleMemoryIdSet(store, memoryIds),\n\t\tvisibleSessionIds: visibleSessionIdSet(store, sessionIds),\n\t};\n}\n\nfunction usageRowVisible(row: UsageRow, visibility: UsageVisibility): boolean {\n\tconst rowSessionVisible =\n\t\trow.session_id == null || visibility.visibleSessionIds.has(row.session_id);\n\tconst packItemIds = row.metadata_json?.pack_item_ids;\n\tif (Array.isArray(packItemIds)) {\n\t\tif (packItemIds.length === 0) {\n\t\t\treturn row.session_id != null && visibility.visibleSessionIds.has(row.session_id);\n\t\t}\n\t\treturn (\n\t\t\trowSessionVisible &&\n\t\t\tmetadataMemoryIds(packItemIds).some((memoryId) => visibility.visibleMemoryIds.has(memoryId))\n\t\t);\n\t}\n\treturn row.session_id != null && visibility.visibleSessionIds.has(row.session_id);\n}\n\nfunction sanitizePackUsageMetadata(\n\tmetadata: Record<string, unknown> | null,\n\tvisibility: UsageVisibility,\n): Record<string, unknown> | null {\n\tif (!metadata) return null;\n\tconst sanitized = { ...metadata };\n\tfor (const key of MEMORY_ID_METADATA_KEYS) {\n\t\tif (Array.isArray(sanitized[key])) {\n\t\t\tsanitized[key] = metadataMemoryIds(sanitized[key]).filter((memoryId) =>\n\t\t\t\tvisibility.visibleMemoryIds.has(memoryId),\n\t\t\t);\n\t\t}\n\t}\n\treturn sanitized;\n}\n\ntype UsageAggregateRow = {\n\tevent: string;\n\tcount: number;\n\ttokens_read: number;\n\ttokens_written: number;\n\ttokens_saved: number;\n};\n\n/**\n * Convert the neutral core aggregate rows into the wire shape for /api/usage\n * (ApiUsageEventSummary: total_tokens_* names), sorted by event name ASC to\n * match the route's historical ordering.\n */\nfunction mapAggregateEvents(rows: UsageAggregateRow[]): Record<string, unknown>[] {\n\treturn rows\n\t\t.map((row) => ({\n\t\t\tevent: row.event,\n\t\t\ttotal_tokens_read: row.tokens_read,\n\t\t\ttotal_tokens_written: row.tokens_written,\n\t\t\ttotal_tokens_saved: row.tokens_saved,\n\t\t\tcount: row.count,\n\t\t}))\n\t\t.sort((a, b) => a.event.localeCompare(b.event));\n}\n\n/**\n * Sum the neutral core aggregate rows into the ApiUsageTotals wire shape.\n */\nfunction totalsFromAggregate(rows: UsageAggregateRow[]): {\n\ttokens_read: number;\n\ttokens_written: number;\n\ttokens_saved: number;\n\tcount: number;\n} {\n\treturn rows.reduce(\n\t\t(acc, row) => ({\n\t\t\ttokens_read: acc.tokens_read + row.tokens_read,\n\t\t\ttokens_written: acc.tokens_written + row.tokens_written,\n\t\t\ttokens_saved: acc.tokens_saved + row.tokens_saved,\n\t\t\tcount: acc.count + row.count,\n\t\t}),\n\t\t{ tokens_read: 0, tokens_written: 0, tokens_saved: 0, count: 0 },\n\t);\n}\n\ntype UsagePayload = Record<string, unknown>;\n\ninterface UsageCacheEntry {\n\tpayload: UsagePayload;\n\texpiresAtMs: number;\n}\n\n/**\n * Short-lived cache for the computed /api/usage payload.\n *\n * The health dot polls /api/usage on every 5s refresh regardless of the\n * active tab. The token/event totals come from indexed SQL aggregates and the\n * recent-pack window runs scope-visibility resolution over its bounded set, so\n * each miss is cheap — but the totals are cumulative dashboard figures where a\n * few seconds of staleness is acceptable, so caching still collapses the\n * repeated recompute on the polling loop. Keyed by db path + scope identity +\n * project filter so distinct stores/projects never share an entry.\n */\nconst usagePayloadCache = new Map<string, UsageCacheEntry>();\nconst USAGE_PAYLOAD_CACHE_MS = 10_000;\n\n/**\n * Hard cap on cached usage payloads. The cache key folds in the arbitrary\n * `?project=` filter and a scope-visibility fingerprint that becomes\n * per-request-unique on the error/bypass path, so without a bound the map\n * would grow without limit in a long-running viewer. The cap is far above the\n * realistic working set (a handful of projects times one or two scope\n * generations), so legitimate hits are never evicted under normal load.\n */\nconst USAGE_PAYLOAD_CACHE_MAX_ENTRIES = 256;\n\n/**\n * Sweep expired entries and enforce the size cap before inserting a new one.\n *\n * Mirrors the lazy-sweep approach in request-rate-limit.ts: eviction is\n * piggybacked on writes rather than run on a timer, so an idle viewer does no\n * background work. Expired entries (those past `expiresAtMs`) are always\n * dropped; if the map is still at capacity afterward — e.g. a burst of\n * distinct, still-live bypass keys — the oldest-expiring entries are evicted\n * to make room. This never changes hit/miss semantics for a live entry: the\n * caller still re-checks `expiresAtMs` on read, and only already-expired or\n * over-cap entries are removed here.\n */\nfunction sweepUsagePayloadCache(cache: Map<string, UsageCacheEntry>, nowMs: number): void {\n\tfor (const [key, entry] of cache) {\n\t\tif (entry.expiresAtMs <= nowMs) cache.delete(key);\n\t}\n\tif (cache.size < USAGE_PAYLOAD_CACHE_MAX_ENTRIES) return;\n\t// Leave room for the entry about to be inserted by evicting down to one\n\t// below the cap. Drop the soonest-to-expire entries first.\n\tconst byExpiry = [...cache.entries()].sort((a, b) => a[1].expiresAtMs - b[1].expiresAtMs);\n\tlet overflow = cache.size - USAGE_PAYLOAD_CACHE_MAX_ENTRIES + 1;\n\tfor (const [key] of byExpiry) {\n\t\tif (overflow <= 0) break;\n\t\tcache.delete(key);\n\t\toverflow -= 1;\n\t}\n}\n\n/**\n * Cheap fingerprint of the state that drives scope visibility\n * (`scope_memberships` / `replication_scopes`). Folding this into the usage\n * cache key ensures a membership/scope status change — e.g. a revocation —\n * invalidates any cached payload immediately instead of letting a device keep\n * reading a scope it can no longer see for up to the TTL. These tables are\n * small, so the aggregate is negligible next to the usage_events scan the\n * cache exists to avoid. Fails safe: any error forces a unique value so the\n * request bypasses the cache and recomputes visibility from scratch.\n */\nfunction scopeVisibilityGeneration(store: MemoryStore): string {\n\ttry {\n\t\tconst row = store.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT\n\t\t\t\t\t(SELECT COUNT(*) FROM scope_memberships) AS m_count,\n\t\t\t\t\t(SELECT COUNT(*) FROM scope_memberships WHERE status = 'active') AS m_active,\n\t\t\t\t\t(SELECT COALESCE(MAX(updated_at), '') FROM scope_memberships) AS m_updated,\n\t\t\t\t\t(SELECT COALESCE(MAX(membership_epoch), 0) FROM scope_memberships) AS m_epoch,\n\t\t\t\t\t(SELECT COUNT(*) FROM replication_scopes) AS s_count,\n\t\t\t\t\t(SELECT COUNT(*) FROM replication_scopes WHERE status = 'active') AS s_active,\n\t\t\t\t\t(SELECT COALESCE(MAX(updated_at), '') FROM replication_scopes) AS s_updated`,\n\t\t\t)\n\t\t\t.get() as Record<string, unknown> | undefined;\n\t\tif (!row) return \"no-scope-state\";\n\t\treturn [\n\t\t\trow.m_count,\n\t\t\trow.m_active,\n\t\t\trow.m_updated,\n\t\t\trow.m_epoch,\n\t\t\trow.s_count,\n\t\t\trow.s_active,\n\t\t\trow.s_updated,\n\t\t].join(\":\");\n\t} catch {\n\t\t// Fail safe: bypass the cache rather than risk serving a payload\n\t\t// computed under stale visibility rules.\n\t\treturn `bypass-${Date.now()}-${Math.random()}`;\n\t}\n}\n\nfunction usageCacheKey(store: MemoryStore, projectFilter: string | null): string {\n\tconst visibilityGeneration = scopeVisibilityGeneration(store);\n\treturn `${store.dbPath}|${store.actorId}|${store.deviceId}|${projectFilter ?? \"\"}|${visibilityGeneration}`;\n}\n\n/**\n * Create stats routes. The store factory is called per-request to get a\n * fresh connection (matching the Python viewer pattern).\n */\nexport function statsRoutes(getStore: () => MemoryStore) {\n\tconst app = new Hono();\n\n\tconst parseMetadataJson = (value: unknown): Record<string, unknown> | null => {\n\t\tif (typeof value !== \"string\" || !value.trim()) return null;\n\t\ttry {\n\t\t\treturn JSON.parse(value) as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t};\n\n\t// Keep completed jobs visible in /api/stats for a short window after\n\t// finished_at so the health UI has a chance to render success confirmation\n\t// for fast-completing backfills (often <1s). Failed jobs stay indefinitely.\n\tconst RECENTLY_COMPLETED_WINDOW_MS = 120_000;\n\n\tapp.get(\"/api/stats\", (c) => {\n\t\tconst store = getStore();\n\t\tconst jobs = listMaintenanceJobs(store.db);\n\t\tconst now = Date.now();\n\t\tconst surfacedJobs = sortActiveMaintenanceJobs(\n\t\t\tjobs.filter((job) => {\n\t\t\t\tif (job.status === \"pending\" || job.status === \"running\" || job.status === \"failed\") {\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (job.status === \"completed\" && job.finished_at) {\n\t\t\t\t\tconst finished = Date.parse(job.finished_at);\n\t\t\t\t\tif (Number.isFinite(finished) && now - finished <= RECENTLY_COMPLETED_WINDOW_MS) {\n\t\t\t\t\t\treturn true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn false;\n\t\t\t}),\n\t\t).map((job) => ({\n\t\t\tkind: job.kind,\n\t\t\ttitle: job.title,\n\t\t\tstatus: job.status,\n\t\t\tmessage: job.message,\n\t\t\tprogress: job.progress,\n\t\t\tfinished_at: job.finished_at,\n\t\t\terror: job.error,\n\t\t}));\n\t\treturn c.json({\n\t\t\t...healthStats(store),\n\t\t\tviewer_pid: process.pid,\n\t\t\tmaintenance_jobs: surfacedJobs,\n\t\t});\n\t});\n\n\tapp.get(\"/api/runtime\", (c) => {\n\t\treturn c.json({\n\t\t\tversion: VERSION,\n\t\t});\n\t});\n\n\tapp.get(\"/api/usage\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst projectFilter = c.req.query(\"project\") || null;\n\t\t\tconst cacheKey = usageCacheKey(store, projectFilter);\n\t\t\tconst nowMs = Date.now();\n\t\t\tconst cached = usagePayloadCache.get(cacheKey);\n\t\t\tif (cached && nowMs < cached.expiresAtMs) {\n\t\t\t\treturn c.json(cached.payload);\n\t\t\t}\n\n\t\t\t// Token/event aggregates are unfiltered SQL GROUP BYs (matching\n\t\t\t// store.stats()), so they never load the full usage_events table\n\t\t\t// into JS. Only the small surfaced recent_packs window below keeps\n\t\t\t// per-row scope visibility + metadata sanitization.\n\t\t\tconst globalAggregate = store.usageAggregate();\n\t\t\tconst eventsGlobal = mapAggregateEvents(globalAggregate);\n\t\t\tconst totalsGlobal = totalsFromAggregate(globalAggregate);\n\t\t\tconst filteredAggregate = projectFilter ? store.usageAggregate(projectFilter) : null;\n\t\t\tconst eventsFiltered = filteredAggregate ? mapAggregateEvents(filteredAggregate) : null;\n\t\t\tconst totalsFiltered = filteredAggregate ? totalsFromAggregate(filteredAggregate) : null;\n\n\t\t\t// recent_packs candidate window. Over-fetch the most-recent pack\n\t\t\t// events (20x the 10 we surface) so that, in the common case where a\n\t\t\t// device sees most of its own packs, 10 *visible* packs survive the\n\t\t\t// scope filter below without ever scanning the whole table.\n\t\t\t// Tradeoff vs. the old full-scan-then-slice: if MORE than\n\t\t\t// (LIMIT - 10) of the newest packs are non-visible, fewer than 10\n\t\t\t// surface, and a visible pack older than the newest 200 is not\n\t\t\t// shown at all. That only bites a heavily-shared DB whose recent\n\t\t\t// activity is dominated by other scopes; for an activity widget the\n\t\t\t// bounded recompute on a 5s poll is the right call.\n\t\t\tconst RECENT_PACK_SCAN_LIMIT = 200;\n\t\t\tconst loadRecentPackWindow = (project?: string | null): UsageRow[] => {\n\t\t\t\tconst rows = project\n\t\t\t\t\t? (store.db\n\t\t\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\t\t`SELECT usage_events.id, usage_events.session_id, usage_events.event,\n\t\t\t\t\t\t\t\t\tusage_events.tokens_read, usage_events.tokens_written, usage_events.tokens_saved,\n\t\t\t\t\t\t\t\t\tusage_events.created_at, usage_events.metadata_json\n\t\t\t\t\t\t\t\t FROM usage_events\n\t\t\t\t\t\t\t\t JOIN sessions ON sessions.id = usage_events.session_id\n\t\t\t\t\t\t\t\t WHERE sessions.project = ? AND usage_events.event = 'pack'\n\t\t\t\t\t\t\t\t ORDER BY usage_events.created_at DESC\n\t\t\t\t\t\t\t\t LIMIT ?`,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.all(project, RECENT_PACK_SCAN_LIMIT) as Record<string, unknown>[])\n\t\t\t\t\t: (store.db\n\t\t\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\t\t`SELECT id, session_id, event, tokens_read, tokens_written, tokens_saved,\n\t\t\t\t\t\t\t\t\tcreated_at, metadata_json\n\t\t\t\t\t\t\t\t FROM usage_events\n\t\t\t\t\t\t\t\t WHERE event = 'pack'\n\t\t\t\t\t\t\t\t ORDER BY created_at DESC\n\t\t\t\t\t\t\t\t LIMIT ?`,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.all(RECENT_PACK_SCAN_LIMIT) as Record<string, unknown>[]);\n\t\t\t\treturn rows.map((row) => toUsageRow(row, parseMetadataJson(row.metadata_json)));\n\t\t\t};\n\t\t\tconst recentWindow = loadRecentPackWindow(projectFilter);\n\t\t\tconst recentVisibility = buildUsageVisibility(store, recentWindow);\n\t\t\tconst recentPacks = recentWindow\n\t\t\t\t.filter((row) => usageRowVisible(row, recentVisibility))\n\t\t\t\t.slice(0, 10)\n\t\t\t\t.map((row) => ({\n\t\t\t\t\t...row,\n\t\t\t\t\tmetadata_json: sanitizePackUsageMetadata(row.metadata_json, recentVisibility),\n\t\t\t\t}));\n\n\t\t\tconst payload: UsagePayload = {\n\t\t\t\tproject: projectFilter,\n\t\t\t\tevents: projectFilter ? eventsFiltered : eventsGlobal,\n\t\t\t\ttotals: projectFilter ? totalsFiltered : totalsGlobal,\n\t\t\t\tevents_global: eventsGlobal,\n\t\t\t\ttotals_global: totalsGlobal,\n\t\t\t\tevents_filtered: eventsFiltered,\n\t\t\t\ttotals_filtered: totalsFiltered,\n\t\t\t\trecent_packs: recentPacks,\n\t\t\t};\n\t\t\tconst setAtMs = Date.now();\n\t\t\tsweepUsagePayloadCache(usagePayloadCache, setAtMs);\n\t\t\tusagePayloadCache.set(cacheKey, {\n\t\t\t\tpayload,\n\t\t\t\texpiresAtMs: setAtMs + USAGE_PAYLOAD_CACHE_MS,\n\t\t\t});\n\t\t\treturn c.json(payload);\n\t\t}\n\t});\n\n\treturn app;\n}\n\nfunction healthStats(store: MemoryStore) {\n\treturn {\n\t\t...store.stats(),\n\t\tautomatic_recall: automaticRecallHealth(store.db, {\n\t\t\tactorId: store.actorId,\n\t\t\tdeviceId: store.deviceId,\n\t\t}),\n\t};\n}\n\n/**\n * Internals exposed for unit tests of the usage-cache eviction. Not part of the\n * route's public surface; consumers should go through the HTTP handlers.\n */\nexport const __usageCacheTestHooks = {\n\tcache: usagePayloadCache,\n\tsweep: sweepUsagePayloadCache,\n\tmaxEntries: USAGE_PAYLOAD_CACHE_MAX_ENTRIES,\n\tttlMs: USAGE_PAYLOAD_CACHE_MS,\n};\n","import type {\n\tLegacyTeamSetupActivationErrorCode,\n\tLegacyTeamSetupDraftView,\n\tLegacyTeamSetupErrorReason,\n} from \"@codemem/core\";\n\nexport interface LegacyTeamSetupCandidateSummaryV1 {\n\tcandidateRef: string;\n\tdisplayName: string;\n\tstatus: \"needs_setup\" | \"in_progress\" | \"stale\" | \"ready\";\n\tdeviceCount: number;\n\tprojectCount: number;\n\tunresolvedDeviceCount: number;\n\tunresolvedProjectCount: number;\n}\n\nexport type LegacyTeamSetupPendingCandidateSummaryV1 = Omit<\n\tLegacyTeamSetupCandidateSummaryV1,\n\t\"status\"\n> & {\n\tstatus: Exclude<LegacyTeamSetupCandidateSummaryV1[\"status\"], \"ready\">;\n};\n\nexport interface LegacyTeamSetupSummaryResponseV1 {\n\tversion: 1;\n\tcandidates: LegacyTeamSetupPendingCandidateSummaryV1[];\n}\n\nexport type LegacyTeamSetupActionBlockedReasonV1 =\n\t| \"setup_incomplete\"\n\t| \"setup_unavailable\"\n\t| \"setup_completed\"\n\t| \"device_inactive\"\n\t| \"device_active\"\n\t| \"assignment_evidence_inactive\"\n\t| \"assignment_required\"\n\t| \"assignment_unavailable\"\n\t| \"decision_unresolved\"\n\t| \"mapping_unavailable\"\n\t| \"automatic_mapping\";\n\nexport type LegacyTeamSetupActionGateV1 =\n\t| { enabled: true; blockedReason: null }\n\t| { enabled: false; blockedReason: LegacyTeamSetupActionBlockedReasonV1 };\n\nexport type LegacyTeamSetupUnavailableReasonV1 = Exclude<\n\tLegacyTeamSetupActivationErrorCode,\n\t\"team_setup_projection_changed\"\n>;\n\nexport interface LegacyTeamSetupDeviceV1 {\n\tdeviceRef: string;\n\tdisplayName: string;\n\tenabled: boolean;\n\texistingIdentityRef: string | null;\n\tsuggestedIdentityRef: string | null;\n\tverifiedEvidenceKind: \"active_assignment\" | null;\n\tdecision: \"unresolved\" | \"included\" | \"excluded\" | \"removed\";\n\ttargetIdentityRef: string | null;\n\texpectation:\n\t\t| { kind: \"absent\" }\n\t\t| { kind: \"existing\"; assignmentVersion: number; identityRef: string };\n\tactions: {\n\t\tassignIdentity: LegacyTeamSetupActionGateV1;\n\t\tinclude: LegacyTeamSetupActionGateV1;\n\t\texclude: LegacyTeamSetupActionGateV1;\n\t\tremove: LegacyTeamSetupActionGateV1;\n\t\tclearDecision: LegacyTeamSetupActionGateV1;\n\t};\n}\n\nexport interface LegacyTeamSetupProjectV1 {\n\tprojectRef: string;\n\tdisplayName: string;\n\tresolution: \"unresolved\" | \"deterministic\" | \"explicit\";\n\tcanonicalProjectRef: string | null;\n\tresolvedProjectRef: string | null;\n\tmappingChoices: Array<{ resolvedProjectRef: string; displayName: string }>;\n\tactions: { map: LegacyTeamSetupActionGateV1 };\n}\n\nexport interface LegacyTeamSetupIdentityChoiceV1 {\n\tidentityRef: string;\n\tdisplayName: string;\n}\n\nexport interface LegacyTeamSetupViewerAccessDeltaV1 {\n\tteamChanges: Array<{\n\t\tteamRef: string;\n\t\tteamDisplayName: string;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t\tfromDeviceEligibilityMode: \"person_all_devices\" | \"reviewed_allowlist\" | null;\n\t\ttoDeviceEligibilityMode: \"reviewed_allowlist\";\n\t}>;\n\tmembershipChanges: Array<{\n\t\tteamRef: string;\n\t\tteamDisplayName: string;\n\t\tidentityRef: string;\n\t\tidentityDisplayName: string;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t}>;\n\tprojectChanges: Array<{\n\t\tprojectRef: string;\n\t\tprojectDisplayName: string;\n\t\tfromCanonicalProjectRef: string | null;\n\t\tfromResolvedProjectRef: string | null;\n\t\tfromResolvedProjectDisplayName: string | null;\n\t\ttoCanonicalProjectRef: string | null;\n\t\ttoResolvedProjectRef: string | null;\n\t\ttoResolvedProjectDisplayName: string | null;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t}>;\n\trecipientChanges: Array<{\n\t\tcanonicalProjectRef: string;\n\t\tcanonicalProjectDisplayName: string;\n\t\tcanonicalProjectKind: \"project\" | \"legacy_default_sharing\";\n\t\trecipientKind: \"team\";\n\t\trecipientRef: string;\n\t\trecipientDisplayName: string;\n\t\tchange: \"add\" | \"update\" | \"remove\";\n\t}>;\n\tdeviceAccessChanges: Array<{\n\t\tcanonicalProjectRef: string;\n\t\tcanonicalProjectDisplayName: string;\n\t\tcanonicalProjectKind: \"project\" | \"legacy_default_sharing\";\n\t\tdeviceRef: string;\n\t\tdeviceDisplayName: string;\n\t\tchange: \"add\" | \"remove\";\n\t}>;\n}\n\ninterface LegacyTeamSetupViewBaseV1 {\n\tversion: 1;\n\tcandidate: LegacyTeamSetupCandidateSummaryV1;\n\tattemptId: string;\n\tunresolvedDeviceCount: number;\n\tunresolvedProjectCount: number;\n\tdevices: LegacyTeamSetupDeviceV1[];\n\tprojects: LegacyTeamSetupProjectV1[];\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n}\n\nexport type LegacyTeamSetupViewV1 =\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"reviewing\";\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: true; blockedReason: null };\n\t\t\t\tfinish: { enabled: false; blockedReason: \"setup_incomplete\" };\n\t\t\t};\n\t })\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"ready_to_finish\";\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: true; blockedReason: null };\n\t\t\t\tfinish: { enabled: true; blockedReason: null };\n\t\t\t};\n\t\t\tfinishDigest: string;\n\t\t\taccessDeltaDigest: string;\n\t\t\tviewerAccessDeltaDigest: string;\n\t\t\taccessDelta: LegacyTeamSetupViewerAccessDeltaV1;\n\t })\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"unavailable\";\n\t\t\tunavailableReason: LegacyTeamSetupUnavailableReasonV1;\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: true; blockedReason: null };\n\t\t\t\tfinish: { enabled: false; blockedReason: \"setup_unavailable\" };\n\t\t\t};\n\t })\n\t| (LegacyTeamSetupViewBaseV1 & {\n\t\t\tstate: \"completed\";\n\t\t\tactions: {\n\t\t\t\trefresh: { enabled: false; blockedReason: \"setup_completed\" };\n\t\t\t\tfinish: { enabled: false; blockedReason: \"setup_completed\" };\n\t\t\t};\n\t });\n\nexport type LegacyTeamSetupDetailResponseV1 = LegacyTeamSetupViewV1;\nexport type LegacyTeamSetupMutationResponseV1 = LegacyTeamSetupViewV1;\n\nexport interface LegacyTeamSetupErrorResponseV1 {\n\terror: LegacyTeamSetupActivationErrorCode;\n\treason?: LegacyTeamSetupErrorReason;\n}\n\nexport interface LegacyTeamSetupFinishResponseV1 {\n\tversion: 1;\n\tstatus: \"completed\";\n\tteamRef: string;\n\tattemptId: string;\n\taccessDeltaDigest: string;\n\tcompletedAt: string;\n}\n\ntype DeviceData = Omit<LegacyTeamSetupDeviceV1, \"actions\">;\ntype ProjectData = Omit<LegacyTeamSetupProjectV1, \"actions\">;\n\ninterface ProjectViewInput {\n\tversion: 1;\n\tcandidate: LegacyTeamSetupCandidateSummaryV1;\n\tdraftState: LegacyTeamSetupDraftView[\"state\"];\n\tattemptId: string;\n\tunresolvedDeviceCount: number;\n\tunresolvedProjectCount: number;\n\tdevices: DeviceData[];\n\tprojects: ProjectData[];\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n\tunavailableReason: LegacyTeamSetupUnavailableReasonV1 | null;\n\tpreview: null | {\n\t\tfinishDigest: string;\n\t\taccessDeltaDigest: string;\n\t\tviewerAccessDeltaDigest: string;\n\t\taccessDelta: LegacyTeamSetupViewerAccessDeltaV1;\n\t};\n}\n\nconst enabled = { enabled: true, blockedReason: null } as const;\n\nfunction blocked<const Reason extends LegacyTeamSetupActionBlockedReasonV1>(\n\treason: Reason,\n): { enabled: false; blockedReason: Reason } {\n\treturn { enabled: false, blockedReason: reason };\n}\n\nfunction deviceActions(\n\tdevice: DeviceData,\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[],\n\tstate: LegacyTeamSetupViewV1[\"state\"],\n): LegacyTeamSetupDeviceV1[\"actions\"] {\n\tif (state === \"completed\") return disabledDeviceActions(\"setup_completed\");\n\tif (state === \"unavailable\") return disabledDeviceActions(\"setup_unavailable\");\n\tconst assignmentEvidenceInactive =\n\t\tdevice.expectation.kind === \"existing\" && device.verifiedEvidenceKind !== \"active_assignment\";\n\tconst targetAvailable = identityChoices.some(\n\t\t(identity) => identity.identityRef === device.targetIdentityRef,\n\t);\n\treturn {\n\t\tassignIdentity: !device.enabled\n\t\t\t? blocked(\"device_inactive\")\n\t\t\t: assignmentEvidenceInactive\n\t\t\t\t? blocked(\"assignment_evidence_inactive\")\n\t\t\t\t: identityChoices.length === 0\n\t\t\t\t\t? blocked(\"assignment_unavailable\")\n\t\t\t\t\t: enabled,\n\t\tinclude: !device.enabled\n\t\t\t? blocked(\"device_inactive\")\n\t\t\t: assignmentEvidenceInactive\n\t\t\t\t? blocked(\"assignment_evidence_inactive\")\n\t\t\t\t: !device.targetIdentityRef\n\t\t\t\t\t? blocked(\"assignment_required\")\n\t\t\t\t\t: !targetAvailable\n\t\t\t\t\t\t? blocked(\"assignment_unavailable\")\n\t\t\t\t\t\t: enabled,\n\t\texclude: device.enabled ? enabled : blocked(\"device_inactive\"),\n\t\tremove: device.enabled ? blocked(\"device_active\") : enabled,\n\t\tclearDecision: device.decision === \"unresolved\" ? blocked(\"decision_unresolved\") : enabled,\n\t};\n}\n\nfunction disabledDeviceActions(\n\treason: \"setup_completed\" | \"setup_unavailable\",\n): LegacyTeamSetupDeviceV1[\"actions\"] {\n\tconst gate = blocked(reason);\n\treturn {\n\t\tassignIdentity: gate,\n\t\tinclude: gate,\n\t\texclude: gate,\n\t\tremove: gate,\n\t\tclearDecision: gate,\n\t};\n}\n\nfunction projectActions(\n\tproject: ProjectData,\n\tstate: LegacyTeamSetupViewV1[\"state\"],\n): LegacyTeamSetupProjectV1[\"actions\"] {\n\tif (state === \"completed\") return { map: blocked(\"setup_completed\") };\n\tif (state === \"unavailable\") return { map: blocked(\"setup_unavailable\") };\n\treturn {\n\t\tmap:\n\t\t\tproject.resolution === \"deterministic\"\n\t\t\t\t? blocked(\"automatic_mapping\")\n\t\t\t\t: project.mappingChoices.length === 0\n\t\t\t\t\t? blocked(\"mapping_unavailable\")\n\t\t\t\t\t: enabled,\n\t};\n}\n\nfunction viewState(input: ProjectViewInput): LegacyTeamSetupViewV1[\"state\"] {\n\tif (input.draftState === \"completed\") return \"completed\";\n\tif (input.draftState === \"stale\" || input.unavailableReason) return \"unavailable\";\n\tif (input.preview) return \"ready_to_finish\";\n\treturn \"reviewing\";\n}\n\nexport function projectLegacyTeamSetupView(input: ProjectViewInput): LegacyTeamSetupViewV1 {\n\tconst state = viewState(input);\n\tconst base = {\n\t\tversion: input.version,\n\t\tcandidate: input.candidate,\n\t\tattemptId: input.attemptId,\n\t\tunresolvedDeviceCount: input.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: input.unresolvedProjectCount,\n\t\tdevices: input.devices.map((device) => ({\n\t\t\t...device,\n\t\t\tactions: deviceActions(device, input.identityChoices, state),\n\t\t})),\n\t\tprojects: input.projects.map((project) => ({\n\t\t\t...project,\n\t\t\tactions: projectActions(project, state),\n\t\t})),\n\t\tidentityChoices: input.identityChoices,\n\t};\n\tif (state === \"completed\") {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstate,\n\t\t\tactions: {\n\t\t\t\trefresh: blocked(\"setup_completed\"),\n\t\t\t\tfinish: blocked(\"setup_completed\"),\n\t\t\t},\n\t\t};\n\t}\n\tif (state === \"unavailable\") {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstate,\n\t\t\tunavailableReason: input.unavailableReason ?? \"team_setup_confirmation_stale\",\n\t\t\tactions: { refresh: enabled, finish: blocked(\"setup_unavailable\") },\n\t\t};\n\t}\n\tif (state === \"ready_to_finish\" && input.preview) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstate,\n\t\t\tactions: { refresh: enabled, finish: enabled },\n\t\t\t...input.preview,\n\t\t};\n\t}\n\treturn {\n\t\t...base,\n\t\tstate: \"reviewing\",\n\t\tactions: { refresh: enabled, finish: blocked(\"setup_incomplete\") },\n\t};\n}\n","import type {\n\tCoordinatorLegacyTeamCompletionManifestV1,\n\tCoordinatorLegacyTeamCompletionRecord,\n\tLegacyTeamCandidateView,\n\tLegacyTeamConfiguredGroupSnapshot,\n\tLegacyTeamSetupAccessDeltaV1,\n\tLegacyTeamSetupActivationErrorCode,\n\tLegacyTeamSetupActivationResultV1,\n\tLegacyTeamSetupDraftView,\n\tLegacyTeamSetupErrorReason,\n\tMemoryStore,\n} from \"@codemem/core\";\nimport {\n\tapplyLegacyTeamSetupCompletionManifest,\n\tapplyLegacyTeamSetupCompletionManifestAndReturnActivation,\n\tareLegacyTeamSetupCompletionPolicyFactsAdditivelyCompatible,\n\tbuildBaseUrl,\n\tcanonicalCoordinatorLegacyTeamCompletionManifestJson,\n\tclaimRecipientPolicyActorMutations,\n\tclaimRecipientPolicyPublicationMutation,\n\tclearLegacyTeamSetupDeviceDecision,\n\tcontainLegacyTeamSetupCompletionConflict,\n\tcoordinatorCreateLegacyTeamCompletionAction,\n\tcoordinatorGetLegacyTeamCompletionAction,\n\tcoordinatorListDevicesAction,\n\tcoordinatorListGroupsAction,\n\tcoordinatorListLegacyTeamCompletionsAction,\n\tderiveLegacyTeamSetupCompletionManifest,\n\tdeterministicPolicyTeamId,\n\tdiscoverLegacyTeamCandidates,\n\tfingerprintPublicKey,\n\tgetLegacyTeamSetupDraft,\n\tinspectFreshLegacyTeamSetupActivation,\n\tinspectLegacyTeamSetupActivation,\n\tisLegacyTeamCandidateSelectable,\n\tisLegacyTeamSetupProjectMappingIdentity,\n\tLegacyTeamSetupAdditiveConvergenceError,\n\tLegacyTeamSetupRosterCapacityError,\n\tlegacyTeamCandidateId,\n\tlegacyTeamCandidateProjectInventory,\n\tlegacyTeamCanonicalProjectRef,\n\tlegacyTeamDeviceRef,\n\tlegacyTeamResolvedProjectRef,\n\tlegacyTeamSetupApiErrorCode,\n\tlistProjectScopeCandidates,\n\tpreviewLegacyTeamSetupActivation,\n\tRemoteCoordinatorRequestError,\n\treadCoordinatorSyncConfig,\n\trecipientPolicyDigest,\n\treconstructLegacyTeamSetupCompletionManifest,\n\trefreshLegacyTeamCandidate,\n\treplayLegacyTeamSetupActivation,\n\trequireLegacyTeamSetupAccessDeltaWithinLimit,\n\tserializeRecipientPolicyCoordinatorGroupMutation,\n\tserializeRecipientPolicyPublicationMutation,\n\tserializeRecipientPolicyTeamMutation,\n\tsetLegacyTeamSetupDeviceAssignment,\n\tsetLegacyTeamSetupDeviceDecision,\n\tsetLegacyTeamSetupProjectMapping,\n\tvalidateLegacyTeamSetupCompletionManifest,\n\tvalidateLegacyTeamSetupCompletionManifestBinding,\n} from \"@codemem/core\";\nimport { type Context, Hono } from \"hono\";\nimport {\n\ttype LegacyTeamSetupCandidateSummaryV1,\n\ttype LegacyTeamSetupDetailResponseV1,\n\ttype LegacyTeamSetupDeviceV1,\n\ttype LegacyTeamSetupFinishResponseV1,\n\ttype LegacyTeamSetupIdentityChoiceV1,\n\ttype LegacyTeamSetupPendingCandidateSummaryV1,\n\ttype LegacyTeamSetupProjectV1,\n\ttype LegacyTeamSetupSummaryResponseV1,\n\ttype LegacyTeamSetupUnavailableReasonV1,\n\ttype LegacyTeamSetupViewerAccessDeltaV1,\n\tprojectLegacyTeamSetupView,\n} from \"./team-setup-view.js\";\n\nexport type {\n\tLegacyTeamSetupActionBlockedReasonV1,\n\tLegacyTeamSetupActionGateV1,\n\tLegacyTeamSetupCandidateSummaryV1,\n\tLegacyTeamSetupDetailResponseV1,\n\tLegacyTeamSetupDeviceV1,\n\tLegacyTeamSetupErrorResponseV1,\n\tLegacyTeamSetupFinishResponseV1,\n\tLegacyTeamSetupIdentityChoiceV1,\n\tLegacyTeamSetupMutationResponseV1,\n\tLegacyTeamSetupPendingCandidateSummaryV1,\n\tLegacyTeamSetupProjectV1,\n\tLegacyTeamSetupSummaryResponseV1,\n\tLegacyTeamSetupUnavailableReasonV1,\n\tLegacyTeamSetupViewerAccessDeltaV1,\n\tLegacyTeamSetupViewV1,\n} from \"./team-setup-view.js\";\n\nconst TEAM_SETUP_VERSION = 1 as const;\nconst MAX_CONFIGURED_GROUPS = 25;\nconst MAX_SCOPE_EVIDENCE_COORDINATORS = 100;\nconst MAX_DEVICES = 500;\nconst MAX_PROJECTS = 500;\nconst MAX_IDENTITY_CHOICES = 500;\nconst MAX_COMPLETED_IDENTITY_CHOICES = MAX_DEVICES * 4;\nconst MAX_PROJECT_MAPPING_CHOICES = 500;\nconst MAX_TOTAL_PROJECT_MAPPING_CHOICES = 10_000;\nconst MAX_PROJECT_MAPPING_SCAN_ROWS = 10_000;\nconst MAX_PROJECT_MAPPING_METADATA_ROWS = 10_000;\nconst MAX_MUTATION_BODY_BYTES = 8_192;\nconst SUMMARY_SNAPSHOT_CACHE_TTL_MS = 30_000;\nconst COORDINATOR_ROSTER_READ_BUDGET_MS = 60_000;\nexport const TEAM_SETUP_ROUTE_PREFIX = \"/api/sync/team-setup/v1\";\nconst CANDIDATE_REF_PATTERN = /^legacy-team-candidate:[0-9a-f]{32}$/u;\nconst DEVICE_REF_PATTERN = /^legacy-team-device-ref-v1:[0-9a-f]{64}$/u;\nconst PROJECT_REF_PATTERN = /^legacy-team-project-ref-v1:[0-9a-f]{64}$/u;\nconst IDENTITY_REF_PATTERN = /^legacy-team-viewer-identity-ref-v1:[0-9a-f]{64}$/u;\nconst RESOLVED_PROJECT_REF_PATTERN = /^legacy-team-resolved-project-ref-v1:[0-9a-f]{64}$/u;\nconst ATTEMPT_ID_PATTERN = /^legacy-team-attempt:[0-9a-f-]{36}$/u;\nconst FINISH_DIGEST_PATTERN = /^legacy-team-activation-finish-v1:[0-9a-f]{64}$/u;\nconst ACCESS_DELTA_DIGEST_PATTERN = /^legacy-team-access-delta:[0-9a-f]{64}$/u;\nconst VIEWER_ACCESS_DELTA_DIGEST_PATTERN = /^legacy-team-viewer-access-delta-v1:[0-9a-f]{64}$/u;\nconst activeCandidateMutations = new WeakMap<MemoryStore[\"db\"], Map<string, Promise<void>>>();\n\nfunction claimCandidateMutation(db: MemoryStore[\"db\"], candidateRef: string): (() => void) | null {\n\tlet active = activeCandidateMutations.get(db);\n\tif (!active) {\n\t\tactive = new Map();\n\t\tactiveCandidateMutations.set(db, active);\n\t}\n\tif (active.has(candidateRef)) return null;\n\tlet settle: () => void = () => undefined;\n\tconst settled = new Promise<void>((resolve) => {\n\t\tsettle = resolve;\n\t});\n\tactive.set(candidateRef, settled);\n\tlet released = false;\n\treturn () => {\n\t\tif (released) return;\n\t\treleased = true;\n\t\tactive?.delete(candidateRef);\n\t\tsettle();\n\t};\n}\n\n/** Resolves once the current holder of the candidate claim (if any) releases it. */\nfunction candidateMutationSettled(db: MemoryStore[\"db\"], candidateRef: string): Promise<void> {\n\treturn activeCandidateMutations.get(db)?.get(candidateRef) ?? Promise.resolve();\n}\n\nasync function runCandidateMutation<T>(\n\tdb: MemoryStore[\"db\"],\n\tcandidateRef: string,\n\toperation: () => Promise<T>,\n): Promise<boolean> {\n\tconst release = claimCandidateMutation(db, candidateRef);\n\tif (!release) return false;\n\ttry {\n\t\tawait operation();\n\t\treturn true;\n\t} finally {\n\t\trelease();\n\t}\n}\n\ninterface LegacyTeamConfiguredGroupSnapshotLoadOptions {\n\tcandidateRef?: string;\n\tdeadlineMs?: number;\n}\n\nexport interface LegacyTeamCandidateGroupDescriptor {\n\tgroupId: string;\n\tcoordinatorId: string;\n}\n\nexport type LegacyTeamConfiguredGroupSnapshotLoader = (\n\toptions?: LegacyTeamConfiguredGroupSnapshotLoadOptions,\n) => Promise<LegacyTeamConfiguredGroupSnapshot[]>;\n\nexport interface TeamSetupRoutesOptions {\n\tgetStore: () => MemoryStore;\n\tloadLegacyTeamConfiguredGroupSnapshots?: LegacyTeamConfiguredGroupSnapshotLoader;\n\tsnapshotLoaderDependencies?: LegacyTeamSnapshotLoaderDependencies;\n\tcompletionDependencies?: LegacyTeamCompletionDependencies | null;\n\treadCoordinatorConfig?: typeof readCoordinatorSyncConfig;\n\tregisterSummaryInvalidator?: (invalidate: () => void) => void;\n}\n\nexport interface LegacyTeamCompletionDependencies {\n\tcreate: typeof coordinatorCreateLegacyTeamCompletionAction;\n\tget?: typeof coordinatorGetLegacyTeamCompletionAction;\n\tlist: typeof coordinatorListLegacyTeamCompletionsAction;\n}\n\nconst defaultCompletionDependencies: LegacyTeamCompletionDependencies = {\n\tcreate: coordinatorCreateLegacyTeamCompletionAction,\n\tget: coordinatorGetLegacyTeamCompletionAction,\n\tlist: coordinatorListLegacyTeamCompletionsAction,\n};\n\ninterface LegacyTeamSnapshotLoaderDependencies {\n\treadConfig: typeof readCoordinatorSyncConfig;\n\tlistGroups: typeof coordinatorListGroupsAction;\n\tlistDevices: typeof coordinatorListDevicesAction;\n}\n\nconst defaultSnapshotLoaderDependencies: LegacyTeamSnapshotLoaderDependencies = {\n\treadConfig: readCoordinatorSyncConfig,\n\tlistGroups: coordinatorListGroupsAction,\n\tlistDevices: coordinatorListDevicesAction,\n};\n\nfunction safeCoordinatorError(): Error {\n\treturn new Error(\"team_setup_roster_unavailable\");\n}\n\nfunction isCoordinatorRosterTooLargeError(error: unknown): boolean {\n\treturn error instanceof Error && error.message === \"coordinator_response_too_large\";\n}\n\nfunction remoteCoordinatorHttpStatus(error: unknown): number | null {\n\tif (!(error instanceof Error)) return null;\n\tconst status = /Remote coordinator request failed \\((\\d{3})\\):/u.exec(error.message)?.[1];\n\treturn status ? Number(status) : null;\n}\n\nfunction isTransientCoordinatorReadError(error: unknown): boolean {\n\tif (!(error instanceof Error)) return false;\n\tconst remoteStatus = remoteCoordinatorHttpStatus(error);\n\tif (remoteStatus) return [408, 429, 500, 502, 503, 504].includes(remoteStatus);\n\treturn (\n\t\terror.name === \"TimeoutError\" ||\n\t\terror.name === \"AbortError\" ||\n\t\t/request_timeout|fetch failed|timed out|timeout/iu.test(error.message)\n\t);\n}\n\nfunction isUnsupportedCompletionQuery(error: unknown): boolean {\n\tconst status = remoteCoordinatorHttpStatus(error);\n\treturn status === 404 || status === 405;\n}\n\n/**\n * Batch completion decoding rejects the whole payload when any one record is\n * malformed or misattributed, so the failure cannot be pinned to a group.\n */\nfunction isUnattributableCompletionBatchError(error: unknown): boolean {\n\treturn (\n\t\terror instanceof Error &&\n\t\t(error.message === \"coordinator_completion_response_malformed\" ||\n\t\t\terror.message === \"coordinator_completion_group_mismatch\")\n\t);\n}\n\nasync function listCompletionRecordsPerGroup(\n\tgroupIds: readonly string[],\n\tlist: (groupIds: string[]) => Promise<CoordinatorLegacyTeamCompletionRecord[]>,\n): Promise<CoordinatorLegacyTeamCompletionRecord[]> {\n\t// A single group re-query would repeat the same undecodable payload.\n\tif (groupIds.length < 2) return [];\n\tconst records: CoordinatorLegacyTeamCompletionRecord[] = [];\n\tfor (const groupId of groupIds) {\n\t\ttry {\n\t\t\trecords.push(...(await list([groupId])));\n\t\t} catch (error) {\n\t\t\tif (!isUnattributableCompletionBatchError(error)) throw error;\n\t\t}\n\t}\n\treturn records;\n}\n\nasync function retryTransientCoordinatorRead<T>(\n\tread: (timeoutS: number) => Promise<T>,\n\tconfiguredTimeoutS: number,\n\tdeadlineMs: number,\n): Promise<T> {\n\tlet lastError: unknown;\n\tfor (let attempt = 0; attempt < 8; attempt += 1) {\n\t\tconst remainingMs = deadlineMs - Date.now();\n\t\tif (remainingMs <= 0) throw lastError ?? safeCoordinatorError();\n\t\ttry {\n\t\t\treturn await read(Math.max(0.1, Math.min(configuredTimeoutS, remainingMs / 1_000)));\n\t\t} catch (error) {\n\t\t\tlastError = error;\n\t\t\tif (!isTransientCoordinatorReadError(error) || attempt === 7) throw error;\n\t\t\tconst delayMs = Math.min(100 * 2 ** attempt, 2_000, deadlineMs - Date.now());\n\t\t\tif (delayMs <= 0) throw error;\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, delayMs));\n\t\t}\n\t}\n\tthrow lastError;\n}\n\nexport function remainingCoordinatorTimeoutS(\n\tconfiguredTimeoutS: number,\n\tdeadlineMs: number,\n\tnowMs = Date.now(),\n): number | null {\n\tconst remainingMs = deadlineMs - nowMs;\n\treturn remainingMs <= 0 ? null : Math.max(0.1, Math.min(configuredTimeoutS, remainingMs / 1_000));\n}\n\nfunction configuredGroupIds(groups: string[]): string[] {\n\tconst unique = [...new Set(groups.map((group) => group.trim()).filter(Boolean))];\n\tif (unique.length > MAX_CONFIGURED_GROUPS) throw safeCoordinatorError();\n\treturn unique;\n}\n\nexport function normalizedCoordinatorId(value: string): string | null {\n\ttry {\n\t\tconst normalized = buildBaseUrl(value);\n\t\tif (!normalized) return null;\n\t\tconst parsed = new URL(normalized);\n\t\tif (\n\t\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\t\t!parsed.host ||\n\t\t\tparsed.username ||\n\t\t\tparsed.password\n\t\t) {\n\t\t\treturn null;\n\t\t}\n\t\tconst path = parsed.pathname === \"/\" ? \"\" : parsed.pathname;\n\t\treturn `${parsed.protocol}//${parsed.host}${path}${parsed.search}`;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function legacyTeamCandidateGroupDescriptors(\n\tstore: MemoryStore | undefined,\n\tcoordinatorUrl: string,\n\tgroups: string[],\n): LegacyTeamCandidateGroupDescriptor[] {\n\tconst configuredIds = configuredGroupIds(groups);\n\tconst configuredCoordinatorId = buildBaseUrl(coordinatorUrl);\n\tconst normalizedConfiguredCoordinatorId = normalizedCoordinatorId(configuredCoordinatorId);\n\tif (!configuredCoordinatorId || !normalizedConfiguredCoordinatorId) throw safeCoordinatorError();\n\tlet scopeBackedDescriptors: LegacyTeamCandidateGroupDescriptor[] = [];\n\tif (store) {\n\t\ttry {\n\t\t\tscopeBackedDescriptors = scopeBackedGroupDescriptors(\n\t\t\t\tstore,\n\t\t\t\tnormalizedConfiguredCoordinatorId,\n\t\t\t\tMAX_CONFIGURED_GROUPS - configuredIds.length,\n\t\t\t\tconfiguredIds,\n\t\t\t);\n\t\t} catch {\n\t\t\t// Scope discovery is additive. Preserve configured coordinator candidates\n\t\t\t// when local evidence cannot be read.\n\t\t\tscopeBackedDescriptors = [];\n\t\t}\n\t}\n\treturn [\n\t\t...configuredIds.map((groupId) => ({ groupId, coordinatorId: configuredCoordinatorId })),\n\t\t...scopeBackedDescriptors,\n\t];\n}\n\nfunction scopeBackedGroupDescriptors(\n\tstore: MemoryStore,\n\tnormalizedConfiguredCoordinatorId: string,\n\tlimit: number,\n\texcludedGroupIds: string[],\n): LegacyTeamCandidateGroupDescriptor[] {\n\tif (limit <= 0) return [];\n\tconst textualCoordinatorIds = store.db\n\t\t.prepare(\n\t\t\t`SELECT DISTINCT coordinator_id FROM replication_scopes\n\t\t\t WHERE status = 'active' AND authority_type = 'coordinator'\n\t\t\t AND kind IN ('team', 'team_default', 'org', 'client')\n\t\t\t AND coordinator_id IS NOT NULL\n\t\t\t AND group_id IS NOT NULL AND TRIM(group_id) <> ''\n\t\t\t ORDER BY coordinator_id LIMIT ?`,\n\t\t)\n\t\t.pluck()\n\t\t.all(MAX_SCOPE_EVIDENCE_COORDINATORS + 1) as string[];\n\tif (textualCoordinatorIds.length > MAX_SCOPE_EVIDENCE_COORDINATORS) {\n\t\treturn [];\n\t}\n\tconst matchingTextualIds = textualCoordinatorIds.filter(\n\t\t(value) => normalizedCoordinatorId(value) === normalizedConfiguredCoordinatorId,\n\t);\n\tif (matchingTextualIds.length === 0) return [];\n\tconst coordinatorPlaceholders = matchingTextualIds.map(() => \"?\").join(\", \");\n\tconst excludedGroupClause =\n\t\texcludedGroupIds.length === 0\n\t\t\t? \"\"\n\t\t\t: `AND TRIM(group_id) NOT IN (${excludedGroupIds.map(() => \"?\").join(\", \")})`;\n\tconst groupIds = store.db\n\t\t.prepare(\n\t\t\t`SELECT DISTINCT TRIM(group_id) AS group_id FROM replication_scopes\n\t\t\t WHERE status = 'active' AND authority_type = 'coordinator'\n\t\t\t AND kind IN ('team', 'team_default', 'org', 'client')\n\t\t\t AND coordinator_id IN (${coordinatorPlaceholders})\n\t\t\t AND group_id IS NOT NULL AND TRIM(group_id) <> ''\n\t\t\t ${excludedGroupClause}\n\t\t\t ORDER BY TRIM(group_id) LIMIT ?`,\n\t\t)\n\t\t.pluck()\n\t\t.all(...matchingTextualIds, ...excludedGroupIds, limit) as string[];\n\tif (groupIds.length === 0) return [];\n\tconst groupPlaceholders = groupIds.map(() => \"?\").join(\", \");\n\tconst records = store.db\n\t\t.prepare(\n\t\t\t`SELECT DISTINCT TRIM(group_id) AS group_id, coordinator_id FROM replication_scopes\n\t\t\t WHERE status = 'active' AND authority_type = 'coordinator'\n\t\t\t AND kind IN ('team', 'team_default', 'org', 'client')\n\t\t\t AND coordinator_id IN (${coordinatorPlaceholders})\n\t\t\t AND TRIM(group_id) IN (${groupPlaceholders})\n\t\t\t ORDER BY TRIM(group_id), coordinator_id`,\n\t\t)\n\t\t.all(...matchingTextualIds, ...groupIds) as Array<{\n\t\tgroup_id: string;\n\t\tcoordinator_id: string;\n\t}>;\n\tconst coordinatorIdsByGroup = new Map<string, string[]>();\n\tfor (const record of records) {\n\t\tconst coordinatorIds = coordinatorIdsByGroup.get(record.group_id) ?? [];\n\t\tcoordinatorIds.push(record.coordinator_id);\n\t\tcoordinatorIdsByGroup.set(record.group_id, coordinatorIds);\n\t}\n\treturn groupIds.flatMap((groupId) => {\n\t\tconst coordinatorIds = coordinatorIdsByGroup.get(groupId) ?? [];\n\t\t// Equivalent textual coordinator IDs still represent distinct persisted\n\t\t// candidate identities. Never merge their authorization evidence by label.\n\t\tconst coordinatorId = coordinatorIds[0];\n\t\treturn coordinatorIds.length === 1 && coordinatorId ? [{ groupId, coordinatorId }] : [];\n\t});\n}\n\nasync function loadConfiguredLegacyTeamGroupSnapshotsWith(\n\tdependencies: LegacyTeamSnapshotLoaderDependencies,\n\toptions: LegacyTeamConfiguredGroupSnapshotLoadOptions = {},\n\tgetStore?: () => MemoryStore,\n): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\tlet config: ReturnType<typeof readCoordinatorSyncConfig>;\n\ttry {\n\t\tconfig = dependencies.readConfig();\n\t} catch {\n\t\tthrow safeCoordinatorError();\n\t}\n\tconst hasUrl = Boolean(config.syncCoordinatorUrl);\n\tconst hasSecret = Boolean(config.syncCoordinatorAdminSecret);\n\tif (!hasUrl && !hasSecret && config.syncCoordinatorGroups.length === 0) return [];\n\tif (!hasUrl || !hasSecret) throw safeCoordinatorError();\n\n\ttry {\n\t\tconst configuredCoordinatorId = buildBaseUrl(config.syncCoordinatorUrl);\n\t\tif (!configuredCoordinatorId) throw safeCoordinatorError();\n\t\tconst remoteUrl = configuredCoordinatorId;\n\t\tlet store: MemoryStore | undefined;\n\t\ttry {\n\t\t\tstore = getStore?.();\n\t\t} catch {\n\t\t\t// Scope discovery is additive. Preserve configured coordinator candidates\n\t\t\t// when local evidence cannot be read.\n\t\t\tstore = undefined;\n\t\t}\n\t\tconst groupDescriptors = legacyTeamCandidateGroupDescriptors(\n\t\t\tstore,\n\t\t\tconfig.syncCoordinatorUrl,\n\t\t\tconfig.syncCoordinatorGroups,\n\t\t);\n\t\tif (groupDescriptors.length === 0) throw safeCoordinatorError();\n\t\tconst timeoutS = Math.max(1, config.syncCoordinatorTimeoutS);\n\t\tconst deadlineMs = options.deadlineMs ?? Date.now() + COORDINATOR_ROSTER_READ_BUDGET_MS;\n\t\tconst requestedGroupDescriptors = options.candidateRef\n\t\t\t? groupDescriptors.filter(\n\t\t\t\t\t({ coordinatorId, groupId }) =>\n\t\t\t\t\t\tlegacyTeamCandidateId(coordinatorId, groupId) === options.candidateRef,\n\t\t\t\t)\n\t\t\t: groupDescriptors;\n\t\tconst groups = await retryTransientCoordinatorRead(\n\t\t\t(attemptTimeoutS) =>\n\t\t\t\tdependencies.listGroups({\n\t\t\t\t\tremoteUrl,\n\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\tincludeArchived: false,\n\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t}),\n\t\t\ttimeoutS,\n\t\t\tdeadlineMs,\n\t\t);\n\t\tconst groupById = new Map(groups.map((group) => [group.group_id, group]));\n\t\tconst outcomes = await Promise.all(\n\t\t\trequestedGroupDescriptors.map(async ({ coordinatorId, groupId }) => {\n\t\t\t\t// Authoritative absence is stale state, while malformed or unavailable\n\t\t\t\t// evidence stays fail-closed. Summary mode may isolate the latter only\n\t\t\t\t// when another requested group remains healthy.\n\t\t\t\tconst group = groupById.get(groupId);\n\t\t\t\tif (!group || group.archived_at != null) {\n\t\t\t\t\treturn { kind: \"absent\" as const };\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tgroup.group_id !== groupId ||\n\t\t\t\t\t(group.display_name !== null && typeof group.display_name !== \"string\")\n\t\t\t\t) {\n\t\t\t\t\tif (options.candidateRef) throw safeCoordinatorError();\n\t\t\t\t\treturn { kind: \"unavailable\" as const };\n\t\t\t\t}\n\t\t\t\tlet devices: Awaited<ReturnType<typeof coordinatorListDevicesAction>>;\n\t\t\t\ttry {\n\t\t\t\t\tdevices = await retryTransientCoordinatorRead(\n\t\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\t\tdependencies.listDevices({\n\t\t\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\t\t\tincludeDisabled: true,\n\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\tdeadlineMs,\n\t\t\t\t\t);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!options.candidateRef) return { kind: \"unavailable\" as const };\n\t\t\t\t\tif (isCoordinatorRosterTooLargeError(error)) {\n\t\t\t\t\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t\t\t\t\t}\n\t\t\t\t\tthrow safeCoordinatorError();\n\t\t\t\t}\n\t\t\t\tif (devices.length > MAX_DEVICES) {\n\t\t\t\t\tif (options.candidateRef) throw new Error(\"legacy_team_setup_roster_too_large\");\n\t\t\t\t\treturn { kind: \"unavailable\" as const };\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tdevices.some(\n\t\t\t\t\t\t(device) =>\n\t\t\t\t\t\t\tfingerprintPublicKey(device.public_key) !== device.fingerprint ||\n\t\t\t\t\t\t\t(device.enabled !== 0 && device.enabled !== 1),\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tif (options.candidateRef) throw safeCoordinatorError();\n\t\t\t\t\treturn { kind: \"unavailable\" as const };\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tkind: \"snapshot\" as const,\n\t\t\t\t\tsnapshot: {\n\t\t\t\t\t\tcoordinatorId,\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tdisplayName: group.display_name ?? \"Legacy Team\",\n\t\t\t\t\t\tdevices: devices.map((device) => ({\n\t\t\t\t\t\t\tdeviceId: device.device_id,\n\t\t\t\t\t\t\tfingerprint: device.fingerprint,\n\t\t\t\t\t\t\tdisplayName: device.display_name ?? \"Device\",\n\t\t\t\t\t\t\tenabled: device.enabled === 1,\n\t\t\t\t\t\t\tlabelRedactionIds: [device.identity_id ?? \"\", device.public_key].filter(Boolean),\n\t\t\t\t\t\t})),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\t\tconst validSnapshots = outcomes.flatMap((outcome) =>\n\t\t\toutcome.kind === \"snapshot\" ? [outcome.snapshot] : [],\n\t\t);\n\t\tif (validSnapshots.length === 0 && outcomes.some((outcome) => outcome.kind === \"unavailable\")) {\n\t\t\tthrow safeCoordinatorError();\n\t\t}\n\t\treturn validSnapshots;\n\t} catch (error) {\n\t\tif (error instanceof Error && error.message === \"legacy_team_setup_roster_too_large\") {\n\t\t\tthrow error;\n\t\t}\n\t\tthrow safeCoordinatorError();\n\t}\n}\n\nfunction requireBoundedSnapshots(groups: LegacyTeamConfiguredGroupSnapshot[]): void {\n\tif (groups.length > MAX_CONFIGURED_GROUPS) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n}\n\nfunction projectionOptions(store: MemoryStore) {\n\treturn { localActorId: store.actorId, localDeviceId: store.deviceId };\n}\n\nfunction discoverCandidates(\n\tstore: MemoryStore,\n\tgroups: LegacyTeamConfiguredGroupSnapshot[],\n): LegacyTeamCandidateView[] {\n\trequireBoundedSnapshots(groups);\n\treturn discoverLegacyTeamCandidates(store.db, {\n\t\tprojection: projectionOptions(store),\n\t\tgroups,\n\t});\n}\n\nfunction candidateSummary(candidate: LegacyTeamCandidateView): LegacyTeamSetupCandidateSummaryV1 {\n\treturn {\n\t\tcandidateRef: candidate.candidateRef,\n\t\tdisplayName: candidate.displayName,\n\t\tstatus: candidate.status,\n\t\tdeviceCount: candidate.deviceCount,\n\t\tprojectCount: candidate.projectCount,\n\t\tunresolvedDeviceCount: candidate.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: candidate.unresolvedProjectCount,\n\t};\n}\n\nfunction candidateSummaryForDraft(\n\tcandidate: LegacyTeamCandidateView,\n\tdraft: LegacyTeamSetupDraftView,\n): LegacyTeamSetupCandidateSummaryV1 {\n\treturn {\n\t\t...candidateSummary(candidate),\n\t\tstatus: draft.state === \"completed\" ? \"ready\" : draft.state,\n\t\tunresolvedDeviceCount: draft.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: draft.unresolvedProjectCount,\n\t};\n}\n\nfunction candidateFromDraft(draft: LegacyTeamSetupDraftView): LegacyTeamCandidateView {\n\treturn {\n\t\tcandidateRef: draft.candidateRef,\n\t\tdisplayName: draft.displayName,\n\t\tstatus: draft.state === \"completed\" ? \"ready\" : draft.state,\n\t\tdeviceCount: draft.devices.length,\n\t\tprojectCount: draft.projects.length,\n\t\tunresolvedDeviceCount: draft.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: draft.unresolvedProjectCount,\n\t};\n}\n\nfunction readPureCandidateViews(\n\tstore: MemoryStore,\n\tgroups: LegacyTeamConfiguredGroupSnapshot[],\n): LegacyTeamCandidateView[] {\n\tconst existing: LegacyTeamCandidateView[] = [];\n\tconst discoverable: LegacyTeamConfiguredGroupSnapshot[] = [];\n\tfor (const group of groups) {\n\t\tconst candidateRef = legacyTeamCandidateId(group.coordinatorId, group.groupId);\n\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\tif (hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t// Only canonical terminal completions pass through discovery: they can\n\t\t\t// reconcile missing setup recipient edges while preserving newer drafts.\n\t\t\tif (isLegacyTeamCandidateSelectable(store.db, candidateRef)) discoverable.push(group);\n\t\t\tcontinue;\n\t\t}\n\t\tif (!draft || draft.state === \"completed\") {\n\t\t\tdiscoverable.push(group);\n\t\t\tcontinue;\n\t\t}\n\t\texisting.push(candidateFromDraft(draft));\n\t}\n\treturn [...existing, ...discoverCandidates(store, discoverable)]\n\t\t.filter((candidate) => !hasCompletedLegacyTeamSetup(store, candidate.candidateRef))\n\t\t.toSorted((left, right) =>\n\t\t\tleft.candidateRef < right.candidateRef ? -1 : left.candidateRef > right.candidateRef ? 1 : 0,\n\t\t);\n}\n\nfunction hasCompletedLegacyTeamSetup(store: MemoryStore, candidateRef: string): boolean {\n\treturn Boolean(\n\t\tstore.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT 1 FROM policy_teams\n\t\t\t\t WHERE team_id = ? AND status = 'active'\n\t\t\t\t AND provenance = 'reviewed_team_candidate'\n\t\t\t\t AND migration_state = 'completed' LIMIT 1`,\n\t\t\t)\n\t\t\t.pluck()\n\t\t\t.get(deterministicPolicyTeamId(candidateRef)),\n\t);\n}\n\nfunction identityRef(candidateRef: string, identityId: string | null): string | null {\n\treturn identityId\n\t\t? recipientPolicyDigest(\"legacy-team-viewer-identity-ref-v1\", [candidateRef, identityId])\n\t\t: null;\n}\n\nfunction requiredIdentityRef(candidateRef: string, identityId: string): string {\n\treturn recipientPolicyDigest(\"legacy-team-viewer-identity-ref-v1\", [candidateRef, identityId]);\n}\n\nfunction teamRef(candidateRef: string, teamId: string): string {\n\treturn recipientPolicyDigest(\"legacy-team-viewer-team-ref-v1\", [candidateRef, teamId]);\n}\n\nfunction resolvedProjectRef(projectRef: string, projectIdentity: string | null): string | null {\n\treturn projectIdentity ? legacyTeamResolvedProjectRef(projectRef, projectIdentity) : null;\n}\n\nfunction viewerSafeAccessDelta(\n\tcandidateRef: string,\n\tdelta: LegacyTeamSetupAccessDeltaV1,\n\tlabels?: {\n\t\tteamDisplayName: string;\n\t\tdevices: Array<Omit<LegacyTeamSetupDeviceV1, \"actions\">>;\n\t\tprojects: Array<Omit<LegacyTeamSetupProjectV1, \"actions\">>;\n\t\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n\t},\n): LegacyTeamSetupViewerAccessDeltaV1 {\n\tconst fallbackLabels = new Map<string, string>();\n\tconst fallbackLabelCounts = new Map<string, number>();\n\tconst reservedLabels = new Set(\n\t\t[\n\t\t\tlabels?.teamDisplayName,\n\t\t\t...(labels?.devices.map((device) => device.displayName) ?? []),\n\t\t\t...(labels?.projects.flatMap((project) => [\n\t\t\t\tproject.displayName,\n\t\t\t\t...project.mappingChoices.map((choice) => choice.displayName),\n\t\t\t]) ?? []),\n\t\t\t...(labels?.identityChoices.map((identity) => identity.displayName) ?? []),\n\t\t]\n\t\t\t.filter((label): label is string => Boolean(label))\n\t\t\t.map((label) => normalizeChoiceLabelText(label).toLowerCase()),\n\t);\n\tconst fallbackLabel = (kind: string, ref: string) => {\n\t\tconst key = `${kind}:${ref}`;\n\t\tconst existing = fallbackLabels.get(key);\n\t\tif (existing) return existing;\n\t\tlet index = (fallbackLabelCounts.get(kind) ?? 0) + 1;\n\t\tlet label = `${kind} outside this setup (${index})`;\n\t\twhile (reservedLabels.has(normalizeChoiceLabelText(label).toLowerCase())) {\n\t\t\tindex += 1;\n\t\t\tlabel = `${kind} outside this setup (${index})`;\n\t\t}\n\t\tfallbackLabelCounts.set(kind, index);\n\t\treservedLabels.add(normalizeChoiceLabelText(label).toLowerCase());\n\t\tfallbackLabels.set(key, label);\n\t\treturn label;\n\t};\n\tconst projectsByRef = new Map(labels?.projects.map((project) => [project.projectRef, project]));\n\tconst projectsByCanonicalRef = new Map(\n\t\tlabels?.projects.flatMap((project) =>\n\t\t\tproject.canonicalProjectRef ? [[project.canonicalProjectRef, project] as const] : [],\n\t\t),\n\t);\n\tconst identitiesByRef = new Map(\n\t\tlabels?.identityChoices.map((identity) => [identity.identityRef, identity]),\n\t);\n\tconst devicesByRef = new Map(labels?.devices.map((device) => [device.deviceRef, device]));\n\tconst canonicalProjectPresentation = (identity: string, ref: string) => {\n\t\tif (identity === \"shared:default\") {\n\t\t\treturn { displayName: \"Legacy default sharing\", kind: \"legacy_default_sharing\" as const };\n\t\t}\n\t\treturn {\n\t\t\tdisplayName: projectsByCanonicalRef.get(ref)?.displayName ?? fallbackLabel(\"Project\", ref),\n\t\t\tkind: \"project\" as const,\n\t\t};\n\t};\n\tconst resolvedDisplayName = (projectRef: string, ref: string | null): string | null => {\n\t\tif (!ref) return null;\n\t\tconst project = projectsByRef.get(projectRef);\n\t\tconst choice = project?.mappingChoices.find((item) => item.resolvedProjectRef === ref);\n\t\tif (choice) return choice.displayName;\n\t\tif (project?.resolvedProjectRef === ref && project.resolution === \"deterministic\") {\n\t\t\treturn `${project.displayName} (automatic match)`;\n\t\t}\n\t\treturn fallbackLabel(\"Project\", ref);\n\t};\n\treturn {\n\t\tteamChanges: delta.teamChanges.map((change) => ({\n\t\t\tteamRef: teamRef(candidateRef, change.teamId),\n\t\t\tteamDisplayName:\n\t\t\t\tlabels?.teamDisplayName ?? fallbackLabel(\"Team\", teamRef(candidateRef, change.teamId)),\n\t\t\tchange: change.change,\n\t\t\tfromDeviceEligibilityMode: change.fromDeviceEligibilityMode,\n\t\t\ttoDeviceEligibilityMode: change.toDeviceEligibilityMode,\n\t\t})),\n\t\tmembershipChanges: delta.membershipChanges.map((change) => {\n\t\t\tconst identityRef = requiredIdentityRef(candidateRef, change.identityId);\n\t\t\tconst membershipTeamRef = teamRef(candidateRef, change.teamId);\n\t\t\treturn {\n\t\t\t\tteamRef: membershipTeamRef,\n\t\t\t\tteamDisplayName: labels?.teamDisplayName ?? fallbackLabel(\"Team\", membershipTeamRef),\n\t\t\t\tidentityRef,\n\t\t\t\tidentityDisplayName:\n\t\t\t\t\tidentitiesByRef.get(identityRef)?.displayName ?? fallbackLabel(\"Person\", identityRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t\tprojectChanges: delta.projectChanges.map((change) => {\n\t\t\tconst fromRef = resolvedProjectRef(change.projectRef, change.fromProjectIdentity);\n\t\t\tconst toRef = resolvedProjectRef(change.projectRef, change.toProjectIdentity);\n\t\t\treturn {\n\t\t\t\tprojectRef: change.projectRef,\n\t\t\t\tprojectDisplayName:\n\t\t\t\t\tprojectsByRef.get(change.projectRef)?.displayName ??\n\t\t\t\t\tfallbackLabel(\"Project\", change.projectRef),\n\t\t\t\tfromCanonicalProjectRef: change.fromProjectIdentity\n\t\t\t\t\t? legacyTeamCanonicalProjectRef(candidateRef, change.fromProjectIdentity)\n\t\t\t\t\t: null,\n\t\t\t\tfromResolvedProjectRef: fromRef,\n\t\t\t\tfromResolvedProjectDisplayName: resolvedDisplayName(change.projectRef, fromRef),\n\t\t\t\ttoCanonicalProjectRef: change.toProjectIdentity\n\t\t\t\t\t? legacyTeamCanonicalProjectRef(candidateRef, change.toProjectIdentity)\n\t\t\t\t\t: null,\n\t\t\t\ttoResolvedProjectRef: toRef,\n\t\t\t\ttoResolvedProjectDisplayName: resolvedDisplayName(change.projectRef, toRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t\trecipientChanges: delta.recipientChanges.map((change) => {\n\t\t\tconst canonicalProjectRef = legacyTeamCanonicalProjectRef(\n\t\t\t\tcandidateRef,\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t);\n\t\t\tconst recipientRef = teamRef(candidateRef, change.recipientId);\n\t\t\tconst projectPresentation = canonicalProjectPresentation(\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t\tcanonicalProjectRef,\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tcanonicalProjectRef,\n\t\t\t\tcanonicalProjectDisplayName: projectPresentation.displayName,\n\t\t\t\tcanonicalProjectKind: projectPresentation.kind,\n\t\t\t\trecipientKind: change.recipientKind,\n\t\t\t\trecipientRef,\n\t\t\t\trecipientDisplayName: labels?.teamDisplayName ?? fallbackLabel(\"Team\", recipientRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t\tdeviceAccessChanges: delta.deviceAccessChanges.map((change) => {\n\t\t\tconst canonicalProjectRef = legacyTeamCanonicalProjectRef(\n\t\t\t\tcandidateRef,\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t);\n\t\t\tconst deviceRef = legacyTeamDeviceRef(candidateRef, change.deviceId);\n\t\t\tconst projectPresentation = canonicalProjectPresentation(\n\t\t\t\tchange.canonicalProjectIdentity,\n\t\t\t\tcanonicalProjectRef,\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tcanonicalProjectRef,\n\t\t\t\tcanonicalProjectDisplayName: projectPresentation.displayName,\n\t\t\t\tcanonicalProjectKind: projectPresentation.kind,\n\t\t\t\tdeviceRef,\n\t\t\t\tdeviceDisplayName:\n\t\t\t\t\tdevicesByRef.get(deviceRef)?.displayName ?? fallbackLabel(\"Device\", deviceRef),\n\t\t\t\tchange: change.change,\n\t\t\t};\n\t\t}),\n\t};\n}\n\nfunction viewerAccessDeltaDigest(delta: LegacyTeamSetupViewerAccessDeltaV1): string {\n\treturn recipientPolicyDigest(\"legacy-team-viewer-access-delta-v1\", delta);\n}\n\nconst SAFE_CHOICE_LABEL_PATTERN = /^[\\p{L}\\p{N} '&,.()_-]*$/u;\n\n// Keep this byte-for-byte equivalent in behavior to the core setup-label\n// normalization without exporting a presentation-only core implementation.\nfunction normalizeChoiceLabelText(value: string): string {\n\treturn value\n\t\t.normalize(\"NFKC\")\n\t\t.replace(/\\p{Cf}/gu, \"\")\n\t\t.replace(/\\p{Cc}/gu, \" \")\n\t\t.replace(/\\s+/gu, \" \")\n\t\t.trim();\n}\n\nfunction safeChoiceLabel(\n\tvalue: string,\n\tfallback: string,\n\tforbiddenIds: readonly string[],\n\topaqueRef?: string,\n): string {\n\tconst normalized = normalizeChoiceLabelText(value.slice(0, 512));\n\tconst label = normalized.slice(0, 120).trim();\n\tconst forbiddenComparisons = forbiddenIds\n\t\t.map((forbiddenId) => normalizeChoiceLabelText(forbiddenId).toLowerCase())\n\t\t.filter(Boolean);\n\tconst comparable = normalized.toLowerCase();\n\tif (\n\t\t!label ||\n\t\t!SAFE_CHOICE_LABEL_PATTERN.test(label) ||\n\t\t/[\\p{L}\\p{N}]\\.[\\p{L}\\p{N}]/u.test(label) ||\n\t\t/-----|\\b(?:ssh|ecdsa|sk)-[\\p{L}\\p{N}-]+ /iu.test(label) ||\n\t\tforbiddenComparisons.some((forbiddenComparison) => comparable.includes(forbiddenComparison))\n\t) {\n\t\tconst suffix = opaqueRef?.slice(-6);\n\t\treturn suffix ? `${fallback} ${suffix}` : fallback;\n\t}\n\treturn label;\n}\n\nfunction disambiguateChoiceLabels<T extends { displayName: string }>(\n\tchoices: readonly T[],\n\tchoiceRef: (choice: T) => string,\n): T[] {\n\tconst counts = new Map<string, number>();\n\tconst originalLabels = new Set<string>();\n\tfor (const choice of choices) {\n\t\tconst comparable = normalizeChoiceLabelText(choice.displayName).toLowerCase();\n\t\tcounts.set(comparable, (counts.get(comparable) ?? 0) + 1);\n\t\toriginalLabels.add(comparable);\n\t}\n\tconst usedLabels = new Set<string>();\n\treturn choices.map((choice, index) => {\n\t\tconst comparable = normalizeChoiceLabelText(choice.displayName).toLowerCase();\n\t\tif ((counts.get(comparable) ?? 0) < 2 && !usedLabels.has(comparable)) {\n\t\t\tusedLabels.add(comparable);\n\t\t\treturn choice;\n\t\t}\n\t\tconst ref = choiceRef(choice);\n\t\tlet suffixLength = Math.min(6, ref.length);\n\t\tlet suffix = ref.slice(-suffixLength);\n\t\tconst maxAttempts = ref.length + originalLabels.size + usedLabels.size + 2;\n\t\tfor (let attempt = 0; attempt < maxAttempts; attempt += 1) {\n\t\t\tconst baseLength = Math.max(0, 119 - suffix.length);\n\t\t\tconst base = choice.displayName.slice(0, baseLength).trimEnd();\n\t\t\tconst displayName = base ? `${base} ${suffix}` : suffix.slice(-120);\n\t\t\tconst finalComparable = normalizeChoiceLabelText(displayName).toLowerCase();\n\t\t\tif (!usedLabels.has(finalComparable) && !originalLabels.has(finalComparable)) {\n\t\t\t\tusedLabels.add(finalComparable);\n\t\t\t\treturn { ...choice, displayName };\n\t\t\t}\n\t\t\tif (suffixLength < ref.length) {\n\t\t\t\tsuffixLength = Math.min(ref.length, suffixLength + 2);\n\t\t\t\tsuffix = ref.slice(-suffixLength);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tsuffix = `${ref.slice(-Math.min(96, ref.length))}-${index + 1}-${attempt + 1}`;\n\t\t}\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t});\n}\n\nfunction requireCompleteMappingChoices(projectCount: number, choiceCount: number): void {\n\tif (projectCount * choiceCount > MAX_TOTAL_PROJECT_MAPPING_CHOICES) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n}\n\nfunction createCachedSnapshotLoader(\n\tload: () => Promise<LegacyTeamConfiguredGroupSnapshot[]>,\n\tttlMs: number,\n\tnow: () => number = Date.now,\n): (() => Promise<LegacyTeamConfiguredGroupSnapshot[]>) & {\n\tinvalidate: () => void;\n\tpeek: () => LegacyTeamConfiguredGroupSnapshot[] | null;\n} {\n\tlet cached: { expiresAt: number; snapshots: LegacyTeamConfiguredGroupSnapshot[] } | null = null;\n\tlet inFlight: Promise<LegacyTeamConfiguredGroupSnapshot[]> | null = null;\n\tlet generation = 0;\n\tconst cachedLoad = () => {\n\t\tif (cached && now() < cached.expiresAt) return Promise.resolve(cached.snapshots);\n\t\tif (inFlight) return inFlight;\n\t\tconst operationGeneration = generation;\n\t\tlet operation: Promise<LegacyTeamConfiguredGroupSnapshot[]>;\n\t\toperation = load()\n\t\t\t.then((snapshots) => {\n\t\t\t\tif (generation !== operationGeneration) return cachedLoad();\n\t\t\t\tcached = { expiresAt: now() + ttlMs, snapshots };\n\t\t\t\treturn snapshots;\n\t\t\t})\n\t\t\t.finally(() => {\n\t\t\t\tif (inFlight === operation) inFlight = null;\n\t\t\t});\n\t\tinFlight = operation;\n\t\treturn operation;\n\t};\n\tcachedLoad.invalidate = () => {\n\t\tgeneration += 1;\n\t\tcached = null;\n\t\tinFlight = null;\n\t};\n\tcachedLoad.peek = () => (cached && now() < cached.expiresAt ? cached.snapshots : null);\n\treturn cachedLoad;\n}\n\nasync function loadMutableCandidateSnapshots(\n\tstore: MemoryStore,\n\tcandidateRef: string,\n\tload: () => Promise<LegacyTeamConfiguredGroupSnapshot[]>,\n): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\tif (getLegacyTeamSetupDraft(store.db, candidateRef)?.state === \"completed\") {\n\t\tthrow new Error(\"team_setup_confirmation_stale\");\n\t}\n\treturn load();\n}\n\nfunction projectMutationAtomically<Mutation, Projection>(\n\tstore: MemoryStore,\n\tmutate: () => Mutation,\n\tproject: (mutation: Mutation) => Projection,\n): Projection {\n\treturn store.db.transaction(() => project(mutate())).immediate();\n}\n\nexport const __teamSetupTestHooks = {\n\tcreateCachedSnapshotLoader,\n\tloadConfiguredLegacyTeamGroupSnapshotsWith,\n\tnormalizedCoordinatorId,\n\tprojectMutationAtomically,\n\trequireBoundedAccessDelta: requireLegacyTeamSetupAccessDeltaWithinLimit,\n\trequireCompleteMappingChoices,\n\tdisambiguateChoiceLabels,\n\tsafeChoiceLabel,\n\tviewerSafeAccessDelta,\n\t// Lazy: the classifier and its typed error are declared below this object.\n\tfinishFailureDetails: (error: unknown) => teamSetupFinishFailureDetails(error),\n\tlocalProjectScanBudgetError: (cause?: unknown) => new LocalProjectScanBudgetError(cause),\n};\n\ninterface IdentityChoiceInternal extends LegacyTeamSetupIdentityChoiceV1 {\n\tidentityId: string;\n}\n\ntype IdentityChoiceRow = { actor_id: string; display_name: string };\n\nfunction identityChoicesFromRows(\n\trows: IdentityChoiceRow[],\n\tcandidateRef: string,\n\tmaxChoices = MAX_IDENTITY_CHOICES,\n): IdentityChoiceInternal[] {\n\tif (rows.length > maxChoices) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n\tconst actorIds = rows.map((row) => row.actor_id);\n\treturn disambiguateChoiceLabels(\n\t\trows.map((row) => {\n\t\t\tconst opaqueIdentityRef = requiredIdentityRef(candidateRef, row.actor_id);\n\t\t\treturn {\n\t\t\t\tidentityId: row.actor_id,\n\t\t\t\tidentityRef: opaqueIdentityRef,\n\t\t\t\tdisplayName: safeChoiceLabel(row.display_name, \"Person\", actorIds, opaqueIdentityRef),\n\t\t\t};\n\t\t}),\n\t\t(choice) => choice.identityRef,\n\t);\n}\n\nfunction identityChoices(store: MemoryStore, candidateRef: string): IdentityChoiceInternal[] {\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT actor_id, display_name FROM actors\n\t\t\t WHERE status = 'active' AND merged_into_actor_id IS NULL\n\t\t\t ORDER BY display_name, actor_id LIMIT ?`,\n\t\t)\n\t\t.all(MAX_IDENTITY_CHOICES + 1) as IdentityChoiceRow[];\n\treturn identityChoicesFromRows(rows, candidateRef);\n}\n\nfunction completedDraftIdentityChoices(\n\tstore: MemoryStore,\n\tdraft: LegacyTeamSetupDraftView,\n): IdentityChoiceInternal[] {\n\tconst actorIds = [\n\t\t...new Set(\n\t\t\tdraft.devices.flatMap((device) => [\n\t\t\t\tdevice.existingIdentityId,\n\t\t\t\tdevice.suggestedIdentityId,\n\t\t\t\tdevice.targetIdentityId,\n\t\t\t\tdevice.expectation.kind === \"existing\" ? device.expectation.identityId : null,\n\t\t\t]),\n\t\t),\n\t].filter((actorId): actorId is string => actorId !== null);\n\tif (actorIds.length === 0) return [];\n\tconst placeholders = actorIds.map(() => \"?\").join(\", \");\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT actor_id, display_name FROM actors\n\t\t\t WHERE status = 'active' AND merged_into_actor_id IS NULL\n\t\t\t AND actor_id IN (${placeholders})\n\t\t\t ORDER BY display_name, actor_id`,\n\t\t)\n\t\t.all(...actorIds) as IdentityChoiceRow[];\n\treturn identityChoicesFromRows(rows, draft.candidateRef, MAX_COMPLETED_IDENTITY_CHOICES);\n}\n\ninterface ProjectMappingChoiceInternal {\n\tprojectIdentity: string;\n\tsourceDisplayName: string;\n}\n\nfunction projectMappingChoices(store: MemoryStore): ProjectMappingChoiceInternal[] {\n\tlet candidates: ReturnType<typeof listProjectScopeCandidates>;\n\ttry {\n\t\tcandidates = listProjectScopeCandidates(store.db, {\n\t\t\tlimit: null,\n\t\t\tmaxScannedRows: MAX_PROJECT_MAPPING_SCAN_ROWS,\n\t\t\tmaxMetadataRows: MAX_PROJECT_MAPPING_METADATA_ROWS,\n\t\t\texcludePeerReceived: true,\n\t\t}).filter(\n\t\t\t(candidate) =>\n\t\t\t\t!candidate.read_only &&\n\t\t\t\tisLegacyTeamSetupProjectMappingIdentity(candidate.workspace_identity, store.db),\n\t\t);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message === \"project_scope_candidate_scan_too_large\" ||\n\t\t\t\terror.message === \"project_scope_candidate_metadata_too_large\")\n\t\t) {\n\t\t\tthrow new LocalProjectScanBudgetError(error);\n\t\t}\n\t\tthrow error;\n\t}\n\tif (candidates.length > MAX_PROJECT_MAPPING_CHOICES) {\n\t\tthrow new LocalProjectScanBudgetError();\n\t}\n\treturn candidates.map((candidate) => ({\n\t\tprojectIdentity: candidate.workspace_identity,\n\t\tsourceDisplayName: candidate.display_project,\n\t}));\n}\n\ninterface ViewerSafeDraft {\n\tdevices: Array<Omit<LegacyTeamSetupDeviceV1, \"actions\">>;\n\tprojects: Array<Omit<LegacyTeamSetupProjectV1, \"actions\">>;\n\tidentityChoices: LegacyTeamSetupIdentityChoiceV1[];\n}\n\nfunction viewerSafeDraft(store: MemoryStore, draft: LegacyTeamSetupDraftView): ViewerSafeDraft {\n\tif (draft.devices.length > MAX_DEVICES || draft.projects.length > MAX_PROJECTS) {\n\t\tthrow new Error(\"legacy_team_setup_roster_too_large\");\n\t}\n\tconst completed = draft.state === \"completed\";\n\tconst identities = completed\n\t\t? completedDraftIdentityChoices(store, draft)\n\t\t: identityChoices(store, draft.candidateRef);\n\tconst mappableProjectCount = completed\n\t\t? 0\n\t\t: draft.projects.filter((project) => project.resolution !== \"deterministic\").length;\n\tconst mappingChoices = mappableProjectCount === 0 ? [] : projectMappingChoices(store);\n\trequireCompleteMappingChoices(mappableProjectCount, mappingChoices.length);\n\tconst mappingChoiceIdentities = mappingChoices.map((choice) => choice.projectIdentity);\n\treturn {\n\t\tdevices: draft.devices.map((device) => ({\n\t\t\tdeviceRef: device.deviceRef,\n\t\t\tdisplayName: device.displayName,\n\t\t\tenabled: device.enabled,\n\t\t\texistingIdentityRef: identityRef(draft.candidateRef, device.existingIdentityId),\n\t\t\tsuggestedIdentityRef: identityRef(draft.candidateRef, device.suggestedIdentityId),\n\t\t\tverifiedEvidenceKind: device.verifiedEvidenceKind,\n\t\t\tdecision: device.decision,\n\t\t\ttargetIdentityRef: identityRef(draft.candidateRef, device.targetIdentityId),\n\t\t\texpectation:\n\t\t\t\tdevice.expectation.kind === \"existing\"\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tkind: \"existing\" as const,\n\t\t\t\t\t\t\tassignmentVersion: device.expectation.assignmentVersion,\n\t\t\t\t\t\t\tidentityRef: requiredIdentityRef(draft.candidateRef, device.expectation.identityId),\n\t\t\t\t\t\t}\n\t\t\t\t\t: { kind: \"absent\" as const },\n\t\t})),\n\t\tprojects: draft.projects.map((project) => ({\n\t\t\tprojectRef: project.projectRef,\n\t\t\tdisplayName: project.displayName,\n\t\t\tresolution: project.resolution,\n\t\t\tcanonicalProjectRef: project.canonicalProjectRef,\n\t\t\tresolvedProjectRef: project.resolvedProjectRef,\n\t\t\tmappingChoices:\n\t\t\t\tproject.resolution === \"deterministic\"\n\t\t\t\t\t? []\n\t\t\t\t\t: disambiguateChoiceLabels(\n\t\t\t\t\t\t\tmappingChoices.map((choice) => {\n\t\t\t\t\t\t\t\tconst opaqueResolvedProjectRef = legacyTeamResolvedProjectRef(\n\t\t\t\t\t\t\t\t\tproject.projectRef,\n\t\t\t\t\t\t\t\t\tchoice.projectIdentity,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\t\tresolvedProjectRef: opaqueResolvedProjectRef,\n\t\t\t\t\t\t\t\t\tdisplayName: safeChoiceLabel(\n\t\t\t\t\t\t\t\t\t\tchoice.sourceDisplayName,\n\t\t\t\t\t\t\t\t\t\t\"Project\",\n\t\t\t\t\t\t\t\t\t\tmappingChoiceIdentities,\n\t\t\t\t\t\t\t\t\t\topaqueResolvedProjectRef,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t(choice) => choice.resolvedProjectRef,\n\t\t\t\t\t\t),\n\t\t})),\n\t\tidentityChoices: identities.map(({ identityRef, displayName }) => ({\n\t\t\tidentityRef,\n\t\t\tdisplayName,\n\t\t})),\n\t};\n}\n\nfunction viewerSafePreview(\n\tdraft: LegacyTeamSetupDraftView,\n\tsafeDraft: ViewerSafeDraft,\n\tpreview: ReturnType<typeof inspectLegacyTeamSetupActivation>,\n) {\n\tconst accessDelta = viewerSafeAccessDelta(draft.candidateRef, preview.accessDelta, {\n\t\tteamDisplayName: draft.displayName,\n\t\t...safeDraft,\n\t});\n\treturn {\n\t\tfinishDigest: preview.finishDigest,\n\t\taccessDeltaDigest: preview.accessDeltaDigest,\n\t\tviewerAccessDeltaDigest: viewerAccessDeltaDigest(accessDelta),\n\t\taccessDelta,\n\t};\n}\n\nfunction errorStatus(code: LegacyTeamSetupActivationErrorCode): 400 | 409 | 503 {\n\tif (code === \"team_setup_roster_unavailable\" || code === \"team_setup_completion_unavailable\")\n\t\treturn 503;\n\tif (code === \"team_setup_failed\") return 503;\n\tif (code === \"team_setup_incomplete\") return 400;\n\treturn 409;\n}\n\nfunction apiErrorCode(error: unknown): LegacyTeamSetupActivationErrorCode {\n\tconst code = legacyTeamSetupApiErrorCode(error);\n\treturn code === \"team_setup_projection_changed\" ? \"team_setup_conflict\" : code;\n}\n\nfunction completionApiError(error: unknown): LegacyTeamSetupActivationErrorCode {\n\tconst code = legacyTeamSetupApiErrorCode(error);\n\treturn code === \"team_setup_failed\" ? \"team_setup_completion_unavailable\" : code;\n}\n\nclass TeamSetupFinishError extends Error {\n\tconstructor(\n\t\tcode: LegacyTeamSetupActivationErrorCode,\n\t\treadonly reason: LegacyTeamSetupErrorReason | undefined,\n\t\treadonly alreadyLogged: boolean,\n\t\tcause?: unknown,\n\t) {\n\t\tsuper(code, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"TeamSetupFinishError\";\n\t}\n}\n\ninterface TeamSetupFinishFailureDetails {\n\treason?: LegacyTeamSetupErrorReason;\n\tcause: string;\n\tstatus?: number;\n\tcode?: string;\n}\n\n/**\n * The generic `legacy_team_setup_roster_too_large` string is thrown by ten\n * sites for unrelated limits (coordinator roster size, draft device count,\n * local project choices). Only the local project-candidate scan is a\n * \"this device's history is too large\" condition, so it carries a distinct\n * type. The message is kept identical so the frozen API-code mapping and every\n * existing caller that matches on it are unchanged.\n */\nclass LocalProjectScanBudgetError extends Error {\n\tconstructor(cause?: unknown) {\n\t\tsuper(\"legacy_team_setup_roster_too_large\", cause === undefined ? undefined : { cause });\n\t\tthis.name = \"LocalProjectScanBudgetError\";\n\t}\n}\n\n/**\n * Remote error codes the finish path can legitimately receive from the\n * coordinator. Anything else — including identifier-shaped values, which a\n * hostile or misconfigured upstream could use to smuggle a credential through\n * a JSON `error` field — is reduced to a fixed classification before logging.\n * A shape check is not an allowlist; only this set is echoed verbatim.\n */\nconst LOGGABLE_REMOTE_ERROR_CODES = new Set([\n\t\"body_too_large\",\n\t\"completion_manifest_invalid\",\n\t\"completion_manifest_unavailable\",\n\t\"completion_not_found\",\n\t\"completion_query_invalid\",\n\t\"group_archived\",\n\t\"group_id_and_candidate_ref_required\",\n\t\"group_not_found\",\n\t\"invalid_json\",\n\t\"missing_admin_header\",\n\t\"not_found\",\n\t\"rate_limited\",\n\t\"response_too_large\",\n\t\"unauthorized\",\n]);\n\nfunction loggableRemoteCode(code: string): string {\n\tif (LOGGABLE_REMOTE_ERROR_CODES.has(code)) return code;\n\tif (code.startsWith(\"non_json_response\")) return \"non_json_response\";\n\treturn \"unclassified_remote_error\";\n}\n\n/**\n * Local causes the finish path can produce. Same allowlist discipline as\n * remote codes: everything else, including transport messages that embed the\n * target URL, is classified rather than echoed.\n */\nconst LOGGABLE_LOCAL_CAUSES = new Set([\n\t\"completion_conflict\",\n\t\"legacy_team_setup_roster_too_large\",\n\t\"project_scope_candidate_metadata_too_large\",\n\t\"project_scope_candidate_scan_too_large\",\n\t\"team_setup_completion_conflict\",\n\t\"team_setup_completion_invalid\",\n\t\"team_setup_completion_unavailable\",\n\t\"team_setup_confirmation_stale\",\n\t\"team_setup_roster_unavailable\",\n]);\n\nfunction loggableLocalCause(error: Error): string {\n\tif (LOGGABLE_LOCAL_CAUSES.has(error.message)) return error.message;\n\tif (error.name === \"AbortError\" || error.name === \"TimeoutError\") return error.name;\n\tif (/fetch failed/iu.test(error.message)) return \"fetch_failed\";\n\tif (/timed out|timeout/iu.test(error.message)) return \"timed_out\";\n\treturn `unclassified_error:${error.name || \"Error\"}`;\n}\n\nfunction errorChain(error: unknown): unknown[] {\n\tconst chain: unknown[] = [];\n\tlet current = error;\n\twhile (current && !chain.includes(current)) {\n\t\tchain.push(current);\n\t\tcurrent = current instanceof Error ? current.cause : undefined;\n\t}\n\treturn chain;\n}\n\nfunction remoteFailureReason(\n\tremote: RemoteCoordinatorRequestError,\n\tfallback: LegacyTeamSetupErrorReason | undefined,\n): LegacyTeamSetupErrorReason | undefined {\n\tif (\n\t\tremote.status === 404 &&\n\t\t(remote.code === \"not_found\" || remote.code.startsWith(\"non_json\"))\n\t) {\n\t\treturn \"coordinator_route_missing\";\n\t}\n\tif (remote.status === 400 && remote.code === \"completion_manifest_invalid\") {\n\t\treturn \"coordinator_rejected_manifest\";\n\t}\n\treturn fallback;\n}\n\nfunction teamSetupFinishFailureDetails(error: unknown): TeamSetupFinishFailureDetails {\n\tconst chain = errorChain(error);\n\tconst wrapper = chain.find(\n\t\t(item): item is TeamSetupFinishError => item instanceof TeamSetupFinishError,\n\t);\n\tconst remote = chain.find(\n\t\t(item): item is RemoteCoordinatorRequestError => item instanceof RemoteCoordinatorRequestError,\n\t);\n\tif (remote) {\n\t\tconst reason = remoteFailureReason(remote, wrapper?.reason);\n\t\treturn {\n\t\t\t...(reason ? { reason } : {}),\n\t\t\tcause: \"remote coordinator request failed\",\n\t\t\tstatus: remote.status,\n\t\t\tcode: loggableRemoteCode(remote.code),\n\t\t};\n\t}\n\t// Only typed scan-budget errors mean \"this device's history is too large\".\n\t// The shared roster_too_large string also fires for coordinator roster size\n\t// and draft device count, which are not local conditions.\n\tif (\n\t\tchain.some(\n\t\t\t(item) =>\n\t\t\t\titem instanceof LegacyTeamSetupRosterCapacityError ||\n\t\t\t\titem instanceof LocalProjectScanBudgetError,\n\t\t)\n\t) {\n\t\treturn {\n\t\t\treason: \"local_candidate_scan_budget_exceeded\",\n\t\t\tcause: \"local project candidate scan exceeded budget\",\n\t\t};\n\t}\n\tconst errorCause = chain.find(\n\t\t(item): item is Error => item instanceof Error && !(item instanceof TeamSetupFinishError),\n\t);\n\tconst cause = errorCause ? loggableLocalCause(errorCause) : \"unclassified_non_error\";\n\tif (wrapper?.reason) return { reason: wrapper.reason, cause };\n\tif (\n\t\terrorCause &&\n\t\t(errorCause.name === \"AbortError\" ||\n\t\t\terrorCause.name === \"TimeoutError\" ||\n\t\t\t/fetch failed|timed out|timeout/iu.test(errorCause.message))\n\t) {\n\t\treturn { reason: \"coordinator_unreachable\", cause };\n\t}\n\treturn { cause };\n}\n\nfunction warnTeamSetupFinishFailure(\n\terror: unknown,\n\tdetails: TeamSetupFinishFailureDetails,\n\tcontext: {\n\t\tcandidateRef: string;\n\t\tattemptId: string;\n\t\tapiCode: LegacyTeamSetupActivationErrorCode;\n\t\tredactValues?: readonly string[];\n\t},\n): void {\n\tif (\n\t\terrorChain(error).some((item) => item instanceof TeamSetupFinishError && item.alreadyLogged)\n\t) {\n\t\treturn;\n\t}\n\tconst safe = (value: string | number): string => {\n\t\tlet sanitized = String(value).replace(/[\\r\\n\\t]+/gu, \" \");\n\t\tfor (const secret of context.redactValues ?? []) {\n\t\t\tif (secret) sanitized = sanitized.replaceAll(secret, \"[redacted]\");\n\t\t}\n\t\treturn sanitized.replace(/https?:\\/\\/[^\\s]+/giu, (value) => {\n\t\t\ttry {\n\t\t\t\tconst url = new URL(value);\n\t\t\t\treturn `${url.protocol}//${url.host}`;\n\t\t\t} catch {\n\t\t\t\treturn \"[redacted-url]\";\n\t\t\t}\n\t\t});\n\t};\n\tconst fields = [\n\t\t`candidateRef=${safe(context.candidateRef)}`,\n\t\t`attemptId=${safe(context.attemptId)}`,\n\t\t`apiCode=${safe(context.apiCode)}`,\n\t\t`cause=${safe(details.cause)}`,\n\t\t...(details.reason ? [`reason=${safe(details.reason)}`] : []),\n\t\t...(details.status == null ? [] : [`status=${safe(details.status)}`]),\n\t\t...(details.code == null ? [] : [`code=${safe(details.code)}`]),\n\t];\n\tconsole.warn(`[team-setup finish] ${fields.join(\" \")}`);\n}\n\nfunction finishErrorResponse(\n\tcode: LegacyTeamSetupActivationErrorCode,\n\tdetails: TeamSetupFinishFailureDetails,\n): { error: LegacyTeamSetupActivationErrorCode; reason?: LegacyTeamSetupErrorReason } {\n\tconst reason = details.reason;\n\treturn reason ? { error: code, reason } : { error: code };\n}\n\ntype BoundedJsonResult = { ok: true; value: Record<string, unknown> } | { ok: false };\n\nasync function parseBoundedJsonObject(c: Context): Promise<BoundedJsonResult> {\n\tconst contentType = c.req.header(\"content-type\")?.split(\";\", 1)[0]?.trim().toLowerCase();\n\tif (contentType !== \"application/json\") return { ok: false };\n\tconst lengthHeader = c.req.header(\"content-length\");\n\tif (lengthHeader != null && !/^\\d+$/u.test(lengthHeader.trim())) return { ok: false };\n\tconst contentLength = lengthHeader == null ? null : Number(lengthHeader);\n\tif (contentLength != null && contentLength > MAX_MUTATION_BODY_BYTES) return { ok: false };\n\tconst body = c.req.raw.body;\n\tif (!body) return { ok: false };\n\tconst reader = body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (!value) continue;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > MAX_MUTATION_BODY_BYTES) {\n\t\t\t\tawait reader.cancel().catch(() => undefined);\n\t\t\t\treturn { ok: false };\n\t\t\t}\n\t\t\tchunks.push(value);\n\t\t}\n\t} catch {\n\t\treturn { ok: false };\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\ttry {\n\t\tconst bytes = new Uint8Array(total);\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tbytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t\tconst parsed = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes)) as unknown;\n\t\treturn parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n\t\t\t? { ok: true, value: parsed as Record<string, unknown> }\n\t\t\t: { ok: false };\n\t} catch {\n\t\treturn { ok: false };\n\t}\n}\n\nfunction hasExactKeys(value: Record<string, unknown>, keys: readonly string[]): boolean {\n\tconst actual = Object.keys(value).toSorted();\n\tconst expected = keys.toSorted();\n\treturn actual.length === expected.length && actual.every((key, index) => key === expected[index]);\n}\n\nfunction detailResponse(\n\tstore: MemoryStore,\n\tdraft: LegacyTeamSetupDraftView,\n\tcandidate: LegacyTeamCandidateView = candidateFromDraft(draft),\n): LegacyTeamSetupDetailResponseV1 {\n\tlet unavailableReason: LegacyTeamSetupUnavailableReasonV1 | null = null;\n\tlet preview: ReturnType<typeof inspectLegacyTeamSetupActivation> | null = null;\n\tif (draft.state !== \"completed\") {\n\t\ttry {\n\t\t\tpreview = inspectLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef: draft.candidateRef,\n\t\t\t\tattemptId: draft.attemptId,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\tif (code === \"team_setup_failed\") throw error;\n\t\t\tif (code === \"team_setup_projection_changed\") unavailableReason = \"team_setup_conflict\";\n\t\t\telse if (code !== \"team_setup_incomplete\") unavailableReason = code;\n\t\t}\n\t}\n\tif (preview) requireLegacyTeamSetupAccessDeltaWithinLimit(preview.accessDelta);\n\tconst safeDraft = viewerSafeDraft(store, draft);\n\tconst safePreview = preview ? viewerSafePreview(draft, safeDraft, preview) : null;\n\treturn projectLegacyTeamSetupView({\n\t\tversion: TEAM_SETUP_VERSION,\n\t\tcandidate: candidateSummaryForDraft(candidate, draft),\n\t\tdraftState: draft.state,\n\t\tattemptId: draft.attemptId,\n\t\tunresolvedDeviceCount: draft.unresolvedDeviceCount,\n\t\tunresolvedProjectCount: draft.unresolvedProjectCount,\n\t\t...safeDraft,\n\t\tunavailableReason,\n\t\tpreview: safePreview,\n\t});\n}\n\nfunction finishResponse(\n\tcandidateRef: string,\n\tresult: LegacyTeamSetupActivationResultV1,\n): LegacyTeamSetupFinishResponseV1 {\n\treturn {\n\t\tversion: TEAM_SETUP_VERSION,\n\t\tstatus: result.status,\n\t\tteamRef: teamRef(candidateRef, result.teamId),\n\t\tattemptId: result.attemptId,\n\t\taccessDeltaDigest: result.accessDeltaDigest,\n\t\tcompletedAt: result.completedAt,\n\t};\n}\n\nexport function teamSetupRoutes(options: TeamSetupRoutesOptions): Hono {\n\tconst app = new Hono();\n\tconst loadSnapshots =\n\t\toptions.loadLegacyTeamConfiguredGroupSnapshots ??\n\t\t((loadOptions?: LegacyTeamConfiguredGroupSnapshotLoadOptions) =>\n\t\t\tloadConfiguredLegacyTeamGroupSnapshotsWith(\n\t\t\t\toptions.snapshotLoaderDependencies ?? defaultSnapshotLoaderDependencies,\n\t\t\t\tloadOptions,\n\t\t\t\toptions.getStore,\n\t\t\t));\n\n\tasync function loadedSnapshots(\n\t\tcandidateRef?: string,\n\t\tdeadlineMs?: number,\n\t): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\t\ttry {\n\t\t\treturn await loadSnapshots(\n\t\t\t\tcandidateRef || deadlineMs != null ? { candidateRef, deadlineMs } : undefined,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error && error.message === \"legacy_team_setup_roster_too_large\") {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tthrow safeCoordinatorError();\n\t\t}\n\t}\n\tconst loadedSummarySnapshots = createCachedSnapshotLoader(\n\t\t() => loadedSnapshots(),\n\t\tSUMMARY_SNAPSHOT_CACHE_TTL_MS,\n\t);\n\toptions.registerSummaryInvalidator?.(() => loadedSummarySnapshots.invalidate());\n\tconst completionDependencies =\n\t\toptions.completionDependencies === undefined\n\t\t\t? defaultCompletionDependencies\n\t\t\t: options.completionDependencies;\n\n\tinterface CompletionAuthorization {\n\t\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\t\tremoteUrl: string;\n\t\tconfiguredCoordinatorId: string;\n\t\tcurrentGroupIds: Set<string>;\n\t}\n\n\t/**\n\t * Reads the live coordinator configuration and the groups it currently\n\t * authorizes. Returns null when completion I/O is not configured or current\n\t * authorization cannot be proven.\n\t */\n\tfunction currentCompletionAuthorization(): CompletionAuthorization | null {\n\t\tconst config = (\n\t\t\toptions.readCoordinatorConfig ??\n\t\t\toptions.snapshotLoaderDependencies?.readConfig ??\n\t\t\treadCoordinatorSyncConfig\n\t\t)();\n\t\tconst remoteUrl = buildBaseUrl(config.syncCoordinatorUrl);\n\t\tif (!remoteUrl || !config.syncCoordinatorAdminSecret) return null;\n\t\tconst configuredCoordinatorId = normalizedCoordinatorId(remoteUrl);\n\t\tif (!configuredCoordinatorId) return null;\n\t\tlet currentGroupIds: Set<string>;\n\t\ttry {\n\t\t\tcurrentGroupIds = new Set(configuredGroupIds(config.syncCoordinatorGroups));\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t\treturn { config, remoteUrl, configuredCoordinatorId, currentGroupIds };\n\t}\n\n\t// Endpoint equivalence only: candidate identity stays bound to the persisted\n\t// coordinator string and is never rewritten from configuration.\n\tfunction authorizesGroup(\n\t\tauthorization: CompletionAuthorization,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\treturn (\n\t\t\tauthorization.currentGroupIds.has(group.groupId) &&\n\t\t\tnormalizedCoordinatorId(group.coordinatorId) === authorization.configuredCoordinatorId\n\t\t);\n\t}\n\n\t/**\n\t * Configuration may change while completion-list or roster requests are in\n\t * flight. Re-prove authorization for the exact coordinator and group right\n\t * before applying canonical policy, as the finish publication path does.\n\t */\n\tfunction stillAuthorizesGroup(\n\t\tinitial: CompletionAuthorization,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\tlet current: CompletionAuthorization | null;\n\t\ttry {\n\t\t\tcurrent = currentCompletionAuthorization();\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t\treturn (\n\t\t\tcurrent !== null &&\n\t\t\tcurrent.configuredCoordinatorId === initial.configuredCoordinatorId &&\n\t\t\tcurrent.remoteUrl === initial.remoteUrl &&\n\t\t\tcurrent.config.syncCoordinatorAdminSecret === initial.config.syncCoordinatorAdminSecret &&\n\t\t\tauthorizesGroup(current, group)\n\t\t);\n\t}\n\n\tfunction matchesGroupSnapshot(\n\t\tsnapshot: LegacyTeamConfiguredGroupSnapshot,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\treturn (\n\t\t\tsnapshot.groupId === group.groupId &&\n\t\t\tnormalizedCoordinatorId(snapshot.coordinatorId) ===\n\t\t\t\tnormalizedCoordinatorId(group.coordinatorId)\n\t\t);\n\t}\n\n\tfunction freshGroupKey(group: { coordinatorId: string; groupId: string }): string {\n\t\treturn `${normalizedCoordinatorId(group.coordinatorId) ?? group.coordinatorId}\\0${group.groupId}`;\n\t}\n\n\t/**\n\t * The snapshot loader keys candidates by the configured coordinator spelling,\n\t * while a persisted group may carry an equivalent but different spelling.\n\t * Ask for the roster under each spelling and match on normalized identity,\n\t * preserving the persisted candidate identity for everything else.\n\t */\n\tasync function loadFreshGroupSnapshot(\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t\tremoteUrl: string,\n\t\tdeadlineMs: number,\n\t): Promise<LegacyTeamConfiguredGroupSnapshot | undefined> {\n\t\tconst candidateRefs = [\n\t\t\t...new Set([\n\t\t\t\tlegacyTeamCandidateId(remoteUrl, group.groupId),\n\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t]),\n\t\t];\n\t\tfor (const candidateRef of candidateRefs) {\n\t\t\tconst snapshots = await loadedSnapshots(candidateRef, deadlineMs);\n\t\t\tconst matches = snapshots.filter((snapshot) => matchesGroupSnapshot(snapshot, group));\n\t\t\tif (matches.length > 1) throw new Error(\"team_setup_completion_invalid\");\n\t\t\tif (matches[0]) return matches[0];\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tfunction completionRecordCandidateRef(record: { manifest: unknown }): string | null {\n\t\tconst manifest = record.manifest;\n\t\tif (!manifest || typeof manifest !== \"object\" || Array.isArray(manifest)) return null;\n\t\tconst candidateRef = (manifest as { candidate_ref?: unknown }).candidate_ref;\n\t\treturn typeof candidateRef === \"string\" ? candidateRef : null;\n\t}\n\n\t// The coordinator lists every candidate a group has ever completed. A record\n\t// for a different candidate identity (an earlier coordinator address) is\n\t// historical context, not evidence about this candidate.\n\tfunction belongsToGroupCandidate(\n\t\trecord: { manifest: unknown },\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t): boolean {\n\t\tconst candidateRef = completionRecordCandidateRef(record);\n\t\treturn (\n\t\t\tcandidateRef === null ||\n\t\t\tcandidateRef === legacyTeamCandidateId(group.coordinatorId, group.groupId)\n\t\t);\n\t}\n\n\t/**\n\t * Applies a canonical manifest with authorization re-proven inside the same\n\t * serialized section that guards the apply. Checking before the locks would\n\t * let a group removed while reconciliation waited on another policy\n\t * mutation still be applied once the queues open.\n\t */\n\tasync function applyCanonicalManifestIfStillAuthorized(\n\t\tstore: MemoryStore,\n\t\tauthorization: CompletionAuthorization,\n\t\tgroup: LegacyTeamCandidateGroupDescriptor,\n\t\tmanifest: CoordinatorLegacyTeamCompletionManifestV1,\n\t\tfreshRoster: LegacyTeamConfiguredGroupSnapshot[\"devices\"],\n\t): Promise<\"applied\" | \"unauthorized\" | \"claimed\"> {\n\t\tlet outcome: \"applied\" | \"unauthorized\" = \"unauthorized\";\n\t\tconst ran = await runCandidateMutation(\n\t\t\tstore.db,\n\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t() =>\n\t\t\t\tserializeRecipientPolicyPublicationMutation(store.db, () =>\n\t\t\t\t\tserializeRecipientPolicyTeamMutation(store.db, manifest.team_id, () =>\n\t\t\t\t\t\tserializeRecipientPolicyCoordinatorGroupMutation(store.db, group.groupId, async () => {\n\t\t\t\t\t\t\tif (!stillAuthorizesGroup(authorization, group)) return;\n\t\t\t\t\t\t\tawait applyLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\t\tfreshRoster,\n\t\t\t\t\t\t\t\trecipientPolicyLocksHeld: { publication: true, team: true, coordinatorGroup: true },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\toutcome = \"applied\";\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t);\n\t\treturn ran ? outcome : \"claimed\";\n\t}\n\n\tasync function reconcileCompletions(\n\t\tstore: MemoryStore,\n\t\tgroups: LegacyTeamCandidateGroupDescriptor[],\n\t\treconciliationOptions: { isolateApplyFailures?: boolean } = {},\n\t): Promise<void> {\n\t\tif (!completionDependencies || groups.length === 0) return;\n\t\tlet authorization: CompletionAuthorization | null;\n\t\ttry {\n\t\t\tauthorization = currentCompletionAuthorization();\n\t\t} catch (error) {\n\t\t\tthrow new Error(completionApiError(error));\n\t\t}\n\t\t// If current authorization cannot be proven, skip completion I/O without\n\t\t// failing an otherwise serviceable persisted detail read.\n\t\tif (!authorization) return;\n\t\tconst { config, remoteUrl } = authorization;\n\t\tconst scopedGroups = groups.filter((group) => authorizesGroup(authorization, group));\n\t\tif (scopedGroups.length === 0) return;\n\t\tconst timeoutS = Math.max(1, config.syncCoordinatorTimeoutS);\n\t\ttry {\n\t\t\tconst reconciliationDeadlineMs = Date.now() + COORDINATOR_ROSTER_READ_BUDGET_MS;\n\t\t\tconst groupById = new Map(scopedGroups.map((group) => [group.groupId, group]));\n\t\t\tconst listCompletionRecords = (groupIds: string[]) =>\n\t\t\t\tretryTransientCoordinatorRead(\n\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\tcompletionDependencies.list({\n\t\t\t\t\t\t\tgroupIds,\n\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t}),\n\t\t\t\t\ttimeoutS,\n\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t);\n\t\t\tconst scopedGroupIds = [...new Set(scopedGroups.map((group) => group.groupId))];\n\t\t\tlet records: Awaited<ReturnType<LegacyTeamCompletionDependencies[\"list\"]>>;\n\t\t\ttry {\n\t\t\t\trecords = await listCompletionRecords(scopedGroupIds);\n\t\t\t} catch (error) {\n\t\t\t\t// Older coordinators do not expose completion reconciliation. Read routes\n\t\t\t\t// remain usable, and best-effort publication below still lets upgraded\n\t\t\t\t// peers observe a locally completed migration.\n\t\t\t\tif (isUnsupportedCompletionQuery(error)) {\n\t\t\t\t\trecords = [];\n\t\t\t\t} else if (\n\t\t\t\t\treconciliationOptions.isolateApplyFailures &&\n\t\t\t\t\tisUnattributableCompletionBatchError(error)\n\t\t\t\t) {\n\t\t\t\t\t// One corrupt or mixed-version record must not hide every healthy\n\t\t\t\t\t// group's setup state. Re-query per group so the decode failure\n\t\t\t\t\t// stays attributable; a group whose own record cannot be decoded is\n\t\t\t\t\t// skipped, matching the unprovable-binding path below.\n\t\t\t\t\trecords = await listCompletionRecordsPerGroup(scopedGroupIds, listCompletionRecords);\n\t\t\t\t} else {\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst freshGroupByKey = new Map<string, LegacyTeamConfiguredGroupSnapshot>();\n\t\t\tif (records.length > 0) {\n\t\t\t\ttry {\n\t\t\t\t\tconst onlyGroup = scopedGroups.length === 1 ? scopedGroups[0] : undefined;\n\t\t\t\t\tconst freshGroups = onlyGroup\n\t\t\t\t\t\t? [await loadFreshGroupSnapshot(onlyGroup, remoteUrl, reconciliationDeadlineMs)]\n\t\t\t\t\t\t: await loadedSnapshots(undefined, reconciliationDeadlineMs);\n\t\t\t\t\tfor (const freshGroup of freshGroups) {\n\t\t\t\t\t\tif (!freshGroup) continue;\n\t\t\t\t\t\tconst key = freshGroupKey(freshGroup);\n\t\t\t\t\t\tif (freshGroupByKey.has(key)) throw new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\tfreshGroupByKey.set(key, freshGroup);\n\t\t\t\t\t}\n\t\t\t\t} catch (error) {\n\t\t\t\t\tfor (const record of records) {\n\t\t\t\t\t\tconst group = groupById.get(record.group_id);\n\t\t\t\t\t\tif (!group || !belongsToGroupCandidate(record, group)) continue;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tvalidateLegacyTeamSetupCompletionManifestBinding(record.manifest, {\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch (bindingError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw bindingError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlet canonicalManifest: ReturnType<typeof validateLegacyTeamSetupCompletionManifest>;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(record.manifest, {\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch (validationError) {\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\tconst contained = await runCandidateMutation(\n\t\t\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw validationError;\n\t\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw validationError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst localManifest = reconstructLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\t\tcandidateRef: canonicalManifest.candidate_ref,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(localManifest) ===\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(canonicalManifest)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tareLegacyTeamSetupCompletionPolicyFactsAdditivelyCompatible(\n\t\t\t\t\t\t\t\t\tlocalManifest,\n\t\t\t\t\t\t\t\t\tcanonicalManifest,\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// Missing or invalid local completion state must not remain active when\n\t\t\t\t\t\t\t// a valid coordinator winner cannot be applied safely.\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tawait runCandidateMutation(store.db, canonicalManifest.candidate_ref, () =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw error;\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst coordinatorCompletionGroupIds = new Set<string>();\n\t\t\tfor (const record of records) {\n\t\t\t\tconst group = groupById.get(record.group_id);\n\t\t\t\tif (!group) throw new Error(\"team_setup_completion_invalid\");\n\t\t\t\tif (!belongsToGroupCandidate(record, group)) continue;\n\t\t\t\ttry {\n\t\t\t\t\tvalidateLegacyTeamSetupCompletionManifestBinding(record.manifest, {\n\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t});\n\t\t\t\t} catch (bindingError) {\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw bindingError;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tlet canonicalManifest: ReturnType<typeof validateLegacyTeamSetupCompletionManifest>;\n\t\t\t\ttry {\n\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(record.manifest, {\n\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t});\n\t\t\t\t} catch (validationError) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait runCandidateMutation(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t}\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw validationError;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tcoordinatorCompletionGroupIds.add(record.group_id);\n\t\t\t\ttry {\n\t\t\t\t\tlet freshGroup = freshGroupByKey.get(freshGroupKey(group));\n\t\t\t\t\tif (!freshGroup && scopedGroups.length > 1) {\n\t\t\t\t\t\tif (remainingCoordinatorTimeoutS(timeoutS, reconciliationDeadlineMs) == null) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tfreshGroup = await loadFreshGroupSnapshot(group, remoteUrl, reconciliationDeadlineMs);\n\t\t\t\t\t}\n\t\t\t\t\tif (!freshGroup) {\n\t\t\t\t\t\tconst contained = await runCandidateMutation(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t}\n\t\t\t\t\tconst applied = await applyCanonicalManifestIfStillAuthorized(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\tauthorization,\n\t\t\t\t\t\tgroup,\n\t\t\t\t\t\tcanonicalManifest,\n\t\t\t\t\t\tfreshGroup.devices,\n\t\t\t\t\t);\n\t\t\t\t\tif (applied !== \"applied\") continue;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw error;\n\t\t\t\t}\n\t\t\t}\n\t\t\tfor (const group of scopedGroups) {\n\t\t\t\tif (coordinatorCompletionGroupIds.has(group.groupId)) continue;\n\t\t\t\tconst publicationTimeoutS = remainingCoordinatorTimeoutS(\n\t\t\t\t\ttimeoutS,\n\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t);\n\t\t\t\tif (publicationTimeoutS == null) break;\n\t\t\t\tif (\n\t\t\t\t\t!hasCompletedLegacyTeamSetup(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\tlegacyTeamCandidateId(group.coordinatorId, group.groupId),\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst candidateRef = legacyTeamCandidateId(group.coordinatorId, group.groupId);\n\t\t\t\tlet reconstructionFailed = false;\n\t\t\t\ttry {\n\t\t\t\t\tconst published = await runCandidateMutation(store.db, candidateRef, () =>\n\t\t\t\t\t\tserializeRecipientPolicyPublicationMutation(store.db, () =>\n\t\t\t\t\t\t\tserializeRecipientPolicyTeamMutation(\n\t\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t\tdeterministicPolicyTeamId(candidateRef),\n\t\t\t\t\t\t\t\tasync () => {\n\t\t\t\t\t\t\t\t\tlet manifest: ReturnType<typeof reconstructLegacyTeamSetupCompletionManifest>;\n\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\tmanifest = reconstructLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t\t\treconstructionFailed = true;\n\t\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t// Publication sends identity and policy data to the coordinator;\n\t\t\t\t\t\t\t\t\t// re-prove the destination is still the configured one.\n\t\t\t\t\t\t\t\t\tif (!stillAuthorizesGroup(authorization, group)) {\n\t\t\t\t\t\t\t\t\t\treconstructionFailed = true;\n\t\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tawait completionDependencies.create({\n\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\t\ttimeoutS: publicationTimeoutS,\n\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\tif (!published || reconstructionFailed) continue;\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Publishing an existing local completion is best-effort. The bounded\n\t\t\t\t\t// list/apply pass above remains authoritative and fail-closed.\n\t\t\t\t\tif (completionApiError(error) !== \"team_setup_completion_conflict\") continue;\n\t\t\t\t\tconst getCompletion = completionDependencies.get;\n\t\t\t\t\tlet canonicalManifest: Awaited<ReturnType<NonNullable<typeof getCompletion>>> = null;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tif (!getCompletion) throw new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\tcanonicalManifest = await retryTransientCoordinatorRead(\n\t\t\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\t\t\tgetCompletion({\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!canonicalManifest) throw new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t} catch {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst contained = await runCandidateMutation(store.db, candidateRef, () =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst freshGroup = await loadFreshGroupSnapshot(\n\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\treconciliationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!freshGroup) throw new Error(\"team_setup_roster_unavailable\");\n\t\t\t\t\t\tconst applied = await applyCanonicalManifestIfStillAuthorized(\n\t\t\t\t\t\t\tstore,\n\t\t\t\t\t\t\tauthorization,\n\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\tcanonicalManifest,\n\t\t\t\t\t\t\tfreshGroup.devices,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (applied !== \"applied\") continue;\n\t\t\t\t\t} catch (applyError) {\n\t\t\t\t\t\tif (applyError instanceof LegacyTeamSetupAdditiveConvergenceError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw applyError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tconst contained = await runCandidateMutation(store.db, candidateRef, () =>\n\t\t\t\t\t\t\t\tcontainLegacyTeamSetupCompletionConflict(store.db, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (!contained) {\n\t\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\", { cause: applyError });\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch (containmentError) {\n\t\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) throw containmentError;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!reconciliationOptions.isolateApplyFailures) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\", { cause: applyError });\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tthrow new Error(completionApiError(error));\n\t\t}\n\t}\n\tasync function loadedCandidateSnapshots(\n\t\tcandidateRef: string,\n\t\tloadOptions: {\n\t\t\tallowCachedSummaryFallback?: boolean;\n\t\t\tdeadlineMs?: number;\n\t\t\tinvalidateSummaryCache?: boolean;\n\t\t} = {},\n\t): Promise<LegacyTeamConfiguredGroupSnapshot[]> {\n\t\tconst allowCachedSummaryFallback = loadOptions.allowCachedSummaryFallback ?? false;\n\t\tconst invalidateSummaryCache = loadOptions.invalidateSummaryCache ?? true;\n\t\tif (invalidateSummaryCache) loadedSummarySnapshots.invalidate();\n\t\ttry {\n\t\t\treturn await loadedSnapshots(candidateRef, loadOptions.deadlineMs);\n\t\t} catch (error) {\n\t\t\tif (!allowCachedSummaryFallback) throw error;\n\t\t\tconst cachedGroups = loadedSummarySnapshots.peek();\n\t\t\tif (!cachedGroups) throw error;\n\t\t\tconst matching = cachedGroups.filter(\n\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t);\n\t\t\tif (matching.length !== 1) throw error;\n\t\t\treturn matching;\n\t\t} finally {\n\t\t\tif (invalidateSummaryCache) loadedSummarySnapshots.invalidate();\n\t\t}\n\t}\n\n\tfunction persistedCompletionGroup(\n\t\tstore: MemoryStore,\n\t\tcandidateRef: string,\n\t): LegacyTeamCandidateGroupDescriptor | null {\n\t\tconst row = store.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT coordinator_id, group_id FROM legacy_team_setup_drafts\n\t\t\t\t WHERE candidate_id = ? ORDER BY rowid DESC LIMIT 1`,\n\t\t\t)\n\t\t\t.get(candidateRef) as { coordinator_id: string; group_id: string } | undefined;\n\t\tif (!row || legacyTeamCandidateId(row.coordinator_id, row.group_id) !== candidateRef)\n\t\t\treturn null;\n\t\treturn { coordinatorId: row.coordinator_id, groupId: row.group_id };\n\t}\n\n\tapp.get(\"/api/sync/team-setup/v1\", async (c) => {\n\t\tlet groups: LegacyTeamConfiguredGroupSnapshot[];\n\t\ttry {\n\t\t\tgroups = await loadedSummarySnapshots();\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\treadPureCandidateViews(store, groups);\n\t\t\tawait reconcileCompletions(store, groups, { isolateApplyFailures: true });\n\t\t\tconst response = {\n\t\t\t\tversion: TEAM_SETUP_VERSION,\n\t\t\t\tcandidates: readPureCandidateViews(store, groups)\n\t\t\t\t\t.map(candidateSummary)\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(candidate): candidate is LegacyTeamSetupPendingCandidateSummaryV1 =>\n\t\t\t\t\t\t\tcandidate.status !== \"ready\",\n\t\t\t\t\t),\n\t\t\t} satisfies LegacyTeamSetupSummaryResponseV1;\n\t\t\treturn c.json(response);\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/team-setup/v1/:candidateRef\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tlet draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tconst terminal = hasCompletedLegacyTeamSetup(store, candidateRef);\n\t\t\tlet candidateGroupsForCompletion: LegacyTeamConfiguredGroupSnapshot[] | null = null;\n\t\t\tif (terminal && draft?.state !== \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tlet candidate: LegacyTeamCandidateView;\n\t\t\tif (draft && (draft.state !== \"completed\" || terminal)) {\n\t\t\t\tcandidate = candidateFromDraft(draft);\n\t\t\t} else {\n\t\t\t\t// Revalidation may replace a completed draft, so it must never decide\n\t\t\t\t// against a stale summary-cache roster. Cache fallback remains safe for\n\t\t\t\t// candidates that have no persisted attempt yet.\n\t\t\t\tconst groups = await loadedCandidateSnapshots(candidateRef, {\n\t\t\t\t\tallowCachedSummaryFallback: draft == null,\n\t\t\t\t\tinvalidateSummaryCache: false,\n\t\t\t\t});\n\t\t\t\tconst candidateGroups = groups.filter(\n\t\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t\t);\n\t\t\t\tcandidateGroupsForCompletion = candidateGroups;\n\t\t\t\tconst postLoadDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\tif (hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\t\tif (postLoadDraft?.state !== \"completed\") {\n\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t\t\t}\n\t\t\t\t\tdraft = postLoadDraft;\n\t\t\t\t\tcandidate = candidateFromDraft(postLoadDraft);\n\t\t\t\t} else {\n\t\t\t\t\tconst discoveredCandidate = discoverCandidates(store, candidateGroups).find(\n\t\t\t\t\t\t(item) => item.candidateRef === candidateRef,\n\t\t\t\t\t);\n\t\t\t\t\tif (!discoveredCandidate) {\n\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t\t\t}\n\t\t\t\t\tcandidate = discoveredCandidate;\n\t\t\t\t\tdraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst cachedCandidateGroups = loadedSummarySnapshots\n\t\t\t\t.peek()\n\t\t\t\t?.filter(\n\t\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t\t);\n\t\t\tlet completionGroups: LegacyTeamCandidateGroupDescriptor[] | null =\n\t\t\t\tcandidateGroupsForCompletion ??\n\t\t\t\t(cachedCandidateGroups?.length ? cachedCandidateGroups : null);\n\t\t\tif (!completionGroups) {\n\t\t\t\tconst persistedGroup = persistedCompletionGroup(store, candidateRef);\n\t\t\t\tcompletionGroups = persistedGroup ? [persistedGroup] : null;\n\t\t\t}\n\t\t\tconst terminalBeforeReconciliation = hasCompletedLegacyTeamSetup(store, candidateRef);\n\t\t\tif (completionGroups) await reconcileCompletions(store, completionGroups);\n\t\t\tdraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (\n\t\t\t\t!draft ||\n\t\t\t\t(!terminalBeforeReconciliation && hasCompletedLegacyTeamSetup(store, candidateRef))\n\t\t\t) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tif (completionGroups) candidate = candidateFromDraft(draft);\n\n\t\t\treturn c.json(detailResponse(store, draft, candidate));\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/team-setup/v1/:candidateRef/devices/:deviceRef/assignment\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst deviceRef = c.req.param(\"deviceRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !DEVICE_REF_PATTERN.test(deviceRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (\n\t\t\t!parsed.ok ||\n\t\t\t!hasExactKeys(parsed.value, [\"attemptId\", \"expectation\", \"targetIdentityRef\"])\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId, expectation, targetIdentityRef } = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\ttypeof targetIdentityRef !== \"string\" ||\n\t\t\t!IDENTITY_REF_PATTERN.test(targetIdentityRef) ||\n\t\t\t!expectation ||\n\t\t\ttypeof expectation !== \"object\" ||\n\t\t\tArray.isArray(expectation)\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst device = draft.devices.find((item) => item.deviceRef === deviceRef);\n\t\t\tif (!device) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst submittedExpectation = expectation as Record<string, unknown>;\n\t\t\tconst expectationMatches =\n\t\t\t\tdevice.expectation.kind === \"absent\"\n\t\t\t\t\t? hasExactKeys(submittedExpectation, [\"kind\"]) && submittedExpectation.kind === \"absent\"\n\t\t\t\t\t: hasExactKeys(submittedExpectation, [\"assignmentVersion\", \"identityRef\", \"kind\"]) &&\n\t\t\t\t\t\tsubmittedExpectation.kind === \"existing\" &&\n\t\t\t\t\t\tsubmittedExpectation.assignmentVersion === device.expectation.assignmentVersion &&\n\t\t\t\t\t\tsubmittedExpectation.identityRef ===\n\t\t\t\t\t\t\trequiredIdentityRef(candidateRef, device.expectation.identityId);\n\t\t\tif (!expectationMatches) {\n\t\t\t\treturn c.json({ error: \"team_setup_assignment_changed\" as const }, 409);\n\t\t\t}\n\t\t\tconst target = identityChoices(store, candidateRef).find(\n\t\t\t\t(choice) => choice.identityRef === targetIdentityRef,\n\t\t\t);\n\t\t\tif (!target) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\tsetLegacyTeamSetupDeviceAssignment(store.db, {\n\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\tdeviceRef,\n\t\t\t\t\t\t\t\ttargetIdentityId: target.identityId,\n\t\t\t\t\t\t\t\texpectation: device.expectation,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/team-setup/v1/:candidateRef/devices/:deviceRef/decision\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst deviceRef = c.req.param(\"deviceRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !DEVICE_REF_PATTERN.test(deviceRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId, decision, expectedTargetIdentityRef } = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\t!([\"included\", \"excluded\", \"removed\"] as unknown[]).includes(decision) ||\n\t\t\t(decision === \"included\"\n\t\t\t\t? !hasExactKeys(parsed.value, [\"attemptId\", \"decision\", \"expectedTargetIdentityRef\"]) ||\n\t\t\t\t\ttypeof expectedTargetIdentityRef !== \"string\" ||\n\t\t\t\t\t!IDENTITY_REF_PATTERN.test(expectedTargetIdentityRef)\n\t\t\t\t: !hasExactKeys(parsed.value, [\"attemptId\", \"decision\"]))\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst device = draft.devices.find((item) => item.deviceRef === deviceRef);\n\t\t\tif (!device) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tif (\n\t\t\t\tdecision === \"included\" &&\n\t\t\t\t(device.targetIdentityId === null ||\n\t\t\t\t\trequiredIdentityRef(candidateRef, device.targetIdentityId) !== expectedTargetIdentityRef)\n\t\t\t) {\n\t\t\t\treturn c.json({ error: \"team_setup_assignment_changed\" as const }, 409);\n\t\t\t}\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\tsetLegacyTeamSetupDeviceDecision(store.db, {\n\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\tdeviceRef,\n\t\t\t\t\t\t\t\tdecision: decision as \"included\" | \"excluded\" | \"removed\",\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.delete(\"/api/sync/team-setup/v1/:candidateRef/devices/:deviceRef/decision\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst deviceRef = c.req.param(\"deviceRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !DEVICE_REF_PATTERN.test(deviceRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok || !hasExactKeys(parsed.value, [\"attemptId\"])) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId } = parsed.value;\n\t\tif (typeof attemptId !== \"string\" || !ATTEMPT_ID_PATTERN.test(attemptId)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (!draft.devices.some((item) => item.deviceRef === deviceRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() => clearLegacyTeamSetupDeviceDecision(store.db, { attemptId, deviceRef }),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/team-setup/v1/:candidateRef/projects/:projectRef/mapping\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tconst projectRef = c.req.param(\"projectRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef) || !PROJECT_REF_PATTERN.test(projectRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok || !hasExactKeys(parsed.value, [\"attemptId\", \"resolvedProjectRef\"])) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst { attemptId, resolvedProjectRef } = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\ttypeof resolvedProjectRef !== \"string\" ||\n\t\t\t!RESOLVED_PROJECT_REF_PATTERN.test(resolvedProjectRef)\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst project = draft.projects.find((item) => item.projectRef === projectRef);\n\t\t\tif (!project) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\t}\n\t\t\tif (project.resolution === \"deterministic\") {\n\t\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t\t}\n\t\t\tconst target = projectMappingChoices(store).find(\n\t\t\t\t(choice) =>\n\t\t\t\t\tlegacyTeamResolvedProjectRef(projectRef, choice.projectIdentity) === resolvedProjectRef,\n\t\t\t);\n\t\t\tif (!target) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() =>\n\t\t\t\t\t\t\tsetLegacyTeamSetupProjectMapping(store.db, {\n\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\tprojectRef,\n\t\t\t\t\t\t\t\tresolvedProjectIdentity: target.projectIdentity,\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/team-setup/v1/:candidateRef/refresh\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok || !hasExactKeys(parsed.value, [])) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tlet store: MemoryStore;\n\t\ttry {\n\t\t\tstore = options.getStore();\n\t\t\tconst currentDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (currentDraft?.state === \"completed\" || hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t\tlet groups: LegacyTeamConfiguredGroupSnapshot[];\n\t\ttry {\n\t\t\tgroups = await loadMutableCandidateSnapshots(store, candidateRef, () =>\n\t\t\t\tloadedCandidateSnapshots(candidateRef),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t\tif (\n\t\t\tgroups.filter(\n\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t).length === 0\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t}\n\t\ttry {\n\t\t\tconst releaseMutation = claimCandidateMutation(store.db, candidateRef);\n\t\t\tif (!releaseMutation) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\ttry {\n\t\t\t\treturn c.json(\n\t\t\t\t\tprojectMutationAtomically(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\t() => {\n\t\t\t\t\t\t\tconst currentDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tcurrentDraft?.state === \"completed\" ||\n\t\t\t\t\t\t\t\thasCompletedLegacyTeamSetup(store, candidateRef)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_confirmation_stale\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn refreshLegacyTeamCandidate(\n\t\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t\t{ projection: projectionOptions(store), groups },\n\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t(draft) => detailResponse(store, draft),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t} finally {\n\t\t\t\treleaseMutation();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\treturn c.json({ error: code }, errorStatus(code));\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/team-setup/v1/:candidateRef/finish\", async (c) => {\n\t\tconst candidateRef = c.req.param(\"candidateRef\");\n\t\tif (!CANDIDATE_REF_PATTERN.test(candidateRef)) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst parsed = await parseBoundedJsonObject(c);\n\t\tif (!parsed.ok) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst finishKeys = [\n\t\t\t\"attemptId\",\n\t\t\t\"confirmedAccessDeltaDigest\",\n\t\t\t\"confirmedViewerAccessDeltaDigest\",\n\t\t\t\"finishDigest\",\n\t\t] as const;\n\t\tif (!hasExactKeys(parsed.value, finishKeys)) {\n\t\t\treturn Object.keys(parsed.value).every((key) =>\n\t\t\t\tfinishKeys.includes(key as (typeof finishKeys)[number]),\n\t\t\t)\n\t\t\t\t? c.json({ error: \"team_setup_confirmation_stale\" as const }, 409)\n\t\t\t\t: c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tconst {\n\t\t\tattemptId,\n\t\t\tconfirmedAccessDeltaDigest,\n\t\t\tconfirmedViewerAccessDeltaDigest,\n\t\t\tfinishDigest,\n\t\t} = parsed.value;\n\t\tif (\n\t\t\ttypeof attemptId !== \"string\" ||\n\t\t\t!ATTEMPT_ID_PATTERN.test(attemptId) ||\n\t\t\ttypeof finishDigest !== \"string\" ||\n\t\t\t!FINISH_DIGEST_PATTERN.test(finishDigest) ||\n\t\t\ttypeof confirmedAccessDeltaDigest !== \"string\" ||\n\t\t\t!ACCESS_DELTA_DIGEST_PATTERN.test(confirmedAccessDeltaDigest) ||\n\t\t\ttypeof confirmedViewerAccessDeltaDigest !== \"string\" ||\n\t\t\t!VIEWER_ACCESS_DELTA_DIGEST_PATTERN.test(confirmedViewerAccessDeltaDigest)\n\t\t) {\n\t\t\treturn c.json({ error: \"team_setup_incomplete\" as const }, 400);\n\t\t}\n\t\tlet releaseMutation: (() => void) | undefined;\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\tlet releaseActorMutations: (() => void) | undefined;\n\t\tlet finishLogRedactValues: readonly string[] = [];\n\t\ttry {\n\t\t\tconst store = options.getStore();\n\t\t\tconst draft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!draft) return c.json({ error: \"team_setup_confirmation_stale\" as const }, 404);\n\t\t\tif (draft.state !== \"completed\" && hasCompletedLegacyTeamSetup(store, candidateRef)) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tif (draft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst replay = replayLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId,\n\t\t\t\tfinishDigest,\n\t\t\t\tconfirmedAccessDeltaDigest,\n\t\t\t});\n\t\t\tif (replay) return c.json(finishResponse(candidateRef, replay));\n\t\t\tif (draft.state === \"completed\") {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst preview = previewLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId: draft.attemptId,\n\t\t\t});\n\t\t\trequireLegacyTeamSetupAccessDeltaWithinLimit(preview.accessDelta);\n\t\t\tconst safeDraft = viewerSafeDraft(store, draft);\n\t\t\tconst currentViewerDigest = viewerAccessDeltaDigest(\n\t\t\t\tviewerSafeAccessDelta(candidateRef, preview.accessDelta, {\n\t\t\t\t\tteamDisplayName: draft.displayName,\n\t\t\t\t\t...safeDraft,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tif (currentViewerDigest !== confirmedViewerAccessDeltaDigest) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst freshGroups = await loadedCandidateSnapshots(candidateRef);\n\t\t\tconst matchingGroups = freshGroups.filter(\n\t\t\t\t(group) => legacyTeamCandidateId(group.coordinatorId, group.groupId) === candidateRef,\n\t\t\t);\n\t\t\tif (matchingGroups.length !== 1) throw safeCoordinatorError();\n\t\t\tconst group = matchingGroups[0];\n\t\t\tif (!group) throw safeCoordinatorError();\n\t\t\treleaseMutation = claimCandidateMutation(store.db, candidateRef) ?? undefined;\n\t\t\tif (!releaseMutation) {\n\t\t\t\t// An identical request may be committing right now. Wait for it and\n\t\t\t\t// return its immutable result instead of a stale-confirmation error.\n\t\t\t\tawait candidateMutationSettled(store.db, candidateRef);\n\t\t\t\tconst overlappingReplay = replayLegacyTeamSetupActivation(store.db, {\n\t\t\t\t\tcandidateRef,\n\t\t\t\t\tattemptId,\n\t\t\t\t\tfinishDigest,\n\t\t\t\t\tconfirmedAccessDeltaDigest,\n\t\t\t\t});\n\t\t\t\tif (overlappingReplay) return c.json(finishResponse(candidateRef, overlappingReplay));\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\t// The pre-claim replay lookup raced an in-flight commit; recheck under the claim.\n\t\t\tconst claimedReplay = replayLegacyTeamSetupActivation(store.db, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId,\n\t\t\t\tfinishDigest,\n\t\t\t\tconfirmedAccessDeltaDigest,\n\t\t\t});\n\t\t\tif (claimedReplay) return c.json(finishResponse(candidateRef, claimedReplay));\n\t\t\tconst claimedDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\tif (!claimedDraft || claimedDraft.attemptId !== attemptId) {\n\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t}\n\t\t\tconst publicationDeadlineMs = Date.now() + COORDINATOR_ROSTER_READ_BUDGET_MS;\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\t// Every identity the activation reads or writes is part of the immutable\n\t\t\t// publication winner: the target of each included device and the existing\n\t\t\t// assignment of every reviewed device (including excluded or removed ones,\n\t\t\t// whose current assignment the access delta depends on). These locks cover\n\t\t\t// coordinator creation, conflict recovery, and local application.\n\t\t\treleaseActorMutations = await claimRecipientPolicyActorMutations(\n\t\t\t\tstore.db,\n\t\t\t\tclaimedDraft.devices.flatMap((device) => [\n\t\t\t\t\t...(device.decision === \"included\" && device.targetIdentityId\n\t\t\t\t\t\t? [device.targetIdentityId]\n\t\t\t\t\t\t: []),\n\t\t\t\t\t...(device.existingIdentityId ? [device.existingIdentityId] : []),\n\t\t\t\t]),\n\t\t\t);\n\t\t\tconst response = await serializeRecipientPolicyTeamMutation(\n\t\t\t\tstore.db,\n\t\t\t\tdeterministicPolicyTeamId(candidateRef),\n\t\t\t\t() =>\n\t\t\t\t\tserializeRecipientPolicyCoordinatorGroupMutation(store.db, group.groupId, async () => {\n\t\t\t\t\t\tlet authorization: CompletionAuthorization | null;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tauthorization = currentCompletionAuthorization();\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tthrow new Error(completionApiError(error));\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!completionDependencies || !authorization) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_unavailable\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!authorizesGroup(authorization, group)) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst { config, remoteUrl } = authorization;\n\t\t\t\t\t\tfinishLogRedactValues = [config.syncCoordinatorAdminSecret];\n\t\t\t\t\t\tconst freshGroup = await loadFreshGroupSnapshot(\n\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (!freshGroup) {\n\t\t\t\t\t\t\tthrow new TeamSetupFinishError(\n\t\t\t\t\t\t\t\t\"team_setup_roster_unavailable\",\n\t\t\t\t\t\t\t\t\"coordinator_roster_unavailable\",\n\t\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\tnew Error(\"coordinator roster unavailable\"),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!stillAuthorizesGroup(authorization, group)) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_invalid\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst projectInventory = legacyTeamCandidateProjectInventory(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\tprojectionOptions(store),\n\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tconst freshPreview = inspectFreshLegacyTeamSetupActivation(store.db, {\n\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\tfreshRoster: freshGroup.devices,\n\t\t\t\t\t\t\tprojectInventory,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tfreshPreview.finishDigest !== finishDigest ||\n\t\t\t\t\t\t\tfreshPreview.accessDeltaDigest !== confirmedAccessDeltaDigest\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst freshDraft = getLegacyTeamSetupDraft(store.db, candidateRef);\n\t\t\t\t\t\tif (!freshDraft || freshDraft.attemptId !== attemptId) {\n\t\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst safeFreshDraft = viewerSafeDraft(store, freshDraft);\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tviewerAccessDeltaDigest(\n\t\t\t\t\t\t\t\tviewerSafeAccessDelta(candidateRef, freshPreview.accessDelta, {\n\t\t\t\t\t\t\t\t\tteamDisplayName: freshDraft.displayName,\n\t\t\t\t\t\t\t\t\t...safeFreshDraft,\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t) !== confirmedViewerAccessDeltaDigest\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\treturn c.json({ error: \"team_setup_confirmation_stale\" as const }, 409);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst completedAt = new Date().toISOString();\n\t\t\t\t\t\tconst proposedManifest = deriveLegacyTeamSetupCompletionManifest(store.db, {\n\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\tcompletedAt,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tconst timeoutS = Math.max(1, config.syncCoordinatorTimeoutS);\n\t\t\t\t\t\tconst publicationTimeoutS = remainingCoordinatorTimeoutS(\n\t\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (publicationTimeoutS == null) {\n\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_unavailable\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlet canonicalManifest: typeof proposedManifest;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(\n\t\t\t\t\t\t\t\t(\n\t\t\t\t\t\t\t\t\tawait completionDependencies.create({\n\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\tmanifest: proposedManifest,\n\t\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\t\ttimeoutS: publicationTimeoutS,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t).manifest,\n\t\t\t\t\t\t\t\t{ coordinatorId: group.coordinatorId, groupId: group.groupId },\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(canonicalManifest) !==\n\t\t\t\t\t\t\t\tcanonicalCoordinatorLegacyTeamCompletionManifestJson(proposedManifest)\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tconst code = completionApiError(error);\n\t\t\t\t\t\t\tconst details = teamSetupFinishFailureDetails(error);\n\t\t\t\t\t\t\tconst getCompletion = completionDependencies.get;\n\t\t\t\t\t\t\tif (code !== \"team_setup_completion_conflict\" || !getCompletion) {\n\t\t\t\t\t\t\t\twarnTeamSetupFinishFailure(error, details, {\n\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\tattemptId,\n\t\t\t\t\t\t\t\t\tapiCode: code,\n\t\t\t\t\t\t\t\t\tredactValues: finishLogRedactValues,\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\tthrow new TeamSetupFinishError(code, details.reason, true, error);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\tconst existing = await retryTransientCoordinatorRead(\n\t\t\t\t\t\t\t\t\t(attemptTimeoutS) =>\n\t\t\t\t\t\t\t\t\t\tgetCompletion({\n\t\t\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t\t\t\tcandidateRef,\n\t\t\t\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t\t\t\t\t\t\ttimeoutS: attemptTimeoutS,\n\t\t\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t\t\t\ttimeoutS,\n\t\t\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\tif (!existing) throw new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t\tcanonicalManifest = validateLegacyTeamSetupCompletionManifest(existing, {\n\t\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t// A conflict can mean an earlier request committed before its response was lost.\n\t\t\t\t\t\t\t\t// The matching policy digest identifies that winner; its publication timestamp\n\t\t\t\t\t\t\t\t// is coordinator-owned metadata and must be applied unchanged.\n\t\t\t\t\t\t\t\tif (canonicalManifest.finish_digest !== proposedManifest.finish_digest) {\n\t\t\t\t\t\t\t\t\tthrow new Error(\"team_setup_completion_conflict\");\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} catch (recoveryError) {\n\t\t\t\t\t\t\t\tthrow new TeamSetupFinishError(\n\t\t\t\t\t\t\t\t\tcompletionApiError(recoveryError),\n\t\t\t\t\t\t\t\t\tteamSetupFinishFailureDetails(recoveryError).reason,\n\t\t\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\t\trecoveryError,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t// Publication is the commit point. Apply its immutable winner after binding\n\t\t\t\t\t\t// each included device to the current coordinator roster evidence.\n\t\t\t\t\t\t// If this reload fails, reconciliation can apply the published winner later.\n\t\t\t\t\t\tlet postPublicationGroup: LegacyTeamConfiguredGroupSnapshot | undefined;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tpostPublicationGroup = await loadFreshGroupSnapshot(\n\t\t\t\t\t\t\t\tgroup,\n\t\t\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\t\t\tpublicationDeadlineMs,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tif (legacyTeamSetupApiErrorCode(error) === \"team_setup_completion_invalid\") {\n\t\t\t\t\t\t\t\tthrow new TeamSetupFinishError(\n\t\t\t\t\t\t\t\t\t\"team_setup_roster_unavailable\",\n\t\t\t\t\t\t\t\t\t\"coordinator_roster_unavailable\",\n\t\t\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\t\terror,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tthrow error;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!postPublicationGroup) {\n\t\t\t\t\t\t\tthrow new TeamSetupFinishError(\n\t\t\t\t\t\t\t\t\"team_setup_roster_unavailable\",\n\t\t\t\t\t\t\t\t\"coordinator_roster_unavailable\",\n\t\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\tnew Error(\"coordinator roster unavailable\"),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst result = await applyLegacyTeamSetupCompletionManifestAndReturnActivation(\n\t\t\t\t\t\t\tstore.db,\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tcoordinatorId: group.coordinatorId,\n\t\t\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\t\t\tfreshRoster: postPublicationGroup.devices,\n\t\t\t\t\t\t\t\tmanifest: canonicalManifest,\n\t\t\t\t\t\t\t\texpectedDraftManifest: proposedManifest,\n\t\t\t\t\t\t\t\trecipientPolicyLocksHeld: {\n\t\t\t\t\t\t\t\t\tpublication: true,\n\t\t\t\t\t\t\t\t\tteam: true,\n\t\t\t\t\t\t\t\t\tcoordinatorGroup: true,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn c.json(finishResponse(candidateRef, result));\n\t\t\t\t\t}),\n\t\t\t);\n\t\t\treturn response;\n\t\t} catch (error) {\n\t\t\tconst code = apiErrorCode(error);\n\t\t\tconst details = teamSetupFinishFailureDetails(error);\n\t\t\twarnTeamSetupFinishFailure(error, details, {\n\t\t\t\tcandidateRef,\n\t\t\t\tattemptId,\n\t\t\t\tapiCode: code,\n\t\t\t\tredactValues: finishLogRedactValues,\n\t\t\t});\n\t\t\treturn c.json(finishErrorResponse(code, details), errorStatus(code));\n\t\t} finally {\n\t\t\treleaseActorMutations?.();\n\t\t\treleasePublicationMutation?.();\n\t\t\treleaseMutation?.();\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * Sync routes — status, peers, actors, attempts, pairing, mutations.\n */\n\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport { hostname, networkInterfaces } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport type {\n\tCoordinatorBootstrapGrantVerification,\n\tCoordinatorConsumedTeamInvite,\n\tCoordinatorEnrollment,\n\tCoordinatorEnrollmentReconcileResult,\n\tCoordinatorScope,\n\tCoordinatorScopeMembership,\n\tDeviceIdentityBindingCommitRequestV1,\n\tDeviceIdentityBindingPreviewRequestV1,\n\tDeviceIdentityCoordinatorEvidence,\n\tMaintenanceJobSnapshot,\n\tMemoryStore,\n\tProjectScopeGuardrailWarning,\n\tReassignScopeCapability,\n\tRecipientPolicyCoordinatorEffectReceipt,\n\tRecipientPolicyOnboardingPreviewV1,\n\tRecipientPolicyPeerCapability,\n\tRecipientPolicyReconcileResult,\n\tRecipientPolicyReconcilerEffects,\n\tRecipientPolicyReviewDecisionV1,\n\tRecipientPolicyReviewResolveRequestV1,\n\tRecipientReviewedIntentV1,\n\tReplicationOp,\n\tSemanticIndexDiagnostics,\n\tShareOperationLifecycleStepInput,\n\tShareOperationPlan,\n\tSharePersonIntent,\n\tShareProjectIntent,\n} from \"@codemem/core\";\nimport {\n\tACCESS_CLEANUP_OP_TYPE,\n\taddSyncScopeToBoundary,\n\tanalyzeProjectScopeMappingChangeGuardrails,\n\tapplyReplicationOps,\n\tbuildAuthHeaders,\n\tbuildBaseUrl,\n\tbuildDirectPeerAuthHeaders,\n\tCoordinatorReciprocalApprovalRequestChangedError,\n\tcanonicalWorkspaceIdentity,\n\tclaimRecipientPolicyActorMutations,\n\tclaimRecipientPolicyPublicationMutation,\n\tcleanupNonces,\n\tcommitDeviceIdentityBindings,\n\tcommitRecipientPolicyEdges,\n\tcoordinatorArchiveGroupAction,\n\tcoordinatorCreateAddDeviceInviteAction,\n\tcoordinatorCreateGroupAction,\n\tcoordinatorCreateInviteAction,\n\tcoordinatorCreateScopeAction,\n\tcoordinatorDisableDeviceAction,\n\tcoordinatorEnableDeviceAction,\n\tcoordinatorGrantScopeMembershipAction,\n\tcoordinatorImportInviteAction,\n\tcoordinatorListBootstrapGrantsAction,\n\tcoordinatorListConsumedTeamInvitesAction,\n\tcoordinatorListDevicesAction,\n\tcoordinatorListGroupsAction,\n\tcoordinatorListJoinRequestsAction,\n\tcoordinatorListReviewedRecipientInviteEvidenceAction,\n\tcoordinatorListScopeMembershipsAction,\n\tcoordinatorListScopesAction,\n\tcoordinatorRemoveDeviceAction,\n\tcoordinatorRenameDeviceAction,\n\tcoordinatorRenameGroupAction,\n\tcoordinatorReviewJoinRequestAction,\n\tcoordinatorRevokeBootstrapGrantAction,\n\tcoordinatorRevokeScopeMembershipAction,\n\tcoordinatorStatusSnapshot,\n\tcoordinatorUnarchiveGroupAction,\n\tcoordinatorUpdateScopeAction,\n\tcountShareableProjectMemories,\n\tcreateCoordinatorReciprocalApproval,\n\tDEFAULT_TIME_WINDOW_S,\n\tdecodeInvitePayload,\n\tdefaultSpaceScopeIdForGroup,\n\tdeleteProjectScopeSettingsMapping,\n\tdiagnoseStalePeerReceivedRows,\n\tensureDeviceIdentity,\n\texecuteShareProvisioning,\n\textractInvitePayload,\n\textractReplicationOps,\n\ttype FilterReplicationSkipped,\n\tfilterReplicationOpsForSyncWithStatus,\n\tfingerprintPublicKey,\n\tformatHostPort,\n\tfriendlyDeviceName,\n\tgetCoordinatorEnrollmentReconciliationIssueSummary,\n\tgetCoordinatorGroupPreference,\n\tgetRecipientPolicyAuthorityState,\n\tgetSemanticIndexDiagnostics,\n\tgetSyncResetState,\n\ttype InboundScopeRejectionPeerSummary,\n\tinviteTokenDigest,\n\tisPeerTrustBindingCompatible,\n\tisProjectSyncEnablementError,\n\tisScopedSyncCapability,\n\tLEGACY_SHARED_REVIEW_SCOPE_ID,\n\tLOCAL_DEFAULT_SCOPE_ID,\n\tLOCAL_SYNC_CAPABILITY,\n\tLOCAL_SYNC_FEATURES,\n\tlistAuthorizedScopesForPeer,\n\tlistCoordinatorJoinRequests,\n\tlistDeviceIdentityInventory,\n\tlistInboundScopeRejections,\n\tlistLegacyRecipientPolicyProjections,\n\tlistMaintenanceJobs,\n\tlistPerPeerScopeSyncState,\n\tlistProjectScopeCandidates,\n\tlistProjectScopeInventory,\n\tlistProjectScopeSettingsMappings,\n\tlistRecipientPolicyIntent,\n\tlistRecipientPolicyReview,\n\tlistSharingDomainSettingsScopes,\n\tloadMemorySnapshotPageForPeer,\n\tloadReplicationOpsForPeer,\n\tlookupCoordinatorPeers,\n\tmergeAddresses,\n\tmigrateRecipientPolicyIntent,\n\tnegotiateSyncCapability,\n\tnormalizeAddress,\n\tnormalizeHumanPresentationName,\n\tnormalizeSyncCapability,\n\tnormalizeSyncFeatures,\n\tnormalizeTeammateName,\n\tparseAcceptedProjectIntent,\n\tparseReassignScopePayload,\n\tparseRecipientPolicyEdgeCommitRequest,\n\tparseSyncScopeRequest,\n\tpersistShareOperation,\n\tpersonalScopeGrantStatusForPeer,\n\tplanShareOperation,\n\tpreviewDeviceIdentityBindings,\n\tpreviewRecipientPolicyEdges,\n\tpreviewRecipientPolicyOnboarding,\n\tpreviewRecipientPolicyOnboardingFromReviewedIntent,\n\tprojectShareLifecycle,\n\tRecipientPolicyEdgeRequestError,\n\tRecipientPolicyTeamRenameError,\n\treadCodememConfigFile,\n\treadCoordinatorSyncConfig,\n\treassignProjectScopeInventoryProject,\n\trecipientInviteAuthoritativeIdentityId,\n\trecipientReviewedIntentDigest,\n\treconcileCoordinatorEnrollmentSnapshot,\n\treconcileRecipientPolicyProject,\n\treconcileShareOperationAcceptance,\n\trecordHighestObservedDirectSignatureVersion,\n\trecordNonce,\n\trefreshAuthorizedCoordinatorPeerTrust,\n\trefreshConfiguredScopeMembershipCache,\n\trejectInboundScopeFailures,\n\trenameRecipientPolicyTeam,\n\trequestJson,\n\tresolveRecipientPolicyReview,\n\tresolveRecipientPolicyReviewBulk,\n\trunSyncPass,\n\tSCOPE_MEMBERSHIP_REVOCATION_LIMITATION,\n\tSYNC_AUTHORIZATION_REFRESH_HEADER,\n\tSYNC_CAPABILITY_HEADER,\n\tSYNC_FEATURES_HEADER,\n\tSYNC_SCOPE_QUERY_PARAM,\n\tschema,\n\tserializeRecipientPolicyTeamMutation,\n\tsummarizeInboundScopeRejections,\n\tsupportsSyncFeature,\n\tsyncScopeResetRequiredPayload,\n\tupdatePeerAddresses,\n\tupsertCoordinatorGroupPreference,\n\tupsertProjectScopeSettingsMapping,\n\tVERSION,\n\tverifyDirectPeerSignature,\n\tverifyRecipientReviewedIntent,\n\tverifySignature,\n\twriteCodememConfigFile,\n} from \"@codemem/core\";\nimport { and, count, desc, eq, max, ne } from \"drizzle-orm\";\nimport { drizzle } from \"drizzle-orm/better-sqlite3\";\nimport { type Context, Hono } from \"hono\";\nimport { queryBool, queryInt, safeJsonList } from \"../helpers.js\";\nimport type { InMemoryRequestRateLimiter } from \"../request-rate-limit.js\";\nimport { legacyTeamCandidateGroupDescriptors, normalizedCoordinatorId } from \"./team-setup.js\";\n\ntype StoreFactory = () => MemoryStore;\nexport type DeviceIdentityCoordinatorEvidenceLoader =\n\t() => Promise<DeviceIdentityCoordinatorEvidence>;\nexport interface SyncRoutesOptions {\n\tloadDeviceIdentityCoordinatorEvidence?: DeviceIdentityCoordinatorEvidenceLoader;\n\tonRecipientPolicyTeamRenamed?: () => void;\n\treadCoordinatorConfig?: typeof readCoordinatorSyncConfig;\n\trenameCoordinatorGroup?: typeof coordinatorRenameGroupAction;\n}\ntype SyncRuntimeStatus = {\n\tphase:\n\t\t| \"starting\"\n\t\t| \"running\"\n\t\t| \"stopping\"\n\t\t| \"error\"\n\t\t| \"disabled\"\n\t\t| \"rebootstrapping\"\n\t\t| \"needs_attention\"\n\t\t| null;\n\tdetail?: string | null;\n};\n\ntype SafeSkippedSyncDetail = Pick<\n\tFilterReplicationSkipped,\n\t\"reason\" | \"skipped_count\" | \"scope_id\" | \"project\" | \"visibility\"\n>;\n\nfunction safeSkippedSyncDetail(\n\tdetail: FilterReplicationSkipped | null | undefined,\n): SafeSkippedSyncDetail | null {\n\tif (!detail) return null;\n\treturn {\n\t\treason: detail.reason,\n\t\tskipped_count: detail.skipped_count,\n\t\tscope_id: detail.scope_id ?? null,\n\t\tproject: detail.project ?? null,\n\t\tvisibility: detail.visibility ?? null,\n\t};\n}\n\ninterface SyncProtocolRouteOptions {\n\trouteRateLimit?: {\n\t\tlimiter: InMemoryRequestRateLimiter;\n\t\treadLimit: number;\n\t\tmutationLimit: number;\n\t\tunauthenticatedReadLimit: number;\n\t\tunauthenticatedMutationLimit: number;\n\t};\n}\n\nconst SYNC_STALE_AFTER_SECONDS = 10 * 60;\nconst SYNC_PROTOCOL_VERSION = \"2\";\nconst LEGACY_SYNC_ACTOR_DISPLAY_NAME = \"Legacy synced peer\";\nconst LEGACY_SHARED_WORKSPACE_ID = \"shared:legacy\";\n\n/**\n * Attempt to decode a pasted string as a device-pairing payload.\n *\n * Returns:\n * - `{ kind: \"pair\", ... }` when the payload base64-decodes to JSON with\n * the expected pairing shape AND the fingerprint matches the public\n * key.\n * - `{ kind: \"invalid-pair\", error }` when the payload looked like a\n * pairing payload but failed validation — the caller should 400 this\n * rather than falling back to coordinator-invite handling.\n * - `null` when the string is not a pairing payload at all.\n */\nfunction tryParsePairingPayload(value: string):\n\t| {\n\t\t\tkind: \"pair\";\n\t\t\tdevice_id: string;\n\t\t\tfingerprint: string;\n\t\t\tpublic_key: string;\n\t\t\taddresses: string[];\n\t }\n\t| { kind: \"invalid-pair\"; error: string }\n\t| null {\n\t// Accept both shapes the CLI can emit:\n\t// - raw JSON (`codemem sync pair --payload-only`)\n\t// - base64-encoded JSON (the inner blob inside the shell pipe wrapper)\n\tlet parsed: Record<string, unknown>;\n\tif (value.trimStart().startsWith(\"{\")) {\n\t\ttry {\n\t\t\tparsed = JSON.parse(value) as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t} else {\n\t\tlet decoded: string;\n\t\ttry {\n\t\t\tdecoded = Buffer.from(value, \"base64\").toString(\"utf8\");\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t\tif (!decoded?.trimStart().startsWith(\"{\")) return null;\n\t\ttry {\n\t\t\tparsed = JSON.parse(decoded) as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn null;\n\t\t}\n\t}\n\tconst deviceId = String(parsed.device_id ?? \"\").trim();\n\tconst fingerprint = String(parsed.fingerprint ?? \"\").trim();\n\tconst publicKey = String(parsed.public_key ?? \"\").trim();\n\t// If the JSON doesn't carry any of the pairing discriminators, treat\n\t// it as a different kind of payload (e.g. a coordinator invite happened\n\t// to be JSON-encoded directly). Let the caller keep trying.\n\tif (!deviceId && !fingerprint && !publicKey) return null;\n\tconst rawAddresses = Array.isArray(parsed.addresses) ? parsed.addresses : [];\n\tconst addresses = rawAddresses\n\t\t.filter((item): item is string => typeof item === \"string\" && item.trim().length > 0)\n\t\t.map((item) => item.trim());\n\tif (!deviceId || !fingerprint || !publicKey || addresses.length === 0) {\n\t\treturn {\n\t\t\tkind: \"invalid-pair\",\n\t\t\terror: \"Pairing payload missing device_id, fingerprint, public_key, or addresses\",\n\t\t};\n\t}\n\tif (fingerprintPublicKey(publicKey) !== fingerprint) {\n\t\treturn { kind: \"invalid-pair\", error: \"Pairing payload fingerprint mismatch\" };\n\t}\n\treturn {\n\t\tkind: \"pair\",\n\t\tdevice_id: deviceId,\n\t\tfingerprint,\n\t\tpublic_key: publicKey,\n\t\taddresses,\n\t};\n}\n\ntype CoordinatorAdminReadiness = \"not_configured\" | \"partial\" | \"ready\";\n\nfunction coordinatorAdminStatusPayload(config = readCoordinatorSyncConfig()) {\n\tconst groups = config.syncCoordinatorGroups;\n\tconst activeGroup = groups[0] ?? null;\n\tconst hasUrl = Boolean(config.syncCoordinatorUrl);\n\tconst hasGroups = groups.length > 0;\n\tconst hasAdminSecret = Boolean(config.syncCoordinatorAdminSecret);\n\tlet readiness: CoordinatorAdminReadiness = \"ready\";\n\tif (!hasUrl) readiness = \"not_configured\";\n\telse if (!hasGroups || !hasAdminSecret) readiness = \"partial\";\n\treturn {\n\t\treadiness,\n\t\tcoordinator_url: config.syncCoordinatorUrl || null,\n\t\tgroups,\n\t\tactive_group: activeGroup,\n\t\thas_admin_secret: hasAdminSecret,\n\t\thas_groups: hasGroups,\n\t};\n}\n\nasync function ensureDefaultSpaceForTeam(opts: {\n\tstore: MemoryStore;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\tgroupId: string;\n\tdisplayName: string | null;\n}): Promise<{\n\tscope: CoordinatorScope | null;\n\tmembership: CoordinatorScopeMembership | null;\n\tpreferences: ReturnType<typeof upsertCoordinatorGroupPreference>;\n}> {\n\tconst coordinatorId = opts.config.syncCoordinatorUrl || null;\n\tif (!coordinatorId) throw new Error(\"coordinator_not_configured\");\n\tconst scopeId = defaultSpaceScopeIdForGroup(opts.groupId);\n\tconst label = opts.displayName || opts.groupId;\n\tconst existingScopes = await coordinatorListScopesAction({\n\t\tgroupId: opts.groupId,\n\t\tincludeInactive: false,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n\tconst existingScope = existingScopes.find((scope) => scope.scope_id === scopeId) ?? null;\n\tconst scope =\n\t\texistingScope ??\n\t\t(await coordinatorCreateScopeAction({\n\t\t\tgroupId: opts.groupId,\n\t\t\tscopeId,\n\t\t\tlabel,\n\t\t\tkind: \"team_default\",\n\t\t\tauthorityType: \"coordinator\",\n\t\t\tcoordinatorId,\n\t\t\tmembershipEpoch: 1,\n\t\t\tstatus: \"active\",\n\t\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t\t}));\n\tconst [deviceId] = ensureDeviceIdentity(opts.store.db, { keysDir: syncKeysDir() });\n\tconst membership = await coordinatorGrantScopeMembershipAction({\n\t\teffectId: `team-default-grant:${opts.groupId}:${scopeId}:${deviceId}:1`,\n\t\tgroupId: opts.groupId,\n\t\tscopeId,\n\t\tdeviceId,\n\t\trole: \"admin\",\n\t\tmembershipEpoch: 1,\n\t\tcoordinatorId,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n\tconst preferences = upsertCoordinatorGroupPreference(opts.store.db, {\n\t\tcoordinator_id: coordinatorId,\n\t\tgroup_id: opts.groupId,\n\t\tdefault_space_scope_id: scopeId,\n\t\tauto_grant_default_space_on_join: true,\n\t});\n\treturn { scope, membership, preferences };\n}\n\nasync function maybeGrantDefaultSpaceOnJoin(opts: {\n\tstore: MemoryStore;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\tgroupId: string;\n\trequestId: string;\n\tdeviceId: string;\n}): Promise<CoordinatorScopeMembership | null> {\n\tconst coordinatorId = opts.config.syncCoordinatorUrl || null;\n\tif (!coordinatorId) return null;\n\tconst preferences = getCoordinatorGroupPreference(opts.store.db, coordinatorId, opts.groupId);\n\tif (!preferences?.auto_grant_default_space_on_join) return null;\n\tconst scopeId = preferences.default_space_scope_id?.trim();\n\tif (!scopeId) return null;\n\tif (scopeId !== defaultSpaceScopeIdForGroup(opts.groupId)) return null;\n\tconst scopes = await coordinatorListScopesAction({\n\t\tgroupId: opts.groupId,\n\t\tincludeInactive: false,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n\tconst defaultScope = scopes.find((scope) => scope.scope_id === scopeId) ?? null;\n\tif (defaultScope?.kind !== \"team_default\") return null;\n\treturn await coordinatorGrantScopeMembershipAction({\n\t\teffectId: `team-default-join:${opts.requestId}:${scopeId}:${opts.deviceId}:1`,\n\t\tgroupId: opts.groupId,\n\t\tscopeId,\n\t\tdeviceId: opts.deviceId,\n\t\trole: \"member\",\n\t\tmembershipEpoch: 1,\n\t\tcoordinatorId,\n\t\tremoteUrl: opts.config.syncCoordinatorUrl || null,\n\t\tadminSecret: opts.config.syncCoordinatorAdminSecret || null,\n\t});\n}\n\nfunction removeConfiguredCoordinatorGroup(groupId: string): string[] {\n\tconst targetGroup = groupId.trim();\n\tif (!targetGroup) return [];\n\tconst config = readCodememConfigFile();\n\tconst rawGroups = config.sync_coordinator_groups;\n\tconst groups = Array.isArray(rawGroups)\n\t\t? rawGroups.map((group) => String(group).trim()).filter(Boolean)\n\t\t: typeof rawGroups === \"string\"\n\t\t\t? rawGroups\n\t\t\t\t\t.split(\",\")\n\t\t\t\t\t.map((group) => group.trim())\n\t\t\t\t\t.filter(Boolean)\n\t\t\t: typeof config.sync_coordinator_group === \"string\" && config.sync_coordinator_group.trim()\n\t\t\t\t? [config.sync_coordinator_group.trim()]\n\t\t\t\t: [];\n\tconst nextGroups = groups.filter((group) => group !== targetGroup);\n\tif (nextGroups.length === groups.length) return groups;\n\tconfig.sync_coordinator_groups = nextGroups;\n\tif (nextGroups.length) config.sync_coordinator_group = nextGroups[0];\n\telse delete config.sync_coordinator_group;\n\twriteCodememConfigFile(config);\n\treturn nextGroups;\n}\n\nfunction coordinatorAdminUnavailable(status: ReturnType<typeof coordinatorAdminStatusPayload>): {\n\tbody: Record<string, unknown>;\n\thttpStatus: 400;\n} | null {\n\tif (status.readiness === \"not_configured\") {\n\t\treturn { body: { error: \"coordinator_not_configured\", status }, httpStatus: 400 };\n\t}\n\tif (!status.has_admin_secret) {\n\t\treturn { body: { error: \"coordinator_admin_secret_missing\", status }, httpStatus: 400 };\n\t}\n\treturn null;\n}\n\nfunction recipientInviteCreationUnavailable(\n\tstatus: ReturnType<typeof coordinatorAdminStatusPayload>,\n\tkind: RecipientInviteKind,\n): { body: Record<string, unknown>; httpStatus: 400 } | null {\n\tif (status.readiness === \"not_configured\") {\n\t\treturn { body: { error: \"coordinator_not_configured\", status }, httpStatus: 400 };\n\t}\n\tif (!status.has_groups) {\n\t\treturn { body: { error: \"coordinator_group_missing\", status }, httpStatus: 400 };\n\t}\n\tif (kind === \"team_member\" && !status.has_admin_secret) {\n\t\treturn { body: { error: \"coordinator_admin_secret_missing\", status }, httpStatus: 400 };\n\t}\n\treturn null;\n}\n\nasync function parseViewerJsonBody(\n\tc: Context,\n\toptions: { allowEmpty?: boolean } = {},\n): Promise<Record<string, unknown> | null> {\n\tconst raw = await c.req.text();\n\tif (!raw.trim()) return options.allowEmpty ? {} : null;\n\ttry {\n\t\tconst parsed = JSON.parse(raw) as unknown;\n\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return null;\n\t\treturn parsed as Record<string, unknown>;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction optionalViewerString(body: Record<string, unknown>, key: string): string | null {\n\tconst value = body[key];\n\tif (value == null) return null;\n\treturn String(value).trim() || null;\n}\n\nfunction optionalViewerStrictString(body: Record<string, unknown>, key: string): string | null {\n\tconst value = body[key];\n\tif (value == null) return null;\n\tif (typeof value !== \"string\") throw new Error(`${key} must be string`);\n\treturn value.trim() || null;\n}\n\nfunction optionalViewerStringList(body: Record<string, unknown>, key: string): string[] {\n\tconst value = body[key];\n\tif (value == null) return [];\n\tif (!Array.isArray(value)) throw new Error(`${key} must be an array of strings`);\n\treturn [\n\t\t...new Set(\n\t\t\tvalue\n\t\t\t\t.map((item) => {\n\t\t\t\t\tif (typeof item !== \"string\") throw new Error(`${key} must be an array of strings`);\n\t\t\t\t\treturn item.trim();\n\t\t\t\t})\n\t\t\t\t.filter(Boolean),\n\t\t),\n\t];\n}\n\nfunction optionalViewerNumber(body: Record<string, unknown>, key: string): number | null {\n\tconst value = body[key];\n\tif (value == null || value === \"\") return null;\n\tconst number = typeof value === \"number\" ? value : Number(value);\n\treturn Number.isFinite(number) ? Math.trunc(number) : Number.NaN;\n}\n\nfunction coordinatorAdminMembershipEffectId(\n\taction: \"grant\" | \"revoke\",\n\tattemptId: string,\n\tinput: {\n\t\tgroupId: string;\n\t\tscopeId: string;\n\t\tdeviceId: string;\n\t\trole?: string | null;\n\t\tmembershipEpoch: number | null;\n\t\tcoordinatorId?: string | null;\n\t\tmanifestIssuerDeviceId?: string | null;\n\t\tmanifestHash: string | null;\n\t\tsignedManifestJson: string | null;\n\t},\n): string {\n\tconst fingerprint = createHash(\"sha256\")\n\t\t.update(\n\t\t\tJSON.stringify({\n\t\t\t\taction,\n\t\t\t\tattemptId,\n\t\t\t\tgroupId: input.groupId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\trole: input.role ?? null,\n\t\t\t\tmembershipEpoch: input.membershipEpoch,\n\t\t\t\tcoordinatorId: input.coordinatorId ?? null,\n\t\t\t\tmanifestIssuerDeviceId: input.manifestIssuerDeviceId ?? null,\n\t\t\t\tmanifestHash: input.manifestHash,\n\t\t\t\tsignedManifestJson: input.signedManifestJson,\n\t\t\t}),\n\t\t)\n\t\t.digest(\"hex\");\n\treturn `viewer-admin-membership:${action}:${fingerprint}`;\n}\n\nfunction optionalViewerInteger(body: Record<string, unknown>, key: string): number | null {\n\tconst value = body[key];\n\tif (value == null || value === \"\") return null;\n\tconst number = typeof value === \"number\" ? value : Number(value);\n\treturn Number.isInteger(number) ? number : Number.NaN;\n}\n\nfunction missingGuardrailConfirmations(\n\twarnings: ProjectScopeGuardrailWarning[],\n\tconfirmedTokens: string[],\n): ProjectScopeGuardrailWarning[] {\n\tconst confirmed = new Set(confirmedTokens);\n\treturn warnings.filter(\n\t\t(warning) =>\n\t\t\twarning.requires_confirmation &&\n\t\t\t(!warning.confirmation_token || !confirmed.has(warning.confirmation_token)),\n\t);\n}\n\nfunction parseViewerProjectMappingInput(body: Record<string, unknown>) {\n\tconst id = optionalViewerInteger(body, \"id\");\n\tconst priority = optionalViewerInteger(body, \"priority\");\n\tif (Number.isNaN(id)) throw new Error(\"id must be an integer\");\n\tif (Number.isNaN(priority)) throw new Error(\"priority must be an integer\");\n\treturn {\n\t\tid,\n\t\tworkspace_identity: optionalViewerStrictString(body, \"workspace_identity\"),\n\t\tproject_pattern: optionalViewerStrictString(body, \"project_pattern\"),\n\t\tscope_id: optionalViewerStrictString(body, \"scope_id\") ?? \"\",\n\t\tpriority,\n\t\tsource: optionalViewerStrictString(body, \"source\") ?? \"user\",\n\t};\n}\n\nfunction coordinatorAdminMutationStatus(message: string): 400 | 404 | 409 | 502 {\n\tif (\n\t\tmessage.includes(\"scope_not_found\") ||\n\t\tmessage.includes(\"membership_not_found\") ||\n\t\tmessage.includes(\"group_not_found\") ||\n\t\tmessage.includes(\"Group not found\") ||\n\t\tmessage.includes(\"Scope not found\") ||\n\t\tmessage.includes(\"device_not_enrolled_for_scope_group\") ||\n\t\tmessage.includes(\"device must be enrolled\")\n\t) {\n\t\treturn 404;\n\t}\n\tif (\n\t\tmessage.includes(\"not active\") ||\n\t\tmessage.includes(\"scope_not_active\") ||\n\t\tmessage.includes(\"scope_membership_effect_conflict\") ||\n\t\tmessage.includes(\"group_archived\") ||\n\t\tmessage.includes(\"Group is archived\")\n\t) {\n\t\treturn 409;\n\t}\n\tif (\n\t\tmessage.includes(\"Remote coordinator request failed (5\") ||\n\t\tmessage.includes(\"fetch failed\") ||\n\t\tmessage.includes(\"network\") ||\n\t\tmessage.includes(\"timed out\")\n\t) {\n\t\treturn 502;\n\t}\n\treturn 400;\n}\n\nfunction pairingAdvertiseAddresses(config = readCoordinatorSyncConfig()): string[] {\n\tconst advertise = String(config.syncAdvertise || \"auto\")\n\t\t.trim()\n\t\t.toLowerCase();\n\tif (advertise && advertise !== \"auto\" && advertise !== \"default\") {\n\t\treturn mergeAddresses(\n\t\t\t[],\n\t\t\tString(config.syncAdvertise || \"\")\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((item) => item.trim())\n\t\t\t\t.filter(Boolean),\n\t\t\t{ defaultHttpPort: config.syncPort },\n\t\t);\n\t}\n\tif (config.syncHost && config.syncHost !== \"0.0.0.0\") {\n\t\treturn [normalizeAddress(formatHostPort(config.syncHost, config.syncPort))].filter(Boolean);\n\t}\n\tconst addresses = Object.values(networkInterfaces())\n\t\t.flatMap((entries) => entries ?? [])\n\t\t.filter((entry) => !entry.internal)\n\t\t.map((entry) => entry.address)\n\t\t.filter((address) => address && address !== \"127.0.0.1\" && address !== \"::1\")\n\t\t.map((address) => normalizeAddress(formatHostPort(address, config.syncPort)))\n\t\t.filter(Boolean);\n\treturn [...new Set(addresses)];\n}\n\nfunction resolveCoordinatorAdminGroup(\n\trequestedGroup: string | null | undefined,\n\tstatus: ReturnType<typeof coordinatorAdminStatusPayload>,\n): string | null {\n\tconst explicit = String(requestedGroup ?? \"\").trim();\n\tif (explicit) return explicit;\n\treturn status.active_group;\n}\n\nfunction parseInviteTtlHours(value: unknown): number | null {\n\tconst ttlHours = Number(String(value ?? 24));\n\tif (!Number.isInteger(ttlHours) || ttlHours < 1) return null;\n\treturn ttlHours;\n}\n\nfunction projectInviteAcceptanceFailure(error: unknown): {\n\terror: string;\n\tdetail: string;\n} {\n\tif (isProjectSyncEnablementError(error)) {\n\t\treturn { error: error.code, detail: error.detail };\n\t}\n\tconst code = error instanceof Error ? error.message : \"project_invite_acceptance_failed\";\n\tconst detailByCode: Record<string, string> = {\n\t\tinvite_already_bound:\n\t\t\t\"This invitation was accepted by another device. Ask the owner to create a new invitation.\",\n\t\tinvite_expired: \"This invitation expired. Ask the owner to create a new invitation.\",\n\t\tinvite_identity_conflict:\n\t\t\t\"This invitation does not match this Identity. Ask the owner to create a new invitation for this recipient.\",\n\t\tinvite_invalid: \"This invitation is no longer valid. Ask the owner to create a new invitation.\",\n\t\tinviter_identity_invalid:\n\t\t\t\"The owner's device identity could not be verified. Ask the owner to review the share and create a new invitation.\",\n\t\tproject_invite_self_acceptance_forbidden:\n\t\t\t\"The owner cannot accept this recipient invitation on the owner's device.\",\n\t\tproject_invite_bootstrap_incomplete:\n\t\t\t\"The owner's device is not ready to establish trust yet. Retry once, then ask the owner to review the share.\",\n\t\tproject_invite_trust_state_invalid:\n\t\t\t\"The owner's trust setup could not be verified. Ask the owner to review the share.\",\n\t\trecipient_display_name_invalid:\n\t\t\t\"Enter a human-readable Identity name instead of an internal identifier.\",\n\t\trecipient_display_name_required: \"Enter an Identity display name.\",\n\t\trecipient_display_name_too_long: \"Use an Identity display name with 120 characters or fewer.\",\n\t\tdevice_display_name_invalid:\n\t\t\t\"Enter a human-readable device name instead of an internal identifier.\",\n\t\tdevice_display_name_required: \"Enter a device display name.\",\n\t\tdevice_display_name_too_long: \"Use a device display name with 120 characters or fewer.\",\n\t};\n\tconst safeCode = Object.hasOwn(detailByCode, code) ? code : \"project_invite_acceptance_failed\";\n\treturn {\n\t\terror: safeCode,\n\t\tdetail:\n\t\t\tdetailByCode[code] ??\n\t\t\t\"The invitation could not be accepted safely. Retry once, then ask the owner to review the share.\",\n\t};\n}\n\nconst PROJECT_INVITE_TTL_HOURS = 7 * 24;\nconst PROJECT_INVITE_OWNER_FALLBACK = \"Project owner\";\nconst PROJECT_INVITE_BODY_KEYS = new Set([\n\t\"teammate_name\",\n\t\"project_ids\",\n\t\"reviewed_project_set_digest\",\n]);\n\nfunction projectInviteInviterDisplayName(value: string): string {\n\ttry {\n\t\treturn normalizeHumanPresentationName(value, \"inviter_display_name\");\n\t} catch {\n\t\treturn PROJECT_INVITE_OWNER_FALLBACK;\n\t}\n}\n\nfunction projectInviteStringList(body: Record<string, unknown>, key: string): string[] {\n\tconst value = body[key];\n\tif (!Array.isArray(value)) throw new Error(`${key}_must_be_string_array`);\n\tif (value.length > 100) throw new Error(`${key}_too_large`);\n\tconst items = value.map((item) => {\n\t\tif (typeof item !== \"string\") throw new Error(`${key}_must_be_string_array`);\n\t\treturn item.trim();\n\t});\n\tif (items.some((item) => !item)) throw new Error(`${key}_contains_empty_value`);\n\tif (new Set(items).size !== items.length) throw new Error(`${key}_contains_duplicates`);\n\treturn items;\n}\n\nfunction assertProjectInviteBody(body: Record<string, unknown>, creating: boolean): void {\n\tconst allowed = creating ? PROJECT_INVITE_BODY_KEYS : new Set([\"teammate_name\", \"project_ids\"]);\n\tif (Object.keys(body).some((key) => !allowed.has(key))) {\n\t\tthrow new Error(\"unexpected_project_invite_fields\");\n\t}\n\tif (typeof body.teammate_name !== \"string\") throw new Error(\"teammate_name_must_be_string\");\n\tif (creating && typeof body.reviewed_project_set_digest !== \"string\") {\n\t\tthrow new Error(\"reviewed_project_set_digest_required\");\n\t}\n\tif (creating && !/^[a-f0-9]{64}$/u.test(String(body.reviewed_project_set_digest).trim())) {\n\t\tthrow new Error(\"reviewed_project_set_digest_invalid\");\n\t}\n}\n\nfunction projectInviteStatus(config = readCoordinatorSyncConfig()): {\n\tgroupId: string;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n} {\n\tconst status = coordinatorAdminStatusPayload(config);\n\tif (status.readiness !== \"ready\") throw new Error(\"team_sharing_not_configured\");\n\tif (status.groups.length !== 1) throw new Error(\"team_selection_ambiguous\");\n\tif (!status.active_group) throw new Error(\"team_sharing_not_configured\");\n\treturn { groupId: status.active_group, config };\n}\n\ntype RecipientInviteKind = \"team_member\" | \"add_device\";\n\nfunction recipientInviteKind(value: unknown): RecipientInviteKind {\n\tif (value === \"team_member\" || value === \"add_device\") return value;\n\tthrow new Error(\"recipient_invite_kind_invalid\");\n}\n\nfunction localOnboardingBinding(\n\tstore: MemoryStore,\n\tdeviceName: string | null,\n\toptions: { materializeActor?: boolean } = {},\n): {\n\tdeviceId: string;\n\tdevicePublicKey: string;\n\tdeviceDisplayName: string;\n} {\n\tconst deviceId =\n\t\toptions.materializeActor === false\n\t\t\t? ensureStableStoreDeviceIdentity(store)\n\t\t\t: ensureStableStoreIdentity(store);\n\tconst devicePublicKey = String(\n\t\tstore.db\n\t\t\t.prepare(\"SELECT public_key FROM sync_device WHERE device_id = ?\")\n\t\t\t.pluck()\n\t\t\t.get(deviceId) ?? \"\",\n\t).trim();\n\tif (!devicePublicKey) throw new Error(\"device_public_key_missing\");\n\tconst config = readCodememConfigFile();\n\treturn {\n\t\tdeviceId,\n\t\tdevicePublicKey,\n\t\tdeviceDisplayName: friendlyDeviceName({\n\t\t\texplicitName: deviceName ?? String(config.sync_device_name ?? \"\"),\n\t\t\tosName: hostname(),\n\t\t\tfallbackSeed: deviceId,\n\t\t}),\n\t};\n}\n\nfunction recipientInviteOnboardingPreview(\n\tstore: MemoryStore,\n\tbody: Record<string, unknown>,\n\tinvitationId: string,\n) {\n\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\tconst binding = localOnboardingBinding(store, optionalViewerString(body, \"device_name\"));\n\tconst teamId = optionalViewerStrictString(body, \"policy_team_id\");\n\tconst targetIdentityId = optionalViewerStrictString(body, \"target_identity_id\");\n\tif (kind === \"team_member\") {\n\t\tif (!teamId || targetIdentityId) throw new Error(\"recipient_invite_metadata_invalid\");\n\t\treturn previewRecipientPolicyOnboarding(store.db, {\n\t\t\tversion: 1,\n\t\t\tjourney: \"team\",\n\t\t\tinvitationId,\n\t\t\tidentityId: store.actorId,\n\t\t\t...binding,\n\t\t\tteamId,\n\t\t});\n\t}\n\tif (!targetIdentityId || teamId) throw new Error(\"recipient_invite_metadata_invalid\");\n\treturn previewRecipientPolicyOnboarding(\n\t\tstore.db,\n\t\t{\n\t\t\tversion: 1,\n\t\t\tjourney: \"add_device\",\n\t\t\tinvitationId,\n\t\t\tidentityId: targetIdentityId,\n\t\t\t...binding,\n\t\t},\n\t\t{\n\t\t\taddDeviceTeamEligibility: \"prospective_device\",\n\t\t},\n\t);\n}\n\nfunction recipientInviteReviewedIntent(\n\tstore: MemoryStore,\n\tkind: RecipientInviteKind,\n\ttargetId: string,\n\tpreview: RecipientPolicyOnboardingPreviewV1,\n): RecipientReviewedIntentV1 {\n\tif (kind === \"team_member\") {\n\t\tif (preview.journey !== \"team\" || !preview.team || preview.team.teamId !== targetId) {\n\t\t\tthrow new Error(\"recipient_invite_intent_mismatch\");\n\t\t}\n\t\treturn {\n\t\t\tversion: 1,\n\t\t\tjourney: \"team\",\n\t\t\tteam: preview.team,\n\t\t\tprojects: preview.projects,\n\t\t\texcludedProjects: [],\n\t\t};\n\t}\n\tif (preview.journey !== \"add_device\" || preview.binding.identityId !== targetId) {\n\t\tthrow new Error(\"recipient_invite_intent_mismatch\");\n\t}\n\tconst targetIdentity = store.db\n\t\t.prepare(\n\t\t\t`SELECT display_name FROM actors\n\t\t\t WHERE actor_id = ? AND status = 'active' AND merged_into_actor_id IS NULL`,\n\t\t)\n\t\t.get(targetId) as { display_name: string } | undefined;\n\tif (!targetIdentity?.display_name) throw new Error(\"identity_not_found\");\n\treturn {\n\t\tversion: 1,\n\t\tjourney: \"add_device\",\n\t\ttargetIdentity: { identityId: targetId, displayName: targetIdentity.display_name },\n\t\tprojects: preview.projects,\n\t\texcludedProjects: preview.excludedProjects,\n\t};\n}\n\nfunction recipientInviteOnboardingPreviewFromReviewedIntent(\n\tstore: MemoryStore,\n\tbody: Record<string, unknown>,\n\tinvitationId: string,\n\treviewedIntent: RecipientReviewedIntentV1,\n) {\n\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\tconst binding = localOnboardingBinding(store, optionalViewerString(body, \"device_name\"), {\n\t\tmaterializeActor: false,\n\t});\n\tconst teamId = optionalViewerStrictString(body, \"policy_team_id\");\n\tconst targetIdentityId = optionalViewerStrictString(body, \"target_identity_id\");\n\tconst assignedIdentityId = optionalViewerStrictString(body, \"assigned_identity_id\");\n\tif (kind === \"team_member\") {\n\t\tif (!teamId || !assignedIdentityId || targetIdentityId) {\n\t\t\tthrow new Error(\"recipient_invite_metadata_invalid\");\n\t\t}\n\t\treturn previewRecipientPolicyOnboardingFromReviewedIntent(reviewedIntent, {\n\t\t\tversion: 1,\n\t\t\tjourney: \"team\",\n\t\t\tinvitationId,\n\t\t\tidentityId: assignedIdentityId,\n\t\t\t...binding,\n\t\t\tteamId,\n\t\t});\n\t}\n\tif (!targetIdentityId || teamId || assignedIdentityId) {\n\t\tthrow new Error(\"recipient_invite_metadata_invalid\");\n\t}\n\treturn previewRecipientPolicyOnboardingFromReviewedIntent(reviewedIntent, {\n\t\tversion: 1,\n\t\tjourney: \"add_device\",\n\t\tinvitationId,\n\t\tidentityId: targetIdentityId,\n\t\t...binding,\n\t});\n}\n\nconst SAFE_RECIPIENT_INVITE_ERRORS = new Set([\n\t\"device_display_name_invalid\",\n\t\"device_display_name_required\",\n\t\"device_display_name_too_long\",\n\t\"invite_already_bound\",\n\t\"invite_expired\",\n\t\"invite_identity_conflict\",\n\t\"invite_invalid\",\n\t\"recipient_display_name_invalid\",\n\t\"recipient_display_name_required\",\n\t\"recipient_display_name_too_long\",\n\t\"recipient_invite_intent_mismatch\",\n\t\"recipient_invite_review_unavailable\",\n\t\"reviewed_onboarding_stale\",\n]);\n\nfunction safeRecipientInviteError(value: unknown, fallback = \"invite_invalid\"): string {\n\tconst code = value instanceof Error ? value.message : String(value ?? \"\").trim();\n\treturn SAFE_RECIPIENT_INVITE_ERRORS.has(code) ? code : fallback;\n}\n\nfunction recipientInvitePreviewId(kind: RecipientInviteKind, targetId: string): string {\n\treturn `recipient-invite-preview:${kind}:${targetId}`;\n}\n\nexport function recipientPolicyCapabilityFromStatus(payload: {\n\tsync_capability?: unknown;\n\tsync_features?: unknown;\n}): RecipientPolicyPeerCapability {\n\tif (!isScopedSyncCapability(normalizeSyncCapability(payload.sync_capability))) {\n\t\treturn \"unsupported\";\n\t}\n\treturn supportsSyncFeature(payload.sync_features, \"reassign_scope\") ? \"supported\" : \"unsupported\";\n}\n\nexport async function peerSupportsSyncRequirements(\n\tstore: MemoryStore,\n\tdeviceId: string,\n\trequirements: { scoped: boolean; reassignScope: boolean },\n): Promise<RecipientPolicyPeerCapability> {\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tif (deviceId === localDeviceId) return \"supported\";\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t\"SELECT addresses_json, pinned_fingerprint, public_key FROM sync_peers WHERE peer_device_id = ?\",\n\t\t)\n\t\t.get(deviceId) as\n\t\t| {\n\t\t\t\taddresses_json: string | null;\n\t\t\t\tpinned_fingerprint: string | null;\n\t\t\t\tpublic_key: string | null;\n\t\t }\n\t\t| undefined;\n\tconst expectedFingerprint =\n\t\tString(row?.pinned_fingerprint ?? \"\").trim() ||\n\t\t(row?.public_key ? fingerprintPublicKey(row.public_key) : \"\");\n\tconst addresses = safeJsonList(row?.addresses_json ?? null);\n\tfor (const address of addresses) {\n\t\ttry {\n\t\t\tconst url = `${buildBaseUrl(address)}/v1/status`;\n\t\t\tconst headers = {\n\t\t\t\t...buildDirectPeerAuthHeaders({\n\t\t\t\t\tdeviceId: localDeviceId,\n\t\t\t\t\trecipientId: deviceId,\n\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\turl,\n\t\t\t\t\tbodyBytes: Buffer.alloc(0),\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t}),\n\t\t\t\t[SYNC_CAPABILITY_HEADER]: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t[SYNC_FEATURES_HEADER]: LOCAL_SYNC_FEATURES.join(\",\"),\n\t\t\t};\n\t\t\tconst [status, payload] = await requestJson(\"GET\", url, { headers, timeoutS: 5 });\n\t\t\tif (status < 200 || status >= 300) continue;\n\t\t\tif (String(payload?.device_id ?? \"\").trim() !== deviceId) continue;\n\t\t\tif (\n\t\t\t\texpectedFingerprint &&\n\t\t\t\tString(payload?.fingerprint ?? \"\").trim() !== expectedFingerprint\n\t\t\t) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (\n\t\t\t\trequirements.scoped &&\n\t\t\t\trequirements.reassignScope &&\n\t\t\t\trecipientPolicyCapabilityFromStatus(payload ?? {}) !== \"supported\"\n\t\t\t) {\n\t\t\t\treturn \"unsupported\";\n\t\t\t}\n\t\t\tif (\n\t\t\t\trequirements.scoped &&\n\t\t\t\t!isScopedSyncCapability(normalizeSyncCapability(payload?.sync_capability))\n\t\t\t) {\n\t\t\t\treturn \"unsupported\";\n\t\t\t}\n\t\t\tif (\n\t\t\t\trequirements.reassignScope &&\n\t\t\t\t!supportsSyncFeature(payload?.sync_features, \"reassign_scope\")\n\t\t\t) {\n\t\t\t\treturn \"unsupported\";\n\t\t\t}\n\t\t\treturn \"supported\";\n\t\t} catch {\n\t\t\t// Try the next reviewed address. Ambiguous/unreachable capability fails closed.\n\t\t}\n\t}\n\treturn \"undetermined\";\n}\n\nasync function peerSupportsReassignScope(\n\tstore: MemoryStore,\n\tdeviceId: string,\n): Promise<ReassignScopeCapability> {\n\treturn peerSupportsSyncRequirements(store, deviceId, {\n\t\tscoped: false,\n\t\treassignScope: true,\n\t});\n}\n\nfunction resolveProjectInviteSelection(\n\tstore: MemoryStore,\n\trequestedIds: string[],\n\tinitiatingDeviceId: string,\n): ShareProjectIntent[] {\n\tif (requestedIds.length === 0) throw new Error(\"project_selection_empty\");\n\tconst requested = new Set(requestedIds);\n\tconst byIdentity = new Map<\n\t\tstring,\n\t\tReturnType<typeof listProjectScopeInventory>[\"projects\"][number]\n\t>();\n\tlet offset = 0;\n\twhile (byIdentity.size < requested.size) {\n\t\tconst page = listProjectScopeInventory(store.db, { limit: 250, offset });\n\t\tfor (const project of page.projects) {\n\t\t\tif (requested.has(project.workspace_identity)) {\n\t\t\t\tbyIdentity.set(project.workspace_identity, project);\n\t\t\t}\n\t\t}\n\t\tif (!page.has_more) break;\n\t\toffset += page.limit;\n\t}\n\treturn requestedIds.map((projectId) => {\n\t\tconst project = byIdentity.get(projectId);\n\t\tif (!project) throw new Error(\"project_selection_unknown\");\n\t\tconst ambiguous = project.guardrail_warnings.some(\n\t\t\t(warning) => warning.code === \"basename_collision_review\" && warning.requires_confirmation,\n\t\t);\n\t\tif (ambiguous) throw new Error(\"project_selection_ambiguous\");\n\t\tif (\n\t\t\tproject.read_only ||\n\t\t\tproject.identity_source === \"unmapped\" ||\n\t\t\tproject.memory_count == null ||\n\t\t\tproject.guardrail_warnings.some((warning) => warning.requires_confirmation)\n\t\t) {\n\t\t\tthrow new Error(\"project_selection_unsupported\");\n\t\t}\n\t\treturn {\n\t\t\tcanonicalIdentity: project.workspace_identity,\n\t\t\tdisplayName: project.display_project,\n\t\t\tidentitySource: project.identity_source,\n\t\t\texistingMemoryCount: countShareableProjectMemories(store.db, {\n\t\t\t\tcanonicalIdentity: project.workspace_identity,\n\t\t\t\tinitiatingDeviceId,\n\t\t\t}),\n\t\t};\n\t});\n}\n\nfunction resolveSharePerson(store: MemoryStore, teammateName: string): SharePersonIntent {\n\tconst matches = store.db\n\t\t.prepare(\n\t\t\t`SELECT actor_id, display_name, status\n\t\t\t FROM actors\n\t\t\t WHERE status IN ('active', 'pending') AND lower(trim(display_name)) = lower(?)\n\t\t\t ORDER BY actor_id`,\n\t\t)\n\t\t.all(teammateName) as Array<{ actor_id: string; display_name: string; status: string }>;\n\tif (matches.length > 1) throw new Error(\"teammate_match_ambiguous\");\n\tconst match = matches[0];\n\tif (match) {\n\t\treturn match.status === \"pending\"\n\t\t\t? { kind: \"pending\", personId: match.actor_id, displayName: match.display_name }\n\t\t\t: { kind: \"existing\", personId: match.actor_id, displayName: match.display_name };\n\t}\n\treturn { kind: \"pending\", displayName: teammateName };\n}\n\nfunction projectInvitePlan(\n\tstore: MemoryStore,\n\tbody: Record<string, unknown>,\n\tcreatedAt: string,\n\tinviteExpiresAt: string,\n): { plan: ShareOperationPlan; config: ReturnType<typeof readCoordinatorSyncConfig> } {\n\tconst teammateName = normalizeTeammateName(String(body.teammate_name));\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tstore.adoptEnsuredDeviceIdentity(localDeviceId);\n\tconst projects = resolveProjectInviteSelection(\n\t\tstore,\n\t\tprojectInviteStringList(body, \"project_ids\"),\n\t\tlocalDeviceId,\n\t);\n\tconst { groupId, config } = projectInviteStatus();\n\treturn {\n\t\tplan: planShareOperation({\n\t\t\tinviterActorId: store.actorId,\n\t\t\tinviterDeviceIds: [localDeviceId],\n\t\t\tperson: resolveSharePerson(store, teammateName),\n\t\t\tprojects,\n\t\t\tcoordinatorGroupId: groupId,\n\t\t\tcreatedAt,\n\t\t\tinviteExpiresAt,\n\t\t}),\n\t\tconfig,\n\t};\n}\n\nfunction projectInvitePreview(plan: ShareOperationPlan) {\n\treturn {\n\t\toperation_id: plan.operationId,\n\t\tteammate: {\n\t\t\tdisplay_name: plan.teammateName,\n\t\t\tmatch: plan.personKind,\n\t\t\t...(plan.personKind === \"existing\" ? { person_id: plan.personId } : {}),\n\t\t},\n\t\tprojects: plan.projects.map((project) => ({\n\t\t\tproject_id: project.canonicalIdentity,\n\t\t\tdisplay_name: project.displayName,\n\t\t\texisting_memory_count: project.existingMemoryCount,\n\t\t})),\n\t\texisting_memory_count: plan.projects.reduce(\n\t\t\t(total, project) => total + project.existingMemoryCount,\n\t\t\t0,\n\t\t),\n\t\tfuture_memories_shared: true as const,\n\t\thistory_policy: plan.historyPolicy,\n\t\treviewed_project_set_digest: plan.reviewedProjectSetDigest,\n\t};\n}\n\ntype CoordinatorProjectInvitePayload = Record<string, unknown> & {\n\toperation_id?: string;\n\tgroup_id?: string;\n\tstate?: string;\n};\n\nasync function coordinatorProjectInvitePayload(operationId: string): Promise<{\n\tgroupId: string;\n\tconfig: ReturnType<typeof readCoordinatorSyncConfig>;\n\tpayload: CoordinatorProjectInvitePayload;\n}> {\n\tconst { groupId, config } = projectInviteStatus();\n\tconst [status, payload] = await requestJson(\n\t\t\"GET\",\n\t\t`${buildBaseUrl(config.syncCoordinatorUrl)}/v1/admin/project-invites/${encodeURIComponent(operationId)}?group_id=${encodeURIComponent(groupId)}`,\n\t\t{\n\t\t\theaders: { \"X-Codemem-Coordinator-Admin\": config.syncCoordinatorAdminSecret },\n\t\t\ttimeoutS: 10,\n\t\t},\n\t).catch((cause: unknown) => {\n\t\tconst error = new Error(\"coordinator_unavailable\", { cause });\n\t\tObject.assign(error, { status: 503 });\n\t\tthrow error;\n\t});\n\tif (status < 200 || status >= 300) {\n\t\tconst error = new Error(String(payload?.error ?? \"operation_read_failed\"));\n\t\tObject.assign(error, { status });\n\t\tthrow error;\n\t}\n\tif (!payload || payload.operation_id !== operationId || payload.group_id !== groupId) {\n\t\tconst error = new Error(\"operation_scope_mismatch\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\treturn { groupId, config, payload: payload as CoordinatorProjectInvitePayload };\n}\n\nasync function reconcileProjectInviteAcceptance(\n\tstore: MemoryStore,\n\toperationId: string,\n): Promise<{ accepted: boolean; payload: CoordinatorProjectInvitePayload }> {\n\tconst owner = store.db\n\t\t.prepare(\"SELECT inviter_actor_id FROM share_operations WHERE operation_id = ?\")\n\t\t.pluck()\n\t\t.get(operationId) as string | undefined;\n\tif (!owner) throw new Error(\"operation_not_found\");\n\tif (owner !== store.actorId) throw new Error(\"operation_scope_mismatch\");\n\tensureLocalActorRecord(store);\n\tconst { groupId, payload } = await coordinatorProjectInvitePayload(operationId);\n\tif (payload.state === \"waiting_for_acceptance\") return { accepted: false, payload };\n\tif (payload.state !== \"accepted\") {\n\t\tconst error = new Error(\"operation_state_invalid\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\tconst required = [\n\t\t\"reviewed_project_set_digest\",\n\t\t\"recipient_actor_id\",\n\t\t\"recipient_display_name\",\n\t\t\"recipient_device_id\",\n\t\t\"recipient_device_display_name\",\n\t\t\"recipient_public_key\",\n\t\t\"recipient_fingerprint\",\n\t\t\"consumed_at\",\n\t\t\"trust_state\",\n\t] as const;\n\tif (required.some((key) => typeof payload[key] !== \"string\" || !String(payload[key]).trim())) {\n\t\tconst error = new Error(\"operation_acceptance_invalid\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\tconst trustState = String(payload.trust_state);\n\tconst bootstrapGrantId =\n\t\ttypeof payload.bootstrap_grant_id === \"string\" && payload.bootstrap_grant_id.trim()\n\t\t\t? payload.bootstrap_grant_id\n\t\t\t: null;\n\tif (\n\t\t(trustState !== \"pending_inviter_device\" && trustState !== \"bootstrap_grant_created\") ||\n\t\t(trustState === \"bootstrap_grant_created\") !== Boolean(bootstrapGrantId)\n\t) {\n\t\tconst error = new Error(\"operation_trust_state_invalid\");\n\t\tObject.assign(error, { status: 409 });\n\t\tthrow error;\n\t}\n\tconst projects = parseAcceptedProjectIntent(payload.projects);\n\treconcileShareOperationAcceptance(store.db, {\n\t\toperationId,\n\t\tlocalInviterActorId: store.actorId,\n\t\tcoordinatorGroupId: groupId,\n\t\treviewedProjectSetDigest: String(payload.reviewed_project_set_digest),\n\t\trecipientActorId: String(payload.recipient_actor_id),\n\t\trecipientDisplayName: String(payload.recipient_display_name),\n\t\trecipientDeviceId: String(payload.recipient_device_id),\n\t\trecipientDeviceDisplayName: String(payload.recipient_device_display_name),\n\t\trecipientPublicKey: String(payload.recipient_public_key),\n\t\trecipientFingerprint: String(payload.recipient_fingerprint),\n\t\tconsumedAt: String(payload.consumed_at),\n\t\ttrustState,\n\t\tbootstrapGrantId,\n\t\tprojects,\n\t});\n\treturn { accepted: true, payload };\n}\n\ninterface ShareOperationReadRow {\n\toperation_id: string;\n\tstate: string;\n\tperson_id: string;\n\tteammate_name: string;\n\trecipient_actor_id: string | null;\n\trecipient_display_name: string | null;\n\trecipient_device_id: string | null;\n\trecipient_device_display_name: string | null;\n\tinvite_expires_at: string;\n\tacceptance_consumed_at: string | null;\n\tcreated_at: string;\n\tupdated_at: string;\n\tactor_display_name: string | null;\n\tpeer_display_name: string | null;\n\tdevice_last_seen_at: string | null;\n\tdevice_last_reached_at: string | null;\n}\n\nasync function shareOperationReadModels(\n\tstore: MemoryStore,\n\toperationId?: string,\n\tincludeInviteLinks = true,\n) {\n\tconst rows = store.db\n\t\t.prepare(`SELECT o.operation_id, o.state, o.person_id, o.teammate_name,\n\t\t\to.recipient_actor_id, o.recipient_display_name, o.recipient_device_id,\n\t\t\to.recipient_device_display_name, o.invite_expires_at, o.acceptance_consumed_at,\n\t\t\to.created_at, o.updated_at, a.display_name AS actor_display_name,\n\t\t\tp.name AS peer_display_name, p.last_seen_at AS device_last_seen_at,\n\t\t\tp.last_sync_at AS device_last_reached_at\n\t\t FROM share_operations o\n\t\t LEFT JOIN actors a ON a.actor_id = o.person_id\n\t\t LEFT JOIN sync_peers p ON p.peer_device_id = o.recipient_device_id\n\t\t WHERE o.inviter_actor_id = ? AND (? IS NULL OR o.operation_id = ?)\n\t\t ORDER BY o.created_at DESC, o.operation_id`)\n\t\t.all(store.actorId, operationId ?? null, operationId ?? null) as ShareOperationReadRow[];\n\tconst now = new Date().toISOString();\n\treturn Promise.all(\n\t\trows.map(async (row) => {\n\t\t\tconst projects = store.db\n\t\t\t\t.prepare(`SELECT canonical_project_identity AS project_id, display_name, existing_memory_count\n\t\t\t\t FROM share_operation_projects WHERE operation_id = ? ORDER BY ordinal`)\n\t\t\t\t.all(row.operation_id) as Array<{\n\t\t\t\tproject_id: string;\n\t\t\t\tdisplay_name: string;\n\t\t\t\texisting_memory_count: number;\n\t\t\t}>;\n\t\t\tconst steps = (\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(`SELECT step_key, status, attempt_count, started_at, last_attempt_at,\n\t\t\t\t\t\tsafe_error_code, updated_at FROM share_operation_steps WHERE operation_id = ?`)\n\t\t\t\t\t.all(row.operation_id) as Array<{\n\t\t\t\t\tstep_key: string;\n\t\t\t\t\tstatus: ShareOperationLifecycleStepInput[\"status\"];\n\t\t\t\t\tattempt_count: number;\n\t\t\t\t\tstarted_at: string | null;\n\t\t\t\t\tlast_attempt_at: string | null;\n\t\t\t\t\tsafe_error_code: string | null;\n\t\t\t\t\tupdated_at: string;\n\t\t\t\t}>\n\t\t\t).map(\n\t\t\t\t(step): ShareOperationLifecycleStepInput => ({\n\t\t\t\t\tattemptCount: step.attempt_count,\n\t\t\t\t\tlastAttemptAt: step.last_attempt_at,\n\t\t\t\t\tsafeErrorCode: step.safe_error_code,\n\t\t\t\t\tstartedAt: step.started_at,\n\t\t\t\t\tstatus: step.status,\n\t\t\t\t\tstepKey: step.step_key,\n\t\t\t\t\tupdatedAt: step.updated_at,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tlet inviteLink: string | null = null;\n\t\t\tlet projectedState = row.state;\n\t\t\tif (includeInviteLinks && row.state === \"waiting_for_acceptance\") {\n\t\t\t\ttry {\n\t\t\t\t\tconst remote = await coordinatorProjectInvitePayload(row.operation_id);\n\t\t\t\t\tif (remote.payload.state === \"accepted\") projectedState = \"accepted\";\n\t\t\t\t\tinviteLink =\n\t\t\t\t\t\ttypeof remote.payload.invite_link === \"string\" && remote.payload.invite_link.trim()\n\t\t\t\t\t\t\t? remote.payload.invite_link\n\t\t\t\t\t\t\t: null;\n\t\t\t\t} catch {\n\t\t\t\t\t// A read-model refresh remains useful when the coordinator is temporarily unavailable.\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst personId = row.recipient_actor_id || row.person_id;\n\t\t\tconst personName = row.recipient_display_name || row.actor_display_name || row.teammate_name;\n\t\t\tconst deviceName = row.recipient_device_display_name || row.peer_display_name;\n\t\t\tconst lifecycle = projectShareLifecycle({\n\t\t\t\tdeviceLastSeenAt: row.device_last_seen_at,\n\t\t\t\tdeviceLastReachedAt: row.device_last_reached_at,\n\t\t\t\tdeviceName,\n\t\t\t\tinviteLink,\n\t\t\t\tnow,\n\t\t\t\tpersonName,\n\t\t\t\tstate: projectedState,\n\t\t\t\tsteps,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\toperation_id: row.operation_id,\n\t\t\t\tperson: { actor_id: personId, display_name: personName },\n\t\t\t\tdevices:\n\t\t\t\t\trow.recipient_device_id && deviceName\n\t\t\t\t\t\t? [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\tdevice_id: row.recipient_device_id,\n\t\t\t\t\t\t\t\t\tdisplay_name: deviceName,\n\t\t\t\t\t\t\t\t\tlast_seen_at: row.device_last_seen_at,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t: [],\n\t\t\t\tprojects,\n\t\t\t\tproject_count: projects.length,\n\t\t\t\tlifecycle: {\n\t\t\t\t\tstate: lifecycle.lifecycle,\n\t\t\t\t\tlabel: lifecycle.label,\n\t\t\t\t\texplanation: lifecycle.explanation,\n\t\t\t\t\tprimary_action:\n\t\t\t\t\t\tlifecycle.primaryAction?.kind === \"copy_invite\"\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tkind: \"copy_invite\",\n\t\t\t\t\t\t\t\t\tlabel: lifecycle.primaryAction.label,\n\t\t\t\t\t\t\t\t\tinvite_link: lifecycle.primaryAction.inviteLink,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: !includeInviteLinks && lifecycle.lifecycle === \"waiting_for_acceptance\"\n\t\t\t\t\t\t\t\t? { kind: \"copy_invite\", label: \"Copy invite\" }\n\t\t\t\t\t\t\t\t: lifecycle.primaryAction,\n\t\t\t\t},\n\t\t\t\ttimestamps: {\n\t\t\t\t\tcreated_at: row.created_at,\n\t\t\t\t\tupdated_at: row.updated_at,\n\t\t\t\t\taccepted_at: row.acceptance_consumed_at,\n\t\t\t\t\tinvite_expires_at: row.invite_expires_at,\n\t\t\t\t},\n\t\t\t};\n\t\t}),\n\t);\n}\n\nasync function executeProjectShareProvisioning(store: MemoryStore, operationId: string) {\n\tconst { groupId, config } = projectInviteStatus();\n\tconst coordinatorId = config.syncCoordinatorUrl || null;\n\tif (!coordinatorId) throw new Error(\"coordinator_not_configured\");\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\treturn executeShareProvisioning(\n\t\tstore.db,\n\t\t{ operationId, initiatingDeviceId: localDeviceId },\n\t\t{\n\t\t\tcreateOrGetBoundary: async (project, expectedGroupId) => {\n\t\t\t\tif (expectedGroupId !== groupId) throw new Error(\"operation_scope_mismatch\");\n\t\t\t\tconst readExisting = async () =>\n\t\t\t\t\t(\n\t\t\t\t\t\tawait coordinatorListScopesAction({\n\t\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\t\tincludeInactive: true,\n\t\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t\t\t})\n\t\t\t\t\t).find((scope) => scope.scope_id === project.boundaryId) ?? null;\n\t\t\t\tconst existing = await readExisting();\n\t\t\t\tif (existing) return existing;\n\t\t\t\ttry {\n\t\t\t\t\treturn await coordinatorCreateScopeAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tscopeId: project.boundaryId,\n\t\t\t\t\t\tlabel: project.displayName,\n\t\t\t\t\t\tkind: \"managed_project\",\n\t\t\t\t\t\tauthorityType: \"coordinator\",\n\t\t\t\t\t\tcoordinatorId,\n\t\t\t\t\t\tmembershipEpoch: 1,\n\t\t\t\t\t\tstatus: \"active\",\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconst reread = await readExisting();\n\t\t\t\t\tif (reread) return reread;\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t},\n\t\t\tgrantMembership: ({ effectId, groupId: expectedGroupId, scopeId, deviceId, role }) => {\n\t\t\t\tif (expectedGroupId !== groupId) throw new Error(\"operation_scope_mismatch\");\n\t\t\t\treturn coordinatorGrantScopeMembershipAction({\n\t\t\t\t\teffectId,\n\t\t\t\t\tgroupId,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tdeviceId,\n\t\t\t\t\trole,\n\t\t\t\t\tmembershipEpoch: 1,\n\t\t\t\t\tcoordinatorId,\n\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t});\n\t\t\t},\n\t\t\tsupportsReassignScope: (deviceId) => peerSupportsReassignScope(store, deviceId),\n\t\t\trefreshAuthorization: async (expectedGroupId) => {\n\t\t\t\tif (expectedGroupId !== groupId) throw new Error(\"operation_scope_mismatch\");\n\t\t\t\tconst refreshed = await refreshConfiguredScopeMembershipCache(store.db, config, {\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t});\n\t\t\t\tconst group = refreshed.groups.find((item) => item.groupId === groupId);\n\t\t\t\tif (group?.status !== \"refreshed\") throw new Error(\"authorization_refresh_failed\");\n\t\t\t},\n\t\t\trunInitialSync: (recipientDeviceId) =>\n\t\t\t\trunSyncPass(store.db, recipientDeviceId, {\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\tscanner: store.scanner,\n\t\t\t\t\trefreshAuthorization: true,\n\t\t\t\t}),\n\t\t},\n\t);\n}\n\nexport interface AdvanceProjectShareOperationResult {\n\tadvanced: boolean;\n\tstate: \"active\" | \"waiting_for_acceptance\" | \"cancelled\";\n}\n\nexport async function advanceProjectShareOperation(\n\tstore: MemoryStore,\n\toperationId: string,\n): Promise<AdvanceProjectShareOperationResult> {\n\tconst operation = store.db\n\t\t.prepare(\n\t\t\t\"SELECT state, inviter_actor_id, recipient_device_id FROM share_operations WHERE operation_id = ?\",\n\t\t)\n\t\t.get(operationId) as\n\t\t| { state: string; inviter_actor_id: string; recipient_device_id: string | null }\n\t\t| undefined;\n\tif (!operation) throw new Error(\"operation_not_found\");\n\tif (operation.inviter_actor_id !== store.actorId) throw new Error(\"operation_scope_mismatch\");\n\tif (operation.state === \"cancelled\") {\n\t\t// Already superseded (possibly earlier in the same maintenance batch);\n\t\t// provisioning a cancelled operation would only produce a misleading\n\t\t// operation_not_accepted failure.\n\t\treturn { advanced: false, state: \"cancelled\" };\n\t}\n\tif (!operation.recipient_device_id) {\n\t\tconst reconciliation = await reconcileProjectInviteAcceptance(store, operationId);\n\t\tif (!reconciliation.accepted) {\n\t\t\treturn { advanced: false, state: \"waiting_for_acceptance\" };\n\t\t}\n\t}\n\tconst plan = await executeProjectShareProvisioning(store, operationId);\n\tif (plan.superseded) {\n\t\t// A duplicate operation won the race and cancelled this one mid-flight;\n\t\t// reporting it as active would contradict the stored state.\n\t\treturn { advanced: false, state: \"cancelled\" };\n\t}\n\treturn { advanced: true, state: \"active\" };\n}\n\nexport interface AdvancePendingProjectSharesResult {\n\tprocessed: number;\n\tadvanced: number;\n\twaiting: number;\n\tattention: number;\n\tfailed: number;\n\titems: Array<{\n\t\toperationId: string;\n\t\toutcome:\n\t\t\t| \"advanced\"\n\t\t\t| \"waiting_for_acceptance\"\n\t\t\t| \"waiting_for_device\"\n\t\t\t| \"retry_scheduled\"\n\t\t\t| \"needs_attention\"\n\t\t\t| \"superseded\"\n\t\t\t| \"failed\";\n\t\terror?: string;\n\t}>;\n}\n\nconst AUTOMATIC_SHARE_OPERATION_STATES = [\n\t\"waiting_for_acceptance\",\n\t\"accepted\",\n\t\"provisioning\",\n\t\"initial_sync\",\n\t\"waiting_for_device\",\n] as const;\n\nconst AUTOMATIC_WAITING_ACCEPTANCE_RETRY_COOLDOWN_MS = 30 * 1000;\nconst AUTOMATIC_WAITING_DEVICE_RETRY_COOLDOWN_MS = 5 * 60 * 1000;\nconst TERMINAL_SHARE_MAINTENANCE_ERRORS = new Set([\n\t\"coordinator_not_configured\",\n\t\"team_sharing_not_configured\",\n\t\"team_selection_ambiguous\",\n\t\"initiating_device_not_reviewed\",\n\t\"inviter_project_access_ambiguous\",\n\t\"managed_boundary_plan_missing\",\n\t\"operation_device_binding_missing\",\n\t\"operation_intent_invalid\",\n\t\"provisioning_membership_plan_invalid\",\n\t\"device_binding_conflict\",\n\t\"intent_conflict\",\n\t\"inviter_identity_conflict\",\n]);\nconst PROJECT_INVITE_OWNER_CONFLICT_ERRORS = new Set([\n\t\"operation_scope_mismatch\",\n\t\"operation_state_invalid\",\n\t\"operation_acceptance_invalid\",\n\t\"operation_trust_state_invalid\",\n\t\"operation_intent_invalid\",\n\t\"operation_intent_mismatch\",\n\t\"recipient_fingerprint_mismatch\",\n\t\"recipient_device_identity_conflict\",\n\t\"recipient_actor_conflict\",\n\t\"pending_person_identity_conflict\",\n\t\"device_binding_conflict\",\n\t\"intent_conflict\",\n\t\"inviter_identity_conflict\",\n]);\nconst TERMINAL_RECONCILIATION_ERRORS = new Set([\n\t\"coordinator_not_configured\",\n\t\"team_sharing_not_configured\",\n\t\"team_selection_ambiguous\",\n\t\"operation_not_found\",\n\t...PROJECT_INVITE_OWNER_CONFLICT_ERRORS,\n]);\n\nfunction errorStatus(error: unknown): number | null {\n\tconst value = error && typeof error === \"object\" ? (error as { status?: unknown }).status : null;\n\treturn typeof value === \"number\" && Number.isInteger(value) && value >= 400 && value <= 599\n\t\t? value\n\t\t: null;\n}\n\nfunction projectInviteOwnerErrorResponse(\n\terror: unknown,\n\tfallback: { code: \"operation_read_failed\" | \"operation_reconcile_failed\"; status: 400 | 409 },\n): {\n\tcode: string;\n\tstatus: 400 | 404 | 409 | 502 | 503;\n} {\n\tconst message = error instanceof Error ? error.message : \"\";\n\tconst status = errorStatus(error);\n\tif (message === \"operation_not_found\" && (status == null || status === 404)) {\n\t\treturn { code: message, status: 404 };\n\t}\n\tif (PROJECT_INVITE_OWNER_CONFLICT_ERRORS.has(message) && (status == null || status === 409)) {\n\t\treturn { code: message, status: 409 };\n\t}\n\tif (status != null && status >= 500 && message !== \"coordinator_unavailable\") {\n\t\treturn { code: \"coordinator_upstream_failed\", status: 502 };\n\t}\n\tif (message === \"coordinator_unavailable\" || status === 408 || status === 429 || status === 503) {\n\t\treturn { code: \"coordinator_unavailable\", status: 503 };\n\t}\n\treturn fallback;\n}\n\nfunction isRetryableReconciliationError(error: unknown): boolean {\n\tconst message = error instanceof Error ? error.message : String(error);\n\tif (TERMINAL_RECONCILIATION_ERRORS.has(message)) return false;\n\tconst status = errorStatus(error);\n\treturn status == null || status === 408 || status === 429 || status >= 500;\n}\n\nfunction safeReconciliationErrorCode(error: unknown): string {\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn TERMINAL_RECONCILIATION_ERRORS.has(message) ? message : \"operation_read_failed\";\n}\n\nfunction recordInviteReconciliationFailure(\n\tstore: MemoryStore,\n\toperationId: string,\n\terror: unknown,\n\tnow: string,\n): \"retry_scheduled\" | \"needs_attention\" {\n\tconst safeErrorCode = safeReconciliationErrorCode(error);\n\tconst retryable = isRetryableReconciliationError(error);\n\tstore.db\n\t\t.prepare(`UPDATE share_operation_steps SET\n\t\t\tstatus = CASE WHEN ? = 1 THEN 'pending' ELSE 'failed' END,\n\t\t\tattempt_count = attempt_count + 1, last_attempt_at = ?, safe_error_code = ?, updated_at = ?\n\t\t\tWHERE operation_id = ? AND step_key = 'invite_consumption'`)\n\t\t.run(retryable ? 1 : 0, now, safeErrorCode, now, operationId);\n\tconst outcome = retryable ? \"retry_scheduled\" : \"needs_attention\";\n\tstore.db\n\t\t.prepare(\"UPDATE share_operations SET state = ?, updated_at = ? WHERE operation_id = ?\")\n\t\t.run(\n\t\t\toutcome === \"needs_attention\" ? \"needs_attention\" : \"waiting_for_acceptance\",\n\t\t\tnow,\n\t\t\toperationId,\n\t\t);\n\treturn outcome;\n}\n\nexport async function advancePendingProjectShares(\n\tstore: MemoryStore,\n\toptions: {\n\t\tlimit?: number;\n\t\tnow?: Date;\n\t\tadvanceOperation?: (\n\t\t\tstore: MemoryStore,\n\t\t\toperationId: string,\n\t\t) => Promise<AdvanceProjectShareOperationResult>;\n\t} = {},\n): Promise<AdvancePendingProjectSharesResult> {\n\tconst limit = Math.max(1, Math.min(Math.trunc(options.limit ?? 3), 10));\n\tconst placeholders = AUTOMATIC_SHARE_OPERATION_STATES.map(() => \"?\").join(\", \");\n\tconst maintenanceNow = options.now ?? new Date();\n\tconst waitingAcceptanceRetryBefore = new Date(\n\t\tmaintenanceNow.getTime() - AUTOMATIC_WAITING_ACCEPTANCE_RETRY_COOLDOWN_MS,\n\t).toISOString();\n\tconst waitingRetryBefore = new Date(\n\t\tmaintenanceNow.getTime() - AUTOMATIC_WAITING_DEVICE_RETRY_COOLDOWN_MS,\n\t).toISOString();\n\t// A later failed attempt supersedes older reachability evidence and keeps the cooldown in force.\n\tconst rows = store.db\n\t\t.prepare(`SELECT operation.operation_id FROM share_operations AS operation\n\t\t WHERE operation.inviter_actor_id = ?\n\t\t AND operation.state IN (${placeholders})\n\t\t AND (operation.state <> 'waiting_for_acceptance' OR operation.updated_at <= ?)\n\t\t AND (\n\t\t\toperation.state <> 'waiting_for_device'\n\t\t\tOR operation.updated_at <= ?\n\t\t\tOR (\n\t\t\t\tNOT EXISTS (\n\t\t\t\t\tSELECT 1 FROM share_operation_steps AS step\n\t\t\t\t\tWHERE step.operation_id = operation.operation_id\n\t\t\t\t\tAND step.step_key = 'capability_preflight'\n\t\t\t\t\tAND step.status <> 'completed'\n\t\t\t\t\tAND (\n\t\t\t\t\t\tstep.status = 'running'\n\t\t\t\t\t\tOR step.safe_error_code IN (\n\t\t\t\t\t\t\t'waiting_for_device', 'device_offline', 'recipient_offline'\n\t\t\t\t\t\t)\n\t\t\t\t\t)\n\t\t\t\t)\n\t\t\t\tAND EXISTS (\n\t\t\t\t\tSELECT 1 FROM sync_attempts AS attempt\n\t\t\t\t\tWHERE attempt.id = (\n\t\t\t\t\t\tSELECT latest.id FROM sync_attempts AS latest\n\t\t\t\t\t\tWHERE latest.peer_device_id = operation.recipient_device_id\n\t\t\t\t\t\tORDER BY latest.started_at DESC, latest.id DESC\n\t\t\t\t\t\tLIMIT 1\n\t\t\t\t\t)\n\t\t\t\t\tAND attempt.ok = 1\n\t\t\t\t\tAND julianday(COALESCE(attempt.finished_at, attempt.started_at)) >\n\t\t\t\t\t\tjulianday(operation.updated_at)\n\t\t\t\t)\n\t\t\t)\n\t\t )\n\t\t ORDER BY CASE WHEN operation.state IN ('accepted', 'provisioning', 'initial_sync') THEN 0 ELSE 1 END,\n\t\t\tCASE WHEN operation.state IN ('waiting_for_acceptance', 'waiting_for_device')\n\t\t\t\tTHEN operation.updated_at ELSE operation.created_at END ASC,\n\t\t\toperation.created_at ASC, operation.operation_id ASC\n\t\t LIMIT ?`)\n\t\t.all(\n\t\t\tstore.actorId,\n\t\t\t...AUTOMATIC_SHARE_OPERATION_STATES,\n\t\t\twaitingAcceptanceRetryBefore,\n\t\t\twaitingRetryBefore,\n\t\t\tlimit,\n\t\t) as Array<{\n\t\toperation_id: string;\n\t}>;\n\tconst advanceOperation = options.advanceOperation ?? advanceProjectShareOperation;\n\tconst result: AdvancePendingProjectSharesResult = {\n\t\tprocessed: 0,\n\t\tadvanced: 0,\n\t\twaiting: 0,\n\t\tattention: 0,\n\t\tfailed: 0,\n\t\titems: [],\n\t};\n\tfor (const row of rows) {\n\t\tresult.processed += 1;\n\t\ttry {\n\t\t\tconst advanced = await advanceOperation(store, row.operation_id);\n\t\t\tif (!advanced.advanced) {\n\t\t\t\tif (advanced.state === \"cancelled\") {\n\t\t\t\t\t// Superseded by a duplicate that reached active first; terminal.\n\t\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"superseded\" });\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(\"UPDATE share_operations SET updated_at = ? WHERE operation_id = ?\")\n\t\t\t\t\t.run(maintenanceNow.toISOString(), row.operation_id);\n\t\t\t\tresult.waiting += 1;\n\t\t\t\tresult.items.push({\n\t\t\t\t\toperationId: row.operation_id,\n\t\t\t\t\toutcome: \"waiting_for_acceptance\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tresult.advanced += 1;\n\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"advanced\" });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tconst state = store.db\n\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t.pluck()\n\t\t\t\t.get(row.operation_id);\n\t\t\tif (state === \"cancelled\") {\n\t\t\t\t// Superseded by a duplicate while a step was in flight; the stored\n\t\t\t\t// state is terminal and benign, so the step's rejection must not be\n\t\t\t\t// reported as a failure or push the daemon into an error phase.\n\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"superseded\" });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (message === \"waiting_for_device\" || state === \"waiting_for_device\") {\n\t\t\t\tresult.waiting += 1;\n\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome: \"waiting_for_device\" });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (state === \"needs_attention\") {\n\t\t\t\tresult.attention += 1;\n\t\t\t\tresult.items.push({\n\t\t\t\t\toperationId: row.operation_id,\n\t\t\t\t\toutcome: \"needs_attention\",\n\t\t\t\t\terror: message,\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (state === \"waiting_for_acceptance\") {\n\t\t\t\tconst outcome = recordInviteReconciliationFailure(\n\t\t\t\t\tstore,\n\t\t\t\t\trow.operation_id,\n\t\t\t\t\terror,\n\t\t\t\t\tmaintenanceNow.toISOString(),\n\t\t\t\t);\n\t\t\t\tif (outcome === \"needs_attention\") result.attention += 1;\n\t\t\t\telse result.waiting += 1;\n\t\t\t\tresult.items.push({ operationId: row.operation_id, outcome, error: message });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (TERMINAL_SHARE_MAINTENANCE_ERRORS.has(message)) {\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(\n\t\t\t\t\t\t\"UPDATE share_operations SET state = 'needs_attention', updated_at = ? WHERE operation_id = ?\",\n\t\t\t\t\t)\n\t\t\t\t\t.run(maintenanceNow.toISOString(), row.operation_id);\n\t\t\t\tresult.attention += 1;\n\t\t\t\tresult.items.push({\n\t\t\t\t\toperationId: row.operation_id,\n\t\t\t\t\toutcome: \"needs_attention\",\n\t\t\t\t\terror: message,\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tresult.failed += 1;\n\t\t\tresult.items.push({\n\t\t\t\toperationId: row.operation_id,\n\t\t\t\toutcome: \"failed\",\n\t\t\t\terror: message,\n\t\t\t});\n\t\t}\n\t}\n\treturn result;\n}\n\nexport interface ReconcileConfiguredCoordinatorEnrollmentResult {\n\tskipped: boolean;\n\tgroupsProcessed: number;\n\tfailedGroups: number;\n\tfailures: CoordinatorEnrollmentMaintenanceFailure[];\n\tdevicesAdded: number;\n\tmembershipsAdded: number;\n\tidentitiesAdded: number;\n\tunchanged: number;\n\tissues: number;\n}\n\nexport type CoordinatorEnrollmentMaintenanceStage =\n\t| \"list_devices\"\n\t| \"list_consumed_team_invites\"\n\t| \"reconcile_snapshot\";\n\nexport interface CoordinatorEnrollmentMaintenanceFailure {\n\tgroupId: string;\n\tstage: CoordinatorEnrollmentMaintenanceStage;\n\tcode: string;\n}\n\nfunction coordinatorEnrollmentFailureCode(error: unknown): string {\n\tconst message = (error instanceof Error ? error.message : String(error)).trim();\n\tconst httpStatus = message.match(/\\((\\d{3})(?::|\\))/u)?.[1];\n\tif (httpStatus) return `http_${httpStatus}`;\n\tif (\n\t\tnew Set([\n\t\t\t\"coordinator_consumed_team_invite_invalid\",\n\t\t\t\"coordinator_device_list_malformed\",\n\t\t\t\"coordinator_group_id_invalid\",\n\t\t\t\"coordinator_id_invalid\",\n\t\t\t\"coordinator_invite_group_mismatch\",\n\t\t\t\"coordinator_invite_list_malformed\",\n\t\t\t\"reconciliation_time_invalid\",\n\t\t]).has(message)\n\t) {\n\t\treturn message;\n\t}\n\tif (/timeout|timed out|abort/iu.test(message)) return \"request_timeout\";\n\tif (/fetch failed|network|econn|enotfound/iu.test(message)) return \"network_error\";\n\treturn \"unexpected_error\";\n}\n\nfunction coordinatorEnrollmentFailure(\n\tgroupId: string,\n\tstage: CoordinatorEnrollmentMaintenanceStage,\n\terror: unknown,\n): CoordinatorEnrollmentMaintenanceFailure {\n\tconst safeGroupId = /^[A-Za-z0-9._-]{1,64}$/u.test(groupId)\n\t\t? groupId\n\t\t: `group_${createHash(\"sha256\").update(groupId).digest(\"hex\").slice(0, 12)}`;\n\treturn { groupId: safeGroupId, stage, code: coordinatorEnrollmentFailureCode(error) };\n}\n\nexport async function reconcileConfiguredCoordinatorEnrollment(\n\tstore: MemoryStore,\n\toptions: {\n\t\tconfig?: ReturnType<typeof readCoordinatorSyncConfig>;\n\t\tlistDevices?: (input: {\n\t\t\tgroupId: string;\n\t\t\tremoteUrl: string;\n\t\t\tadminSecret: string;\n\t\t}) => Promise<CoordinatorEnrollment[]>;\n\t\tlistConsumedTeamInvites?: (input: {\n\t\t\tgroupId: string;\n\t\t\tremoteUrl: string;\n\t\t\tadminSecret: string;\n\t\t}) => Promise<CoordinatorConsumedTeamInvite[]>;\n\t\treconcileSnapshot?: (\n\t\t\tinput: Parameters<typeof reconcileCoordinatorEnrollmentSnapshot>[1],\n\t\t) => CoordinatorEnrollmentReconcileResult | Promise<CoordinatorEnrollmentReconcileResult>;\n\t} = {},\n): Promise<ReconcileConfiguredCoordinatorEnrollmentResult> {\n\tconst config = options.config ?? readCoordinatorSyncConfig();\n\tconst remoteUrl = config.syncCoordinatorUrl.trim();\n\tconst adminSecret = config.syncCoordinatorAdminSecret.trim();\n\tif (!remoteUrl || !adminSecret || config.syncCoordinatorGroups.length === 0) {\n\t\treturn {\n\t\t\tskipped: true,\n\t\t\tgroupsProcessed: 0,\n\t\t\tfailedGroups: 0,\n\t\t\tfailures: [],\n\t\t\tdevicesAdded: 0,\n\t\t\tmembershipsAdded: 0,\n\t\t\tidentitiesAdded: 0,\n\t\t\tunchanged: 0,\n\t\t\tissues: 0,\n\t\t};\n\t}\n\tconst listDevices = options.listDevices ?? coordinatorListDevicesAction;\n\tconst listConsumedTeamInvites =\n\t\toptions.listConsumedTeamInvites ?? coordinatorListConsumedTeamInvitesAction;\n\tconst reconcileSnapshot =\n\t\toptions.reconcileSnapshot ??\n\t\t((input) => reconcileCoordinatorEnrollmentSnapshot(store.db, input));\n\tconst total: ReconcileConfiguredCoordinatorEnrollmentResult = {\n\t\tskipped: false,\n\t\tgroupsProcessed: 0,\n\t\tfailedGroups: 0,\n\t\tfailures: [],\n\t\tdevicesAdded: 0,\n\t\tmembershipsAdded: 0,\n\t\tidentitiesAdded: 0,\n\t\tunchanged: 0,\n\t\tissues: 0,\n\t};\n\tfor (const groupId of config.syncCoordinatorGroups) {\n\t\tconst [enrollmentsResult, consumedTeamInvitesResult] = await Promise.allSettled([\n\t\t\tlistDevices({ groupId, remoteUrl, adminSecret }),\n\t\t\tlistConsumedTeamInvites({ groupId, remoteUrl, adminSecret }),\n\t\t]);\n\t\tif (enrollmentsResult.status === \"rejected\") {\n\t\t\ttotal.failures.push(\n\t\t\t\tcoordinatorEnrollmentFailure(groupId, \"list_devices\", enrollmentsResult.reason),\n\t\t\t);\n\t\t}\n\t\tif (consumedTeamInvitesResult.status === \"rejected\") {\n\t\t\ttotal.failures.push(\n\t\t\t\tcoordinatorEnrollmentFailure(\n\t\t\t\t\tgroupId,\n\t\t\t\t\t\"list_consumed_team_invites\",\n\t\t\t\t\tconsumedTeamInvitesResult.reason,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tif (\n\t\t\tenrollmentsResult.status === \"rejected\" ||\n\t\t\tconsumedTeamInvitesResult.status === \"rejected\"\n\t\t) {\n\t\t\ttotal.failedGroups += 1;\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst result = await reconcileSnapshot({\n\t\t\t\tcoordinatorId: buildBaseUrl(remoteUrl),\n\t\t\t\tgroupId,\n\t\t\t\tenrollments: enrollmentsResult.value,\n\t\t\t\tconsumedTeamInvites: consumedTeamInvitesResult.value,\n\t\t\t\tlocalDeviceId: store.deviceId,\n\t\t\t});\n\t\t\ttotal.groupsProcessed += 1;\n\t\t\ttotal.devicesAdded += result.devicesAdded;\n\t\t\ttotal.membershipsAdded += result.membershipsAdded;\n\t\t\ttotal.identitiesAdded += result.identitiesAdded;\n\t\t\ttotal.unchanged += result.unchanged;\n\t\t\ttotal.issues += result.issues.length;\n\t\t} catch (error) {\n\t\t\ttotal.failedGroups += 1;\n\t\t\ttotal.failures.push(coordinatorEnrollmentFailure(groupId, \"reconcile_snapshot\", error));\n\t\t}\n\t}\n\treturn total;\n}\n\nconst RECIPIENT_POLICY_MAINTENANCE_MAX_LIMIT = 10;\nconst RECIPIENT_POLICY_MAINTENANCE_DEFAULT_LIMIT = 3;\nconst RECIPIENT_POLICY_MAINTENANCE_BACKOFF_MS = 60_000;\nconst RECIPIENT_POLICY_WAITING_ERRORS = new Set([\n\t\"recipient_policy_capability_undetermined\",\n\t\"recipient_policy_parity_incomplete\",\n\t\"recipient_policy_snapshot_not_fresh\",\n]);\n\ninterface RecipientPolicyCoordinatorBoundary {\n\tcoordinatorId: string;\n\tgroupId: string;\n\tmembershipEpoch: number;\n}\n\nfunction recipientPolicyCoordinatorBoundary(\n\tstore: MemoryStore,\n\tscopeId: string,\n): RecipientPolicyCoordinatorBoundary {\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t`SELECT coordinator_id, group_id, membership_epoch FROM replication_scopes\n\t\t\t WHERE scope_id = ? AND kind = 'managed_project' AND authority_type = 'coordinator'\n\t\t\t AND status = 'active'`,\n\t\t)\n\t\t.get(scopeId) as\n\t\t| {\n\t\t\t\tcoordinator_id: string | null;\n\t\t\t\tgroup_id: string | null;\n\t\t\t\tmembership_epoch: number;\n\t\t }\n\t\t| undefined;\n\tconst coordinatorId = String(row?.coordinator_id ?? \"\").trim();\n\tconst groupId = String(row?.group_id ?? \"\").trim();\n\tconst membershipEpoch = Number(row?.membership_epoch);\n\tif (!coordinatorId || !groupId || !Number.isSafeInteger(membershipEpoch) || membershipEpoch < 0) {\n\t\tthrow new Error(\"recipient_policy_active_managed_scope_required\");\n\t}\n\treturn { coordinatorId, groupId, membershipEpoch };\n}\n\nfunction recipientPolicySnapshotFingerprint(\n\tscopeId: string,\n\tscopeMembershipEpoch: number,\n\tmemberships: Array<{\n\t\tdeviceId: string;\n\t\tstatus: \"active\" | \"revoked\";\n\t\tmembershipEpoch: number;\n\t}>,\n): string {\n\tconst canonical = memberships\n\t\t.toSorted(\n\t\t\t(left, right) =>\n\t\t\t\tleft.deviceId.localeCompare(right.deviceId) ||\n\t\t\t\tleft.status.localeCompare(right.status) ||\n\t\t\t\tleft.membershipEpoch - right.membershipEpoch,\n\t\t)\n\t\t.map(\n\t\t\t(membership) =>\n\t\t\t\t`${membership.deviceId}\\u0000${membership.status}\\u0000${membership.membershipEpoch}`,\n\t\t)\n\t\t.join(\"\\u0001\");\n\treturn `recipient-policy-coordinator-snapshot-v2:${createHash(\"sha256\")\n\t\t.update(`${scopeId}\\u0000${scopeMembershipEpoch}\\u0000${canonical}`)\n\t\t.digest(\"hex\")}`;\n}\n\nfunction recipientPolicyPresenceCapabilityExpiresAt(\n\tenrollment: CoordinatorEnrollment,\n\tobservedAt: string,\n): number | null {\n\tconst expiresAt = enrollment.presence_expires_at;\n\tconst capabilities = enrollment.presence_capabilities;\n\tif (typeof expiresAt !== \"string\" || !capabilities) return null;\n\tconst expiresAtMs = Date.parse(expiresAt);\n\tconst observedAtMs = Date.parse(observedAt);\n\tif (\n\t\t!Number.isFinite(expiresAtMs) ||\n\t\t!Number.isFinite(observedAtMs) ||\n\t\tnew Date(expiresAtMs).toISOString() !== expiresAt ||\n\t\texpiresAtMs <= observedAtMs ||\n\t\tcapabilities.sync_capability !== \"scoped\" ||\n\t\t!Array.isArray(capabilities.sync_features) ||\n\t\t!capabilities.sync_features.every((feature) => typeof feature === \"string\") ||\n\t\t!capabilities.sync_features.includes(\"reassign_scope\")\n\t) {\n\t\treturn null;\n\t}\n\treturn expiresAtMs;\n}\n\nfunction recipientPolicyEnrollmentValueIsValid(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length > 0 && value === value.trim();\n}\n\nexport function createRecipientPolicyReconcilerEffects(\n\tstore: MemoryStore,\n\toptions: {\n\t\tconfig?: ReturnType<typeof readCoordinatorSyncConfig>;\n\t\tnow?: () => string;\n\t\tlistDevices?: typeof coordinatorListDevicesAction;\n\t\tlistReviewedRecipientInviteEvidence?: typeof coordinatorListReviewedRecipientInviteEvidenceAction;\n\t} = {},\n): RecipientPolicyReconcilerEffects {\n\tconst config = options.config ?? readCoordinatorSyncConfig();\n\tconst now = options.now ?? (() => new Date().toISOString());\n\tconst listDevices = options.listDevices ?? coordinatorListDevicesAction;\n\tconst listReviewedRecipientInviteEvidence =\n\t\toptions.listReviewedRecipientInviteEvidence ??\n\t\tcoordinatorListReviewedRecipientInviteEvidenceAction;\n\tconst reviewedRecipientInviteEvidence = new Map<\n\t\tstring,\n\t\tReturnType<typeof coordinatorListReviewedRecipientInviteEvidenceAction>\n\t>();\n\tconst loadReviewedRecipientInviteEvidence = (groupId: string) => {\n\t\tlet evidence = reviewedRecipientInviteEvidence.get(groupId);\n\t\tif (!evidence) {\n\t\t\tevidence = listReviewedRecipientInviteEvidence({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treviewedRecipientInviteEvidence.set(groupId, evidence);\n\t\t}\n\t\treturn evidence;\n\t};\n\tconst boundaryEnrollments = new Map<\n\t\tstring,\n\t\tMap<\n\t\t\tstring,\n\t\t\t{\n\t\t\t\tidentityId: string;\n\t\t\t\tpublicKey: string;\n\t\t\t\tfingerprint: string;\n\t\t\t\tpresenceCapabilityExpiresAtMs: number | null;\n\t\t\t}\n\t\t>\n\t>();\n\tconst target = (scopeId: string) => recipientPolicyCoordinatorBoundary(store, scopeId);\n\tconst coordinatorOptions = (scopeId: string) => {\n\t\tconst boundary = target(scopeId);\n\t\tconst remoteUrl = config.syncCoordinatorUrl?.trim();\n\t\tconst adminSecret = config.syncCoordinatorAdminSecret?.trim();\n\t\tif (!remoteUrl || !adminSecret) throw new Error(\"recipient_policy_effect_failed\");\n\t\tif (!config.syncCoordinatorGroups.includes(boundary.groupId)) {\n\t\t\tthrow new Error(\"recipient_policy_effect_failed\");\n\t\t}\n\t\ttry {\n\t\t\tif (buildBaseUrl(boundary.coordinatorId) !== buildBaseUrl(remoteUrl)) {\n\t\t\t\tthrow new Error(\"recipient_policy_effect_failed\");\n\t\t\t}\n\t\t} catch {\n\t\t\tthrow new Error(\"recipient_policy_effect_failed\");\n\t\t}\n\t\treturn {\n\t\t\t...boundary,\n\t\t\tremoteUrl,\n\t\t\tadminSecret,\n\t\t};\n\t};\n\treturn {\n\t\tnow,\n\t\tsnapshot: async ({ scopeId }) => {\n\t\t\tconst targetOptions = coordinatorOptions(scopeId);\n\t\t\tconst memberships = await coordinatorListScopeMembershipsAction({\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tscopeId,\n\t\t\t\tincludeRevoked: true,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t}).catch(() => {\n\t\t\t\tthrow new Error(\"recipient_policy_snapshot_not_fresh\");\n\t\t\t});\n\t\t\tconst snapshotMemberships = memberships.map((membership) => {\n\t\t\t\tif (\n\t\t\t\t\ttypeof membership.device_id !== \"string\" ||\n\t\t\t\t\t(membership.status !== \"active\" && membership.status !== \"revoked\")\n\t\t\t\t) {\n\t\t\t\t\tthrow new Error(\"recipient_policy_snapshot_invalid\");\n\t\t\t\t}\n\t\t\t\tconst status: \"active\" | \"revoked\" = membership.status;\n\t\t\t\treturn {\n\t\t\t\t\tdeviceId: membership.device_id,\n\t\t\t\t\tstatus,\n\t\t\t\t\tmembershipEpoch: membership.membership_epoch,\n\t\t\t\t};\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tauthoritative: true,\n\t\t\t\tscopeId,\n\t\t\t\tscopeMembershipEpoch: targetOptions.membershipEpoch,\n\t\t\t\tfingerprint: recipientPolicySnapshotFingerprint(\n\t\t\t\t\tscopeId,\n\t\t\t\t\ttargetOptions.membershipEpoch,\n\t\t\t\t\tsnapshotMemberships,\n\t\t\t\t),\n\t\t\t\tobservedAt: now(),\n\t\t\t\tmemberships: snapshotMemberships,\n\t\t\t};\n\t\t},\n\t\tlistBoundaryEnrollments: async ({ scopeId }) => {\n\t\t\tconst targetOptions = coordinatorOptions(scopeId);\n\t\t\tconst observedAt = now();\n\t\t\tconst enrollments = await listDevices({\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tincludeDisabled: true,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t}).catch(() => {\n\t\t\t\tthrow new Error(\"recipient_policy_snapshot_not_fresh\");\n\t\t\t});\n\t\t\tconst presenceCapabilityExpiries = new Map(\n\t\t\t\tenrollments.map((enrollment) => [\n\t\t\t\t\tenrollment.device_id,\n\t\t\t\t\trecipientPolicyPresenceCapabilityExpiresAt(enrollment, observedAt),\n\t\t\t\t]),\n\t\t\t);\n\t\t\tconst mapped = enrollments.map((enrollment) => {\n\t\t\t\tif (\n\t\t\t\t\tenrollment.group_id !== targetOptions.groupId ||\n\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.device_id) ||\n\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.public_key) ||\n\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.fingerprint) ||\n\t\t\t\t\tfingerprintPublicKey(enrollment.public_key) !== enrollment.fingerprint ||\n\t\t\t\t\t(enrollment.enabled !== 0 && enrollment.enabled !== 1) ||\n\t\t\t\t\t(enrollment.identity_id !== null &&\n\t\t\t\t\t\t!recipientPolicyEnrollmentValueIsValid(enrollment.identity_id))\n\t\t\t\t) {\n\t\t\t\t\tthrow new Error(\"recipient_policy_snapshot_invalid\");\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tdeviceId: enrollment.device_id,\n\t\t\t\t\tidentityId: enrollment.identity_id,\n\t\t\t\t\tpublicKey: enrollment.public_key,\n\t\t\t\t\tfingerprint: enrollment.fingerprint,\n\t\t\t\t\tenabled: enrollment.enabled === 1,\n\t\t\t\t};\n\t\t\t});\n\t\t\tboundaryEnrollments.set(\n\t\t\t\tscopeId,\n\t\t\t\tnew Map(\n\t\t\t\t\tmapped.flatMap((enrollment) =>\n\t\t\t\t\t\tenrollment.enabled && enrollment.identityId !== null\n\t\t\t\t\t\t\t? [\n\t\t\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t\t\tenrollment.deviceId,\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\tidentityId: enrollment.identityId,\n\t\t\t\t\t\t\t\t\t\t\tpublicKey: enrollment.publicKey,\n\t\t\t\t\t\t\t\t\t\t\tfingerprint: enrollment.fingerprint,\n\t\t\t\t\t\t\t\t\t\t\tpresenceCapabilityExpiresAtMs:\n\t\t\t\t\t\t\t\t\t\t\t\tpresenceCapabilityExpiries.get(enrollment.deviceId) ?? null,\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t] as const,\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t: [],\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn mapped;\n\t\t},\n\t\tprobeCapability: async ({ deviceId, scopeId }) => {\n\t\t\tif (deviceId === store.deviceId) return \"supported\";\n\t\t\t// Reconciliation always lists this scope's enrollments before capability\n\t\t\t// preflight. A missing binding still fails closed if that order changes.\n\t\t\tconst targetOptions = coordinatorOptions(scopeId);\n\t\t\tconst enrollment = boundaryEnrollments.get(scopeId)?.get(deviceId);\n\t\t\tif (!enrollment) return \"undetermined\";\n\t\t\tconst peer = store.db\n\t\t\t\t.prepare(\"SELECT pinned_fingerprint, public_key FROM sync_peers WHERE peer_device_id = ?\")\n\t\t\t\t.get(deviceId) as\n\t\t\t\t| { pinned_fingerprint: string | null; public_key: string | null }\n\t\t\t\t| undefined;\n\t\t\tif (peer) {\n\t\t\t\tconst peerPublicKey = String(peer.public_key ?? \"\").trim();\n\t\t\t\tconst peerFingerprint =\n\t\t\t\t\tString(peer.pinned_fingerprint ?? \"\").trim() ||\n\t\t\t\t\t(peerPublicKey ? fingerprintPublicKey(peerPublicKey) : \"\");\n\t\t\t\tif (\n\t\t\t\t\t(peerFingerprint || peerPublicKey) &&\n\t\t\t\t\t(peerFingerprint !== enrollment.fingerprint ||\n\t\t\t\t\t\t(peerPublicKey && peerPublicKey !== enrollment.publicKey))\n\t\t\t\t) {\n\t\t\t\t\treturn \"undetermined\";\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst observed = await peerSupportsSyncRequirements(store, deviceId, {\n\t\t\t\tscoped: true,\n\t\t\t\treassignScope: true,\n\t\t\t});\n\t\t\tif (observed !== \"undetermined\") return observed;\n\t\t\tconst observedAtMs = Date.parse(now());\n\t\t\tif (\n\t\t\t\tenrollment.presenceCapabilityExpiresAtMs == null ||\n\t\t\t\t!Number.isFinite(observedAtMs) ||\n\t\t\t\tenrollment.presenceCapabilityExpiresAtMs <= observedAtMs\n\t\t\t) {\n\t\t\t\treturn \"undetermined\";\n\t\t\t}\n\t\t\t// A consumed, still-reviewed Team/add-device invite is the only bootstrap\n\t\t\t// identity proof accepted before normal peer discovery can observe the new\n\t\t\t// device. Fresh authenticated presence separately proves capability.\n\t\t\tconst evidence = await loadReviewedRecipientInviteEvidence(targetOptions.groupId).catch(\n\t\t\t\t() => [],\n\t\t\t);\n\t\t\treturn evidence.some(\n\t\t\t\t(invite) =>\n\t\t\t\t\tinvite.group_id === targetOptions.groupId &&\n\t\t\t\t\tinvite.bound_device_id === deviceId &&\n\t\t\t\t\tinvite.recipient_actor_id === enrollment.identityId &&\n\t\t\t\t\tinvite.bound_public_key === enrollment.publicKey &&\n\t\t\t\t\tinvite.bound_fingerprint === enrollment.fingerprint,\n\t\t\t)\n\t\t\t\t? \"supported\"\n\t\t\t\t: \"undetermined\";\n\t\t},\n\t\trevoke: async (input): Promise<RecipientPolicyCoordinatorEffectReceipt> => {\n\t\t\tconst targetOptions = coordinatorOptions(input.scopeId);\n\t\t\tawait coordinatorRevokeScopeMembershipAction({\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\tstatus: \"revoked\",\n\t\t\t};\n\t\t},\n\t\tgrant: async (input): Promise<RecipientPolicyCoordinatorEffectReceipt> => {\n\t\t\tconst targetOptions = coordinatorOptions(input.scopeId);\n\t\t\tconst membership = await coordinatorGrantScopeMembershipAction({\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tgroupId: targetOptions.groupId,\n\t\t\t\tscopeId: input.scopeId,\n\t\t\t\tdeviceId: input.deviceId,\n\t\t\t\trole: input.role,\n\t\t\t\tcoordinatorId: targetOptions.coordinatorId,\n\t\t\t\tremoteUrl: targetOptions.remoteUrl,\n\t\t\t\tadminSecret: targetOptions.adminSecret,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\teffectId: input.effectId,\n\t\t\t\tscopeId: membership.scope_id,\n\t\t\t\tdeviceId: membership.device_id,\n\t\t\t\tstatus: membership.status === \"active\" ? \"active\" : \"revoked\",\n\t\t\t};\n\t\t},\n\t\trefresh: async ({ scopeId }) => {\n\t\t\tconst boundary = target(scopeId);\n\t\t\tconst refreshed = await refreshConfiguredScopeMembershipCache(store.db, config, {\n\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\tdbPath: store.dbPath,\n\t\t\t});\n\t\t\tconst group = refreshed.groups.find((item) => item.groupId === boundary.groupId);\n\t\t\tif (group?.status !== \"refreshed\") throw new Error(\"recipient_policy_effect_failed\");\n\t\t\tawait refreshAuthorizedCoordinatorPeerTrust(store, config);\n\t\t},\n\t};\n}\n\nexport interface ReconcileRecipientPolicyProjectsResult {\n\tprocessed: number;\n\tactive: number;\n\twaiting: number;\n\tattention: number;\n\tfailed: number;\n\titems: Array<{\n\t\tcanonicalProjectIdentity: string;\n\t\tstatus: RecipientPolicyReconcileResult[\"status\"] | \"failed\";\n\t\tsafeErrorCode: string | null;\n\t}>;\n}\n\nexport async function reconcileRecipientPolicyProjects(\n\tstore: MemoryStore,\n\toptions: {\n\t\tlimit?: number;\n\t\tnow?: Date;\n\t\tbackoffMs?: number;\n\t\tleaseOwner?: string;\n\t\teffects?: RecipientPolicyReconcilerEffects;\n\t\treconcileProject?: typeof reconcileRecipientPolicyProject;\n\t} = {},\n): Promise<ReconcileRecipientPolicyProjectsResult> {\n\tconst limit = Math.max(\n\t\t1,\n\t\tMath.min(\n\t\t\tMath.trunc(options.limit ?? RECIPIENT_POLICY_MAINTENANCE_DEFAULT_LIMIT),\n\t\t\tRECIPIENT_POLICY_MAINTENANCE_MAX_LIMIT,\n\t\t),\n\t);\n\tconst maintenanceNow = options.now ?? new Date();\n\tconst backoffMs = Math.max(\n\t\t0,\n\t\tMath.trunc(options.backoffMs ?? RECIPIENT_POLICY_MAINTENANCE_BACKOFF_MS),\n\t);\n\tconst retryBefore = new Date(maintenanceNow.getTime() - backoffMs).toISOString();\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`WITH projects AS (\n\t\t\t\tSELECT DISTINCT canonical_project_identity FROM project_recipients\n\t\t\t\tUNION\n\t\t\t\tSELECT canonical_project_identity FROM recipient_policy_authority_states\n\t\t\t)\n\t\t\t SELECT projects.canonical_project_identity\n\t\t\t FROM projects\n\t\t\t LEFT JOIN recipient_policy_authority_states authority\n\t\t\t ON authority.canonical_project_identity = projects.canonical_project_identity\n\t\t\t WHERE authority.safe_error_code IS NULL OR authority.last_attempt_at IS NULL\n\t\t\t OR authority.last_attempt_at <= ?\n\t\t\t ORDER BY CASE WHEN authority.last_attempt_at IS NULL THEN 0 ELSE 1 END,\n\t\t\t authority.last_attempt_at, projects.canonical_project_identity\n\t\t\t LIMIT ?`,\n\t\t)\n\t\t.all(retryBefore, limit) as Array<{ canonical_project_identity: string }>;\n\tconst effects = options.effects ?? createRecipientPolicyReconcilerEffects(store);\n\tconst reconcileProject = options.reconcileProject ?? reconcileRecipientPolicyProject;\n\tconst result: ReconcileRecipientPolicyProjectsResult = {\n\t\tprocessed: 0,\n\t\tactive: 0,\n\t\twaiting: 0,\n\t\tattention: 0,\n\t\tfailed: 0,\n\t\titems: [],\n\t};\n\tfor (const row of rows) {\n\t\tresult.processed += 1;\n\t\ttry {\n\t\t\tconst outcome = await reconcileProject(\n\t\t\t\tstore.db,\n\t\t\t\t{\n\t\t\t\t\tcanonicalProjectIdentity: row.canonical_project_identity,\n\t\t\t\t\tleaseOwner:\n\t\t\t\t\t\toptions.leaseOwner ?? `recipient-policy-maintenance:${store.deviceId || process.pid}`,\n\t\t\t\t},\n\t\t\t\teffects,\n\t\t\t);\n\t\t\tif (outcome.status === \"active\") result.active += 1;\n\t\t\telse if (outcome.status === \"needs_attention\") result.attention += 1;\n\t\t\telse result.waiting += 1;\n\t\t\tresult.items.push({\n\t\t\t\tcanonicalProjectIdentity: row.canonical_project_identity,\n\t\t\t\tstatus: outcome.status,\n\t\t\t\tsafeErrorCode: outcome.safeErrorCode,\n\t\t\t});\n\t\t} catch {\n\t\t\tresult.failed += 1;\n\t\t\tresult.items.push({\n\t\t\t\tcanonicalProjectIdentity: row.canonical_project_identity,\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tsafeErrorCode: \"recipient_policy_reconciliation_failed\",\n\t\t\t});\n\t\t}\n\t}\n\treturn result;\n}\n\nexport type RecipientPolicyReconciliationReadState =\n\t| \"active\"\n\t| \"needs_attention\"\n\t| \"pending\"\n\t| \"verifying\"\n\t| \"waiting\";\n\nexport interface RecipientPolicyReconciliationReadModel {\n\tversion: 1;\n\titems: Array<{\n\t\tcanonicalProjectIdentity: string;\n\t\tstate: RecipientPolicyReconciliationReadState;\n\t\tlabel: string;\n\t\texplanation: string;\n\t\tdeliveredCopiesMayRemain: true;\n\t\trevocationWarning: string;\n\t}>;\n}\n\nfunction recipientPolicyReadState(\n\tauthority: ReturnType<typeof getRecipientPolicyAuthorityState>,\n): RecipientPolicyReconciliationReadState {\n\tif (!authority) return \"pending\";\n\tif (authority.safeErrorCode && RECIPIENT_POLICY_WAITING_ERRORS.has(authority.safeErrorCode)) {\n\t\treturn \"waiting\";\n\t}\n\tif (authority.safeErrorCode || authority.authorityState === \"rolled_back\") {\n\t\treturn \"needs_attention\";\n\t}\n\tif (authority.authorityState === \"active\") return \"active\";\n\tif (authority.authorityState === \"eligible\") return \"verifying\";\n\treturn \"pending\";\n}\n\nfunction recipientPolicyReadCopy(state: RecipientPolicyReconciliationReadState): {\n\tlabel: string;\n\texplanation: string;\n} {\n\tif (state === \"active\") {\n\t\treturn {\n\t\t\tlabel: \"Recipient policy active\",\n\t\t\texplanation: \"Recipient policy now controls future access for this Project.\",\n\t\t};\n\t}\n\tif (state === \"verifying\") {\n\t\treturn {\n\t\t\tlabel: \"Verifying recipient policy\",\n\t\t\texplanation: \"Current access matches recipient policy and needs one more stable check.\",\n\t\t};\n\t}\n\tif (state === \"waiting\") {\n\t\treturn {\n\t\t\tlabel: \"Waiting to reconcile\",\n\t\t\texplanation:\n\t\t\t\t\"Waiting for devices or a fresh coordinator snapshot. No partial grant is applied.\",\n\t\t};\n\t}\n\tif (state === \"needs_attention\") {\n\t\treturn {\n\t\t\tlabel: \"Reconciliation needs attention\",\n\t\t\texplanation:\n\t\t\t\t\"Legacy scope enforcement remains in control until this Project is safe to retry.\",\n\t\t};\n\t}\n\treturn {\n\t\tlabel: \"Recipient policy pending\",\n\t\texplanation: \"Legacy scope enforcement remains in control while reconciliation is pending.\",\n\t};\n}\n\nexport function listRecipientPolicyReconciliationStatus(\n\tstore: MemoryStore,\n): RecipientPolicyReconciliationReadModel {\n\tconst projectIds = (\n\t\tstore.db\n\t\t\t.prepare(\n\t\t\t\t`SELECT DISTINCT canonical_project_identity FROM project_recipients WHERE status = 'active'\n\t\t\t\t UNION SELECT canonical_project_identity FROM recipient_policy_authority_states\n\t\t\t\t ORDER BY canonical_project_identity`,\n\t\t\t)\n\t\t\t.all() as Array<{ canonical_project_identity: string }>\n\t).map((row) => row.canonical_project_identity);\n\treturn {\n\t\tversion: 1,\n\t\titems: projectIds.map((canonicalProjectIdentity) => {\n\t\t\tconst state = recipientPolicyReadState(\n\t\t\t\tgetRecipientPolicyAuthorityState(store.db, canonicalProjectIdentity),\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tcanonicalProjectIdentity,\n\t\t\t\tstate,\n\t\t\t\t...recipientPolicyReadCopy(state),\n\t\t\t\tdeliveredCopiesMayRemain: true,\n\t\t\t\trevocationWarning: SCOPE_MEMBERSHIP_REVOCATION_LIMITATION,\n\t\t\t};\n\t\t}),\n\t};\n}\n\nfunction sortActiveMaintenanceJobs<\n\tT extends { started_at: string | null; updated_at: string; kind: string },\n>(jobs: T[]): T[] {\n\treturn [...jobs].sort((a, b) => {\n\t\tconst aTime = a.started_at ?? a.updated_at;\n\t\tconst bTime = b.started_at ?? b.updated_at;\n\t\tif (aTime !== bTime) return aTime.localeCompare(bTime);\n\t\treturn a.kind.localeCompare(b.kind);\n\t});\n}\n\nfunction summarizeMaintenanceJobs(\n\tjobs: MaintenanceJobSnapshot[],\n\tshowDiagnostics: boolean,\n): Array<Record<string, unknown>> {\n\treturn sortActiveMaintenanceJobs(\n\t\tjobs.filter((job) => [\"pending\", \"running\", \"failed\"].includes(String(job.status ?? \"\"))),\n\t).map((job) => ({\n\t\tkind: job.kind,\n\t\ttitle: job.title,\n\t\tstatus: job.status,\n\t\tprogress: job.progress,\n\t\t...(showDiagnostics\n\t\t\t? {\n\t\t\t\t\tmessage: job.message,\n\t\t\t\t\terror: job.error,\n\t\t\t\t\tmetadata: job.metadata,\n\t\t\t\t}\n\t\t\t: {}),\n\t}));\n}\n\nfunction redactSemanticIndexDiagnostics(\n\tdiagnostics: SemanticIndexDiagnostics,\n\tshowDiagnostics: boolean,\n): SemanticIndexDiagnostics {\n\tif (showDiagnostics || !diagnostics.maintenance_job) {\n\t\treturn diagnostics;\n\t}\n\tconst summary =\n\t\tdiagnostics.state === \"pending\"\n\t\t\t? \"Semantic-index catch-up is pending\"\n\t\t\t: diagnostics.state === \"failed\"\n\t\t\t\t? \"Semantic-index catch-up failed\"\n\t\t\t\t: diagnostics.state === \"degraded\"\n\t\t\t\t\t? \"Semantic index is running in degraded mode\"\n\t\t\t\t\t: diagnostics.summary;\n\treturn {\n\t\t...diagnostics,\n\t\tsummary,\n\t\tmaintenance_job: {\n\t\t\t...diagnostics.maintenance_job,\n\t\t\tmessage: null,\n\t\t\terror: null,\n\t\t},\n\t};\n}\n\nfunction syncKeysDir(): string | undefined {\n\treturn process.env.CODEMEM_KEYS_DIR?.trim() || undefined;\n}\n\n/** Strip control/format characters and cap length so attacker-controlled\n * headers cannot forge log lines when included in diagnostics. */\nfunction loggableHeaderValue(value: string | undefined): string {\n\tconst sanitized = (value ?? \"\")\n\t\t.replace(/[\\p{Cc}\\p{Cf}]/gu, \"\")\n\t\t.slice(0, 64)\n\t\t.trim();\n\treturn sanitized || \"unknown\";\n}\n\nfunction intEnvOr(name: string, fallback: number): number {\n\tconst value = Number.parseInt(process.env[name] ?? \"\", 10);\n\treturn Number.isFinite(value) ? value : fallback;\n}\n\nconst MAX_SYNC_BODY_BYTES = intEnvOr(\"CODEMEM_SYNC_MAX_BODY_BYTES\", 1_048_576);\nconst MAX_SYNC_OPS = intEnvOr(\"CODEMEM_SYNC_MAX_OPS\", 2000);\n\nasync function readBoundedRequestBytes(request: Request, maxBytes: number): Promise<Buffer | null> {\n\tconst contentLength = Number.parseInt(request.headers.get(\"content-length\") ?? \"\", 10);\n\tif (Number.isFinite(contentLength) && contentLength > maxBytes) {\n\t\treturn null;\n\t}\n\tconst stream = request.body;\n\tif (!stream) return Buffer.alloc(0);\n\tconst reader = stream.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (!value) continue;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tawait reader.cancel();\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tchunks.push(value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\treturn Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));\n}\n\nconst PAIRING_FILTER_HINT =\n\t\"Run this on another device with codemem sync pair --accept '<payload>'. \" +\n\t\"On the accepting device, --include/--exclude control both what it sends and what it accepts from that peer.\";\n\nfunction pathWithQuery(url: string): string {\n\tconst parsed = new URL(url);\n\treturn parsed.search ? `${parsed.pathname}${parsed.search}` : parsed.pathname;\n}\n\nfunction unauthorizedPayload(): Record<string, string> {\n\treturn { error: \"unauthorized\" };\n}\n\nconst SYNC_AUTH_STORE_BUSY_REASON = \"sync_auth_store_busy\";\n\ntype SyncAuthResult = { ok: boolean; reason: string; deviceId: string };\ntype VerifiedDirectPeerSignature = { ok: true; version: 2 | 3 } | { ok: false; reason: string };\n\nconst DIRECT_PEER_SIGNATURE_VERSION_NUMBER = 3;\n\nfunction logDirectPeerAuthDiagnostic(...reasons: Array<string | null>): void {\n\tconst reason = reasons.find(\n\t\t(candidate) => candidate === \"recipient_mismatch\" || candidate === \"signature_downgrade\",\n\t);\n\tif (reason) console.warn(`[sync] peer auth failed: reason=${reason}`);\n}\n\nfunction isSqliteBusy(err: unknown): boolean {\n\tif (!err || typeof err !== \"object\") return false;\n\tconst code = \"code\" in err ? String((err as { code?: unknown }).code ?? \"\") : \"\";\n\tconst message = err instanceof Error ? err.message : \"\";\n\treturn code === \"SQLITE_BUSY\" || message.includes(\"database is locked\");\n}\n\nfunction recordSyncAuthNonce(\n\tstore: MemoryStore,\n\tdeviceId: string,\n\tnonce: string,\n\tcreatedAt: string,\n): SyncAuthResult | null {\n\ttry {\n\t\tif (!recordNonce(store.db, deviceId, nonce, createdAt)) {\n\t\t\treturn { ok: false, reason: \"nonce_replay\", deviceId };\n\t\t}\n\t} catch (err) {\n\t\tif (isSqliteBusy(err)) {\n\t\t\treturn { ok: false, reason: SYNC_AUTH_STORE_BUSY_REASON, deviceId };\n\t\t}\n\t\tthrow err;\n\t}\n\n\tconst cutoff = new Date(Date.now() - DEFAULT_TIME_WINDOW_S * 2 * 1000).toISOString();\n\ttry {\n\t\tcleanupNonces(store.db, cutoff);\n\t} catch (err) {\n\t\tif (!isSqliteBusy(err)) throw err;\n\t\t// Nonce cleanup is best-effort. A lock here should not fail a request\n\t\t// after its nonce was already recorded; the next request can prune.\n\t}\n\treturn null;\n}\n\nfunction isSyncAuthStoreBusy(auth: SyncAuthResult): boolean {\n\treturn !auth.ok && auth.reason === SYNC_AUTH_STORE_BUSY_REASON;\n}\n\nfunction syncAuthStoreBusyResponse(c: Context) {\n\tc.header(\"Retry-After\", \"1\");\n\treturn c.json({ error: SYNC_AUTH_STORE_BUSY_REASON }, 503);\n}\n\nfunction verifyDirectPeerRequestSignature(\n\trequest: { method: string; url: string; header(name: string): string | undefined },\n\tbody: Buffer,\n\toptions: {\n\t\tdeviceId: string;\n\t\tpublicKey: string;\n\t\texpectedRecipientId: string;\n\t\thighestObservedVersion: number | null;\n\t},\n): VerifiedDirectPeerSignature {\n\tconst timestamp = request.header(\"X-Opencode-Timestamp\") ?? \"\";\n\tconst nonce = request.header(\"X-Opencode-Nonce\") ?? \"\";\n\tconst legacySignature = request.header(\"X-Opencode-Signature\") ?? \"\";\n\tconst recipientHeader = request.header(\"X-Codemem-Recipient\");\n\tconst directSignatureHeader = request.header(\"X-Codemem-Signature\");\n\tconst hasDirectMaterial = recipientHeader !== undefined || directSignatureHeader !== undefined;\n\tconst direct = verifyDirectPeerSignature({\n\t\tmethod: request.method,\n\t\tpathWithQuery: pathWithQuery(request.url),\n\t\tbodyBytes: body,\n\t\ttimestamp,\n\t\tnonce,\n\t\trecipientId: recipientHeader,\n\t\texpectedRecipientId: options.expectedRecipientId,\n\t\tsignature: directSignatureHeader,\n\t\tpublicKey: options.publicKey,\n\t});\n\tif (hasDirectMaterial && direct.status === \"absent\") {\n\t\treturn { ok: false, reason: \"invalid_direct_signature\" };\n\t}\n\tif (direct.status === \"invalid\") {\n\t\treturn {\n\t\t\tok: false,\n\t\t\treason: direct.reason === \"recipient_mismatch\" ? direct.reason : \"invalid_direct_signature\",\n\t\t};\n\t}\n\n\tconst legacyValid = verifySignature({\n\t\tmethod: request.method,\n\t\tpathWithQuery: pathWithQuery(request.url),\n\t\tbodyBytes: body,\n\t\ttimestamp,\n\t\tnonce,\n\t\tsignature: legacySignature,\n\t\tpublicKey: options.publicKey,\n\t\tdeviceId: options.deviceId,\n\t});\n\tif (!legacyValid) return { ok: false, reason: \"invalid_signature\" };\n\tif (\n\t\tdirect.status === \"absent\" &&\n\t\t(options.highestObservedVersion ?? 0) >= DIRECT_PEER_SIGNATURE_VERSION_NUMBER\n\t) {\n\t\treturn { ok: false, reason: \"signature_downgrade\" };\n\t}\n\treturn { ok: true, version: direct.status === \"valid\" ? 3 : 2 };\n}\n\nfunction recordDirectPeerSignatureVersion(\n\tstore: MemoryStore,\n\tdeviceId: string,\n\tversion: 3,\n): SyncAuthResult | null {\n\ttry {\n\t\tconst advanced = recordHighestObservedDirectSignatureVersion(store.db, deviceId, version);\n\t\tif (!advanced) {\n\t\t\tconst observed = store.db\n\t\t\t\t.prepare(\n\t\t\t\t\t`SELECT sync_peer_signature_state.highest_observed_direct_signature_version\n\t\t\t\t\t FROM sync_peers\n\t\t\t\t\t LEFT JOIN sync_peer_signature_state USING (peer_device_id)\n\t\t\t\t\t WHERE sync_peers.peer_device_id = ? LIMIT 1`,\n\t\t\t\t)\n\t\t\t\t.pluck()\n\t\t\t\t.get(deviceId);\n\t\t\tif (observed === undefined) return { ok: false, reason: \"unknown_peer\", deviceId };\n\t\t}\n\t\treturn null;\n\t} catch (err) {\n\t\tif (isSqliteBusy(err)) {\n\t\t\treturn { ok: false, reason: SYNC_AUTH_STORE_BUSY_REASON, deviceId };\n\t\t}\n\t\tthrow err;\n\t}\n}\n\nfunction authorizeSyncRequest(\n\tstore: MemoryStore,\n\trequest: { method: string; url: string; header(name: string): string | undefined },\n\tbody: Buffer,\n): SyncAuthResult {\n\tconst deviceId = (request.header(\"X-Opencode-Device\") ?? \"\").trim();\n\tconst signature = request.header(\"X-Opencode-Signature\") ?? \"\";\n\tconst timestamp = request.header(\"X-Opencode-Timestamp\") ?? \"\";\n\tconst nonce = request.header(\"X-Opencode-Nonce\") ?? \"\";\n\tif (!deviceId || !signature || !timestamp || !nonce) {\n\t\treturn { ok: false, reason: \"missing_headers\", deviceId };\n\t}\n\n\tconst peerRow = store.db\n\t\t.prepare(\n\t\t\t`SELECT sync_peers.pinned_fingerprint, sync_peers.public_key,\n\t\t\t sync_peer_signature_state.highest_observed_direct_signature_version\n\t\t\t FROM sync_peers\n\t\t\t LEFT JOIN sync_peer_signature_state USING (peer_device_id)\n\t\t\t WHERE sync_peers.peer_device_id = ? LIMIT 1`,\n\t\t)\n\t\t.get(deviceId) as\n\t\t| {\n\t\t\t\tpinned_fingerprint: string | null;\n\t\t\t\tpublic_key: string | null;\n\t\t\t\thighest_observed_direct_signature_version: number | null;\n\t\t }\n\t\t| undefined;\n\tif (!peerRow) {\n\t\treturn { ok: false, reason: \"unknown_peer\", deviceId };\n\t}\n\n\tconst pinnedFingerprint = String(peerRow.pinned_fingerprint ?? \"\").trim();\n\tconst publicKey = String(peerRow.public_key ?? \"\").trim();\n\tif (!pinnedFingerprint || !publicKey) {\n\t\treturn { ok: false, reason: \"peer_record_incomplete\", deviceId };\n\t}\n\tif (fingerprintPublicKey(publicKey) !== pinnedFingerprint) {\n\t\treturn { ok: false, reason: \"fingerprint_mismatch\", deviceId };\n\t}\n\n\tlet verification: VerifiedDirectPeerSignature;\n\ttry {\n\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\tverification = verifyDirectPeerRequestSignature(request, body, {\n\t\t\tdeviceId,\n\t\t\tpublicKey,\n\t\t\texpectedRecipientId: localDeviceId,\n\t\t\thighestObservedVersion: peerRow.highest_observed_direct_signature_version,\n\t\t});\n\t} catch {\n\t\treturn { ok: false, reason: \"signature_verification_error\", deviceId };\n\t}\n\tif (!verification.ok) {\n\t\treturn { ok: false, reason: verification.reason, deviceId };\n\t}\n\n\tconst createdAt = new Date().toISOString();\n\tconst nonceResult = recordSyncAuthNonce(store, deviceId, nonce, createdAt);\n\tif (nonceResult) return nonceResult;\n\tif (verification.version === DIRECT_PEER_SIGNATURE_VERSION_NUMBER) {\n\t\tconst versionResult = recordDirectPeerSignatureVersion(store, deviceId, verification.version);\n\t\tif (versionResult) return versionResult;\n\t}\n\treturn { ok: true, reason: \"ok\", deviceId };\n}\n\nasync function authorizeBootstrapGrantRequest(\n\tstore: MemoryStore,\n\trequest: { method: string; url: string; header(name: string): string | undefined },\n\tbody: Buffer,\n): Promise<SyncAuthResult> {\n\tconst grantId = (request.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim();\n\tconst deviceId = (request.header(\"X-Opencode-Device\") ?? \"\").trim();\n\tconst signature = request.header(\"X-Opencode-Signature\") ?? \"\";\n\tconst timestamp = request.header(\"X-Opencode-Timestamp\") ?? \"\";\n\tconst nonce = request.header(\"X-Opencode-Nonce\") ?? \"\";\n\tif (!grantId || !deviceId || !signature || !timestamp || !nonce) {\n\t\treturn { ok: false, reason: \"missing_bootstrap_grant_headers\", deviceId };\n\t}\n\n\tconst config = readCoordinatorSyncConfig();\n\tif (!config.syncCoordinatorUrl) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_coordinator_not_configured\", deviceId };\n\t}\n\n\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tlet verification: CoordinatorBootstrapGrantVerification;\n\ttry {\n\t\tlet payload: Record<string, unknown> | null = null;\n\t\tif (config.syncCoordinatorAdminSecret) {\n\t\t\tconst [status, adminPayload] = await requestJson(\n\t\t\t\t\"GET\",\n\t\t\t\t`${buildBaseUrl(config.syncCoordinatorUrl)}/v1/admin/bootstrap-grants/${encodeURIComponent(grantId)}`,\n\t\t\t\t{\n\t\t\t\t\theaders: { \"X-Codemem-Coordinator-Admin\": config.syncCoordinatorAdminSecret },\n\t\t\t\t\ttimeoutS: Math.max(1, config.syncCoordinatorTimeoutS),\n\t\t\t\t},\n\t\t\t);\n\t\t\tif (status === 200) payload = adminPayload;\n\t\t} else {\n\t\t\tfor (const groupId of config.syncCoordinatorGroups) {\n\t\t\t\tconst lookupUrl = `${buildBaseUrl(config.syncCoordinatorUrl)}/v1/bootstrap-grants/${encodeURIComponent(grantId)}?group_id=${encodeURIComponent(groupId)}`;\n\t\t\t\tconst [status, signedPayload] = await requestJson(\"GET\", lookupUrl, {\n\t\t\t\t\theaders: buildAuthHeaders({\n\t\t\t\t\t\tdeviceId: localDeviceId,\n\t\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t\turl: lookupUrl,\n\t\t\t\t\t\tbodyBytes: Buffer.alloc(0),\n\t\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\t}),\n\t\t\t\t\ttimeoutS: Math.max(1, config.syncCoordinatorTimeoutS),\n\t\t\t\t});\n\t\t\t\tif (status === 200) {\n\t\t\t\t\tpayload = signedPayload;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (!payload) return { ok: false, reason: \"bootstrap_grant_lookup_failed\", deviceId };\n\t\tverification = payload as unknown as CoordinatorBootstrapGrantVerification;\n\t} catch {\n\t\treturn { ok: false, reason: \"bootstrap_grant_lookup_failed\", deviceId };\n\t}\n\n\tconst grant = verification.grant;\n\tconst workerEnrollment = verification.worker_enrollment;\n\tif (!grant || !workerEnrollment) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_invalid_payload\", deviceId };\n\t}\n\tif (\n\t\tconfig.syncCoordinatorGroups.length > 0 &&\n\t\t!config.syncCoordinatorGroups.includes(String(grant.group_id))\n\t) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_group_mismatch\", deviceId };\n\t}\n\tif (grant.revoked_at) return { ok: false, reason: \"bootstrap_grant_revoked\", deviceId };\n\tif (String(workerEnrollment.device_id) !== String(grant.worker_device_id)) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_enrollment_mismatch\", deviceId };\n\t}\n\tif (String(workerEnrollment.group_id) !== String(grant.group_id)) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_group_mismatch\", deviceId };\n\t}\n\tif (Number(workerEnrollment.enabled) !== 1) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_disabled\", deviceId };\n\t}\n\tconst workerPublicKey = String(workerEnrollment.public_key ?? \"\").trim();\n\tconst workerFingerprint = String(workerEnrollment.fingerprint ?? \"\").trim();\n\tif (!workerPublicKey || fingerprintPublicKey(workerPublicKey) !== workerFingerprint) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_identity_invalid\", deviceId };\n\t}\n\tif (grant.worker_device_id !== deviceId) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_worker_mismatch\", deviceId };\n\t}\n\tif (grant.seed_device_id !== localDeviceId) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_seed_mismatch\", deviceId };\n\t}\n\tif (new Date(grant.expires_at) <= new Date()) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_expired\", deviceId };\n\t}\n\n\tconst existingPeer = store.db\n\t\t.prepare(\n\t\t\t`SELECT highest_observed_direct_signature_version\n\t\t\t FROM sync_peer_signature_state WHERE peer_device_id = ? LIMIT 1`,\n\t\t)\n\t\t.get(deviceId) as { highest_observed_direct_signature_version: number | null } | undefined;\n\tlet signatureVerification: VerifiedDirectPeerSignature;\n\ttry {\n\t\tsignatureVerification = verifyDirectPeerRequestSignature(request, body, {\n\t\t\tdeviceId,\n\t\t\tpublicKey: workerPublicKey,\n\t\t\texpectedRecipientId: localDeviceId,\n\t\t\thighestObservedVersion: existingPeer?.highest_observed_direct_signature_version ?? null,\n\t\t});\n\t} catch {\n\t\treturn { ok: false, reason: \"bootstrap_grant_signature_verification_error\", deviceId };\n\t}\n\tif (!signatureVerification.ok) {\n\t\treturn { ok: false, reason: signatureVerification.reason, deviceId };\n\t}\n\tif (!isPeerTrustBindingCompatible(store.db, deviceId, workerPublicKey, workerFingerprint)) {\n\t\treturn { ok: false, reason: \"bootstrap_grant_peer_trust_conflict\", deviceId };\n\t}\n\n\tconst createdAt = new Date().toISOString();\n\tconst nonceResult = recordSyncAuthNonce(store, deviceId, nonce, createdAt);\n\tif (nonceResult) return nonceResult;\n\tupdatePeerAddresses(store.db, deviceId, [], {\n\t\tname: String(workerEnrollment.display_name ?? \"\").trim() || undefined,\n\t\tpinnedFingerprint: workerFingerprint,\n\t\tpublicKey: workerPublicKey,\n\t\treplaceTrust: true,\n\t});\n\tif (signatureVerification.version === DIRECT_PEER_SIGNATURE_VERSION_NUMBER) {\n\t\tconst versionResult = recordDirectPeerSignatureVersion(\n\t\t\tstore,\n\t\t\tdeviceId,\n\t\t\tsignatureVerification.version,\n\t\t);\n\t\tif (versionResult) return versionResult;\n\t}\n\treturn { ok: true, reason: \"ok\", deviceId };\n}\n\nfunction parseJsonList(value: unknown): string[] {\n\tif (value == null) return [];\n\tif (typeof value === \"string\") {\n\t\ttry {\n\t\t\tconst parsed = JSON.parse(value) as unknown;\n\t\t\tif (!Array.isArray(parsed)) return [];\n\t\t\treturn parsed.map((entry) => String(entry ?? \"\").trim()).filter(Boolean);\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t}\n\tif (!Array.isArray(value)) return [];\n\treturn value.map((entry) => String(entry ?? \"\").trim()).filter(Boolean);\n}\n\nfunction readPeerProjectFilters(\n\tstore: MemoryStore,\n\tpeerDeviceId: string,\n): { include: string[]; exclude: string[] } {\n\tconst globalConfig = readCoordinatorSyncConfig();\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t\"SELECT projects_include_json, projects_exclude_json FROM sync_peers WHERE peer_device_id = ? LIMIT 1\",\n\t\t)\n\t\t.get(peerDeviceId) as\n\t\t| { projects_include_json: string | null; projects_exclude_json: string | null }\n\t\t| undefined;\n\tif (!row) {\n\t\treturn {\n\t\t\tinclude: globalConfig.syncProjectsInclude,\n\t\t\texclude: globalConfig.syncProjectsExclude,\n\t\t};\n\t}\n\tconst hasOverride = row.projects_include_json != null || row.projects_exclude_json != null;\n\tif (!hasOverride) {\n\t\treturn {\n\t\t\tinclude: globalConfig.syncProjectsInclude,\n\t\t\texclude: globalConfig.syncProjectsExclude,\n\t\t};\n\t}\n\treturn {\n\t\tinclude: parseJsonList(row.projects_include_json),\n\t\texclude: parseJsonList(row.projects_exclude_json),\n\t};\n}\n\nfunction currentProjectScope(\n\trow: Record<string, unknown>,\n\teffective?: { include: string[]; exclude: string[] },\n): Record<string, unknown> {\n\treturn {\n\t\tinclude: safeJsonList(row.projects_include_json as string | null),\n\t\texclude: safeJsonList(row.projects_exclude_json as string | null),\n\t\teffective_include:\n\t\t\teffective?.include ?? safeJsonList(row.projects_include_json as string | null),\n\t\teffective_exclude:\n\t\t\teffective?.exclude ?? safeJsonList(row.projects_exclude_json as string | null),\n\t\tinherits_global: row.projects_include_json == null && row.projects_exclude_json == null,\n\t};\n}\n\nfunction cleanPeerScopeText(value: unknown): string | null {\n\tconst text = String(value ?? \"\").trim();\n\treturn text || null;\n}\n\nfunction peerAuthorizedScopes(store: MemoryStore, peerDeviceId: string): Record<string, unknown>[] {\n\tconst deviceId = peerDeviceId.trim();\n\tif (!deviceId) return [];\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT\n\t\t\t\trs.scope_id,\n\t\t\t\trs.label,\n\t\t\t\trs.kind,\n\t\t\t\trs.authority_type,\n\t\t\t\trs.coordinator_id,\n\t\t\t\trs.group_id,\n\t\t\t\tsm.role,\n\t\t\t\tsm.membership_epoch,\n\t\t\t\tsm.updated_at\n\t\t\t FROM scope_memberships sm\n\t\t\t JOIN replication_scopes rs ON rs.scope_id = sm.scope_id\n\t\t\t WHERE sm.device_id = ?\n\t\t\t AND sm.status = 'active'\n\t\t\t AND rs.status = 'active'\n\t\t\t AND sm.membership_epoch >= rs.membership_epoch\n\t\t\t ORDER BY CASE WHEN rs.authority_type = 'local' THEN 1 ELSE 0 END,\n\t\t\t rs.label COLLATE NOCASE,\n\t\t\t rs.scope_id`,\n\t\t)\n\t\t.all(deviceId) as Array<Record<string, unknown>>;\n\treturn rows.map((row) => ({\n\t\tscope_id: String(row.scope_id ?? \"\"),\n\t\tlabel: String(row.label ?? row.scope_id ?? \"\"),\n\t\tkind: String(row.kind ?? \"user\"),\n\t\tauthority_type: String(row.authority_type ?? \"local\"),\n\t\tcoordinator_id: cleanPeerScopeText(row.coordinator_id),\n\t\tgroup_id: cleanPeerScopeText(row.group_id),\n\t\trole: String(row.role ?? \"member\"),\n\t\tmembership_epoch: Number(row.membership_epoch ?? 0),\n\t\tupdated_at: cleanPeerScopeText(row.updated_at),\n\t}));\n}\n\nfunction ensureLocalActorRecord(store: MemoryStore): void {\n\tconst d = drizzle(store.db, { schema });\n\tconst now = new Date().toISOString();\n\t// Invariant: exactly one row in `actors` has is_local=1, and it is the\n\t// row whose actor_id matches store.actorId. Stale is_local=1 rows can\n\t// appear when a device's actor_id changes (config edit, regenerated\n\t// device keys, DB copied from another machine). Demote any such rows\n\t// before ensuring the canonical local row exists.\n\td.update(schema.actors)\n\t\t.set({ is_local: 0, updated_at: now })\n\t\t.where(and(eq(schema.actors.is_local, 1), ne(schema.actors.actor_id, store.actorId)))\n\t\t.run();\n\tconst existing = d\n\t\t.select({ actor_id: schema.actors.actor_id, is_local: schema.actors.is_local })\n\t\t.from(schema.actors)\n\t\t.where(eq(schema.actors.actor_id, store.actorId))\n\t\t.get();\n\tif (existing) {\n\t\t// Row already exists for the canonical local actor id; the demotion\n\t\t// above guarantees it is the only is_local=1 row, but the row itself\n\t\t// may have been previously set to is_local=0 (e.g. via a stale demote\n\t\t// from an even earlier identity). Re-mark it as local idempotently.\n\t\tif (existing.is_local !== 1) {\n\t\t\td.update(schema.actors)\n\t\t\t\t.set({ is_local: 1, updated_at: now })\n\t\t\t\t.where(eq(schema.actors.actor_id, store.actorId))\n\t\t\t\t.run();\n\t\t}\n\t\treturn;\n\t}\n\td.insert(schema.actors)\n\t\t.values({\n\t\t\tactor_id: store.actorId,\n\t\t\tdisplay_name: store.actorDisplayName,\n\t\t\tis_local: 1,\n\t\t\tstatus: \"active\",\n\t\t\tmerged_into_actor_id: null,\n\t\t\tcreated_at: now,\n\t\t\tupdated_at: now,\n\t\t})\n\t\t.run();\n}\n\nfunction ensureStableStoreIdentity(store: MemoryStore): string {\n\tconst deviceId = ensureStableStoreDeviceIdentity(store);\n\tensureLocalActorRecord(store);\n\treturn deviceId;\n}\n\nfunction ensureStableStoreDeviceIdentity(store: MemoryStore): string {\n\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\tstore.adoptEnsuredDeviceIdentity(deviceId);\n\treturn deviceId;\n}\n\nfunction findPeerDeviceIdForAddress(store: MemoryStore, address: string): string | null {\n\tconst rows = store.db\n\t\t.prepare(\"SELECT peer_device_id, addresses_json FROM sync_peers\")\n\t\t.all() as Array<{ peer_device_id: string; addresses_json: string | null }>;\n\tfor (const row of rows) {\n\t\tconst addresses = safeJsonList(row.addresses_json);\n\t\tif (addresses.includes(address)) return String(row.peer_device_id ?? \"\").trim() || null;\n\t}\n\treturn null;\n}\n\nfunction claimLegacyDeviceAsSelf(store: MemoryStore, originDeviceId: string): number {\n\tconst deviceId = String(originDeviceId || \"\").trim();\n\tif (!deviceId || deviceId === \"unknown\" || deviceId === store.deviceId) return 0;\n\tconst personalWorkspaceId = `personal:${store.actorId}`;\n\tconst result = store.db\n\t\t.prepare(\n\t\t\t`UPDATE memory_items\n\t\t\t SET actor_id = ?,\n\t\t\t actor_display_name = ?,\n\t\t\t visibility = 'private',\n\t\t\t workspace_id = ?,\n\t\t\t workspace_kind = 'personal',\n\t\t\t trust_state = 'trusted'\n\t\t\t WHERE origin_device_id = ?\n\t\t\t AND origin_device_id NOT IN (\n\t\t\t SELECT peer_device_id FROM sync_peers WHERE peer_device_id IS NOT NULL\n\t\t\t )\n\t\t\t AND (\n\t\t\t (\n\t\t\t actor_id IS NULL\n\t\t\t OR TRIM(actor_id) = ''\n\t\t\t OR actor_id LIKE 'legacy-sync:%'\n\t\t\t OR actor_id = ?\n\t\t\t )\n\t\t\t AND (\n\t\t\t actor_id IS NULL\n\t\t\t OR TRIM(actor_id) = ''\n\t\t\t OR actor_id LIKE 'legacy-sync:%'\n\t\t\t OR actor_display_name = ?\n\t\t\t OR workspace_id = ?\n\t\t\t OR trust_state = 'legacy_unknown'\n\t\t\t )\n\t\t\t )`,\n\t\t)\n\t\t.run(\n\t\t\tstore.actorId,\n\t\t\tstore.actorDisplayName,\n\t\t\tpersonalWorkspaceId,\n\t\t\tdeviceId,\n\t\t\tstore.actorId,\n\t\t\tLEGACY_SYNC_ACTOR_DISPLAY_NAME,\n\t\t\tLEGACY_SHARED_WORKSPACE_ID,\n\t\t);\n\treturn Number(result.changes ?? 0);\n}\n\nfunction redactCoordinatorStatus(\n\tcoordinator: Record<string, unknown>,\n\tshowDiag: boolean,\n): Record<string, unknown> {\n\tif (showDiag) return coordinator;\n\tconst discovered = Array.isArray(coordinator.discovered_devices)\n\t\t? coordinator.discovered_devices.map((item) => {\n\t\t\t\tif (!item || typeof item !== \"object\") return item;\n\t\t\t\tconst record = item as Record<string, unknown>;\n\t\t\t\tconst addressCount = Array.isArray(record.addresses) ? record.addresses.length : 0;\n\t\t\t\treturn {\n\t\t\t\t\tdevice_id: record.device_id,\n\t\t\t\t\tdisplay_name: record.display_name ?? null,\n\t\t\t\t\tgroups: Array.isArray(record.groups) ? record.groups : [],\n\t\t\t\t\tlast_seen_at: record.last_seen_at ?? null,\n\t\t\t\t\texpires_at: record.expires_at ?? null,\n\t\t\t\t\tstale: Boolean(record.stale),\n\t\t\t\t\tneeds_local_approval: Boolean(record.needs_local_approval),\n\t\t\t\t\twaiting_for_peer_approval: Boolean(record.waiting_for_peer_approval),\n\t\t\t\t\tincoming_reciprocal_request_id: record.incoming_reciprocal_request_id ?? null,\n\t\t\t\t\toutgoing_reciprocal_request_id: record.outgoing_reciprocal_request_id ?? null,\n\t\t\t\t\tfingerprint: null,\n\t\t\t\t\taddresses: [],\n\t\t\t\t\taddress_count: addressCount,\n\t\t\t\t};\n\t\t\t})\n\t\t: [];\n\treturn {\n\t\t...coordinator,\n\t\tdiscovered_devices: discovered,\n\t};\n}\n\ninterface AcceptDiscoveredPeerOptions {\n\tpeerDeviceId: string;\n\tfingerprint?: string;\n\t// Optional per-peer scope override. When undefined the group's scope\n\t// template is applied if auto_seed_scope is enabled; otherwise the peer\n\t// is enrolled with no scope filters.\n\t// Per-field: `undefined` = \"inherit from template\", `null` = \"explicit empty\",\n\t// `string[]` = \"use this list\". This avoids silently wiping the template's\n\t// exclude list when the caller only overrides include (or vice versa).\n\tscopeOverride?: {\n\t\tprojects_include?: string[] | null;\n\t\tprojects_exclude?: string[] | null;\n\t};\n\t// When provided and the caller is the admin-groups endpoint, this group\n\t// must be one of the match's coordinator groups. When undefined (legacy\n\t// /api/sync/peers/accept-discovered path) the match must belong to\n\t// exactly one group and that one is used.\n\texpectedGroupId?: string;\n\t// When provided, complete only the exact incoming reciprocal approval that\n\t// the caller reviewed instead of accepting a replacement request.\n\texpectedIncomingRequestId?: string;\n}\n\ntype AcceptDiscoveredPeerNotConfiguredReason =\n\t| \"coordinator_url_missing\"\n\t| \"coordinator_groups_empty\"\n\t| \"sync_disabled\";\n\nfunction detailForNotConfiguredReason(reason: AcceptDiscoveredPeerNotConfiguredReason): string {\n\tswitch (reason) {\n\t\tcase \"coordinator_url_missing\":\n\t\t\treturn \"Configure a coordinator URL before pairing with discovered peers.\";\n\t\tcase \"coordinator_groups_empty\":\n\t\t\treturn \"Join a coordinator team before pairing with discovered peers.\";\n\t\tcase \"sync_disabled\":\n\t\t\treturn \"Enable sync on this device before pairing with discovered peers.\";\n\t}\n}\n\nasync function acceptDiscoveredPeer(\n\tstore: MemoryStore,\n\tinput: AcceptDiscoveredPeerOptions,\n): Promise<\n\t| {\n\t\t\tok: true;\n\t\t\tpeer_device_id: string;\n\t\t\tcreated: boolean;\n\t\t\tupdated: boolean;\n\t\t\tname: string | null;\n\t\t\tgroup_id: string;\n\t }\n\t| {\n\t\t\tok: false;\n\t\t\tstatus: number;\n\t\t\terror: string;\n\t\t\tdetail: string;\n\t\t\treason?: AcceptDiscoveredPeerNotConfiguredReason;\n\t }\n> {\n\tconst config = readCoordinatorSyncConfig();\n\t// Order: address the most foundational gap first so the detail string\n\t// guides the user through setup in the correct sequence.\n\tlet notConfiguredReason: AcceptDiscoveredPeerNotConfiguredReason | null = null;\n\tif (!config.syncCoordinatorUrl) {\n\t\tnotConfiguredReason = \"coordinator_url_missing\";\n\t} else if (config.syncCoordinatorGroups.length === 0) {\n\t\tnotConfiguredReason = \"coordinator_groups_empty\";\n\t} else if (!config.syncEnabled) {\n\t\tnotConfiguredReason = \"sync_disabled\";\n\t}\n\tif (notConfiguredReason) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 400,\n\t\t\terror: \"coordinator_not_configured\",\n\t\t\treason: notConfiguredReason,\n\t\t\tdetail: detailForNotConfiguredReason(notConfiguredReason),\n\t\t};\n\t}\n\tconst discovered = await lookupCoordinatorPeers(store, config);\n\tconst inputFingerprint = String(input.fingerprint ?? \"\").trim();\n\tconst candidates = discovered.filter(\n\t\t(peer) => String(peer.device_id ?? \"\").trim() === input.peerDeviceId,\n\t);\n\tconst matchingCandidates = inputFingerprint\n\t\t? candidates.filter((peer) => String(peer.fingerprint ?? \"\").trim() === inputFingerprint)\n\t\t: candidates;\n\tconst uniqueFingerprints = new Set(\n\t\tmatchingCandidates.map((peer) => String(peer.fingerprint ?? \"\").trim()).filter(Boolean),\n\t);\n\tif (!inputFingerprint && uniqueFingerprints.size > 1) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"ambiguous_discovered_peer\",\n\t\t\tdetail:\n\t\t\t\t\"That discovered device has multiple coordinator fingerprints. Enable diagnostics, refresh sync status, and choose the intended device before trusting it.\",\n\t\t};\n\t}\n\tconst match = matchingCandidates[0];\n\tif (!match) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 404,\n\t\t\terror: \"discovered_peer_not_found\",\n\t\t\tdetail: \"That discovered device is no longer available. Refresh sync status and try again.\",\n\t\t};\n\t}\n\tconst expiresAt = String(match.expires_at ?? \"\").trim();\n\tconst expired = expiresAt ? Date.parse(expiresAt) <= Date.now() : false;\n\tif (match.stale || expired) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"discovered_peer_stale\",\n\t\t\tdetail:\n\t\t\t\t\"This discovered device's coordinator presence is stale. Wait for it to come online and refresh sync status before trusting it.\",\n\t\t};\n\t}\n\tconst nextFingerprint = String(match.fingerprint ?? \"\").trim();\n\tconst nextPublicKey = String(match.public_key ?? \"\").trim();\n\tconst nextName = String(match.display_name ?? \"\").trim() || null;\n\tconst nextAddresses = Array.isArray(match.addresses)\n\t\t? match.addresses.filter((value): value is string => typeof value === \"string\")\n\t\t: [];\n\tif (!nextPublicKey) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"discovered_peer_missing_public_key\",\n\t\t\tdetail:\n\t\t\t\t\"This discovered device is missing its coordinator public key. Refresh sync status and try again.\",\n\t\t};\n\t}\n\tif (!nextFingerprint || fingerprintPublicKey(nextPublicKey) !== nextFingerprint) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tstatus: 409,\n\t\t\terror: \"discovered_peer_fingerprint_mismatch\",\n\t\t\tdetail:\n\t\t\t\t\"This discovered device's coordinator public key does not match its fingerprint. Refresh sync status or re-enroll the device before trusting it.\",\n\t\t};\n\t}\n\n\tconst groupIds = Array.isArray(match.groups)\n\t\t? match.groups.map((value) => String(value ?? \"\").trim()).filter(Boolean)\n\t\t: [];\n\tconst freshGroupIds = Array.isArray(match.fresh_groups)\n\t\t? match.fresh_groups.map((value) => String(value ?? \"\").trim()).filter(Boolean)\n\t\t: [];\n\tlet groupId: string;\n\tif (input.expectedGroupId) {\n\t\tif (!groupIds.includes(input.expectedGroupId)) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tstatus: 409,\n\t\t\t\terror: \"peer_not_in_group\",\n\t\t\t\tdetail:\n\t\t\t\t\t\"This discovered device is not visible through the specified coordinator group. Refresh sync status and try again.\",\n\t\t\t};\n\t\t}\n\t\tif (!freshGroupIds.includes(input.expectedGroupId)) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tstatus: 409,\n\t\t\t\terror: \"discovered_peer_stale\",\n\t\t\t\tdetail:\n\t\t\t\t\t\"This discovered device's coordinator presence is stale for the specified group. Wait for it to come online and refresh sync status before trusting it.\",\n\t\t\t};\n\t\t}\n\t\tgroupId = input.expectedGroupId;\n\t} else {\n\t\tif (groupIds.length !== 1) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tstatus: 409,\n\t\t\t\terror: \"ambiguous_coordinator_group\",\n\t\t\t\tdetail:\n\t\t\t\t\tgroupIds.length > 1\n\t\t\t\t\t\t? \"This device is visible through multiple coordinator groups. Review the team setup before approving it here.\"\n\t\t\t\t\t\t: \"This device is missing coordinator group context. Refresh sync status and try again.\",\n\t\t\t};\n\t\t}\n\t\tgroupId = groupIds[0] as string;\n\t}\n\tconst d = drizzle(store.db, { schema });\n\tconst existing = d\n\t\t.select({\n\t\t\tpeer_device_id: schema.syncPeers.peer_device_id,\n\t\t\tpinned_fingerprint: schema.syncPeers.pinned_fingerprint,\n\t\t\tpublic_key: schema.syncPeers.public_key,\n\t\t\taddresses_json: schema.syncPeers.addresses_json,\n\t\t\tdiscovered_via_group_id: schema.syncPeers.discovered_via_group_id,\n\t\t})\n\t\t.from(schema.syncPeers)\n\t\t.where(eq(schema.syncPeers.peer_device_id, input.peerDeviceId))\n\t\t.get();\n\tconst existingFingerprint = String(existing?.pinned_fingerprint ?? \"\").trim();\n\tif (existing && existingFingerprint && existingFingerprint !== nextFingerprint) {\n\t\treturn {\n\t\t\tok: false as const,\n\t\t\tstatus: 409,\n\t\t\terror: \"peer_conflict\",\n\t\t\tdetail:\n\t\t\t\t\"An existing peer with this device id is pinned to a different fingerprint. Remove or repair the old peer before accepting this discovered device.\",\n\t\t};\n\t}\n\tconst existingAddresses = (() => {\n\t\ttry {\n\t\t\tconst raw = JSON.parse(String(existing?.addresses_json ?? \"[]\"));\n\t\t\treturn Array.isArray(raw)\n\t\t\t\t? raw.filter((value): value is string => typeof value === \"string\")\n\t\t\t\t: [];\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t})();\n\tconst addressesJson = JSON.stringify(mergeAddresses(nextAddresses, existingAddresses));\n\tawait createCoordinatorReciprocalApproval(store, config, {\n\t\tgroupId,\n\t\trequestedDeviceId: input.peerDeviceId,\n\t\t...(input.expectedIncomingRequestId\n\t\t\t? { expectedIncomingRequestId: input.expectedIncomingRequestId }\n\t\t\t: {}),\n\t});\n\n\t// Resolve project-scope seed. On first enrollment (no existing row), apply\n\t// the group's scope template if auto_seed_scope is enabled. Per-field\n\t// overrides fall back to the template when undefined, so passing only\n\t// `projects_include` does not silently wipe the template's exclude list.\n\t// Existing peers are not re-scoped — the template is a seed, not a live link.\n\tconst coordinatorUrl = config.syncCoordinatorUrl || null;\n\tlet scopeInclude: string | null | undefined;\n\tlet scopeExclude: string | null | undefined;\n\tif (!existing) {\n\t\tlet templateInclude: string[] | null = null;\n\t\tlet templateExclude: string[] | null = null;\n\t\tif (coordinatorUrl) {\n\t\t\tconst prefs = getCoordinatorGroupPreference(store.db, coordinatorUrl, groupId);\n\t\t\tif (prefs?.auto_seed_scope) {\n\t\t\t\ttemplateInclude = prefs.projects_include ?? null;\n\t\t\t\ttemplateExclude = prefs.projects_exclude ?? null;\n\t\t\t}\n\t\t}\n\t\tconst overrideInclude = input.scopeOverride?.projects_include;\n\t\tconst overrideExclude = input.scopeOverride?.projects_exclude;\n\t\tconst resolvedInclude = overrideInclude === undefined ? templateInclude : overrideInclude;\n\t\tconst resolvedExclude = overrideExclude === undefined ? templateExclude : overrideExclude;\n\t\tscopeInclude = resolvedInclude ? JSON.stringify(resolvedInclude) : null;\n\t\tscopeExclude = resolvedExclude ? JSON.stringify(resolvedExclude) : null;\n\t}\n\n\tconst now = new Date().toISOString();\n\tconst result = store.db.transaction(() => {\n\t\tif (!existing) {\n\t\t\td.insert(schema.syncPeers)\n\t\t\t\t.values({\n\t\t\t\t\tpeer_device_id: input.peerDeviceId,\n\t\t\t\t\tname: nextName,\n\t\t\t\t\tpinned_fingerprint: nextFingerprint || null,\n\t\t\t\t\tpublic_key: nextPublicKey,\n\t\t\t\t\taddresses_json: addressesJson,\n\t\t\t\t\tprojects_include_json: scopeInclude ?? null,\n\t\t\t\t\tprojects_exclude_json: scopeExclude ?? null,\n\t\t\t\t\tcreated_at: now,\n\t\t\t\t\tlast_seen_at: now,\n\t\t\t\t\tdiscovered_via_coordinator_id: coordinatorUrl,\n\t\t\t\t\tdiscovered_via_group_id: groupId,\n\t\t\t\t})\n\t\t\t\t.run();\n\t\t\treturn {\n\t\t\t\tok: true as const,\n\t\t\t\tpeer_device_id: input.peerDeviceId,\n\t\t\t\tcreated: true,\n\t\t\t\tupdated: false,\n\t\t\t\tname: nextName,\n\t\t\t\tgroup_id: groupId,\n\t\t\t};\n\t\t}\n\t\td.update(schema.syncPeers)\n\t\t\t.set({\n\t\t\t\tname: nextName,\n\t\t\t\tpinned_fingerprint: nextFingerprint || existing.pinned_fingerprint || null,\n\t\t\t\tpublic_key: nextPublicKey || existing.public_key || null,\n\t\t\t\taddresses_json: addressesJson,\n\t\t\t\tlast_seen_at: now,\n\t\t\t\t// Backfill group-discovery attribution on existing rows if we know\n\t\t\t\t// it now and it wasn't stamped before. Don't overwrite a non-null\n\t\t\t\t// group reference — that would silently move the peer between\n\t\t\t\t// teams and invalidate any template-seeded scope.\n\t\t\t\t...((existing as { discovered_via_group_id?: string | null }).discovered_via_group_id\n\t\t\t\t\t? {}\n\t\t\t\t\t: { discovered_via_group_id: groupId, discovered_via_coordinator_id: coordinatorUrl }),\n\t\t\t})\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, input.peerDeviceId))\n\t\t\t.run();\n\t\treturn {\n\t\t\tok: true as const,\n\t\t\tpeer_device_id: input.peerDeviceId,\n\t\t\tcreated: false,\n\t\t\tupdated: true,\n\t\t\tname: nextName,\n\t\t\tgroup_id: groupId,\n\t\t};\n\t})();\n\treturn result;\n}\n\nfunction filterOpsForPeer(\n\tstore: MemoryStore,\n\tpeerDeviceId: string,\n\tlocalDeviceId: string | null,\n\tops: ReplicationOp[],\n\toptions: { applyScopeFilter?: boolean; supportsReassignScope?: boolean } = {},\n): { allowed: ReplicationOp[]; skipped: number; skippedDetail: SafeSkippedSyncDetail | null } {\n\tconst [allowed, , skipped] = filterReplicationOpsForSyncWithStatus(store.db, ops, peerDeviceId, {\n\t\tlocalDeviceId,\n\t\tapplyScopeFilter: options.applyScopeFilter,\n\t\tsupportsReassignScope: options.supportsReassignScope,\n\t});\n\treturn {\n\t\tallowed,\n\t\tskipped: skipped?.skipped_count ?? 0,\n\t\tskippedDetail: skipped ? safeSkippedSyncDetail(skipped) : null,\n\t};\n}\n\n// ---------------------------------------------------------------------------\n// Peer row mapping — deduplicated helper (fix #4)\n// ---------------------------------------------------------------------------\n\nfunction claimedLocalActorScopeStatus(\n\tstore: MemoryStore,\n\trow: Record<string, unknown>,\n): Record<string, unknown> | null {\n\tif (!row.claimed_local_actor) return null;\n\tconst peerDeviceId = String(row.peer_device_id ?? \"\").trim();\n\tconst actorId = String(row.actor_id ?? store.actorId).trim() || store.actorId;\n\tconst grant = personalScopeGrantStatusForPeer(store.db, { peerDeviceId, actorId });\n\treturn {\n\t\tscope_id: grant.scope_id,\n\t\tauthorized: grant.authorized,\n\t\tstate: grant.state,\n\t\taction_required: !grant.authorized,\n\t};\n}\n\n/**\n * Map a raw sync_peers DB row to the API response shape.\n * When showDiag is false, sensitive fields (fingerprint, last_error, addresses)\n * are redacted.\n */\nfunction mapPeerRow(\n\tstore: MemoryStore,\n\trow: Record<string, unknown>,\n\tshowDiag: boolean,\n\trecentOpsByPeer?: Map<string, { in: number; out: number }>,\n\tscopeRejectionsByPeer?: Map<string, InboundScopeRejectionPeerSummary>,\n\tlocalDeviceId?: string | null,\n): Record<string, unknown> {\n\tconst peerId = String(row.peer_device_id ?? \"\");\n\tconst recentOps = recentOpsByPeer?.get(peerId) ?? { in: 0, out: 0 };\n\tconst scopeRejections = scopeRejectionsByPeer?.get(peerId);\n\tconst addresses = safeJsonList(row.addresses_json as string | null);\n\tconst perScopeSync = listPerPeerScopeSyncState(store.db, {\n\t\tlocalDeviceId: localDeviceId ?? null,\n\t\tpeerDeviceId: peerId,\n\t});\n\treturn {\n\t\tpeer_device_id: row.peer_device_id,\n\t\tname: row.name,\n\t\tfingerprint: showDiag ? row.pinned_fingerprint : null,\n\t\tpinned: Boolean(row.pinned_fingerprint),\n\t\taddresses: showDiag ? addresses : [],\n\t\taddress_count: addresses.length,\n\t\tlast_seen_at: row.last_seen_at,\n\t\tlast_sync_at: row.last_sync_at,\n\t\tlast_error: showDiag ? row.last_error : null,\n\t\truntime_version: row.runtime_version ?? null,\n\t\truntime_version_observed_at: row.runtime_version_observed_at ?? null,\n\t\thas_error: Boolean(row.last_error),\n\t\tclaimed_local_actor: Boolean(row.claimed_local_actor),\n\t\tclaimed_local_actor_scope: claimedLocalActorScopeStatus(store, row),\n\t\tactor_id: row.actor_id ?? null,\n\t\tactor_display_name: row.actor_display_name ?? null,\n\t\tauthorized_scopes: peerAuthorizedScopes(store, peerId),\n\t\t// Per-Space sync state intersecting local + peer membership and joining\n\t\t// per-scope replication cursor data. Use this surface to render\n\t\t// per-Space progress in CLI/UI without exposing the legacy `status=ok`\n\t\t// shorthand that hid scoped sync gaps in 0.32.x.\n\t\tper_scope_sync: perScopeSync,\n\t\tproject_scope: {\n\t\t\t...currentProjectScope(row, readPeerProjectFilters(store, String(row.peer_device_id ?? \"\"))),\n\t\t},\n\t\trecent_ops: { in: recentOps.in, out: recentOps.out },\n\t\tscope_rejections: {\n\t\t\ttotal: scopeRejections?.total ?? 0,\n\t\t\tby_reason: scopeRejections?.by_reason ?? {},\n\t\t\tlast_at: scopeRejections?.last_at ?? null,\n\t\t},\n\t\tdiscovered_via_coordinator_id:\n\t\t\ttypeof row.discovered_via_coordinator_id === \"string\"\n\t\t\t\t? row.discovered_via_coordinator_id\n\t\t\t\t: null,\n\t\tdiscovered_via_group_id:\n\t\t\ttypeof row.discovered_via_group_id === \"string\" ? row.discovered_via_group_id : null,\n\t};\n}\n\nfunction redactSyncAttemptError(error: unknown): string | null {\n\tconst text = String(error ?? \"\").trim();\n\tif (!text) return null;\n\treturn \"sync attempt failed; enable diagnostics for details\";\n}\n\nfunction mapSyncAttemptRow(\n\trow: Record<string, unknown>,\n\tshowDiag: boolean,\n\taddresses?: string[],\n): Record<string, unknown> {\n\tconst redactedError = redactSyncAttemptError(row.error);\n\treturn {\n\t\t...row,\n\t\terror: showDiag ? row.error : redactedError,\n\t\terror_redacted: !showDiag && redactedError != null,\n\t\tstatus: attemptStatus(row),\n\t\taddress: showDiag && addresses?.length ? addresses[0] : null,\n\t};\n}\n\nconst SYNC_SCOPE_REJECTION_WINDOW_SECONDS = 24 * 60 * 60;\nconst CLEANUP_DIAGNOSTICS_MAX_ROWS = 250;\n\nfunction recentScopeRejectionsByPeer(\n\tstore: MemoryStore,\n): Map<string, InboundScopeRejectionPeerSummary> {\n\tconst cutoff = new Date(Date.now() - SYNC_SCOPE_REJECTION_WINDOW_SECONDS * 1000).toISOString();\n\tconst summaries = summarizeInboundScopeRejections(store.db, { sinceIso: cutoff });\n\tconst map = new Map<string, InboundScopeRejectionPeerSummary>();\n\tfor (const summary of summaries) {\n\t\tconst id = String(summary.peer_device_id ?? \"\").trim();\n\t\tif (!id) continue;\n\t\tmap.set(id, summary);\n\t}\n\treturn map;\n}\n\nfunction cleanupDiagnostics(\n\tstore: MemoryStore,\n\tlocalDeviceId: string | null,\n\tshowDiag: boolean,\n): Record<string, unknown> {\n\tconst opRows = store.db\n\t\t.prepare(\n\t\t\t`SELECT\n\t\t\t\tSUM(CASE WHEN device_id = ? THEN 1 ELSE 0 END) AS source_authored,\n\t\t\t\tSUM(CASE WHEN device_id != ? THEN 1 ELSE 0 END) AS applied,\n\t\t\t\tMAX(created_at) AS latest_at\n\t\t\t FROM replication_ops\n\t\t\t WHERE op_type = ?`,\n\t\t)\n\t\t.get(localDeviceId ?? \"\", localDeviceId ?? \"\", ACCESS_CLEANUP_OP_TYPE) as\n\t\t| { applied: number | null; latest_at: string | null; source_authored: number | null }\n\t\t| undefined;\n\tconst stale =\n\t\tlocalDeviceId && showDiag\n\t\t\t? diagnoseStalePeerReceivedRows(store.db, {\n\t\t\t\t\tlocalDeviceId,\n\t\t\t\t\tmaxRows: CLEANUP_DIAGNOSTICS_MAX_ROWS,\n\t\t\t\t})\n\t\t\t: { ambiguous: [], checked: 0, retained: 0, would_delete: 0, would_delete_memory_ids: [] };\n\tconst ambiguousByReason: Record<string, number> = {};\n\tfor (const item of stale.ambiguous) {\n\t\tambiguousByReason[item.reason] = (ambiguousByReason[item.reason] ?? 0) + 1;\n\t}\n\tconst sourceAuthored = Number(opRows?.source_authored ?? 0);\n\tconst applied = Number(opRows?.applied ?? 0);\n\tconst ambiguous = stale.ambiguous.length;\n\tconst state = stale.would_delete\n\t\t? \"cleanup_pending\"\n\t\t: ambiguous\n\t\t\t? \"needs_review\"\n\t\t\t: applied\n\t\t\t\t? \"cleanup_applied\"\n\t\t\t\t: sourceAuthored\n\t\t\t\t\t? \"cleanup_announced\"\n\t\t\t\t\t: \"clear\";\n\treturn {\n\t\tstate,\n\t\taccess_cleanup_ops: {\n\t\t\tsource_authored: sourceAuthored,\n\t\t\tapplied,\n\t\t\tlatest_at: opRows?.latest_at ?? null,\n\t\t},\n\t\tstale_peer_rows: {\n\t\t\tchecked: stale.checked,\n\t\t\tdiagnostic_limit: showDiag ? CLEANUP_DIAGNOSTICS_MAX_ROWS : 0,\n\t\t\tscan_skipped: !showDiag || !localDeviceId,\n\t\t\twould_remove: stale.would_delete,\n\t\t\tambiguous,\n\t\t\tambiguous_by_reason: ambiguousByReason,\n\t\t\tretained: stale.retained,\n\t\t\titems: showDiag ? stale.ambiguous.slice(0, 25) : undefined,\n\t\t},\n\t\tredacted: !showDiag,\n\t};\n}\n\nfunction legacySharedReviewSummary(store: MemoryStore): Record<string, unknown> {\n\tconst rows = legacySharedReviewRows(store);\n\tconst memoryCount = rows.length;\n\tconst lastUpdatedAt = rows.reduce<string | null>(\n\t\t(current, row) =>\n\t\t\trow.updated_at && (!current || row.updated_at > current) ? row.updated_at : current,\n\t\tnull,\n\t);\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\tconst candidatesByIdentity = new Map(\n\t\tlistProjectScopeCandidates(store.db, { limit: null }).map((candidate) => [\n\t\t\tcandidate.workspace_identity,\n\t\t\tcandidate,\n\t\t]),\n\t);\n\tconst groupsByIdentity = new Map<\n\t\tstring,\n\t\t{\n\t\t\tworkspace_identity: string;\n\t\t\tidentity_source: string;\n\t\t\tdisplay_project: string;\n\t\t\tmemory_count: number;\n\t\t\treassignable_memory_count: number;\n\t\t\tpeer_owned_memory_count: number;\n\t\t\tlast_updated_at: string | null;\n\t\t\tmemory_samples: LegacySharedReviewMemorySample[];\n\t\t\tsuggested_scope_id: string | null;\n\t\t\tsuggestion_reason: string | null;\n\t\t}\n\t>();\n\tfor (const row of rows) {\n\t\tconst identity = canonicalWorkspaceIdentity({\n\t\t\tcwd: row.cwd,\n\t\t\tgitBranch: row.git_branch,\n\t\t\tgitRemote: row.git_remote,\n\t\t\tproject: row.project,\n\t\t\tworkspaceId: row.workspace_id,\n\t\t});\n\t\tconst candidate = candidatesByIdentity.get(identity.value);\n\t\tconst resolvedScope = candidate?.resolved_scope_id ?? null;\n\t\tconst suggestedScope =\n\t\t\tresolvedScope &&\n\t\t\tresolvedScope !== LOCAL_DEFAULT_SCOPE_ID &&\n\t\t\tresolvedScope !== LEGACY_SHARED_REVIEW_SCOPE_ID\n\t\t\t\t? resolvedScope\n\t\t\t\t: candidate?.suggested_scope_id;\n\t\tconst existing = groupsByIdentity.get(identity.value);\n\t\tconst isOwnedBySelf = ownedBySelf(row as unknown as Record<string, unknown>);\n\t\tconst rowUpdatedAt = row.updated_at ?? null;\n\t\tif (existing) {\n\t\t\texisting.memory_count += 1;\n\t\t\tif (isOwnedBySelf) existing.reassignable_memory_count += 1;\n\t\t\telse existing.peer_owned_memory_count += 1;\n\t\t\tif (rowUpdatedAt && (!existing.last_updated_at || rowUpdatedAt > existing.last_updated_at)) {\n\t\t\t\texisting.last_updated_at = rowUpdatedAt;\n\t\t\t}\n\t\t\tif (existing.memory_samples.length < LEGACY_SHARED_REVIEW_SAMPLE_LIMIT) {\n\t\t\t\texisting.memory_samples.push(legacySharedReviewMemorySample(row, isOwnedBySelf));\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tgroupsByIdentity.set(identity.value, {\n\t\t\tworkspace_identity: identity.value,\n\t\t\tidentity_source: identity.source,\n\t\t\tdisplay_project: identity.displayProject ?? row.project ?? row.cwd ?? identity.value,\n\t\t\tmemory_count: 1,\n\t\t\treassignable_memory_count: isOwnedBySelf ? 1 : 0,\n\t\t\tpeer_owned_memory_count: isOwnedBySelf ? 0 : 1,\n\t\t\tlast_updated_at: rowUpdatedAt,\n\t\t\tmemory_samples: [legacySharedReviewMemorySample(row, isOwnedBySelf)],\n\t\t\tsuggested_scope_id: suggestedScope ?? null,\n\t\t\tsuggestion_reason: suggestedScope\n\t\t\t\t? (candidate?.suggestion_reason ??\n\t\t\t\t\t\"Existing project mapping can be reviewed as a destination, but legacy data is not promoted automatically.\")\n\t\t\t\t: null,\n\t\t});\n\t}\n\tconst totalGroupCount = groupsByIdentity.size;\n\tconst groups = [...groupsByIdentity.values()].sort(\n\t\t(left, right) =>\n\t\t\tright.memory_count - left.memory_count ||\n\t\t\t(right.last_updated_at ?? \"\").localeCompare(left.last_updated_at ?? \"\") ||\n\t\t\tleft.workspace_identity.localeCompare(right.workspace_identity),\n\t);\n\tconst targetScopes = listSharingDomainSettingsScopes(store.db)\n\t\t.filter(\n\t\t\t(scope) =>\n\t\t\t\tscope.scope_id !== LOCAL_DEFAULT_SCOPE_ID &&\n\t\t\t\tscope.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID,\n\t\t)\n\t\t.map((scope) => ({\n\t\t\tauthority_type: scope.authority_type,\n\t\t\tlabel: scope.label || scope.scope_id,\n\t\t\tscope_id: scope.scope_id,\n\t\t}));\n\treturn {\n\t\tscope_id: LEGACY_SHARED_REVIEW_SCOPE_ID,\n\t\tmemory_count: memoryCount,\n\t\thas_data: memoryCount > 0,\n\t\tlast_updated_at: lastUpdatedAt,\n\t\tgroups,\n\t\ttotal_group_count: totalGroupCount,\n\t\ttarget_scopes: targetScopes,\n\t};\n}\n\ninterface LegacySharedReviewReassignmentMemoryRow {\n\tid: number;\n\trev: number | null;\n\tactive: number | null;\n\tdeleted_at: string | null;\n\tcreated_at: string | null;\n\tupdated_at: string | null;\n\tscope_id: string | null;\n\tkind: string | null;\n\ttitle: string | null;\n\tbody_text: string | null;\n\tproject: string | null;\n\tcwd: string | null;\n\tgit_remote: string | null;\n\tgit_branch: string | null;\n\tworkspace_id: string | null;\n\tactor_id: string | null;\n\torigin_device_id: string | null;\n\tmetadata_json: string | null;\n}\n\nconst LEGACY_SHARED_REVIEW_SAMPLE_LIMIT = 3;\nconst LEGACY_SHARED_REVIEW_BODY_PREVIEW_SQL_LIMIT = 360;\n\ninterface LegacySharedReviewMemorySample {\n\tid: number;\n\tkind: string | null;\n\ttitle: string;\n\tbody_preview: string | null;\n\tcreated_at: string | null;\n\tupdated_at: string | null;\n\townership: \"local\" | \"peer\";\n\tproject: string | null;\n\tcwd: string | null;\n\tgit_remote: string | null;\n}\n\nfunction previewText(value: string | null | undefined, limit = 180): string | null {\n\tconst normalized = value?.replace(/\\s+/g, \" \").trim();\n\tif (!normalized) return null;\n\treturn normalized.length > limit ? `${normalized.slice(0, limit - 1)}…` : normalized;\n}\n\nfunction legacySharedReviewMemorySample(\n\trow: LegacySharedReviewReassignmentMemoryRow,\n\tisOwnedBySelf: boolean,\n): LegacySharedReviewMemorySample {\n\treturn {\n\t\tid: row.id,\n\t\tkind: row.kind,\n\t\ttitle: previewText(row.title, 120) ?? `Memory ${row.id}`,\n\t\tbody_preview: previewText(row.body_text),\n\t\tcreated_at: row.created_at ?? null,\n\t\tupdated_at: row.updated_at ?? null,\n\t\townership: isOwnedBySelf ? \"local\" : \"peer\",\n\t\tproject: row.project ?? null,\n\t\tcwd: row.cwd ?? null,\n\t\tgit_remote: row.git_remote ?? null,\n\t};\n}\n\nfunction legacySharedReviewRows(store: MemoryStore): LegacySharedReviewReassignmentMemoryRow[] {\n\treturn store.db\n\t\t.prepare(\n\t\t\t`SELECT m.id,\n\t\t\t m.rev,\n\t\t\t m.active,\n\t\t\t m.deleted_at,\n\t\t\t m.created_at,\n\t\t\t m.updated_at,\n\t\t\t m.scope_id,\n\t\t\t m.kind,\n\t\t\t m.title,\n\t\t\t\t substr(m.body_text, 1, ?) AS body_text,\n\t\t\t s.project,\n\t\t\t s.cwd,\n\t\t\t s.git_remote,\n\t\t\t s.git_branch,\n\t\t\t m.workspace_id,\n\t\t\t m.actor_id,\n\t\t\t m.origin_device_id,\n\t\t\t m.metadata_json\n\t\t\t FROM memory_items m\n\t\t\t LEFT JOIN sessions s ON s.id = m.session_id\n\t\t\t WHERE m.scope_id = ?\n\t\t\t AND m.active = 1\n\t\t\t AND m.deleted_at IS NULL\n\t\t\t ORDER BY COALESCE(m.updated_at, m.created_at, '') DESC, m.id DESC`,\n\t\t)\n\t\t.all(\n\t\t\tLEGACY_SHARED_REVIEW_BODY_PREVIEW_SQL_LIMIT,\n\t\t\tLEGACY_SHARED_REVIEW_SCOPE_ID,\n\t\t) as LegacySharedReviewReassignmentMemoryRow[];\n}\n\nfunction legacySharedReviewConfirmationToken(input: {\n\trows: LegacySharedReviewReassignmentMemoryRow[];\n\tscopeId: string;\n\tstore: MemoryStore;\n\tworkspaceIdentity: string;\n}): string {\n\tconst ownedBySelf = input.store.buildOwnershipPredicate();\n\tconst payload = input.rows\n\t\t.map((row) => {\n\t\t\tconst ownership = ownedBySelf(row as unknown as Record<string, unknown>) ? \"local\" : \"peer\";\n\t\t\treturn `${row.id}:${row.rev ?? 0}:${row.scope_id ?? \"\"}:${ownership}`;\n\t\t})\n\t\t.sort()\n\t\t.join(\",\");\n\treturn Buffer.from(`${input.workspaceIdentity}|${input.scopeId}|${payload}`, \"utf8\").toString(\n\t\t\"base64url\",\n\t);\n}\n\ninterface LegacySharedReviewReassignmentPreview {\n\tconfirmation_token: string;\n\tworkspace_identity: string;\n\tscope_id: string;\n\ttarget_scope_label: string;\n\tmemory_count: number;\n\treassignable_memory_count: number;\n\tskipped_memory_count: number;\n\taffected_peer_device_count: number;\n\taffected_peer_device_ids: string[];\n\twarning: string;\n}\n\ninterface ProjectInventoryMemoryRow {\n\tid: number;\n\trev: number | null;\n\tproject: string | null;\n\tcwd: string | null;\n\tgit_remote: string | null;\n\tgit_branch: string | null;\n\tworkspace_id: string | null;\n\tactor_id: string | null;\n\torigin_device_id: string | null;\n\tmetadata_json: string | null;\n}\n\nfunction projectInventoryRowsForWorkspace(\n\tstore: MemoryStore,\n\tworkspaceIdentity: string,\n): ProjectInventoryMemoryRow[] {\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT m.id,\n\t\t\t m.rev,\n\t\t\t s.project,\n\t\t\t s.cwd,\n\t\t\t s.git_remote,\n\t\t\t s.git_branch,\n\t\t\t m.workspace_id,\n\t\t\t m.actor_id,\n\t\t\t m.origin_device_id,\n\t\t\t m.metadata_json\n\t\t\t FROM memory_items m\n\t\t\t LEFT JOIN sessions s ON s.id = m.session_id\n\t\t\t WHERE m.active = 1\n\t\t\t AND m.deleted_at IS NULL`,\n\t\t)\n\t\t.all() as ProjectInventoryMemoryRow[];\n\treturn rows.filter((row) => {\n\t\tconst identity = canonicalWorkspaceIdentity({\n\t\t\tcwd: row.cwd,\n\t\t\tgitBranch: row.git_branch,\n\t\t\tgitRemote: row.git_remote,\n\t\t\tproject: row.project,\n\t\t\tworkspaceId: row.workspace_id,\n\t\t});\n\t\treturn identity.value === workspaceIdentity;\n\t});\n}\n\nfunction projectForgetConfirmationToken(\n\tstore: MemoryStore,\n\trows: ProjectInventoryMemoryRow[],\n): string {\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\tconst payload = rows\n\t\t.map((row) => {\n\t\t\tconst ownership = ownedBySelf(row as unknown as Record<string, unknown>) ? \"local\" : \"peer\";\n\t\t\treturn `${row.id}:${row.rev ?? 0}:${ownership}`;\n\t\t})\n\t\t.sort()\n\t\t.join(\",\");\n\treturn Buffer.from(payload, \"utf8\").toString(\"base64url\");\n}\n\nfunction forgetProjectInventoryLocalMemories(\n\tstore: MemoryStore,\n\tinput: { confirmationToken?: string | null; confirmed: boolean; workspaceIdentity: string },\n): Record<string, unknown> {\n\tif (!input.workspaceIdentity.trim()) {\n\t\tthrow new Error(\"workspace_identity must be a non-empty string\");\n\t}\n\tconst rows = projectInventoryRowsForWorkspace(store, input.workspaceIdentity);\n\tif (rows.length === 0) throw new Error(\"project identity not found\");\n\tconst ownedBySelf = store.buildOwnershipPredicate();\n\tconst localRows = rows.filter((row) => ownedBySelf(row as unknown as Record<string, unknown>));\n\tconst confirmationToken = projectForgetConfirmationToken(store, rows);\n\tconst preview = {\n\t\tconfirmation_token: confirmationToken,\n\t\tlocal_owned_memory_count: localRows.length,\n\t\tpeer_owned_memory_count: rows.length - localRows.length,\n\t\tworkspace_identity: input.workspaceIdentity,\n\t};\n\tif (!input.confirmed) {\n\t\treturn { confirmed: false, ...preview };\n\t}\n\tif (input.confirmationToken !== confirmationToken) {\n\t\tthrow new Error(\"project memories changed before cleanup; refresh and try again\");\n\t}\n\tstore.db.transaction(() => {\n\t\tfor (const row of localRows) store.forget(row.id);\n\t})();\n\treturn { confirmed: true, forgotten_memory_count: localRows.length, ...preview };\n}\n\nfunction assertLocalDeviceScopeMembership(store: MemoryStore, scopeId: string): void {\n\tif (scopeId === LOCAL_DEFAULT_SCOPE_ID) return;\n\tconst row = store.db\n\t\t.prepare(\n\t\t\t`SELECT 1\n\t\t\t FROM scope_memberships sm\n\t\t\t JOIN replication_scopes rs ON rs.scope_id = sm.scope_id\n\t\t\t WHERE sm.scope_id = ?\n\t\t\t AND sm.device_id = ?\n\t\t\t AND sm.status = 'active'\n\t\t\t AND rs.status = 'active'\n\t\t\t AND sm.membership_epoch >= rs.membership_epoch\n\t\t\t LIMIT 1`,\n\t\t)\n\t\t.get(scopeId, store.deviceId);\n\tif (!row) throw new Error(`local device is not a member of Sharing domain ${scopeId}`);\n}\n\nfunction legacySharedReviewRowsForWorkspace(\n\tstore: MemoryStore,\n\tworkspaceIdentity: string,\n): LegacySharedReviewReassignmentMemoryRow[] {\n\treturn legacySharedReviewRows(store).filter((row) => {\n\t\tconst identity = canonicalWorkspaceIdentity({\n\t\t\tcwd: row.cwd,\n\t\t\tgitBranch: row.git_branch,\n\t\t\tgitRemote: row.git_remote,\n\t\t\tproject: row.project,\n\t\t\tworkspaceId: row.workspace_id,\n\t\t});\n\t\treturn identity.value === workspaceIdentity;\n\t});\n}\n\nfunction reassignableLegacySharedReviewRows(\n\tstore: MemoryStore,\n\trows: LegacySharedReviewReassignmentMemoryRow[],\n): LegacySharedReviewReassignmentMemoryRow[] {\n\tconst reassignableRows = rows.filter((row) =>\n\t\tstore.memoryOwnedBySelf(row as unknown as Record<string, unknown>),\n\t);\n\tif (reassignableRows.length === 0) {\n\t\tthrow new Error(\n\t\t\t\"This legacy review group contains only peer-owned memories; this device cannot reassign them to a Sharing domain.\",\n\t\t);\n\t}\n\tconst currentRows = store.db\n\t\t.prepare(\n\t\t\t`SELECT id, scope_id, active, deleted_at\n\t\t\t FROM memory_items\n\t\t\t WHERE id IN (${reassignableRows.map(() => \"?\").join(\",\")})`,\n\t\t)\n\t\t.all(...reassignableRows.map((row) => row.id)) as Array<{\n\t\tactive: number | null;\n\t\tdeleted_at: string | null;\n\t\tid: number;\n\t\tscope_id: string | null;\n\t}>;\n\tconst currentById = new Map(currentRows.map((row) => [Number(row.id), row]));\n\tfor (const row of reassignableRows) {\n\t\tconst current = currentById.get(row.id);\n\t\tif (\n\t\t\tcurrent?.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID ||\n\t\t\tcurrent.active !== 1 ||\n\t\t\tcurrent.deleted_at\n\t\t) {\n\t\t\tthrow new Error(\n\t\t\t\t\"legacy shared review group changed before reassignment; refresh and try again\",\n\t\t\t);\n\t\t}\n\t}\n\treturn reassignableRows;\n}\n\nfunction legacySharedReviewReassignmentPreview(\n\tstore: MemoryStore,\n\tinput: { scopeId: string; workspaceIdentity: string },\n): LegacySharedReviewReassignmentPreview {\n\tif (!input.workspaceIdentity.trim())\n\t\tthrow new Error(\"workspace_identity must be a non-empty string\");\n\tif (!input.scopeId.trim()) throw new Error(\"scope_id must be a non-empty string\");\n\tif (input.scopeId === LOCAL_DEFAULT_SCOPE_ID) {\n\t\tthrow new Error(\"local-default is not a valid target for legacy shared review reassignment\");\n\t}\n\tif (input.scopeId === LEGACY_SHARED_REVIEW_SCOPE_ID) {\n\t\tthrow new Error(\"legacy-shared-review is a review bucket, not an assignable Sharing domain\");\n\t}\n\tconst targetScope = listSharingDomainSettingsScopes(store.db).find(\n\t\t(scope) => scope.scope_id === input.scopeId,\n\t);\n\tif (!targetScope) throw new Error(`scope_id ${input.scopeId} is not an active Sharing domain`);\n\tassertLocalDeviceScopeMembership(store, input.scopeId);\n\tconst rows = legacySharedReviewRowsForWorkspace(store, input.workspaceIdentity);\n\tif (rows.length === 0) throw new Error(\"legacy shared review group not found\");\n\tconst reassignableRows = reassignableLegacySharedReviewRows(store, rows);\n\tconst peerDeviceIds = [\n\t\t...new Set(\n\t\t\trows\n\t\t\t\t.map((row) => String(row.origin_device_id ?? \"\").trim())\n\t\t\t\t.filter((deviceId) => deviceId && deviceId !== store.deviceId),\n\t\t),\n\t].sort();\n\treturn {\n\t\taffected_peer_device_count: peerDeviceIds.length,\n\t\taffected_peer_device_ids: peerDeviceIds.slice(0, 5),\n\t\tconfirmation_token: legacySharedReviewConfirmationToken({\n\t\t\trows,\n\t\t\tscopeId: input.scopeId,\n\t\t\tstore,\n\t\t\tworkspaceIdentity: input.workspaceIdentity,\n\t\t}),\n\t\tmemory_count: rows.length,\n\t\treassignable_memory_count: reassignableRows.length,\n\t\tscope_id: input.scopeId,\n\t\tskipped_memory_count: rows.length - reassignableRows.length,\n\t\ttarget_scope_label: targetScope.label || targetScope.scope_id,\n\t\twarning:\n\t\t\t\"This device can reassign only locally owned memories. Peer-owned copies must be fixed on their source device. Online compatible peers should converge after syncing, but offline devices, backups, copied databases, malicious peers, or old versions may retain old copies.\",\n\t\tworkspace_identity: input.workspaceIdentity,\n\t};\n}\n\nfunction reassignLegacySharedReviewGroup(\n\tstore: MemoryStore,\n\tinput: { confirmationToken?: string | null; scopeId: string; workspaceIdentity: string },\n): Record<string, unknown> {\n\tconst preview = legacySharedReviewReassignmentPreview(store, input);\n\tif (input.confirmationToken !== preview.confirmation_token) {\n\t\tthrow new Error(\n\t\t\t\"legacy shared review group changed before reassignment; refresh and try again\",\n\t\t);\n\t}\n\tconst rows = reassignableLegacySharedReviewRows(\n\t\tstore,\n\t\tlegacySharedReviewRowsForWorkspace(store, input.workspaceIdentity),\n\t);\n\tstore.db.transaction(() => {\n\t\tfor (const row of rows) store.reassignMemoryScope(row.id, input.scopeId);\n\t})();\n\treturn {\n\t\tok: true,\n\t\t...preview,\n\t\treassigned_memory_count: rows.length,\n\t\tlegacy_shared_review: legacySharedReviewSummary(store),\n\t};\n}\n\n// Aggregate ops_in / ops_out across recent successful sync_attempts per peer.\n// Window: last 24 hours. Feeds the per-peer direction glyph on the Sync tab\n// (↕ bidirectional, ↑ publishing, ↓ subscribed) off real traffic instead of\n// an invented peer-role field.\nconst SYNC_DIRECTION_WINDOW_SECONDS = 24 * 60 * 60;\n\nfunction recentPeerOps(store: MemoryStore): Map<string, { in: number; out: number }> {\n\tconst cutoff = new Date(Date.now() - SYNC_DIRECTION_WINDOW_SECONDS * 1000).toISOString();\n\tconst rows = store.db\n\t\t.prepare(\n\t\t\t`SELECT peer_device_id,\n\t\t\t COALESCE(SUM(ops_in), 0) AS ops_in,\n\t\t\t COALESCE(SUM(ops_out), 0) AS ops_out\n\t\t\t FROM sync_attempts\n\t\t\t WHERE ok = 1 AND finished_at IS NOT NULL AND finished_at >= ?\n\t\t\t GROUP BY peer_device_id`,\n\t\t)\n\t\t.all(cutoff) as Array<{\n\t\tpeer_device_id: string | null;\n\t\tops_in: number | null;\n\t\tops_out: number | null;\n\t}>;\n\tconst map = new Map<string, { in: number; out: number }>();\n\tfor (const row of rows) {\n\t\tconst id = String(row.peer_device_id ?? \"\").trim();\n\t\tif (!id) continue;\n\t\tmap.set(id, { in: Number(row.ops_in ?? 0), out: Number(row.ops_out ?? 0) });\n\t}\n\treturn map;\n}\n\n// ---------------------------------------------------------------------------\n// Peer status helpers\n// ---------------------------------------------------------------------------\n\nfunction isRecentIso(value: unknown, windowS = SYNC_STALE_AFTER_SECONDS): boolean {\n\tconst raw = String(value ?? \"\").trim();\n\tif (!raw) return false;\n\tconst normalized = raw.replace(\"Z\", \"+00:00\");\n\tconst hasOffset = /(?:Z|[+-]\\d{2}:?\\d{2})$/i.test(raw);\n\tconst ts = new Date(hasOffset ? normalized : `${normalized}+00:00`);\n\tif (Number.isNaN(ts.getTime())) return false;\n\tconst ageS = (Date.now() - ts.getTime()) / 1000;\n\treturn ageS >= 0 && ageS <= windowS;\n}\n\nfunction peerStatus(peer: Record<string, unknown>): Record<string, unknown> {\n\tconst lastSyncAt = peer.last_sync_at;\n\tconst lastPingAt = peer.last_seen_at;\n\tconst hasError = Boolean(peer.has_error);\n\n\tconst syncFresh = isRecentIso(lastSyncAt);\n\tconst pingFresh = isRecentIso(lastPingAt);\n\n\tlet peerState: string;\n\tif (hasError && !(syncFresh || pingFresh)) peerState = \"offline\";\n\telse if (hasError) peerState = \"degraded\";\n\telse if (syncFresh || pingFresh) peerState = \"online\";\n\telse if (lastSyncAt || lastPingAt) peerState = \"stale\";\n\telse peerState = \"unknown\";\n\n\tconst syncStatus = hasError ? \"error\" : syncFresh ? \"ok\" : lastSyncAt ? \"stale\" : \"unknown\";\n\tconst pingStatus = pingFresh ? \"ok\" : lastPingAt ? \"stale\" : \"unknown\";\n\n\treturn {\n\t\tsync_status: syncStatus,\n\t\tping_status: pingStatus,\n\t\tpeer_state: peerState,\n\t\tfresh: syncFresh || pingFresh,\n\t\tlast_sync_at: lastSyncAt,\n\t\tlast_ping_at: lastPingAt,\n\t};\n}\n\nfunction attemptStatus(attempt: Record<string, unknown>): string {\n\tif (attempt.ok) return \"ok\";\n\tif (attempt.error) return \"error\";\n\treturn \"unknown\";\n}\n\nfunction readViewerBinding(dbPath: string): { host: string; port: number } | null {\n\ttry {\n\t\tconst raw = readFileSync(join(dirname(dbPath), \"viewer.pid\"), \"utf8\");\n\t\tconst parsed = JSON.parse(raw) as Partial<{ host: string; port: number }>;\n\t\tif (typeof parsed.host === \"string\" && typeof parsed.port === \"number\") {\n\t\t\treturn { host: parsed.host, port: parsed.port };\n\t\t}\n\t} catch {\n\t\t// ignore missing/malformed pidfile\n\t}\n\treturn null;\n}\n\nconst PEERS_QUERY = `\n\tSELECT p.peer_device_id, p.name, p.pinned_fingerprint, p.addresses_json,\n\t p.last_seen_at, p.last_sync_at, p.last_error,\n\t p.runtime_version, p.runtime_version_observed_at,\n\t p.projects_include_json, p.projects_exclude_json, p.claimed_local_actor,\n\t p.actor_id, p.discovered_via_coordinator_id, p.discovered_via_group_id,\n\t a.display_name AS actor_display_name\n\tFROM sync_peers AS p\n\tLEFT JOIN actors AS a ON a.actor_id = p.actor_id\n\tORDER BY name, peer_device_id\n`;\n\n// ---------------------------------------------------------------------------\n// Route factory\n// ---------------------------------------------------------------------------\n\n/**\n * Compute the negotiated sync capability for a request by combining the\n * server's local capability with the value the caller advertised in the\n * `X-Codemem-Sync-Capability` header. Routes use this to decide whether to\n * honor scoped-sync wire features such as explicit `scope_id` parameters\n * and `/v1/status` `authorized_scopes` enumeration.\n *\n * Threat model: this header is intentionally only a best-effort capability\n * advertisement. It is not signed, so an authenticated paired peer — or a\n * bootstrap worker presenting a valid grant on `/v1/status` — can claim\n * `scoped` support and cause status to enumerate the scopes that caller is\n * already authorized to see. That is metadata disclosure inside the paired-peer\n * or bootstrap-grant trust boundary, not data authorization. Every scoped data\n * path still requires signed requests and checks membership before returning\n * scope contents.\n */\nfunction negotiatedSyncCapability(c: Context) {\n\tconst header = c.req.header(SYNC_CAPABILITY_HEADER) ?? null;\n\treturn negotiateSyncCapability(LOCAL_SYNC_CAPABILITY, normalizeSyncCapability(header));\n}\n\n/**\n * Peer-to-peer sync protocol routes (/v1/*).\n *\n * These are mounted on the sync listener (0.0.0.0:7337) and are\n * network-accessible. All requests are auth-gated via signature\n * verification so unauthenticated callers are rejected.\n */\nexport function syncProtocolRoutes(getStore: StoreFactory, opts: SyncProtocolRouteOptions = {}) {\n\tconst app = new Hono();\n\tconst routeRateLimit = opts.routeRateLimit ?? null;\n\n\tfunction rateLimitedResponse(c: Context, key: string, authenticated: boolean) {\n\t\tif (!routeRateLimit) return null;\n\t\tconst isRead = c.req.method === \"GET\" || c.req.method === \"HEAD\" || c.req.method === \"OPTIONS\";\n\t\tconst result = routeRateLimit.limiter.check(\n\t\t\t`${c.req.method}:${authenticated ? \"auth\" : \"anon\"}:${key}`,\n\t\t\tauthenticated\n\t\t\t\t? isRead\n\t\t\t\t\t? routeRateLimit.readLimit\n\t\t\t\t\t: routeRateLimit.mutationLimit\n\t\t\t\t: isRead\n\t\t\t\t\t? routeRateLimit.unauthenticatedReadLimit\n\t\t\t\t\t: routeRateLimit.unauthenticatedMutationLimit,\n\t\t);\n\t\tif (result.allowed) return null;\n\t\tc.header(\"Retry-After\", String(result.retryAfterS));\n\t\treturn c.json({ error: \"rate_limited\", retry_after_s: result.retryAfterS }, 429);\n\t}\n\n\t// GET /v1/status (peer sync protocol)\n\tapp.get(\"/v1/status\", (c) => {\n\t\tconst store = getStore();\n\t\treturn (async () => {\n\t\t\tlet auth = authorizeSyncRequest(store, c.req, Buffer.alloc(0));\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tlet preauthChecked = false;\n\t\t\tlet bootstrapAttempted = false;\n\t\t\tlet deviceAuthReason: string | null = null;\n\t\t\tif (!auth.ok) {\n\t\t\t\tconst bootstrapGrantId = (c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim();\n\t\t\t\tif (bootstrapGrantId) {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\t// Use unauthenticated bucket with stable key — grant is not yet verified,\n\t\t\t\t\t// so caller-controlled headers must not influence rate-limit identity.\n\t\t\t\t\tconst bootstrapLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (bootstrapLimited) return bootstrapLimited;\n\t\t\t\t} else {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\tconst unauthLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (unauthLimited) return unauthLimited;\n\t\t\t\t}\n\t\t\t\tdeviceAuthReason = auth.reason;\n\t\t\t\tauth = await authorizeBootstrapGrantRequest(store, c.req, Buffer.alloc(0));\n\t\t\t\tbootstrapAttempted = true;\n\t\t\t}\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tif (!auth.ok) {\n\t\t\t\t// Specific reasons stay server-side; wire responses remain generic.\n\t\t\t\tconst grantPresent = Boolean((c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim());\n\t\t\t\t// Warn only when the caller actually attempted authentication (a\n\t\t\t\t// grant or signed device headers); bare probes and health checks\n\t\t\t\t// must not fill logs with attacker-controllable noise.\n\t\t\t\tconst authAttempted =\n\t\t\t\t\tgrantPresent || (deviceAuthReason != null && deviceAuthReason !== \"missing_headers\");\n\t\t\t\tif (bootstrapAttempted && authAttempted) {\n\t\t\t\t\tconsole.warn(\n\t\t\t\t\t\t`[sync] peer auth failed: reason=${auth.reason} device_auth_reason=${deviceAuthReason ?? \"none\"} grant_present=${grantPresent} path=${c.req.path} device=${loggableHeaderValue(c.req.header(\"X-Opencode-Device\"))}`,\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tlogDirectPeerAuthDiagnostic(deviceAuthReason, auth.reason);\n\t\t\t\t}\n\t\t\t\treturn (\n\t\t\t\t\t(preauthChecked ? null : rateLimitedResponse(c, c.req.path, false)) ??\n\t\t\t\t\tc.json(unauthorizedPayload(), 401)\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\t\tif (limited) return limited;\n\n\t\t\ttry {\n\t\t\t\tif (\n\t\t\t\t\tc.req.header(SYNC_AUTHORIZATION_REFRESH_HEADER) === \"1\" &&\n\t\t\t\t\tsupportsSyncFeature(c.req.header(SYNC_FEATURES_HEADER), \"reassign_scope\")\n\t\t\t\t) {\n\t\t\t\t\t// Project-first provisioning grants at the coordinator immediately before\n\t\t\t\t\t// this status probe. Refresh now so the managed scope can participate in\n\t\t\t\t\t// the same initial sync pass instead of waiting for the daemon interval.\n\t\t\t\t\tawait refreshConfiguredScopeMembershipCache(store.db, undefined, {\n\t\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\t\tdbPath: store.dbPath,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tconst [deviceId, fingerprint] = ensureDeviceIdentity(store.db, {\n\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t});\n\t\t\t\tconst syncReset = getSyncResetState(store.db);\n\t\t\t\tconst negotiated = negotiatedSyncCapability(c);\n\t\t\t\tconst authorizedScopes = isScopedSyncCapability(negotiated)\n\t\t\t\t\t? listAuthorizedScopesForPeer(store.db, {\n\t\t\t\t\t\t\tlocalDeviceId: deviceId,\n\t\t\t\t\t\t\tpeerDeviceId: auth.deviceId,\n\t\t\t\t\t\t})\n\t\t\t\t\t: null;\n\t\t\t\tconst response: Record<string, unknown> = {\n\t\t\t\t\tdevice_id: deviceId,\n\t\t\t\t\tprotocol_version: SYNC_PROTOCOL_VERSION,\n\t\t\t\t\tfingerprint,\n\t\t\t\t\truntime_version: VERSION,\n\t\t\t\t\tsync_reset: addSyncScopeToBoundary(syncReset, null),\n\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\tsync_features: LOCAL_SYNC_FEATURES,\n\t\t\t\t};\n\t\t\t\tif (authorizedScopes !== null) {\n\t\t\t\t\tresponse.authorized_scopes = authorizedScopes;\n\t\t\t\t}\n\t\t\t\treturn c.json(response);\n\t\t\t} catch {\n\t\t\t\treturn c.json({ error: \"internal_error\" }, 500);\n\t\t\t}\n\t\t})();\n\t});\n\n\t// GET /v1/ops (peer sync protocol)\n\tapp.get(\"/v1/ops\", (c) => {\n\t\tconst store = getStore();\n\t\tconst auth = authorizeSyncRequest(store, c.req, Buffer.alloc(0));\n\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\tif (!auth.ok) {\n\t\t\tlogDirectPeerAuthDiagnostic(auth.reason);\n\t\t\treturn rateLimitedResponse(c, c.req.path, false) ?? c.json(unauthorizedPayload(), 401);\n\t\t}\n\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\tif (limited) return limited;\n\t\tconst peerDeviceId = auth.deviceId;\n\n\t\ttry {\n\t\t\tconst rawScopeId = c.req.query(SYNC_SCOPE_QUERY_PARAM);\n\t\t\tconst negotiated = negotiatedSyncCapability(c);\n\t\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst scopeRequest = parseSyncScopeRequest(rawScopeId, rawScopeId !== undefined, {\n\t\t\t\tdb: store.db,\n\t\t\t\tlocalDeviceId,\n\t\t\t\tnegotiatedCapability: negotiated,\n\t\t\t\tpeerDeviceId,\n\t\t\t});\n\t\t\tif (!scopeRequest.ok) {\n\t\t\t\treturn c.json(\n\t\t\t\t\tsyncScopeResetRequiredPayload(\n\t\t\t\t\t\tgetSyncResetState(store.db),\n\t\t\t\t\t\tscopeRequest.reason,\n\t\t\t\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\t\t\t\tnull,\n\t\t\t\t\t),\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst since = c.req.query(\"since\") ?? null;\n\t\t\tconst rawLimit = Number.parseInt(c.req.query(\"limit\") ?? \"200\", 10);\n\t\t\tconst rawGeneration = c.req.query(\"generation\");\n\t\t\tconst generation =\n\t\t\t\trawGeneration != null && rawGeneration.trim().length > 0\n\t\t\t\t\t? Number.parseInt(rawGeneration, 10)\n\t\t\t\t\t: null;\n\t\t\tconst snapshotId = c.req.query(\"snapshot_id\") ?? null;\n\t\t\tconst baselineCursor = c.req.query(\"baseline_cursor\") ?? null;\n\t\t\tconst limit = Number.isFinite(rawLimit) ? Math.max(1, Math.min(rawLimit, 1000)) : 200;\n\t\t\tconst result = loadReplicationOpsForPeer(store.db, {\n\t\t\t\tsince,\n\t\t\t\tlimit,\n\t\t\t\tdeviceId: localDeviceId,\n\t\t\t\tgeneration: Number.isFinite(generation) ? generation : null,\n\t\t\t\tsnapshotId,\n\t\t\t\tbaselineCursor,\n\t\t\t\tscopeId: scopeRequest.mode === \"scoped\" ? scopeRequest.scope_id : undefined,\n\t\t\t});\n\t\t\tif (result.reset_required) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"reset_required\",\n\t\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\t\t...addSyncScopeToBoundary(result.reset, scopeRequest.scope_id),\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst { ops, nextCursor, boundary } = result;\n\t\t\tconst filtered = filterOpsForPeer(store, peerDeviceId, localDeviceId, ops, {\n\t\t\t\tsupportsReassignScope: supportsSyncFeature(\n\t\t\t\t\tc.req.header(SYNC_FEATURES_HEADER),\n\t\t\t\t\t\"reassign_scope\",\n\t\t\t\t),\n\t\t\t});\n\t\t\treturn c.json({\n\t\t\t\treset_required: false,\n\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\tscope_id: scopeRequest.scope_id,\n\t\t\t\tgeneration: boundary.generation,\n\t\t\t\tsnapshot_id: boundary.snapshot_id,\n\t\t\t\tbaseline_cursor: boundary.baseline_cursor,\n\t\t\t\tretained_floor_cursor: boundary.retained_floor_cursor,\n\t\t\t\tops: filtered.allowed,\n\t\t\t\tnext_cursor: nextCursor,\n\t\t\t\tskipped: filtered.skipped,\n\t\t\t\tskipped_detail: filtered.skippedDetail,\n\t\t\t});\n\t\t} catch {\n\t\t\treturn c.json({ error: \"internal_error\" }, 500);\n\t\t}\n\t});\n\n\t// GET /v1/snapshot (peer sync protocol — bootstrap snapshot pages)\n\tapp.get(\"/v1/snapshot\", (c) => {\n\t\tconst store = getStore();\n\t\treturn (async () => {\n\t\t\tlet auth = authorizeSyncRequest(store, c.req, Buffer.alloc(0));\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tlet preauthChecked = false;\n\t\t\tlet bootstrapAttempted = false;\n\t\t\tlet deviceAuthReason: string | null = null;\n\t\t\tif (!auth.ok) {\n\t\t\t\tconst bootstrapGrantId = (c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim();\n\t\t\t\tif (bootstrapGrantId) {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\t// Use unauthenticated bucket with stable key — grant is not yet verified,\n\t\t\t\t\t// so caller-controlled headers must not influence rate-limit identity.\n\t\t\t\t\tconst bootstrapLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (bootstrapLimited) return bootstrapLimited;\n\t\t\t\t} else {\n\t\t\t\t\tpreauthChecked = true;\n\t\t\t\t\tconst unauthLimited = rateLimitedResponse(c, c.req.path, false);\n\t\t\t\t\tif (unauthLimited) return unauthLimited;\n\t\t\t\t}\n\t\t\t\tdeviceAuthReason = auth.reason;\n\t\t\t\tauth = await authorizeBootstrapGrantRequest(store, c.req, Buffer.alloc(0));\n\t\t\t\tbootstrapAttempted = true;\n\t\t\t}\n\t\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\t\tif (!auth.ok) {\n\t\t\t\t// Specific reasons stay server-side; wire responses remain generic.\n\t\t\t\tconst grantPresent = Boolean((c.req.header(\"X-Codemem-Bootstrap-Grant\") ?? \"\").trim());\n\t\t\t\t// Warn only when the caller actually attempted authentication (a\n\t\t\t\t// grant or signed device headers); bare probes and health checks\n\t\t\t\t// must not fill logs with attacker-controllable noise.\n\t\t\t\tconst authAttempted =\n\t\t\t\t\tgrantPresent || (deviceAuthReason != null && deviceAuthReason !== \"missing_headers\");\n\t\t\t\tif (bootstrapAttempted && authAttempted) {\n\t\t\t\t\tconsole.warn(\n\t\t\t\t\t\t`[sync] peer auth failed: reason=${auth.reason} device_auth_reason=${deviceAuthReason ?? \"none\"} grant_present=${grantPresent} path=${c.req.path} device=${loggableHeaderValue(c.req.header(\"X-Opencode-Device\"))}`,\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tlogDirectPeerAuthDiagnostic(deviceAuthReason, auth.reason);\n\t\t\t\t}\n\t\t\t\treturn (\n\t\t\t\t\t(preauthChecked ? null : rateLimitedResponse(c, c.req.path, false)) ??\n\t\t\t\t\tc.json(unauthorizedPayload(), 401)\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\t\tif (limited) return limited;\n\n\t\t\ttry {\n\t\t\t\tconst rawScopeId = c.req.query(SYNC_SCOPE_QUERY_PARAM);\n\t\t\t\tconst negotiated = negotiatedSyncCapability(c);\n\t\t\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\t\tconst scopeRequest = parseSyncScopeRequest(rawScopeId, rawScopeId !== undefined, {\n\t\t\t\t\tdb: store.db,\n\t\t\t\t\tlocalDeviceId,\n\t\t\t\t\tnegotiatedCapability: negotiated,\n\t\t\t\t\tpeerDeviceId: auth.deviceId,\n\t\t\t\t});\n\t\t\t\tif (!scopeRequest.ok) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\tsyncScopeResetRequiredPayload(\n\t\t\t\t\t\t\tgetSyncResetState(store.db),\n\t\t\t\t\t\t\tscopeRequest.reason,\n\t\t\t\t\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\t\t\t\t\tnull,\n\t\t\t\t\t\t),\n\t\t\t\t\t\t409,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst rawGeneration = c.req.query(\"generation\");\n\t\t\t\tconst generation =\n\t\t\t\t\trawGeneration != null && rawGeneration.trim().length > 0\n\t\t\t\t\t\t? Number.parseInt(rawGeneration, 10)\n\t\t\t\t\t\t: null;\n\t\t\t\tconst snapshotId = c.req.query(\"snapshot_id\") ?? null;\n\t\t\t\tconst baselineCursor = c.req.query(\"baseline_cursor\") ?? null;\n\t\t\t\tconst pageToken = c.req.query(\"page_token\") ?? null;\n\t\t\t\tconst rawLimit = Number.parseInt(c.req.query(\"limit\") ?? \"200\", 10);\n\t\t\t\t// Cap raised to 5000 to support elevated bootstrap page sizes (default 2000).\n\t\t\t\tconst limit = Number.isFinite(rawLimit) ? Math.max(1, Math.min(rawLimit, 5000)) : 200;\n\n\t\t\t\tif (generation == null || !Number.isFinite(generation)) {\n\t\t\t\t\treturn c.json({ error: \"missing_generation\" }, 400);\n\t\t\t\t}\n\t\t\t\tif (!snapshotId) {\n\t\t\t\t\treturn c.json({ error: \"missing_snapshot_id\" }, 400);\n\t\t\t\t}\n\n\t\t\t\tconst result = loadMemorySnapshotPageForPeer(store.db, {\n\t\t\t\t\tgeneration,\n\t\t\t\t\tsnapshotId,\n\t\t\t\t\tbaselineCursor,\n\t\t\t\t\tpageToken,\n\t\t\t\t\tlimit,\n\t\t\t\t\tpeerDeviceId: auth.deviceId,\n\t\t\t\t\tscopeId: scopeRequest.mode === \"scoped\" ? scopeRequest.scope_id : undefined,\n\t\t\t\t});\n\n\t\t\t\treturn c.json({\n\t\t\t\t\tscope_id: scopeRequest.scope_id,\n\t\t\t\t\tgeneration: result.boundary.generation,\n\t\t\t\t\tsnapshot_id: result.boundary.snapshot_id,\n\t\t\t\t\tbaseline_cursor: result.boundary.baseline_cursor,\n\t\t\t\t\tretained_floor_cursor: result.boundary.retained_floor_cursor,\n\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\titems: result.items,\n\t\t\t\t\tnext_page_token: result.nextPageToken,\n\t\t\t\t\thas_more: result.hasMore,\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconst message = err instanceof Error ? err.message : \"\";\n\t\t\t\tif (message === \"generation_mismatch\" || message === \"boundary_mismatch\") {\n\t\t\t\t\treturn c.json({ error: message }, 409);\n\t\t\t\t}\n\t\t\t\treturn c.json({ error: \"internal_error\" }, 500);\n\t\t\t}\n\t\t})();\n\t});\n\n\t// POST /v1/ops (peer sync protocol)\n\tapp.post(\"/v1/ops\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst raw = await readBoundedRequestBytes(c.req.raw, MAX_SYNC_BODY_BYTES);\n\t\tif (raw == null) {\n\t\t\treturn c.json({ error: \"payload_too_large\" }, 413);\n\t\t}\n\n\t\tconst auth = authorizeSyncRequest(store, c.req, raw);\n\t\tif (isSyncAuthStoreBusy(auth)) return syncAuthStoreBusyResponse(c);\n\t\tif (!auth.ok) {\n\t\t\tlogDirectPeerAuthDiagnostic(auth.reason);\n\t\t\treturn rateLimitedResponse(c, c.req.path, false) ?? c.json(unauthorizedPayload(), 401);\n\t\t}\n\t\tconst limited = rateLimitedResponse(c, auth.deviceId, true);\n\t\tif (limited) return limited;\n\t\tconst peerDeviceId = auth.deviceId;\n\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tconst parsed = JSON.parse(raw.toString(\"utf-8\")) as unknown;\n\t\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\treturn c.json({ error: \"invalid_json\" }, 400);\n\t\t\t}\n\t\t\tbody = parsed as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid_json\" }, 400);\n\t\t}\n\n\t\tconst negotiated = negotiateSyncCapability(\n\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\tnormalizeSyncCapability(body.sync_capability),\n\t\t);\n\t\tconst [localDeviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\tconst scopeRequest = parseSyncScopeRequest(body.scope_id, Object.hasOwn(body, \"scope_id\"), {\n\t\t\tdb: store.db,\n\t\t\tlocalDeviceId,\n\t\t\tnegotiatedCapability: negotiated,\n\t\t\tpeerDeviceId,\n\t\t});\n\t\tif (!scopeRequest.ok) {\n\t\t\treturn c.json(\n\t\t\t\tsyncScopeResetRequiredPayload(\n\t\t\t\t\tgetSyncResetState(store.db),\n\t\t\t\t\tscopeRequest.reason,\n\t\t\t\t\tLOCAL_SYNC_CAPABILITY,\n\t\t\t\t\tnull,\n\t\t\t\t),\n\t\t\t\t409,\n\t\t\t);\n\t\t}\n\t\tif (!Array.isArray(body.ops)) {\n\t\t\treturn c.json({ error: \"invalid_ops\" }, 400);\n\t\t}\n\t\tif (body.ops.length > MAX_SYNC_OPS) {\n\t\t\treturn c.json({ error: \"too_many_ops\" }, 413);\n\t\t}\n\n\t\tconst normalizedOps = extractReplicationOps(body);\n\t\tconst peerFeatures = normalizeSyncFeatures(body.sync_features);\n\t\tconst reassignOps = normalizedOps.filter((op) => op.op_type === \"reassign_scope\");\n\t\tif (reassignOps.length > 0 && !peerFeatures.includes(\"reassign_scope\")) {\n\t\t\treturn c.json({ error: \"reassign_capability_required\" }, 409);\n\t\t}\n\t\ttry {\n\t\t\tfor (const op of reassignOps) parseReassignScopePayload(op);\n\t\t} catch {\n\t\t\treturn c.json({ error: \"reassign_payload_invalid\" }, 400);\n\t\t}\n\t\tfor (const op of normalizedOps) {\n\t\t\tif (op.device_id !== peerDeviceId || op.clock_device_id !== peerDeviceId) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"invalid_op_device\",\n\t\t\t\t\t\treason: \"device_id_mismatch\",\n\t\t\t\t\t\top_id: op.op_id,\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\t// Inbound POSTs still use legacy visibility/project filters, but must not run\n\t\t// the outbound scope gate. Unsupported peers deliberately bypass strict inbound\n\t\t// scope rejection during rollout, so outbound filtering would silently drop data.\n\t\tconst filtered = filterOpsForPeer(store, peerDeviceId, localDeviceId, normalizedOps, {\n\t\t\tapplyScopeFilter: false,\n\t\t\tsupportsReassignScope: peerFeatures.includes(\"reassign_scope\"),\n\t\t});\n\t\t// Scope validation runs against the full signed batch so bad scoped ops cannot\n\t\t// evade fail-closed rejection by also tripping peer project filters.\n\t\tconst rejected = rejectInboundScopeFailures(store.db, normalizedOps, localDeviceId, {\n\t\t\tenabled: negotiated !== \"unsupported\",\n\t\t\tpeerDeviceId,\n\t\t});\n\t\tif (rejected) {\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"scope_rejected\",\n\t\t\t\t\treason: rejected.rejections[0]?.reason ?? \"scope_mismatch\",\n\t\t\t\t\trejections: rejected.rejections,\n\t\t\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\t\t\tscope_id: scopeRequest.scope_id,\n\t\t\t\t},\n\t\t\t\t403,\n\t\t\t);\n\t\t}\n\n\t\tconst result = applyReplicationOps(store.db, filtered.allowed, localDeviceId, store.scanner);\n\t\tconst skipped = result.skipped + filtered.skipped;\n\t\treturn c.json({\n\t\t\t...result,\n\t\t\tskipped,\n\t\t\tskipped_detail: filtered.skippedDetail,\n\t\t\tsync_capability: LOCAL_SYNC_CAPABILITY,\n\t\t\tscope_id: scopeRequest.scope_id,\n\t\t});\n\t});\n\n\treturn app;\n}\n\nasync function loadConfiguredDeviceIdentityCoordinatorEvidence(): Promise<DeviceIdentityCoordinatorEvidence> {\n\tconst config = readCoordinatorSyncConfig();\n\tconst hasCoordinatorConfiguration =\n\t\tconfig.syncCoordinatorUrl.length > 0 || config.syncCoordinatorGroups.length > 0;\n\tconst remoteUrl = config.syncCoordinatorUrl.trim();\n\tconst adminSecret = config.syncCoordinatorAdminSecret.trim();\n\tconst groupIds = [\n\t\t...new Set(config.syncCoordinatorGroups.map((groupId) => groupId.trim())),\n\t].filter(Boolean);\n\tif (!hasCoordinatorConfiguration) {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_not_configured\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n\tif (!remoteUrl || !adminSecret || groupIds.length === 0) {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_unavailable\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n\tif (groupIds.length > 25) {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_evidence_too_large\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n\ttry {\n\t\tconst enrollments = (\n\t\t\tawait Promise.all(\n\t\t\t\tgroupIds.map((groupId) =>\n\t\t\t\t\tcoordinatorListDevicesAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tincludeDisabled: true,\n\t\t\t\t\t\tremoteUrl,\n\t\t\t\t\t\tadminSecret,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t\t)\n\t\t).flat();\n\t\tif (enrollments.length > 500) {\n\t\t\treturn {\n\t\t\t\tavailability: \"unavailable\",\n\t\t\t\tsafeErrorCode: \"coordinator_evidence_too_large\",\n\t\t\t\tenrollments: [],\n\t\t\t};\n\t\t}\n\t\treturn { availability: \"available\", safeErrorCode: null, enrollments };\n\t} catch {\n\t\treturn {\n\t\t\tavailability: \"unavailable\",\n\t\t\tsafeErrorCode: \"coordinator_unavailable\",\n\t\t\tenrollments: [],\n\t\t};\n\t}\n}\n\n/**\n * Viewer-facing sync management routes (/api/sync/*).\n *\n * These are mounted on the viewer listener (127.0.0.1:38888) and\n * provide sync status, peer management, and coordinator UI for the\n * local viewer.\n */\nexport function syncRoutes(\n\tgetStore: StoreFactory,\n\tgetSyncRuntimeStatus?: () => SyncRuntimeStatus | null,\n\toptions: SyncRoutesOptions = {},\n) {\n\tconst app = new Hono();\n\tconst readCoordinatorConfig = options.readCoordinatorConfig ?? readCoordinatorSyncConfig;\n\tconst renameCoordinatorGroup = options.renameCoordinatorGroup ?? coordinatorRenameGroupAction;\n\tconst loadCoordinatorEvidence =\n\t\toptions.loadDeviceIdentityCoordinatorEvidence ??\n\t\tloadConfiguredDeviceIdentityCoordinatorEvidence;\n\tconst currentCoordinatorEvidence = async (): Promise<DeviceIdentityCoordinatorEvidence> => {\n\t\ttry {\n\t\t\treturn await loadCoordinatorEvidence();\n\t\t} catch {\n\t\t\treturn {\n\t\t\t\tavailability: \"unavailable\",\n\t\t\t\tsafeErrorCode: \"coordinator_unavailable\",\n\t\t\t\tenrollments: [],\n\t\t\t};\n\t\t}\n\t};\n\tconst localInventoryInput = async (store: MemoryStore) => {\n\t\tlet explicitDeviceName = \"\";\n\t\ttry {\n\t\t\texplicitDeviceName = String(readCodememConfigFile().sync_device_name ?? \"\");\n\t\t} catch {\n\t\t\texplicitDeviceName = \"\";\n\t\t}\n\t\treturn {\n\t\t\tlocalDeviceId: store.deviceId,\n\t\t\tlocalDisplayName: friendlyDeviceName({\n\t\t\t\texplicitName: explicitDeviceName,\n\t\t\t\tosName: hostname(),\n\t\t\t\tfallbackSeed: store.deviceId,\n\t\t\t}),\n\t\t\tcoordinator: await currentCoordinatorEvidence(),\n\t\t};\n\t};\n\n\tapp.get(\"/api/sync/recipient-policy/v1/device-inventory\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureStableStoreIdentity(store);\n\t\treturn c.json(listDeviceIdentityInventory(store.db, await localInventoryInput(store)));\n\t});\n\n\tapp.patch(\"/api/sync/recipient-policy/v1/teams/:teamId\", async (c) => {\n\t\tconst raw = await readBoundedRequestBytes(c.req.raw, 8_192);\n\t\tif (!raw) return c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tconst parsed = JSON.parse(raw.toString(\"utf8\")) as unknown;\n\t\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\treturn c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\t\t}\n\t\t\tbody = parsed as Record<string, unknown>;\n\t\t} catch {\n\t\t\treturn c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\t}\n\t\tif (\n\t\t\tObject.keys(body).length !== 2 ||\n\t\t\t!Object.hasOwn(body, \"displayName\") ||\n\t\t\t!Object.hasOwn(body, \"expectedDisplayName\") ||\n\t\t\ttypeof body.displayName !== \"string\" ||\n\t\t\ttypeof body.expectedDisplayName !== \"string\"\n\t\t) {\n\t\t\treturn c.json({ error: \"team_name_invalid\" as const }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst store = getStore();\n\t\t\tconst config = readCoordinatorConfig();\n\t\t\tconst coordinatorId = config.syncCoordinatorUrl\n\t\t\t\t? buildBaseUrl(config.syncCoordinatorUrl)\n\t\t\t\t: null;\n\t\t\tconst normalizedConfiguredCoordinatorId = coordinatorId\n\t\t\t\t? normalizedCoordinatorId(coordinatorId)\n\t\t\t\t: null;\n\t\t\tlet configuredCoordinatorGroups: ReturnType<typeof legacyTeamCandidateGroupDescriptors> = [];\n\t\t\tif (coordinatorId) {\n\t\t\t\ttry {\n\t\t\t\t\t// Scope-backed descriptors widen rename eligibility only when\n\t\t\t\t\t// linkedGroup() also proves exact completed-setup history.\n\t\t\t\t\tconfiguredCoordinatorGroups = legacyTeamCandidateGroupDescriptors(\n\t\t\t\t\t\tstore,\n\t\t\t\t\t\tconfig.syncCoordinatorUrl,\n\t\t\t\t\t\tconfig.syncCoordinatorGroups,\n\t\t\t\t\t);\n\t\t\t\t} catch {\n\t\t\t\t\t// Bad coordinator evidence must not block a local-only rename.\n\t\t\t\t\t// Proven linked Teams still fail closed as team_link_stale.\n\t\t\t\t\tconfiguredCoordinatorGroups = [];\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst result = await renameRecipientPolicyTeam(store.db, {\n\t\t\t\tteamId: c.req.param(\"teamId\"),\n\t\t\t\tdisplayName: body.displayName,\n\t\t\t\texpectedDisplayName: body.expectedDisplayName,\n\t\t\t\tconfiguredCoordinatorGroups,\n\t\t\t\tcoordinatorIdsEquivalent: (left, right) => {\n\t\t\t\t\tconst normalizedLeft = normalizedCoordinatorId(left);\n\t\t\t\t\tconst normalizedRight = normalizedCoordinatorId(right);\n\t\t\t\t\treturn normalizedLeft !== null && normalizedLeft === normalizedRight;\n\t\t\t\t},\n\t\t\t\trenameCoordinatorGroup: async (group, normalizedDisplayName) => {\n\t\t\t\t\tconst normalizedLinkedCoordinatorId = normalizedCoordinatorId(group.coordinatorId);\n\t\t\t\t\tif (\n\t\t\t\t\t\t!config.syncCoordinatorUrl ||\n\t\t\t\t\t\t!config.syncCoordinatorAdminSecret ||\n\t\t\t\t\t\t!normalizedConfiguredCoordinatorId ||\n\t\t\t\t\t\t!normalizedLinkedCoordinatorId ||\n\t\t\t\t\t\tnormalizedLinkedCoordinatorId !== normalizedConfiguredCoordinatorId\n\t\t\t\t\t) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\tconst renamed = await renameCoordinatorGroup({\n\t\t\t\t\t\tgroupId: group.groupId,\n\t\t\t\t\t\tdisplayName: normalizedDisplayName,\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl,\n\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret,\n\t\t\t\t\t});\n\t\t\t\t\treturn (\n\t\t\t\t\t\trenamed?.group_id === group.groupId && renamed.display_name === normalizedDisplayName\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t});\n\t\t\ttry {\n\t\t\t\toptions.onRecipientPolicyTeamRenamed?.();\n\t\t\t} catch {\n\t\t\t\t// Cache invalidation is best-effort after the authoritative rename commits.\n\t\t\t}\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (!(error instanceof RecipientPolicyTeamRenameError)) {\n\t\t\t\treturn c.json({ error: \"team_rename_failed\" as const }, 503);\n\t\t\t}\n\t\t\tconst status =\n\t\t\t\terror.code === \"team_name_invalid\"\n\t\t\t\t\t? 400\n\t\t\t\t\t: error.code === \"team_not_found\"\n\t\t\t\t\t\t? 404\n\t\t\t\t\t\t: error.code === \"team_coordinator_rename_failed\" ||\n\t\t\t\t\t\t\t\terror.code === \"team_local_rename_pending\" ||\n\t\t\t\t\t\t\t\terror.code === \"team_rename_failed\"\n\t\t\t\t\t\t\t? 503\n\t\t\t\t\t\t\t: 409;\n\t\t\treturn c.json({ error: error.code }, status);\n\t\t}\n\t});\n\n\tconst parseDeviceBindingRequest = (\n\t\tvalue: unknown,\n\t\tcommit: boolean,\n\t): DeviceIdentityBindingPreviewRequestV1 | DeviceIdentityBindingCommitRequestV1 | null => {\n\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n\t\tconst body = value as Record<string, unknown>;\n\t\tconst allowed = new Set(commit ? [\"bindings\", \"reviewedInventoryDigest\"] : [\"bindings\"]);\n\t\tif (Object.keys(body).some((key) => !allowed.has(key)) || !Array.isArray(body.bindings)) {\n\t\t\treturn null;\n\t\t}\n\t\tconst bindings = body.bindings.map((value) => {\n\t\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n\t\t\tconst binding = value as Record<string, unknown>;\n\t\t\tconst bindingKeys = new Set([\"deviceId\", \"targetIdentityId\", \"confirmed\", \"allowRebind\"]);\n\t\t\tif (\n\t\t\t\tObject.keys(binding).some((key) => !bindingKeys.has(key)) ||\n\t\t\t\ttypeof binding.deviceId !== \"string\" ||\n\t\t\t\ttypeof binding.targetIdentityId !== \"string\" ||\n\t\t\t\ttypeof binding.confirmed !== \"boolean\" ||\n\t\t\t\t(Object.hasOwn(binding, \"allowRebind\") && typeof binding.allowRebind !== \"boolean\")\n\t\t\t) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tdeviceId: binding.deviceId,\n\t\t\t\ttargetIdentityId: binding.targetIdentityId,\n\t\t\t\tconfirmed: binding.confirmed,\n\t\t\t\t...(typeof binding.allowRebind === \"boolean\" ? { allowRebind: binding.allowRebind } : {}),\n\t\t\t};\n\t\t});\n\t\tif (bindings.some((binding) => binding == null)) return null;\n\t\tif (commit && typeof body.reviewedInventoryDigest !== \"string\") return null;\n\t\treturn {\n\t\t\tbindings: bindings as DeviceIdentityBindingPreviewRequestV1[\"bindings\"],\n\t\t\t...(commit ? { reviewedInventoryDigest: body.reviewedInventoryDigest as string } : {}),\n\t\t};\n\t};\n\n\tapp.post(\"/api/sync/recipient-policy/v1/device-bindings/preview\", async (c) => {\n\t\tconst body = parseDeviceBindingRequest(await parseViewerJsonBody(c), false);\n\t\tif (!body) return c.json({ error: \"binding_request_invalid\" }, 400);\n\t\tconst store = getStore();\n\t\ttry {\n\t\t\tensureStableStoreIdentity(store);\n\t\t\tconst result = previewDeviceIdentityBindings(\n\t\t\t\tstore.db,\n\t\t\t\tawait localInventoryInput(store),\n\t\t\t\tbody,\n\t\t\t);\n\t\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\t\tif (result.status === \"conflict\") return c.json(result, 409);\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"binding_preview_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"binding_preview_failed\" }, 500);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/device-bindings/commit\", async (c) => {\n\t\tconst body = parseDeviceBindingRequest(await parseViewerJsonBody(c), true);\n\t\tif (!body || !(\"reviewedInventoryDigest\" in body)) {\n\t\t\treturn c.json({ error: \"binding_request_invalid\" }, 400);\n\t\t}\n\t\tconst store = getStore();\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tensureStableStoreIdentity(store);\n\t\t\tconst result = commitDeviceIdentityBindings(\n\t\t\t\tstore.db,\n\t\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\t\tawait localInventoryInput(store),\n\t\t\t\tbody,\n\t\t\t);\n\t\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\t\tif (result.status === \"stale\" || result.status === \"conflict\") {\n\t\t\t\treturn c.json(result, 409);\n\t\t\t}\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"binding_commit_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"binding_commit_failed\" }, 500);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\t// GET /api/sync/status\n\tapp.get(\"/api/sync/status\", async (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst traceSync = <T>(label: string, fn: () => T): T => {\n\t\t\t\tif (process.env.CODEMEM_TRACE_SYNC_STATUS !== \"1\") return fn();\n\t\t\t\tconst startedAt = Date.now();\n\t\t\t\tconsole.warn(`[codemem sync-status] ${label} start`);\n\t\t\t\ttry {\n\t\t\t\t\treturn fn();\n\t\t\t\t} finally {\n\t\t\t\t\tconsole.warn(`[codemem sync-status] ${label} ${Date.now() - startedAt}ms`);\n\t\t\t\t}\n\t\t\t};\n\t\t\tconst showDiag = queryBool(c.req.query(\"includeDiagnostics\"));\n\t\t\tconst includeJoinRequests = queryBool(c.req.query(\"includeJoinRequests\"));\n\t\t\tconst project = c.req.query(\"project\") || null;\n\t\t\tconst config = traceSync(\"readCoordinatorSyncConfig\", () => readCoordinatorSyncConfig());\n\t\t\tconst syncReset = traceSync(\"getSyncResetState\", () => getSyncResetState(store.db));\n\n\t\t\tconst d = drizzle(store.db, { schema });\n\n\t\t\tconst deviceRow = traceSync(\"deviceRow\", () =>\n\t\t\t\td\n\t\t\t\t\t.select({\n\t\t\t\t\t\tdevice_id: schema.syncDevice.device_id,\n\t\t\t\t\t\tfingerprint: schema.syncDevice.fingerprint,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.syncDevice)\n\t\t\t\t\t.limit(1)\n\t\t\t\t\t.get(),\n\t\t\t);\n\n\t\t\tconst daemonState = traceSync(\"daemonState\", () =>\n\t\t\t\td.select().from(schema.syncDaemonState).where(eq(schema.syncDaemonState.id, 1)).get(),\n\t\t\t);\n\n\t\t\tconst peerCountRow = traceSync(\"peerCountRow\", () =>\n\t\t\t\td.select({ total: count() }).from(schema.syncPeers).get(),\n\t\t\t);\n\t\t\tlet retentionState:\n\t\t\t\t| {\n\t\t\t\t\t\tlast_run_at?: string | null;\n\t\t\t\t\t\tlast_duration_ms?: number | null;\n\t\t\t\t\t\tlast_deleted_ops?: number | null;\n\t\t\t\t\t\tlast_estimated_bytes_before?: number | null;\n\t\t\t\t\t\tlast_estimated_bytes_after?: number | null;\n\t\t\t\t\t\tretained_floor_cursor?: string | null;\n\t\t\t\t\t\tlast_error?: string | null;\n\t\t\t\t\t\tlast_error_at?: string | null;\n\t\t\t\t }\n\t\t\t\t| undefined;\n\t\t\ttry {\n\t\t\t\tretentionState = traceSync(\"retentionState\", () =>\n\t\t\t\t\td\n\t\t\t\t\t\t.select()\n\t\t\t\t\t\t.from(schema.syncRetentionState)\n\t\t\t\t\t\t.where(eq(schema.syncRetentionState.id, 1))\n\t\t\t\t\t\t.get(),\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\tretentionState = undefined;\n\t\t\t}\n\n\t\t\tconst lastSyncRow = traceSync(\"lastSyncRow\", () =>\n\t\t\t\td\n\t\t\t\t\t.select({ last_sync_at: max(schema.syncPeers.last_sync_at) })\n\t\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t\t.get(),\n\t\t\t);\n\t\t\t// Always take the fast COUNT(DISTINCT) path. The slow\n\t\t\t// per-memory vec0 probe blocks the event loop for seconds on\n\t\t\t// larger DBs, which hangs every concurrent request — not\n\t\t\t// acceptable from a status endpoint. See codemem-00jn.\n\t\t\tconst semanticIndex = traceSync(\"semanticIndex\", () =>\n\t\t\t\tredactSemanticIndexDiagnostics(getSemanticIndexDiagnostics(store.db), showDiag),\n\t\t\t);\n\t\t\tconst enrollmentIssueSummary = traceSync(\"coordinatorEnrollmentIssues\", () =>\n\t\t\t\tgetCoordinatorEnrollmentReconciliationIssueSummary(store.db),\n\t\t\t);\n\t\t\tconst enrollmentIssueStatus = {\n\t\t\t\tcounts: enrollmentIssueSummary.counts,\n\t\t\t\t...(showDiag\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tissues: enrollmentIssueSummary.issues.map((issue) => ({\n\t\t\t\t\t\t\t\tcoordinator_id: issue.coordinatorId,\n\t\t\t\t\t\t\t\tgroup_id: issue.groupId,\n\t\t\t\t\t\t\t\tkind: issue.kind,\n\t\t\t\t\t\t\t\treference_id: issue.referenceId,\n\t\t\t\t\t\t\t\tcode: issue.code,\n\t\t\t\t\t\t\t\tstatus: issue.status,\n\t\t\t\t\t\t\t\tfirst_seen_at: issue.firstSeenAt,\n\t\t\t\t\t\t\t\tlast_seen_at: issue.lastSeenAt,\n\t\t\t\t\t\t\t\tresolved_at: issue.resolvedAt,\n\t\t\t\t\t\t\t\toccurrence_count: issue.occurrenceCount,\n\t\t\t\t\t\t\t\tupdated_at: issue.updatedAt,\n\t\t\t\t\t\t\t})),\n\t\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t};\n\n\t\t\tconst lastError = daemonState?.last_error as string | null;\n\t\t\tconst lastErrorAt = daemonState?.last_error_at as string | null;\n\t\t\tconst lastOkAt = daemonState?.last_ok_at as string | null;\n\t\t\tconst viewerBinding = traceSync(\"readViewerBinding\", () => readViewerBinding(store.dbPath));\n\t\t\t// The sync daemon runs inside the viewer-server process itself, so\n\t\t\t// if this request is being served, the daemon is by definition\n\t\t\t// running — the viewer is serving us right now. The prior\n\t\t\t// `portOpen` self-probe occasionally timed out under GC / socket\n\t\t\t// backlog pressure and mis-reported \"stopped · unreachable\" while\n\t\t\t// every other request kept succeeding. Trust the pidfile's\n\t\t\t// existence (a record was written at startup) and skip the loopback\n\t\t\t// probe.\n\t\t\tconst daemonRunning = Boolean(viewerBinding);\n\t\t\tconst daemonDetail = viewerBinding\n\t\t\t\t? `viewer pidfile at ${viewerBinding.host}:${viewerBinding.port}`\n\t\t\t\t: null;\n\n\t\t\tlet daemonStateValue = \"ok\";\n\t\t\tif (!config.syncEnabled) {\n\t\t\t\tdaemonStateValue = \"disabled\";\n\t\t\t} else if (lastError && (!lastOkAt || String(lastOkAt) < String(lastErrorAt ?? \"\"))) {\n\t\t\t\tdaemonStateValue = \"error\";\n\t\t\t} else if (!daemonRunning) {\n\t\t\t\tdaemonStateValue = \"stopped\";\n\t\t\t}\n\n\t\t\tconst statusPayload: Record<string, unknown> = {\n\t\t\t\tenabled: config.syncEnabled,\n\t\t\t\tinterval_s: config.syncIntervalS,\n\t\t\t\tretention: {\n\t\t\t\t\tenabled: config.syncRetentionEnabled,\n\t\t\t\t\tmax_age_days: config.syncRetentionMaxAgeDays,\n\t\t\t\t\tmax_size_mb: config.syncRetentionMaxSizeMb,\n\t\t\t\t\tretained_floor_cursor:\n\t\t\t\t\t\tsyncReset.retained_floor_cursor ??\n\t\t\t\t\t\t(retentionState?.retained_floor_cursor as string | null) ??\n\t\t\t\t\t\tnull,\n\t\t\t\t\tlast_run_at: (retentionState?.last_run_at as string | null) ?? null,\n\t\t\t\t\tlast_duration_ms:\n\t\t\t\t\t\ttypeof retentionState?.last_duration_ms === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_duration_ms\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_deleted_ops:\n\t\t\t\t\t\ttypeof retentionState?.last_deleted_ops === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_deleted_ops\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_estimated_bytes_before:\n\t\t\t\t\t\ttypeof retentionState?.last_estimated_bytes_before === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_estimated_bytes_before\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_estimated_bytes_after:\n\t\t\t\t\t\ttypeof retentionState?.last_estimated_bytes_after === \"number\"\n\t\t\t\t\t\t\t? retentionState.last_estimated_bytes_after\n\t\t\t\t\t\t\t: null,\n\t\t\t\t\tlast_error: (retentionState?.last_error as string | null) ?? null,\n\t\t\t\t\tlast_error_at: (retentionState?.last_error_at as string | null) ?? null,\n\t\t\t\t},\n\t\t\t\tsemantic_index: semanticIndex,\n\t\t\t\tcoordinator_enrollment_reconciliation_issues: enrollmentIssueStatus,\n\t\t\t\tpeer_count: Number(peerCountRow?.total ?? 0),\n\t\t\t\tlast_sync_at: lastSyncRow?.last_sync_at ?? null,\n\t\t\t\tdaemon_state: daemonStateValue,\n\t\t\t\tdaemon_running: daemonRunning,\n\t\t\t\tdaemon_detail: daemonDetail,\n\t\t\t\tproject_filter_active:\n\t\t\t\t\tconfig.syncProjectsInclude.length > 0 || config.syncProjectsExclude.length > 0,\n\t\t\t\tproject_filter: {\n\t\t\t\t\tinclude: config.syncProjectsInclude,\n\t\t\t\t\texclude: config.syncProjectsExclude,\n\t\t\t\t},\n\t\t\t\tcleanup_diagnostics: cleanupDiagnostics(\n\t\t\t\t\tstore,\n\t\t\t\t\t(deviceRow?.device_id as string | null | undefined) ?? null,\n\t\t\t\t\tshowDiag,\n\t\t\t\t),\n\t\t\t\tredacted: !showDiag,\n\t\t\t};\n\n\t\t\tif (showDiag) {\n\t\t\t\tstatusPayload.device_id = deviceRow?.device_id ?? null;\n\t\t\t\tstatusPayload.fingerprint = deviceRow?.fingerprint ?? null;\n\t\t\t\tstatusPayload.bind = `${config.syncHost}:${config.syncPort}`;\n\t\t\t\tstatusPayload.daemon_last_error = lastError;\n\t\t\t\tstatusPayload.daemon_last_error_at = lastErrorAt;\n\t\t\t\tstatusPayload.daemon_last_ok_at = lastOkAt;\n\t\t\t}\n\n\t\t\tconst runtimeStatus = getSyncRuntimeStatus?.() ?? null;\n\t\t\tif (runtimeStatus?.phase && runtimeStatus.phase !== \"running\") {\n\t\t\t\tdaemonStateValue = runtimeStatus.phase;\n\t\t\t\tstatusPayload.daemon_state = daemonStateValue;\n\t\t\t\tstatusPayload.daemon_running = runtimeStatus.phase === \"starting\" || daemonRunning;\n\t\t\t\tstatusPayload.daemon_detail = runtimeStatus.detail ?? daemonDetail;\n\t\t\t}\n\n\t\t\tconst coordinatorSnapshot = await coordinatorStatusSnapshot(store, config);\n\t\t\tconst coordinator = traceSync(\"coordinator\", () =>\n\t\t\t\tredactCoordinatorStatus(coordinatorSnapshot, showDiag),\n\t\t\t);\n\n\t\t\t// Build peers list using deduplicated mapPeerRow\n\t\t\tconst peerRows = traceSync(\n\t\t\t\t\"peerRows\",\n\t\t\t\t() => store.db.prepare(PEERS_QUERY).all() as Record<string, unknown>[],\n\t\t\t);\n\t\t\tconst recentOpsByPeer = traceSync(\"recentPeerOps\", () => recentPeerOps(store));\n\t\t\tconst scopeRejectionsByPeer = traceSync(\"recentScopeRejectionsByPeer\", () =>\n\t\t\t\trecentScopeRejectionsByPeer(store),\n\t\t\t);\n\t\t\tconst peersItems = peerRows.map((row) => {\n\t\t\t\tconst peer = mapPeerRow(\n\t\t\t\t\tstore,\n\t\t\t\t\trow,\n\t\t\t\t\tshowDiag,\n\t\t\t\t\trecentOpsByPeer,\n\t\t\t\t\tscopeRejectionsByPeer,\n\t\t\t\t\t(deviceRow?.device_id as string | null | undefined) ?? null,\n\t\t\t\t);\n\t\t\t\tpeer.status = peerStatus(peer);\n\t\t\t\treturn peer;\n\t\t\t});\n\n\t\t\tconst peersMap: Record<string, unknown> = {};\n\t\t\tfor (const peer of peersItems) {\n\t\t\t\tpeersMap[String(peer.peer_device_id)] = peer.status;\n\t\t\t}\n\n\t\t\t// Attempts\n\t\t\tconst attemptRows = traceSync(\"attemptRows\", () =>\n\t\t\t\td\n\t\t\t\t\t.select({\n\t\t\t\t\t\tpeer_device_id: schema.syncAttempts.peer_device_id,\n\t\t\t\t\t\tok: schema.syncAttempts.ok,\n\t\t\t\t\t\terror: schema.syncAttempts.error,\n\t\t\t\t\t\tstarted_at: schema.syncAttempts.started_at,\n\t\t\t\t\t\tfinished_at: schema.syncAttempts.finished_at,\n\t\t\t\t\t\tops_in: schema.syncAttempts.ops_in,\n\t\t\t\t\t\tops_out: schema.syncAttempts.ops_out,\n\t\t\t\t\t\tlocal_sync_capability: schema.syncAttempts.local_sync_capability,\n\t\t\t\t\t\tpeer_sync_capability: schema.syncAttempts.peer_sync_capability,\n\t\t\t\t\t\tnegotiated_sync_capability: schema.syncAttempts.negotiated_sync_capability,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.syncAttempts)\n\t\t\t\t\t.orderBy(desc(schema.syncAttempts.finished_at))\n\t\t\t\t\t.limit(25)\n\t\t\t\t\t.all(),\n\t\t\t);\n\t\t\tconst peerAddressMap = new Map<string, string[]>();\n\t\t\tconst peerAddressRows = traceSync(\n\t\t\t\t\"peerAddressRows\",\n\t\t\t\t() =>\n\t\t\t\t\tstore.db.prepare(\"SELECT peer_device_id, addresses_json FROM sync_peers\").all() as Array<{\n\t\t\t\t\t\tpeer_device_id: string | null;\n\t\t\t\t\t\taddresses_json: string | null;\n\t\t\t\t\t}>,\n\t\t\t);\n\t\t\tpeerAddressRows.forEach((peerRow) => {\n\t\t\t\tconst addrs = safeJsonList(peerRow.addresses_json as string | null);\n\t\t\t\tif (addrs.length) peerAddressMap.set(String(peerRow.peer_device_id ?? \"\"), addrs);\n\t\t\t});\n\t\t\tconst attemptsItems = attemptRows.map((row) => {\n\t\t\t\tconst addrs = showDiag ? peerAddressMap.get(String(row.peer_device_id ?? \"\")) : undefined;\n\t\t\t\treturn mapSyncAttemptRow(row, showDiag, addrs);\n\t\t\t});\n\t\t\tconst latestAttemptError = String(attemptRows[0]?.error || \"\").trim();\n\n\t\t\tconst statusBlock: Record<string, unknown> = {\n\t\t\t\t...statusPayload,\n\t\t\t\tbackground_maintenance: summarizeMaintenanceJobs(listMaintenanceJobs(store.db), showDiag),\n\t\t\t\tpeers: peersMap,\n\t\t\t\tpending: 0,\n\t\t\t\tsync: {},\n\t\t\t\tping: {},\n\t\t\t};\n\t\t\tconst legacyDevices = traceSync(\"legacyDevices\", () => store.claimableLegacyDeviceIds());\n\t\t\tconst legacyReview = traceSync(\"legacySharedReview\", () => legacySharedReviewSummary(store));\n\t\t\tconst sharingReview = traceSync(\"sharingReview\", () => store.sharingReviewSummary(project));\n\t\t\tconst recipientPolicyReconciliation = traceSync(\"recipientPolicyReconciliation\", () =>\n\t\t\t\tlistRecipientPolicyReconciliationStatus(store),\n\t\t\t);\n\t\t\tlet joinRequests: Record<string, unknown>[] = [];\n\t\t\tif (includeJoinRequests && showDiag && config.syncCoordinatorAdminSecret) {\n\t\t\t\ttry {\n\t\t\t\t\tjoinRequests = await listCoordinatorJoinRequests(config);\n\t\t\t\t} catch {\n\t\t\t\t\tjoinRequests = [];\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (daemonStateValue === \"ok\" && latestAttemptError.startsWith(\"needs_attention:\")) {\n\t\t\t\tdaemonStateValue = \"needs_attention\";\n\t\t\t\tstatusPayload.daemon_state = daemonStateValue;\n\t\t\t\tstatusPayload.daemon_detail = latestAttemptError.replace(/^needs_attention:/, \"\");\n\t\t\t\tstatusBlock.daemon_state = daemonStateValue;\n\t\t\t\tstatusBlock.daemon_detail = latestAttemptError.replace(/^needs_attention:/, \"\");\n\t\t\t}\n\n\t\t\tif (daemonStateValue === \"ok\") {\n\t\t\t\tconst peerStates = new Set(\n\t\t\t\t\tpeersItems.map((peer) =>\n\t\t\t\t\t\tString((peer.status as Record<string, unknown> | undefined)?.peer_state ?? \"\"),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tconst latestFailedRecently = Boolean(\n\t\t\t\t\tattemptsItems[0] &&\n\t\t\t\t\t\tattemptsItems[0].status === \"error\" &&\n\t\t\t\t\t\tisRecentIso(attemptsItems[0].finished_at),\n\t\t\t\t);\n\t\t\t\tconst allOffline =\n\t\t\t\t\tpeersItems.length > 0 &&\n\t\t\t\t\tpeersItems.every(\n\t\t\t\t\t\t(peer) =>\n\t\t\t\t\t\t\tString((peer.status as Record<string, unknown>)?.peer_state ?? \"\") === \"offline\",\n\t\t\t\t\t);\n\t\t\t\tif (latestFailedRecently) {\n\t\t\t\t\tconst hasLivePeer = peerStates.has(\"online\") || peerStates.has(\"degraded\");\n\t\t\t\t\tif (hasLivePeer) daemonStateValue = \"degraded\";\n\t\t\t\t\telse if (allOffline) daemonStateValue = \"offline-peers\";\n\t\t\t\t\telse if (peersItems.length > 0) daemonStateValue = \"stale\";\n\t\t\t\t} else if (peerStates.has(\"degraded\")) {\n\t\t\t\t\tdaemonStateValue = \"degraded\";\n\t\t\t\t} else if (allOffline) {\n\t\t\t\t\tdaemonStateValue = \"offline-peers\";\n\t\t\t\t} else if (peersItems.length > 0 && !peerStates.has(\"online\")) {\n\t\t\t\t\tdaemonStateValue = \"stale\";\n\t\t\t\t}\n\t\t\t\tstatusPayload.daemon_state = daemonStateValue;\n\t\t\t\tstatusBlock.daemon_state = daemonStateValue;\n\t\t\t}\n\n\t\t\tconst responsePayload: Record<string, unknown> = {\n\t\t\t\t...statusPayload,\n\t\t\t\tstatus: statusBlock,\n\t\t\t\tpeers: peersItems,\n\t\t\t\tattempts: attemptsItems.slice(0, 5),\n\t\t\t\tlegacy_devices: legacyDevices,\n\t\t\t\tlegacy_shared_review: legacyReview,\n\t\t\t\tsharing_review: sharingReview,\n\t\t\t\trecipient_policy_reconciliation: recipientPolicyReconciliation,\n\t\t\t\tcoordinator,\n\t\t\t};\n\t\t\tif (includeJoinRequests && showDiag) {\n\t\t\t\tresponsePayload.join_requests = joinRequests;\n\t\t\t}\n\t\t\treturn c.json(responsePayload);\n\t\t}\n\t});\n\n\t// GET /api/sync/peers\n\tapp.get(\"/api/sync/peers\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst showDiag = queryBool(c.req.query(\"includeDiagnostics\"));\n\t\t\tconst rows = store.db.prepare(PEERS_QUERY).all() as Record<string, unknown>[];\n\t\t\tconst recentOpsByPeer = recentPeerOps(store);\n\t\t\tconst scopeRejectionsByPeer = recentScopeRejectionsByPeer(store);\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst deviceRow = d\n\t\t\t\t.select({ device_id: schema.syncDevice.device_id })\n\t\t\t\t.from(schema.syncDevice)\n\t\t\t\t.limit(1)\n\t\t\t\t.get();\n\t\t\tconst localDeviceId = (deviceRow?.device_id as string | null | undefined) ?? null;\n\t\t\t// Use deduplicated mapPeerRow helper (fix #4)\n\t\t\tconst peers = rows.map((row) =>\n\t\t\t\tmapPeerRow(store, row, showDiag, recentOpsByPeer, scopeRejectionsByPeer, localDeviceId),\n\t\t\t);\n\t\t\treturn c.json({ items: peers, redacted: !showDiag });\n\t\t}\n\t});\n\n\t// GET /api/sync/peers/:peer_device_id/scope-rejections\n\t//\n\t// Recent scope-rejection records produced by the inbound fail-closed gate.\n\t// Each row is metadata only — op id, entity ref, scope id, reason code,\n\t// timestamp. The rejection log never stores op payloads, so this endpoint\n\t// can never leak inbound payload contents regardless of diagnostics state.\n\tapp.get(\"/api/sync/peers/:peer_device_id/scope-rejections\", (c) => {\n\t\tconst store = getStore();\n\t\tconst peerDeviceId = String(c.req.param(\"peer_device_id\") || \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"missing_peer_device_id\" }, 400);\n\t\tconst limit = queryInt(c.req.query(\"limit\"), 100);\n\t\tif (limit <= 0) return c.json({ error: \"invalid_limit\" }, 400);\n\t\tconst sinceMinutesRaw = queryInt(c.req.query(\"sinceMinutes\"), 24 * 60);\n\t\t// Cap at ~10 years so a hostile or fat-fingered query cannot push the\n\t\t// computed timestamp past the Date range and turn toISOString() into\n\t\t// a 500. Anything older than 10 years is effectively \"all rejections\".\n\t\tconst SINCE_MINUTES_MAX = 10 * 365 * 24 * 60;\n\t\tconst sinceMinutes = Math.min(Math.max(sinceMinutesRaw, 0), SINCE_MINUTES_MAX);\n\t\tconst sinceIso =\n\t\t\tsinceMinutes > 0 ? new Date(Date.now() - sinceMinutes * 60_000).toISOString() : undefined;\n\t\tconst records = listInboundScopeRejections(store.db, {\n\t\t\tpeerDeviceId,\n\t\t\tsinceIso,\n\t\t\tlimit,\n\t\t});\n\t\tconst summaries = summarizeInboundScopeRejections(store.db, {\n\t\t\tpeerDeviceId,\n\t\t\tsinceIso,\n\t\t});\n\t\tconst summary = summaries[0] ?? {\n\t\t\tpeer_device_id: peerDeviceId,\n\t\t\ttotal: 0,\n\t\t\tby_reason: {},\n\t\t\tlast_at: null,\n\t\t};\n\t\treturn c.json({\n\t\t\tpeer_device_id: peerDeviceId,\n\t\t\tsummary,\n\t\t\titems: records,\n\t\t});\n\t});\n\n\t// GET /api/sync/actors\n\tapp.get(\"/api/sync/actors\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tensureLocalActorRecord(store);\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst includeMerged = queryBool(c.req.query(\"includeMerged\"));\n\t\t\tconst query = d.select().from(schema.actors);\n\t\t\tconst rows = includeMerged\n\t\t\t\t? query.orderBy(schema.actors.display_name).all()\n\t\t\t\t: query\n\t\t\t\t\t\t.where(and(ne(schema.actors.status, \"merged\"), ne(schema.actors.status, \"deactivated\")))\n\t\t\t\t\t\t.orderBy(schema.actors.display_name)\n\t\t\t\t\t\t.all();\n\t\t\treturn c.json({ items: rows });\n\t\t}\n\t});\n\n\t// GET /api/sync/attempts\n\tapp.get(\"/api/sync/attempts\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tlet limit = queryInt(c.req.query(\"limit\"), 25);\n\t\t\tif (limit <= 0) return c.json({ error: \"invalid_limit\" }, 400);\n\t\t\tlimit = Math.min(limit, 500);\n\t\t\tconst rows = d\n\t\t\t\t.select({\n\t\t\t\t\tpeer_device_id: schema.syncAttempts.peer_device_id,\n\t\t\t\t\tok: schema.syncAttempts.ok,\n\t\t\t\t\terror: schema.syncAttempts.error,\n\t\t\t\t\tstarted_at: schema.syncAttempts.started_at,\n\t\t\t\t\tfinished_at: schema.syncAttempts.finished_at,\n\t\t\t\t\tops_in: schema.syncAttempts.ops_in,\n\t\t\t\t\tops_out: schema.syncAttempts.ops_out,\n\t\t\t\t\tlocal_sync_capability: schema.syncAttempts.local_sync_capability,\n\t\t\t\t\tpeer_sync_capability: schema.syncAttempts.peer_sync_capability,\n\t\t\t\t\tnegotiated_sync_capability: schema.syncAttempts.negotiated_sync_capability,\n\t\t\t\t})\n\t\t\t\t.from(schema.syncAttempts)\n\t\t\t\t.orderBy(desc(schema.syncAttempts.finished_at))\n\t\t\t\t.limit(limit)\n\t\t\t\t.all();\n\t\t\tconst showDiag = queryBool(c.req.query(\"includeDiagnostics\"));\n\t\t\tconst items = rows.map((row) => mapSyncAttemptRow(row, showDiag));\n\t\t\treturn c.json({ items, redacted: !showDiag });\n\t\t}\n\t});\n\n\t// GET /api/sync/pairing — uses ensureDeviceIdentity from core (fix #5 context)\n\t//\n\t// The pairing payload is not redacted by the generic diagnostics toggle:\n\t// it is the actual command the user shares with their own other devices,\n\t// and the UI already hides it inside a \"Show pairing command\" disclosure\n\t// that they explicitly open. Redacting the payload here broke the\n\t// happy-path pairing flow because the UI had nothing to render as the\n\t// command when diagnostics were off.\n\tapp.get(\"/api/sync/pairing\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tlet deviceId: string | undefined;\n\t\t\tlet publicKey: string | undefined;\n\t\t\tlet fingerprint: string | undefined;\n\n\t\t\ttry {\n\t\t\t\tconst [id, fp] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\t\tdeviceId = id;\n\t\t\t\tfingerprint = fp;\n\t\t\t\tconst row = d\n\t\t\t\t\t.select({ public_key: schema.syncDevice.public_key })\n\t\t\t\t\t.from(schema.syncDevice)\n\t\t\t\t\t.where(eq(schema.syncDevice.device_id, id))\n\t\t\t\t\t.get();\n\t\t\t\tpublicKey = row?.public_key ?? \"\";\n\t\t\t} catch {\n\t\t\t\treturn c.json({ error: \"device identity unavailable\" }, 500);\n\t\t\t}\n\n\t\t\tif (!deviceId || !fingerprint) {\n\t\t\t\treturn c.json({ error: \"public key missing\" }, 500);\n\t\t\t}\n\n\t\t\treturn c.json({\n\t\t\t\tdevice_id: deviceId,\n\t\t\t\tfingerprint,\n\t\t\t\tpublic_key: publicKey ?? null,\n\t\t\t\tpairing_filter_hint: PAIRING_FILTER_HINT,\n\t\t\t\taddresses: pairingAdvertiseAddresses(config),\n\t\t\t});\n\t\t}\n\t});\n\n\t// ------------------------------------------------------------------\n\t// POST mutations\n\t// ------------------------------------------------------------------\n\n\t// POST /api/sync/peers/rename\n\tapp.post(\"/api/sync/peers/rename\", async (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tlet body: Record<string, unknown>;\n\t\t\ttry {\n\t\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t\t} catch {\n\t\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t\t}\n\t\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\t\tconst rawName = String(body.name ?? \"\");\n\t\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\t\tif (!rawName.trim()) return c.json({ error: \"name required\" }, 400);\n\t\t\tlet name: string;\n\t\t\ttry {\n\t\t\t\tname = normalizeHumanPresentationName(rawName, \"name\");\n\t\t\t} catch (error) {\n\t\t\t\treturn c.json({ error: error instanceof Error ? error.message : \"name_invalid\" }, 400);\n\t\t\t}\n\t\t\tconst exists = d\n\t\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t.get();\n\t\t\tif (!exists) return c.json({ error: \"peer not found\" }, 404);\n\t\t\td.update(schema.syncPeers)\n\t\t\t\t.set({ name })\n\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t.run();\n\t\t\treturn c.json({ ok: true });\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/run\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown> = {};\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\tbody = {};\n\t\t}\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tif (!config.syncEnabled) {\n\t\t\treturn c.json({ error: \"sync_disabled\" }, 403);\n\t\t}\n\t\tconst address =\n\t\t\ttypeof body.address === \"string\" && body.address.trim() ? body.address.trim() : null;\n\t\tconst requestedPeerId =\n\t\t\ttypeof body.peer_device_id === \"string\" && body.peer_device_id.trim()\n\t\t\t\t? body.peer_device_id.trim()\n\t\t\t\t: null;\n\t\tlet peerIds: string[];\n\t\tif (address) {\n\t\t\tconst peerId = findPeerDeviceIdForAddress(store, address);\n\t\t\tif (!peerId) return c.json({ error: \"unknown peer address\" }, 404);\n\t\t\tpeerIds = [peerId];\n\t\t} else if (requestedPeerId) {\n\t\t\tconst requestedPeerRows = store.db\n\t\t\t\t.prepare(\"SELECT peer_device_id FROM sync_peers WHERE peer_device_id = ?\")\n\t\t\t\t.all(requestedPeerId) as Array<{ peer_device_id: string | null }>;\n\t\t\tpeerIds = requestedPeerRows\n\t\t\t\t.map((row) => String(row.peer_device_id ?? \"\").trim())\n\t\t\t\t.filter(Boolean);\n\t\t} else {\n\t\t\tconst allPeerRows = store.db.prepare(\"SELECT peer_device_id FROM sync_peers\").all() as Array<{\n\t\t\t\tpeer_device_id: string | null;\n\t\t\t}>;\n\t\t\tpeerIds = allPeerRows.map((row) => String(row.peer_device_id ?? \"\").trim()).filter(Boolean);\n\t\t}\n\t\tconst items = [] as Array<Record<string, unknown>>;\n\t\tfor (const peerId of peerIds) {\n\t\t\t// keysDir must match the sync daemon's key material — omitting it made\n\t\t\t// this route sign with a different device key whenever CODEMEM_KEYS_DIR\n\t\t\t// was set, so manual sync runs failed peer auth while daemon syncs worked.\n\t\t\tconst result = await runSyncPass(store.db, peerId, {\n\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\tdbPath: store.dbPath,\n\t\t\t\tscanner: store.scanner,\n\t\t\t});\n\t\t\titems.push({\n\t\t\t\tpeer_device_id: peerId,\n\t\t\t\t...result,\n\t\t\t\tskippedOut: undefined,\n\t\t\t\tskipped_out: safeSkippedSyncDetail(result.skippedOut),\n\t\t\t});\n\t\t}\n\t\treturn c.json({ items });\n\t});\n\n\tapp.post(\"/api/sync/peers/scope\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\tconst include = Array.isArray(body.include)\n\t\t\t? body.include\n\t\t\t\t\t.filter((value): value is string => typeof value === \"string\")\n\t\t\t\t\t.map((value) => value.trim())\n\t\t\t\t\t.filter(Boolean)\n\t\t\t: null;\n\t\tconst exclude = Array.isArray(body.exclude)\n\t\t\t? body.exclude\n\t\t\t\t\t.filter((value): value is string => typeof value === \"string\")\n\t\t\t\t\t.map((value) => value.trim())\n\t\t\t\t\t.filter(Boolean)\n\t\t\t: null;\n\t\tconst inheritGlobal = Boolean(body.inherit_global);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst exists = d\n\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t.from(schema.syncPeers)\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.get();\n\t\tif (!exists) return c.json({ error: \"peer not found\" }, 404);\n\t\td.update(schema.syncPeers)\n\t\t\t.set({\n\t\t\t\tprojects_include_json: inheritGlobal ? null : JSON.stringify(include ?? []),\n\t\t\t\tprojects_exclude_json: inheritGlobal ? null : JSON.stringify(exclude ?? []),\n\t\t\t})\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.run();\n\t\tconst row = d\n\t\t\t.select({\n\t\t\t\tprojects_include_json: schema.syncPeers.projects_include_json,\n\t\t\t\tprojects_exclude_json: schema.syncPeers.projects_exclude_json,\n\t\t\t})\n\t\t\t.from(schema.syncPeers)\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.get() as Record<string, unknown> | undefined;\n\t\tif (!row) return c.json({ error: \"peer not found\" }, 404);\n\t\treturn c.json({\n\t\t\tok: true,\n\t\t\tproject_scope: currentProjectScope(row, readPeerProjectFilters(store, peerDeviceId)),\n\t\t});\n\t});\n\n\tapp.get(\"/api/sync/sharing-domains/settings\", (c) => {\n\t\tconst store = getStore();\n\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 250));\n\t\treturn c.json({\n\t\t\tscopes: listSharingDomainSettingsScopes(store.db),\n\t\t\tmappings: listProjectScopeSettingsMappings(store.db),\n\t\t\tprojects: listProjectScopeCandidates(store.db, { limit }),\n\t\t\tlocal_default_scope_id: LOCAL_DEFAULT_SCOPE_ID,\n\t\t});\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/projection\", (c) => {\n\t\tconst store = getStore();\n\t\treturn c.json(\n\t\t\tlistLegacyRecipientPolicyProjections(store.db, {\n\t\t\t\tlocalActorId: store.actorId,\n\t\t\t\tlocalDeviceId: store.deviceId,\n\t\t\t}),\n\t\t);\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/review\", (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\treturn c.json(\n\t\t\tlistRecipientPolicyReview(store.db, {\n\t\t\t\tlocalActorId: store.actorId,\n\t\t\t\tlocalDeviceId: store.deviceId,\n\t\t\t}),\n\t\t);\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/intent\", (c) => {\n\t\tconst store = getStore();\n\t\treturn c.json(listRecipientPolicyIntent(store.db));\n\t});\n\n\tapp.get(\"/api/sync/recipient-policy/v1/reconciliation-status\", (c) => {\n\t\treturn c.json(listRecipientPolicyReconciliationStatus(getStore()));\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/edges/preview\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\ttry {\n\t\t\treturn c.json(previewRecipientPolicyEdges(store.db, body));\n\t\t} catch (error) {\n\t\t\tif (error instanceof RecipientPolicyEdgeRequestError) {\n\t\t\t\tif (error.status === \"not_found\") {\n\t\t\t\t\treturn c.json({ error: error.errorCode }, 404);\n\t\t\t\t}\n\t\t\t\treturn c.json({ error: error.errorCode }, 400);\n\t\t\t}\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"edge_preview_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"edge_preview_failed\" }, 500);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/edges/commit\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\ttry {\n\t\t\tconst request = parseRecipientPolicyEdgeCommitRequest(body);\n\t\t\t// Acquire every affected Team queue in one stable order. Finish publication\n\t\t\t// uses the same Team boundary, so its reviewed snapshot cannot race a\n\t\t\t// successful user recipient commit.\n\t\t\tconst teamIds = request\n\t\t\t\t? [\n\t\t\t\t\t\t...new Set(\n\t\t\t\t\t\t\trequest.changes.flatMap((change) =>\n\t\t\t\t\t\t\t\tchange.recipient.recipientKind === \"team\" ? [change.recipient.teamId] : [],\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t),\n\t\t\t\t\t].toSorted()\n\t\t\t\t: [];\n\t\t\tconst commit = async (\n\t\t\t\tindex: number,\n\t\t\t): Promise<ReturnType<typeof commitRecipientPolicyEdges>> => {\n\t\t\t\tconst teamId = teamIds[index];\n\t\t\t\tif (!teamId) return commitRecipientPolicyEdges(store.db, request ?? body);\n\t\t\t\treturn serializeRecipientPolicyTeamMutation(store.db, teamId, () => commit(index + 1));\n\t\t\t};\n\t\t\tconst result = await commit(0);\n\t\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\t\tif (result.status === \"stale\" || result.status === \"conflict\") {\n\t\t\t\treturn c.json(result, 409);\n\t\t\t}\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"edge_commit_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\tversion: 1,\n\t\t\t\t\tstatus: \"conflict\",\n\t\t\t\t\treviewedPolicyDigest: \"\",\n\t\t\t\t\terrorCode: \"edge_commit_conflict\",\n\t\t\t\t\toutcomes: [],\n\t\t\t\t\twriteCount: 0,\n\t\t\t\t\tidempotent: false,\n\t\t\t\t},\n\t\t\t\t409,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/invites/preview\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"request_invalid\" }, 400);\n\t\ttry {\n\t\t\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\t\tconst unavailable = recipientInviteCreationUnavailable(status, kind);\n\t\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\t\tconst targetId =\n\t\t\t\tkind === \"team_member\"\n\t\t\t\t\t? optionalViewerStrictString(body, \"policy_team_id\")\n\t\t\t\t\t: optionalViewerStrictString(body, \"target_identity_id\");\n\t\t\tif (!targetId) throw new Error(\"recipient_invite_metadata_invalid\");\n\t\t\tif (kind === \"add_device\" && targetId !== store.actorId) {\n\t\t\t\tthrow new Error(\"invite_identity_conflict\");\n\t\t\t}\n\t\t\tconst preview = recipientInviteOnboardingPreview(\n\t\t\t\tstore,\n\t\t\t\tbody,\n\t\t\t\trecipientInvitePreviewId(kind, targetId),\n\t\t\t);\n\t\t\treturn c.json({ kind, preview });\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"recipient_invite_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/invites\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"request_invalid\" }, 400);\n\t\ttry {\n\t\t\tconst kind = recipientInviteKind(body.kind ?? body.invite_kind);\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\t\tconst unavailable = recipientInviteCreationUnavailable(status, kind);\n\t\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\t\tconst targetId =\n\t\t\t\tkind === \"team_member\"\n\t\t\t\t\t? optionalViewerStrictString(body, \"policy_team_id\")\n\t\t\t\t\t: optionalViewerStrictString(body, \"target_identity_id\");\n\t\t\tif (!targetId) throw new Error(\"recipient_invite_metadata_invalid\");\n\t\t\tif (kind === \"add_device\" && targetId !== store.actorId) {\n\t\t\t\tthrow new Error(\"invite_identity_conflict\");\n\t\t\t}\n\t\t\tconst preview = recipientInviteOnboardingPreview(\n\t\t\t\tstore,\n\t\t\t\tbody,\n\t\t\t\trecipientInvitePreviewId(kind, targetId),\n\t\t\t);\n\t\t\tconst reviewedDigest = optionalViewerStrictString(body, \"reviewed_onboarding_digest\");\n\t\t\tif (!reviewedDigest) throw new Error(\"reviewed_onboarding_digest_required\");\n\t\t\tif (reviewedDigest !== preview.reviewedOnboardingDigest) {\n\t\t\t\treturn c.json({ error: \"reviewed_onboarding_stale\", preview }, 409);\n\t\t\t}\n\t\t\tconst reviewedIntent = recipientInviteReviewedIntent(store, kind, targetId, preview);\n\t\t\tconst reviewedPreviewDigest = await recipientReviewedIntentDigest(reviewedIntent);\n\t\t\tconst groupId = resolveCoordinatorAdminGroup(optionalViewerString(body, \"group_id\"), status);\n\t\t\tconst ttlHours = parseInviteTtlHours(body.ttl_hours);\n\t\t\tif (!groupId) throw new Error(\"group_id_required\");\n\t\t\tif (ttlHours == null) throw new Error(\"ttl_hours_invalid\");\n\t\t\t// Initial owner enrollments intentionally remain Identity-unbound, so an explicitly\n\t\t\t// admin-configured owner selects admin issuance up front. Non-admin devices use the\n\t\t\t// signed Identity-bound endpoint; failures never fall back across this boundary.\n\t\t\tconst useAdminIssuance = kind === \"team_member\" || status.has_admin_secret;\n\t\t\tconst result = useAdminIssuance\n\t\t\t\t? await coordinatorCreateInviteAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tcoordinatorUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tpolicy: \"auto_admit\",\n\t\t\t\t\t\tttlHours,\n\t\t\t\t\t\tcreatedBy: store.actorId,\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t\t\tinviteKind: kind,\n\t\t\t\t\t\tpolicyTeamId: kind === \"team_member\" ? targetId : null,\n\t\t\t\t\t\ttargetIdentityId: kind === \"add_device\" ? targetId : null,\n\t\t\t\t\t\tinviterDeviceId: kind === \"add_device\" ? preview.binding.deviceId : null,\n\t\t\t\t\t\treviewedPreviewDigest,\n\t\t\t\t\t\treviewedIntent,\n\t\t\t\t\t})\n\t\t\t\t: await coordinatorCreateAddDeviceInviteAction({\n\t\t\t\t\t\tgroupId,\n\t\t\t\t\t\tcoordinatorUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\tttlHours,\n\t\t\t\t\t\tdeviceId: preview.binding.deviceId,\n\t\t\t\t\t\tkeysDir: syncKeysDir(),\n\t\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\t\treviewedPreviewDigest,\n\t\t\t\t\t\treviewedIntent,\n\t\t\t\t\t});\n\t\t\treturn c.json({ ok: true, kind, preview, invite: result });\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"recipient_invite_failed\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/migrate\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst value = await parseViewerJsonBody(c);\n\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\t}\n\t\tconst body = value as Record<string, unknown>;\n\t\tif (\n\t\t\tObject.keys(body).some((key) => key !== \"dryRun\") ||\n\t\t\t(Object.hasOwn(body, \"dryRun\") && typeof body.dryRun !== \"boolean\")\n\t\t) {\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\treturn c.json(\n\t\t\t\tmigrateRecipientPolicyIntent(\n\t\t\t\t\tstore.db,\n\t\t\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\t\t\t{ dryRun: body.dryRun === true },\n\t\t\t\t),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (isSqliteBusy(error)) {\n\t\t\t\tc.header(\"Retry-After\", \"1\");\n\t\t\t\treturn c.json({ error: \"migration_busy\" }, 503);\n\t\t\t}\n\t\t\treturn c.json({ error: \"migration_failed\" }, 500);\n\t\t}\n\t});\n\n\tconst parseReviewRequest = (value: unknown): RecipientPolicyReviewResolveRequestV1 | null => {\n\t\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n\t\tconst body = value as Record<string, unknown>;\n\t\tconst allowedKeys = new Set([\"reviewItemId\", \"sourceFingerprint\", \"decision\", \"decisionInput\"]);\n\t\tif (\n\t\t\tObject.keys(body).some((key) => !allowedKeys.has(key)) ||\n\t\t\ttypeof body.reviewItemId !== \"string\" ||\n\t\t\ttypeof body.sourceFingerprint !== \"string\" ||\n\t\t\ttypeof body.decision !== \"string\"\n\t\t) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\treviewItemId: body.reviewItemId,\n\t\t\tsourceFingerprint: body.sourceFingerprint,\n\t\t\tdecision: body.decision as RecipientPolicyReviewDecisionV1,\n\t\t\t...(Object.hasOwn(body, \"decisionInput\") ? { decisionInput: body.decisionInput } : {}),\n\t\t};\n\t};\n\n\tapp.post(\"/api/sync/recipient-policy/v1/review/resolve\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tconst request = parseReviewRequest(body);\n\t\tif (!request) return c.json({ error: \"request_invalid\" }, 400);\n\t\tensureLocalActorRecord(store);\n\t\tconst result = resolveRecipientPolicyReview(\n\t\t\tstore.db,\n\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\trequest,\n\t\t);\n\t\tif (result.status === \"stale\" || result.status === \"conflict\") return c.json(result, 409);\n\t\tif (result.status === \"not_found\") return c.json(result, 404);\n\t\tif (result.status === \"invalid\") return c.json(result, 400);\n\t\treturn c.json(result);\n\t});\n\n\tapp.post(\"/api/sync/recipient-policy/v1/review/resolve-bulk\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (\n\t\t\t!body ||\n\t\t\t!Array.isArray(body.requests) ||\n\t\t\tbody.requests.length === 0 ||\n\t\t\tbody.requests.length > 100\n\t\t)\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\tconst requests = body.requests.map(parseReviewRequest);\n\t\tif (requests.some((request) => request == null))\n\t\t\treturn c.json({ error: \"request_invalid\" }, 400);\n\t\tensureLocalActorRecord(store);\n\t\tconst result = resolveRecipientPolicyReviewBulk(\n\t\t\tstore.db,\n\t\t\t{ localActorId: store.actorId, localDeviceId: store.deviceId },\n\t\t\trequests as RecipientPolicyReviewResolveRequestV1[],\n\t\t);\n\t\treturn c.json(result, result.results.some((item) => item.status !== \"applied\") ? 207 : 200);\n\t});\n\n\tapp.get(\"/api/sync/projects\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst limit = Math.max(1, queryInt(c.req.query(\"limit\"), 50));\n\t\tconst offset = Math.max(0, queryInt(c.req.query(\"offset\"), 0));\n\t\tconst inventory = listProjectScopeInventory(store.db, {\n\t\t\tidentitySource: c.req.query(\"identity_source\"),\n\t\t\tlimit,\n\t\t\toffset,\n\t\t\tquery: c.req.query(\"q\"),\n\t\t\tscopeId: c.req.query(\"scope_id\"),\n\t\t\tstatus: c.req.query(\"status\"),\n\t\t});\n\t\tconst operations = await shareOperationReadModels(store, undefined, false);\n\t\tconst operationById = new Map(\n\t\t\toperations.map((operation) => [operation.operation_id, operation]),\n\t\t);\n\t\tconst sharingByProject = new Map<string, Array<Record<string, unknown>>>();\n\t\tconst reviewed = store.db\n\t\t\t.prepare(`SELECT p.operation_id, p.canonical_project_identity\n\t\t\t FROM share_operation_projects p\n\t\t\t JOIN share_operations o ON o.operation_id = p.operation_id\n\t\t\t WHERE o.inviter_actor_id = ? ORDER BY o.created_at, p.ordinal`)\n\t\t\t.all(store.actorId) as Array<{ operation_id: string; canonical_project_identity: string }>;\n\t\tfor (const item of reviewed) {\n\t\t\tconst operation = operationById.get(item.operation_id);\n\t\t\tif (!operation) continue;\n\t\t\tconst current = sharingByProject.get(item.canonical_project_identity) ?? [];\n\t\t\tcurrent.push({\n\t\t\t\tperson: operation.person,\n\t\t\t\tlifecycle: {\n\t\t\t\t\tstate: operation.lifecycle.state,\n\t\t\t\t\tlabel: operation.lifecycle.label,\n\t\t\t\t\texplanation: operation.lifecycle.explanation,\n\t\t\t\t},\n\t\t\t});\n\t\t\tsharingByProject.set(item.canonical_project_identity, current);\n\t\t}\n\t\treturn c.json({\n\t\t\t...inventory,\n\t\t\tprojects: inventory.projects.map((project) => ({\n\t\t\t\t...project,\n\t\t\t\tsharing: sharingByProject.get(project.workspace_identity) ?? [],\n\t\t\t})),\n\t\t});\n\t});\n\n\tapp.post(\"/api/sync/projects/reassign-project\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\ttry {\n\t\t\tconst workspaceIdentity = optionalViewerStrictString(body, \"workspace_identity\") ?? \"\";\n\t\t\tconst project = optionalViewerStrictString(body, \"project\") ?? \"\";\n\t\t\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst result = reassignProjectScopeInventoryProject(store.db, {\n\t\t\t\tdeviceId,\n\t\t\t\tproject,\n\t\t\t\tworkspaceIdentity,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, ...result });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message }, message.includes(\"not found\") ? 404 : 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/projects/forget\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\ttry {\n\t\t\tconst workspaceIdentity = optionalViewerStrictString(body, \"workspace_identity\") ?? \"\";\n\t\t\tconst confirmationToken = optionalViewerStrictString(body, \"confirmation_token\");\n\t\t\tconst confirmed = body.confirmed === true;\n\t\t\tconst result = forgetProjectInventoryLocalMemories(store, {\n\t\t\t\tconfirmationToken,\n\t\t\t\tconfirmed,\n\t\t\t\tworkspaceIdentity,\n\t\t\t});\n\t\t\tif (!confirmed) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"project_forget_confirmation_required\",\n\t\t\t\t\t\tpreview: result,\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json({ ok: true, ...result });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message }, message.includes(\"not found\") ? 404 : 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/project-invites/preview\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid_json\" }, 400);\n\t\ttry {\n\t\t\tassertProjectInviteBody(body, false);\n\t\t\tconst createdAt = new Date().toISOString();\n\t\t\tconst inviteExpiresAt = new Date(\n\t\t\t\tnew Date(createdAt).getTime() + PROJECT_INVITE_TTL_HOURS * 3600 * 1000,\n\t\t\t).toISOString();\n\t\t\tconst { plan } = projectInvitePlan(store, body, createdAt, inviteExpiresAt);\n\t\t\treturn c.json(projectInvitePreview(plan));\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"project_invite_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/project-invites\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid_json\" }, 400);\n\t\ttry {\n\t\t\tassertProjectInviteBody(body, true);\n\t\t\tconst createdAt = new Date().toISOString();\n\t\t\tconst inviteExpiresAt = new Date(\n\t\t\t\tnew Date(createdAt).getTime() + PROJECT_INVITE_TTL_HOURS * 3600 * 1000,\n\t\t\t).toISOString();\n\t\t\tconst { plan, config } = projectInvitePlan(store, body, createdAt, inviteExpiresAt);\n\t\t\tif (String(body.reviewed_project_set_digest).trim() !== plan.reviewedProjectSetDigest) {\n\t\t\t\treturn c.json({ error: \"reviewed_project_set_changed\" }, 409);\n\t\t\t}\n\t\t\tconst existingState = (() => {\n\t\t\t\ttry {\n\t\t\t\t\treturn store.db\n\t\t\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t\t\t.pluck()\n\t\t\t\t\t\t.get(plan.operationId) as string | undefined;\n\t\t\t\t} catch {\n\t\t\t\t\t// Local persistence below remains authoritative. Keeping this precheck\n\t\t\t\t\t// best-effort preserves coordinator idempotency if local storage is unavailable.\n\t\t\t\t\treturn undefined;\n\t\t\t\t}\n\t\t\t})();\n\t\t\tif (existingState && existingState !== \"waiting_for_acceptance\") {\n\t\t\t\treturn c.json({ error: \"operation_state_invalid\" }, 409);\n\t\t\t}\n\t\t\t// The coordinator invite is minted before local persistence. If the local\n\t\t\t// transaction fails, operationId makes coordinator creation return the\n\t\t\t// current invite. Expired or revoked waiting invites are renewed in place.\n\t\t\tconst result = await coordinatorCreateInviteAction({\n\t\t\t\tgroupId: plan.coordinatorGroupId,\n\t\t\t\tcoordinatorUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tpolicy: \"auto_admit\",\n\t\t\t\tttlHours: PROJECT_INVITE_TTL_HOURS,\n\t\t\t\tcreatedBy: store.actorId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\toperationId: plan.operationId,\n\t\t\t\treviewedProjectSetDigest: plan.reviewedProjectSetDigest,\n\t\t\t\tinviterActorId: plan.inviterActorId,\n\t\t\t\tinviterDisplayName: projectInviteInviterDisplayName(store.actorDisplayName),\n\t\t\t\tinviterDeviceId: plan.inviterDeviceIds[0],\n\t\t\t\tpendingPersonId: plan.personId,\n\t\t\t\tprojectSummaries: plan.projects.map((project) => ({\n\t\t\t\t\tdisplay_name: project.displayName,\n\t\t\t\t\texisting_memory_count: project.existingMemoryCount,\n\t\t\t\t})),\n\t\t\t\tprojectIntent: plan.projects.map((project) => ({\n\t\t\t\t\tcanonical_identity: project.canonicalIdentity,\n\t\t\t\t\tdisplay_name: project.displayName,\n\t\t\t\t\texisting_memory_count: project.existingMemoryCount,\n\t\t\t\t})),\n\t\t\t});\n\t\t\tif (\n\t\t\t\tString(result.operation_id ?? \"\").trim() !== plan.operationId ||\n\t\t\t\tString(result.reviewed_project_set_digest ?? \"\").trim() !== plan.reviewedProjectSetDigest\n\t\t\t) {\n\t\t\t\tthrow new Error(\"coordinator_invite_intent_mismatch\");\n\t\t\t}\n\t\t\tconst payload = result.payload;\n\t\t\tif (!payload || typeof payload !== \"object\" || Array.isArray(payload)) {\n\t\t\t\tthrow new Error(\"coordinator_invite_payload_missing\");\n\t\t\t}\n\t\t\tconst token = String((payload as Record<string, unknown>).token ?? \"\").trim();\n\t\t\tconst expiresAt = String((payload as Record<string, unknown>).expires_at ?? \"\").trim();\n\t\t\tconst link = String(result.link ?? \"\").trim();\n\t\t\tconst encoded = String(result.encoded ?? \"\").trim();\n\t\t\tif (!token || !expiresAt || !link || !encoded) {\n\t\t\t\tthrow new Error(\"coordinator_invite_payload_invalid\");\n\t\t\t}\n\t\t\tconst persistedPlan = { ...plan, inviteExpiresAt: new Date(expiresAt).toISOString() };\n\t\t\tpersistShareOperation(store.db, persistedPlan, {\n\t\t\t\tinviteId: String(result.invite_id ?? \"\").trim() || null,\n\t\t\t\ttokenDigest: inviteTokenDigest(token),\n\t\t\t});\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\t...projectInvitePreview(persistedPlan),\n\t\t\t\tinvite: {\n\t\t\t\t\tlink,\n\t\t\t\t\tencoded,\n\t\t\t\t\texpires_at: persistedPlan.inviteExpiresAt,\n\t\t\t\t},\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"project_invite_failed\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/project-invites/:operationId\", async (c) => {\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst { payload } = await coordinatorProjectInvitePayload(operationId);\n\t\t\treturn c.json(\n\t\t\t\tpayload.state === \"accepted\" ? { ...payload, state: \"pending_setup\" } : payload,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst mapped = projectInviteOwnerErrorResponse(error, {\n\t\t\t\tcode: \"operation_read_failed\",\n\t\t\t\tstatus: 400,\n\t\t\t});\n\t\t\treturn c.json({ error: mapped.code }, mapped.status);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/project-invites/:operationId/reconcile\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await reconcileProjectInviteAcceptance(store, operationId);\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\toperation_id: operationId,\n\t\t\t\treconciled: result.accepted,\n\t\t\t\tstate: result.accepted ? \"pending_setup\" : \"waiting_for_acceptance\",\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst mapped = projectInviteOwnerErrorResponse(error, {\n\t\t\t\tcode: \"operation_reconcile_failed\",\n\t\t\t\tstatus: 409,\n\t\t\t});\n\t\t\treturn c.json({ error: mapped.code }, mapped.status);\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/share-operations\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst items = await shareOperationReadModels(store, undefined, false);\n\t\treturn c.json({ items });\n\t});\n\n\tapp.get(\"/api/sync/share-operations/:operationId\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\tconst [item] = await shareOperationReadModels(store, operationId);\n\t\treturn item ? c.json(item) : c.json({ error: \"operation_not_found\" }, 404);\n\t});\n\n\tconst advanceProjectShare = async (c: Context) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst advanced = await advanceProjectShareOperation(store, operationId);\n\t\t\tif (!advanced.advanced) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror:\n\t\t\t\t\t\t\tadvanced.state === \"cancelled\" ? \"operation_superseded\" : \"invitation_not_accepted\",\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [operation] = await shareOperationReadModels(store, operationId);\n\t\t\treturn c.json({ ok: true, operation });\n\t\t} catch (error) {\n\t\t\tconst code = error instanceof Error ? error.message : \"provisioning_failed\";\n\t\t\tconst state = store.db\n\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t.pluck()\n\t\t\t\t.get(operationId);\n\t\t\tif (state === \"cancelled\") {\n\t\t\t\treturn c.json({ error: \"operation_superseded\" }, 409);\n\t\t\t}\n\t\t\treturn c.json({ error: code }, code === \"operation_not_found\" ? 404 : 409);\n\t\t}\n\t};\n\n\tapp.post(\"/api/sync/share-operations/:operationId/advance\", advanceProjectShare);\n\n\tapp.post(\"/api/sync/project-invites/:operationId/provision\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst operationId = String(c.req.param(\"operationId\") ?? \"\").trim();\n\t\tif (!/^share_[a-f0-9]{40}$/u.test(operationId)) {\n\t\t\treturn c.json({ error: \"operation_id_invalid\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst plan = await executeProjectShareProvisioning(store, operationId);\n\t\t\tif (plan.superseded) {\n\t\t\t\t// Consistent with /advance: a supersession race is a conflict, not a\n\t\t\t\t// success with a flag.\n\t\t\t\treturn c.json({ error: \"operation_superseded\" }, 409);\n\t\t\t}\n\t\t\treturn c.json({ ok: true, operation_id: operationId, state: \"active\", plan });\n\t\t} catch (error) {\n\t\t\tconst code = error instanceof Error ? error.message : \"provisioning_failed\";\n\t\t\tconst state = store.db\n\t\t\t\t.prepare(\"SELECT state FROM share_operations WHERE operation_id = ?\")\n\t\t\t\t.pluck()\n\t\t\t\t.get(operationId);\n\t\t\tif (state === \"cancelled\") {\n\t\t\t\treturn c.json({ error: \"operation_superseded\" }, 409);\n\t\t\t}\n\t\t\treturn c.json({ error: code }, code === \"operation_not_found\" ? 404 : 409);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/legacy-shared-review/reassign\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\ttry {\n\t\t\tconst workspaceIdentity = optionalViewerStrictString(body, \"workspace_identity\") ?? \"\";\n\t\t\tconst scopeId = optionalViewerStrictString(body, \"scope_id\") ?? \"\";\n\t\t\tconst confirmationToken = optionalViewerStrictString(body, \"confirmation_token\");\n\t\t\tconst confirmedOldCopies = body.confirmed_old_copies === true;\n\t\t\tconst preview = legacySharedReviewReassignmentPreview(store, {\n\t\t\t\tscopeId,\n\t\t\t\tworkspaceIdentity,\n\t\t\t});\n\t\t\tif (!confirmedOldCopies) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"legacy_review_confirmation_required\",\n\t\t\t\t\t\tmessage: preview.warning,\n\t\t\t\t\t\tpreview,\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\treassignLegacySharedReviewGroup(store, {\n\t\t\t\t\tconfirmationToken,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tworkspaceIdentity,\n\t\t\t\t}),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message }, message.includes(\"not found\") ? 404 : 400);\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/sharing-domains/project-mappings\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\tconst confirmedGuardrailTokens = optionalViewerStringList(body, \"confirmed_guardrail_tokens\");\n\t\t\tconst mappingInput = parseViewerProjectMappingInput(body);\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tconst analysis = analyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput);\n\t\t\tif (analysis.requested_workspace_identity?.startsWith(\"unmapped:\")) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"unmapped_project_local_only\",\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\"Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.\",\n\t\t\t\t\t\tguardrail_warnings: analysis.warnings,\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst missingConfirmations = missingGuardrailConfirmations(\n\t\t\t\tanalysis.warnings,\n\t\t\t\tconfirmedGuardrailTokens,\n\t\t\t);\n\t\t\tif (missingConfirmations.length > 0) {\n\t\t\t\tconst missingCodes = [...new Set(missingConfirmations.map((warning) => warning.code))];\n\t\t\t\tconst missingTokens = [\n\t\t\t\t\t...new Set(missingConfirmations.map((warning) => warning.confirmation_token)),\n\t\t\t\t].filter((token): token is string => typeof token === \"string\" && token.length > 0);\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"guardrail_confirmation_required\",\n\t\t\t\t\t\trequired_guardrails: missingCodes,\n\t\t\t\t\t\trequired_guardrail_tokens: missingTokens,\n\t\t\t\t\t\tguardrail_warnings: analysis.warnings,\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst mapping = upsertProjectScopeSettingsMapping(store.db, {\n\t\t\t\tdeviceId,\n\t\t\t\t...mappingInput,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, mapping, guardrail_warnings: analysis.warnings });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\tapp.put(\"/api/sync/sharing-domains/project-mappings/bulk\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\" }, 400);\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\tconst rawMappings = body.mappings;\n\t\t\tif (!Array.isArray(rawMappings) || rawMappings.length === 0) {\n\t\t\t\treturn c.json({ error: \"mappings must be a non-empty array\" }, 400);\n\t\t\t}\n\t\t\tconst mappingInputs = rawMappings.map((raw) => {\n\t\t\t\tif (raw == null || typeof raw !== \"object\" || Array.isArray(raw)) {\n\t\t\t\t\tthrow new Error(\"each mapping must be an object\");\n\t\t\t\t}\n\t\t\t\treturn parseViewerProjectMappingInput(raw as Record<string, unknown>);\n\t\t\t});\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tconst analyses = mappingInputs.map((mappingInput) =>\n\t\t\t\tanalyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput),\n\t\t\t);\n\t\t\tconst unmapped = analyses.find((analysis) =>\n\t\t\t\tanalysis.requested_workspace_identity?.startsWith(\"unmapped:\"),\n\t\t\t);\n\t\t\tif (unmapped) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"unmapped_project_local_only\",\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\"Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.\",\n\t\t\t\t\t\tguardrail_warnings: unmapped.warnings,\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst missingConfirmations = analyses.flatMap((analysis) =>\n\t\t\t\tmissingGuardrailConfirmations(analysis.warnings, []),\n\t\t\t);\n\t\t\tif (missingConfirmations.length > 0) {\n\t\t\t\tconst missingCodes = [...new Set(missingConfirmations.map((warning) => warning.code))];\n\t\t\t\tconst missingTokens = [\n\t\t\t\t\t...new Set(missingConfirmations.map((warning) => warning.confirmation_token)),\n\t\t\t\t].filter((token): token is string => typeof token === \"string\" && token.length > 0);\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: \"guardrail_confirmation_required\",\n\t\t\t\t\t\trequired_guardrails: missingCodes,\n\t\t\t\t\t\trequired_guardrail_tokens: missingTokens,\n\t\t\t\t\t\tguardrail_warnings: analyses.flatMap((analysis) => analysis.warnings),\n\t\t\t\t\t},\n\t\t\t\t\t409,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst [deviceId] = ensureDeviceIdentity(store.db, { keysDir: syncKeysDir() });\n\t\t\tconst saveMappings = store.db.transaction(() =>\n\t\t\t\tmappingInputs.map((mappingInput) =>\n\t\t\t\t\tupsertProjectScopeSettingsMapping(store.db, { deviceId, ...mappingInput }),\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tmappings: saveMappings(),\n\t\t\t\tguardrail_warnings: analyses.flatMap((analysis) => analysis.warnings),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\tapp.delete(\"/api/sync/sharing-domains/project-mappings/:id\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst id = Number(c.req.param(\"id\"));\n\t\tlet releasePublicationMutation: (() => void) | undefined;\n\t\ttry {\n\t\t\treleasePublicationMutation = await claimRecipientPolicyPublicationMutation(store.db);\n\t\t\tconst deleted = deleteProjectScopeSettingsMapping(store.db, id);\n\t\t\treturn c.json({ ok: true, deleted });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t} finally {\n\t\t\treleasePublicationMutation?.();\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/peers/identity\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\tconst requestedActorId =\n\t\t\tbody.actor_id == null ? undefined : String(body.actor_id ?? \"\").trim() || null;\n\t\tconst claimedLocalActor =\n\t\t\ttypeof body.claimed_local_actor === \"boolean\" ? body.claimed_local_actor : undefined;\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst peer = d\n\t\t\t.select({\n\t\t\t\tpeer_device_id: schema.syncPeers.peer_device_id,\n\t\t\t\tactor_id: schema.syncPeers.actor_id,\n\t\t\t\tclaimed_local_actor: schema.syncPeers.claimed_local_actor,\n\t\t\t})\n\t\t\t.from(schema.syncPeers)\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.get();\n\t\tif (!peer) return c.json({ error: \"peer not found\" }, 404);\n\n\t\tlet nextActorId = peer.actor_id ?? null;\n\t\tlet nextClaimedLocalActor = Boolean(peer.claimed_local_actor);\n\t\tif (requestedActorId !== undefined) {\n\t\t\tnextActorId = requestedActorId;\n\t\t\tif (requestedActorId) {\n\t\t\t\tconst actor = d\n\t\t\t\t\t.select({\n\t\t\t\t\t\tactor_id: schema.actors.actor_id,\n\t\t\t\t\t\tis_local: schema.actors.is_local,\n\t\t\t\t\t\tstatus: schema.actors.status,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.actors)\n\t\t\t\t\t.where(eq(schema.actors.actor_id, requestedActorId))\n\t\t\t\t\t.get();\n\t\t\t\tif (!actor) return c.json({ error: \"actor not found\" }, 404);\n\t\t\t\tif (actor.status !== \"active\") return c.json({ error: \"actor not active\" }, 409);\n\t\t\t\tnextClaimedLocalActor = claimedLocalActor ?? Boolean(actor.is_local);\n\t\t\t} else {\n\t\t\t\tnextClaimedLocalActor = claimedLocalActor ?? false;\n\t\t\t}\n\t\t} else if (claimedLocalActor !== undefined) {\n\t\t\tnextClaimedLocalActor = claimedLocalActor;\n\t\t\tif (claimedLocalActor) {\n\t\t\t\tnextActorId = store.actorId;\n\t\t\t} else if (nextActorId === store.actorId) {\n\t\t\t\tnextActorId = null;\n\t\t\t}\n\t\t}\n\n\t\td.update(schema.syncPeers)\n\t\t\t.set({\n\t\t\t\tactor_id: nextActorId,\n\t\t\t\tclaimed_local_actor: nextClaimedLocalActor ? 1 : 0,\n\t\t\t})\n\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t.run();\n\t\treturn c.json({ ok: true, actor_id: nextActorId, claimed_local_actor: nextClaimedLocalActor });\n\t});\n\n\tapp.post(\"/api/sync/actors\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst rawDisplayName = String(body.display_name ?? \"\");\n\t\tif (!rawDisplayName.trim()) return c.json({ error: \"display_name required\" }, 400);\n\t\tlet displayName: string;\n\t\ttry {\n\t\t\tdisplayName = normalizeHumanPresentationName(rawDisplayName, \"display_name\");\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"display_name_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst now = new Date().toISOString();\n\t\tconst actor = {\n\t\t\tactor_id: randomUUID(),\n\t\t\tdisplay_name: displayName,\n\t\t\tis_local: 0,\n\t\t\tstatus: \"active\",\n\t\t\tmerged_into_actor_id: null,\n\t\t\tcreated_at: now,\n\t\t\tupdated_at: now,\n\t\t};\n\t\td.insert(schema.actors).values(actor).run();\n\t\treturn c.json(actor);\n\t});\n\n\tapp.post(\"/api/sync/actors/rename\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst actorId = String(body.actor_id ?? \"\").trim();\n\t\tif (!actorId) return c.json({ error: \"actor_id required\" }, 400);\n\t\tlet displayName: string;\n\t\ttry {\n\t\t\tdisplayName = normalizeHumanPresentationName(String(body.display_name ?? \"\"), \"display_name\");\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"display_name_invalid\" },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst actor = d.select().from(schema.actors).where(eq(schema.actors.actor_id, actorId)).get();\n\t\tif (!actor) return c.json({ error: \"actor not found\" }, 404);\n\t\tconst updatedAt = new Date().toISOString();\n\t\td.update(schema.actors)\n\t\t\t.set({ display_name: displayName, updated_at: updatedAt })\n\t\t\t.where(eq(schema.actors.actor_id, actorId))\n\t\t\t.run();\n\t\treturn c.json({ ...actor, display_name: displayName, updated_at: updatedAt });\n\t});\n\n\tapp.post(\"/api/sync/actors/merge\", async (c) => {\n\t\tconst store = getStore();\n\t\tensureLocalActorRecord(store);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst primaryActorId = String(body.primary_actor_id ?? \"\").trim();\n\t\tconst secondaryActorId = String(body.secondary_actor_id ?? \"\").trim();\n\t\tif (!primaryActorId) return c.json({ error: \"primary_actor_id required\" }, 400);\n\t\tif (!secondaryActorId) return c.json({ error: \"secondary_actor_id required\" }, 400);\n\t\tif (primaryActorId === secondaryActorId) return c.json({ error: \"actor ids must differ\" }, 400);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst releaseActorMutations = await claimRecipientPolicyActorMutations(store.db, [\n\t\t\tprimaryActorId,\n\t\t\tsecondaryActorId,\n\t\t]);\n\t\t// This transaction is synchronous. Deferring release prevents a thrown transaction\n\t\t// from leaking the lock while keeping it held through every mutation below.\n\t\tqueueMicrotask(releaseActorMutations);\n\t\tconst now = new Date().toISOString();\n\t\tconst result = store.db\n\t\t\t.transaction(() => {\n\t\t\t\tconst primary = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.actors)\n\t\t\t\t\t.where(eq(schema.actors.actor_id, primaryActorId))\n\t\t\t\t\t.get();\n\t\t\t\tconst secondary = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.actors)\n\t\t\t\t\t.where(eq(schema.actors.actor_id, secondaryActorId))\n\t\t\t\t\t.get();\n\t\t\t\tif (!primary || !secondary) return { error: \"actor not found\", status: 404 as const };\n\t\t\t\tif (primary.status !== \"active\") {\n\t\t\t\t\treturn { error: \"primary actor not active\", status: 409 as const };\n\t\t\t\t}\n\t\t\t\tif (secondary.status !== \"active\") {\n\t\t\t\t\treturn { error: \"secondary actor not active\", status: 409 as const };\n\t\t\t\t}\n\t\t\t\tif (secondary.is_local && secondary.actor_id === store.actorId) {\n\t\t\t\t\treturn { error: \"cannot merge this device's own local actor\", status: 409 as const };\n\t\t\t\t}\n\t\t\t\tconst memberships = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.policyTeamMemberships)\n\t\t\t\t\t.where(eq(schema.policyTeamMemberships.identity_id, secondaryActorId))\n\t\t\t\t\t.all();\n\t\t\t\tconst primaryMemberships = new Map<string, (typeof memberships)[number] | undefined>();\n\t\t\t\tfor (const membership of memberships) {\n\t\t\t\t\tconst primaryMembership = d\n\t\t\t\t\t\t.select()\n\t\t\t\t\t\t.from(schema.policyTeamMemberships)\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.team_id, membership.team_id),\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.identity_id, primaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.get();\n\t\t\t\t\tif (\n\t\t\t\t\t\tprimaryMembership &&\n\t\t\t\t\t\t(primaryMembership.role !== membership.role ||\n\t\t\t\t\t\t\tprimaryMembership.status !== membership.status)\n\t\t\t\t\t) {\n\t\t\t\t\t\treturn { error: \"actor team memberships conflict\", status: 409 as const };\n\t\t\t\t\t}\n\t\t\t\t\tprimaryMemberships.set(membership.team_id, primaryMembership);\n\t\t\t\t}\n\t\t\t\tconst directRecipients = d\n\t\t\t\t\t.select()\n\t\t\t\t\t.from(schema.projectRecipients)\n\t\t\t\t\t.where(\n\t\t\t\t\t\tand(\n\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, secondaryActorId),\n\t\t\t\t\t\t),\n\t\t\t\t\t)\n\t\t\t\t\t.all();\n\t\t\t\tconst primaryRecipients = new Map<string, (typeof directRecipients)[number] | undefined>();\n\t\t\t\tfor (const recipient of directRecipients) {\n\t\t\t\t\tconst primaryRecipient = d\n\t\t\t\t\t\t.select()\n\t\t\t\t\t\t.from(schema.projectRecipients)\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(\n\t\t\t\t\t\t\t\t\tschema.projectRecipients.canonical_project_identity,\n\t\t\t\t\t\t\t\t\trecipient.canonical_project_identity,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, primaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.get();\n\t\t\t\t\tif (primaryRecipient && primaryRecipient.status !== recipient.status) {\n\t\t\t\t\t\treturn { error: \"actor project recipients conflict\", status: 409 as const };\n\t\t\t\t\t}\n\t\t\t\t\tprimaryRecipients.set(recipient.canonical_project_identity, primaryRecipient);\n\t\t\t\t}\n\n\t\t\t\tconst mergeDigest = createHash(\"sha256\")\n\t\t\t\t\t.update(\n\t\t\t\t\t\tJSON.stringify({\n\t\t\t\t\t\t\tkind: \"identity-merge-v1\",\n\t\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\t\tnonce: randomUUID(),\n\t\t\t\t\t\t}),\n\t\t\t\t\t)\n\t\t\t\t\t.digest(\"hex\");\n\t\t\t\tconst bindings = d\n\t\t\t\t\t.select({\n\t\t\t\t\t\tdeviceId: schema.identityDevices.device_id,\n\t\t\t\t\t\tassignmentVersion: schema.identityDevices.assignment_version,\n\t\t\t\t\t})\n\t\t\t\t\t.from(schema.identityDevices)\n\t\t\t\t\t.where(eq(schema.identityDevices.identity_id, secondaryActorId))\n\t\t\t\t\t.all();\n\t\t\t\tif (bindings.length > 0) {\n\t\t\t\t\tconst commitDigest = mergeDigest;\n\t\t\t\t\tconst outcomes = bindings.map((binding) => ({\n\t\t\t\t\t\tdeviceId: binding.deviceId,\n\t\t\t\t\t\tpreviousIdentityId: secondaryActorId,\n\t\t\t\t\t\ttargetIdentityId: primaryActorId,\n\t\t\t\t\t\taction: \"rebind\",\n\t\t\t\t\t}));\n\t\t\t\t\tstore.db\n\t\t\t\t\t\t.prepare(`INSERT INTO device_identity_binding_commits(\n\t\t\t\t\t\tcommit_digest, reviewed_inventory_digest, request_json, outcomes_json, write_count,\n\t\t\t\t\t\tdecided_by_identity_id, decided_by_device_id, created_at\n\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)\n\t\t\t\t\t\t.run(\n\t\t\t\t\t\t\tcommitDigest,\n\t\t\t\t\t\t\t`identity-merge:${secondaryActorId}:${primaryActorId}`,\n\t\t\t\t\t\t\tJSON.stringify({ primaryActorId, secondaryActorId }),\n\t\t\t\t\t\t\tJSON.stringify(outcomes),\n\t\t\t\t\t\t\tbindings.length,\n\t\t\t\t\t\t\tstore.actorId,\n\t\t\t\t\t\t\tstore.deviceId,\n\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t);\n\n\t\t\t\t\tfor (const binding of bindings) {\n\t\t\t\t\t\tconst revision = createHash(\"sha256\")\n\t\t\t\t\t\t\t.update(`identity-merge-revision-v1\\0${commitDigest}\\0${binding.deviceId}`)\n\t\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\t\tconst idempotencyKey = createHash(\"sha256\")\n\t\t\t\t\t\t\t.update(`identity-merge-row-v1\\0${commitDigest}\\0${binding.deviceId}`)\n\t\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\t\tconst bindingUpdate = store.db\n\t\t\t\t\t\t\t.prepare(`UPDATE identity_devices SET\n\t\t\t\t\t\t\tidentity_id = ?, provenance = 'review_resolution', revision = ?,\n\t\t\t\t\t\t\tmigration_state = 'user_managed', source_fingerprint = ?,\n\t\t\t\t\t\t\tidempotency_key = ?, updated_at = ?\n\t\t\t\t\t\t WHERE device_id = ? AND identity_id = ?`)\n\t\t\t\t\t\t\t.run(\n\t\t\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\t\t\trevision,\n\t\t\t\t\t\t\t\tcommitDigest,\n\t\t\t\t\t\t\t\tidempotencyKey,\n\t\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t\t\tbinding.deviceId,\n\t\t\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\tif (bindingUpdate.changes !== 1)\n\t\t\t\t\t\t\tthrow new Error(\"identity_merge_binding_update_failed\");\n\t\t\t\t\t\tconst rebound = store.db\n\t\t\t\t\t\t\t.prepare(\"SELECT assignment_version FROM identity_devices WHERE device_id = ?\")\n\t\t\t\t\t\t\t.get(binding.deviceId) as { assignment_version: number } | undefined;\n\t\t\t\t\t\tif (!rebound || rebound.assignment_version !== binding.assignmentVersion + 1) {\n\t\t\t\t\t\t\tthrow new Error(\"identity_merge_assignment_version_unexpected\");\n\t\t\t\t\t\t}\n\t\t\t\t\t\tstore.db\n\t\t\t\t\t\t\t.prepare(\"DELETE FROM policy_team_device_decisions WHERE device_id = ?\")\n\t\t\t\t\t\t\t.run(binding.deviceId);\n\t\t\t\t\t\tstore.db\n\t\t\t\t\t\t\t.prepare(`INSERT INTO device_identity_binding_audit(\n\t\t\t\t\t\t\tevent_id, commit_digest, device_id, previous_identity_id, target_identity_id,\n\t\t\t\t\t\t\taction, previous_assignment_version, resulting_assignment_version,\n\t\t\t\t\t\t\tdecided_by_identity_id, decided_by_device_id, created_at\n\t\t\t\t\t\t) VALUES (?, ?, ?, ?, ?, 'rebind', ?, ?, ?, ?, ?)`)\n\t\t\t\t\t\t\t.run(\n\t\t\t\t\t\t\t\tcreateHash(\"sha256\")\n\t\t\t\t\t\t\t\t\t.update(`identity-merge-event-v1\\0${commitDigest}\\0${binding.deviceId}`)\n\t\t\t\t\t\t\t\t\t.digest(\"hex\"),\n\t\t\t\t\t\t\t\tcommitDigest,\n\t\t\t\t\t\t\t\tbinding.deviceId,\n\t\t\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\t\t\tbinding.assignmentVersion,\n\t\t\t\t\t\t\t\trebound.assignment_version,\n\t\t\t\t\t\t\t\tstore.actorId,\n\t\t\t\t\t\t\t\tstore.deviceId,\n\t\t\t\t\t\t\t\tnow,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tfor (const membership of memberships) {\n\t\t\t\t\tconst primaryMembership = primaryMemberships.get(membership.team_id);\n\t\t\t\t\tif (primaryMembership) {\n\t\t\t\t\t\td.delete(schema.policyTeamMemberships)\n\t\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.team_id, membership.team_id),\n\t\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.identity_id, secondaryActorId),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.run();\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst revision = createHash(\"sha256\")\n\t\t\t\t\t\t.update(`identity-merge-membership-revision-v1\\0${mergeDigest}\\0${membership.team_id}`)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\tconst idempotencyKey = createHash(\"sha256\")\n\t\t\t\t\t\t.update(`identity-merge-membership-row-v1\\0${mergeDigest}\\0${membership.team_id}`)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\td.update(schema.policyTeamMemberships)\n\t\t\t\t\t\t.set({\n\t\t\t\t\t\t\tidentity_id: primaryActorId,\n\t\t\t\t\t\t\tprovenance: \"review_resolution\",\n\t\t\t\t\t\t\trevision,\n\t\t\t\t\t\t\tmigration_state: \"user_managed\",\n\t\t\t\t\t\t\tsource_fingerprint: mergeDigest,\n\t\t\t\t\t\t\tidempotency_key: idempotencyKey,\n\t\t\t\t\t\t\tupdated_at: now,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.team_id, membership.team_id),\n\t\t\t\t\t\t\t\teq(schema.policyTeamMemberships.identity_id, secondaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.run();\n\t\t\t\t}\n\t\t\t\tfor (const recipient of directRecipients) {\n\t\t\t\t\tconst primaryRecipient = primaryRecipients.get(recipient.canonical_project_identity);\n\t\t\t\t\tif (primaryRecipient) {\n\t\t\t\t\t\td.delete(schema.projectRecipients)\n\t\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\t\teq(\n\t\t\t\t\t\t\t\t\t\tschema.projectRecipients.canonical_project_identity,\n\t\t\t\t\t\t\t\t\t\trecipient.canonical_project_identity,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, secondaryActorId),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t.run();\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst policyRevision = createHash(\"sha256\")\n\t\t\t\t\t\t.update(\n\t\t\t\t\t\t\t`identity-merge-recipient-revision-v1\\0${mergeDigest}\\0${recipient.canonical_project_identity}`,\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\tconst idempotencyKey = createHash(\"sha256\")\n\t\t\t\t\t\t.update(\n\t\t\t\t\t\t\t`identity-merge-recipient-row-v1\\0${mergeDigest}\\0${recipient.canonical_project_identity}`,\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.digest(\"hex\");\n\t\t\t\t\td.update(schema.projectRecipients)\n\t\t\t\t\t\t.set({\n\t\t\t\t\t\t\trecipient_id: primaryActorId,\n\t\t\t\t\t\t\tprovenance: \"review_resolution\",\n\t\t\t\t\t\t\tpolicy_revision: policyRevision,\n\t\t\t\t\t\t\tmigration_state: \"user_managed\",\n\t\t\t\t\t\t\tsource_fingerprint: mergeDigest,\n\t\t\t\t\t\t\tidempotency_key: idempotencyKey,\n\t\t\t\t\t\t\tupdated_at: now,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.where(\n\t\t\t\t\t\t\tand(\n\t\t\t\t\t\t\t\teq(\n\t\t\t\t\t\t\t\t\tschema.projectRecipients.canonical_project_identity,\n\t\t\t\t\t\t\t\t\trecipient.canonical_project_identity,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_kind, \"identity\"),\n\t\t\t\t\t\t\t\teq(schema.projectRecipients.recipient_id, secondaryActorId),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t)\n\t\t\t\t\t\t.run();\n\t\t\t\t}\n\t\t\t\td.update(schema.recipientManagedProjectProjections)\n\t\t\t\t\t.set({ recipient_identity_id: primaryActorId, updated_at: now })\n\t\t\t\t\t.where(\n\t\t\t\t\t\teq(schema.recipientManagedProjectProjections.recipient_identity_id, secondaryActorId),\n\t\t\t\t\t)\n\t\t\t\t\t.run();\n\t\t\t\tstore.db\n\t\t\t\t\t.prepare(`UPDATE share_operations SET\n\t\t\t\t\t\tinviter_actor_id = CASE WHEN inviter_actor_id = ? THEN ? ELSE inviter_actor_id END,\n\t\t\t\t\t\trecipient_actor_id = CASE WHEN recipient_actor_id = ? THEN ? ELSE recipient_actor_id END,\n\t\t\t\t\t\tperson_id = CASE WHEN person_id = ? THEN ? ELSE person_id END,\n\t\t\t\t\t\tupdated_at = ?\n\t\t\t\t\t WHERE inviter_actor_id = ? OR recipient_actor_id = ? OR person_id = ?`)\n\t\t\t\t\t.run(\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tprimaryActorId,\n\t\t\t\t\t\tnow,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t\tsecondaryActorId,\n\t\t\t\t\t);\n\n\t\t\t\tconst peerUpdate = d\n\t\t\t\t\t.update(schema.syncPeers)\n\t\t\t\t\t.set({ actor_id: primaryActorId })\n\t\t\t\t\t.where(eq(schema.syncPeers.actor_id, secondaryActorId))\n\t\t\t\t\t.run();\n\t\t\t\tif (primary.is_local) {\n\t\t\t\t\td.update(schema.syncPeers)\n\t\t\t\t\t\t.set({ claimed_local_actor: 1 })\n\t\t\t\t\t\t.where(eq(schema.syncPeers.actor_id, primaryActorId))\n\t\t\t\t\t\t.run();\n\t\t\t\t}\n\t\t\t\td.update(schema.actors)\n\t\t\t\t\t.set({ status: \"merged\", merged_into_actor_id: primaryActorId, updated_at: now })\n\t\t\t\t\t.where(eq(schema.actors.actor_id, secondaryActorId))\n\t\t\t\t\t.run();\n\t\t\t\treturn { mergedCount: Number(peerUpdate.changes ?? 0) };\n\t\t\t})\n\t\t\t.immediate();\n\t\tif (\"error\" in result) return c.json({ error: result.error }, result.status);\n\t\treturn c.json({ merged_count: result.mergedCount });\n\t});\n\n\tapp.post(\"/api/sync/actors/deactivate\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst actorId = String(body.actor_id ?? \"\").trim();\n\t\tif (!actorId) return c.json({ error: \"actor_id required\" }, 400);\n\t\tif (actorId === store.actorId) {\n\t\t\treturn c.json({ error: \"cannot deactivate this device's own local actor\" }, 409);\n\t\t}\n\t\tconst releaseActorMutations = await claimRecipientPolicyActorMutations(store.db, [actorId]);\n\t\t// All following reads and writes are synchronous, so release after this turn.\n\t\tqueueMicrotask(releaseActorMutations);\n\t\tconst d = drizzle(store.db, { schema });\n\t\tconst actor = d.select().from(schema.actors).where(eq(schema.actors.actor_id, actorId)).get();\n\t\tif (!actor) return c.json({ error: \"actor not found\" }, 404);\n\t\tif (actor.status !== \"active\") return c.json({ error: \"actor not active\" }, 409);\n\t\tconst now = new Date().toISOString();\n\t\td.update(schema.actors)\n\t\t\t.set({ status: \"deactivated\", updated_at: now })\n\t\t\t.where(eq(schema.actors.actor_id, actorId))\n\t\t\t.run();\n\t\td.update(schema.syncPeers)\n\t\t\t.set({ actor_id: null })\n\t\t\t.where(eq(schema.syncPeers.actor_id, actorId))\n\t\t\t.run();\n\t\treturn c.json({ ok: true });\n\t});\n\n\tapp.post(\"/api/sync/legacy-devices/claim\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst originDeviceId = String(body.origin_device_id ?? \"\").trim();\n\t\tif (!originDeviceId) return c.json({ error: \"origin_device_id required\" }, 400);\n\t\tconst updated = claimLegacyDeviceAsSelf(store, originDeviceId);\n\t\tif (updated <= 0) return c.json({ error: \"legacy device not found\" }, 404);\n\t\treturn c.json({ ok: true, origin_device_id: originDeviceId, updated });\n\t});\n\n\tapp.post(\"/api/sync/peers/accept-discovered\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\tconst fingerprint = String(body.fingerprint ?? \"\").trim();\n\t\tconst expectedGroupId = String(body.expected_group_id ?? \"\").trim();\n\t\tconst hasExpectedIncomingRequestId = Object.hasOwn(body, \"expected_incoming_request_id\");\n\t\tconst expectedIncomingRequestId = String(body.expected_incoming_request_id ?? \"\").trim();\n\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\tif (hasExpectedIncomingRequestId && !expectedIncomingRequestId) {\n\t\t\treturn c.json({ error: \"expected_incoming_request_id must not be empty\" }, 400);\n\t\t}\n\t\tif (expectedIncomingRequestId && !expectedGroupId) {\n\t\t\treturn c.json({ error: \"expected_group_id required\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await acceptDiscoveredPeer(store, {\n\t\t\t\tpeerDeviceId,\n\t\t\t\tfingerprint: fingerprint || undefined,\n\t\t\t\texpectedGroupId: expectedGroupId || undefined,\n\t\t\t\texpectedIncomingRequestId: expectedIncomingRequestId || undefined,\n\t\t\t});\n\t\t\tif (!result.ok) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: result.error,\n\t\t\t\t\t\tdetail: result.detail,\n\t\t\t\t\t\t...(result.reason ? { reason: result.reason } : {}),\n\t\t\t\t\t},\n\t\t\t\t\t{ status: result.status as 400 | 404 | 409 },\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tpeer_device_id: result.peer_device_id,\n\t\t\t\tcreated: result.created,\n\t\t\t\tupdated: result.updated,\n\t\t\t\tname: result.name,\n\t\t\t\tneeds_scope_review: true,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (error instanceof CoordinatorReciprocalApprovalRequestChangedError) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: error.code,\n\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\"This approval request changed before it was submitted. Refresh sync status and review the current request.\",\n\t\t\t\t\t},\n\t\t\t\t\t{ status: 409 },\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"coordinator_lookup_failed\",\n\t\t\t\t\tdetail: error instanceof Error ? error.message : String(error),\n\t\t\t\t},\n\t\t\t\t{ status: 502 },\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/invites/create\", async (c) => {\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst groupId = String(body.group_id ?? \"\").trim();\n\t\tconst coordinatorUrl = body.coordinator_url == null ? null : String(body.coordinator_url ?? \"\");\n\t\tconst policy = String(body.policy ?? \"auto_admit\").trim();\n\t\tconst ttlHours = parseInviteTtlHours(body.ttl_hours);\n\t\tif (!groupId) return c.json({ error: \"group_id required\" }, 400);\n\t\tif (body.coordinator_url != null && typeof body.coordinator_url !== \"string\") {\n\t\t\treturn c.json({ error: \"coordinator_url must be string\" }, 400);\n\t\t}\n\t\tif (![\"auto_admit\", \"approval_required\"].includes(policy)) {\n\t\t\treturn c.json({ error: \"policy must be auto_admit or approval_required\" }, 400);\n\t\t}\n\t\tif (ttlHours == null) return c.json({ error: \"ttl_hours must be an integer >= 1\" }, 400);\n\t\ttry {\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst result = await coordinatorCreateInviteAction({\n\t\t\t\tgroupId,\n\t\t\t\tcoordinatorUrl,\n\t\t\t\tpolicy,\n\t\t\t\tttlHours,\n\t\t\t\tcreatedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json(result);\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/invites/inspect\", async (c) => {\n\t\tconst store = getStore();\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body || typeof body.invite !== \"string\") return c.json({ error: \"invite_invalid\" }, 400);\n\t\ttry {\n\t\t\tconst payload = decodeInvitePayload(extractInvitePayload(body.invite));\n\t\t\tconst recipientInvite = payload.kind === \"team_member\" || payload.kind === \"add_device\";\n\t\t\tif (recipientInvite) ensureStableStoreDeviceIdentity(store);\n\t\t\telse ensureStableStoreIdentity(store);\n\t\t\tif (!payload.operation_id && !recipientInvite) return c.json({ kind: \"legacy_team_invite\" });\n\t\t\tconst [status, inspected] = await requestJson(\n\t\t\t\t\"POST\",\n\t\t\t\t`${buildBaseUrl(payload.coordinator_url)}/v1/invites/inspect`,\n\t\t\t\t{ body: { token: payload.token }, timeoutS: 10 },\n\t\t\t);\n\t\t\tif (status < 200 || status >= 300) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror: recipientInvite\n\t\t\t\t\t\t\t? safeRecipientInviteError(inspected?.error)\n\t\t\t\t\t\t\t: String(inspected?.error ?? \"invite_invalid\"),\n\t\t\t\t\t},\n\t\t\t\t\tstatus === 410 ? 410 : 400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst config = readCodememConfigFile();\n\t\t\tconst identityId = recipientInvite\n\t\t\t\t? recipientInviteAuthoritativeIdentityId({\n\t\t\t\t\t\tkind: payload.kind as \"team_member\" | \"add_device\",\n\t\t\t\t\t\tassigned_identity_id: inspected?.assigned_identity_id,\n\t\t\t\t\t\ttarget_identity_id: inspected?.target_identity_id,\n\t\t\t\t\t})\n\t\t\t\t: store.actorId;\n\t\t\tconst expectedTarget =\n\t\t\t\tpayload.kind === \"team_member\"\n\t\t\t\t\t? String(inspected?.policy_team_id ?? \"\").trim()\n\t\t\t\t\t: String(inspected?.target_identity_id ?? \"\").trim();\n\t\t\tif (recipientInvite) {\n\t\t\t\tif (\n\t\t\t\t\tString(inspected?.kind ?? \"\").trim() !== payload.kind ||\n\t\t\t\t\t!expectedTarget ||\n\t\t\t\t\tString(inspected?.reviewed_preview_digest ?? \"\").trim() !==\n\t\t\t\t\t\tString(payload.reviewed_preview_digest ?? \"\").trim() ||\n\t\t\t\t\t(payload.kind === \"team_member\" && expectedTarget !== payload.policy_team_id) ||\n\t\t\t\t\t(payload.kind === \"team_member\" &&\n\t\t\t\t\t\t(identityId !== String(payload.assigned_identity_id ?? \"\").trim() || !identityId)) ||\n\t\t\t\t\t(payload.kind === \"add_device\" && expectedTarget !== payload.target_identity_id)\n\t\t\t\t) {\n\t\t\t\t\treturn c.json({ error: \"recipient_invite_intent_mismatch\" }, 409);\n\t\t\t\t}\n\t\t\t\tif (inspected?.reviewed_intent == null) {\n\t\t\t\t\treturn c.json({ error: \"recipient_invite_review_unavailable\" }, 409);\n\t\t\t\t}\n\t\t\t\tlet reviewedIntent: RecipientReviewedIntentV1;\n\t\t\t\ttry {\n\t\t\t\t\treviewedIntent = await verifyRecipientReviewedIntent(inspected.reviewed_intent, {\n\t\t\t\t\t\ttarget:\n\t\t\t\t\t\t\tpayload.kind === \"team_member\"\n\t\t\t\t\t\t\t\t? { kind: \"team_member\", policyTeamId: expectedTarget }\n\t\t\t\t\t\t\t\t: { kind: \"add_device\", targetIdentityId: expectedTarget },\n\t\t\t\t\t\tdigest: String(payload.reviewed_preview_digest ?? \"\").trim(),\n\t\t\t\t\t});\n\t\t\t\t} catch {\n\t\t\t\t\treturn c.json({ error: \"recipient_invite_intent_mismatch\" }, 409);\n\t\t\t\t}\n\t\t\t\tconst preview = recipientInviteOnboardingPreviewFromReviewedIntent(\n\t\t\t\t\tstore,\n\t\t\t\t\t{\n\t\t\t\t\t\tkind: payload.kind,\n\t\t\t\t\t\tpolicy_team_id: payload.kind === \"team_member\" ? expectedTarget : null,\n\t\t\t\t\t\tassigned_identity_id: payload.kind === \"team_member\" ? identityId : null,\n\t\t\t\t\t\ttarget_identity_id: payload.kind === \"add_device\" ? identityId : null,\n\t\t\t\t\t\tdevice_name: optionalViewerString(body, \"device_name\"),\n\t\t\t\t\t},\n\t\t\t\t\tString(payload.token),\n\t\t\t\t\treviewedIntent,\n\t\t\t\t);\n\t\t\t\treturn c.json({\n\t\t\t\t\t...inspected,\n\t\t\t\t\trecipient_name:\n\t\t\t\t\t\treviewedIntent.journey === \"add_device\"\n\t\t\t\t\t\t\t? reviewedIntent.targetIdentity.displayName\n\t\t\t\t\t\t\t: store.actorDisplayName,\n\t\t\t\t\tdevice_name: preview.binding.deviceDisplayName,\n\t\t\t\t\tonboarding: preview,\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\t...inspected,\n\t\t\t\trecipient_name: store.actorDisplayName,\n\t\t\t\tdevice_name: friendlyDeviceName({\n\t\t\t\t\texplicitName: String(config.sync_device_name ?? \"\"),\n\t\t\t\t\tosName: hostname(),\n\t\t\t\t\tfallbackSeed: store.deviceId,\n\t\t\t\t}),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: safeRecipientInviteError(error) }, 400);\n\t\t}\n\t});\n\n\t// POST /api/sync/invites/import accepts both team invites (coordinator\n\t// invite envelope or codemem:// link) and device-pairing payloads\n\t// (base64 JSON with { device_id, fingerprint, public_key, addresses }).\n\t// The server discriminates by decoding the pasted text — UI callers get\n\t// one textarea for all flows. Response type distinguishes legacy Team joins,\n\t// exact-Project pending setup, recipient onboarding, and direct pairing.\n\tapp.post(\"/api/sync/invites/import\", async (c) => {\n\t\tconst store = getStore();\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst rawValue = String(body.invite ?? \"\").trim();\n\t\tif (!rawValue) return c.json({ error: \"invite required\" }, 400);\n\n\t\t// Users often paste the whole shell command emitted by the Pairing\n\t\t// diagnostics disclosure (`echo '<b64>' | base64 -d | codemem sync\n\t\t// pair --accept-file -`). Peel the base64 out if we see that shape.\n\t\tconst shellMatch = rawValue.match(\n\t\t\t/echo\\s+['\"]([A-Za-z0-9+/=]+)['\"]\\s*\\|\\s*base64\\s+-d\\s*\\|\\s*codemem/,\n\t\t);\n\t\tconst normalized = shellMatch?.[1]?.trim() || rawValue;\n\n\t\tconst pairingResult = tryParsePairingPayload(normalized);\n\t\tif (pairingResult?.kind === \"invalid-pair\") {\n\t\t\treturn c.json({ error: pairingResult.error }, 400);\n\t\t}\n\t\tif (pairingResult?.kind === \"pair\") {\n\t\t\ttry {\n\t\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\t\tconst existing = d\n\t\t\t\t\t.select({ pinned_fingerprint: schema.syncPeers.pinned_fingerprint })\n\t\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, pairingResult.device_id))\n\t\t\t\t\t.get();\n\t\t\t\tconst existingFingerprint = String(existing?.pinned_fingerprint ?? \"\").trim();\n\t\t\t\tif (existingFingerprint && existingFingerprint !== pairingResult.fingerprint) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror: \"peer_conflict\",\n\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\"Pairing payload conflicts with the existing trusted fingerprint for this device. Remove or repair the old peer before accepting this pairing payload.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t409,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tupdatePeerAddresses(store.db, pairingResult.device_id, pairingResult.addresses, {\n\t\t\t\t\tpinnedFingerprint: pairingResult.fingerprint,\n\t\t\t\t\tpublicKey: pairingResult.public_key,\n\t\t\t\t\treplaceTrust: true,\n\t\t\t\t});\n\t\t\t\treturn c.json({\n\t\t\t\t\tok: true,\n\t\t\t\t\ttype: \"pair\",\n\t\t\t\t\tpeer_device_id: pairingResult.device_id,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t\t}\n\t\t}\n\n\t\tlet projectInvite = false;\n\t\tlet recipientInvite = false;\n\t\ttry {\n\t\t\tconst decoded = decodeInvitePayload(extractInvitePayload(rawValue));\n\t\t\tprojectInvite = Boolean(decoded.operation_id);\n\t\t\trecipientInvite = decoded.kind === \"team_member\" || decoded.kind === \"add_device\";\n\t\t\tif (recipientInvite) ensureStableStoreDeviceIdentity(store);\n\t\t\telse ensureStableStoreIdentity(store);\n\t\t\tconst reviewedOnboardingDigest =\n\t\t\t\ttypeof body.reviewed_onboarding_digest === \"string\"\n\t\t\t\t\t? body.reviewed_onboarding_digest.trim()\n\t\t\t\t\t: \"\";\n\t\t\tif (recipientInvite && !reviewedOnboardingDigest) {\n\t\t\t\treturn c.json({ error: \"reviewed_onboarding_digest_required\" }, 400);\n\t\t\t}\n\t\t\tconst result = await coordinatorImportInviteAction({\n\t\t\t\tinviteValue: rawValue,\n\t\t\t\tdbPath: store.dbPath,\n\t\t\t\trecipientActorId: recipientInvite ? null : store.actorId,\n\t\t\t\trecipientDisplayName:\n\t\t\t\t\tdecoded.kind === \"add_device\"\n\t\t\t\t\t\t? null\n\t\t\t\t\t\t: typeof body.recipient_name === \"string\"\n\t\t\t\t\t\t\t? body.recipient_name\n\t\t\t\t\t\t\t: store.actorDisplayName,\n\t\t\t\tdeviceDisplayName: typeof body.device_name === \"string\" ? body.device_name : null,\n\t\t\t\treviewedOnboardingDigest: reviewedOnboardingDigest || null,\n\t\t\t});\n\t\t\tconst type = recipientInvite\n\t\t\t\t? \"recipient_onboarding\"\n\t\t\t\t: projectInvite\n\t\t\t\t\t? \"project_share\"\n\t\t\t\t\t: \"team_join\";\n\t\t\tif (recipientInvite) {\n\t\t\t\tconst persistedIdentityId = String(result.identity_id ?? \"\").trim();\n\t\t\t\tif (!store.refreshPersistedLocalIdentity(persistedIdentityId)) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\ttype,\n\t\t\t\t\t\t\tsetup_state: \"restart_required\",\n\t\t\t\t\t\t\trestart_required: true,\n\t\t\t\t\t\t\tdetail:\n\t\t\t\t\t\t\t\t\"The invitation was accepted and the reviewed Identity was persisted, but this process could not safely adopt it. Restart codemem before continuing.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t200,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\t\t\tif ((projectInvite || recipientInvite) && getSyncRuntimeStatus?.()?.phase === \"disabled\") {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\t...result,\n\t\t\t\t\t\ttype,\n\t\t\t\t\t\tsetup_state: \"restart_required\",\n\t\t\t\t\t\trestart_required: true,\n\t\t\t\t\t\tdetail: projectInvite\n\t\t\t\t\t\t\t? \"The invitation was accepted and sync was enabled. Restart codemem to start the sync service; Project setup remains pending until the first sync finishes.\"\n\t\t\t\t\t\t\t: \"The invitation was accepted and sync was enabled. Restart codemem to start the sync service and receive the reviewed Projects.\",\n\t\t\t\t\t},\n\t\t\t\t\t200,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\t...result,\n\t\t\t\ttype,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tif (projectInvite) return c.json(projectInviteAcceptanceFailure(error), 400);\n\t\t\tif (recipientInvite) return c.json({ error: safeRecipientInviteError(error) }, 400);\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/status\", async (c) => {\n\t\tconst status = coordinatorAdminStatusPayload();\n\t\treturn c.json(status);\n\t});\n\n\tapp.get(\"/api/coordinator/admin/groups\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst includeArchived = queryBool(c.req.query(\"include_archived\"));\n\t\ttry {\n\t\t\tconst items = await coordinatorListGroupsAction({\n\t\t\t\tincludeArchived,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst groupId = String(body.group_id ?? \"\").trim();\n\t\tconst displayName = String(body.display_name ?? \"\").trim() || null;\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorCreateGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tdisplayName,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\ttry {\n\t\t\t\tconst defaultSpace = await ensureDefaultSpaceForTeam({\n\t\t\t\t\tstore: getStore(),\n\t\t\t\t\tconfig,\n\t\t\t\t\tgroupId,\n\t\t\t\t\tdisplayName: displayName || group.display_name || null,\n\t\t\t\t});\n\t\t\t\treturn c.json({ ok: true, group, default_space: defaultSpace, status });\n\t\t\t} catch (setupError) {\n\t\t\t\treturn c.json({\n\t\t\t\t\tok: true,\n\t\t\t\t\tgroup,\n\t\t\t\t\tdefault_space: null,\n\t\t\t\t\tsetup_warning: {\n\t\t\t\t\t\tstep: \"default_space\",\n\t\t\t\t\t\terror: setupError instanceof Error ? setupError.message : String(setupError),\n\t\t\t\t\t},\n\t\t\t\t\tstatus,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/rename\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst displayName = String(body.display_name ?? \"\").trim();\n\t\tif (!displayName) return c.json({ error: \"display_name required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorRenameGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tdisplayName,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!group) return c.json({ error: \"group_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, group, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/archive\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorArchiveGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!group) return c.json({ error: \"group_not_found_or_already_archived\", status }, 404);\n\t\t\tconst groups = removeConfiguredCoordinatorGroup(groupId);\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tgroup,\n\t\t\t\tstatus: coordinatorAdminStatusPayload(),\n\t\t\t\tdisconnected_group_id: groupId,\n\t\t\t\tgroups,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/unarchive\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst group = await coordinatorUnarchiveGroupAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!group) return c.json({ error: \"group_not_found_or_not_archived\", status }, 404);\n\t\t\treturn c.json({ ok: true, group, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/groups/:group_id/scopes\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListScopesAction({\n\t\t\t\tgroupId,\n\t\t\t\tincludeInactive: queryBool(c.req.query(\"include_inactive\")),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/scopes\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\tconst scopeId = optionalViewerString(body, \"scope_id\");\n\t\tconst label = optionalViewerString(body, \"label\");\n\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\tif (!scopeId || !label) return c.json({ error: \"scope_id and label required\", status }, 400);\n\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst scope = await coordinatorCreateScopeAction({\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tlabel,\n\t\t\t\tkind: optionalViewerString(body, \"kind\"),\n\t\t\t\tauthorityType: optionalViewerString(body, \"authority_type\"),\n\t\t\t\tcoordinatorId: optionalViewerString(body, \"coordinator_id\"),\n\t\t\t\tmanifestIssuerDeviceId: optionalViewerString(body, \"manifest_issuer_device_id\"),\n\t\t\t\tmembershipEpoch,\n\t\t\t\tmanifestHash: optionalViewerString(body, \"manifest_hash\"),\n\t\t\t\tstatus: optionalViewerString(body, \"status\"),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, scope, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.patch(\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst scope = await coordinatorUpdateScopeAction({\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tlabel: body.label === undefined ? undefined : optionalViewerString(body, \"label\"),\n\t\t\t\tkind: body.kind === undefined ? undefined : optionalViewerString(body, \"kind\"),\n\t\t\t\tauthorityType:\n\t\t\t\t\tbody.authority_type === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"authority_type\"),\n\t\t\t\tcoordinatorId:\n\t\t\t\t\tbody.coordinator_id === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"coordinator_id\"),\n\t\t\t\tmanifestIssuerDeviceId:\n\t\t\t\t\tbody.manifest_issuer_device_id === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"manifest_issuer_device_id\"),\n\t\t\t\tmembershipEpoch,\n\t\t\t\tmanifestHash:\n\t\t\t\t\tbody.manifest_hash === undefined\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: optionalViewerString(body, \"manifest_hash\"),\n\t\t\t\tstatus: body.status === undefined ? undefined : optionalViewerString(body, \"status\"),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!scope) return c.json({ error: \"scope_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, scope, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id/members\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListScopeMembershipsAction({\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tincludeRevoked: queryBool(c.req.query(\"include_revoked\")),\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, scope_id: scopeId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id/members\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\tconst body = await parseViewerJsonBody(c);\n\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\tconst deviceId = optionalViewerString(body, \"device_id\");\n\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t}\n\t\tconst role = optionalViewerString(body, \"role\");\n\t\tconst coordinatorId = optionalViewerString(body, \"coordinator_id\");\n\t\tconst manifestIssuerDeviceId = optionalViewerString(body, \"manifest_issuer_device_id\");\n\t\tconst manifestHash = optionalViewerString(body, \"manifest_hash\");\n\t\tconst signedManifestJson = optionalViewerString(body, \"signed_manifest_json\");\n\t\tconst effectId =\n\t\t\toptionalViewerString(body, \"effect_id\") ??\n\t\t\tcoordinatorAdminMembershipEffectId(\"grant\", randomUUID(), {\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tdeviceId,\n\t\t\t\trole,\n\t\t\t\tmembershipEpoch,\n\t\t\t\tcoordinatorId,\n\t\t\t\tmanifestIssuerDeviceId,\n\t\t\t\tmanifestHash,\n\t\t\t\tsignedManifestJson,\n\t\t\t});\n\t\ttry {\n\t\t\tconst membership = await coordinatorGrantScopeMembershipAction({\n\t\t\t\teffectId,\n\t\t\t\tgroupId,\n\t\t\t\tscopeId,\n\t\t\t\tdeviceId,\n\t\t\t\trole,\n\t\t\t\tmembershipEpoch,\n\t\t\t\tcoordinatorId,\n\t\t\t\tmanifestIssuerDeviceId,\n\t\t\t\tmanifestHash,\n\t\t\t\tsignedManifestJson,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ ok: true, membership, group_id: groupId, scope_id: scopeId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\n\t\t\"/api/coordinator/admin/groups/:group_id/scopes/:scope_id/members/:device_id/revoke\",\n\t\tasync (c) => {\n\t\t\tconst config = readCoordinatorSyncConfig();\n\t\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\t\tconst unavailable = coordinatorAdminUnavailable(status);\n\t\t\tif (unavailable) return c.json(unavailable.body, unavailable.httpStatus);\n\t\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\t\tconst scopeId = String(c.req.param(\"scope_id\") ?? \"\").trim();\n\t\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\t\tif (!scopeId) return c.json({ error: \"scope_id required\", status }, 400);\n\t\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\t\tconst body = await parseViewerJsonBody(c, { allowEmpty: true });\n\t\t\tif (!body) return c.json({ error: \"invalid json\", status }, 400);\n\t\t\tconst membershipEpoch = optionalViewerNumber(body, \"membership_epoch\");\n\t\t\tif (Number.isNaN(membershipEpoch)) {\n\t\t\t\treturn c.json({ error: \"membership_epoch must be number\", status }, 400);\n\t\t\t}\n\t\t\tconst manifestHash = optionalViewerString(body, \"manifest_hash\");\n\t\t\tconst signedManifestJson = optionalViewerString(body, \"signed_manifest_json\");\n\t\t\tconst effectId =\n\t\t\t\toptionalViewerString(body, \"effect_id\") ??\n\t\t\t\tcoordinatorAdminMembershipEffectId(\"revoke\", randomUUID(), {\n\t\t\t\t\tgroupId,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tdeviceId,\n\t\t\t\t\tmembershipEpoch,\n\t\t\t\t\tmanifestHash,\n\t\t\t\t\tsignedManifestJson,\n\t\t\t\t});\n\t\t\ttry {\n\t\t\t\tconst ok = await coordinatorRevokeScopeMembershipAction({\n\t\t\t\t\teffectId,\n\t\t\t\t\tgroupId,\n\t\t\t\t\tscopeId,\n\t\t\t\t\tdeviceId,\n\t\t\t\t\tmembershipEpoch,\n\t\t\t\t\tmanifestHash,\n\t\t\t\t\tsignedManifestJson,\n\t\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t\t});\n\t\t\t\tif (!ok) return c.json({ error: \"membership_not_found\", status }, 404);\n\t\t\t\treturn c.json({\n\t\t\t\t\tok: true,\n\t\t\t\t\tgroup_id: groupId,\n\t\t\t\t\tscope_id: scopeId,\n\t\t\t\t\tdevice_id: deviceId,\n\t\t\t\t\tstatus,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t\t}\n\t\t},\n\t);\n\n\tapp.post(\"/api/coordinator/admin/invites\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(String(body.group_id ?? \"\").trim(), status);\n\t\tconst coordinatorUrl = body.coordinator_url == null ? null : String(body.coordinator_url ?? \"\");\n\t\tconst policy = String(body.policy ?? \"auto_admit\").trim();\n\t\tconst ttlHours = parseInviteTtlHours(body.ttl_hours);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tif (body.coordinator_url != null && typeof body.coordinator_url !== \"string\") {\n\t\t\treturn c.json({ error: \"coordinator_url must be string\", status }, 400);\n\t\t}\n\t\tif (![\"auto_admit\", \"approval_required\"].includes(policy)) {\n\t\t\treturn c.json({ error: \"policy must be auto_admit or approval_required\", status }, 400);\n\t\t}\n\t\tif (ttlHours == null) {\n\t\t\treturn c.json({ error: \"ttl_hours must be an integer >= 1\", status }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await coordinatorCreateInviteAction({\n\t\t\t\tgroupId,\n\t\t\t\tcoordinatorUrl,\n\t\t\t\tpolicy,\n\t\t\t\tttlHours,\n\t\t\t\tcreatedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ ...result, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/join-requests\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id_required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListJoinRequestsAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: status.coordinator_url,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/join-requests/:request_id/approve\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst requestId = String(c.req.param(\"request_id\") ?? \"\").trim();\n\t\tif (!requestId) return c.json({ error: \"request_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst result = await coordinatorReviewJoinRequestAction({\n\t\t\t\trequestId,\n\t\t\t\tapprove: true,\n\t\t\t\treviewedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!result) return c.json({ error: \"join request not found\", status }, 404);\n\t\t\tlet defaultSpaceMembership = null;\n\t\t\tlet setupWarning = null;\n\t\t\ttry {\n\t\t\t\tdefaultSpaceMembership = await maybeGrantDefaultSpaceOnJoin({\n\t\t\t\t\tstore: getStore(),\n\t\t\t\t\tconfig,\n\t\t\t\t\tgroupId: result.group_id,\n\t\t\t\t\trequestId,\n\t\t\t\t\tdeviceId: result.device_id,\n\t\t\t\t});\n\t\t\t} catch (grantError) {\n\t\t\t\tsetupWarning = {\n\t\t\t\t\tstep: \"default_space_grant\",\n\t\t\t\t\terror: grantError instanceof Error ? grantError.message : String(grantError),\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\trequest: result,\n\t\t\t\tdefault_space_membership: defaultSpaceMembership,\n\t\t\t\tsetup_warning: setupWarning,\n\t\t\t\tstatus,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json(\n\t\t\t\t{ error: message, status },\n\t\t\t\tmessage.includes(\"request_not_found\") || message.includes(\"not found\") ? 404 : 400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/join-requests/:request_id/deny\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst requestId = String(c.req.param(\"request_id\") ?? \"\").trim();\n\t\tif (!requestId) return c.json({ error: \"request_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst result = await coordinatorReviewJoinRequestAction({\n\t\t\t\trequestId,\n\t\t\t\tapprove: false,\n\t\t\t\treviewedBy: null,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!result) return c.json({ error: \"join request not found\", status }, 404);\n\t\t\treturn c.json({ ok: true, request: result, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json(\n\t\t\t\t{ error: message, status },\n\t\t\t\tmessage.includes(\"request_not_found\") || message.includes(\"not found\") ? 404 : 400,\n\t\t\t);\n\t\t}\n\t});\n\n\tapp.get(\"/api/coordinator/admin/devices\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id_required\", status }, 400);\n\t\ttry {\n\t\t\tconst items = await coordinatorListDevicesAction({\n\t\t\t\tgroupId,\n\t\t\t\tincludeDisabled: queryBool(c.req.query(\"include_disabled\")),\n\t\t\t\tremoteUrl: status.coordinator_url,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items, group_id: groupId, status });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message, status }, coordinatorAdminMutationStatus(message));\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/rename\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\", status }, 400);\n\t\t}\n\t\tconst groupId = resolveCoordinatorAdminGroup(String(body.group_id ?? \"\").trim(), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tlet displayName: string;\n\t\ttry {\n\t\t\tdisplayName = normalizeHumanPresentationName(String(body.display_name ?? \"\"), \"display_name\");\n\t\t} catch (error) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: error instanceof Error ? error.message : \"display_name_invalid\", status },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\ttry {\n\t\t\tconst device = await coordinatorRenameDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tdisplayName,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!device) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/disable\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst ok = await coordinatorDisableDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device_id: deviceId, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/enable\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst ok = await coordinatorEnableDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device_id: deviceId, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\t// Unified peer-enrollment entry point. Mode is chosen by an explicit\n\t// body field so a legitimate coordinator group named (for example)\n\t// `none` cannot collide with the manual-pairing path:\n\t// - `mode: \"discovered\"` (default) → promote a coordinator-discovered\n\t// device, seed scope from the :group_id group's template when\n\t// auto_seed_scope is true and the caller didn't pass an override.\n\t// - `mode: \"manual\"` → manual pairing. Accepts peer_public_key +\n\t// optional name/fingerprint/addresses; :group_id path param is\n\t// ignored and both discovery columns are left null.\n\t// See docs/plans/2026-04-22-multi-team-coordinator-groups-design.md.\n\tapp.post(\"/api/coordinator/admin/groups/:group_id/enroll-peer\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\t// Admin-secret gating happens inside the discovered branch below —\n\t\t// manual pairing only writes a local sync_peers row and doesn't need\n\t\t// coordinator-admin privileges, matching the pre-existing /peers/accept\n\t\t// path.\n\t\tconst rawGroupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!rawGroupId) return c.json({ error: \"group_id required\" }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid_json\" }, 400);\n\t\t}\n\t\tconst rawMode = String(body.mode ?? \"\")\n\t\t\t.trim()\n\t\t\t.toLowerCase();\n\t\tif (rawMode && rawMode !== \"manual\" && rawMode !== \"discovered\") {\n\t\t\treturn c.json(\n\t\t\t\t{ error: \"invalid_mode\", detail: `mode must be 'discovered' or 'manual', got ${rawMode}` },\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst mode: \"discovered\" | \"manual\" = rawMode === \"manual\" ? \"manual\" : \"discovered\";\n\t\t// Per-field normalization: distinguish \"caller did not specify\" from\n\t\t// \"caller set empty\". `undefined` = inherit (template); `null` or empty\n\t\t// array = explicit clear; non-empty array = use as-is.\n\t\tconst normalizeOverride = (value: unknown): string[] | null | undefined => {\n\t\t\tif (value === undefined) return undefined;\n\t\t\tif (value === null) return null;\n\t\t\tif (!Array.isArray(value)) return undefined;\n\t\t\tconst cleaned = value\n\t\t\t\t.map((item) => String(item ?? \"\").trim())\n\t\t\t\t.filter((item) => item.length > 0);\n\t\t\treturn cleaned.length === 0 ? null : cleaned;\n\t\t};\n\t\tconst overrideInclude = normalizeOverride(body.projects_include);\n\t\tconst overrideExclude = normalizeOverride(body.projects_exclude);\n\t\tconst scopeOverride =\n\t\t\toverrideInclude === undefined && overrideExclude === undefined\n\t\t\t\t? undefined\n\t\t\t\t: { projects_include: overrideInclude, projects_exclude: overrideExclude };\n\t\tconst store = getStore();\n\n\t\tif (mode === \"manual\") {\n\t\t\tconst peerDeviceId = String(body.peer_device_id ?? \"\").trim();\n\t\t\tconst publicKey = String(body.peer_public_key ?? \"\").trim();\n\t\t\tconst name = String(body.name ?? \"\").trim() || null;\n\t\t\tconst requestedFingerprint = String(body.fingerprint ?? \"\").trim();\n\t\t\tconst addressesInput = Array.isArray(body.peer_addresses) ? body.peer_addresses : [];\n\t\t\tconst addresses = mergeAddresses(\n\t\t\t\t[],\n\t\t\t\taddressesInput.map((item) => String(item ?? \"\").trim()).filter((item) => item.length > 0),\n\t\t\t);\n\t\t\tif (!peerDeviceId || !publicKey) {\n\t\t\t\treturn c.json({ error: \"peer_device_id_and_public_key_required\" }, 400);\n\t\t\t}\n\t\t\tconst fingerprint = requestedFingerprint || fingerprintPublicKey(publicKey);\n\t\t\tif (fingerprintPublicKey(publicKey) !== fingerprint) {\n\t\t\t\treturn c.json({ error: \"fingerprint_mismatch\" }, 400);\n\t\t\t}\n\t\t\tconst manualInclude =\n\t\t\t\toverrideInclude && overrideInclude.length > 0 ? JSON.stringify(overrideInclude) : null;\n\t\t\tconst manualExclude =\n\t\t\t\toverrideExclude && overrideExclude.length > 0 ? JSON.stringify(overrideExclude) : null;\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\t// Wrap the duplicate check + insert in a transaction so two concurrent\n\t\t\t// enrolls for the same peer cannot both clear the check. SQLite\n\t\t\t// serializes transactions on the write lock, so the second one sees\n\t\t\t// the committed row and returns 409 instead of racing past.\n\t\t\ttry {\n\t\t\t\tconst created = store.db.transaction(() => {\n\t\t\t\t\tconst existing = d\n\t\t\t\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t\t\t.get();\n\t\t\t\t\tif (existing) return false;\n\t\t\t\t\td.insert(schema.syncPeers)\n\t\t\t\t\t\t.values({\n\t\t\t\t\t\t\tpeer_device_id: peerDeviceId,\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tpinned_fingerprint: fingerprint,\n\t\t\t\t\t\t\tpublic_key: publicKey,\n\t\t\t\t\t\t\taddresses_json: JSON.stringify(addresses),\n\t\t\t\t\t\t\tprojects_include_json: manualInclude,\n\t\t\t\t\t\t\tprojects_exclude_json: manualExclude,\n\t\t\t\t\t\t\tcreated_at: now,\n\t\t\t\t\t\t\tlast_seen_at: now,\n\t\t\t\t\t\t\tdiscovered_via_coordinator_id: null,\n\t\t\t\t\t\t\tdiscovered_via_group_id: null,\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.run();\n\t\t\t\t\treturn true;\n\t\t\t\t})();\n\t\t\t\tif (!created) {\n\t\t\t\t\treturn c.json({ error: \"peer_exists\", detail: \"Peer is already enrolled.\" }, 409);\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\t// Primary-key constraint collision is the expected race signal; the\n\t\t\t\t// first writer wins, the second gets \"peer_exists\".\n\t\t\t\tconst msg = error instanceof Error ? error.message.toLowerCase() : \"\";\n\t\t\t\tif (msg.includes(\"unique\") || msg.includes(\"primary key\")) {\n\t\t\t\t\treturn c.json({ error: \"peer_exists\", detail: \"Peer is already enrolled.\" }, 409);\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\treturn c.json({\n\t\t\t\tok: true,\n\t\t\t\tpeer_device_id: peerDeviceId,\n\t\t\t\tcreated: true,\n\t\t\t\tupdated: false,\n\t\t\t\tname,\n\t\t\t\tgroup_id: null,\n\t\t\t});\n\t\t}\n\n\t\t// Discovered mode calls out to the coordinator for reciprocal approval,\n\t\t// so it needs the admin secret. Manual mode never leaves this process.\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst peerDeviceId = String(body.peer_device_id ?? body.discovered_device_id ?? \"\").trim();\n\t\tconst fingerprint = String(body.fingerprint ?? \"\").trim();\n\t\tif (!peerDeviceId || !fingerprint) {\n\t\t\treturn c.json({ error: \"peer_device_id_and_fingerprint_required\" }, 400);\n\t\t}\n\t\ttry {\n\t\t\tconst result = await acceptDiscoveredPeer(store, {\n\t\t\t\tpeerDeviceId,\n\t\t\t\tfingerprint,\n\t\t\t\texpectedGroupId: rawGroupId,\n\t\t\t\tscopeOverride,\n\t\t\t});\n\t\t\tif (result.ok) {\n\t\t\t\treturn c.json(result);\n\t\t\t}\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: result.error,\n\t\t\t\t\tdetail: result.detail,\n\t\t\t\t\t...(result.reason ? { reason: result.reason } : {}),\n\t\t\t\t},\n\t\t\t\tresult.status as 400 | 404 | 409,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\t// acceptDiscoveredPeer shells out to the coordinator for reciprocal\n\t\t\t// approval and can throw on timeout / network / auth failures. Map\n\t\t\t// those to a structured 502 so clients get the same shape as the\n\t\t\t// legacy /api/sync/peers/accept-discovered path.\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"coordinator_lookup_failed\",\n\t\t\t\t\tdetail: error instanceof Error ? error.message : String(error),\n\t\t\t\t},\n\t\t\t\t502,\n\t\t\t);\n\t\t}\n\t});\n\n\t// Local-only preferences for a coordinator group — project-scope template\n\t// + auto-seed toggle applied when peers are enrolled through the group.\n\t// See docs/plans/2026-04-22-multi-team-coordinator-groups-design.md.\n\t// Local-only preferences — these rows live in the viewer's own DB and never\n\t// cross the wire to the coordinator. No admin-secret gate: the admin secret\n\t// authorizes remote coordinator mutations, not local settings.\n\tapp.get(\"/api/coordinator/admin/groups/:group_id/preferences\", (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tconst coordinatorId = status.coordinator_url;\n\t\tif (!coordinatorId) return c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\tconst store = getStore();\n\t\tconst existing = getCoordinatorGroupPreference(store.db, coordinatorId, groupId);\n\t\tif (existing) return c.json({ preferences: existing, status });\n\t\treturn c.json({\n\t\t\tpreferences: {\n\t\t\t\tcoordinator_id: coordinatorId,\n\t\t\t\tgroup_id: groupId,\n\t\t\t\tprojects_include: null,\n\t\t\t\tprojects_exclude: null,\n\t\t\t\tauto_seed_scope: true,\n\t\t\t\tdefault_space_scope_id: null,\n\t\t\t\tauto_grant_default_space_on_join: false,\n\t\t\t\tupdated_at: null,\n\t\t\t},\n\t\t\tstatus,\n\t\t});\n\t});\n\n\tapp.put(\"/api/coordinator/admin/groups/:group_id/preferences\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tconst groupId = String(c.req.param(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\tconst coordinatorId = status.coordinator_url;\n\t\tif (!coordinatorId) return c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid_json\", status }, 400);\n\t\t}\n\t\tconst normalizeList = (value: unknown): string[] | null | undefined => {\n\t\t\tif (value === undefined) return undefined;\n\t\t\tif (value === null) return null;\n\t\t\tif (!Array.isArray(value)) return undefined;\n\t\t\tconst cleaned = value\n\t\t\t\t.map((item) => String(item ?? \"\").trim())\n\t\t\t\t.filter((item) => item.length > 0);\n\t\t\treturn cleaned.length === 0 ? null : cleaned;\n\t\t};\n\t\tconst autoSeed = typeof body.auto_seed_scope === \"boolean\" ? body.auto_seed_scope : undefined;\n\t\tconst autoGrantDefaultSpace =\n\t\t\ttypeof body.auto_grant_default_space_on_join === \"boolean\"\n\t\t\t\t? body.auto_grant_default_space_on_join\n\t\t\t\t: undefined;\n\t\tconst defaultSpaceScopeId =\n\t\t\tbody.default_space_scope_id === undefined\n\t\t\t\t? undefined\n\t\t\t\t: optionalViewerString(body, \"default_space_scope_id\");\n\t\tif (autoGrantDefaultSpace === true && !defaultSpaceScopeId) {\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: \"default_space_scope_id_required_for_auto_grant\",\n\t\t\t\t\tstatus,\n\t\t\t\t},\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\t\tconst store = getStore();\n\t\ttry {\n\t\t\tconst preferences = upsertCoordinatorGroupPreference(store.db, {\n\t\t\t\tcoordinator_id: coordinatorId,\n\t\t\t\tgroup_id: groupId,\n\t\t\t\tprojects_include: normalizeList(body.projects_include),\n\t\t\t\tprojects_exclude: normalizeList(body.projects_exclude),\n\t\t\t\tauto_seed_scope: autoSeed,\n\t\t\t\tdefault_space_scope_id: defaultSpaceScopeId,\n\t\t\t\tauto_grant_default_space_on_join: autoGrantDefaultSpace,\n\t\t\t});\n\t\t\treturn c.json({ preferences, status });\n\t\t} catch (error) {\n\t\t\tconst msg = error instanceof Error ? error.message : String(error);\n\t\t\treturn c.json({ error: msg, status }, 400);\n\t\t}\n\t});\n\n\tapp.post(\"/api/coordinator/admin/devices/:device_id/remove\", async (c) => {\n\t\tconst config = readCoordinatorSyncConfig();\n\t\tconst status = coordinatorAdminStatusPayload(config);\n\t\tif (status.readiness === \"not_configured\") {\n\t\t\treturn c.json({ error: \"coordinator_not_configured\", status }, 400);\n\t\t}\n\t\tif (!status.has_admin_secret) {\n\t\t\treturn c.json({ error: \"coordinator_admin_secret_missing\", status }, 400);\n\t\t}\n\t\tconst deviceId = String(c.req.param(\"device_id\") ?? \"\").trim();\n\t\tif (!deviceId) return c.json({ error: \"device_id required\", status }, 400);\n\t\tconst groupId = resolveCoordinatorAdminGroup(c.req.query(\"group_id\"), status);\n\t\tif (!groupId) return c.json({ error: \"group_id required\", status }, 400);\n\t\ttry {\n\t\t\tconst ok = await coordinatorRemoveDeviceAction({\n\t\t\t\tgroupId,\n\t\t\t\tdeviceId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"device_not_found\", status }, 404);\n\t\t\treturn c.json({ ok: true, device_id: deviceId, status });\n\t\t} catch (error) {\n\t\t\treturn c.json({ error: error instanceof Error ? error.message : String(error), status }, 400);\n\t\t}\n\t});\n\n\tapp.get(\"/api/sync/bootstrap-grants\", async (c) => {\n\t\tconst groupId = String(c.req.query(\"group_id\") ?? \"\").trim();\n\t\tif (!groupId) return c.json({ error: \"group_id_required\" }, 400);\n\t\tconst config = readCoordinatorSyncConfig();\n\t\ttry {\n\t\t\tconst items = await coordinatorListBootstrapGrantsAction({\n\t\t\t\tgroupId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\treturn c.json({ items });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message }, 500);\n\t\t}\n\t});\n\n\tapp.post(\"/api/sync/bootstrap-grants/revoke\", async (c) => {\n\t\tlet body: Record<string, unknown>;\n\t\ttry {\n\t\t\tbody = await c.req.json<Record<string, unknown>>();\n\t\t} catch {\n\t\t\treturn c.json({ error: \"invalid json\" }, 400);\n\t\t}\n\t\tconst grantId = String(body.grant_id ?? \"\").trim();\n\t\tif (!grantId) return c.json({ error: \"grant_id_required\" }, 400);\n\t\tconst config = readCoordinatorSyncConfig();\n\t\ttry {\n\t\t\tconst ok = await coordinatorRevokeBootstrapGrantAction({\n\t\t\t\tgrantId,\n\t\t\t\tremoteUrl: config.syncCoordinatorUrl || null,\n\t\t\t\tadminSecret: config.syncCoordinatorAdminSecret || null,\n\t\t\t});\n\t\t\tif (!ok) return c.json({ error: \"grant_not_found\" }, 404);\n\t\t\treturn c.json({ ok: true, grant_id: grantId });\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : \"unknown\";\n\t\t\treturn c.json({ error: message }, 500);\n\t\t}\n\t});\n\n\t// DELETE /api/sync/peers/:peer_device_id\n\tapp.delete(\"/api/sync/peers/:peer_device_id\", (c) => {\n\t\tconst store = getStore();\n\t\t{\n\t\t\tconst d = drizzle(store.db, { schema });\n\t\t\tconst peerDeviceId = c.req.param(\"peer_device_id\")?.trim();\n\t\t\tif (!peerDeviceId) return c.json({ error: \"peer_device_id required\" }, 400);\n\t\t\tconst exists = d\n\t\t\t\t.select({ peer_device_id: schema.syncPeers.peer_device_id })\n\t\t\t\t.from(schema.syncPeers)\n\t\t\t\t.where(eq(schema.syncPeers.peer_device_id, peerDeviceId))\n\t\t\t\t.get();\n\t\t\tif (!exists) return c.json({ error: \"peer not found\" }, 404);\n\t\t\td.delete(schema.replicationCursors)\n\t\t\t\t.where(eq(schema.replicationCursors.peer_device_id, peerDeviceId))\n\t\t\t\t.run();\n\t\t\td.delete(schema.syncPeers).where(eq(schema.syncPeers.peer_device_id, peerDeviceId)).run();\n\t\t\treturn c.json({ ok: true });\n\t\t}\n\t});\n\n\treturn app;\n}\n","import {\n\tgetUpdateStatus as defaultGetUpdateStatus,\n\tdetectInstallKind,\n\ttype GetUpdateStatusOptions,\n\ttype UpdateStatus,\n\tVERSION,\n} from \"@codemem/core\";\nimport { Hono } from \"hono\";\n\nexport interface UpdateStatusRoutesOptions {\n\tgetUpdateStatus?: (options: GetUpdateStatusOptions) => Promise<UpdateStatus>;\n}\n\nexport function updateStatusRoutes(options: UpdateStatusRoutesOptions = {}) {\n\tconst getUpdateStatus = options.getUpdateStatus ?? defaultGetUpdateStatus;\n\tconst app = new Hono();\n\n\tapp.get(\"/api/update-status\", async (c) => {\n\t\ttry {\n\t\t\tconst installKind = detectInstallKind({\n\t\t\t\tentryPath: process.argv[1] ?? \"\",\n\t\t\t\tenv: process.env,\n\t\t\t});\n\t\t\tconst status = await getUpdateStatus({\n\t\t\t\tcurrentVersion: VERSION,\n\t\t\t\tinstallKind,\n\t\t\t});\n\t\t\treturn c.json(status);\n\t\t} catch {\n\t\t\treturn c.json({ error: \"Update status unavailable.\" }, 503);\n\t\t}\n\t});\n\n\treturn app;\n}\n","/**\n * @codemem/server — HTTP server (viewer, sync, API).\n *\n * Single HTTP server handling viewer routes and sync daemon.\n * Shares one better-sqlite3 connection between viewer and sync.\n * Embedding inference runs in a worker_thread (lazy-started).\n *\n * Entry: `codemem serve`\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type {\n\tDeviceIdentityCoordinatorEvidence,\n\tGetUpdateStatusOptions,\n\tObserverClient,\n\tUpdateStatus,\n} from \"@codemem/core\";\nimport { MemoryStore, type RawEventSweeper, resolveDbPath, VERSION } from \"@codemem/core\";\nimport { serveStatic } from \"@hono/node-server/serve-static\";\nimport { Hono } from \"hono\";\nimport { originGuard, preflightHandler } from \"./middleware.js\";\nimport {\n\tcreateInMemoryRequestRateLimiter,\n\ttype InMemoryRequestRateLimiter,\n} from \"./request-rate-limit.js\";\nimport { configRoutes } from \"./routes/config.js\";\nimport { diagnosticsRoutes } from \"./routes/diagnostics.js\";\nimport { healthRoutes } from \"./routes/health.js\";\nimport { memoryRoutes } from \"./routes/memory.js\";\nimport { observerStatusRoutes } from \"./routes/observer-status.js\";\nimport { packTransportRoutes } from \"./routes/pack.js\";\nimport { rawEventsRoutes } from \"./routes/raw-events.js\";\nimport { statsRoutes } from \"./routes/stats.js\";\nimport { type SyncRoutesOptions, syncProtocolRoutes, syncRoutes } from \"./routes/sync.js\";\nimport {\n\ttype LegacyTeamCompletionDependencies,\n\ttype LegacyTeamConfiguredGroupSnapshotLoader,\n\tTEAM_SETUP_ROUTE_PREFIX,\n\tteamSetupRoutes,\n} from \"./routes/team-setup.js\";\nimport { updateStatusRoutes } from \"./routes/update-status.js\";\n\nexport type {\n\tAdvancePendingProjectSharesResult,\n\tAdvanceProjectShareOperationResult,\n\tRecipientPolicyReconciliationReadModel,\n\tRecipientPolicyReconciliationReadState,\n\tReconcileConfiguredCoordinatorEnrollmentResult,\n\tReconcileRecipientPolicyProjectsResult,\n} from \"./routes/sync.js\";\nexport {\n\tadvancePendingProjectShares,\n\tadvanceProjectShareOperation,\n\tcreateRecipientPolicyReconcilerEffects,\n\tlistRecipientPolicyReconciliationStatus,\n\trecipientPolicyCapabilityFromStatus,\n\treconcileConfiguredCoordinatorEnrollment,\n\treconcileRecipientPolicyProjects,\n} from \"./routes/sync.js\";\nexport type {\n\tLegacyTeamSetupActionBlockedReasonV1,\n\tLegacyTeamSetupActionGateV1,\n\tLegacyTeamSetupCandidateSummaryV1,\n\tLegacyTeamSetupDetailResponseV1,\n\tLegacyTeamSetupDeviceV1,\n\tLegacyTeamSetupErrorResponseV1,\n\tLegacyTeamSetupFinishResponseV1,\n\tLegacyTeamSetupIdentityChoiceV1,\n\tLegacyTeamSetupMutationResponseV1,\n\tLegacyTeamSetupPendingCandidateSummaryV1,\n\tLegacyTeamSetupProjectV1,\n\tLegacyTeamSetupSummaryResponseV1,\n\tLegacyTeamSetupViewerAccessDeltaV1,\n\tLegacyTeamSetupViewV1,\n} from \"./routes/team-setup.js\";\n\nexport { VERSION };\n\n/** Shared store instance — SQLite WAL mode handles concurrent reads safely. */\nlet sharedStore: MemoryStore | null = null;\n\n/** Get (or create) the shared store instance. Exported so the sweeper can share it. */\nexport function getStore(): MemoryStore {\n\tif (!sharedStore) {\n\t\tsharedStore = new MemoryStore(resolveDbPath());\n\t}\n\treturn sharedStore;\n}\n\n/** Close the shared store (called on shutdown). */\nexport function closeStore(): void {\n\tsharedStore?.close();\n\tsharedStore = null;\n}\n\n/**\n * Create the Hono app with all viewer routes.\n * Exported for testing — pass a custom store factory to inject test DBs.\n */\nexport interface AppOptions {\n\tstoreFactory?: () => MemoryStore;\n\tsweeper?: RawEventSweeper | null;\n\tobserver?: ObserverClient | null;\n\tgetUpdateStatus?: (options: GetUpdateStatusOptions) => Promise<UpdateStatus>;\n\tloadDeviceIdentityCoordinatorEvidence?: () => Promise<DeviceIdentityCoordinatorEvidence>;\n\tloadLegacyTeamConfiguredGroupSnapshots?: LegacyTeamConfiguredGroupSnapshotLoader;\n\tteamSetupCompletionDependencies?: LegacyTeamCompletionDependencies | null;\n\treadCoordinatorConfig?: SyncRoutesOptions[\"readCoordinatorConfig\"];\n\trenameCoordinatorGroup?: SyncRoutesOptions[\"renameCoordinatorGroup\"];\n\tsyncRequestRateLimit?: {\n\t\tlimiter?: InMemoryRequestRateLimiter;\n\t\treadLimit?: number;\n\t\tmutationLimit?: number;\n\t\tunauthenticatedReadLimit?: number;\n\t\tunauthenticatedMutationLimit?: number;\n\t};\n\tgetSyncRuntimeStatus?: () => {\n\t\tphase:\n\t\t\t| \"starting\"\n\t\t\t| \"running\"\n\t\t\t| \"stopping\"\n\t\t\t| \"error\"\n\t\t\t| \"disabled\"\n\t\t\t| \"rebootstrapping\"\n\t\t\t| \"needs_attention\"\n\t\t\t| null;\n\t\tdetail?: string | null;\n\t} | null;\n}\n\nfunction registerStaticRoutes(app: Hono): void {\n\tconst staticRoot =\n\t\tprocess.env.CODEMEM_VIEWER_STATIC_DIR ?? join(import.meta.dirname ?? \".\", \"../static\");\n\n\tapp.use(\"/assets/*\", async (c, next) => {\n\t\tc.header(\"Cache-Control\", \"no-cache\");\n\t\tawait next();\n\t});\n\tapp.use(\n\t\t\"/assets/*\",\n\t\tserveStatic({\n\t\t\troot: staticRoot,\n\t\t\trewriteRequestPath: (path) => path.replace(/^\\/assets/, \"\"),\n\t\t\tprecompressed: true,\n\t\t}),\n\t);\n\n\tconst indexPath = join(staticRoot, \"index.html\");\n\tif (!existsSync(indexPath)) {\n\t\tthrow new Error(\n\t\t\t`Viewer assets missing at ${indexPath}. Run \\`pnpm build\\` from the repo root before starting the viewer.`,\n\t\t);\n\t}\n\tconst indexHtml = readFileSync(indexPath, \"utf-8\");\n\tapp.get(\"*\", (c) => {\n\t\tif (c.req.path.startsWith(\"/api/\")) {\n\t\t\treturn c.json({ error: \"not found\" }, 404);\n\t\t}\n\t\tc.header(\"Cache-Control\", \"no-store\");\n\t\treturn c.html(indexHtml);\n\t});\n}\n\nexport function createApp(opts?: AppOptions) {\n\tconst storeFactory = opts?.storeFactory ?? getStore;\n\tconst sweeper = opts?.sweeper ?? null;\n\tconst observer = opts?.observer ?? null;\n\tconst getSyncRuntimeStatus = opts?.getSyncRuntimeStatus ?? (() => null);\n\tlet invalidateTeamSetupSummary = () => {};\n\tconst app = new Hono();\n\n\t// CORS / origin guard\n\tapp.use(\"*\", preflightHandler());\n\tapp.use(\"*\", originGuard({ unsafeGetPathPrefixes: [TEAM_SETUP_ROUTE_PREFIX] }));\n\n\t// API routes\n\tapp.route(\"/\", healthRoutes(storeFactory));\n\tapp.route(\"/\", diagnosticsRoutes(storeFactory));\n\tapp.route(\"/\", statsRoutes(storeFactory));\n\tapp.route(\"/\", memoryRoutes(storeFactory));\n\tapp.route(\"/\", packTransportRoutes(storeFactory));\n\tapp.route(\n\t\t\"/\",\n\t\tobserverStatusRoutes({\n\t\t\tgetStore: storeFactory,\n\t\t\tgetSweeper: () => sweeper,\n\t\t\tgetObserver: () => observer,\n\t\t}),\n\t);\n\tapp.route(\"/\", configRoutes({ getSweeper: () => sweeper }));\n\tapp.route(\"/\", rawEventsRoutes(storeFactory, sweeper));\n\tapp.route(\n\t\t\"/\",\n\t\tsyncRoutes(storeFactory, getSyncRuntimeStatus, {\n\t\t\tloadDeviceIdentityCoordinatorEvidence: opts?.loadDeviceIdentityCoordinatorEvidence,\n\t\t\tonRecipientPolicyTeamRenamed: () => invalidateTeamSetupSummary(),\n\t\t\treadCoordinatorConfig: opts?.readCoordinatorConfig,\n\t\t\trenameCoordinatorGroup: opts?.renameCoordinatorGroup,\n\t\t}),\n\t);\n\tapp.route(\n\t\t\"/\",\n\t\tteamSetupRoutes({\n\t\t\tgetStore: storeFactory,\n\t\t\tloadLegacyTeamConfiguredGroupSnapshots: opts?.loadLegacyTeamConfiguredGroupSnapshots,\n\t\t\tcompletionDependencies: opts?.teamSetupCompletionDependencies,\n\t\t\treadCoordinatorConfig: opts?.readCoordinatorConfig,\n\t\t\tregisterSummaryInvalidator: (invalidate) => {\n\t\t\t\tinvalidateTeamSetupSummary = invalidate;\n\t\t\t},\n\t\t}),\n\t);\n\tapp.route(\"/\", updateStatusRoutes({ getUpdateStatus: opts?.getUpdateStatus }));\n\n\tregisterStaticRoutes(app);\n\n\treturn app;\n}\n\n/**\n * Create the Hono app for peer-to-peer sync protocol routes only.\n *\n * This app is bound to a separate network-accessible listener\n * (default 0.0.0.0:7337) so remote peers can reach the sync\n * endpoints without exposing the viewer UI or local API routes.\n *\n * No CORS/origin guard is applied — sync requests are authenticated\n * via cryptographic signature verification instead.\n */\nexport function createSyncApp(opts?: AppOptions) {\n\tconst storeFactory = opts?.storeFactory ?? getStore;\n\tconst requestRateLimit = opts?.syncRequestRateLimit ?? {};\n\tconst rateLimiter = requestRateLimit.limiter ?? createInMemoryRequestRateLimiter();\n\tconst readLimit = Math.max(1, Math.trunc(requestRateLimit.readLimit ?? 120));\n\tconst mutationLimit = Math.max(1, Math.trunc(requestRateLimit.mutationLimit ?? 30));\n\tconst app = new Hono();\n\tapp.route(\n\t\t\"/\",\n\t\tsyncProtocolRoutes(storeFactory, {\n\t\t\trouteRateLimit: {\n\t\t\t\tlimiter: rateLimiter,\n\t\t\t\treadLimit,\n\t\t\t\tmutationLimit,\n\t\t\t\tunauthenticatedReadLimit: Math.max(\n\t\t\t\t\t1,\n\t\t\t\t\tMath.trunc(requestRateLimit.unauthenticatedReadLimit ?? Math.min(20, readLimit)),\n\t\t\t\t),\n\t\t\t\tunauthenticatedMutationLimit: Math.max(\n\t\t\t\t\t1,\n\t\t\t\t\tMath.trunc(requestRateLimit.unauthenticatedMutationLimit ?? Math.min(10, mutationLimit)),\n\t\t\t\t),\n\t\t\t},\n\t\t}),\n\t);\n\n\t// Catch-all — return generic 404 to avoid fingerprinting the server.\n\tapp.all(\"*\", (c) => c.json({ error: \"not found\" }, 404));\n\n\treturn app;\n}\n\n// No auto-start — the CLI's `serve` command owns server startup.\n"],"mappings":";;;;;;;;;;;;AAaA,IAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;AAAK,CAAC;;;;;AAMhE,SAAS,iBAAiB,QAAyB;CAClD,IAAI;CACJ,IAAI;EACH,MAAM,IAAI,IAAI,MAAM;CACrB,QAAQ;EACP,OAAO;CACR;CACA,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU,OAAO;CAClE,IAAI,IAAI,YAAY,IAAI,UAAU,OAAO;CACzC,MAAM,WAAW,IAAI,SAAS,WAAW,GAAG,IAAI,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI,IAAI;CAChF,OAAO,eAAe,IAAI,QAAQ;AACnC;;AAGA,IAAM,iCAAiB,IAAI,IAAI;CAAC;CAAQ;CAAU;CAAS;AAAK,CAAC;;;;;;;;;AAUjE,SAAS,sBAAsB,GAAqB;CACnD,MAAM,gBAAgB,EAAE,IAAI,OAAO,gBAAgB,KAAK,GAAA,CAAI,KAAK,CAAC,CAAC,YAAY;CAC/E,IAAI,gBAAgB,CAAC;EAAC;EAAe;EAAa;CAAM,CAAC,CAAC,SAAS,YAAY,GAC9E,OAAO;CAER,MAAM,UAAU,EAAE,IAAI,OAAO,SAAS;CACtC,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,CAAC,iBAAiB,OAAO;AACjC;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,YAAY,SAAyD;CACpF,OAAO,iBAAiB,OAAO,GAAY,SAAe;EACzD,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;EACpC,MAAM,SAAS,EAAE,IAAI;EACrB,MAAM,aACJ,WAAW,SAAS,WAAW,WAChC,SAAS,uBAAuB,MAAM,WAAW,EAAE,IAAI,KAAK,WAAW,MAAM,CAAC;EAE/E,IAAI,eAAe,IAAI,MAAM,KAAK,WAAW;GAC5C,IAAI,QAAQ;IAEX,IAAI,CAAC,iBAAiB,MAAM,GAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;IAG1C,EAAE,OAAO,+BAA+B,MAAM;IAC9C,EAAE,OAAO,gCAAgC,iCAAiC;IAC1E,EAAE,OAAO,gCAAgC,cAAc;GACxD,OAGC,IAAI,sBAAsB,CAAC,GAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;EAI5C,OAAO,IAAI,UAAU,iBAAiB,MAAM,GAAG;GAE9C,EAAE,OAAO,+BAA+B,MAAM;GAC9C,EAAE,OAAO,gCAAgC,iCAAiC;GAC1E,EAAE,OAAO,gCAAgC,cAAc;EACxD;EAIA,MAAM,KAAK;CACZ,CAAC;AACF;;;;;AAMA,SAAgB,mBAAmB;CAClC,OAAO,iBAAiB,OAAO,GAAY,SAAe;EACzD,IAAI,EAAE,IAAI,WAAW,WAAW;GAC/B,MAAM,KAAK;GACX;EACD;EACA,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;EACpC,IAAI,UAAU,iBAAiB,MAAM,GAAG;GACvC,EAAE,OAAO,+BAA+B,MAAM;GAC9C,EAAE,OAAO,gCAAgC,iCAAiC;GAC1E,EAAE,OAAO,gCAAgC,cAAc;GACvD,EAAE,OAAO,0BAA0B,OAAO;GAC1C,OAAO,EAAE,KAAK,MAAM,GAAG;EACxB;EACA,OAAO,EAAE,KAAK,MAAM,GAAG;CACxB,CAAC;AACF;;;AC3HA,SAAgB,iCAAiC,WAAW,KAAoC;CAC/F,MAAM,eAAe,KAAK,IAAI,KAAM,KAAK,MAAM,QAAQ,CAAC;CACxD,MAAM,0BAAU,IAAI,IAA0D;CAC9E,IAAI,SAAS;CAEb,SAAS,qBAAqB,OAAuB;EACpD,OAAO,KAAK,IAAI,GAAG,KAAK,KAAK,eAAe,KAAK,IAAI,GAAG,KAAK,IAAI,GAAI,CAAC;CACvE;CAEA,SAAS,sBAAsB,YAA0B;EACxD,IAAI,QAAQ,OAAO,MAAM,SAAS,OAAO,GAAG;EAC5C,MAAM,cAAc,aAAa,eAAe;EAChD,KAAK,MAAM,CAAC,KAAK,WAAW,SAC3B,IAAI,OAAO,aAAa,aAAa,QAAQ,OAAO,GAAG;CAEzD;CAEA,OAAO,EACN,MAAM,KAAa,OAAe;EACjC,UAAU;EACV,MAAM,aAAa,KAAK,IAAI;EAC5B,sBAAsB,UAAU;EAChC,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,CAAC;EAC/C,MAAM,YAAY,GAAG,UAAU,GAAG;EAClC,IAAI,SAAS,QAAQ,IAAI,SAAS;EAClC,IAAI,CAAC,QAAQ;GACZ,SAAS;IACR,SAAS,IAAI,YAAY;KACxB,mBAAmB;KACnB,UAAU;KACV,iBAAiB;IAClB,CAAC;IACD,YAAY;GACb;GACA,QAAQ,IAAI,WAAW,MAAM;EAC9B;EACA,OAAO,aAAa;EACpB,IAAI,OAAO,QAAQ,gBAAgB,CAAC,GACnC,OAAO;GAAE,SAAS;GAAM,aAAa;EAAE;EAExC,OAAO;GAAE,SAAS;GAAO,aAAa,qBAAqB,SAAS;EAAE;CACvE,EACD;AACD;;;;;;;;;AC5BA,IAAM,iBAAiB;AAEvB,IAAM,2BAAW,IAAI,IAAI;CAAC;CAAY;CAAkB;AAAe,CAAC;AACxE,IAAM,+BAAe,IAAI,IAAI;CAAC;CAAQ;CAAO;CAAQ;CAAW;AAAM,CAAC;AACvE,IAAM,kCAAkB,IAAI,IAAI,CAAC,+BAA+B,CAAC;AACjE,IAAM,uCAAuB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAU;AACV,IAAM,qCAAqB,IAAI,IAAY;CAC1C;CACA;CACA;CACA;AACD,CAAU;AACV,IAAM,sCAAsB,IAAI,IAAY,CAAC,oCAAoC,CAAC;AAClF,IAAM,eAAe;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD;AAEA,IAAM,WAAuB;CAC5B,gBAAgB,CAAC,QAAQ;CACzB,eAAe,CAAC,OAAO;CACvB,kBAAkB;CAClB,sBAAsB;CACtB,+BAA+B;CAC/B,uBAAuB,CAAC;CACxB,0BAA0B;CAC1B,2BAA2B;CAC3B,kBAAkB,CAAC;CACnB,oBAAoB;CACpB,wBAAwB;CACxB,oBAAoB;CACpB,cAAc;CACd,wBAAwB;CACxB,6BAA6B;CAC7B,4BAA4B;CAC5B,WAAW;CACX,WAAW;CACX,iBAAiB;CACjB,WAAW;CACX,4BAA4B;CAC5B,iCAAiC;CACjC,+BAA+B;AAChC;AAMA,SAAS,sBAAgC;CACxC,OAAO,4BAA4B;AACpC;AAEA,SAAS,yBAAyB,YAAoC;CACrE,MAAM,OAAO,EAAE,GAAG,WAAW;CAC7B,KAAK,MAAM,OAAO,qBACjB,OAAO,KAAK;CAEb,OAAO;AACR;AAEA,SAAS,mBAAmB,YAAoC;CAC/D,MAAM,YAAwB;EAAE,GAAG;EAAU,GAAG;CAAW;CAC3D,KAAK,MAAM,OAAO,CAAC,kBAAkB,eAAe,GACnD,UAAU,OAAO,sBAAsB,UAAU,IAAI,KAAK,SAAS;CAEpE,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,4BAA4B,GAEpE;EACF,MAAM,MAAM,QAAQ,IAAI;EACxB,IAAI,OAAO,QAAQ,QAAQ,IAAI;EAC/B,IAAI,QAAQ,oBAAoB,QAAQ,iBACvC,UAAU,OAAO,sBAAsB,GAAG,KAAK,UAAU;OAEzD,UAAU,OAAO;CAEnB;CACA,OAAO;AACR;AAEA,SAAS,kBAAkB,KAAa,OAAyB;CAChE,IAAI,SAAS,QAAQ,CAAC,mBAAmB,IAAI,GAAG,GAAG,OAAO;CAC1D,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,SAAS,IAAI,iBAAiB,CAAC;CACtE,IAAI,OAAO,UAAU,UACpB,OAAO,OAAO,KAAK,KAAgC,CAAC,CAAC,SAAS,IAAI,iBAAiB,CAAC;CAErF,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,KAAK,IAAI,iBAAiB;CACtE,OAAO;AACR;AAEA,SAAS,0BAA0B,YAAoC;CACtE,MAAM,YAAwB,CAAC;CAC/B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GACnD,UAAU,OAAO,kBAAkB,KAAK,KAAK;CAE9C,OAAO;AACR;AAEA,SAAS,kBAAkB,MAAe,OAAyB;CAClE,IAAI,OAAO,GAAG,MAAM,KAAK,GAAG,OAAO;CACnC,IAAI,QAAQ,QAAQ,SAAS,MAAM,OAAO,QAAQ,QAAQ,SAAS;CACnE,IAAI,OAAO,SAAS,YAAY,OAAO,UAAU,UAChD,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;CAErD,OAAO;AACR;AAEA,SAAS,uBACR,SACA,cACuD;CACvD,MAAM,iBAA6B,CAAC;CACpC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;EACnD,IAAI,CAAC,qBAAqB,IAAI,GAAG,GAAG;GACnC,eAAe,OAAO;GACtB;EACD;EACA,IAAI,mBAAmB,IAAI,GAAG,KAAK,UAAU,gBAC5C;EAED,IAAI,kBAAkB,OAAO,aAAa,IAAI,GAC7C;EAED,OAAO;GACN,gBAAgB,CAAC;GACjB,OAAO,GAAG,IAAI;EACf;CACD;CACA,OAAO;EAAE;EAAgB,OAAO;CAAK;AACtC;AAEA,SAAS,iBAAiB,OAAgB,YAAY,OAAsB;CAC3E,IAAI,OAAO,UAAU,WAAW,OAAO;CACvC,MAAM,SACL,OAAO,UAAU,WACd,QACA,OAAO,UAAU,YAAY,UAAU,KAAK,MAAM,KAAK,CAAC,IACvD,OAAO,MAAM,KAAK,CAAC,IACnB;CACL,IAAI,CAAC,OAAO,SAAS,MAAM,KAAK,CAAC,OAAO,UAAU,MAAM,GAAG,OAAO;CAClE,IAAI,WAAW,OAAO,UAAU,IAAI,SAAS;CAC7C,OAAO,SAAS,IAAI,SAAS;AAC9B;AAEA,SAAS,kBAAkB,OAAgB,YAAY,MAAqB;CAC3E,IAAI,OAAO,UAAU,WAAW,OAAO;CACvC,MAAM,SACL,OAAO,UAAU,WACd,QACA,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAClD,OAAO,MAAM,KAAK,CAAC,IACnB;CACL,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO;CACrC,IAAI,WAAW,OAAO,UAAU,IAAI,SAAS;CAC7C,OAAO,SAAS,IAAI,SAAS;AAC9B;AAEA,SAAS,YAAY,OAA+C;CACnE,IAAI,SAAS,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;CAC/E,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,MAAM,WAAW,IAAI,KAAK;EAC1B,IAAI,CAAC,UAAU,OAAO;EACtB,OAAO,YAAY;CACpB;CACA,OAAO;AACR;AAEA,SAAS,iBAAiB,OAAiC;CAC1D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO;CAClC,MAAM,OAAiB,CAAC;CACxB,KAAK,MAAM,QAAQ,OAAO;EACzB,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,MAAM,QAAQ,KAAK,KAAK;EACxB,IAAI,CAAC,OAAO,OAAO;EACnB,KAAK,KAAK,KAAK;CAChB;CACA,OAAO;AACR;AAEA,SAAS,uBACR,YACA,KACA,OACA,WACgB;CAChB,IAAI,SAAS,QAAQ,UAAU,IAAI;EAClC,OAAO,WAAW;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,qBAAqB;EAChC,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,MAAM,WAAW,MAAM,KAAK,CAAC,CAAC,YAAY;EAC1C,MAAM,eAAe,WAAW;EAChC,MAAM,kBAAkB,OAAO,iBAAiB,YAAY,aAAa,KAAK,CAAC,CAAC,SAAS;EACzF,IAAI,CAAC,UAAU,IAAI,QAAQ,KAAK,CAAC,iBAChC,OAAO;EAER,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,oBAAoB;EAC/B,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,MAAM,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY;EACzC,IAAI,CAAC,SAAS,IAAI,OAAO,GACxB,OAAO;EAER,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,wBAAwB;EACnC,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,MAAM,SAAS,MAAM,KAAK,CAAC,CAAC,YAAY;EACxC,IAAI,CAAC,aAAa,IAAI,MAAM,GAC3B,OAAO;EAER,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,oBAAoB,QAAQ,mBAAmB,QAAQ,yBAAyB;EAC3F,MAAM,OAAO,iBAAiB,KAAK;EACnC,IAAI,QAAQ,MAAM,OAAO,GAAG,IAAI;EAChC,IAAI,KAAK,SAAS,GAAG,WAAW,OAAO;OAClC,OAAO,WAAW;EACvB,OAAO;CACR;CACA,IAAI,QAAQ,oBAAoB;EAC/B,MAAM,UAAU,YAAY,KAAK;EACjC,IAAI,WAAW,MAAM,OAAO;EAC5B,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG,WAAW,OAAO;OAClD,OAAO,WAAW;EACvB,OAAO;CACR;CACA,IAAI,QAAQ,kBAAkB,QAAQ,4BAA4B,QAAQ,aAAa;EACtF,IAAI,OAAO,UAAU,WAAW,OAAO,GAAG,IAAI;EAC9C,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IAAI,QAAQ,iCAAiC;EAC5C,IAAI,OAAO,UAAU,WAAW,OAAO,GAAG,IAAI;EAC9C,WAAW,OAAO;EAClB,OAAO;CACR;CACA,IACC,QAAQ,uBACR,QAAQ,oBACR,QAAQ,2BACR,QAAQ,+BACR,QAAQ,gCACR,QAAQ,yBACR,QAAQ,oCACR,QAAQ,qCACR,QAAQ,wBACR,QAAQ,eACR,QAAQ,0BACR,QAAQ,0BACP;EACD,IAAI,OAAO,UAAU,UAAU,OAAO,GAAG,IAAI;EAC7C,MAAM,UAAU,MAAM,KAAK;EAC3B,IAAI,CAAC,SAAS,OAAO,WAAW;OAC3B,WAAW,OAAO;EACvB,OAAO;CACR;CACA,IAAI,QAAQ,iCAAiC,QAAQ,6BAA6B;EACjF,MAAM,SAAS,kBAAkB,OAAO,IAAI;EAC5C,IAAI,UAAU,MAAM,OAAO,GAAG,IAAI;EAClC,WAAW,OAAO;EAClB,OAAO;CACR;CACA,MAAM,YAAY,QAAQ;CAC1B,MAAM,SAAS,iBAAiB,OAAO,SAAS;CAChD,IAAI,UAAU,MAAM,OAAO,GAAG,IAAI,WAAW,YAAY,qBAAqB;CAC9E,WAAW,OAAO;CAClB,OAAO;AACR;AAEA,SAAS,oBAAoB,aAAuB,MAAoC;CACvF,MAAM,UAAoB,CAAC;CAC3B,IAAI,YAAY,SAAS,+BAA+B,GAAG;EAC1D,MAAM,cAAc,sBAAsB,CAAC,CAAC;EAC5C,MAAM,UACL,OAAO,gBAAgB,WACpB,cACA,OAAO,SAAS,OAAO,eAAe,EAAE,GAAG,EAAE;EACjD,IAAI,OAAO,SAAS,OAAO,KAAK,UAAU,GACzC,QAAQ,IAAI,yCAAyC,OAAO,UAAU,GAAI;OAE1E,OAAO,QAAQ,IAAI;EAEpB,KAAK,aAAa,CAAC,EAAE,oBAAoB;EACzC,QAAQ,KAAK,+BAA+B;CAC7C;CACA,OAAO;AACR;AAEA,SAAgB,aAAa,OAA2B,CAAC,GAAG;CAC3D,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,gBAAgB,MAAM;EAK7B,MAAM,aAAa,qBAAqB;EACxC,MAAM,aAAa,yBAAyB,sBAAsB,CAAC;EACnE,MAAM,YAAY,mBAAmB,UAAU;EAC/C,OAAO,EAAE,KAAK;GACb,MAAM;GACN,QAAQ,0BAA0B,UAAU;GAC5C,UAAU;GACV,WAAW,0BAA0B,SAAS;GAC9C,eAAe,uBAAuB;GACtC,gBAAgB,CAAC,GAAG,oBAAoB,CAAC,CAAC,KAAK;GAC/C,WAAW,oBAAoB;EAChC,CAAC;CACF,CAAC;CAED,IAAI,KAAK,eAAe,OAAO,MAAM;EACpC,IAAI;EACJ,IAAI;GACH,UAAW,MAAM,EAAE,IAAI,KAAK;EAC7B,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,IAAI,WAAW,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAC1E,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAE1D,IACC,YAAY,WACX,QAAuB,UAAU,SACjC,OAAQ,QAAuB,WAAW,YAC1C,MAAM,QAAS,QAAuB,MAAM,IAE7C,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EAEzD,MAAM,UACL,YAAY,WACX,QAAuB,UAAU,QAClC,OAAQ,QAAuB,WAAW,YAC1C,CAAC,MAAM,QAAS,QAAuB,MAAM,IACxC,QAAuB,SACxB;EAEL,MAAM,aAAa,qBAAqB;EACxC,MAAM,eAAe,yBAAyB,sBAAsB,CAAC;EACrE,MAAM,EAAE,gBAAgB,OAAO,sBAAsB,uBACpD,SACA,YACD;EACA,IAAI,mBACH,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAGhD,MAAM,kBAAkB,mBAAmB,YAAY;EACvD,MAAM,aAAyB,EAAE,GAAG,aAAa;EACjD,MAAM,YAAY,IAAI,IAAI,oBAAoB,CAAC;EAE/C,MAAM,cAAc,aAAa,QAAQ,QAAQ,OAAO,cAAc;EACtE,KAAK,MAAM,OAAO,cAAc;GAC/B,IAAI,EAAE,OAAO,iBAAiB;GAC9B,MAAM,QAAQ,uBAAuB,YAAY,KAAK,eAAe,MAAM,SAAS;GACpF,IAAI,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG;EACxC;EAEA,IAAI;EACJ,IAAI;GACH,YAAY,uBAAuB,YAAY,UAAU;EAC1D,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACvD;EAEA,MAAM,iBAAiB,mBAAmB,UAAU;EACpD,MAAM,mBAAmB,aAAa,QAAQ,QAAQ,aAAa,SAAS,WAAW,IAAI;EAC3F,MAAM,uBAAuB,aAAa,QACxC,QAAQ,CAAC,kBAAkB,gBAAgB,MAAM,eAAe,IAAI,CACtE;EACA,MAAM,eAAe,uBAAuB;EAC5C,MAAM,mBAAmB,iBAAiB,QACxC,QAAQ,CAAC,qBAAqB,SAAS,GAAG,KAAK,OAAO,YACxD;EAIA,MAAM,kBAAkB,oBAAoB,CAF3C,mBAAG,IAAI,IAAI;GAAC,GAAG;GAAa,GAAG;GAAkB,GAAG;EAAoB,CAAC,CAE9B,GAAoB,IAAI;EACpE,MAAM,sBAAsB,qBAAqB,QAC/C,QAAQ,CAAC,gBAAgB,IAAI,GAAG,KAAK,EAAE,OAAO,aAChD;EAEA,OAAO,EAAE,KAAK;GACb,MAAM;GACN,QAAQ,0BAA0B,UAAU;GAC5C,WAAW,0BAA0B,cAAc;GACnD,gBAAgB,CAAC,GAAG,oBAAoB,CAAC,CAAC,KAAK;GAC/C,SAAS;IACR,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,UAAU,iBAAiB,KACzB,QACA,GAAG,IAAI,8BAA8B,aAAa,KAAK,oEACzD;GACD;EACD,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;ACrdA,IAAM,gBAAgB;AACtB,IAAM,YAAY;AAClB,IAAM,aAAa,YAAY,EAAE;AAEjC,IAAa,wBAAwB;CAAC;CAAQ;CAAW;AAAO;AAChE,IAAa,wBAAwB;CACpC;CACA;CACA;CACA;CACA;CACA;AACD;AA6BA,SAAS,SAAS,MAAc,UAA2B;CAC1D,OAAO,WAAW,QAAQ,CAAC,CACzB,OAAO,GAAG,KAAK,IAAI,OAAO,QAAQ,GAAG,CAAC,CACtC,OAAO,WAAW,CAAC,CACnB,MAAM,GAAG,EAAE;AACd;AAEA,SAAS,aAAa,OAAuC;CAC5D,MAAM,KAAK,YAAY,EAAE;CACzB,MAAM,SAAS,eAAe,eAAe,YAAY,EAAE;CAC3D,MAAM,YAAY,KAAK,UAAU;EAAE,YAAY,MAAM;EAAa,UAAU,MAAM;CAAS,CAAC;CAC5F,MAAM,YAAY,OAAO,OAAO,CAAC,OAAO,OAAO,WAAW,MAAM,GAAG,OAAO,MAAM,CAAC,CAAC;CAClF,OAAO,OAAO,OAAO;EAAC;EAAI,OAAO,WAAW;EAAG;CAAS,CAAC,CAAC,CAAC,SAAS,WAAW;AAChF;AAEA,SAAS,YAAY,KAAoD;CACxE,IAAI,CAAC,KAAK,OAAO;CACjB,IAAI;EACH,MAAM,UAAU,OAAO,KAAK,KAAK,WAAW;EAC5C,IAAI,QAAQ,SAAS,IAAI,OAAO;EAChC,MAAM,WAAW,iBAAiB,eAAe,YAAY,QAAQ,SAAS,GAAG,EAAE,CAAC;EACpF,SAAS,WAAW,QAAQ,SAAS,IAAI,EAAE,CAAC;EAC5C,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,QAAQ,SAAS,EAAE,CAAC,GACpC,SAAS,MAAM,CAChB,CAAC,CAAC,CAAC,SAAS,MAAM;EAClB,MAAM,SAAS,KAAK,MAAM,SAAS;EACnC,IACC,OAAO,OAAO,eAAe,YAC7B,CAAC,2CAA2C,KAAK,OAAO,UAAU,KAClE,CAAC,OAAO,SAAS,KAAK,MAAM,OAAO,UAAU,CAAC,GAE9C,OAAO;EAER,IACC,OAAO,OAAO,aAAa,YAC3B,OAAO,SAAS,SAAS,KACzB,OAAO,SAAS,SAAS,MAEzB,OAAO;EAER,OAAO;GAAE,YAAY,OAAO;GAAY,UAAU,OAAO;EAAS;CACnE,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,WAAW,KAA6C;CAChE,IAAI,OAAO,QAAQ,QAAQ,IAAI,OAAO;CACtC,IAAI,CAAC,QAAQ,KAAK,GAAG,GAAG,OAAO;CAC/B,MAAM,SAAS,OAAO,GAAG;CACzB,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,GAAG,OAAO;CACzD,OAAO,KAAK,IAAI,QAAQ,SAAS;AAClC;AAEA,SAAS,YACR,KACA,SACqB;CACrB,IAAI,OAAO,MAAM,OAAO,IAAI,IAAI,OAAO;CACvC,MAAM,SAAS,IACb,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO;CAChB,IAAI,CAAC,OAAO,UAAU,OAAO,MAAM,UAAU,CAAC,QAAQ,SAAS,KAAU,CAAC,GAAG,OAAO;CACpF,OAAO,IAAI,IAAI,MAAa;AAC7B;AAEA,SAAS,eAAe,KAA8C;CACrE,IAAI,OAAO,QAAQ,QAAQ,KAAK,OAAO;CACvC,IAAI,QAAQ,KAAK,OAAO;CACxB,OAAO;AACR;AAEA,SAAS,gBAAgB,WAAoB,MAAc,SAAkB;CAC5E,IAAI,CAAC,WAAW,OAAO,EAAE,WAAW,MAAM;CAC1C,OAAO,UAAU;EAAE,WAAW;EAAM,MAAM,KAAK,MAAM,GAAG,GAAK;CAAE,IAAI,EAAE,WAAW,KAAK;AACtF;AAaA,IAAM,uBAAuB;AAE7B,SAAS,WAAW,SAAsC;CACzD,IAAI,CAAC,QAAQ,WAAW,IAAI,MAAM,GAAG,OAAO;CAC5C,MAAM,aAAuB,CAAC;CAC9B,IAAI,CAAC,QAAQ,WAAW,IAAI,MAAM,GAAG,WAAW,KAAK,QAAQ;CAC7D,IAAI,CAAC,QAAQ,WAAW,IAAI,OAAO,GAAG,WAAW,KAAK,SAAS;CAC/D,IAAI,CAAC,QAAQ,WAAW,IAAI,MAAM,KAAK,CAAC,QAAQ,WAAW,IAAI,OAAO,GAAG,OAAO;CAChF,IAAI,QAAQ,QACX,WAAW,KAAK,IAAI,qBAAqB;MACrC,qBAAqB;mDACwB;CAGlD,OAAO;;IAEJ,qBAAqB;;;;;;;;;;;uBAHV,WAAW,SAAS,SAAS,WAAW,KAAK,OAAO,MAAM,GAc5C;aAChB,qBAAqB;;AAElC;AAEA,SAAS,eAAe,SAAsC;CAC7D,IAAI,CAAC,QAAQ,WAAW,IAAI,OAAO,GAAG,OAAO;CAC7C,MAAM,WAAW,QAAQ,WAAW,IAAI,UAAU;CAClD,MAAM,UAAU,QAAQ,WAAW,IAAI,SAAS;CAChD,IAAI,CAAC,YAAY,CAAC,SAAS,OAAO;CAClC,IAAI,iBAAiB;CACrB,IAAI,YAAY,CAAC,SAAS,iBAAiB;CAC3C,IAAI,WAAW,CAAC,UAAU,iBAAiB;CAC3C,MAAM,eAAe,QAAQ,SAC1B;;sDAGA;CACH,OAAO;EAAC;EAAS;EAAU;CAAS,CAAC,CACnC,KACC,WAAW;;;;;;;;;;;;;;;;sBAgBO,OAAO,IAAI,eAAe,GAAG,aAAa;;;KAI9D,CAAC,CACA,KAAK,aAAa;AACrB;AAEA,SAAS,kBAAkB,SAAsC;CAChE,IAAI,CAAC,QAAQ,WAAW,IAAI,aAAa,GAAG,OAAO;CACnD,MAAM,WAAqB,CAAC;CAC5B,IAAI,QAAQ,WAAW,IAAI,MAAM,GAAG,SAAS,KAAK,aAAa,WAAW;CAC1E,IAAI,QAAQ,WAAW,IAAI,SAAS,GAAG,SAAS,KAAK,aAAa;CAClE,IAAI,QAAQ,WAAW,IAAI,OAAO,GAAG,SAAS,KAAK,UAAU;CAC7D,IAAI,CAAC,SAAS,QAAQ,OAAO;CAC7B,OAAO;;;;2CAImC,SAAS,KAAK,IAAI,EAAE;AAC/D;AAEA,SAAS,cAAc,SAAsC;CAC5D,IAAI,CAAC,QAAQ,WAAW,IAAI,SAAS,GAAG,OAAO;CAC/C,MAAM,UAAU,QAAQ,WAAW,IAAI,SAAS;CAChD,MAAM,QAAQ,QAAQ,WAAW,IAAI,OAAO;CAC5C,IAAI,CAAC,WAAW,CAAC,OAAO,OAAO;CAC/B,IAAI,SAAS;CACb,IAAI,CAAC,SAAS,SAAS;CACvB,IAAI,CAAC,OAAO,SAAS;CACrB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA+BI;AACZ;AAEA,SAAS,cAAc,SAAiC;CACvD,OAAO;EACN,WAAW,OAAO;EAClB,eAAe,OAAO;EACtB,kBAAkB,OAAO;EACzB,cAAc,OAAO;CACtB,CAAC,CAAC,QAAQ,WAA6B,UAAU,IAAI;AACtD;AAEA,SAAS,oBAAoB,QAAgB,WAA4B;CAIxE,OAAO;mBACW,OAAO;IAJL,YACjB,+GACA,GAGY;;;;AAIhB;AAEA,SAAS,eAAe,OAAoB,SAA8C;CACzF,MAAM,UAAU,cAAc,OAAO;CACrC,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC;CAC7B,MAAM,iBAAiB,QAAQ,KAAK,WACnC,oBAAoB,QAAQ,QAAQ,UAAU,IAAI,CACnD;CACA,MAAM,SAAkC;EACvC,aAAa,QAAQ,QAAQ;EAC7B,aAAa,QAAQ,QAAQ;CAC9B;CACA,IAAI,QAAQ,QAAQ;EACnB,OAAO,mBAAmB,QAAQ,OAAO;EACzC,OAAO,iBAAiB,QAAQ,OAAO;CACxC;CACA,OAAO,MAAM,GACX,QACA,kBAAkB,eAAe,KAAK,aAAa,EAAE;;uBAGtD,CAAC,CACA,IAAI,MAAM;AACb;AAEA,SAAS,UAAU,KAA0B,kBAAmD;CAC/F,MAAM,YAAY,IAAI,WAAW;CACjC,MAAM,QAAQ,OAAO,IAAI,YAAY,CAAC;CACtC,MAAM,SAAS,OAAO,IAAI,YAAY,CAAC;CACvC,MAAM,WAAW,IAAI,YAAY;CACjC,OAAO;EACN,IAAI,SAAS,gBAAgB,IAAI,SAAS;EAC1C,UAAU,IAAI;EACd,aAAa,IAAI;EACjB,UAAU,YAAY,SAAS;EAC/B,WAAW;EACX,MAAM,YAAY,2BAA2B;EAC7C,SAAS,YACN,8BACA;EACH,UAAU,YACP,KAAA,IACA;GAAE,OAAO;GAAkC,MAAM;EAA6B;EACjF,kBAAkB,gBACjB,MACA,YACG,GAAG,MAAM,eAAe,OAAO,yBAC/B,qBAAqB,SAAS,IAAI,MAAM,eAAe,OAAO,wBACjE,gBACD;CACD;AACD;AAEA,SAAS,aAAa,KAA0B,kBAAmD;CAClG,MAAM,YAAY,IAAI,gBAAgB,aAAa,aAAa;CAChE,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,IAAI,YAAY,CAAC,CAAC;CACtD,MAAM,SAAS,IAAI,WAAW;CAC9B,OAAO;EACN,IAAI,SAAS,sBAAsB,IAAI,SAAS;EAChD,UAAU,IAAI;EACd,aAAa,IAAI;EACjB,UAAU;EACV;EACA,MAAM,GAAG,UAAU,SAAS,SAAS,YAAY;EACjD,SAAS,SACN,gEACA;EACH,UAAU;GAAE,OAAO;GAAe,MAAM;EAAU;EAClD,kBAAkB,gBACjB,MACA,qBAAqB,IAAI,YAAY,cAAc,cAAc,SAAS,IAC1E,gBACD;CACD;AACD;AAEA,SAAS,iBACR,KACA,kBACyB;CACzB,IAAI,WAA+B;CACnC,IAAI,OAAO;CACX,IAAI,UAAU;CACd,IAAI,IAAI,WAAW,UAAU;EAC5B,WAAW;EACX,OAAO;EACP,UAAU;CACX,OAAO,IAAI,IAAI,WAAW,aAAa;EACtC,WAAW;EACX,OAAO;EACP,UAAU;CACX;CACA,MAAM,QAAQ,IAAI,YAAY,OAAO,YAAY,OAAO,IAAI,QAAQ;CACpE,OAAO;EACN,IAAI,SAAS,eAAe,IAAI,SAAS;EACzC,UAAU,IAAI;EACd,aAAa,IAAI;EACjB;EACA,WAAW;EACX;EACA;EACA,UAAU,aAAa,UAAU;GAAE,OAAO;GAAe,MAAM;EAAU,IAAI,KAAA;EAC7E,kBAAkB,gBACjB,MACA,aAAa,OAAO,IAAI,YAAY,CAAC,EAAE,MAAM,MAAM,IACnD,gBACD;CACD;AACD;AAEA,SAAS,aAAa,KAA0B,kBAAmD;CAClG,MAAM,WAAW,IAAI,WAAW,UAAU,UAAU;CACpD,MAAM,UAAU,OAAO,IAAI,YAAY,CAAC;CACxC,MAAM,WAAW,OAAO,IAAI,YAAY,CAAC;CACzC,MAAM,cAAc,IAAI,aAAa,WAAW,cAAc;CAC9D,MAAM,eAAe,aAAa,IAAI,YAAY;CAClD,OAAO;EACN,IAAI,SAAS,mBAAmB,CAAC;EACjC,UAAU,IAAI;EACd,aAAa,IAAI;EACjB;EACA,WAAW;EACX,MAAM,aAAa,UAAU,yBAAyB;EACtD,SACC,aAAa,UACV,kDACA;EACJ,UAAU;GAAE,OAAO;GAAe,MAAM;EAAU;EAClD,kBAAkB,gBACjB,MACA,GAAG,cAAc,QAAQ,yBAAyB,SAAS,GAAG,aAAa,IAC3E,gBACD;CACD;AACD;AAEA,SAAS,cAAc,OAAoB,SAAiD;CAC3F,OAAO,eAAe,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ;EAClD,IAAI,IAAI,gBAAgB,QAAQ,OAAO,UAAU,KAAK,QAAQ,gBAAgB;EAC9E,IAAI,IAAI,gBAAgB,eACvB,OAAO,iBAAiB,KAAK,QAAQ,gBAAgB;EAEtD,IAAI,IAAI,gBAAgB,WAAW,OAAO,aAAa,KAAK,QAAQ,gBAAgB;EACpF,OAAO,aAAa,KAAK,QAAQ,gBAAgB;CAClD,CAAC;AACF;AAEA,SAAgB,kBAAkB,UAAwB;CACzD,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,4BAA4B,MAAM;EACzC,MAAM,QAAQ,WAAW,EAAE,IAAI,MAAM,OAAO,CAAC;EAC7C,MAAM,SAAS,YAAY,EAAE,IAAI,MAAM,QAAQ,CAAC;EAChD,MAAM,aAAa,YAAY,EAAE,IAAI,MAAM,UAAU,GAAG,qBAAqB;EAC7E,MAAM,aAAa,YAAY,EAAE,IAAI,MAAM,WAAW,GAAG,qBAAqB;EAC9E,MAAM,mBAAmB,eAAe,EAAE,IAAI,MAAM,kBAAkB,CAAC;EACvE,IACC,UAAU,aACV,WAAW,aACX,eAAe,aACf,eAAe,aACf,qBAAqB,WAErB,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAG1D,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3C,MAAM,SAAS,cAAc,SAAS,GAAG;GACxC;GACA;GACA;GACA;GACA;EACD,CAAC;EACD,MAAM,eAAe,OAAO,MAAM,GAAG,KAAK;EAC1C,MAAM,QAAQ,aAAa,KAAK,EAAE,UAAU,WAAW,GAAG,YAAY,KAAK;EAC3E,MAAM,WAAW,aAAa,GAAG,EAAE;EACnC,MAAM,aAAa,OAAO,SAAS,SAAS,WAAW,aAAa,QAAQ,IAAI;EAChF,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK;GACb,kBAAkB;GAClB;GACA,aAAa;GACb,UAAU;GACV,cAAc;EACf,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;ACjdA,SAAS,kBAAkB,UAAiC;CAC3D,IAAI;EACH,SAAS,CAAC,CAAC,GAAG,OAAO,kBAAkB,EAAE,QAAQ,KAAK,CAAC;EACvD,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAgB,aAAa,UAAwB;CACpD,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,gBAAgB,MAAM;EAC7B,MAAM,YAAY,kBAAkB,QAAQ;EAC5C,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK;GAGb,SAAS;GACT,SAAS;GACT,KAAK,QAAQ;GACb,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,OAAO,IAAI,GAAK,CAAC;GAE3D,OAAO;GACP,UAAU,EAAE,UAAU;EACvB,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;;;;;;;;;ACvBA,SAAgB,aAAa,KAA0C;CACtE,IAAI,OAAO,MAAM,OAAO,CAAC;CACzB,IAAI;EACH,MAAM,SAAkB,KAAK,MAAM,GAAG;EACtC,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC;EACpC,OAAO,OAAO,QAAQ,SAAyB,OAAO,SAAS,QAAQ;CACxE,QAAQ;EACP,OAAO,CAAC;CACT;AACD;;;;AAKA,SAAgB,SAAS,OAA2B,cAA8B;CACjF,IAAI,SAAS,MAAM,OAAO;CAC1B,MAAM,SAAS,mBAAmB,KAAK;CACvC,OAAO,UAAU,OAAO,eAAe;AACxC;;;;;AAMA,SAAgB,UAAU,OAAoC;CAC7D,IAAI,SAAS,MAAM,OAAO;CAC1B,OAAO,UAAU,OAAO,UAAU,UAAU,UAAU;AACvD;;;;;AAMA,eAAsB,oBACrB,GAIA,UAC8C;CAC9C,MAAM,gBAAgB,OAAO,SAAS,EAAE,IAAI,OAAO,gBAAgB,KAAK,KAAK,EAAE;CAC/E,IAAI,OAAO,MAAM,aAAa,KAAK,gBAAgB,GAClD,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;CAEvD,IAAI,gBAAgB,UACnB,OAAO,EAAE,KAAK;EAAE,OAAO;EAAqB,WAAW;CAAS,GAAG,GAAG;CAEvE,IAAI,MAAM;CACV,IAAI;EACH,MAAM,OAAO,EAAE,IAAI,IAAI;EACvB,IAAI,SAAS,MAAM;GAClB,MAAM,SAAS,KAAK,UAAU;GAC9B,MAAM,SAAuB,CAAC;GAC9B,IAAI,aAAa;GACjB,IAAI;IACH,OAAO,MAAM;KACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;KAC1C,IAAI,MAAM;KACV,cAAc,MAAM;KACpB,IAAI,aAAa,UAAU;MAC1B,IAAI;OACH,MAAM,OAAO,OAAO;MACrB,QAAQ,CAER;MACA,OAAO,EAAE,KAAK;OAAE,OAAO;OAAqB,WAAW;MAAS,GAAG,GAAG;KACvE;KACA,OAAO,KAAK,KAAK;IAClB;GACD,UAAU;IACT,OAAO,YAAY;GACpB;GAEA,MAAM,QAAQ,IAAI,WAAW,UAAU;GACvC,IAAI,SAAS;GACb,KAAK,MAAM,SAAS,QAAQ;IAC3B,MAAM,IAAI,OAAO,MAAM;IACvB,UAAU,MAAM;GACjB;GACA,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;EAC7D;CACD,QAAQ;EACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;CAC7C;CACA,IAAI;CACJ,IAAI;EACH,SAAS,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnC,QAAQ;EACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;CAC7C;CACA,IAAI,UAAU,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACvE,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;CAE1D,OAAO;AACR;;;ACjFA,IAAM,4BAA4B;AAClC,IAAM,kDAAkC,IAAI,QAAqB;AAEjE,SAAS,SAAS,OAAwB;CACzC,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC,YAAY;AACxC;AAEA,SAAS,2BAA2B,OAA+C;CAElF,OADmB,SAAS,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,yBAC7C,KAAc,KAAA;AACtB;AAEA,SAAS,4BAA4B,OAA0B;CAC9D,IAAI,gCAAgC,IAAI,KAAK,GAAG;CAChD,MAAM,GAAG,SAAS,oBAAoB,EAAE,eAAe,KAAK,GAAG,QAAQ;CACvE,MAAM,GAAG,SAAS,4BAA4B,EAAE,eAAe,KAAK,IAAI,UACvE,gBAAgB,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAC3C;CACA,gCAAgC,IAAI,KAAK;AAC1C;AAoBA,IAAM,6BAA6B;AAEnC,SAAS,cAAc,MAA+B,KAAqB;CAC1E,MAAM,SAAS,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,KAAK;CAC5C,IAAI,QAAQ,OAAO;CACnB,MAAM,cAAc,KAAK,YAAY,KAAK;CAC1C,MAAM,WAAW,OAAO,gBAAgB,WAAW,SAAS,WAAW,IAAI;CAC3E,IAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG,OAAO;CACjF,OAAO,OAAQ,SAAqC,QAAQ,EAAE,CAAC,CAAC,KAAK;AACtE;AAEA,SAAS,cAAc,OAAkC,KAAuB;CAC/E,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,SAAS,cAAc,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;AAClF;AAEA,SAAS,cACR,OACA,QACA,OACM;CACN,MAAM,OAAY,CAAC;CACnB,KAAK,IAAI,SAAS,GAAG,SAAS,OAAO,QAAQ,UAAU,4BAA4B;EAClF,MAAM,QAAQ,OAAO,MAAM,QAAQ,SAAS,0BAA0B;EACtE,MAAM,eAAe,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;EACnD,KAAK,KAAK,GAAI,MAAM,GAAG,QAAQ,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAS;CAC1E;CACA,OAAO;AACR;AAEA,SAAS,UAAU,OAAoC;CACtD,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,IAAI;EACH,OAAO,+BAA+B,OAAO,cAAc;CAC5D,QAAQ;EACP;CACD;AACD;;;;;;AAOA,SAAS,mCACR,OACA,OACO;CACP,MAAM,WAAW,cAAc,OAAO,UAAU;CAChD,MAAM,YAAY,cAAc,OAAO,kBAAkB;CACzD,MAAM,QAAQ,cACb,OACA,YACC,iBACA;8BAC2B,aAAa;sDAE1C;CACA,MAAM,eAAe,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,KAAK,gBAAgB,IAAI,CAAC,CAAC;CAC7E,MAAM,eAAe,MACnB,KAAK,SAAS,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACjD,QAAQ,YAAY,QAAQ,SAAS,CAAC;CACxC,MAAM,YAAY,cACjB,OACA,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC,IAC1C,iBACA;yBACsB,aAAa,EACrC;CACA,MAAM,UAAU,cACf,OACA,YACC,iBACA;yBACsB,aAAa,wBACrC;CACA,MAAM,YAAY,IAAI,IAAI,UAAU,KAAK,UAAU,CAAC,MAAM,UAAU,KAAK,CAAU,CAAC;CACpF,IAAI,sBAAsB,CACzB,GAAG,IAAI,IACN,UACE,KAAK,UAAU,OAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC/D,QAAQ,YAAY,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,CACzD,CACD;CACA,OAAO,oBAAoB,SAAS,GAAG;EACtC,MAAM,aAAa,cAClB,OACA,sBACC,iBACA;0BACsB,aAAa,EACrC;EACA,KAAK,MAAM,SAAS,YAAY,UAAU,IAAI,MAAM,UAAU,KAAK;EACnE,sBAAsB,CACrB,GAAG,IAAI,IACN,WACE,KAAK,UAAU,OAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC/D,QAAQ,YAAY,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,CACzD,CACD;CACD;CACA,MAAM,qBAAqB,YAAwC;EAClE,MAAM,uBAAO,IAAI,IAAY;EAC7B,IAAI,iBAAiB;EACrB,OAAO,kBAAkB,CAAC,KAAK,IAAI,cAAc,GAAG;GACnD,KAAK,IAAI,cAAc;GACvB,MAAM,QAAQ,UAAU,IAAI,cAAc;GAC1C,IAAI,CAAC,OAAO,OAAO,KAAA;GACnB,IAAI,MAAM,WAAW,YAAY,MAAM,yBAAyB,MAC/D,OAAO,UAAU,MAAM,YAAY;GAEpC,iBAAiB,OAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,KAAK;EAChE;CAED;CACA,MAAM,iBAAiB,IAAI,IAC1B,QACE,KAAK,WAAW,CAAC,OAAO,WAAW,UAAU,OAAO,YAAY,CAAC,CAAU,CAAC,CAC5E,QAAQ,UAA8C,MAAM,OAAO,KAAA,CAAS,CAC/E;CAEA,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,UAAU,cAAc,MAAM,UAAU;EAC9C,MAAM,WAAW,cAAc,MAAM,kBAAkB;EACvD,MAAM,OAAO,aAAa,IAAI,QAAQ;EACtC,MAAM,cAAc,OAAO,MAAM,YAAY,EAAE,CAAC,CAAC,KAAK;EAEtD,MAAM,YADmB,UAAU,IAAI,OACrB,IACd,kBAAkB,OAAO,KAAK,UAAU,KAAK,kBAAkB,IAC/D,kBAAkB,WAAW,KAAK,UAAU,KAAK,kBAAkB;EACvE,MAAM,aAAa,eAAe,IAAI,QAAQ,KAAK,UAAU,MAAM,IAAI;EACvE,IAAI,WAAW,KAAK,8BAA8B;EAClD,IAAI,YAAY,KAAK,+BAA+B;CACrD;AACD;AAEA,SAAS,6BAA6B,OAAoB,OAAwC;CACjG,IAAI;EACH,mCAAmC,OAAO,KAAK;CAChD,QAAQ,CAGR;AACD;AAEA,SAAS,mBACR,aACA,KAC0B;CAC1B,MAAM,WAAW,SAAU,IAAI,iBAA4B,IAAI;CAG/D,MAAM,gBAAgB,YAAY,GAAG;CACrC,OAAO;EACN,GAAG;EACH,MAAM,oBAAqB,IAAI,QAAsC,MAAM,IAAI,aAAa;EAC5F,eAAe;EACf;CACD;AACD;;;;AAKA,SAAS,oBAAoB,OAAoB,OAAwC;CACxF,MAAM,aAAuB,CAAC;CAC9B,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,QAAQ,KAAK;EACnB,IAAI,SAAS,MAAM;EACnB,MAAM,MAAM,OAAO,KAAK;EACxB,IAAI,OAAO,MAAM,GAAG,KAAK,KAAK,IAAI,GAAG,GAAG;EACxC,KAAK,IAAI,GAAG;EACZ,WAAW,KAAK,GAAG;CACpB;CACA,IAAI,WAAW,WAAW,GAAG;CAG7B,MAAM,OADI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACxB,CAAA,CACX,OAAO;EACP,IAAI,OAAO,SAAS;EACpB,SAAS,OAAO,SAAS;EACzB,KAAK,OAAO,SAAS;CACtB,CAAC,CAAC,CACD,KAAK,OAAO,QAAQ,CAAC,CACrB,MAAM,QAAQ,OAAO,SAAS,IAAI,UAAU,CAAC,CAAC,CAC9C,IAAI;CAEN,MAAM,4BAAY,IAAI,IAA8C;CACpE,KAAK,MAAM,OAAO,MAAM;EACvB,MAAM,aAAa,OAAO,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK;EAClD,MAAM,UAAU,aAAa,gBAAgB,UAAU,IAAI;EAC3D,MAAM,MAAM,OAAO,IAAI,OAAO,EAAE;EAChC,UAAU,IAAI,IAAI,IAAI;GAAE;GAAS;EAAI,CAAC;CACvC;CAEA,KAAK,MAAM,QAAQ,OAAO;EACzB,MAAM,MAAM,OAAO,KAAK,UAAU;EAClC,IAAI,OAAO,MAAM,GAAG,GAAG;EACvB,MAAM,SAAS,UAAU,IAAI,GAAG;EAChC,IAAI,CAAC,QAAQ;EACb,KAAK,YAAY,OAAO;EACxB,KAAK,QAAQ,OAAO;CACrB;AACD;;;;;AAMA,SAAS,gBAAgB,KAAqB;CAC7C,IAAI,IAAI,YAAY,CAAC,CAAC,WAAW,QAAQ,GAAG,OAAO;CACnD,MAAM,QAAQ,IAAI,QAAQ,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG;CAC/C,OAAO,MAAM,MAAM,SAAS,MAAM;AACnC;AAEA,SAAS,eAAe,KAAwD;CAC/E,MAAM,QAAQ,OAAO,OAAO,EAAE,CAAC,CAC7B,KAAK,CAAC,CACN,YAAY;CACd,IAAI,UAAU,UAAU,UAAU,UAAU,OAAO;AAEpD;AAEA,SAAS,yBAAyB,OAAoB,SAAgC;CACrF,OAAO,8BAA8B,SAAS,MAAM,uBAAuB,CAAC;AAC7E;AAEA,SAAS,uBAAuB,OAAoB,SAAwC;CAC3F,MAAM,eAAe,yBAAyB,OAAO,OAAO;CAC5D,MAAM,UAAU,CAAC,2BAA2B,GAAG,aAAa,OAAO;CACnE,MAAM,OAAO,aAAa,eACvB,wEACA;CACH,MAAM,MAAM,MAAM,GAChB,QAAQ,iCAAiC,KAAK,SAAS,QAAQ,KAAK,OAAO,GAAG,CAAC,CAC/E,IAAI,GAAG,aAAa,MAAM;CAC5B,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,gBAAgB,OAAsD;CAC9E,MAAM,aAAa;;;cAGN,wBAAwB,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsBvC,MAAM,iBAAiB,sBAAsB,KAAK;CAClD,MAAM,WACL,kBAAkB,QAAQ,OAAO,cAAc,MAAM,QAAQ,iBAAiB;CAC/E,IAAI,YAAY,MACf,OAAO;EAAE,QAAQ,2BAA2B,WAAW;EAAI,QAAQ,CAAC,UAAU,KAAK;CAAE;CAEtF,OAAO;EAAE,QAAQ;EAAY,QAAQ,CAAC,KAAK;CAAE;AAC9C;AAEA,SAAS,4BAA4B,OAAoB,SAAwC;CAChG,MAAM,eAAe,yBAAyB,OAAO,OAAO;CAC5D,MAAM,UAAU;EACf;EACA,OAAO,wBAAwB;EAC/B,GAAG,aAAa;CACjB;CACA,MAAM,OAAO,aAAa,eACvB,wEACA;CACH,MAAM,MAAM,MAAM,GAChB,QAAQ,iCAAiC,KAAK,SAAS,QAAQ,KAAK,OAAO,GAAG,CAAC,CAC/E,IAAI,GAAG,aAAa,MAAM;CAC5B,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,4BAA4B,OAAoB,WAA4B;CACpF,MAAM,eAAe,uBAAuB,OAAO,EAAE,YAAY,UAAU,CAAC;CAC5E,IAAI,iBAAiB,GAAG,OAAO;CAC/B,MAAM,MAAM,MAAM,GAChB,QACA;wCAED,CAAC,CACA,IAAI,SAAS;CACf,OAAO,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAC/C;AAEA,SAAS,uBAAuB,OAAoB,SAAiC;CACpF,MAAM,eAAe,yBAAyB,OAAO,IAAI;CACzD,MAAM,UAAU,CACf,uCACA;;;;WAIS,aAAa,QAAQ,KAAK,OAAO,EAAE;IAE7C;CACA,MAAM,SAAoB,CAAC,GAAG,aAAa,MAAM;CACjD,IAAI,SAAS;EACZ,QAAQ,QAAQ,0BAA0B;EAC1C,OAAO,QAAQ,OAAO;CACvB;CACA,MAAM,MAAM,MAAM,GAChB,QAAQ,oDAAoD,QAAQ,KAAK,OAAO,GAAG,CAAC,CACpF,IAAI,GAAG,MAAM;CACf,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,yBAAyB,OAAoB,SAAiC;CACtF,MAAM,eAAe,yBAAyB,OAAO,IAAI;CACzD,MAAM,UAAU,CACf;;;;WAIS,aAAa,QAAQ,KAAK,OAAO,EAAE;IAE7C;CACA,MAAM,SAAoB,CAAC,GAAG,aAAa,MAAM;CACjD,MAAM,OAAO,UACV,kEACA;CACH,IAAI,SAAS;EACZ,QAAQ,QAAQ,sBAAsB;EACtC,OAAO,QAAQ,OAAO;CACvB;CACA,MAAM,MAAM,MAAM,GAChB,QAAQ,iCAAiC,KAAK,SAAS,QAAQ,KAAK,OAAO,GAAG,CAAC,CAC/E,IAAI,GAAG,MAAM;CACf,OAAO,OAAO,KAAK,SAAS,CAAC;AAC9B;AAEA,SAAS,gBACR,OACA,SAQ4B;CAC5B,4BAA4B,KAAK;CACjC,MAAM,UAAyB,CAAC;CAChC,IAAI,QAAQ,SAAS,QAAQ,UAAU,QAAQ;CAC/C,IAAI,QAAQ,OAAO,QAAQ,kBAAkB,QAAQ;CAErD,MAAM,eAAe,yBAAyB,OAAO,OAAO;CAC5D,MAAM,mBAAmB,wBAAwB;CACjD,MAAM,UAAU;EACf;EACA,QAAQ,mBAAmB,YAAY,mBAAmB,OAAO;EACjE,GAAG,aAAa;CACjB;CACA,MAAM,SAAoB,CAAC,GAAG,aAAa,MAAM;CACjD,IAAI,QAAQ,GAAG;EACd,MAAM,SAAS,gBAAgB,QAAQ,CAAC;EACxC,QAAQ,KAAK,OAAO,MAAM;EAC1B,OAAO,KAAK,GAAG,OAAO,MAAM;CAC7B;CACA,MAAM,QAAQ,QAAQ,KAAK,OAAO;CAClC,MAAM,OAAO,aAAa,eACvB,wEACA;CAEH,MAAM,OAAO,MAAM,GACjB,QACA,8BAA8B,KAAK;YAC1B,MAAM;;qBAGhB,CAAC,CACA,IAAI,GAAG,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,MAAM;CAElD,MAAM,cAAc,MAAM,wBAAwB;CAClD,OAAO,KAAK,KAAK,QAAQ,mBAAmB,aAAa,GAAG,CAAC;AAC9D;AAEA,SAAgB,aAAa,UAAwB;CACpD,MAAM,MAAM,IAAI,KAAK;CAGrB,IAAI,IAAI,kBAAkB,MAAM;EAC/B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC/C,MAAM,eAAe,yBAAyB,OAAO,IAAI;GACzD,MAAM,UAAU;IACf;IACA;IACA,GAAG,aAAa;GACjB;GASA,MAAM,QARO,MAAM,GACjB,QACA;uDACkD,QAAQ,KAAK,OAAO,EAAE;;cAGzE,CAAC,CACA,IAAI,GAAG,aAAa,QAAQ,KAChB,CAAA,CAAK,KAAK,SAAS;IAChC,GAAG;IACH,eAAe,SAAU,IAAI,iBAA+C,IAAI;GACjF,EAAE;GACF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;EACxB;CACD,CAAC;CAGD,IAAI,IAAI,kBAAkB,MAAM;EAC/B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,eAAe,yBAAyB,OAAO,IAAI;GACzD,MAAM,UAAU;IACf;IACA;IACA;IACA,GAAG,aAAa;GACjB;GACA,MAAM,OAAO,MAAM,GACjB,QACA;;cAES,QAAQ,KAAK,OAAO,GAC9B,CAAC,CACA,IAAI,GAAG,aAAa,MAAM;GAC5B,MAAM,WAAW,CAChB,GAAG,IAAI,IACN,KACE,KAAK,MAAM,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC1C,QAAQ,MAAM,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,CACzD,KAAK,MAAM,gBAAgB,CAAC,CAAC,CAAC,CAC9B,OAAO,OAAO,CACjB,CACD,CAAC,CAAC,KAAK;GACP,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;EAC3B;CACD,CAAC;CAGD,IAAI,IAAI,kBAAkB,MAAM;EAC/B,MAAM,SAAS,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;EAClC,OAAO,EAAE,SAAS,oBAAoB,UAAU,GAAG;CACpD,CAAC;CAED,IAAI,IAAI,sBAAsB,MAAM;EACnC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,CAAC;GAC5D,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;GAI7D,MAAM,QAAQ,gBAAgB,OAAO;IACpC;IACA;IACA,SANe,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;IAOzC,OANa,eAAe,EAAE,IAAI,MAAM,OAAO,CAM/C;IACA,GANS,2BAA2B,EAAE,IAAI,MAAM,GAAG,CAMnD;IACA,gBAAgB;GACjB,CAAC;GACD,MAAM,UAAU,MAAM,SAAS;GAC/B,MAAM,SAAS,UAAU,MAAM,MAAM,GAAG,KAAK,IAAI;GACjD,MAAM,YAAY;GAClB,oBAAoB,OAAO,SAAS;GACpC,6BAA6B,OAAO,SAAS;GAC7C,OAAO,EAAE,KAAK;IACb,OAAO;IACP,YAAY;KACX;KACA;KACA,aAAa,UAAU,SAAS,OAAO,SAAS;KAChD,UAAU;IACX;GACD,CAAC;EACF;CACD,CAAC;CAGD,IAAI,IAAI,mBAAmB,MAAM;EAChC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,CAAC;GAC5D,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;GAI7D,MAAM,QAAQ,gBAAgB,OAAO;IACpC;IACA;IACA,SANe,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;IAOzC,OANa,eAAe,EAAE,IAAI,MAAM,OAAO,CAM/C;IACA,GANS,2BAA2B,EAAE,IAAI,MAAM,GAAG,CAMnD;IACA,gBAAgB;GACjB,CAAC;GACD,MAAM,UAAU,MAAM,SAAS;GAC/B,MAAM,SAAS,UAAU,MAAM,MAAM,GAAG,KAAK,IAAI;GACjD,MAAM,YAAY;GAClB,oBAAoB,OAAO,SAAS;GACpC,6BAA6B,OAAO,SAAS;GAC7C,OAAO,EAAE,KAAK;IACb,OAAO;IACP,YAAY;KACX;KACA;KACA,aAAa,UAAU,SAAS,OAAO,SAAS;KAChD,UAAU;IACX;GACD,CAAC;EACF;CACD,CAAC;CAGD,IAAI,IAAI,iBAAiB,MAAM;EAC9B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK;GAC1C,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI,SAAS;IACZ,UAAU,uBAAuB,OAAO,OAAO;IAC/C,YAAY,yBAAyB,OAAO,OAAO;IACnD,WAAW,uBAAuB,OAAO,EAAE,QAAQ,CAAC;IACpD,eAAe,4BAA4B,OAAO,EAAE,QAAQ,CAAC;GAC9D,OAAO;IACN,UAAU,uBAAuB,KAAK;IACtC,YAAY,yBAAyB,KAAK;IAC1C,WAAW,uBAAuB,KAAK;IACvC,eAAe,4BAA4B,KAAK;GACjD;GACA,MAAM,QAAQ,UAAU,YAAY;GACpC,OAAO,EAAE,KAAK;IAAE;IAAO;IAAU;IAAW;IAAS;GAAa,CAAC;EACpE;CACD,CAAC;CAGD,IAAI,IAAI,aAAa,OAAO,MAAM;EACjC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK;GAC1C,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;GAEjD,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC/C,MAAM,iBAAiB,EAAE,IAAI,MAAM,cAAc;GACjD,IAAI;GACJ,IAAI,gBAAgB;IACnB,cAAc,mBAAmB,cAAc,KAAK,KAAA;IACpD,IAAI,gBAAgB,KAAA,GACnB,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;GAE1D;GACA,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;GAC1C,MAAM,UAAgC,CAAC;GACvC,IAAI,SAAS,QAAQ,UAAU;GAC/B,MAAM,OAAO,MAAM,MAAM,qBAAqB,SAAS,OAAO,eAAe,MAAM,OAAO;GAC1F,OAAO,EAAE,KAAK,IAAI;EACnB;CACD,CAAC;CAED,IAAI,KAAK,mBAAmB,OAAO,MAAM;EACxC,MAAM,QAAQ,SAAS;EACvB,MAAM,SAAS,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,OAAO,IAAI,cAAc,CAAC;EACxE,IAAI,WAAW,OAAO,IAAI,cAAc,GACvC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAElD,MAAM,OAAO;EAOb,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,KAAK,QAAQ,KAAK,IAAI;EAC1E,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,MAAM,QACL,MAAM,SAAS,OACZ,KACA,OAAO,KAAK,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,KAAK,KAAK,SAAS,IAC/E,KAAK,QACL;EACL,IAAI,SAAS,MACZ,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;EAE7D,IAAI,cAA6B;EACjC,IAAI,MAAM,gBAAgB,MAAM;GAC/B,IACC,OAAO,KAAK,iBAAiB,YAC7B,CAAC,OAAO,UAAU,KAAK,YAAY,KACnC,KAAK,eAAe,GAEpB,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;GAEzD,cAAc,KAAK;EACpB;EACA,MAAM,UAAU,OAAO,MAAM,YAAY,YAAY,KAAK,QAAQ,KAAK,IAAI,KAAK,UAAU;EAC1F,IAAI,MAAM,qBAAqB,QAAQ,CAAC,MAAM,QAAQ,KAAK,iBAAiB,GAC3E,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAE9E,IACC,MAAM,QAAQ,MAAM,iBAAiB,KACrC,KAAK,kBAAkB,MAAM,UAAU,OAAO,UAAU,QAAQ,GAEhE,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAE9E,MAAM,kBAAkB,MAAM,QAAQ,MAAM,iBAAiB,IAAI,KAAK,oBAAoB,CAAC;EAC3F,MAAM,UAA8D,CAAC;EACrE,IAAI,SAAS,QAAQ,UAAU;EAC/B,IAAI,gBAAgB,SAAS,GAAG,QAAQ,oBAAoB;EAC5D,MAAM,QAAQ,MAAM,MAAM,0BAA0B,SAAS,OAAO,aAAa,OAAO;EACxF,OAAO,EAAE,KAAK,KAAK;CACpB,CAAC;CAGD,IAAI,IAAI,gBAAgB,MAAM;EAC7B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC/C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK,KAAA;GACpC,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,KAAA;GAC1C,MAAM,UAAyB,CAAC;GAChC,IAAI,MAAM,QAAQ,OAAO;GACzB,IAAI,SAAS,QAAQ,UAAU;GAE/B,MAAM,YADQ,MAAM,OAAO,OAAO,OAChB;GAClB,oBAAoB,OAAO,SAAS;GACpC,6BAA6B,OAAO,SAAS;GAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,UAAU,CAAC;EACnC;CACD,CAAC;CAGD,IAAI,IAAI,mBAAmB,MAAM;EAChC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,eAAe,EAAE,IAAI,MAAM,YAAY;GAC7C,IAAI,CAAC,cACJ,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;GAEpD,MAAM,YAAY,mBAAmB,YAAY;GACjD,IAAI,aAAa,MAChB,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;GAEvD,IAAI,CAAC,4BAA4B,OAAO,SAAS,GAChD,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAGlD,MAAM,OADI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACxB,CAAA,CACX,OAAO,CAAC,CACR,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,YAAY,SAAS,CAAC,CAAC,CACjD,IAAI;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,CAAC;EAC9B;CACD,CAAC;CAGD,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,mBAChB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,OAAO,KAAK,aAAa,EAAE,CAClF;EACA,IAAI,YAAY,QAAQ,YAAY,GACnC,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAEtD,IAAI,CAAC,MAAM,IAAI,QAAQ,GACtB,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,MAAM,aAAa,OAAO,KAAK,cAAc,EAAE,CAAC,CAAC,KAAK;EACtD,IAAI,eAAe,aAAa,eAAe,UAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;EAErE,IAAI;GACH,MAAM,OAAO,MAAM,uBAAuB,UAAU,UAAU;GAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;EACvB,SAAS,KAAK;GACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC3D,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;EAClC;CACD,CAAC;CAGD,IAAI,KAAK,yBAAyB,OAAO,MAAM;EAC9C,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,mBAChB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,OAAO,KAAK,aAAa,EAAE,CAClF;EACA,IAAI,YAAY,QAAQ,YAAY,GACnC,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAEtD,MAAM,UAAU,OAAO,KAAK,WAAW,EAAE,CAAC,CAAC,KAAK;EAChD,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,qCAAqC,GAAG,GAAG;EAEnE,IAAI,CAAC,MAAM,IAAI,QAAQ,GACtB,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,IAAI;GACH,MAAM,SAAS,MAAM,kBAAkB,UAAU,OAAO;GACxD,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,KAAK;GACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC3D,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;EAClC;CACD,CAAC;CAGD,IAAI,KAAK,wBAAwB,OAAO,MAAM;EAC7C,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,mBAChB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,OAAO,KAAK,aAAa,EAAE,CAClF;EACA,IAAI,YAAY,QAAQ,YAAY,GACnC,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAEtD,IAAI,CAAC,MAAM,IAAI,QAAQ,GACtB,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAGjD,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC,CAAC,CACvC,OAAO,CAAC,CACR,KAAK,OAAO,WAAW,CAAC,CACxB,MAAM,GAAG,OAAO,YAAY,IAAI,QAAQ,CAAC,CAAC,CAC1C,IAAI;EACN,IAAI,CAAC,KACJ,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAEjD,IAAI,CAAC,MAAM,kBAAkB,GAA8B,GAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,GAAG,GAAG;EAEhE,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,cAAc,MACtD,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,CAAC;EAG/B,IAAI;GACH,MAAM,OAAO,QAAQ;GACrB,OAAO,EAAE,KAAK,EAAE,QAAQ,KAAK,CAAC;EAC/B,SAAS,KAAK;GACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC3D,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GAChE,IAAI,IAAI,SAAS,8BAA8B,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;GACnF,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG;EAClC;CACD,CAAC;CAED,OAAO;AACR;;;ACl0BA,SAAS,wBAAwB,QAAwD;CACxF,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO;EACN,GAAG;EACH,MAAM;GACL,GAAG,OAAO;GACV,QAAQ,OAAO,KAAK;GACpB,eAAe,OAAO,KAAK;EAC5B;CACD;AACD;AAEA,SAAS,mBACR,eACA,aACA,aACgB;CAChB,IAAI,CAAC,eAAe,OAAO;CAC3B,IAAI,YAAY,QACf,OAAO,6BAA6B,YAAY,WAAW;CAE5D,IAAI,YAAY,UAAU,GACzB,OAAO,GAAG,YAAY,QAAQ,4BAA4B,YAAY,SAAS;CAEhF,OAAO;AACR;AAEA,SAAgB,qBAAqB,MAA2B;CAC/D,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,yBAAyB,MAAM;EACtC,MAAM,QAAQ,MAAM,SAAS;EAC7B,MAAM,UAAU,MAAM,WAAW;EACjC,MAAM,WAAW,MAAM,cAAc,KAAK;EAG1C,IAAI,CAAC,SAAS,OAAO,MAAM,0BAA0B,YACpD,OAAO,EAAE,KAAK;GACb,QAAQ;GACR,uBAAuB,CAAC;GACxB,gBAAgB;GAChB,OAAO;IACN,SAAS;IACT,UAAU;IACV,qBAAqB;IACrB,0BAA0B;GAC3B;EACD,CAAC;EAGF,MAAM,cAAc,MAAM,sBAAsB;EAChD,MAAM,cAAc,SAAS,kBAAkB,KAAK;GAAE,QAAQ;GAAO,YAAY;EAAE;EACnF,MAAM,gBAAgB,MAAM,2BAA2B;EACvD,MAAM,SAAS,wBAAwB,UAAU,UAAU,KAAK,IAAI;EACpE,MAAM,uBAAuB,0BAA0B;EAIvD,MAAM,oBAFL,iBAAiB,SAAS,YAAY,UAAU,YAAY,UAAU,MAGjD,gBAClB;GAAE,GAAG;GAAe,QAAQ,mBAAmB,eAAe,aAAa,WAAW;EAAE,IACxF;EAEJ,OAAO,EAAE,KAAK;GACb;GACA,uBAAuB;GACvB,gBAAgB;GAChB,OAAO;IACN,GAAG;IACH,qBAAqB,YAAY;IACjC,0BAA0B,YAAY;GACvC;EACD,CAAC;CACF,CAAC;CAED,OAAO;AACR;;;ACvFA,IAAM,uBAAuB,IAAI,IAAY,2BAA2B;AACxE,IAAM,+CAA+B,IAAI,IAAI;CAC5C;CACA;CACA;AACD,CAAC;AAMD,SAAS,iBAAe,SAAyC;CAChE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAK,MAAM,EAAE,OAAO;GAAE,MAAM;GAAmB;EAAQ,EAAE;CAAE;AACxF;AAEA,SAAS,SAAS,MAAc,SAAyC;CACxE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAK,MAAM,EAAE,OAAO;GAAE;GAAM;EAAQ,EAAE;CAAE;AACrE;AAEA,SAAS,WAAS,OAAkD;CACnE,OAAO,SAAS,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC1E;AAEA,SAAgB,wBAA8C;CAC7D,OAAO,0BAA0B;AAClC;AAEA,SAAS,mBAAmB,OAAoB,OAAgC;CAC/E,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG,OAAO;CACvD,OAAO,QAAY,cAAc,MAAM,KAAK,CAAC,CAAC,MAAM,QAAY,MAAM,MAAM;AAC7E;AAEA,SAAS,yBAAyB,OAAgD;CACjF,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,CAAC,WAAS,KAAK,GAAG,OAAO;CAC7B,IACC,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,qBAAqB,QACnD,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,qBAAqB,IAAI,GAAG,CAAC,GAE/D,OAAO;CACR,MAAM,WAAW,sBAAsB;CACvC,KAAK,MAAM,OAAO,6BAA6B;EAC9C,MAAM,YAAY,MAAM;EACxB,IAAI,6BAA6B,IAAI,GAAG,GACnC;OAAA,OAAO,cAAc,WAAW,OAAO;EAAA,OACrC,IAAI,cAAc,QAAQ,OAAO,cAAc,UACrD,OAAO;EAER,IAAI,cAAc,SAAS,MAAM,OAAO;CACzC;CACA,OAAO;AACR;AAEA,SAAgB,qBACf,OACA,SACA,UAAgF,CAAC,GACxD;CACzB,IAAI,QAAQ,sBAAsB;EACjC,MAAM,YAAY,OAAO,OAAO,SAAS,SAAS;EAElD,IAAI,cADsB,OAAO,OAAO,SAAS,iBAC/B,GACjB,OAAO,iBAAe,uDAAuD;EAE9E,IAAI,cAAc,QAAQ,WAAW,QAAQ,QAAQ,mBAAmB,OACvE,OAAO,iBAAe,yDAAyD;CAEjF;CACA,MAAM,YAAY,mBAAmB,OAAO,QAAQ,OAAO;CAC3D,IAAI,aAAa,MAAM,OAAO,iBAAe,oCAAoC;CACjF,IAAI,CAAC,WACJ,OAAO,SAAS,sBAAsB,wCAAwC;CAG/E,MAAM,kBAAkB,yBAAyB,QAAQ,eAAe;CACxE,IAAI,oBAAoB,eACvB,OAAO,SAAS,+BAA+B,yCAAyC;CAEzF,IAAI,mBAAmB,MAAM,OAAO,iBAAe,4BAA4B;CAC/E,IAAI,CAAC,iBACJ,OAAO,SAAS,4BAA4B,wCAAwC;CAErF,KACE,QAAQ,0BAA0B,QAAQ,mBAAmB,SAC9D,CAAC,MAAM,mBAAmB,GAE1B,OAAO,SAAS,4BAA4B,wCAAwC;CAErF,OAAO,EAAE,IAAI,KAAK;AACnB;;;AClEA,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,wBAAwB;AAC9B,IAAM,6BAA6B;AACnC,IAAM,eAAe,OAAO,cAAc;AAE1C,IAAM,4BAAY,IAAI,IAAI;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,8BAAc,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,+BAAe,IAAI,IAAI;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,wCAAwB,IAAI,IAAI;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAYD,SAAS,eAAe,SAAiB;CACxC,OAAO,EAAE,OAAO;EAAE,MAAM;EAAmB;CAAQ,EAAE;AACtD;AAEA,SAAS,yBAAyB;CACjC,OAAO,EACN,OAAO;EACN,MAAM;EACN,SAAS;CACV,EACD;AACD;AAEA,SAAS,4BAA4B;CACpC,OAAO,EACN,OAAO;EACN,MAAM;EACN,SAAS;CACV,EACD;AACD;AAEA,SAAS,SAAS,OAAkD;CACnE,OAAO,SAAS,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC1E;AAEA,SAAS,eAAe,OAAwB;CAC/C,OAAO,MAAM,WAAW,KAAK,KAAK,MAAM,WAAW,KAAK;AACzD;AAEA,SAAS,wBAAwB,OAA8B;CAC9D,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,WAAW,QAAQ,SAAS,8BAA8B,eAAe,OAAO,GACpF,OAAO;CAER,MAAM,aAAa,MAAM,UAAU,QAAQ,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE;CACrF,IAAI,CAAC,cAAc,eAAe,OAAO,eAAe,QAAQ,WAAW,WAAW,KAAK,GAC1F,OAAO;CAER,OAAO;AACR;AAEA,SAAS,uBACR,SACA,aACgB;CAChB,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,GAAG,MAAM,IAAI,0BACxD,OAAO;CAER,KAAK,MAAM,OAAO,OAAO,KAAK,OAAO,GAAG;EACvC,IAAI,sBAAsB,IAAI,GAAG,GAAG,OAAO,4CAA4C;EACvF,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,OAAO,+CAA+C;CAClF;CACA,IAAI,OAAO,QAAQ,eAAe,YAAY,QAAQ,WAAW,WAAW,GAC3E,OAAO;CAER,IACC,QAAQ,iBAAiB,SACxB,OAAO,QAAQ,kBAAkB,YACjC,CAAC,OAAO,UAAU,QAAQ,aAAa,KACvC,QAAQ,gBAAgB,IAEzB,OAAO;CAER,KAAK,MAAM,OAAO;EACjB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD,GAAY;EACX,MAAM,QAAQ,QAAQ;EACtB,IAAI,SAAS,SAAS,OAAO,UAAU,YAAY,MAAM,SAAS,2BACjE,OAAO,yBAAyB,IAAI;EAErC,IAAI,OAAO,UAAU,YAAY,eAAe,KAAK,GACpD,OAAO,oDAAoD;CAE7D;CACA,OAAO;AACR;AAEA,SAAS,gBAAgB,SAA6D;CACrF,OAAO;EACN,WAAW,QAAQ;EACnB,WAAY,QAAQ,+BAAqC,IAAI,KAAK,EAAA,CAAE,YAAY;EAChF,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,QAAS,QAAQ,UAAiC;EAClD,UAAW,QAAQ,aAAoC;EACvD,iBAAkB,QAAQ,qBAA4C;EACtE,cAAe,QAAQ,iBAAwC;EAC/D,WAAY,QAAQ,cAAqC;CAC1D;AACD;AAEA,SAAS,yBAAyB,OAAkD;CACnF,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GAClC,IAAI,QAAQ,YAAY,QAAQ,mBAC/B,OAAO,iDAAiD;CAG1D,MAAM,SAAS,MAAM;CACrB,MAAM,gBAAgB,MAAM;CAC5B,IAAI,OAAO,WAAW,YAAY,CAAC,OAAO,KAAK,KAAK,OAAO,SAAS,IACnE,OAAO;CAER,IACC,OAAO,kBAAkB,YACzB,CAAC,cAAc,KAAK,KACpB,cAAc,SAAS,4BACvB,eAAe,aAAa,GAE5B,OAAO;CAER,OAAO;EAAE,QAAQ,OAAO,KAAK;EAAG,eAAe,cAAc,KAAK;CAAE;AACrE;AAEA,SAAS,+BACR,OACA,SAC+C;CAC/C,IAAI,OAAO,OAAO,OAAO,mBAAmB,GAC3C,OAAO,yBAAyB,MAAM,iBAAiB;CAExD,IAAI,CAAC,SAAS,OAAO,KAAA;CAIrB,MAAM,SAAS,OAAO,QAAQ,WAAW,WAAW,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY,IAAI;CAC1F,IAAI,UAAU,WAAW,YAAY,OAAO,KAAA;CAC5C,MAAM,gBAAgB,QAAQ;CAC9B,IAAI,WAAW,cAAc,OAAO,kBAAkB,YAAY,cAAc,KAAK,GACpF,OAAO;EAAE;EAAQ,eAAe,cAAc,KAAK;CAAE;CAEtD,OAAO;AACR;AAEA,SAAS,kBAAkB,OAA+D;CACzF,IAAI,MAAM,WAAW,QAAQ,MAAM,wBAAwB,MAAM,OAAO,KAAA;CACxE,OAAO;EACN,SAAS,MAAM,YAAY,QAAQ,MAAM,wBAAwB;EACjE,GAAI,MAAM,wBAAwB,OAC/B,EAAE,oBAAoB,MAAM,qBAA+B,IAC3D,CAAC;CACL;AACD;AAEA,SAAS,gBAAgB,SAA+B;CACvD,OAAO;EACN,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;CACT;AACD;AAEA,SAAS,oBAAoB,OAA+C;CAC3E,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GAClC,IAAI,CAAC,UAAU,IAAI,GAAG,GAAG,OAAO,4CAA4C;CAE7E,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,QAAQ,KAAK,IAAI;CAC3E,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,QAAQ,MAAM,SAAS;CAC7B,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GACpE,OAAO;CAER,MAAM,cAAc,MAAM,gBAAgB;CAC1C,IACC,gBAAgB,SACf,OAAO,gBAAgB,YAAY,CAAC,OAAO,UAAU,WAAW,KAAK,cAAc,IAEpF,OAAO;CAER,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,iBAAiB,WAC/D,OAAO;CAER,IAAI,MAAM,WAAW,SAAS,OAAO,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,KAAK,IACtF,OAAO;CAER,IACC,MAAM,OAAO,SACZ,OAAO,MAAM,QAAQ,YAAY,CAAC,MAAM,IAAI,KAAK,KAAK,CAAC,WAAW,MAAM,GAAG,IAE5E,OAAO;CAER,IAAI,MAAM,qBAAqB,QAAQ,CAAC,MAAM,QAAQ,MAAM,iBAAiB,GAC5E,OAAO;CAER,MAAM,mBAAoB,MAAM,qBAAqB,CAAC;CACtD,IAAI,iBAAiB,SAAS,uBAC7B,OAAO,0CAA0C,sBAAsB;CAExE,MAAM,kBAA4B,CAAC;CACnC,KAAK,MAAM,SAAS,kBAAkB;EACrC,IAAI,OAAO,UAAU,UACpB,OAAO;EAER,MAAM,aAAa,wBAAwB,KAAK;EAChD,IAAI,CAAC,YAAY,OAAO;EACxB,IAAI,CAAC,gBAAgB,SAAS,UAAU,GAAG,gBAAgB,KAAK,UAAU;CAC3E;CACA,IAAI,MAAM,WAAW,QAAQ,OAAO,MAAM,YAAY,WACrD,OAAO;CAER,IACC,MAAM,wBAAwB,SAC7B,OAAO,MAAM,yBAAyB,YACtC,CAAC,OAAO,UAAU,MAAM,oBAAoB,KAC5C,MAAM,uBAAuB,IAE9B,OAAO;CAER,IAAI;CACJ,IAAI,MAAM,WAAW,MAAM;EAC1B,IAAI,CAAC,SAAS,MAAM,OAAO,GAAG,OAAO;EACrC,MAAM,eAAe,uBAAuB,MAAM,SAAS,YAAY;EACvE,IAAI,cAAc,OAAO;EACzB,UAAU,MAAM;CACjB;CACA,MAAM,mBAAmB,+BAA+B,OAAO,OAAO;CACtE,IAAI,OAAO,qBAAqB,UAAU,OAAO;CAEjD,MAAM,UAAyB,CAAC;CAChC,IAAI,MAAM,iBAAiB,MAAM;EAChC,MAAM,aAAa,QAAQ,IAAI,iBAAiB,KAAK,KAAK;EAC1D,MAAM,aAAa,MAAM;EACzB,MAAM,iBAAiB,MAAM;EAC7B,MAAM,UAAU,eACf,cAAc,QAAQ,IAAI,GAC1B,mBAAmB,cAAc,OAAO,aAAa,KAAA,EACtD;EACA,IAAI,SAAS,QAAQ,UAAU;CAChC;CACA,IAAI,gBAAgB,SAAS,GAAG,QAAQ,oBAAoB;CAE5D,OAAO;EACN;EACA;EACa;EACb;EACA,eAAe,kBAAkB,KAAK;EACtC;EACA;CACD;AACD;AAEA,SAAS,oBAAoB,QAA6D;CACzF,IAAI,WAAW,wBAAwB,OAAO;CAC9C,IAAI,WAAW,qBAAqB,OAAO;CAC3C,IAAI,WAAW,uBAAuB,OAAO;CAC7C,OAAO;AACR;AAEA,SAAS,0BACR,OACA,SAC8C;CAC9C,MAAM,SAAS,QAAQ;CACvB,IAAI,QAAQ,qBAAqB,KAAA,KAAa,WAAW,UAAU,OAAO;CAC1E,MAAM,qBACL,6BAA6B,QAAQ,gBAAgB,KACrD,OAAO,QAAQ,mBAAmB,YAClC,iBAAiB,KAAK,QAAQ,cAAc;CAC7C,IAAI,WAAW,YAAY;EAC1B,IAAI,CAAC,oBAAoB,OAAO;EAChC,IAAI;GACH,sBACC,MAAM,IACN,QAAQ,YACR,QAAQ,gBACR,QAAQ,gBACT;EACD,QAAQ,CAER;EACA,OAAO;CACR;CACA,IAAI,WAAW,YAAY,CAAC,oBAC3B,OAAO;CAER,OAAO,sBACN,MAAM,IACN,QAAQ,YACR,QAAQ,gBACR,QAAQ,gBACT;AACD;AAEA,SAAS,eACR,OACA,SACyB;CACzB,MAAM,SAAS,QAAQ;CACvB,MAAM,WAAW,gBAAgB,OAAO;CACxC,IAAI,WAAW,YAAY;EAC1B,MAAM,SAAS,QAAQ;EACvB,IAAI,WAAW,gBAAgB,WAAW,YAAY,WAAW,WAChE,OAAO;EAER,MAAM,UAAU,2BAA2B,MAAM,IAAI,SAAS,WAAW,MAAM;EAC/E,IAAI,QAAQ,IAAI,0BAA0B,OAAO,OAAO;EACxD,OAAO;CACR;CACA,MAAM,cAAc,0BAA0B,OAAO,OAAO;CAC5D,IAAI,gBAAgB,MAAM,OAAO;CACjC,IAAI,WAAW,eAAe;EAC7B,IAAI,OAAO,QAAQ,wBAAwB,YAAY,CAAC,QAAQ,qBAC/D,OAAO;EAER,OAAO,uBAAuB,MAAM,IAAI,QAAQ,qBAAqB,QAAQ;CAC9E;CACA,IAAI,WAAW,UAAU,OAAO;CAChC,IACE,QAAQ,qBAAqB,aAAa,QAAQ,qBAAqB,YACxE,OAAO,QAAQ,iBAAiB,YAChC,CAAC,QAAQ,gBACT,OAAO,QAAQ,kBAAkB,YACjC,CAAC,QAAQ,eAET,OAAO;CAER,OAAO,yBACN,MAAM,IACN,UACA,QAAQ,kBACR,QAAQ,cACR,QAAQ,aACT;AACD;AAEA,SAAgB,oBAAoB,UAAwB;CAC3D,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,6BAA6B,MAAM;EAC1C,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,IAAI,CAAC,MAAM,mBAAmB,GAAG,OAAO,EAAE,KAAK,uBAAuB,GAAG,GAAG;GAC5E,OAAO,EAAE,KAAK;IACb,SAAS;IACT,kBAAkB,gCAAgC;IAClD,gCAAgC,gCAAgC;IAChE,SAAS,QAAY,MAAM,MAAM;IACjC,iBAAiB,sBAAsB;GACxC,CAAC;EACF,QAAQ;GACP,OAAO,EAAE,KACR,EAAE,OAAO;IAAE,MAAM;IAAkB,SAAS;GAAmC,EAAE,GACjF,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,aAAa,OAAO,MAAM;EAClC,MAAM,SAAS,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,YAAY;EAC1D,IAAI,WAAW,cAAc,OAAO,EAAE,KAAK,eAAe,mBAAmB,GAAG,GAAG;EACnF,MAAM,UAAU,oBAAoB,MAAM;EAC1C,IAAI,OAAO,YAAY,UAAU;GAChC,IAAI,QAAQ,WAAW,0CAA0C,GAChE,OAAO,EAAE,KAAK,0BAA0B,GAAG,GAAG;GAC/C,OAAO,EAAE,KAAK,eAAe,OAAO,GAAG,GAAG;EAC3C;EACA,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,QAAQ,EAAE,wBAAwB,KAAK,CAAC;GACnF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,IAAI,CAAC,QAAQ,SAAS;IACrB,MAAM,OAAO,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,OAAO,CAAC;IACzE,OAAO,EAAE,KAAK,IAAI;GACnB;GACA,MAAM,YAAY,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,OAAO,CAAC;GACvF,IAAI;GACJ,IAAI;IACH,4BAA4B,8BAC3B,MAAM,IACN,QAAQ,SACR,QAAQ,SACR,SACD;GACD,QAAQ,CAER;GACA,IAAI;GACJ,IAAI;IACH,gBAAgB,0BACf,MAAM,IACN,gBAAgB,QAAQ,OAAO,GAC/B,QAAQ,SACR,QAAQ,SACR,SACD;GACD,QAAQ,CAER;GACA,OAAO,EAAE,KAAK;IACb,GAAG,UAAU;IACb,GAAI,4BACD,EAAE,6BAA6B,0BAA0B,IACzD,CAAC;IACJ,GAAI,eAAe,OAAO,SAAS,cAAc,WAAW,yBACzD,EAAE,gBAAgB,cAAc,IAChC,CAAC;GACL,CAAC;EACF,QAAQ;GACP,OAAO,EAAE,KACR,EAAE,OAAO;IAAE,MAAM;IAAe,SAAS;GAAiC,EAAE,GAC5E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,2BAA2B,OAAO,MAAM;EAChD,MAAM,SAAS,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,YAAY;EAC1D,IAAI,WAAW,cAAc,OAAO,EAAE,KAAK,eAAe,mBAAmB,GAAG,GAAG;EACnF,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,EAAE,KAAK,eAAe,gCAAgC,GAAG,GAAG;EAC1F,MAAM,kBAAkB,uBAAuB,QAAQ,WAAW;EAClE,IAAI,iBAAiB;GACpB,IAAI,gBAAgB,WAAW,6CAA6C,GAC3E,OAAO,EAAE,KAAK,0BAA0B,GAAG,GAAG;GAC/C,OAAO,EAAE,KAAK,eAAe,eAAe,GAAG,GAAG;EACnD;EACA,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,QAAQ,EAAE,wBAAwB,KAAK,CAAC;GACnF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,MAAM,UAAU,eAAe,OAAO,MAAM;GAC5C,IAAI,OAAO,YAAY,UAAU,OAAO,EAAE,KAAK,eAAe,OAAO,GAAG,GAAG;GAC3E,IAAI,QAAQ,IAAI,OAAO,EAAE,KAAK,OAAO;GACrC,OAAO,EAAE,KAAK,SAAS,oBAAoB,QAAQ,MAAM,CAAC;EAC3D,QAAQ;GACP,OAAO,EAAE,KACR,EAAE,OAAO;IAAE,MAAM;IAAiB,SAAS;GAAsC,EAAE,GACnF,GACD;EACD;CACD,CAAC;CAED,OAAO;AACR;;;;;;;AC5gBA,IAAM,oCAAoC;AAE1C,SAAS,kCAA0C;CAClD,MAAM,SAAS,OAAO,QAAQ,IAAI,mCAAmC,KAAK,KAAK,EAAE;CACjF,OAAO,OAAO,cAAc,MAAM,KAAK,SAAS,IAAI,SAAS;AAC9D;AAEA,IAAM,4BAA4B,gCAAgC;AAIlE,SAAS,+BAAwD;CAChE,OAAO;EACN,IAAI;EACJ,cAAc;EACd,eAAe;EACf,YAAY;EACZ,oBAAoB;EACpB,qBAAqB;CACtB;AACD;AAEA,SAAS,8BAA8B;CACtC,MAAM,SAAkE;EACvE,QAAQ,6BAA6B;EACrC,OAAO,6BAA6B;CACrC;CACA,OAAO;EACN,OAAO,QAAgC,SAAsC;GAC5E,OAAO,OAAO,CAAC,YAAY;EAC5B;EACA,WAAW;GACV,OAAO;IACN,OAAO;IACP,QAAQ;KACP,QAAQ,EAAE,GAAG,OAAO,OAAO;KAC3B,OAAO,EAAE,GAAG,OAAO,MAAM;IAC1B;GACD;EACD;CACD;AACD;AAEA,SAAS,uBAAuB,SAAuC;CACtE,IAAI,YAAY,QAAQ,YAAY,MACnC,OAAO;EACN,UAAU;EACV,SAAS;EACT,aAAa;EACb,aAAa;CACd;CAED,OAAO;EAAE,UAAU;EAAG,SAAS;EAAG,aAAa;CAA4B;AAC5E;AAEA,SAAS,uBAA+B;CACvC,OAAO,KAAK,QAAQ,IAAI,mBAAmB,KAAK,KAAK,KAAK,QAAQ,GAAG,SAAS,GAAG,UAAU;AAC5F;AAEA,SAAS,sBAA8B;CACtC,OAAO,KAAK,QAAQ,IAAI,YAAY,KAAK,KAAK,KAAK,QAAQ,GAAG,QAAQ,GAAG,UAAU;AACpF;;AAGA,SAAS,aACR,SACA,UACO;CACP,KAAK,MAAM,WAAW,UACrB,IAAI;EACH,SAAS,MAAM,QAAQ,UAAU,QAAQ,MAAM;CAChD,QAAQ,CAER;AAEF;AAEA,eAAe,sBACd,SACA,UACgB;CAChB,KAAK,MAAM,WAAW,UACrB,IAAI;EACH,MAAM,SAAS,cAAc,QAAQ,UAAU,QAAQ,MAAM;CAC9D,QAAQ,CAER;AAEF;AAEA,SAAS,yBAAyB,UAA2B;CAC5D,MAAM,SAAS;CACf,IACC,OAAO,OAAO,UAAU,EAAE,CAAC,CACzB,KAAK,CAAC,CACN,YAAY,MAAM,UAEpB,OAAO;CACR,MAAM,UAAU,OAAO;CACvB,IAAI,WAAW,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG,OAAO;CACrF,MAAM,UAAW,QAAoC;CACrD,IAAI,WAAW,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG,OAAO;CACrF,MAAM,OAAQ,QAAoC;CAClD,IAAI,QAAQ,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG,OAAO;CAC5E,MAAM,gBAAiB,KAAiC;CACxD,OAAO,kBAAkB,gBAAgB,kBAAkB;AAC5D;AAEA,IAAM,gDAAgC,IAAI,IAAI;CAC7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAS,+BAA+B,OAA8C;CACrF,OAAO,8BAA8B,IAAI,MAAM,OAAO,IACnD,MAAM,UACN;AACJ;AAEA,SAAS,2BAA2B,GAAkB,OAA0B;CAC/E,IAAI,iBAAiB,+BACpB,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,KAAK,EAAE,GAAG,GAAG;CAEpE,MAAM,WAAoC,EAAE,OAAO,wBAAwB;CAC3E,IAAI,QAAQ,IAAI,yBAAyB,KACxC,SAAS,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CAExE,OAAO,EAAE,KAAK,UAAU,GAAG;AAC5B;AAEA,SAAS,kBAAkB,SAA2D;CACrF,MAAM,EAAE,SAAS,SAAS,iBAAiB,iBAAiB,GAAG,SAAS;CACxE,OAAO;AACR;AAEA,eAAe,yBACd,OACA,SACA,UACA,gBAAgB,OACf;CACD,MAAM,SAAS,gBAAgB,OAAO,QAAQ;CAC9C,aAAa,SAAS,OAAO,QAAQ;CACrC,IAAI,iBAAiB,yBAAyB,QAAQ,GACrD,MAAM,sBAAsB,SAAS,OAAO,QAAQ;CAErD,OAAO;AACR;AAEA,SAAgB,gBAAgB,UAAwB,SAAkC;CACzF,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,wBAAwB,4BAA4B;CAG1D,IAAI,IAAI,oBAAoB,MAAM;EAEjC,MAAM,SADQ,SACC,CAAA,CAAM,sBAAsB;EAC3C,OAAO,EAAE,KAAK,MAAM;CACrB,CAAC;CAGD,IAAI,IAAI,2BAA2B,MAAM;EACxC,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;EAmB/C,MAAM,QAlBI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACxB,CAAA,CACX,OAAO;GACP,QAAQ,OAAO,iBAAiB;GAChC,WAAW,OAAO,iBAAiB;GACnC,qBAAqB,OAAO,iBAAiB;GAC7C,KAAK,OAAO,iBAAiB;GAC7B,SAAS,OAAO,iBAAiB;GACjC,YAAY,OAAO,iBAAiB;GACpC,sBAAsB,OAAO,iBAAiB;GAC9C,yBAAyB,OAAO,iBAAiB;GACjD,wBAAwB,OAAO,iBAAiB;GAChD,YAAY,OAAO,iBAAiB;EACrC,CAAC,CAAC,CACD,KAAK,OAAO,gBAAgB,CAAC,CAC7B,QAAQ,KAAK,OAAO,iBAAiB,UAAU,CAAC,CAAC,CACjD,MAAM,KAAK,CAAC,CACZ,IACY,CAAA,CAAK,KAAK,QAAQ;GAC/B,MAAM,WAAW,OAAO,IAAI,aAAa,IAAI,uBAAuB,EAAE;GACtE,OAAO;IACN,GAAG;IACH,mBAAmB;IACnB,YAAY;GACb;EACD,CAAC;EACD,MAAM,SAAS,MAAM,sBAAsB;EAC3C,OAAO,EAAE,KAAK;GACb;GACA;GACA,QAAQ;IACP,WAAW;IACX,MAAM;IACN,gBAAgB;GACjB;GACA,wBAAwB,sBAAsB,SAAS;EACxD,CAAC;CACF,CAAC;CAGD,IAAI,KAAK,mBAAmB,OAAO,MAAM;EACxC,MAAM,SAAS,MAAM,oBAAoB,GAAG,yBAAyB;EACrE,IAAI,kBAAkB,UAAU,OAAO;EACvC,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,QAAQ,EAAE,sBAAsB,KAAK,CAAC;GACjF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,MAAM,eAAe,MAAM,yBAC1B,OACA,SACA,kBAAkB,MAAM,GACxB,EAAE,IAAI,OAAO,0BAA0B,MAAM,GAC9C;GACA,OAAO,EAAE,KAAK;IACb,UAAU,aAAa;IACvB,SAAS,aAAa;IACtB,UAAU,aAAa;GACxB,CAAC;EACF,SAAS,KAAK;GACb,OAAO,2BAA2B,GAAG,GAAG;EACzC;CACD,CAAC;CAGD,IAAI,KAAK,qBAAqB,OAAO,MAAM;EAC1C,MAAM,SAAS,MAAM,oBAAoB,GAAG,yBAAyB;EACrE,IAAI,kBAAkB,UAAU,OAAO;EACvC,MAAM,UAAU;EAEhB,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,SAAS,EAAE,sBAAsB,KAAK,CAAC;GAClF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,IAAI,oBAAkD;GACtD,MAAM,WAAW,8BAA8B,kBAAkB,OAAO,GAAG;IAC1E,kBAAkB;KAAE,OAAO;KAAc,eAAe,CAAC,qBAAqB,CAAC;IAAE;IACjF,sBAAsB,YAAY;KACjC,oBAAoB;KACpB,sBAAsB,OAAO,UAAU,OAAO;IAC/C;GACD,CAAC;GACD,IAAI,aAAa,MAChB,OAAO,EAAE,KAAK,uBAAuB,iBAAiB,CAAC;GAExD,MAAM,eAAe,MAAM,yBAC1B,OACA,SACA,UACA,EAAE,IAAI,OAAO,0BAA0B,MAAM,GAC9C;GACA,OAAO,EAAE,KAAK;IAAE,UAAU,aAAa;IAAU,SAAS,aAAa;GAAQ,CAAC;EACjF,SAAS,KAAK;GACb,OAAO,2BAA2B,GAAG,GAAG;EACzC;CACD,CAAC;CAGD,IAAI,KAAK,oBAAoB,OAAO,MAAM;EACzC,MAAM,SAAS,MAAM,oBAAoB,GAAG,yBAAyB;EACrE,IAAI,kBAAkB,UAAU,OAAO;EACvC,MAAM,UAAU;EAEhB,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,qBAAqB,OAAO,SAAS,EAAE,sBAAsB,KAAK,CAAC;GAClF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,OAAO,MAAM,OAAO,MAAM;GACxD,IAAI,oBAAkD;GACtD,MAAM,WAAW,mCAAmC,kBAAkB,OAAO,GAAG;IAC/E,kBAAkB;KAAE,OAAO;KAAc,eAAe,CAAC,oBAAoB,CAAC;IAAE;IAChF,sBAAsB,YAAY;KACjC,oBAAoB;KACpB,sBAAsB,OAAO,SAAS,OAAO;IAC9C;GACD,CAAC;GACD,IAAI,aAAa,MAChB,OAAO,EAAE,KAAK,uBAAuB,iBAAiB,CAAC;GAExD,MAAM,eAAe,MAAM,yBAAyB,OAAO,SAAS,QAAQ;GAC5E,OAAO,EAAE,KAAK;IAAE,UAAU,aAAa;IAAU,SAAS,aAAa;GAAQ,CAAC;EACjF,SAAS,KAAK;GACb,OAAO,2BAA2B,GAAG,GAAG;EACzC;CACD,CAAC;CAED,OAAO;AACR;;;;;;;;ACpUA,SAAS,sBAAsB,KAIV;CACpB,OAAO,CAAC,IAAI,cAAc,IAAI,YAAY,IAAI,IAAI;AACnD;AAEA,SAAS,4BAEP,MAAgB;CACjB,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM;EAC/B,MAAM,CAAC,OAAO,SAAS,sBAAsB,CAAC;EAC9C,MAAM,CAAC,OAAO,SAAS,sBAAsB,CAAC;EAC9C,IAAI,UAAU,OAAO,OAAO,MAAM,cAAc,KAAK;EACrD,OAAO,MAAM,cAAc,KAAK;CACjC,CAAC;AACF;AAEA,IAAM,0BAA0B;CAAC;CAAiB;CAAa;CAAe;AAAc;AAkB5F,SAAS,WACR,KACA,UACW;CACX,OAAO;EACN,IAAI,OAAO,IAAI,MAAM,CAAC;EACtB,YAAY,IAAI,cAAc,OAAO,OAAO,OAAO,IAAI,UAAU;EACjE,OAAO,OAAO,IAAI,SAAS,MAAM;EACjC,aAAa,OAAO,IAAI,eAAe,CAAC;EACxC,gBAAgB,OAAO,IAAI,kBAAkB,CAAC;EAC9C,cAAc,OAAO,IAAI,gBAAgB,CAAC;EAC1C,YAAY,OAAO,IAAI,cAAc,EAAE;EACvC,eAAe;CAChB;AACD;AAEA,SAAS,kBAAkB,OAA0B;CACpD,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MACL,KAAK,SAAU,OAAO,SAAS,WAAW,OAAO,OAAO,IAAI,CAAE,CAAC,CAC/D,QAAQ,SAAS,OAAO,UAAU,IAAI,KAAK,OAAO,CAAC;AACtD;AAEA,SAAS,aAAa,QAAkB,YAAY,KAAiB;CACpE,MAAM,SAAqB,CAAC;CAC5B,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,WACnD,OAAO,KAAK,OAAO,MAAM,OAAO,QAAQ,SAAS,CAAC;CAEnD,OAAO;AACR;AAEA,SAAS,mBAAmB,OAAoB,WAAqC;CACpF,IAAI,UAAU,SAAS,GAAG,uBAAO,IAAI,IAAI;CACzC,MAAM,eAAe,8BAA8B,MAAM;EACxD,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,wBAAwB;CACzB,CAAC;CACD,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,SAAS,aAAa,CAAC,GAAG,SAAS,CAAC,GAAG;EAEjD,MAAM,UAAU;GACf;GACA,uBAHoB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAGvB,EAAa;GACpC,GAAG,aAAa;EACjB;EACA,MAAM,OAAO,MAAM,GACjB,QAAQ,kDAAkD,QAAQ,KAAK,OAAO,GAAG,CAAC,CAClF,IAAI,GAAG,OAAO,GAAG,aAAa,MAAM;EACtC,KAAK,MAAM,OAAO,MAAM,WAAW,IAAI,OAAO,IAAI,EAAE,CAAC;CACtD;CACA,OAAO;AACR;AAEA,SAAS,oBAAoB,OAAoB,YAAsC;CACtF,IAAI,WAAW,SAAS,GAAG,uBAAO,IAAI,IAAI;CAC1C,MAAM,eAAe,8BAA8B,MAAM;EACxD,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,wBAAwB;CACzB,CAAC;CACD,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,SAAS,aAAa,CAAC,GAAG,UAAU,CAAC,GAAG;EAElD,MAAM,UAAU;GACf;GACA,+BAHoB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAGf,EAAa;GAC5C,GAAG,aAAa;EACjB;EACA,MAAM,OAAO,MAAM,GACjB,QACA;;aAES,QAAQ,KAAK,OAAO,GAC9B,CAAC,CACA,IAAI,GAAG,OAAO,GAAG,aAAa,MAAM;EACtC,KAAK,MAAM,OAAO,MACjB,IAAI,OAAO,IAAI,eAAe,UAAU,WAAW,IAAI,IAAI,UAAU;CAEvE;CACA,OAAO;AACR;AAEA,SAAS,qBAAqB,OAAoB,MAAmC;CACpF,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,6BAAa,IAAI,IAAY;CACnC,KAAK,MAAM,OAAO,MAAM;EACvB,IAAI,OAAO,IAAI,eAAe,UAAU,WAAW,IAAI,IAAI,UAAU;EACrE,KAAK,MAAM,OAAO,yBACjB,KAAK,MAAM,YAAY,kBAAkB,IAAI,gBAAgB,IAAI,GAChE,UAAU,IAAI,QAAQ;CAGzB;CACA,OAAO;EACN,kBAAkB,mBAAmB,OAAO,SAAS;EACrD,mBAAmB,oBAAoB,OAAO,UAAU;CACzD;AACD;AAEA,SAAS,gBAAgB,KAAe,YAAsC;CAC7E,MAAM,oBACL,IAAI,cAAc,QAAQ,WAAW,kBAAkB,IAAI,IAAI,UAAU;CAC1E,MAAM,cAAc,IAAI,eAAe;CACvC,IAAI,MAAM,QAAQ,WAAW,GAAG;EAC/B,IAAI,YAAY,WAAW,GAC1B,OAAO,IAAI,cAAc,QAAQ,WAAW,kBAAkB,IAAI,IAAI,UAAU;EAEjF,OACC,qBACA,kBAAkB,WAAW,CAAC,CAAC,MAAM,aAAa,WAAW,iBAAiB,IAAI,QAAQ,CAAC;CAE7F;CACA,OAAO,IAAI,cAAc,QAAQ,WAAW,kBAAkB,IAAI,IAAI,UAAU;AACjF;AAEA,SAAS,0BACR,UACA,YACiC;CACjC,IAAI,CAAC,UAAU,OAAO;CACtB,MAAM,YAAY,EAAE,GAAG,SAAS;CAChC,KAAK,MAAM,OAAO,yBACjB,IAAI,MAAM,QAAQ,UAAU,IAAI,GAC/B,UAAU,OAAO,kBAAkB,UAAU,IAAI,CAAC,CAAC,QAAQ,aAC1D,WAAW,iBAAiB,IAAI,QAAQ,CACzC;CAGF,OAAO;AACR;;;;;;AAeA,SAAS,mBAAmB,MAAsD;CACjF,OAAO,KACL,KAAK,SAAS;EACd,OAAO,IAAI;EACX,mBAAmB,IAAI;EACvB,sBAAsB,IAAI;EAC1B,oBAAoB,IAAI;EACxB,OAAO,IAAI;CACZ,EAAE,CAAC,CACF,MAAM,GAAG,MAAM,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AAChD;;;;AAKA,SAAS,oBAAoB,MAK3B;CACD,OAAO,KAAK,QACV,KAAK,SAAS;EACd,aAAa,IAAI,cAAc,IAAI;EACnC,gBAAgB,IAAI,iBAAiB,IAAI;EACzC,cAAc,IAAI,eAAe,IAAI;EACrC,OAAO,IAAI,QAAQ,IAAI;CACxB,IACA;EAAE,aAAa;EAAG,gBAAgB;EAAG,cAAc;EAAG,OAAO;CAAE,CAChE;AACD;;;;;;;;;;;;AAoBA,IAAM,oCAAoB,IAAI,IAA6B;AAC3D,IAAM,yBAAyB;;;;;;;;;AAU/B,IAAM,kCAAkC;;;;;;;;;;;;;AAcxC,SAAS,uBAAuB,OAAqC,OAAqB;CACzF,KAAK,MAAM,CAAC,KAAK,UAAU,OAC1B,IAAI,MAAM,eAAe,OAAO,MAAM,OAAO,GAAG;CAEjD,IAAI,MAAM,OAAO,iCAAiC;CAGlD,MAAM,WAAW,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,WAAW;CACxF,IAAI,WAAW,MAAM,OAAO,kCAAkC;CAC9D,KAAK,MAAM,CAAC,QAAQ,UAAU;EAC7B,IAAI,YAAY,GAAG;EACnB,MAAM,OAAO,GAAG;EAChB,YAAY;CACb;AACD;;;;;;;;;;;AAYA,SAAS,0BAA0B,OAA4B;CAC9D,IAAI;EACH,MAAM,MAAM,MAAM,GAChB,QACA;;;;;;;iFAQD,CAAC,CACA,IAAI;EACN,IAAI,CAAC,KAAK,OAAO;EACjB,OAAO;GACN,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;EACL,CAAC,CAAC,KAAK,GAAG;CACX,QAAQ;EAGP,OAAO,UAAU,KAAK,IAAI,EAAE,GAAG,KAAK,OAAO;CAC5C;AACD;AAEA,SAAS,cAAc,OAAoB,eAAsC;CAChF,MAAM,uBAAuB,0BAA0B,KAAK;CAC5D,OAAO,GAAG,MAAM,OAAO,GAAG,MAAM,QAAQ,GAAG,MAAM,SAAS,GAAG,iBAAiB,GAAG,GAAG;AACrF;;;;;AAMA,SAAgB,YAAY,UAA6B;CACxD,MAAM,MAAM,IAAI,KAAK;CAErB,MAAM,qBAAqB,UAAmD;EAC7E,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG,OAAO;EACvD,IAAI;GACH,OAAO,KAAK,MAAM,KAAK;EACxB,QAAQ;GACP,OAAO;EACR;CACD;CAKA,MAAM,+BAA+B;CAErC,IAAI,IAAI,eAAe,MAAM;EAC5B,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,oBAAoB,MAAM,EAAE;EACzC,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,eAAe,4BACpB,KAAK,QAAQ,QAAQ;GACpB,IAAI,IAAI,WAAW,aAAa,IAAI,WAAW,aAAa,IAAI,WAAW,UAC1E,OAAO;GAER,IAAI,IAAI,WAAW,eAAe,IAAI,aAAa;IAClD,MAAM,WAAW,KAAK,MAAM,IAAI,WAAW;IAC3C,IAAI,OAAO,SAAS,QAAQ,KAAK,MAAM,YAAY,8BAClD,OAAO;GAET;GACA,OAAO;EACR,CAAC,CACF,CAAC,CAAC,KAAK,SAAS;GACf,MAAM,IAAI;GACV,OAAO,IAAI;GACX,QAAQ,IAAI;GACZ,SAAS,IAAI;GACb,UAAU,IAAI;GACd,aAAa,IAAI;GACjB,OAAO,IAAI;EACZ,EAAE;EACF,OAAO,EAAE,KAAK;GACb,GAAG,YAAY,KAAK;GACpB,YAAY,QAAQ;GACpB,kBAAkB;EACnB,CAAC;CACF,CAAC;CAED,IAAI,IAAI,iBAAiB,MAAM;EAC9B,OAAO,EAAE,KAAK,EACb,SAAS,UACV,CAAC;CACF,CAAC;CAED,IAAI,IAAI,eAAe,MAAM;EAC5B,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,gBAAgB,EAAE,IAAI,MAAM,SAAS,KAAK;GAChD,MAAM,WAAW,cAAc,OAAO,aAAa;GACnD,MAAM,QAAQ,KAAK,IAAI;GACvB,MAAM,SAAS,kBAAkB,IAAI,QAAQ;GAC7C,IAAI,UAAU,QAAQ,OAAO,aAC5B,OAAO,EAAE,KAAK,OAAO,OAAO;GAO7B,MAAM,kBAAkB,MAAM,eAAe;GAC7C,MAAM,eAAe,mBAAmB,eAAe;GACvD,MAAM,eAAe,oBAAoB,eAAe;GACxD,MAAM,oBAAoB,gBAAgB,MAAM,eAAe,aAAa,IAAI;GAChF,MAAM,iBAAiB,oBAAoB,mBAAmB,iBAAiB,IAAI;GACnF,MAAM,iBAAiB,oBAAoB,oBAAoB,iBAAiB,IAAI;GAYpF,MAAM,yBAAyB;GAC/B,MAAM,wBAAwB,YAAwC;IAwBrE,QAvBa,UACT,MAAM,GACN,QACA;;;;;;;iBAQD,CAAC,CACA,IAAI,SAAS,sBAAsB,IACnC,MAAM,GACN,QACA;;;;;iBAMD,CAAC,CACA,IAAI,sBAAsB,EAAA,CAClB,KAAK,QAAQ,WAAW,KAAK,kBAAkB,IAAI,aAAa,CAAC,CAAC;GAC/E;GACA,MAAM,eAAe,qBAAqB,aAAa;GACvD,MAAM,mBAAmB,qBAAqB,OAAO,YAAY;GACjE,MAAM,cAAc,aAClB,QAAQ,QAAQ,gBAAgB,KAAK,gBAAgB,CAAC,CAAC,CACvD,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,SAAS;IACd,GAAG;IACH,eAAe,0BAA0B,IAAI,eAAe,gBAAgB;GAC7E,EAAE;GAEH,MAAM,UAAwB;IAC7B,SAAS;IACT,QAAQ,gBAAgB,iBAAiB;IACzC,QAAQ,gBAAgB,iBAAiB;IACzC,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;GACf;GACA,MAAM,UAAU,KAAK,IAAI;GACzB,uBAAuB,mBAAmB,OAAO;GACjD,kBAAkB,IAAI,UAAU;IAC/B;IACA,aAAa,UAAU;GACxB,CAAC;GACD,OAAO,EAAE,KAAK,OAAO;EACtB;CACD,CAAC;CAED,OAAO;AACR;AAEA,SAAS,YAAY,OAAoB;CACxC,OAAO;EACN,GAAG,MAAM,MAAM;EACf,kBAAkB,sBAAsB,MAAM,IAAI;GACjD,SAAS,MAAM;GACf,UAAU,MAAM;EACjB,CAAC;CACF;AACD;;;ACtRA,IAAM,UAAU;CAAE,SAAS;CAAM,eAAe;AAAK;AAErD,SAAS,QACR,QAC4C;CAC5C,OAAO;EAAE,SAAS;EAAO,eAAe;CAAO;AAChD;AAEA,SAAS,cACR,QACA,iBACA,OACqC;CACrC,IAAI,UAAU,aAAa,OAAO,sBAAsB,iBAAiB;CACzE,IAAI,UAAU,eAAe,OAAO,sBAAsB,mBAAmB;CAC7E,MAAM,6BACL,OAAO,YAAY,SAAS,cAAc,OAAO,yBAAyB;CAC3E,MAAM,kBAAkB,gBAAgB,MACtC,aAAa,SAAS,gBAAgB,OAAO,iBAC/C;CACA,OAAO;EACN,gBAAgB,CAAC,OAAO,UACrB,QAAQ,iBAAiB,IACzB,6BACC,QAAQ,8BAA8B,IACtC,gBAAgB,WAAW,IAC1B,QAAQ,wBAAwB,IAChC;EACL,SAAS,CAAC,OAAO,UACd,QAAQ,iBAAiB,IACzB,6BACC,QAAQ,8BAA8B,IACtC,CAAC,OAAO,oBACP,QAAQ,qBAAqB,IAC7B,CAAC,kBACA,QAAQ,wBAAwB,IAChC;EACN,SAAS,OAAO,UAAU,UAAU,QAAQ,iBAAiB;EAC7D,QAAQ,OAAO,UAAU,QAAQ,eAAe,IAAI;EACpD,eAAe,OAAO,aAAa,eAAe,QAAQ,qBAAqB,IAAI;CACpF;AACD;AAEA,SAAS,sBACR,QACqC;CACrC,MAAM,OAAO,QAAQ,MAAM;CAC3B,OAAO;EACN,gBAAgB;EAChB,SAAS;EACT,SAAS;EACT,QAAQ;EACR,eAAe;CAChB;AACD;AAEA,SAAS,eACR,SACA,OACsC;CACtC,IAAI,UAAU,aAAa,OAAO,EAAE,KAAK,QAAQ,iBAAiB,EAAE;CACpE,IAAI,UAAU,eAAe,OAAO,EAAE,KAAK,QAAQ,mBAAmB,EAAE;CACxE,OAAO,EACN,KACC,QAAQ,eAAe,kBACpB,QAAQ,mBAAmB,IAC3B,QAAQ,eAAe,WAAW,IACjC,QAAQ,qBAAqB,IAC7B,QACN;AACD;AAEA,SAAS,UAAU,OAAyD;CAC3E,IAAI,MAAM,eAAe,aAAa,OAAO;CAC7C,IAAI,MAAM,eAAe,WAAW,MAAM,mBAAmB,OAAO;CACpE,IAAI,MAAM,SAAS,OAAO;CAC1B,OAAO;AACR;AAEA,SAAgB,2BAA2B,OAAgD;CAC1F,MAAM,QAAQ,UAAU,KAAK;CAC7B,MAAM,OAAO;EACZ,SAAS,MAAM;EACf,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;EAC9B,SAAS,MAAM,QAAQ,KAAK,YAAY;GACvC,GAAG;GACH,SAAS,cAAc,QAAQ,MAAM,iBAAiB,KAAK;EAC5D,EAAE;EACF,UAAU,MAAM,SAAS,KAAK,aAAa;GAC1C,GAAG;GACH,SAAS,eAAe,SAAS,KAAK;EACvC,EAAE;EACF,iBAAiB,MAAM;CACxB;CACA,IAAI,UAAU,aACb,OAAO;EACN,GAAG;EACH;EACA,SAAS;GACR,SAAS,QAAQ,iBAAiB;GAClC,QAAQ,QAAQ,iBAAiB;EAClC;CACD;CAED,IAAI,UAAU,eACb,OAAO;EACN,GAAG;EACH;EACA,mBAAmB,MAAM,qBAAqB;EAC9C,SAAS;GAAE,SAAS;GAAS,QAAQ,QAAQ,mBAAmB;EAAE;CACnE;CAED,IAAI,UAAU,qBAAqB,MAAM,SACxC,OAAO;EACN,GAAG;EACH;EACA,SAAS;GAAE,SAAS;GAAS,QAAQ;EAAQ;EAC7C,GAAG,MAAM;CACV;CAED,OAAO;EACN,GAAG;EACH,OAAO;EACP,SAAS;GAAE,SAAS;GAAS,QAAQ,QAAQ,kBAAkB;EAAE;CAClE;AACD;;;ACzPA,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;AAC9B,IAAM,kCAAkC;AACxC,IAAM,cAAc;AACpB,IAAM,eAAe;AACrB,IAAM,uBAAuB;AAC7B,IAAM,iCAAiC,cAAc;AACrD,IAAM,8BAA8B;AACpC,IAAM,oCAAoC;AAC1C,IAAM,gCAAgC;AACtC,IAAM,oCAAoC;AAC1C,IAAM,0BAA0B;AAChC,IAAM,gCAAgC;AACtC,IAAM,oCAAoC;AAC1C,IAAa,0BAA0B;AACvC,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB;AAC7B,IAAM,+BAA+B;AACrC,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;AAC9B,IAAM,8BAA8B;AACpC,IAAM,qCAAqC;AAC3C,IAAM,2CAA2B,IAAI,QAAuD;AAE5F,SAAS,uBAAuB,IAAuB,cAA2C;CACjG,IAAI,SAAS,yBAAyB,IAAI,EAAE;CAC5C,IAAI,CAAC,QAAQ;EACZ,yBAAS,IAAI,IAAI;EACjB,yBAAyB,IAAI,IAAI,MAAM;CACxC;CACA,IAAI,OAAO,IAAI,YAAY,GAAG,OAAO;CACrC,IAAI,eAA2B,KAAA;CAC/B,MAAM,UAAU,IAAI,SAAe,YAAY;EAC9C,SAAS;CACV,CAAC;CACD,OAAO,IAAI,cAAc,OAAO;CAChC,IAAI,WAAW;CACf,aAAa;EACZ,IAAI,UAAU;EACd,WAAW;EACX,QAAQ,OAAO,YAAY;EAC3B,OAAO;CACR;AACD;;AAGA,SAAS,yBAAyB,IAAuB,cAAqC;CAC7F,OAAO,yBAAyB,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,KAAK,QAAQ,QAAQ;AAC/E;AAEA,eAAe,qBACd,IACA,cACA,WACmB;CACnB,MAAM,UAAU,uBAAuB,IAAI,YAAY;CACvD,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI;EACH,MAAM,UAAU;EAChB,OAAO;CACR,UAAU;EACT,QAAQ;CACT;AACD;AA+BA,IAAM,gCAAkE;CACvE,QAAQ;CACR,KAAK;CACL,MAAM;AACP;AAQA,IAAM,oCAA0E;CAC/E,YAAY;CACZ,YAAY;CACZ,aAAa;AACd;AAEA,SAAS,uBAA8B;CACtC,uBAAO,IAAI,MAAM,+BAA+B;AACjD;AAEA,SAAS,iCAAiC,OAAyB;CAClE,OAAO,iBAAiB,SAAS,MAAM,YAAY;AACpD;AAEA,SAAS,4BAA4B,OAA+B;CACnE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,kDAAkD,KAAK,MAAM,OAAO,CAAC,GAAG;CACvF,OAAO,SAAS,OAAO,MAAM,IAAI;AAClC;AAEA,SAAS,gCAAgC,OAAyB;CACjE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,eAAe,4BAA4B,KAAK;CACtD,IAAI,cAAc,OAAO;EAAC;EAAK;EAAK;EAAK;EAAK;EAAK;CAAG,CAAC,CAAC,SAAS,YAAY;CAC7E,OACC,MAAM,SAAS,kBACf,MAAM,SAAS,gBACf,mDAAmD,KAAK,MAAM,OAAO;AAEvE;AAEA,SAAS,6BAA6B,OAAyB;CAC9D,MAAM,SAAS,4BAA4B,KAAK;CAChD,OAAO,WAAW,OAAO,WAAW;AACrC;;;;;AAMA,SAAS,qCAAqC,OAAyB;CACtE,OACC,iBAAiB,UAChB,MAAM,YAAY,+CAClB,MAAM,YAAY;AAErB;AAEA,eAAe,8BACd,UACA,MACmD;CAEnD,IAAI,SAAS,SAAS,GAAG,OAAO,CAAC;CACjC,MAAM,UAAmD,CAAC;CAC1D,KAAK,MAAM,WAAW,UACrB,IAAI;EACH,QAAQ,KAAK,GAAI,MAAM,KAAK,CAAC,OAAO,CAAC,CAAE;CACxC,SAAS,OAAO;EACf,IAAI,CAAC,qCAAqC,KAAK,GAAG,MAAM;CACzD;CAED,OAAO;AACR;AAEA,eAAe,8BACd,MACA,oBACA,YACa;CACb,IAAI;CACJ,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;EAChD,MAAM,cAAc,aAAa,KAAK,IAAI;EAC1C,IAAI,eAAe,GAAG,MAAM,aAAa,qBAAqB;EAC9D,IAAI;GACH,OAAO,MAAM,KAAK,KAAK,IAAI,IAAK,KAAK,IAAI,oBAAoB,cAAc,GAAK,CAAC,CAAC;EACnF,SAAS,OAAO;GACf,YAAY;GACZ,IAAI,CAAC,gCAAgC,KAAK,KAAK,YAAY,GAAG,MAAM;GACpE,MAAM,UAAU,KAAK,IAAI,MAAM,KAAK,SAAS,KAAO,aAAa,KAAK,IAAI,CAAC;GAC3E,IAAI,WAAW,GAAG,MAAM;GACxB,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,OAAO,CAAC;EAC5D;CACD;CACA,MAAM;AACP;AAEA,SAAgB,6BACf,oBACA,YACA,QAAQ,KAAK,IAAI,GACD;CAChB,MAAM,cAAc,aAAa;CACjC,OAAO,eAAe,IAAI,OAAO,KAAK,IAAI,IAAK,KAAK,IAAI,oBAAoB,cAAc,GAAK,CAAC;AACjG;AAEA,SAAS,mBAAmB,QAA4B;CACvD,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;CAC/E,IAAI,OAAO,SAAS,uBAAuB,MAAM,qBAAqB;CACtE,OAAO;AACR;AAEA,SAAgB,wBAAwB,OAA8B;CACrE,IAAI;EACH,MAAM,aAAa,aAAa,KAAK;EACrC,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,SAAS,IAAI,IAAI,UAAU;EACjC,IACE,OAAO,aAAa,WAAW,OAAO,aAAa,YACpD,CAAC,OAAO,QACR,OAAO,YACP,OAAO,UAEP,OAAO;EAER,MAAM,OAAO,OAAO,aAAa,MAAM,KAAK,OAAO;EACnD,OAAO,GAAG,OAAO,SAAS,IAAI,OAAO,OAAO,OAAO,OAAO;CAC3D,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAgB,oCACf,OACA,gBACA,QACuC;CACvC,MAAM,gBAAgB,mBAAmB,MAAM;CAC/C,MAAM,0BAA0B,aAAa,cAAc;CAC3D,MAAM,oCAAoC,wBAAwB,uBAAuB;CACzF,IAAI,CAAC,2BAA2B,CAAC,mCAAmC,MAAM,qBAAqB;CAC/F,IAAI,yBAA+D,CAAC;CACpE,IAAI,OACH,IAAI;EACH,yBAAyB,4BACxB,OACA,mCACA,wBAAwB,cAAc,QACtC,aACD;CACD,QAAQ;EAGP,yBAAyB,CAAC;CAC3B;CAED,OAAO,CACN,GAAG,cAAc,KAAK,aAAa;EAAE;EAAS,eAAe;CAAwB,EAAE,GACvF,GAAG,sBACJ;AACD;AAEA,SAAS,4BACR,OACA,mCACA,OACA,kBACuC;CACvC,IAAI,SAAS,GAAG,OAAO,CAAC;CACxB,MAAM,wBAAwB,MAAM,GAClC,QACA;;;;;oCAMD,CAAC,CACA,MAAM,CAAC,CACP,IAAI,GAAmC;CACzC,IAAI,sBAAsB,SAAS,iCAClC,OAAO,CAAC;CAET,MAAM,qBAAqB,sBAAsB,QAC/C,UAAU,wBAAwB,KAAK,MAAM,iCAC/C;CACA,IAAI,mBAAmB,WAAW,GAAG,OAAO,CAAC;CAC7C,MAAM,0BAA0B,mBAAmB,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAC3E,MAAM,sBACL,iBAAiB,WAAW,IACzB,KACA,8BAA8B,iBAAiB,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE;CAC7E,MAAM,WAAW,MAAM,GACrB,QACA;;;+BAG4B,wBAAwB;;QAE/C,oBAAoB;oCAE1B,CAAC,CACA,MAAM,CAAC,CACP,IAAI,GAAG,oBAAoB,GAAG,kBAAkB,KAAK;CACvD,IAAI,SAAS,WAAW,GAAG,OAAO,CAAC;CACnC,MAAM,oBAAoB,SAAS,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAC3D,MAAM,UAAU,MAAM,GACpB,QACA;;;+BAG4B,wBAAwB;+BACxB,kBAAkB;4CAE/C,CAAC,CACA,IAAI,GAAG,oBAAoB,GAAG,QAAQ;CAIxC,MAAM,wCAAwB,IAAI,IAAsB;CACxD,KAAK,MAAM,UAAU,SAAS;EAC7B,MAAM,iBAAiB,sBAAsB,IAAI,OAAO,QAAQ,KAAK,CAAC;EACtE,eAAe,KAAK,OAAO,cAAc;EACzC,sBAAsB,IAAI,OAAO,UAAU,cAAc;CAC1D;CACA,OAAO,SAAS,SAAS,YAAY;EACpC,MAAM,iBAAiB,sBAAsB,IAAI,OAAO,KAAK,CAAC;EAG9D,MAAM,gBAAgB,eAAe;EACrC,OAAO,eAAe,WAAW,KAAK,gBAAgB,CAAC;GAAE;GAAS;EAAc,CAAC,IAAI,CAAC;CACvF,CAAC;AACF;AAEA,eAAe,2CACd,cACA,UAAwD,CAAC,GACzD,UAC+C;CAC/C,IAAI;CACJ,IAAI;EACH,SAAS,aAAa,WAAW;CAClC,QAAQ;EACP,MAAM,qBAAqB;CAC5B;CACA,MAAM,SAAS,QAAQ,OAAO,kBAAkB;CAChD,MAAM,YAAY,QAAQ,OAAO,0BAA0B;CAC3D,IAAI,CAAC,UAAU,CAAC,aAAa,OAAO,sBAAsB,WAAW,GAAG,OAAO,CAAC;CAChF,IAAI,CAAC,UAAU,CAAC,WAAW,MAAM,qBAAqB;CAEtD,IAAI;EACH,MAAM,0BAA0B,aAAa,OAAO,kBAAkB;EACtE,IAAI,CAAC,yBAAyB,MAAM,qBAAqB;EACzD,MAAM,YAAY;EAClB,IAAI;EACJ,IAAI;GACH,QAAQ,WAAW;EACpB,QAAQ;GAGP,QAAQ,KAAA;EACT;EACA,MAAM,mBAAmB,oCACxB,OACA,OAAO,oBACP,OAAO,qBACR;EACA,IAAI,iBAAiB,WAAW,GAAG,MAAM,qBAAqB;EAC9D,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,uBAAuB;EAC3D,MAAM,aAAa,QAAQ,cAAc,KAAK,IAAI,IAAI;EACtD,MAAM,4BAA4B,QAAQ,eACvC,iBAAiB,QAChB,EAAE,eAAe,cACjB,sBAAsB,eAAe,OAAO,MAAM,QAAQ,YAC5D,IACC;EACH,MAAM,SAAS,MAAM,+BACnB,oBACA,aAAa,WAAW;GACvB;GACA,aAAa,OAAO;GACpB,iBAAiB;GACjB,UAAU;EACX,CAAC,GACF,UACA,UACD;EACA,MAAM,YAAY,IAAI,IAAI,OAAO,KAAK,UAAU,CAAC,MAAM,UAAU,KAAK,CAAC,CAAC;EACxE,MAAM,WAAW,MAAM,QAAQ,IAC9B,0BAA0B,IAAI,OAAO,EAAE,eAAe,cAAc;GAInE,MAAM,QAAQ,UAAU,IAAI,OAAO;GACnC,IAAI,CAAC,SAAS,MAAM,eAAe,MAClC,OAAO,EAAE,MAAM,SAAkB;GAElC,IACC,MAAM,aAAa,WAClB,MAAM,iBAAiB,QAAQ,OAAO,MAAM,iBAAiB,UAC7D;IACD,IAAI,QAAQ,cAAc,MAAM,qBAAqB;IACrD,OAAO,EAAE,MAAM,cAAuB;GACvC;GACA,IAAI;GACJ,IAAI;IACH,UAAU,MAAM,+BACd,oBACA,aAAa,YAAY;KACxB;KACA,iBAAiB;KACjB;KACA,aAAa,OAAO;KACpB,UAAU;IACX,CAAC,GACF,UACA,UACD;GACD,SAAS,OAAO;IACf,IAAI,CAAC,QAAQ,cAAc,OAAO,EAAE,MAAM,cAAuB;IACjE,IAAI,iCAAiC,KAAK,GACzC,MAAM,IAAI,MAAM,oCAAoC;IAErD,MAAM,qBAAqB;GAC5B;GACA,IAAI,QAAQ,SAAS,aAAa;IACjC,IAAI,QAAQ,cAAc,MAAM,IAAI,MAAM,oCAAoC;IAC9E,OAAO,EAAE,MAAM,cAAuB;GACvC;GACA,IACC,QAAQ,MACN,WACA,qBAAqB,OAAO,UAAU,MAAM,OAAO,eAClD,OAAO,YAAY,KAAK,OAAO,YAAY,CAC9C,GACC;IACD,IAAI,QAAQ,cAAc,MAAM,qBAAqB;IACrD,OAAO,EAAE,MAAM,cAAuB;GACvC;GACA,OAAO;IACN,MAAM;IACN,UAAU;KACT;KACA;KACA,aAAa,MAAM,gBAAgB;KACnC,SAAS,QAAQ,KAAK,YAAY;MACjC,UAAU,OAAO;MACjB,aAAa,OAAO;MACpB,aAAa,OAAO,gBAAgB;MACpC,SAAS,OAAO,YAAY;MAC5B,mBAAmB,CAAC,OAAO,eAAe,IAAI,OAAO,UAAU,CAAC,CAAC,OAAO,OAAO;KAChF,EAAE;IACH;GACD;EACD,CAAC,CACF;EACA,MAAM,iBAAiB,SAAS,SAAS,YACxC,QAAQ,SAAS,aAAa,CAAC,QAAQ,QAAQ,IAAI,CAAC,CACrD;EACA,IAAI,eAAe,WAAW,KAAK,SAAS,MAAM,YAAY,QAAQ,SAAS,aAAa,GAC3F,MAAM,qBAAqB;EAE5B,OAAO;CACR,SAAS,OAAO;EACf,IAAI,iBAAiB,SAAS,MAAM,YAAY,sCAC/C,MAAM;EAEP,MAAM,qBAAqB;CAC5B;AACD;AAEA,SAAS,wBAAwB,QAAmD;CACnF,IAAI,OAAO,SAAS,uBACnB,MAAM,IAAI,MAAM,oCAAoC;AAEtD;AAEA,SAAS,kBAAkB,OAAoB;CAC9C,OAAO;EAAE,cAAc,MAAM;EAAS,eAAe,MAAM;CAAS;AACrE;AAEA,SAAS,mBACR,OACA,QAC4B;CAC5B,wBAAwB,MAAM;CAC9B,OAAO,6BAA6B,MAAM,IAAI;EAC7C,YAAY,kBAAkB,KAAK;EACnC;CACD,CAAC;AACF;AAEA,SAAS,iBAAiB,WAAuE;CAChG,OAAO;EACN,cAAc,UAAU;EACxB,aAAa,UAAU;EACvB,QAAQ,UAAU;EAClB,aAAa,UAAU;EACvB,cAAc,UAAU;EACxB,uBAAuB,UAAU;EACjC,wBAAwB,UAAU;CACnC;AACD;AAEA,SAAS,yBACR,WACA,OACoC;CACpC,OAAO;EACN,GAAG,iBAAiB,SAAS;EAC7B,QAAQ,MAAM,UAAU,cAAc,UAAU,MAAM;EACtD,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;CAC/B;AACD;AAEA,SAAS,mBAAmB,OAA0D;CACrF,OAAO;EACN,cAAc,MAAM;EACpB,aAAa,MAAM;EACnB,QAAQ,MAAM,UAAU,cAAc,UAAU,MAAM;EACtD,aAAa,MAAM,QAAQ;EAC3B,cAAc,MAAM,SAAS;EAC7B,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;CAC/B;AACD;AAEA,SAAS,uBACR,OACA,QAC4B;CAC5B,MAAM,WAAsC,CAAC;CAC7C,MAAM,eAAoD,CAAC;CAC3D,KAAK,MAAM,SAAS,QAAQ;EAC3B,MAAM,eAAe,sBAAsB,MAAM,eAAe,MAAM,OAAO;EAC7E,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;EAC5D,IAAI,4BAA4B,OAAO,YAAY,GAAG;GAGrD,IAAI,gCAAgC,MAAM,IAAI,YAAY,GAAG,aAAa,KAAK,KAAK;GACpF;EACD;EACA,IAAI,CAAC,SAAS,MAAM,UAAU,aAAa;GAC1C,aAAa,KAAK,KAAK;GACvB;EACD;EACA,SAAS,KAAK,mBAAmB,KAAK,CAAC;CACxC;CACA,OAAO,CAAC,GAAG,UAAU,GAAG,mBAAmB,OAAO,YAAY,CAAC,CAAC,CAC9D,QAAQ,cAAc,CAAC,4BAA4B,OAAO,UAAU,YAAY,CAAC,CAAC,CAClF,UAAU,MAAM,UAChB,KAAK,eAAe,MAAM,eAAe,KAAK,KAAK,eAAe,MAAM,eAAe,IAAI,CAC5F;AACF;AAEA,SAAS,4BAA4B,OAAoB,cAA+B;CACvF,OAAO,QACN,MAAM,GACJ,QACA;;;iDAID,CAAC,CACA,MAAM,CAAC,CACP,IAAI,0BAA0B,YAAY,CAAC,CAC9C;AACD;AAEA,SAAS,YAAY,cAAsB,YAA0C;CACpF,OAAO,aACJ,sBAAsB,sCAAsC,CAAC,cAAc,UAAU,CAAC,IACtF;AACJ;AAEA,SAAS,oBAAoB,cAAsB,YAA4B;CAC9E,OAAO,sBAAsB,sCAAsC,CAAC,cAAc,UAAU,CAAC;AAC9F;AAEA,SAAS,QAAQ,cAAsB,QAAwB;CAC9D,OAAO,sBAAsB,kCAAkC,CAAC,cAAc,MAAM,CAAC;AACtF;AAEA,SAAS,mBAAmB,YAAoB,iBAA+C;CAC9F,OAAO,kBAAkB,6BAA6B,YAAY,eAAe,IAAI;AACtF;AAEA,SAAS,sBACR,cACA,OACA,QAMqC;CACrC,MAAM,iCAAiB,IAAI,IAAoB;CAC/C,MAAM,sCAAsB,IAAI,IAAoB;CACpD,MAAM,iBAAiB,IAAI,IAC1B;EACC,QAAQ;EACR,GAAI,QAAQ,QAAQ,KAAK,WAAW,OAAO,WAAW,KAAK,CAAC;EAC5D,GAAI,QAAQ,SAAS,SAAS,YAAY,CACzC,QAAQ,aACR,GAAG,QAAQ,eAAe,KAAK,WAAW,OAAO,WAAW,CAC7D,CAAC,KAAK,CAAC;EACP,GAAI,QAAQ,gBAAgB,KAAK,aAAa,SAAS,WAAW,KAAK,CAAC;CACzE,CAAC,CACC,QAAQ,UAA2B,QAAQ,KAAK,CAAC,CAAC,CAClD,KAAK,UAAU,yBAAyB,KAAK,CAAC,CAAC,YAAY,CAAC,CAC/D;CACA,MAAM,iBAAiB,MAAc,QAAgB;EACpD,MAAM,MAAM,GAAG,KAAK,GAAG;EACvB,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UAAU,OAAO;EACrB,IAAI,SAAS,oBAAoB,IAAI,IAAI,KAAK,KAAK;EACnD,IAAI,QAAQ,GAAG,KAAK,uBAAuB,MAAM;EACjD,OAAO,eAAe,IAAI,yBAAyB,KAAK,CAAC,CAAC,YAAY,CAAC,GAAG;GACzE,SAAS;GACT,QAAQ,GAAG,KAAK,uBAAuB,MAAM;EAC9C;EACA,oBAAoB,IAAI,MAAM,KAAK;EACnC,eAAe,IAAI,yBAAyB,KAAK,CAAC,CAAC,YAAY,CAAC;EAChE,eAAe,IAAI,KAAK,KAAK;EAC7B,OAAO;CACR;CACA,MAAM,gBAAgB,IAAI,IAAI,QAAQ,SAAS,KAAK,YAAY,CAAC,QAAQ,YAAY,OAAO,CAAC,CAAC;CAC9F,MAAM,yBAAyB,IAAI,IAClC,QAAQ,SAAS,SAAS,YACzB,QAAQ,sBAAsB,CAAC,CAAC,QAAQ,qBAAqB,OAAO,CAAU,IAAI,CAAC,CACpF,CACD;CACA,MAAM,kBAAkB,IAAI,IAC3B,QAAQ,gBAAgB,KAAK,aAAa,CAAC,SAAS,aAAa,QAAQ,CAAC,CAC3E;CACA,MAAM,eAAe,IAAI,IAAI,QAAQ,QAAQ,KAAK,WAAW,CAAC,OAAO,WAAW,MAAM,CAAC,CAAC;CACxF,MAAM,gCAAgC,UAAkB,QAAgB;EACvE,IAAI,aAAa,kBAChB,OAAO;GAAE,aAAa;GAA0B,MAAM;EAAkC;EAEzF,OAAO;GACN,aAAa,uBAAuB,IAAI,GAAG,CAAC,EAAE,eAAe,cAAc,WAAW,GAAG;GACzF,MAAM;EACP;CACD;CACA,MAAM,uBAAuB,YAAoB,QAAsC;EACtF,IAAI,CAAC,KAAK,OAAO;EACjB,MAAM,UAAU,cAAc,IAAI,UAAU;EAC5C,MAAM,SAAS,SAAS,eAAe,MAAM,SAAS,KAAK,uBAAuB,GAAG;EACrF,IAAI,QAAQ,OAAO,OAAO;EAC1B,IAAI,SAAS,uBAAuB,OAAO,QAAQ,eAAe,iBACjE,OAAO,GAAG,QAAQ,YAAY;EAE/B,OAAO,cAAc,WAAW,GAAG;CACpC;CACA,OAAO;EACN,aAAa,MAAM,YAAY,KAAK,YAAY;GAC/C,SAAS,QAAQ,cAAc,OAAO,MAAM;GAC5C,iBACC,QAAQ,mBAAmB,cAAc,QAAQ,QAAQ,cAAc,OAAO,MAAM,CAAC;GACtF,QAAQ,OAAO;GACf,2BAA2B,OAAO;GAClC,yBAAyB,OAAO;EACjC,EAAE;EACF,mBAAmB,MAAM,kBAAkB,KAAK,WAAW;GAC1D,MAAM,cAAc,oBAAoB,cAAc,OAAO,UAAU;GACvE,MAAM,oBAAoB,QAAQ,cAAc,OAAO,MAAM;GAC7D,OAAO;IACN,SAAS;IACT,iBAAiB,QAAQ,mBAAmB,cAAc,QAAQ,iBAAiB;IACnF;IACA,qBACC,gBAAgB,IAAI,WAAW,CAAC,EAAE,eAAe,cAAc,UAAU,WAAW;IACrF,QAAQ,OAAO;GAChB;EACD,CAAC;EACD,gBAAgB,MAAM,eAAe,KAAK,WAAW;GACpD,MAAM,UAAU,mBAAmB,OAAO,YAAY,OAAO,mBAAmB;GAChF,MAAM,QAAQ,mBAAmB,OAAO,YAAY,OAAO,iBAAiB;GAC5E,OAAO;IACN,YAAY,OAAO;IACnB,oBACC,cAAc,IAAI,OAAO,UAAU,CAAC,EAAE,eACtC,cAAc,WAAW,OAAO,UAAU;IAC3C,yBAAyB,OAAO,sBAC7B,8BAA8B,cAAc,OAAO,mBAAmB,IACtE;IACH,wBAAwB;IACxB,gCAAgC,oBAAoB,OAAO,YAAY,OAAO;IAC9E,uBAAuB,OAAO,oBAC3B,8BAA8B,cAAc,OAAO,iBAAiB,IACpE;IACH,sBAAsB;IACtB,8BAA8B,oBAAoB,OAAO,YAAY,KAAK;IAC1E,QAAQ,OAAO;GAChB;EACD,CAAC;EACD,kBAAkB,MAAM,iBAAiB,KAAK,WAAW;GACxD,MAAM,sBAAsB,8BAC3B,cACA,OAAO,wBACR;GACA,MAAM,eAAe,QAAQ,cAAc,OAAO,WAAW;GAC7D,MAAM,sBAAsB,6BAC3B,OAAO,0BACP,mBACD;GACA,OAAO;IACN;IACA,6BAA6B,oBAAoB;IACjD,sBAAsB,oBAAoB;IAC1C,eAAe,OAAO;IACtB;IACA,sBAAsB,QAAQ,mBAAmB,cAAc,QAAQ,YAAY;IACnF,QAAQ,OAAO;GAChB;EACD,CAAC;EACD,qBAAqB,MAAM,oBAAoB,KAAK,WAAW;GAC9D,MAAM,sBAAsB,8BAC3B,cACA,OAAO,wBACR;GACA,MAAM,YAAY,oBAAoB,cAAc,OAAO,QAAQ;GACnE,MAAM,sBAAsB,6BAC3B,OAAO,0BACP,mBACD;GACA,OAAO;IACN;IACA,6BAA6B,oBAAoB;IACjD,sBAAsB,oBAAoB;IAC1C;IACA,mBACC,aAAa,IAAI,SAAS,CAAC,EAAE,eAAe,cAAc,UAAU,SAAS;IAC9E,QAAQ,OAAO;GAChB;EACD,CAAC;CACF;AACD;AAEA,SAAS,wBAAwB,OAAmD;CACnF,OAAO,sBAAsB,sCAAsC,KAAK;AACzE;AAEA,IAAM,4BAA4B;AAIlC,SAAS,yBAAyB,OAAuB;CACxD,OAAO,MACL,UAAU,MAAM,CAAC,CACjB,QAAQ,YAAY,EAAE,CAAC,CACvB,QAAQ,YAAY,GAAG,CAAC,CACxB,QAAQ,SAAS,GAAG,CAAC,CACrB,KAAK;AACR;AAEA,SAAS,gBACR,OACA,UACA,cACA,WACS;CACT,MAAM,aAAa,yBAAyB,MAAM,MAAM,GAAG,GAAG,CAAC;CAC/D,MAAM,QAAQ,WAAW,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;CAC5C,MAAM,uBAAuB,aAC3B,KAAK,gBAAgB,yBAAyB,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CACzE,OAAO,OAAO;CAChB,MAAM,aAAa,WAAW,YAAY;CAC1C,IACC,CAAC,SACD,CAAC,0BAA0B,KAAK,KAAK,KACrC,8BAA8B,KAAK,KAAK,KACxC,6CAA6C,KAAK,KAAK,KACvD,qBAAqB,MAAM,wBAAwB,WAAW,SAAS,mBAAmB,CAAC,GAC1F;EACD,MAAM,SAAS,WAAW,MAAM,EAAE;EAClC,OAAO,SAAS,GAAG,SAAS,GAAG,WAAW;CAC3C;CACA,OAAO;AACR;AAEA,SAAS,yBACR,SACA,WACM;CACN,MAAM,yBAAS,IAAI,IAAoB;CACvC,MAAM,iCAAiB,IAAI,IAAY;CACvC,KAAK,MAAM,UAAU,SAAS;EAC7B,MAAM,aAAa,yBAAyB,OAAO,WAAW,CAAC,CAAC,YAAY;EAC5E,OAAO,IAAI,aAAa,OAAO,IAAI,UAAU,KAAK,KAAK,CAAC;EACxD,eAAe,IAAI,UAAU;CAC9B;CACA,MAAM,6BAAa,IAAI,IAAY;CACnC,OAAO,QAAQ,KAAK,QAAQ,UAAU;EACrC,MAAM,aAAa,yBAAyB,OAAO,WAAW,CAAC,CAAC,YAAY;EAC5E,KAAK,OAAO,IAAI,UAAU,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI,UAAU,GAAG;GACrE,WAAW,IAAI,UAAU;GACzB,OAAO;EACR;EACA,MAAM,MAAM,UAAU,MAAM;EAC5B,IAAI,eAAe,KAAK,IAAI,GAAG,IAAI,MAAM;EACzC,IAAI,SAAS,IAAI,MAAM,CAAC,YAAY;EACpC,MAAM,cAAc,IAAI,SAAS,eAAe,OAAO,WAAW,OAAO;EACzE,KAAK,IAAI,UAAU,GAAG,UAAU,aAAa,WAAW,GAAG;GAC1D,MAAM,aAAa,KAAK,IAAI,GAAG,MAAM,OAAO,MAAM;GAClD,MAAM,OAAO,OAAO,YAAY,MAAM,GAAG,UAAU,CAAC,CAAC,QAAQ;GAC7D,MAAM,cAAc,OAAO,GAAG,KAAK,GAAG,WAAW,OAAO,MAAM,IAAI;GAClE,MAAM,kBAAkB,yBAAyB,WAAW,CAAC,CAAC,YAAY;GAC1E,IAAI,CAAC,WAAW,IAAI,eAAe,KAAK,CAAC,eAAe,IAAI,eAAe,GAAG;IAC7E,WAAW,IAAI,eAAe;IAC9B,OAAO;KAAE,GAAG;KAAQ;IAAY;GACjC;GACA,IAAI,eAAe,IAAI,QAAQ;IAC9B,eAAe,KAAK,IAAI,IAAI,QAAQ,eAAe,CAAC;IACpD,SAAS,IAAI,MAAM,CAAC,YAAY;IAChC;GACD;GACA,SAAS,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU;EAC5E;EACA,MAAM,IAAI,MAAM,oCAAoC;CACrD,CAAC;AACF;AAEA,SAAS,8BAA8B,cAAsB,aAA2B;CACvF,IAAI,eAAe,cAAc,mCAChC,MAAM,IAAI,MAAM,oCAAoC;AAEtD;AAEA,SAAS,2BACR,MACA,OACA,MAAoB,KAAK,KAIxB;CACD,IAAI,SAAuF;CAC3F,IAAI,WAAgE;CACpE,IAAI,aAAa;CACjB,MAAM,mBAAmB;EACxB,IAAI,UAAU,IAAI,IAAI,OAAO,WAAW,OAAO,QAAQ,QAAQ,OAAO,SAAS;EAC/E,IAAI,UAAU,OAAO;EACrB,MAAM,sBAAsB;EAC5B,IAAI;EACJ,YAAY,KAAK,CAAC,CAChB,MAAM,cAAc;GACpB,IAAI,eAAe,qBAAqB,OAAO,WAAW;GAC1D,SAAS;IAAE,WAAW,IAAI,IAAI;IAAO;GAAU;GAC/C,OAAO;EACR,CAAC,CAAC,CACD,cAAc;GACd,IAAI,aAAa,WAAW,WAAW;EACxC,CAAC;EACF,WAAW;EACX,OAAO;CACR;CACA,WAAW,mBAAmB;EAC7B,cAAc;EACd,SAAS;EACT,WAAW;CACZ;CACA,WAAW,aAAc,UAAU,IAAI,IAAI,OAAO,YAAY,OAAO,YAAY;CACjF,OAAO;AACR;AAEA,eAAe,8BACd,OACA,cACA,MAC+C;CAC/C,IAAI,wBAAwB,MAAM,IAAI,YAAY,CAAC,EAAE,UAAU,aAC9D,MAAM,IAAI,MAAM,+BAA+B;CAEhD,OAAO,KAAK;AACb;AAEA,SAAS,0BACR,OACA,QACA,SACa;CACb,OAAO,MAAM,GAAG,kBAAkB,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU;AAChE;AAuBA,SAAS,wBACR,MACA,cACA,aAAa,sBACc;CAC3B,IAAI,KAAK,SAAS,YACjB,MAAM,IAAI,MAAM,oCAAoC;CAErD,MAAM,WAAW,KAAK,KAAK,QAAQ,IAAI,QAAQ;CAC/C,OAAO,yBACN,KAAK,KAAK,QAAQ;EACjB,MAAM,oBAAoB,oBAAoB,cAAc,IAAI,QAAQ;EACxE,OAAO;GACN,YAAY,IAAI;GAChB,aAAa;GACb,aAAa,gBAAgB,IAAI,cAAc,UAAU,UAAU,iBAAiB;EACrF;CACD,CAAC,IACA,WAAW,OAAO,WACpB;AACD;AAEA,SAAS,gBAAgB,OAAoB,cAAgD;CAQ5F,OAAO,wBAPM,MAAM,GACjB,QACA;;4CAGD,CAAC,CACA,IAAI,GACyB,GAAM,YAAY;AAClD;AAEA,SAAS,8BACR,OACA,OAC2B;CAC3B,MAAM,WAAW,CAChB,GAAG,IAAI,IACN,MAAM,QAAQ,SAAS,WAAW;EACjC,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO,YAAY,SAAS,aAAa,OAAO,YAAY,aAAa;CAC1E,CAAC,CACF,CACD,CAAC,CAAC,QAAQ,YAA+B,YAAY,IAAI;CACzD,IAAI,SAAS,WAAW,GAAG,OAAO,CAAC;CACnC,MAAM,eAAe,SAAS,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAStD,OAAO,wBARM,MAAM,GACjB,QACA;;yBAEsB,aAAa;oCAEpC,CAAC,CACA,IAAI,GAAG,QACsB,GAAM,MAAM,cAAc,8BAA8B;AACxF;AAOA,SAAS,sBAAsB,OAAoD;CAClF,IAAI;CACJ,IAAI;EACH,aAAa,2BAA2B,MAAM,IAAI;GACjD,OAAO;GACP,gBAAgB;GAChB,iBAAiB;GACjB,qBAAqB;EACtB,CAAC,CAAC,CAAC,QACD,cACA,CAAC,UAAU,aACX,wCAAwC,UAAU,oBAAoB,MAAM,EAAE,CAChF;CACD,SAAS,OAAO;EACf,IACC,iBAAiB,UAChB,MAAM,YAAY,4CAClB,MAAM,YAAY,+CAEnB,MAAM,IAAI,4BAA4B,KAAK;EAE5C,MAAM;CACP;CACA,IAAI,WAAW,SAAS,6BACvB,MAAM,IAAI,4BAA4B;CAEvC,OAAO,WAAW,KAAK,eAAe;EACrC,iBAAiB,UAAU;EAC3B,mBAAmB,UAAU;CAC9B,EAAE;AACH;AAQA,SAAS,gBAAgB,OAAoB,OAAkD;CAC9F,IAAI,MAAM,QAAQ,SAAS,eAAe,MAAM,SAAS,SAAS,cACjE,MAAM,IAAI,MAAM,oCAAoC;CAErD,MAAM,YAAY,MAAM,UAAU;CAClC,MAAM,aAAa,YAChB,8BAA8B,OAAO,KAAK,IAC1C,gBAAgB,OAAO,MAAM,YAAY;CAC5C,MAAM,uBAAuB,YAC1B,IACA,MAAM,SAAS,QAAQ,YAAY,QAAQ,eAAe,eAAe,CAAC,CAAC;CAC9E,MAAM,iBAAiB,yBAAyB,IAAI,CAAC,IAAI,sBAAsB,KAAK;CACpF,8BAA8B,sBAAsB,eAAe,MAAM;CACzE,MAAM,0BAA0B,eAAe,KAAK,WAAW,OAAO,eAAe;CACrF,OAAO;EACN,SAAS,MAAM,QAAQ,KAAK,YAAY;GACvC,WAAW,OAAO;GAClB,aAAa,OAAO;GACpB,SAAS,OAAO;GAChB,qBAAqB,YAAY,MAAM,cAAc,OAAO,kBAAkB;GAC9E,sBAAsB,YAAY,MAAM,cAAc,OAAO,mBAAmB;GAChF,sBAAsB,OAAO;GAC7B,UAAU,OAAO;GACjB,mBAAmB,YAAY,MAAM,cAAc,OAAO,gBAAgB;GAC1E,aACC,OAAO,YAAY,SAAS,aACzB;IACA,MAAM;IACN,mBAAmB,OAAO,YAAY;IACtC,aAAa,oBAAoB,MAAM,cAAc,OAAO,YAAY,UAAU;GACnF,IACC,EAAE,MAAM,SAAkB;EAC/B,EAAE;EACF,UAAU,MAAM,SAAS,KAAK,aAAa;GAC1C,YAAY,QAAQ;GACpB,aAAa,QAAQ;GACrB,YAAY,QAAQ;GACpB,qBAAqB,QAAQ;GAC7B,oBAAoB,QAAQ;GAC5B,gBACC,QAAQ,eAAe,kBACpB,CAAC,IACD,yBACA,eAAe,KAAK,WAAW;IAC9B,MAAM,2BAA2B,6BAChC,QAAQ,YACR,OAAO,eACR;IACA,OAAO;KACN,oBAAoB;KACpB,aAAa,gBACZ,OAAO,mBACP,WACA,yBACA,wBACD;IACD;GACD,CAAC,IACA,WAAW,OAAO,kBACpB;EACJ,EAAE;EACF,iBAAiB,WAAW,KAAK,EAAE,aAAa,mBAAmB;GAClE;GACA;EACD,EAAE;CACH;AACD;AAEA,SAAS,kBACR,OACA,WACA,SACC;CACD,MAAM,cAAc,sBAAsB,MAAM,cAAc,QAAQ,aAAa;EAClF,iBAAiB,MAAM;EACvB,GAAG;CACJ,CAAC;CACD,OAAO;EACN,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,yBAAyB,wBAAwB,WAAW;EAC5D;CACD;AACD;AAEA,SAAS,cAAY,MAA2D;CAC/E,IAAI,SAAS,mCAAmC,SAAS,qCACxD,OAAO;CACR,IAAI,SAAS,qBAAqB,OAAO;CACzC,IAAI,SAAS,yBAAyB,OAAO;CAC7C,OAAO;AACR;AAEA,SAAS,aAAa,OAAoD;CACzE,MAAM,OAAO,4BAA4B,KAAK;CAC9C,OAAO,SAAS,kCAAkC,wBAAwB;AAC3E;AAEA,SAAS,mBAAmB,OAAoD;CAC/E,MAAM,OAAO,4BAA4B,KAAK;CAC9C,OAAO,SAAS,sBAAsB,sCAAsC;AAC7E;AAEA,IAAM,uBAAN,cAAmC,MAAM;CAG9B;CACA;CAHV,YACC,MACA,QACA,eACA,OACC;EACD,MAAM,MAAM,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,CAAC;EAJ9C,KAAA,SAAA;EACA,KAAA,gBAAA;EAIT,KAAK,OAAO;CACb;AACD;;;;;;;;;AAiBA,IAAM,8BAAN,cAA0C,MAAM;CAC/C,YAAY,OAAiB;EAC5B,MAAM,sCAAsC,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,CAAC;EACvF,KAAK,OAAO;CACb;AACD;;;;;;;;AASA,IAAM,8CAA8B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAS,mBAAmB,MAAsB;CACjD,IAAI,4BAA4B,IAAI,IAAI,GAAG,OAAO;CAClD,IAAI,KAAK,WAAW,mBAAmB,GAAG,OAAO;CACjD,OAAO;AACR;;;;;;AAOA,IAAM,wCAAwB,IAAI,IAAI;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAS,mBAAmB,OAAsB;CACjD,IAAI,sBAAsB,IAAI,MAAM,OAAO,GAAG,OAAO,MAAM;CAC3D,IAAI,MAAM,SAAS,gBAAgB,MAAM,SAAS,gBAAgB,OAAO,MAAM;CAC/E,IAAI,iBAAiB,KAAK,MAAM,OAAO,GAAG,OAAO;CACjD,IAAI,sBAAsB,KAAK,MAAM,OAAO,GAAG,OAAO;CACtD,OAAO,sBAAsB,MAAM,QAAQ;AAC5C;AAEA,SAAS,WAAW,OAA2B;CAC9C,MAAM,QAAmB,CAAC;CAC1B,IAAI,UAAU;CACd,OAAO,WAAW,CAAC,MAAM,SAAS,OAAO,GAAG;EAC3C,MAAM,KAAK,OAAO;EAClB,UAAU,mBAAmB,QAAQ,QAAQ,QAAQ,KAAA;CACtD;CACA,OAAO;AACR;AAEA,SAAS,oBACR,QACA,UACyC;CACzC,IACC,OAAO,WAAW,QACjB,OAAO,SAAS,eAAe,OAAO,KAAK,WAAW,UAAU,IAEjE,OAAO;CAER,IAAI,OAAO,WAAW,OAAO,OAAO,SAAS,+BAC5C,OAAO;CAER,OAAO;AACR;AAEA,SAAS,8BAA8B,OAA+C;CACrF,MAAM,QAAQ,WAAW,KAAK;CAC9B,MAAM,UAAU,MAAM,MACpB,SAAuC,gBAAgB,oBACzD;CACA,MAAM,SAAS,MAAM,MACnB,SAAgD,gBAAgB,6BAClE;CACA,IAAI,QAAQ;EACX,MAAM,SAAS,oBAAoB,QAAQ,SAAS,MAAM;EAC1D,OAAO;GACN,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC3B,OAAO;GACP,QAAQ,OAAO;GACf,MAAM,mBAAmB,OAAO,IAAI;EACrC;CACD;CAIA,IACC,MAAM,MACJ,SACA,gBAAgB,sCAChB,gBAAgB,2BAClB,GAEA,OAAO;EACN,QAAQ;EACR,OAAO;CACR;CAED,MAAM,aAAa,MAAM,MACvB,SAAwB,gBAAgB,SAAS,EAAE,gBAAgB,qBACrE;CACA,MAAM,QAAQ,aAAa,mBAAmB,UAAU,IAAI;CAC5D,IAAI,SAAS,QAAQ,OAAO;EAAE,QAAQ,QAAQ;EAAQ;CAAM;CAC5D,IACC,eACC,WAAW,SAAS,gBACpB,WAAW,SAAS,kBACpB,mCAAmC,KAAK,WAAW,OAAO,IAE3D,OAAO;EAAE,QAAQ;EAA2B;CAAM;CAEnD,OAAO,EAAE,MAAM;AAChB;AAEA,SAAS,2BACR,OACA,SACA,SAMO;CACP,IACC,WAAW,KAAK,CAAC,CAAC,MAAM,SAAS,gBAAgB,wBAAwB,KAAK,aAAa,GAE3F;CAED,MAAM,QAAQ,UAAmC;EAChD,IAAI,YAAY,OAAO,KAAK,CAAC,CAAC,QAAQ,eAAe,GAAG;EACxD,KAAK,MAAM,UAAU,QAAQ,gBAAgB,CAAC,GAC7C,IAAI,QAAQ,YAAY,UAAU,WAAW,QAAQ,YAAY;EAElE,OAAO,UAAU,QAAQ,yBAAyB,UAAU;GAC3D,IAAI;IACH,MAAM,MAAM,IAAI,IAAI,KAAK;IACzB,OAAO,GAAG,IAAI,SAAS,IAAI,IAAI;GAChC,QAAQ;IACP,OAAO;GACR;EACD,CAAC;CACF;CACA,MAAM,SAAS;EACd,gBAAgB,KAAK,QAAQ,YAAY;EACzC,aAAa,KAAK,QAAQ,SAAS;EACnC,WAAW,KAAK,QAAQ,OAAO;EAC/B,SAAS,KAAK,QAAQ,KAAK;EAC3B,GAAI,QAAQ,SAAS,CAAC,UAAU,KAAK,QAAQ,MAAM,GAAG,IAAI,CAAC;EAC3D,GAAI,QAAQ,UAAU,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,MAAM,GAAG;EACnE,GAAI,QAAQ,QAAQ,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG;CAC9D;CACA,QAAQ,KAAK,uBAAuB,OAAO,KAAK,GAAG,GAAG;AACvD;AAEA,SAAS,oBACR,MACA,SACqF;CACrF,MAAM,SAAS,QAAQ;CACvB,OAAO,SAAS;EAAE,OAAO;EAAM;CAAO,IAAI,EAAE,OAAO,KAAK;AACzD;AAIA,eAAe,uBAAuB,GAAwC;CAE7E,IADoB,EAAE,IAAI,OAAO,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MACnE,oBAAoB,OAAO,EAAE,IAAI,MAAM;CAC3D,MAAM,eAAe,EAAE,IAAI,OAAO,gBAAgB;CAClD,IAAI,gBAAgB,QAAQ,CAAC,SAAS,KAAK,aAAa,KAAK,CAAC,GAAG,OAAO,EAAE,IAAI,MAAM;CACpF,MAAM,gBAAgB,gBAAgB,OAAO,OAAO,OAAO,YAAY;CACvE,IAAI,iBAAiB,QAAQ,gBAAgB,yBAAyB,OAAO,EAAE,IAAI,MAAM;CACzF,MAAM,OAAO,EAAE,IAAI,IAAI;CACvB,IAAI,CAAC,MAAM,OAAO,EAAE,IAAI,MAAM;CAC9B,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CACZ,IAAI;EACH,OAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,IAAI,CAAC,OAAO;GACZ,SAAS,MAAM;GACf,IAAI,QAAQ,yBAAyB;IACpC,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;IAC3C,OAAO,EAAE,IAAI,MAAM;GACpB;GACA,OAAO,KAAK,KAAK;EAClB;CACD,QAAQ;EACP,OAAO,EAAE,IAAI,MAAM;CACpB,UAAU;EACT,OAAO,YAAY;CACpB;CACA,IAAI;EACH,MAAM,QAAQ,IAAI,WAAW,KAAK;EAClC,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,QAAQ;GAC3B,MAAM,IAAI,OAAO,MAAM;GACvB,UAAU,MAAM;EACjB;EACA,MAAM,SAAS,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;EACjF,OAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IACjE;GAAE,IAAI;GAAM,OAAO;EAAkC,IACrD,EAAE,IAAI,MAAM;CAChB,QAAQ;EACP,OAAO,EAAE,IAAI,MAAM;CACpB;AACD;AAEA,SAAS,aAAa,OAAgC,MAAkC;CACvF,MAAM,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS;CAC3C,MAAM,WAAW,KAAK,SAAS;CAC/B,OAAO,OAAO,WAAW,SAAS,UAAU,OAAO,OAAO,KAAK,UAAU,QAAQ,SAAS,MAAM;AACjG;AAEA,SAAS,eACR,OACA,OACA,YAAqC,mBAAmB,KAAK,GAC3B;CAClC,IAAI,oBAA+D;CACnE,IAAI,UAAsE;CAC1E,IAAI,MAAM,UAAU,aACnB,IAAI;EACH,UAAU,iCAAiC,MAAM,IAAI;GACpD,cAAc,MAAM;GACpB,WAAW,MAAM;EAClB,CAAC;CACF,SAAS,OAAO;EACf,MAAM,OAAO,aAAa,KAAK;EAC/B,IAAI,SAAS,qBAAqB,MAAM;EACxC,IAAI,SAAS,iCAAiC,oBAAoB;OAC7D,IAAI,SAAS,yBAAyB,oBAAoB;CAChE;CAED,IAAI,SAAS,6CAA6C,QAAQ,WAAW;CAC7E,MAAM,YAAY,gBAAgB,OAAO,KAAK;CAC9C,MAAM,cAAc,UAAU,kBAAkB,OAAO,WAAW,OAAO,IAAI;CAC7E,OAAO,2BAA2B;EACjC,SAAS;EACT,WAAW,yBAAyB,WAAW,KAAK;EACpD,YAAY,MAAM;EAClB,WAAW,MAAM;EACjB,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;EAC9B,GAAG;EACH;EACA,SAAS;CACV,CAAC;AACF;AAEA,SAAS,eACR,cACA,QACkC;CAClC,OAAO;EACN,SAAS;EACT,QAAQ,OAAO;EACf,SAAS,QAAQ,cAAc,OAAO,MAAM;EAC5C,WAAW,OAAO;EAClB,mBAAmB,OAAO;EAC1B,aAAa,OAAO;CACrB;AACD;AAEA,SAAgB,gBAAgB,SAAuC;CACtE,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,gBACL,QAAQ,4CACN,gBACD,2CACC,QAAQ,8BAA8B,mCACtC,aACA,QAAQ,QACT;CAEF,eAAe,gBACd,cACA,YAC+C;EAC/C,IAAI;GACH,OAAO,MAAM,cACZ,gBAAgB,cAAc,OAAO;IAAE;IAAc;GAAW,IAAI,KAAA,CACrE;EACD,SAAS,OAAO;GACf,IAAI,iBAAiB,SAAS,MAAM,YAAY,sCAC/C,MAAM;GAEP,MAAM,qBAAqB;EAC5B;CACD;CACA,MAAM,yBAAyB,iCACxB,gBAAgB,GACtB,6BACD;CACA,QAAQ,mCAAmC,uBAAuB,WAAW,CAAC;CAC9E,MAAM,yBACL,QAAQ,2BAA2B,KAAA,IAChC,gCACA,QAAQ;;;;;;CAcZ,SAAS,iCAAiE;EACzE,MAAM,UACL,QAAQ,yBACR,QAAQ,4BAA4B,cACpC,0BAAA,CACC;EACF,MAAM,YAAY,aAAa,OAAO,kBAAkB;EACxD,IAAI,CAAC,aAAa,CAAC,OAAO,4BAA4B,OAAO;EAC7D,MAAM,0BAA0B,wBAAwB,SAAS;EACjE,IAAI,CAAC,yBAAyB,OAAO;EACrC,IAAI;EACJ,IAAI;GACH,kBAAkB,IAAI,IAAI,mBAAmB,OAAO,qBAAqB,CAAC;EAC3E,QAAQ;GACP,OAAO;EACR;EACA,OAAO;GAAE;GAAQ;GAAW;GAAyB;EAAgB;CACtE;CAIA,SAAS,gBACR,eACA,OACU;EACV,OACC,cAAc,gBAAgB,IAAI,MAAM,OAAO,KAC/C,wBAAwB,MAAM,aAAa,MAAM,cAAc;CAEjE;;;;;;CAOA,SAAS,qBACR,SACA,OACU;EACV,IAAI;EACJ,IAAI;GACH,UAAU,+BAA+B;EAC1C,QAAQ;GACP,OAAO;EACR;EACA,OACC,YAAY,QACZ,QAAQ,4BAA4B,QAAQ,2BAC5C,QAAQ,cAAc,QAAQ,aAC9B,QAAQ,OAAO,+BAA+B,QAAQ,OAAO,8BAC7D,gBAAgB,SAAS,KAAK;CAEhC;CAEA,SAAS,qBACR,UACA,OACU;EACV,OACC,SAAS,YAAY,MAAM,WAC3B,wBAAwB,SAAS,aAAa,MAC7C,wBAAwB,MAAM,aAAa;CAE9C;CAEA,SAAS,cAAc,OAA2D;EACjF,OAAO,GAAG,wBAAwB,MAAM,aAAa,KAAK,MAAM,cAAc,IAAI,MAAM;CACzF;;;;;;;CAQA,eAAe,uBACd,OACA,WACA,YACyD;EACzD,MAAM,gBAAgB,CACrB,mBAAG,IAAI,IAAI,CACV,sBAAsB,WAAW,MAAM,OAAO,GAC9C,sBAAsB,MAAM,eAAe,MAAM,OAAO,CACzD,CAAC,CACF;EACA,KAAK,MAAM,gBAAgB,eAAe;GAEzC,MAAM,WAAU,MADQ,gBAAgB,cAAc,UAAU,EAAA,CACtC,QAAQ,aAAa,qBAAqB,UAAU,KAAK,CAAC;GACpF,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,+BAA+B;GACvE,IAAI,QAAQ,IAAI,OAAO,QAAQ;EAChC;CAED;CAEA,SAAS,6BAA6B,QAA8C;EACnF,MAAM,WAAW,OAAO;EACxB,IAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG,OAAO;EACjF,MAAM,eAAgB,SAAyC;EAC/D,OAAO,OAAO,iBAAiB,WAAW,eAAe;CAC1D;CAKA,SAAS,wBACR,QACA,OACU;EACV,MAAM,eAAe,6BAA6B,MAAM;EACxD,OACC,iBAAiB,QACjB,iBAAiB,sBAAsB,MAAM,eAAe,MAAM,OAAO;CAE3E;;;;;;;CAQA,eAAe,wCACd,OACA,eACA,OACA,UACA,aACkD;EAClD,IAAI,UAAsC;EAqB1C,OAAO,MApBW,qBACjB,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,4CAA4C,MAAM,UACjD,qCAAqC,MAAM,IAAI,SAAS,eACvD,iDAAiD,MAAM,IAAI,MAAM,SAAS,YAAY;GACrF,IAAI,CAAC,qBAAqB,eAAe,KAAK,GAAG;GACjD,MAAM,uCAAuC,MAAM,IAAI;IACtD,eAAe,MAAM;IACrB,SAAS,MAAM;IACf;IACA;IACA,0BAA0B;KAAE,aAAa;KAAM,MAAM;KAAM,kBAAkB;IAAK;GACnF,CAAC;GACD,UAAU;EACX,CAAC,CACF,CACD,CACF,IACa,UAAU;CACxB;CAEA,eAAe,qBACd,OACA,QACA,wBAA4D,CAAC,GAC7C;EAChB,IAAI,CAAC,0BAA0B,OAAO,WAAW,GAAG;EACpD,IAAI;EACJ,IAAI;GACH,gBAAgB,+BAA+B;EAChD,SAAS,OAAO;GACf,MAAM,IAAI,MAAM,mBAAmB,KAAK,CAAC;EAC1C;EAGA,IAAI,CAAC,eAAe;EACpB,MAAM,EAAE,QAAQ,cAAc;EAC9B,MAAM,eAAe,OAAO,QAAQ,UAAU,gBAAgB,eAAe,KAAK,CAAC;EACnF,IAAI,aAAa,WAAW,GAAG;EAC/B,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,uBAAuB;EAC3D,IAAI;GACH,MAAM,2BAA2B,KAAK,IAAI,IAAI;GAC9C,MAAM,YAAY,IAAI,IAAI,aAAa,KAAK,UAAU,CAAC,MAAM,SAAS,KAAK,CAAC,CAAC;GAC7E,MAAM,yBAAyB,aAC9B,+BACE,oBACA,uBAAuB,KAAK;IAC3B;IACA;IACA,aAAa,OAAO;IACpB,UAAU;GACX,CAAC,GACF,UACA,wBACD;GACD,MAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,aAAa,KAAK,UAAU,MAAM,OAAO,CAAC,CAAC;GAC9E,IAAI;GACJ,IAAI;IACH,UAAU,MAAM,sBAAsB,cAAc;GACrD,SAAS,OAAO;IAIf,IAAI,6BAA6B,KAAK,GACrC,UAAU,CAAC;SACL,IACN,sBAAsB,wBACtB,qCAAqC,KAAK,GAM1C,UAAU,MAAM,8BAA8B,gBAAgB,qBAAqB;SAEnF,MAAM;GAER;GACA,MAAM,kCAAkB,IAAI,IAA+C;GAC3E,IAAI,QAAQ,SAAS,GACpB,IAAI;IACH,MAAM,YAAY,aAAa,WAAW,IAAI,aAAa,KAAK,KAAA;IAChE,MAAM,cAAc,YACjB,CAAC,MAAM,uBAAuB,WAAW,WAAW,wBAAwB,CAAC,IAC7E,MAAM,gBAAgB,KAAA,GAAW,wBAAwB;IAC5D,KAAK,MAAM,cAAc,aAAa;KACrC,IAAI,CAAC,YAAY;KACjB,MAAM,MAAM,cAAc,UAAU;KACpC,IAAI,gBAAgB,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,+BAA+B;KAC7E,gBAAgB,IAAI,KAAK,UAAU;IACpC;GACD,SAAS,OAAO;IACf,KAAK,MAAM,UAAU,SAAS;KAC7B,MAAM,QAAQ,UAAU,IAAI,OAAO,QAAQ;KAC3C,IAAI,CAAC,SAAS,CAAC,wBAAwB,QAAQ,KAAK,GAAG;KACvD,IAAI;MACH,iDAAiD,OAAO,UAAU;OACjE,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC;KACF,SAAS,cAAc;MACtB,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;MACvD;KACD;KACA,IAAI;KACJ,IAAI;MACH,oBAAoB,0CAA0C,OAAO,UAAU;OAC9E,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC;KACF,SAAS,iBAAiB;MACzB,IAAI;OAUH,IAAI,CAAC,MATmB,qBACvB,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,yCAAyC,MAAM,IAAI;QAClD,eAAe,MAAM;QACrB,SAAS,MAAM;OAChB,CAAC,CACH,GACgB;QACf,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;QACvD;OACD;MACD,SAAS,kBAAkB;OAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;MACxD;MACA,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;MACvD;KACD;KACA,IAAI;MACH,MAAM,gBAAgB,6CAA6C,MAAM,IAAI,EAC5E,cAAc,kBAAkB,cACjC,CAAC;MACD,IACC,qDAAqD,aAAa,MAClE,qDAAqD,iBAAiB,GAEtE;MAED,IACC,4DACC,eACA,iBACD,GAEA;KAEF,QAAQ,CAGR;KACA,IAAI;MACH,MAAM,qBAAqB,MAAM,IAAI,kBAAkB,qBACtD,yCAAyC,MAAM,IAAI;OAClD,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC,CACF;KACD,SAAS,kBAAkB;MAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACxD;IACD;IACA,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;IACvD;GACD;GAED,MAAM,gDAAgC,IAAI,IAAY;GACtD,KAAK,MAAM,UAAU,SAAS;IAC7B,MAAM,QAAQ,UAAU,IAAI,OAAO,QAAQ;IAC3C,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,+BAA+B;IAC3D,IAAI,CAAC,wBAAwB,QAAQ,KAAK,GAAG;IAC7C,IAAI;KACH,iDAAiD,OAAO,UAAU;MACjE,eAAe,MAAM;MACrB,SAAS,MAAM;KAChB,CAAC;IACF,SAAS,cAAc;KACtB,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACvD;IACD;IACA,IAAI;IACJ,IAAI;KACH,oBAAoB,0CAA0C,OAAO,UAAU;MAC9E,eAAe,MAAM;MACrB,SAAS,MAAM;KAChB,CAAC;IACF,SAAS,iBAAiB;KACzB,IAAI;MACH,MAAM,qBACL,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,yCAAyC,MAAM,IAAI;OAClD,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC,CACH;KACD,SAAS,kBAAkB;MAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACxD;KACA,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;KACvD;IACD;IACA,8BAA8B,IAAI,OAAO,QAAQ;IACjD,IAAI;KACH,IAAI,aAAa,gBAAgB,IAAI,cAAc,KAAK,CAAC;KACzD,IAAI,CAAC,cAAc,aAAa,SAAS,GAAG;MAC3C,IAAI,6BAA6B,UAAU,wBAAwB,KAAK,MACvE,MAAM,IAAI,MAAM,+BAA+B;MAEhD,aAAa,MAAM,uBAAuB,OAAO,WAAW,wBAAwB;KACrF;KACA,IAAI,CAAC,YAAY;MAUhB,IAAI,CAAC,MATmB,qBACvB,MAAM,IACN,sBAAsB,MAAM,eAAe,MAAM,OAAO,SAEvD,yCAAyC,MAAM,IAAI;OAClD,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC,CACH,GACgB;OACf,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,+BAA+B;OAEhD;MACD;MACA,MAAM,IAAI,MAAM,+BAA+B;KAChD;KAQA,IAAI,MAPkB,wCACrB,OACA,eACA,OACA,mBACA,WAAW,OACZ,MACgB,WAAW;IAC5B,SAAS,OAAO;KACf,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;IACxD;GACD;GACA,KAAK,MAAM,SAAS,cAAc;IACjC,IAAI,8BAA8B,IAAI,MAAM,OAAO,GAAG;IACtD,MAAM,sBAAsB,6BAC3B,UACA,wBACD;IACA,IAAI,uBAAuB,MAAM;IACjC,IACC,CAAC,4BACA,OACA,sBAAsB,MAAM,eAAe,MAAM,OAAO,CACzD,GAEA;IAED,MAAM,eAAe,sBAAsB,MAAM,eAAe,MAAM,OAAO;IAC7E,IAAI,uBAAuB;IAC3B,IAAI;KAiCH,IAAI,CAAC,MAhCmB,qBAAqB,MAAM,IAAI,oBACtD,4CAA4C,MAAM,UACjD,qCACC,MAAM,IACN,0BAA0B,YAAY,GACtC,YAAY;MACX,IAAI;MACJ,IAAI;OACH,WAAW,6CAA6C,MAAM,IAAI,EACjE,aACD,CAAC;MACF,QAAQ;OACP,uBAAuB;OACvB;MACD;MAGA,IAAI,CAAC,qBAAqB,eAAe,KAAK,GAAG;OAChD,uBAAuB;OACvB;MACD;MACA,MAAM,uBAAuB,OAAO;OACnC,SAAS,MAAM;OACf;OACA;OACA,aAAa,OAAO;OACpB,UAAU;MACX,CAAC;KACF,CACD,CACD,CACD,KACkB,sBAAsB;IACzC,SAAS,OAAO;KAGf,IAAI,mBAAmB,KAAK,MAAM,kCAAkC;KACpE,MAAM,gBAAgB,uBAAuB;KAC7C,IAAI,oBAA4E;KAChF,IAAI;MACH,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,gCAAgC;MACpE,oBAAoB,MAAM,+BACxB,oBACA,cAAc;OACb,SAAS,MAAM;OACf;OACA;OACA,aAAa,OAAO;OACpB,UAAU;MACX,CAAC,GACF,UACA,wBACD;MACA,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,gCAAgC;KACzE,QAAQ;MACP,IAAI;OAOH,IAAI,CAAC,MANmB,qBAAqB,MAAM,IAAI,oBACtD,yCAAyC,MAAM,IAAI;QAClD,eAAe,MAAM;QACrB,SAAS,MAAM;OAChB,CAAC,CACF,GACgB;QACf,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,gCAAgC;QAEjD;OACD;MACD,SAAS,kBAAkB;OAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;OACvD;MACD;MACA,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,gCAAgC;MAEjD;KACD;KACA,IAAI;MACH,MAAM,aAAa,MAAM,uBACxB,OACA,WACA,wBACD;MACA,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,+BAA+B;MAQhE,IAAI,MAPkB,wCACrB,OACA,eACA,OACA,mBACA,WAAW,OACZ,MACgB,WAAW;KAC5B,SAAS,YAAY;MACpB,IAAI,sBAAsB,yCAAyC;OAClE,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;OACvD;MACD;MACA,IAAI;OAOH,IAAI,CAAC,MANmB,qBAAqB,MAAM,IAAI,oBACtD,yCAAyC,MAAM,IAAI;QAClD,eAAe,MAAM;QACrB,SAAS,MAAM;OAChB,CAAC,CACF,GACgB;QACf,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,kCAAkC,EAAE,OAAO,WAAW,CAAC;QAExE;OACD;MACD,SAAS,kBAAkB;OAC1B,IAAI,CAAC,sBAAsB,sBAAsB,MAAM;OACvD;MACD;MACA,IAAI,CAAC,sBAAsB,sBAC1B,MAAM,IAAI,MAAM,kCAAkC,EAAE,OAAO,WAAW,CAAC;KAEzE;IACD;GACD;EACD,SAAS,OAAO;GACf,MAAM,IAAI,MAAM,mBAAmB,KAAK,CAAC;EAC1C;CACD;CACA,eAAe,yBACd,cACA,cAII,CAAC,GAC0C;EAC/C,MAAM,6BAA6B,YAAY,8BAA8B;EAC7E,MAAM,yBAAyB,YAAY,0BAA0B;EACrE,IAAI,wBAAwB,uBAAuB,WAAW;EAC9D,IAAI;GACH,OAAO,MAAM,gBAAgB,cAAc,YAAY,UAAU;EAClE,SAAS,OAAO;GACf,IAAI,CAAC,4BAA4B,MAAM;GACvC,MAAM,eAAe,uBAAuB,KAAK;GACjD,IAAI,CAAC,cAAc,MAAM;GACzB,MAAM,WAAW,aAAa,QAC5B,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;GACA,IAAI,SAAS,WAAW,GAAG,MAAM;GACjC,OAAO;EACR,UAAU;GACT,IAAI,wBAAwB,uBAAuB,WAAW;EAC/D;CACD;CAEA,SAAS,yBACR,OACA,cAC4C;EAC5C,MAAM,MAAM,MAAM,GAChB,QACA;wDAED,CAAC,CACA,IAAI,YAAY;EAClB,IAAI,CAAC,OAAO,sBAAsB,IAAI,gBAAgB,IAAI,QAAQ,MAAM,cACvE,OAAO;EACR,OAAO;GAAE,eAAe,IAAI;GAAgB,SAAS,IAAI;EAAS;CACnE;CAEA,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC/C,IAAI;EACJ,IAAI;GACH,SAAS,MAAM,uBAAuB;EACvC,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;EACA,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,uBAAuB,OAAO,MAAM;GACpC,MAAM,qBAAqB,OAAO,QAAQ,EAAE,sBAAsB,KAAK,CAAC;GACxE,MAAM,WAAW;IAChB,SAAS;IACT,YAAY,uBAAuB,OAAO,MAAM,CAAC,CAC/C,IAAI,gBAAgB,CAAC,CACrB,QACC,cACA,UAAU,WAAW,OACvB;GACF;GACA,OAAO,EAAE,KAAK,QAAQ;EACvB,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC7D,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,IAAI,CAAC,sBAAsB,KAAK,YAAY,GAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAG/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,IAAI,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC1D,MAAM,WAAW,4BAA4B,OAAO,YAAY;GAChE,IAAI,+BAA2E;GAC/E,IAAI,YAAY,OAAO,UAAU,aAChC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;GACJ,IAAI,UAAU,MAAM,UAAU,eAAe,WAC5C,YAAY,mBAAmB,KAAK;QAC9B;IAQN,MAAM,mBAAkB,MAJH,yBAAyB,cAAc;KAC3D,4BAA4B,SAAS;KACrC,wBAAwB;IACzB,CAAC,EAAA,CAC8B,QAC7B,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;IACA,+BAA+B;IAC/B,MAAM,gBAAgB,wBAAwB,MAAM,IAAI,YAAY;IACpE,IAAI,4BAA4B,OAAO,YAAY,GAAG;KACrD,IAAI,eAAe,UAAU,aAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;KAEvE,QAAQ;KACR,YAAY,mBAAmB,aAAa;IAC7C,OAAO;KACN,MAAM,sBAAsB,mBAAmB,OAAO,eAAe,CAAC,CAAC,MACrE,SAAS,KAAK,iBAAiB,YACjC;KACA,IAAI,CAAC,qBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;KAEvE,YAAY;KACZ,QAAQ,wBAAwB,MAAM,IAAI,YAAY;IACvD;GACD;GACA,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,MAAM,wBAAwB,uBAC5B,KAAK,CAAC,EACL,QACA,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;GACD,IAAI,mBACH,iCACC,uBAAuB,SAAS,wBAAwB;GAC1D,IAAI,CAAC,kBAAkB;IACtB,MAAM,iBAAiB,yBAAyB,OAAO,YAAY;IACnE,mBAAmB,iBAAiB,CAAC,cAAc,IAAI;GACxD;GACA,MAAM,+BAA+B,4BAA4B,OAAO,YAAY;GACpF,IAAI,kBAAkB,MAAM,qBAAqB,OAAO,gBAAgB;GACxE,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GACtD,IACC,CAAC,SACA,CAAC,gCAAgC,4BAA4B,OAAO,YAAY,GAEjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,kBAAkB,YAAY,mBAAmB,KAAK;GAE1D,OAAO,EAAE,KAAK,eAAe,OAAO,OAAO,SAAS,CAAC;EACtD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,uEAAuE,OAAO,MAAM;EAC3F,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EACzC,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,mBAAmB,KAAK,SAAS,GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IACC,CAAC,OAAO,MACR,CAAC,aAAa,OAAO,OAAO;GAAC;GAAa;GAAe;EAAmB,CAAC,GAE7E,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,WAAW,aAAa,sBAAsB,OAAO;EAC7D,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,OAAO,sBAAsB,YAC7B,CAAC,qBAAqB,KAAK,iBAAiB,KAC5C,CAAC,eACD,OAAO,gBAAgB,YACvB,MAAM,QAAQ,WAAW,GAEzB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,KAAK,cAAc,SAAS;GACxE,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACnF,MAAM,uBAAuB;GAS7B,IAAI,EAPH,OAAO,YAAY,SAAS,WACzB,aAAa,sBAAsB,CAAC,MAAM,CAAC,KAAK,qBAAqB,SAAS,WAC9E,aAAa,sBAAsB;IAAC;IAAqB;IAAe;GAAM,CAAC,KAChF,qBAAqB,SAAS,cAC9B,qBAAqB,sBAAsB,OAAO,YAAY,qBAC9D,qBAAqB,gBACpB,oBAAoB,cAAc,OAAO,YAAY,UAAU,IAElE,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,gBAAgB,OAAO,YAAY,CAAC,CAAC,MAClD,WAAW,OAAO,gBAAgB,iBACpC;GACA,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACnF,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aAEC,mCAAmC,MAAM,IAAI;KAC5C;KACA;KACA,kBAAkB,OAAO;KACzB,aAAa,OAAO;IACrB,CAAC,IACD,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACzF,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EACzC,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,mBAAmB,KAAK,SAAS,GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,IACX,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,WAAW,UAAU,8BAA8B,OAAO;EAClE,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,CAAE;GAAC;GAAY;GAAY;EAAS,CAAC,CAAe,SAAS,QAAQ,MACpE,aAAa,aACX,CAAC,aAAa,OAAO,OAAO;GAAC;GAAa;GAAY;EAA2B,CAAC,KACnF,OAAO,8BAA8B,YACrC,CAAC,qBAAqB,KAAK,yBAAyB,IACnD,CAAC,aAAa,OAAO,OAAO,CAAC,aAAa,UAAU,CAAC,IAExD,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,KAAK,cAAc,SAAS;GACxE,IAAI,CAAC,QACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IACC,aAAa,eACZ,OAAO,qBAAqB,QAC5B,oBAAoB,cAAc,OAAO,gBAAgB,MAAM,4BAEhE,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aAEC,iCAAiC,MAAM,IAAI;KAC1C;KACA;KACU;IACX,CAAC,IACD,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,OAAO,qEAAqE,OAAO,MAAM;EAC5F,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EACzC,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,mBAAmB,KAAK,SAAS,GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,WAAW,CAAC,GAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,cAAc,OAAO;EAC7B,IAAI,OAAO,cAAc,YAAY,CAAC,mBAAmB,KAAK,SAAS,GACtE,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,KAAK,cAAc,SAAS,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aACM,mCAAmC,MAAM,IAAI;KAAE;KAAW;IAAU,CAAC,IAC1E,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,IAAI,sEAAsE,OAAO,MAAM;EAC1F,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;EAC3C,IAAI,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,oBAAoB,KAAK,UAAU,GACpF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,aAAa,oBAAoB,CAAC,GAChF,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,EAAE,WAAW,uBAAuB,OAAO;EACjD,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,OAAO,uBAAuB,YAC9B,CAAC,6BAA6B,KAAK,kBAAkB,GAErD,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,UAAU,MAAM,SAAS,MAAM,SAAS,KAAK,eAAe,UAAU;GAC5E,IAAI,CAAC,SACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,QAAQ,eAAe,iBAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;GAE/D,MAAM,SAAS,sBAAsB,KAAK,CAAC,CAAC,MAC1C,WACA,6BAA6B,YAAY,OAAO,eAAe,MAAM,kBACvE;GACA,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACnF,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aAEC,iCAAiC,MAAM,IAAI;KAC1C;KACA;KACA,yBAAyB,OAAO;IACjC,CAAC,IACD,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,KAAK,iDAAiD,OAAO,MAAM;EACtE,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,IAAI,CAAC,sBAAsB,KAAK,YAAY,GAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,CAAC,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;EACJ,IAAI;GACH,QAAQ,QAAQ,SAAS;GAEzB,IADqB,wBAAwB,MAAM,IAAI,YACnD,CAAA,EAAc,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACzF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;EAExE,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;EACA,IAAI;EACJ,IAAI;GACH,SAAS,MAAM,8BAA8B,OAAO,oBACnD,yBAAyB,YAAY,CACtC;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;EACA,IACC,OAAO,QACL,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E,CAAC,CAAC,WAAW,GAEb,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;EAEvE,IAAI;GACH,MAAM,kBAAkB,uBAAuB,MAAM,IAAI,YAAY;GACrE,IAAI,CAAC,iBACJ,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI;IACH,OAAO,EAAE,KACR,0BACC,aACM;KAEL,IADqB,wBAAwB,MAAM,IAAI,YAEtD,CAAA,EAAc,UAAU,eACxB,4BAA4B,OAAO,YAAY,GAE/C,MAAM,IAAI,MAAM,+BAA+B;KAEhD,OAAO,2BACN,MAAM,IACN;MAAE,YAAY,kBAAkB,KAAK;MAAG;KAAO,GAC/C,YACD;IACD,IACC,UAAU,eAAe,OAAO,KAAK,CACvC,CACD;GACD,UAAU;IACT,gBAAgB;GACjB;EACD,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,cAAY,IAAI,CAAC;EACjD;CACD,CAAC;CAED,IAAI,KAAK,gDAAgD,OAAO,MAAM;EACrE,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAC/C,IAAI,CAAC,sBAAsB,KAAK,YAAY,GAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,SAAS,MAAM,uBAAuB,CAAC;EAC7C,IAAI,CAAC,OAAO,IACX,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,MAAM,aAAa;GAClB;GACA;GACA;GACA;EACD;EACA,IAAI,CAAC,aAAa,OAAO,OAAO,UAAU,GACzC,OAAO,OAAO,KAAK,OAAO,KAAK,CAAC,CAAC,OAAO,QACvC,WAAW,SAAS,GAAkC,CACvD,IACG,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG,IAC/D,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE3D,MAAM,EACL,WACA,4BACA,kCACA,iBACG,OAAO;EACX,IACC,OAAO,cAAc,YACrB,CAAC,mBAAmB,KAAK,SAAS,KAClC,OAAO,iBAAiB,YACxB,CAAC,sBAAsB,KAAK,YAAY,KACxC,OAAO,+BAA+B,YACtC,CAAC,4BAA4B,KAAK,0BAA0B,KAC5D,OAAO,qCAAqC,YAC5C,CAAC,mCAAmC,KAAK,gCAAgC,GAEzE,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAiC,GAAG,GAAG;EAE/D,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI,wBAA2C,CAAC;EAChD,IAAI;GACH,MAAM,QAAQ,QAAQ,SAAS;GAC/B,MAAM,QAAQ,wBAAwB,MAAM,IAAI,YAAY;GAC5D,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAClF,IAAI,MAAM,UAAU,eAAe,4BAA4B,OAAO,YAAY,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,IAAI,MAAM,cAAc,WACvB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,SAAS,gCAAgC,MAAM,IAAI;IACxD;IACA;IACA;IACA;GACD,CAAC;GACD,IAAI,QAAQ,OAAO,EAAE,KAAK,eAAe,cAAc,MAAM,CAAC;GAC9D,IAAI,MAAM,UAAU,aACnB,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,UAAU,iCAAiC,MAAM,IAAI;IAC1D;IACA,WAAW,MAAM;GAClB,CAAC;GACD,6CAA6C,QAAQ,WAAW;GAChE,MAAM,YAAY,gBAAgB,OAAO,KAAK;GAO9C,IAN4B,wBAC3B,sBAAsB,cAAc,QAAQ,aAAa;IACxD,iBAAiB,MAAM;IACvB,GAAG;GACJ,CAAC,CAEE,MAAwB,kCAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAGvE,MAAM,kBAAiB,MADG,yBAAyB,YAAY,EAAA,CAC5B,QACjC,UAAU,sBAAsB,MAAM,eAAe,MAAM,OAAO,MAAM,YAC1E;GACA,IAAI,eAAe,WAAW,GAAG,MAAM,qBAAqB;GAC5D,MAAM,QAAQ,eAAe;GAC7B,IAAI,CAAC,OAAO,MAAM,qBAAqB;GACvC,kBAAkB,uBAAuB,MAAM,IAAI,YAAY,KAAK,KAAA;GACpE,IAAI,CAAC,iBAAiB;IAGrB,MAAM,yBAAyB,MAAM,IAAI,YAAY;IACrD,MAAM,oBAAoB,gCAAgC,MAAM,IAAI;KACnE;KACA;KACA;KACA;IACD,CAAC;IACD,IAAI,mBAAmB,OAAO,EAAE,KAAK,eAAe,cAAc,iBAAiB,CAAC;IACpF,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GACvE;GAEA,MAAM,gBAAgB,gCAAgC,MAAM,IAAI;IAC/D;IACA;IACA;IACA;GACD,CAAC;GACD,IAAI,eAAe,OAAO,EAAE,KAAK,eAAe,cAAc,aAAa,CAAC;GAC5E,MAAM,eAAe,wBAAwB,MAAM,IAAI,YAAY;GACnE,IAAI,CAAC,gBAAgB,aAAa,cAAc,WAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;GAEvE,MAAM,wBAAwB,KAAK,IAAI,IAAI;GAC3C,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GAMnF,wBAAwB,MAAM,mCAC7B,MAAM,IACN,aAAa,QAAQ,SAAS,WAAW,CACxC,GAAI,OAAO,aAAa,cAAc,OAAO,mBAC1C,CAAC,OAAO,gBAAgB,IACxB,CAAC,GACJ,GAAI,OAAO,qBAAqB,CAAC,OAAO,kBAAkB,IAAI,CAAC,CAChE,CAAC,CACF;GAmMA,OAAO,MAlMgB,qCACtB,MAAM,IACN,0BAA0B,YAAY,SAErC,iDAAiD,MAAM,IAAI,MAAM,SAAS,YAAY;IACrF,IAAI;IACJ,IAAI;KACH,gBAAgB,+BAA+B;IAChD,SAAS,OAAO;KACf,MAAM,IAAI,MAAM,mBAAmB,KAAK,CAAC;IAC1C;IACA,IAAI,CAAC,0BAA0B,CAAC,eAC/B,MAAM,IAAI,MAAM,mCAAmC;IAEpD,IAAI,CAAC,gBAAgB,eAAe,KAAK,GACxC,MAAM,IAAI,MAAM,+BAA+B;IAEhD,MAAM,EAAE,QAAQ,cAAc;IAC9B,wBAAwB,CAAC,OAAO,0BAA0B;IAC1D,MAAM,aAAa,MAAM,uBACxB,OACA,WACA,qBACD;IACA,IAAI,CAAC,YACJ,MAAM,IAAI,qBACT,iCACA,kCACA,uBACA,IAAI,MAAM,gCAAgC,CAC3C;IAED,IAAI,CAAC,qBAAqB,eAAe,KAAK,GAC7C,MAAM,IAAI,MAAM,+BAA+B;IAEhD,MAAM,mBAAmB,oCACxB,MAAM,IACN,kBAAkB,KAAK,GACvB,YACD;IACA,MAAM,eAAe,sCAAsC,MAAM,IAAI;KACpE;KACA;KACA,aAAa,WAAW;KACxB;IACD,CAAC;IACD,IACC,aAAa,iBAAiB,gBAC9B,aAAa,sBAAsB,4BAEnC,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;IAEvE,MAAM,aAAa,wBAAwB,MAAM,IAAI,YAAY;IACjE,IAAI,CAAC,cAAc,WAAW,cAAc,WAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;IAEvE,MAAM,iBAAiB,gBAAgB,OAAO,UAAU;IACxD,IACC,wBACC,sBAAsB,cAAc,aAAa,aAAa;KAC7D,iBAAiB,WAAW;KAC5B,GAAG;IACJ,CAAC,CACF,MAAM,kCAEN,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAyC,GAAG,GAAG;IAEvE,MAAM,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;IAC3C,MAAM,mBAAmB,wCAAwC,MAAM,IAAI;KAC1E;KACA;KACA;IACD,CAAC;IACD,MAAM,WAAW,KAAK,IAAI,GAAG,OAAO,uBAAuB;IAC3D,MAAM,sBAAsB,6BAC3B,UACA,qBACD;IACA,IAAI,uBAAuB,MAC1B,MAAM,IAAI,MAAM,mCAAmC;IAEpD,IAAI;IACJ,IAAI;KACH,oBAAoB,2CAElB,MAAM,uBAAuB,OAAO;MACnC,SAAS,MAAM;MACf,UAAU;MACV;MACA,aAAa,OAAO;MACpB,UAAU;KACX,CAAC,EAAA,CACA,UACF;MAAE,eAAe,MAAM;MAAe,SAAS,MAAM;KAAQ,CAC9D;KACA,IACC,qDAAqD,iBAAiB,MACtE,qDAAqD,gBAAgB,GAErE,MAAM,IAAI,MAAM,gCAAgC;IAElD,SAAS,OAAO;KACf,MAAM,OAAO,mBAAmB,KAAK;KACrC,MAAM,UAAU,8BAA8B,KAAK;KACnD,MAAM,gBAAgB,uBAAuB;KAC7C,IAAI,SAAS,oCAAoC,CAAC,eAAe;MAChE,2BAA2B,OAAO,SAAS;OAC1C;OACA;OACA,SAAS;OACT,cAAc;MACf,CAAC;MACD,MAAM,IAAI,qBAAqB,MAAM,QAAQ,QAAQ,MAAM,KAAK;KACjE;KACA,IAAI;MACH,MAAM,WAAW,MAAM,+BACrB,oBACA,cAAc;OACb,SAAS,MAAM;OACf;OACA;OACA,aAAa,OAAO;OACpB,UAAU;MACX,CAAC,GACF,UACA,qBACD;MACA,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,gCAAgC;MAC/D,oBAAoB,0CAA0C,UAAU;OACvE,eAAe,MAAM;OACrB,SAAS,MAAM;MAChB,CAAC;MAID,IAAI,kBAAkB,kBAAkB,iBAAiB,eACxD,MAAM,IAAI,MAAM,gCAAgC;KAElD,SAAS,eAAe;MACvB,MAAM,IAAI,qBACT,mBAAmB,aAAa,GAChC,8BAA8B,aAAa,CAAC,CAAC,QAC7C,OACA,aACD;KACD;IACD;IAIA,IAAI;IACJ,IAAI;KACH,uBAAuB,MAAM,uBAC5B,OACA,WACA,qBACD;IACD,SAAS,OAAO;KACf,IAAI,4BAA4B,KAAK,MAAM,iCAC1C,MAAM,IAAI,qBACT,iCACA,kCACA,OACA,KACD;KAED,MAAM;IACP;IACA,IAAI,CAAC,sBACJ,MAAM,IAAI,qBACT,iCACA,kCACA,uBACA,IAAI,MAAM,gCAAgC,CAC3C;IAED,MAAM,SAAS,MAAM,0DACpB,MAAM,IACN;KACC,eAAe,MAAM;KACrB,SAAS,MAAM;KACf,aAAa,qBAAqB;KAClC,UAAU;KACV,uBAAuB;KACvB,0BAA0B;MACzB,aAAa;MACb,MAAM;MACN,kBAAkB;KACnB;IACD,CACD;IACA,OAAO,EAAE,KAAK,eAAe,cAAc,MAAM,CAAC;GACnD,CAAC,CACH;EAED,SAAS,OAAO;GACf,MAAM,OAAO,aAAa,KAAK;GAC/B,MAAM,UAAU,8BAA8B,KAAK;GACnD,2BAA2B,OAAO,SAAS;IAC1C;IACA;IACA,SAAS;IACT,cAAc;GACf,CAAC;GACD,OAAO,EAAE,KAAK,oBAAoB,MAAM,OAAO,GAAG,cAAY,IAAI,CAAC;EACpE,UAAU;GACT,wBAAwB;GACxB,6BAA6B;GAC7B,kBAAkB;EACnB;CACD,CAAC;CAED,OAAO;AACR;;;;;;ACtpFA,SAAS,sBACR,QAC+B;CAC/B,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO;EACN,QAAQ,OAAO;EACf,eAAe,OAAO;EACtB,UAAU,OAAO,YAAY;EAC7B,SAAS,OAAO,WAAW;EAC3B,YAAY,OAAO,cAAc;CAClC;AACD;AAYA,IAAM,2BAA2B;AACjC,IAAM,wBAAwB;AAC9B,IAAM,iCAAiC;AACvC,IAAM,6BAA6B;;;;;;;;;;;;;AAcnC,SAAS,uBAAuB,OASxB;CAIP,IAAI;CACJ,IAAI,MAAM,UAAU,CAAC,CAAC,WAAW,GAAG,GACnC,IAAI;EACH,SAAS,KAAK,MAAM,KAAK;CAC1B,QAAQ;EACP,OAAO;CACR;MACM;EACN,IAAI;EACJ,IAAI;GACH,UAAU,OAAO,KAAK,OAAO,QAAQ,CAAC,CAAC,SAAS,MAAM;EACvD,QAAQ;GACP,OAAO;EACR;EACA,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC,WAAW,GAAG,GAAG,OAAO;EAClD,IAAI;GACH,SAAS,KAAK,MAAM,OAAO;EAC5B,QAAQ;GACP,OAAO;EACR;CACD;CACA,MAAM,WAAW,OAAO,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK;CACrD,MAAM,cAAc,OAAO,OAAO,eAAe,EAAE,CAAC,CAAC,KAAK;CAC1D,MAAM,YAAY,OAAO,OAAO,cAAc,EAAE,CAAC,CAAC,KAAK;CAIvD,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,OAAO;CAEpD,MAAM,aADe,MAAM,QAAQ,OAAO,SAAS,IAAI,OAAO,YAAY,CAAC,EAAA,CAEzE,QAAQ,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CACpF,KAAK,SAAS,KAAK,KAAK,CAAC;CAC3B,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,aAAa,UAAU,WAAW,GACnE,OAAO;EACN,MAAM;EACN,OAAO;CACR;CAED,IAAI,qBAAqB,SAAS,MAAM,aACvC,OAAO;EAAE,MAAM;EAAgB,OAAO;CAAuC;CAE9E,OAAO;EACN,MAAM;EACN,WAAW;EACX;EACA,YAAY;EACZ;CACD;AACD;AAIA,SAAS,8BAA8B,SAAS,0BAA0B,GAAG;CAC5E,MAAM,SAAS,OAAO;CACtB,MAAM,cAAc,OAAO,MAAM;CACjC,MAAM,SAAS,QAAQ,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,SAAS;CAClC,MAAM,iBAAiB,QAAQ,OAAO,0BAA0B;CAChE,IAAI,YAAuC;CAC3C,IAAI,CAAC,QAAQ,YAAY;MACpB,IAAI,CAAC,aAAa,CAAC,gBAAgB,YAAY;CACpD,OAAO;EACN;EACA,iBAAiB,OAAO,sBAAsB;EAC9C;EACA,cAAc;EACd,kBAAkB;EAClB,YAAY;CACb;AACD;AAEA,eAAe,0BAA0B,MAStC;CACF,MAAM,gBAAgB,KAAK,OAAO,sBAAsB;CACxD,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,4BAA4B;CAChE,MAAM,UAAU,4BAA4B,KAAK,OAAO;CACxD,MAAM,QAAQ,KAAK,eAAe,KAAK;CAQvC,MAAM,SADgB,MANO,4BAA4B;EACxD,SAAS,KAAK;EACd,iBAAiB;EACjB,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC,EAAA,CACoC,MAAM,UAAU,MAAM,aAAa,OAAO,KAAK,QAGlF,MAAM,6BAA6B;EACnC,SAAS,KAAK;EACd;EACA;EACA,MAAM;EACN,eAAe;EACf;EACA,iBAAiB;EACjB,QAAQ;EACR,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC;CACF,MAAM,CAAC,YAAY,qBAAqB,KAAK,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CAkBjF,OAAO;EAAE;EAAO,YAAA,MAjBS,sCAAsC;GAC9D,UAAU,sBAAsB,KAAK,QAAQ,GAAG,QAAQ,GAAG,SAAS;GACpE,SAAS,KAAK;GACd;GACA;GACA,MAAM;GACN,iBAAiB;GACjB;GACA,WAAW,KAAK,OAAO,sBAAsB;GAC7C,aAAa,KAAK,OAAO,8BAA8B;EACxD,CAAC;EAO2B,aANR,iCAAiC,KAAK,MAAM,IAAI;GACnE,gBAAgB;GAChB,UAAU,KAAK;GACf,wBAAwB;GACxB,kCAAkC;EACnC,CAC4B;CAAY;AACzC;AAEA,eAAe,6BAA6B,MAMG;CAC9C,MAAM,gBAAgB,KAAK,OAAO,sBAAsB;CACxD,IAAI,CAAC,eAAe,OAAO;CAC3B,MAAM,cAAc,8BAA8B,KAAK,MAAM,IAAI,eAAe,KAAK,OAAO;CAC5F,IAAI,CAAC,aAAa,kCAAkC,OAAO;CAC3D,MAAM,UAAU,YAAY,wBAAwB,KAAK;CACzD,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,YAAY,4BAA4B,KAAK,OAAO,GAAG,OAAO;CAQlE,MADqB,MANA,4BAA4B;EAChD,SAAS,KAAK;EACd,iBAAiB;EACjB,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC,EAAA,CAC2B,MAAM,UAAU,MAAM,aAAa,OAAO,KAAK,KAAA,EACzD,SAAS,gBAAgB,OAAO;CAClD,OAAO,MAAM,sCAAsC;EAClD,UAAU,qBAAqB,KAAK,UAAU,GAAG,QAAQ,GAAG,KAAK,SAAS;EAC1E,SAAS,KAAK;EACd;EACA,UAAU,KAAK;EACf,MAAM;EACN,iBAAiB;EACjB;EACA,WAAW,KAAK,OAAO,sBAAsB;EAC7C,aAAa,KAAK,OAAO,8BAA8B;CACxD,CAAC;AACF;AAEA,SAAS,iCAAiC,SAA2B;CACpE,MAAM,cAAc,QAAQ,KAAK;CACjC,IAAI,CAAC,aAAa,OAAO,CAAC;CAC1B,MAAM,SAAS,sBAAsB;CACrC,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,MAAM,QAAQ,SAAS,IACnC,UAAU,KAAK,UAAU,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IAC7D,OAAO,cAAc,WACpB,UACC,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACf,OAAO,OAAO,2BAA2B,YAAY,OAAO,uBAAuB,KAAK,IACvF,CAAC,OAAO,uBAAuB,KAAK,CAAC,IACrC,CAAC;CACN,MAAM,aAAa,OAAO,QAAQ,UAAU,UAAU,WAAW;CACjE,IAAI,WAAW,WAAW,OAAO,QAAQ,OAAO;CAChD,OAAO,0BAA0B;CACjC,IAAI,WAAW,QAAQ,OAAO,yBAAyB,WAAW;MAC7D,OAAO,OAAO;CACnB,uBAAuB,MAAM;CAC7B,OAAO;AACR;AAEA,SAAS,4BAA4B,QAG5B;CACR,IAAI,OAAO,cAAc,kBACxB,OAAO;EAAE,MAAM;GAAE,OAAO;GAA8B;EAAO;EAAG,YAAY;CAAI;CAEjF,IAAI,CAAC,OAAO,kBACX,OAAO;EAAE,MAAM;GAAE,OAAO;GAAoC;EAAO;EAAG,YAAY;CAAI;CAEvF,OAAO;AACR;AAEA,SAAS,mCACR,QACA,MAC4D;CAC5D,IAAI,OAAO,cAAc,kBACxB,OAAO;EAAE,MAAM;GAAE,OAAO;GAA8B;EAAO;EAAG,YAAY;CAAI;CAEjF,IAAI,CAAC,OAAO,YACX,OAAO;EAAE,MAAM;GAAE,OAAO;GAA6B;EAAO;EAAG,YAAY;CAAI;CAEhF,IAAI,SAAS,iBAAiB,CAAC,OAAO,kBACrC,OAAO;EAAE,MAAM;GAAE,OAAO;GAAoC;EAAO;EAAG,YAAY;CAAI;CAEvF,OAAO;AACR;AAEA,eAAe,oBACd,GACA,UAAoC,CAAC,GACK;CAC1C,MAAM,MAAM,MAAM,EAAE,IAAI,KAAK;CAC7B,IAAI,CAAC,IAAI,KAAK,GAAG,OAAO,QAAQ,aAAa,CAAC,IAAI;CAClD,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG,OAAO;EAC3E,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,qBAAqB,MAA+B,KAA4B;CACxF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,MAAM,OAAO;CAC1B,OAAO,OAAO,KAAK,CAAC,CAAC,KAAK,KAAK;AAChC;AAEA,SAAS,2BAA2B,MAA+B,KAA4B;CAC9F,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,OAAO,UAAU,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI,gBAAgB;CACtE,OAAO,MAAM,KAAK,KAAK;AACxB;AAEA,SAAS,yBAAyB,MAA+B,KAAuB;CACvF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,MAAM,OAAO,CAAC;CAC3B,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,6BAA6B;CAC/E,OAAO,CACN,GAAG,IAAI,IACN,MACE,KAAK,SAAS;EACd,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI,6BAA6B;EAClF,OAAO,KAAK,KAAK;CAClB,CAAC,CAAC,CACD,OAAO,OAAO,CACjB,CACD;AACD;AAEA,SAAS,qBAAqB,MAA+B,KAA4B;CACxF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,QAAQ,UAAU,IAAI,OAAO;CAC1C,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;CAC/D,OAAO,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI;AACvD;AAEA,SAAS,mCACR,QACA,WACA,OAWS;CAkBT,OAAO,2BAA2B,OAAO,GAjBrB,WAAW,QAAQ,CAAC,CACtC,OACA,KAAK,UAAU;EACd;EACA;EACA,SAAS,MAAM;EACf,SAAS,MAAM;EACf,UAAU,MAAM;EAChB,MAAM,MAAM,QAAQ;EACpB,iBAAiB,MAAM;EACvB,eAAe,MAAM,iBAAiB;EACtC,wBAAwB,MAAM,0BAA0B;EACxD,cAAc,MAAM;EACpB,oBAAoB,MAAM;CAC3B,CAAC,CACF,CAAC,CACA,OAAO,KACmC;AAC7C;AAEA,SAAS,sBAAsB,MAA+B,KAA4B;CACzF,MAAM,QAAQ,KAAK;CACnB,IAAI,SAAS,QAAQ,UAAU,IAAI,OAAO;CAC1C,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;CAC/D,OAAO,OAAO,UAAU,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,8BACR,UACA,iBACiC;CACjC,MAAM,YAAY,IAAI,IAAI,eAAe;CACzC,OAAO,SAAS,QACd,YACA,QAAQ,0BACP,CAAC,QAAQ,sBAAsB,CAAC,UAAU,IAAI,QAAQ,kBAAkB,EAC3E;AACD;AAEA,SAAS,+BAA+B,MAA+B;CACtE,MAAM,KAAK,sBAAsB,MAAM,IAAI;CAC3C,MAAM,WAAW,sBAAsB,MAAM,UAAU;CACvD,IAAI,OAAO,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,uBAAuB;CAC7D,IAAI,OAAO,MAAM,QAAQ,GAAG,MAAM,IAAI,MAAM,6BAA6B;CACzE,OAAO;EACN;EACA,oBAAoB,2BAA2B,MAAM,oBAAoB;EACzE,iBAAiB,2BAA2B,MAAM,iBAAiB;EACnE,UAAU,2BAA2B,MAAM,UAAU,KAAK;EAC1D;EACA,QAAQ,2BAA2B,MAAM,QAAQ,KAAK;CACvD;AACD;AAEA,SAAS,+BAA+B,SAAwC;CAC/E,IACC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,sBAAsB,KACvC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,qCAAqC,KACtD,QAAQ,SAAS,yBAAyB,GAE1C,OAAO;CAER,IACC,QAAQ,SAAS,YAAY,KAC7B,QAAQ,SAAS,kBAAkB,KACnC,QAAQ,SAAS,kCAAkC,KACnD,QAAQ,SAAS,gBAAgB,KACjC,QAAQ,SAAS,mBAAmB,GAEpC,OAAO;CAER,IACC,QAAQ,SAAS,sCAAsC,KACvD,QAAQ,SAAS,cAAc,KAC/B,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,WAAW,GAE5B,OAAO;CAER,OAAO;AACR;AAEA,SAAS,0BAA0B,SAAS,0BAA0B,GAAa;CAClF,MAAM,YAAY,OAAO,OAAO,iBAAiB,MAAM,CAAC,CACtD,KAAK,CAAC,CACN,YAAY;CACd,IAAI,aAAa,cAAc,UAAU,cAAc,WACtD,OAAO,eACN,CAAC,GACD,OAAO,OAAO,iBAAiB,EAAE,CAAC,CAChC,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,OAAO,OAAO,GAChB,EAAE,iBAAiB,OAAO,SAAS,CACpC;CAED,IAAI,OAAO,YAAY,OAAO,aAAa,WAC1C,OAAO,CAAC,iBAAiB,eAAe,OAAO,UAAU,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO;CAE3F,MAAM,YAAY,OAAO,OAAO,kBAAkB,CAAC,CAAC,CAClD,SAAS,YAAY,WAAW,CAAC,CAAC,CAAC,CACnC,QAAQ,UAAU,CAAC,MAAM,QAAQ,CAAC,CAClC,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7B,QAAQ,YAAY,WAAW,YAAY,eAAe,YAAY,KAAK,CAAC,CAC5E,KAAK,YAAY,iBAAiB,eAAe,SAAS,OAAO,QAAQ,CAAC,CAAC,CAAC,CAC5E,OAAO,OAAO;CAChB,OAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;AAC9B;AAEA,SAAS,6BACR,gBACA,QACgB;CAChB,MAAM,WAAW,OAAO,kBAAkB,EAAE,CAAC,CAAC,KAAK;CACnD,IAAI,UAAU,OAAO;CACrB,OAAO,OAAO;AACf;AAEA,SAAS,oBAAoB,OAA+B;CAC3D,MAAM,WAAW,OAAO,OAAO,SAAS,EAAE,CAAC;CAC3C,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,GAAG,OAAO;CACxD,OAAO;AACR;AAEA,SAAS,+BAA+B,OAGtC;CACD,IAAI,6BAA6B,KAAK,GACrC,OAAO;EAAE,OAAO,MAAM;EAAM,QAAQ,MAAM;CAAO;CAElD,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU;CACtD,MAAM,eAAuC;EAC5C,sBACC;EACD,gBAAgB;EAChB,0BACC;EACD,gBAAgB;EAChB,0BACC;EACD,0CACC;EACD,qCACC;EACD,oCACC;EACD,gCACC;EACD,iCAAiC;EACjC,iCAAiC;EACjC,6BACC;EACD,8BAA8B;EAC9B,8BAA8B;CAC/B;CAEA,OAAO;EACN,OAFgB,OAAO,OAAO,cAAc,IAAI,IAAI,OAAO;EAG3D,QACC,aAAa,SACb;CACF;AACD;AAEA,IAAM,2BAA2B;AACjC,IAAM,gCAAgC;AACtC,IAAM,2CAA2B,IAAI,IAAI;CACxC;CACA;CACA;AACD,CAAC;AAED,SAAS,gCAAgC,OAAuB;CAC/D,IAAI;EACH,OAAO,+BAA+B,OAAO,sBAAsB;CACpE,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,wBAAwB,MAA+B,KAAuB;CACtF,MAAM,QAAQ,KAAK;CACnB,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,sBAAsB;CACxE,IAAI,MAAM,SAAS,KAAK,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW;CAC1D,MAAM,QAAQ,MAAM,KAAK,SAAS;EACjC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI,sBAAsB;EAC3E,OAAO,KAAK,KAAK;CAClB,CAAC;CACD,IAAI,MAAM,MAAM,SAAS,CAAC,IAAI,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,sBAAsB;CAC9E,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAAQ,MAAM,IAAI,MAAM,GAAG,IAAI,qBAAqB;CACtF,OAAO;AACR;AAEA,SAAS,wBAAwB,MAA+B,UAAyB;CACxF,MAAM,UAAU,WAAW,2CAA2B,IAAI,IAAI,CAAC,iBAAiB,aAAa,CAAC;CAC9F,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,GACpD,MAAM,IAAI,MAAM,kCAAkC;CAEnD,IAAI,OAAO,KAAK,kBAAkB,UAAU,MAAM,IAAI,MAAM,8BAA8B;CAC1F,IAAI,YAAY,OAAO,KAAK,gCAAgC,UAC3D,MAAM,IAAI,MAAM,sCAAsC;CAEvD,IAAI,YAAY,CAAC,kBAAkB,KAAK,OAAO,KAAK,2BAA2B,CAAC,CAAC,KAAK,CAAC,GACtF,MAAM,IAAI,MAAM,qCAAqC;AAEvD;AAEA,SAAS,oBAAoB,SAAS,0BAA0B,GAG9D;CACD,MAAM,SAAS,8BAA8B,MAAM;CACnD,IAAI,OAAO,cAAc,SAAS,MAAM,IAAI,MAAM,6BAA6B;CAC/E,IAAI,OAAO,OAAO,WAAW,GAAG,MAAM,IAAI,MAAM,0BAA0B;CAC1E,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,MAAM,6BAA6B;CACvE,OAAO;EAAE,SAAS,OAAO;EAAc;CAAO;AAC/C;AAIA,SAAS,oBAAoB,OAAqC;CACjE,IAAI,UAAU,iBAAiB,UAAU,cAAc,OAAO;CAC9D,MAAM,IAAI,MAAM,+BAA+B;AAChD;AAEA,SAAS,uBACR,OACA,YACA,UAA0C,CAAC,GAK1C;CACD,MAAM,WACL,QAAQ,qBAAqB,QAC1B,gCAAgC,KAAK,IACrC,0BAA0B,KAAK;CACnC,MAAM,kBAAkB,OACvB,MAAM,GACJ,QAAQ,wDAAwD,CAAC,CACjE,MAAM,CAAC,CACP,IAAI,QAAQ,KAAK,EACpB,CAAC,CAAC,KAAK;CACP,IAAI,CAAC,iBAAiB,MAAM,IAAI,MAAM,2BAA2B;CACjE,MAAM,SAAS,sBAAsB;CACrC,OAAO;EACN;EACA;EACA,mBAAmB,mBAAmB;GACrC,cAAc,cAAc,OAAO,OAAO,oBAAoB,EAAE;GAChE,QAAQ,SAAS;GACjB,cAAc;EACf,CAAC;CACF;AACD;AAEA,SAAS,iCACR,OACA,MACA,cACC;CACD,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;CAC9D,MAAM,UAAU,uBAAuB,OAAO,qBAAqB,MAAM,aAAa,CAAC;CACvF,MAAM,SAAS,2BAA2B,MAAM,gBAAgB;CAChE,MAAM,mBAAmB,2BAA2B,MAAM,oBAAoB;CAC9E,IAAI,SAAS,eAAe;EAC3B,IAAI,CAAC,UAAU,kBAAkB,MAAM,IAAI,MAAM,mCAAmC;EACpF,OAAO,iCAAiC,MAAM,IAAI;GACjD,SAAS;GACT,SAAS;GACT;GACA,YAAY,MAAM;GAClB,GAAG;GACH;EACD,CAAC;CACF;CACA,IAAI,CAAC,oBAAoB,QAAQ,MAAM,IAAI,MAAM,mCAAmC;CACpF,OAAO,iCACN,MAAM,IACN;EACC,SAAS;EACT,SAAS;EACT;EACA,YAAY;EACZ,GAAG;CACJ,GACA,EACC,0BAA0B,qBAC3B,CACD;AACD;AAEA,SAAS,8BACR,OACA,MACA,UACA,SAC4B;CAC5B,IAAI,SAAS,eAAe;EAC3B,IAAI,QAAQ,YAAY,UAAU,CAAC,QAAQ,QAAQ,QAAQ,KAAK,WAAW,UAC1E,MAAM,IAAI,MAAM,kCAAkC;EAEnD,OAAO;GACN,SAAS;GACT,SAAS;GACT,MAAM,QAAQ;GACd,UAAU,QAAQ;GAClB,kBAAkB,CAAC;EACpB;CACD;CACA,IAAI,QAAQ,YAAY,gBAAgB,QAAQ,QAAQ,eAAe,UACtE,MAAM,IAAI,MAAM,kCAAkC;CAEnD,MAAM,iBAAiB,MAAM,GAC3B,QACA;8EAED,CAAC,CACA,IAAI,QAAQ;CACd,IAAI,CAAC,gBAAgB,cAAc,MAAM,IAAI,MAAM,oBAAoB;CACvE,OAAO;EACN,SAAS;EACT,SAAS;EACT,gBAAgB;GAAE,YAAY;GAAU,aAAa,eAAe;EAAa;EACjF,UAAU,QAAQ;EAClB,kBAAkB,QAAQ;CAC3B;AACD;AAEA,SAAS,mDACR,OACA,MACA,cACA,gBACC;CACD,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;CAC9D,MAAM,UAAU,uBAAuB,OAAO,qBAAqB,MAAM,aAAa,GAAG,EACxF,kBAAkB,MACnB,CAAC;CACD,MAAM,SAAS,2BAA2B,MAAM,gBAAgB;CAChE,MAAM,mBAAmB,2BAA2B,MAAM,oBAAoB;CAC9E,MAAM,qBAAqB,2BAA2B,MAAM,sBAAsB;CAClF,IAAI,SAAS,eAAe;EAC3B,IAAI,CAAC,UAAU,CAAC,sBAAsB,kBACrC,MAAM,IAAI,MAAM,mCAAmC;EAEpD,OAAO,mDAAmD,gBAAgB;GACzE,SAAS;GACT,SAAS;GACT;GACA,YAAY;GACZ,GAAG;GACH;EACD,CAAC;CACF;CACA,IAAI,CAAC,oBAAoB,UAAU,oBAClC,MAAM,IAAI,MAAM,mCAAmC;CAEpD,OAAO,mDAAmD,gBAAgB;EACzE,SAAS;EACT,SAAS;EACT;EACA,YAAY;EACZ,GAAG;CACJ,CAAC;AACF;AAEA,IAAM,+CAA+B,IAAI,IAAI;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AAED,SAAS,yBAAyB,OAAgB,WAAW,kBAA0B;CACtF,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CAC/E,OAAO,6BAA6B,IAAI,IAAI,IAAI,OAAO;AACxD;AAEA,SAAS,yBAAyB,MAA2B,UAA0B;CACtF,OAAO,4BAA4B,KAAK,GAAG;AAC5C;AAEA,SAAgB,oCAAoC,SAGlB;CACjC,IAAI,CAAC,uBAAuB,wBAAwB,QAAQ,eAAe,CAAC,GAC3E,OAAO;CAER,OAAO,oBAAoB,QAAQ,eAAe,gBAAgB,IAAI,cAAc;AACrF;AAEA,eAAsB,6BACrB,OACA,UACA,cACyC;CACzC,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,IAAI,aAAa,eAAe,OAAO;CACvC,MAAM,MAAM,MAAM,GAChB,QACA,gGACD,CAAC,CACA,IAAI,QAAQ;CAOd,MAAM,sBACL,OAAO,KAAK,sBAAsB,EAAE,CAAC,CAAC,KAAK,MAC1C,KAAK,aAAa,qBAAqB,IAAI,UAAU,IAAI;CAC3D,MAAM,YAAY,aAAa,KAAK,kBAAkB,IAAI;CAC1D,KAAK,MAAM,WAAW,WACrB,IAAI;EACH,MAAM,MAAM,GAAG,aAAa,OAAO,EAAE;EACrC,MAAM,UAAU;GACf,GAAG,2BAA2B;IAC7B,UAAU;IACV,aAAa;IACb,QAAQ,MAAM;IACd,QAAQ;IACR;IACA,WAAW,OAAO,MAAM,CAAC;IACzB,SAAS,YAAY;GACtB,CAAC;IACA,yBAAyB;IACzB,uBAAuB,oBAAoB,KAAK,GAAG;EACrD;EACA,MAAM,CAAC,QAAQ,WAAW,MAAM,YAAY,OAAO,KAAK;GAAE;GAAS,UAAU;EAAE,CAAC;EAChF,IAAI,SAAS,OAAO,UAAU,KAAK;EACnC,IAAI,OAAO,SAAS,aAAa,EAAE,CAAC,CAAC,KAAK,MAAM,UAAU;EAC1D,IACC,uBACA,OAAO,SAAS,eAAe,EAAE,CAAC,CAAC,KAAK,MAAM,qBAE9C;EAED,IACC,aAAa,UACb,aAAa,iBACb,oCAAoC,WAAW,CAAC,CAAC,MAAM,aAEvD,OAAO;EAER,IACC,aAAa,UACb,CAAC,uBAAuB,wBAAwB,SAAS,eAAe,CAAC,GAEzE,OAAO;EAER,IACC,aAAa,iBACb,CAAC,oBAAoB,SAAS,eAAe,gBAAgB,GAE7D,OAAO;EAER,OAAO;CACR,QAAQ,CAER;CAED,OAAO;AACR;AAEA,eAAe,0BACd,OACA,UACmC;CACnC,OAAO,6BAA6B,OAAO,UAAU;EACpD,QAAQ;EACR,eAAe;CAChB,CAAC;AACF;AAEA,SAAS,8BACR,OACA,cACA,oBACuB;CACvB,IAAI,aAAa,WAAW,GAAG,MAAM,IAAI,MAAM,yBAAyB;CACxE,MAAM,YAAY,IAAI,IAAI,YAAY;CACtC,MAAM,6BAAa,IAAI,IAGrB;CACF,IAAI,SAAS;CACb,OAAO,WAAW,OAAO,UAAU,MAAM;EACxC,MAAM,OAAO,0BAA0B,MAAM,IAAI;GAAE,OAAO;GAAK;EAAO,CAAC;EACvE,KAAK,MAAM,WAAW,KAAK,UAC1B,IAAI,UAAU,IAAI,QAAQ,kBAAkB,GAC3C,WAAW,IAAI,QAAQ,oBAAoB,OAAO;EAGpD,IAAI,CAAC,KAAK,UAAU;EACpB,UAAU,KAAK;CAChB;CACA,OAAO,aAAa,KAAK,cAAc;EACtC,MAAM,UAAU,WAAW,IAAI,SAAS;EACxC,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,2BAA2B;EAIzD,IAHkB,QAAQ,mBAAmB,MAC3C,YAAY,QAAQ,SAAS,+BAA+B,QAAQ,qBAElE,GAAW,MAAM,IAAI,MAAM,6BAA6B;EAC5D,IACC,QAAQ,aACR,QAAQ,oBAAoB,cAC5B,QAAQ,gBAAgB,QACxB,QAAQ,mBAAmB,MAAM,YAAY,QAAQ,qBAAqB,GAE1E,MAAM,IAAI,MAAM,+BAA+B;EAEhD,OAAO;GACN,mBAAmB,QAAQ;GAC3B,aAAa,QAAQ;GACrB,gBAAgB,QAAQ;GACxB,qBAAqB,8BAA8B,MAAM,IAAI;IAC5D,mBAAmB,QAAQ;IAC3B;GACD,CAAC;EACF;CACD,CAAC;AACF;AAEA,SAAS,mBAAmB,OAAoB,cAAyC;CACxF,MAAM,UAAU,MAAM,GACpB,QACA;;;sBAID,CAAC,CACA,IAAI,YAAY;CAClB,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,0BAA0B;CAClE,MAAM,QAAQ,QAAQ;CACtB,IAAI,OACH,OAAO,MAAM,WAAW,YACrB;EAAE,MAAM;EAAW,UAAU,MAAM;EAAU,aAAa,MAAM;CAAa,IAC7E;EAAE,MAAM;EAAY,UAAU,MAAM;EAAU,aAAa,MAAM;CAAa;CAElF,OAAO;EAAE,MAAM;EAAW,aAAa;CAAa;AACrD;AAEA,SAAS,kBACR,OACA,MACA,WACA,iBACqF;CACrF,MAAM,eAAe,sBAAsB,OAAO,KAAK,aAAa,CAAC;CACrE,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,MAAM,2BAA2B,aAAa;CAC9C,MAAM,WAAW,8BAChB,OACA,wBAAwB,MAAM,aAAa,GAC3C,aACD;CACA,MAAM,EAAE,SAAS,WAAW,oBAAoB;CAChD,OAAO;EACN,MAAM,mBAAmB;GACxB,gBAAgB,MAAM;GACtB,kBAAkB,CAAC,aAAa;GAChC,QAAQ,mBAAmB,OAAO,YAAY;GAC9C;GACA,oBAAoB;GACpB;GACA;EACD,CAAC;EACD;CACD;AACD;AAEA,SAAS,qBAAqB,MAA0B;CACvD,OAAO;EACN,cAAc,KAAK;EACnB,UAAU;GACT,cAAc,KAAK;GACnB,OAAO,KAAK;GACZ,GAAI,KAAK,eAAe,aAAa,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC;EACtE;EACA,UAAU,KAAK,SAAS,KAAK,aAAa;GACzC,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,uBAAuB,QAAQ;EAChC,EAAE;EACF,uBAAuB,KAAK,SAAS,QACnC,OAAO,YAAY,QAAQ,QAAQ,qBACpC,CACD;EACA,wBAAwB;EACxB,gBAAgB,KAAK;EACrB,6BAA6B,KAAK;CACnC;AACD;AAQA,eAAe,gCAAgC,aAI5C;CACF,MAAM,EAAE,SAAS,WAAW,oBAAoB;CAChD,MAAM,CAAC,QAAQ,WAAW,MAAM,YAC/B,OACA,GAAG,aAAa,OAAO,kBAAkB,EAAE,4BAA4B,mBAAmB,WAAW,EAAE,YAAY,mBAAmB,OAAO,KAC7I;EACC,SAAS,EAAE,+BAA+B,OAAO,2BAA2B;EAC5E,UAAU;CACX,CACD,CAAC,CAAC,OAAO,UAAmB;EAC3B,MAAM,QAAQ,IAAI,MAAM,2BAA2B,EAAE,MAAM,CAAC;EAC5D,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP,CAAC;CACD,IAAI,SAAS,OAAO,UAAU,KAAK;EAClC,MAAM,QAAQ,IAAI,MAAM,OAAO,SAAS,SAAS,uBAAuB,CAAC;EACzE,OAAO,OAAO,OAAO,EAAE,OAAO,CAAC;EAC/B,MAAM;CACP;CACA,IAAI,CAAC,WAAW,QAAQ,iBAAiB,eAAe,QAAQ,aAAa,SAAS;EACrF,MAAM,wBAAQ,IAAI,MAAM,0BAA0B;EAClD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CACA,OAAO;EAAE;EAAS;EAAiB;CAA2C;AAC/E;AAEA,eAAe,iCACd,OACA,aAC2E;CAC3E,MAAM,QAAQ,MAAM,GAClB,QAAQ,sEAAsE,CAAC,CAC/E,MAAM,CAAC,CACP,IAAI,WAAW;CACjB,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,qBAAqB;CACjD,IAAI,UAAU,MAAM,SAAS,MAAM,IAAI,MAAM,0BAA0B;CACvE,uBAAuB,KAAK;CAC5B,MAAM,EAAE,SAAS,YAAY,MAAM,gCAAgC,WAAW;CAC9E,IAAI,QAAQ,UAAU,0BAA0B,OAAO;EAAE,UAAU;EAAO;CAAQ;CAClF,IAAI,QAAQ,UAAU,YAAY;EACjC,MAAM,wBAAQ,IAAI,MAAM,yBAAyB;EACjD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CAYA,IAAI;EAVH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CAEG,CAAA,CAAS,MAAM,QAAQ,OAAO,QAAQ,SAAS,YAAY,CAAC,OAAO,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG;EAC7F,MAAM,wBAAQ,IAAI,MAAM,8BAA8B;EACtD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CACA,MAAM,aAAa,OAAO,QAAQ,WAAW;CAC7C,MAAM,mBACL,OAAO,QAAQ,uBAAuB,YAAY,QAAQ,mBAAmB,KAAK,IAC/E,QAAQ,qBACR;CACJ,IACE,eAAe,4BAA4B,eAAe,6BAC1D,eAAe,8BAA+B,QAAQ,gBAAgB,GACtE;EACD,MAAM,wBAAQ,IAAI,MAAM,+BAA+B;EACvD,OAAO,OAAO,OAAO,EAAE,QAAQ,IAAI,CAAC;EACpC,MAAM;CACP;CACA,MAAM,WAAW,2BAA2B,QAAQ,QAAQ;CAC5D,kCAAkC,MAAM,IAAI;EAC3C;EACA,qBAAqB,MAAM;EAC3B,oBAAoB;EACpB,0BAA0B,OAAO,QAAQ,2BAA2B;EACpE,kBAAkB,OAAO,QAAQ,kBAAkB;EACnD,sBAAsB,OAAO,QAAQ,sBAAsB;EAC3D,mBAAmB,OAAO,QAAQ,mBAAmB;EACrD,4BAA4B,OAAO,QAAQ,6BAA6B;EACxE,oBAAoB,OAAO,QAAQ,oBAAoB;EACvD,sBAAsB,OAAO,QAAQ,qBAAqB;EAC1D,YAAY,OAAO,QAAQ,WAAW;EACtC;EACA;EACA;CACD,CAAC;CACD,OAAO;EAAE,UAAU;EAAM;CAAQ;AAClC;AAqBA,eAAe,yBACd,OACA,aACA,qBAAqB,MACpB;CACD,MAAM,OAAO,MAAM,GACjB,QAAQ;;;;;;;;;;8CAUmC,CAAC,CAC5C,IAAI,MAAM,SAAS,eAAe,MAAM,eAAe,IAAI;CAC7D,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CACnC,OAAO,QAAQ,IACd,KAAK,IAAI,OAAO,QAAQ;EACvB,MAAM,WAAW,MAAM,GACrB,QAAQ;2EAC8D,CAAC,CACvE,IAAI,IAAI,YAAY;EAKtB,MAAM,QACL,MAAM,GACJ,QAAQ;oFACsE,CAAC,CAC/E,IAAI,IAAI,YAAY,CAAC,CAStB,KACA,UAA4C;GAC5C,cAAc,KAAK;GACnB,eAAe,KAAK;GACpB,eAAe,KAAK;GACpB,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,WAAW,KAAK;EACjB,EACD;EACA,IAAI,aAA4B;EAChC,IAAI,iBAAiB,IAAI;EACzB,IAAI,sBAAsB,IAAI,UAAU,0BACvC,IAAI;GACH,MAAM,SAAS,MAAM,gCAAgC,IAAI,YAAY;GACrE,IAAI,OAAO,QAAQ,UAAU,YAAY,iBAAiB;GAC1D,aACC,OAAO,OAAO,QAAQ,gBAAgB,YAAY,OAAO,QAAQ,YAAY,KAAK,IAC/E,OAAO,QAAQ,cACf;EACL,QAAQ,CAER;EAED,MAAM,WAAW,IAAI,sBAAsB,IAAI;EAC/C,MAAM,aAAa,IAAI,0BAA0B,IAAI,sBAAsB,IAAI;EAC/E,MAAM,aAAa,IAAI,iCAAiC,IAAI;EAC5D,MAAM,YAAY,sBAAsB;GACvC,kBAAkB,IAAI;GACtB,qBAAqB,IAAI;GACzB;GACA;GACA;GACA;GACA,OAAO;GACP;EACD,CAAC;EACD,OAAO;GACN,cAAc,IAAI;GAClB,QAAQ;IAAE,UAAU;IAAU,cAAc;GAAW;GACvD,SACC,IAAI,uBAAuB,aACxB,CACA;IACC,WAAW,IAAI;IACf,cAAc;IACd,cAAc,IAAI;GACnB,CACD,IACC,CAAC;GACL;GACA,eAAe,SAAS;GACxB,WAAW;IACV,OAAO,UAAU;IACjB,OAAO,UAAU;IACjB,aAAa,UAAU;IACvB,gBACC,UAAU,eAAe,SAAS,gBAC/B;KACA,MAAM;KACN,OAAO,UAAU,cAAc;KAC/B,aAAa,UAAU,cAAc;IACtC,IACC,CAAC,sBAAsB,UAAU,cAAc,2BAC9C;KAAE,MAAM;KAAe,OAAO;IAAc,IAC5C,UAAU;GAChB;GACA,YAAY;IACX,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB,aAAa,IAAI;IACjB,mBAAmB,IAAI;GACxB;EACD;CACD,CAAC,CACF;AACD;AAEA,eAAe,gCAAgC,OAAoB,aAAqB;CACvF,MAAM,EAAE,SAAS,WAAW,oBAAoB;CAChD,MAAM,gBAAgB,OAAO,sBAAsB;CACnD,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,4BAA4B;CAChE,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,OAAO,yBACN,MAAM,IACN;EAAE;EAAa,oBAAoB;CAAc,GACjD;EACC,qBAAqB,OAAO,SAAS,oBAAoB;GACxD,IAAI,oBAAoB,SAAS,MAAM,IAAI,MAAM,0BAA0B;GAC3E,MAAM,eAAe,aAEnB,MAAM,4BAA4B;IACjC;IACA,iBAAiB;IACjB,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,EAAA,CACA,MAAM,UAAU,MAAM,aAAa,QAAQ,UAAU,KAAK;GAC7D,MAAM,WAAW,MAAM,aAAa;GACpC,IAAI,UAAU,OAAO;GACrB,IAAI;IACH,OAAO,MAAM,6BAA6B;KACzC;KACA,SAAS,QAAQ;KACjB,OAAO,QAAQ;KACf,MAAM;KACN,eAAe;KACf;KACA,iBAAiB;KACjB,QAAQ;KACR,WAAW,OAAO,sBAAsB;KACxC,aAAa,OAAO,8BAA8B;IACnD,CAAC;GACF,SAAS,OAAO;IACf,MAAM,SAAS,MAAM,aAAa;IAClC,IAAI,QAAQ,OAAO;IACnB,MAAM;GACP;EACD;EACA,kBAAkB,EAAE,UAAU,SAAS,iBAAiB,SAAS,UAAU,WAAW;GACrF,IAAI,oBAAoB,SAAS,MAAM,IAAI,MAAM,0BAA0B;GAC3E,OAAO,sCAAsC;IAC5C;IACA;IACA;IACA;IACA;IACA,iBAAiB;IACjB;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;EACF;EACA,wBAAwB,aAAa,0BAA0B,OAAO,QAAQ;EAC9E,sBAAsB,OAAO,oBAAoB;GAChD,IAAI,oBAAoB,SAAS,MAAM,IAAI,MAAM,0BAA0B;GAM3E,KADc,MAJU,sCAAsC,MAAM,IAAI,QAAQ;IAC/E,SAAS,YAAY;IACrB,QAAQ,MAAM;GACf,CAAC,EAAA,CACuB,OAAO,MAAM,SAAS,KAAK,YAAY,OAC3D,CAAA,EAAO,WAAW,aAAa,MAAM,IAAI,MAAM,8BAA8B;EAClF;EACA,iBAAiB,sBAChB,YAAY,MAAM,IAAI,mBAAmB;GACxC,SAAS,YAAY;GACrB,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,sBAAsB;EACvB,CAAC;CACH,CACD;AACD;AAOA,eAAsB,6BACrB,OACA,aAC8C;CAC9C,MAAM,YAAY,MAAM,GACtB,QACA,kGACD,CAAC,CACA,IAAI,WAAW;CAGjB,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,qBAAqB;CACrD,IAAI,UAAU,qBAAqB,MAAM,SAAS,MAAM,IAAI,MAAM,0BAA0B;CAC5F,IAAI,UAAU,UAAU,aAIvB,OAAO;EAAE,UAAU;EAAO,OAAO;CAAY;CAE9C,IAAI,CAAC,UAAU,qBAEV;MAAA,EAAC,MADwB,iCAAiC,OAAO,WAAW,EAAA,CAC5D,UACnB,OAAO;GAAE,UAAU;GAAO,OAAO;EAAyB;CAAA;CAI5D,KAAI,MADe,gCAAgC,OAAO,WAAW,EAAA,CAC5D,YAGR,OAAO;EAAE,UAAU;EAAO,OAAO;CAAY;CAE9C,OAAO;EAAE,UAAU;EAAM,OAAO;CAAS;AAC1C;AAsBA,IAAM,mCAAmC;CACxC;CACA;CACA;CACA;CACA;AACD;AAEA,IAAM,iDAAiD;AACvD,IAAM,6CAA6C;AACnD,IAAM,oDAAoC,IAAI,IAAI;CACjD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,uDAAuC,IAAI,IAAI;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,IAAM,iDAAiC,IAAI,IAAI;CAC9C;CACA;CACA;CACA;CACA,GAAG;AACJ,CAAC;AAED,SAAS,YAAY,OAA+B;CACnD,MAAM,QAAQ,SAAS,OAAO,UAAU,WAAY,MAA+B,SAAS;CAC5F,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,OAAO,SAAS,MACrF,QACA;AACJ;AAEA,SAAS,gCACR,OACA,UAIC;CACD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;CACzD,MAAM,SAAS,YAAY,KAAK;CAChC,IAAI,YAAY,0BAA0B,UAAU,QAAQ,WAAW,MACtE,OAAO;EAAE,MAAM;EAAS,QAAQ;CAAI;CAErC,IAAI,qCAAqC,IAAI,OAAO,MAAM,UAAU,QAAQ,WAAW,MACtF,OAAO;EAAE,MAAM;EAAS,QAAQ;CAAI;CAErC,IAAI,UAAU,QAAQ,UAAU,OAAO,YAAY,2BAClD,OAAO;EAAE,MAAM;EAA+B,QAAQ;CAAI;CAE3D,IAAI,YAAY,6BAA6B,WAAW,OAAO,WAAW,OAAO,WAAW,KAC3F,OAAO;EAAE,MAAM;EAA2B,QAAQ;CAAI;CAEvD,OAAO;AACR;AAEA,SAAS,+BAA+B,OAAyB;CAChE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,IAAI,+BAA+B,IAAI,OAAO,GAAG,OAAO;CACxD,MAAM,SAAS,YAAY,KAAK;CAChC,OAAO,UAAU,QAAQ,WAAW,OAAO,WAAW,OAAO,UAAU;AACxE;AAEA,SAAS,4BAA4B,OAAwB;CAC5D,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,+BAA+B,IAAI,OAAO,IAAI,UAAU;AAChE;AAEA,SAAS,kCACR,OACA,aACA,OACA,KACwC;CACxC,MAAM,gBAAgB,4BAA4B,KAAK;CACvD,MAAM,YAAY,+BAA+B,KAAK;CACtD,MAAM,GACJ,QAAQ;;;8DAGmD,CAAC,CAC5D,IAAI,YAAY,IAAI,GAAG,KAAK,eAAe,KAAK,WAAW;CAC7D,MAAM,UAAU,YAAY,oBAAoB;CAChD,MAAM,GACJ,QAAQ,8EAA8E,CAAC,CACvF,IACA,YAAY,oBAAoB,oBAAoB,0BACpD,KACA,WACD;CACD,OAAO;AACR;AAEA,eAAsB,4BACrB,OACA,UAOI,CAAC,GACwC;CAC7C,MAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,CAAC;CACtE,MAAM,eAAe,iCAAiC,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI;CAC9E,MAAM,iBAAiB,QAAQ,uBAAO,IAAI,KAAK;CAC/C,MAAM,gDAA+B,IAAI,KACxC,eAAe,QAAQ,IAAI,8CAC5B,EAAA,CAAE,YAAY;CACd,MAAM,sCAAqB,IAAI,KAC9B,eAAe,QAAQ,IAAI,0CAC5B,EAAA,CAAE,YAAY;CAEd,MAAM,OAAO,MAAM,GACjB,QAAQ;;6BAEkB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoC/B,CAAC,CACT,IACA,MAAM,SACN,GAAG,kCACH,8BACA,oBACA,KACD;CAGD,MAAM,mBAAmB,QAAQ,oBAAoB;CACrD,MAAM,SAA4C;EACjD,WAAW;EACX,UAAU;EACV,SAAS;EACT,WAAW;EACX,QAAQ;EACR,OAAO,CAAC;CACT;CACA,KAAK,MAAM,OAAO,MAAM;EACvB,OAAO,aAAa;EACpB,IAAI;GACH,MAAM,WAAW,MAAM,iBAAiB,OAAO,IAAI,YAAY;GAC/D,IAAI,CAAC,SAAS,UAAU;IACvB,IAAI,SAAS,UAAU,aAAa;KAEnC,OAAO,MAAM,KAAK;MAAE,aAAa,IAAI;MAAc,SAAS;KAAa,CAAC;KAC1E;IACD;IACA,MAAM,GACJ,QAAQ,mEAAmE,CAAC,CAC5E,IAAI,eAAe,YAAY,GAAG,IAAI,YAAY;IACpD,OAAO,WAAW;IAClB,OAAO,MAAM,KAAK;KACjB,aAAa,IAAI;KACjB,SAAS;IACV,CAAC;IACD;GACD;GACA,OAAO,YAAY;GACnB,OAAO,MAAM,KAAK;IAAE,aAAa,IAAI;IAAc,SAAS;GAAW,CAAC;EACzE,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,QAAQ,MAAM,GAClB,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,IAAI,YAAY;GACtB,IAAI,UAAU,aAAa;IAI1B,OAAO,MAAM,KAAK;KAAE,aAAa,IAAI;KAAc,SAAS;IAAa,CAAC;IAC1E;GACD;GACA,IAAI,YAAY,wBAAwB,UAAU,sBAAsB;IACvE,OAAO,WAAW;IAClB,OAAO,MAAM,KAAK;KAAE,aAAa,IAAI;KAAc,SAAS;IAAqB,CAAC;IAClF;GACD;GACA,IAAI,UAAU,mBAAmB;IAChC,OAAO,aAAa;IACpB,OAAO,MAAM,KAAK;KACjB,aAAa,IAAI;KACjB,SAAS;KACT,OAAO;IACR,CAAC;IACD;GACD;GACA,IAAI,UAAU,0BAA0B;IACvC,MAAM,UAAU,kCACf,OACA,IAAI,cACJ,OACA,eAAe,YAAY,CAC5B;IACA,IAAI,YAAY,mBAAmB,OAAO,aAAa;SAClD,OAAO,WAAW;IACvB,OAAO,MAAM,KAAK;KAAE,aAAa,IAAI;KAAc;KAAS,OAAO;IAAQ,CAAC;IAC5E;GACD;GACA,IAAI,kCAAkC,IAAI,OAAO,GAAG;IACnD,MAAM,GACJ,QACA,8FACD,CAAC,CACA,IAAI,eAAe,YAAY,GAAG,IAAI,YAAY;IACpD,OAAO,aAAa;IACpB,OAAO,MAAM,KAAK;KACjB,aAAa,IAAI;KACjB,SAAS;KACT,OAAO;IACR,CAAC;IACD;GACD;GACA,OAAO,UAAU;GACjB,OAAO,MAAM,KAAK;IACjB,aAAa,IAAI;IACjB,SAAS;IACT,OAAO;GACR,CAAC;EACF;CACD;CACA,OAAO;AACR;AAyBA,SAAS,iCAAiC,OAAwB;CACjE,MAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAA,CAAG,KAAK;CAC9E,MAAM,aAAa,QAAQ,MAAM,oBAAoB,CAAC,GAAG;CACzD,IAAI,YAAY,OAAO,QAAQ;CAC/B,qBACC,IAAI,IAAI;EACP;EACA;EACA;EACA;EACA;EACA;EACA;CACD,CAAC,EAAA,CAAE,IAAI,OAAO,GAEd,OAAO;CAER,IAAI,4BAA4B,KAAK,OAAO,GAAG,OAAO;CACtD,IAAI,yCAAyC,KAAK,OAAO,GAAG,OAAO;CACnE,OAAO;AACR;AAEA,SAAS,6BACR,SACA,OACA,OAC0C;CAI1C,OAAO;EAAE,SAHW,0BAA0B,KAAK,OAAO,IACvD,UACA,SAAS,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;EAC3C;EAAO,MAAM,iCAAiC,KAAK;CAAE;AACrF;AAEA,eAAsB,yCACrB,OACA,UAeI,CAAC,GACqD;CAC1D,MAAM,SAAS,QAAQ,UAAU,0BAA0B;CAC3D,MAAM,YAAY,OAAO,mBAAmB,KAAK;CACjD,MAAM,cAAc,OAAO,2BAA2B,KAAK;CAC3D,IAAI,CAAC,aAAa,CAAC,eAAe,OAAO,sBAAsB,WAAW,GACzE,OAAO;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACd,UAAU,CAAC;EACX,cAAc;EACd,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,QAAQ;CACT;CAED,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,0BACL,QAAQ,2BAA2B;CACpC,MAAM,oBACL,QAAQ,uBACN,UAAU,uCAAuC,MAAM,IAAI,KAAK;CACnE,MAAM,QAAwD;EAC7D,SAAS;EACT,iBAAiB;EACjB,cAAc;EACd,UAAU,CAAC;EACX,cAAc;EACd,kBAAkB;EAClB,iBAAiB;EACjB,WAAW;EACX,QAAQ;CACT;CACA,KAAK,MAAM,WAAW,OAAO,uBAAuB;EACnD,MAAM,CAAC,mBAAmB,6BAA6B,MAAM,QAAQ,WAAW,CAC/E,YAAY;GAAE;GAAS;GAAW;EAAY,CAAC,GAC/C,wBAAwB;GAAE;GAAS;GAAW;EAAY,CAAC,CAC5D,CAAC;EACD,IAAI,kBAAkB,WAAW,YAChC,MAAM,SAAS,KACd,6BAA6B,SAAS,gBAAgB,kBAAkB,MAAM,CAC/E;EAED,IAAI,0BAA0B,WAAW,YACxC,MAAM,SAAS,KACd,6BACC,SACA,8BACA,0BAA0B,MAC3B,CACD;EAED,IACC,kBAAkB,WAAW,cAC7B,0BAA0B,WAAW,YACpC;GACD,MAAM,gBAAgB;GACtB;EACD;EACA,IAAI;GACH,MAAM,SAAS,MAAM,kBAAkB;IACtC,eAAe,aAAa,SAAS;IACrC;IACA,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,eAAe,MAAM;GACtB,CAAC;GACD,MAAM,mBAAmB;GACzB,MAAM,gBAAgB,OAAO;GAC7B,MAAM,oBAAoB,OAAO;GACjC,MAAM,mBAAmB,OAAO;GAChC,MAAM,aAAa,OAAO;GAC1B,MAAM,UAAU,OAAO,OAAO;EAC/B,SAAS,OAAO;GACf,MAAM,gBAAgB;GACtB,MAAM,SAAS,KAAK,6BAA6B,SAAS,sBAAsB,KAAK,CAAC;EACvF;CACD;CACA,OAAO;AACR;AAEA,IAAM,yCAAyC;AAC/C,IAAM,6CAA6C;AACnD,IAAM,0CAA0C;AAChD,IAAM,kDAAkC,IAAI,IAAI;CAC/C;CACA;CACA;AACD,CAAC;AAQD,SAAS,mCACR,OACA,SACqC;CACrC,MAAM,MAAM,MAAM,GAChB,QACA;;0BAGD,CAAC,CACA,IAAI,OAAO;CAOb,MAAM,gBAAgB,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;CAC7D,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;CACjD,MAAM,kBAAkB,OAAO,KAAK,gBAAgB;CACpD,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,cAAc,eAAe,KAAK,kBAAkB,GAC7F,MAAM,IAAI,MAAM,gDAAgD;CAEjE,OAAO;EAAE;EAAe;EAAS;CAAgB;AAClD;AAEA,SAAS,mCACR,SACA,sBACA,aAKS;CACT,MAAM,YAAY,YAChB,UACC,MAAM,UACN,KAAK,SAAS,cAAc,MAAM,QAAQ,KAC1C,KAAK,OAAO,cAAc,MAAM,MAAM,KACtC,KAAK,kBAAkB,MAAM,eAC/B,CAAC,CACA,KACC,eACA,GAAG,WAAW,SAAS,QAAQ,WAAW,OAAO,QAAQ,WAAW,iBACtE,CAAC,CACA,KAAK,GAAQ;CACf,OAAO,4CAA4C,WAAW,QAAQ,CAAC,CACrE,OAAO,GAAG,QAAQ,QAAQ,qBAAqB,QAAQ,WAAW,CAAC,CACnE,OAAO,KAAK;AACf;AAEA,SAAS,2CACR,YACA,YACgB;CAChB,MAAM,YAAY,WAAW;CAC7B,MAAM,eAAe,WAAW;CAChC,IAAI,OAAO,cAAc,YAAY,CAAC,cAAc,OAAO;CAC3D,MAAM,cAAc,KAAK,MAAM,SAAS;CACxC,MAAM,eAAe,KAAK,MAAM,UAAU;CAC1C,IACC,CAAC,OAAO,SAAS,WAAW,KAC5B,CAAC,OAAO,SAAS,YAAY,KAC7B,IAAI,KAAK,WAAW,CAAC,CAAC,YAAY,MAAM,aACxC,eAAe,gBACf,aAAa,oBAAoB,YACjC,CAAC,MAAM,QAAQ,aAAa,aAAa,KACzC,CAAC,aAAa,cAAc,OAAO,YAAY,OAAO,YAAY,QAAQ,KAC1E,CAAC,aAAa,cAAc,SAAS,gBAAgB,GAErD,OAAO;CAER,OAAO;AACR;AAEA,SAAS,sCAAsC,OAAiC;CAC/E,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK,UAAU,MAAM,KAAK;AAC9E;AAEA,SAAgB,uCACf,OACA,UAKI,CAAC,GAC8B;CACnC,MAAM,SAAS,QAAQ,UAAU,0BAA0B;CAC3D,MAAM,MAAM,QAAQ,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;CACzD,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,sCACL,QAAQ,uCACR;CACD,MAAM,kDAAkC,IAAI,IAG1C;CACF,MAAM,uCAAuC,YAAoB;EAChE,IAAI,WAAW,gCAAgC,IAAI,OAAO;EAC1D,IAAI,CAAC,UAAU;GACd,WAAW,oCAAoC;IAC9C;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,gCAAgC,IAAI,SAAS,QAAQ;EACtD;EACA,OAAO;CACR;CACA,MAAM,sCAAsB,IAAI,IAW9B;CACF,MAAM,UAAU,YAAoB,mCAAmC,OAAO,OAAO;CACrF,MAAM,sBAAsB,YAAoB;EAC/C,MAAM,WAAW,OAAO,OAAO;EAC/B,MAAM,YAAY,OAAO,oBAAoB,KAAK;EAClD,MAAM,cAAc,OAAO,4BAA4B,KAAK;EAC5D,IAAI,CAAC,aAAa,CAAC,aAAa,MAAM,IAAI,MAAM,gCAAgC;EAChF,IAAI,CAAC,OAAO,sBAAsB,SAAS,SAAS,OAAO,GAC1D,MAAM,IAAI,MAAM,gCAAgC;EAEjD,IAAI;GACH,IAAI,aAAa,SAAS,aAAa,MAAM,aAAa,SAAS,GAClE,MAAM,IAAI,MAAM,gCAAgC;EAElD,QAAQ;GACP,MAAM,IAAI,MAAM,gCAAgC;EACjD;EACA,OAAO;GACN,GAAG;GACH;GACA;EACD;CACD;CACA,OAAO;EACN;EACA,UAAU,OAAO,EAAE,cAAc;GAChC,MAAM,gBAAgB,mBAAmB,OAAO;GAUhD,MAAM,uBAAsB,MATF,sCAAsC;IAC/D,SAAS,cAAc;IACvB;IACA,gBAAgB;IAChB,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC,CAAC,CAAC,YAAY;IACd,MAAM,IAAI,MAAM,qCAAqC;GACtD,CAAC,EAAA,CACuC,KAAK,eAAe;IAC3D,IACC,OAAO,WAAW,cAAc,YAC/B,WAAW,WAAW,YAAY,WAAW,WAAW,WAEzD,MAAM,IAAI,MAAM,mCAAmC;IAEpD,MAAM,SAA+B,WAAW;IAChD,OAAO;KACN,UAAU,WAAW;KACrB;KACA,iBAAiB,WAAW;IAC7B;GACD,CAAC;GACD,OAAO;IACN,eAAe;IACf;IACA,sBAAsB,cAAc;IACpC,aAAa,mCACZ,SACA,cAAc,iBACd,mBACD;IACA,YAAY,IAAI;IAChB,aAAa;GACd;EACD;EACA,yBAAyB,OAAO,EAAE,cAAc;GAC/C,MAAM,gBAAgB,mBAAmB,OAAO;GAChD,MAAM,aAAa,IAAI;GACvB,MAAM,cAAc,MAAM,YAAY;IACrC,SAAS,cAAc;IACvB,iBAAiB;IACjB,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC,CAAC,CAAC,YAAY;IACd,MAAM,IAAI,MAAM,qCAAqC;GACtD,CAAC;GACD,MAAM,6BAA6B,IAAI,IACtC,YAAY,KAAK,eAAe,CAC/B,WAAW,WACX,2CAA2C,YAAY,UAAU,CAClE,CAAC,CACF;GACA,MAAM,SAAS,YAAY,KAAK,eAAe;IAC9C,IACC,WAAW,aAAa,cAAc,WACtC,CAAC,sCAAsC,WAAW,SAAS,KAC3D,CAAC,sCAAsC,WAAW,UAAU,KAC5D,CAAC,sCAAsC,WAAW,WAAW,KAC7D,qBAAqB,WAAW,UAAU,MAAM,WAAW,eAC1D,WAAW,YAAY,KAAK,WAAW,YAAY,KACnD,WAAW,gBAAgB,QAC3B,CAAC,sCAAsC,WAAW,WAAW,GAE9D,MAAM,IAAI,MAAM,mCAAmC;IAEpD,OAAO;KACN,UAAU,WAAW;KACrB,YAAY,WAAW;KACvB,WAAW,WAAW;KACtB,aAAa,WAAW;KACxB,SAAS,WAAW,YAAY;IACjC;GACD,CAAC;GACD,oBAAoB,IACnB,SACA,IAAI,IACH,OAAO,SAAS,eACf,WAAW,WAAW,WAAW,eAAe,OAC7C,CACA,CACC,WAAW,UACX;IACC,YAAY,WAAW;IACvB,WAAW,WAAW;IACtB,aAAa,WAAW;IACxB,+BACC,2BAA2B,IAAI,WAAW,QAAQ,KAAK;GACzD,CACD,CACD,IACC,CAAC,CACL,CACD,CACD;GACA,OAAO;EACR;EACA,iBAAiB,OAAO,EAAE,UAAU,cAAc;GACjD,IAAI,aAAa,MAAM,UAAU,OAAO;GAGxC,MAAM,gBAAgB,mBAAmB,OAAO;GAChD,MAAM,aAAa,oBAAoB,IAAI,OAAO,CAAC,EAAE,IAAI,QAAQ;GACjE,IAAI,CAAC,YAAY,OAAO;GACxB,MAAM,OAAO,MAAM,GACjB,QAAQ,gFAAgF,CAAC,CACzF,IAAI,QAAQ;GAGd,IAAI,MAAM;IACT,MAAM,gBAAgB,OAAO,KAAK,cAAc,EAAE,CAAC,CAAC,KAAK;IACzD,MAAM,kBACL,OAAO,KAAK,sBAAsB,EAAE,CAAC,CAAC,KAAK,MAC1C,gBAAgB,qBAAqB,aAAa,IAAI;IACxD,KACE,mBAAmB,mBACnB,oBAAoB,WAAW,eAC9B,iBAAiB,kBAAkB,WAAW,YAEhD,OAAO;GAET;GACA,MAAM,WAAW,MAAM,6BAA6B,OAAO,UAAU;IACpE,QAAQ;IACR,eAAe;GAChB,CAAC;GACD,IAAI,aAAa,gBAAgB,OAAO;GACxC,MAAM,eAAe,KAAK,MAAM,IAAI,CAAC;GACrC,IACC,WAAW,iCAAiC,QAC5C,CAAC,OAAO,SAAS,YAAY,KAC7B,WAAW,iCAAiC,cAE5C,OAAO;GAQR,QAAO,MAHgB,oCAAoC,cAAc,OAAO,CAAC,CAAC,YAC3E,CAAC,CACR,EAAA,CACgB,MACd,WACA,OAAO,aAAa,cAAc,WAClC,OAAO,oBAAoB,YAC3B,OAAO,uBAAuB,WAAW,cACzC,OAAO,qBAAqB,WAAW,aACvC,OAAO,sBAAsB,WAAW,WAC1C,IACG,cACA;EACJ;EACA,QAAQ,OAAO,UAA4D;GAC1E,MAAM,gBAAgB,mBAAmB,MAAM,OAAO;GACtD,MAAM,uCAAuC;IAC5C,UAAU,MAAM;IAChB,SAAS,cAAc;IACvB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC;GACD,OAAO;IACN,UAAU,MAAM;IAChB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,QAAQ;GACT;EACD;EACA,OAAO,OAAO,UAA4D;GACzE,MAAM,gBAAgB,mBAAmB,MAAM,OAAO;GACtD,MAAM,aAAa,MAAM,sCAAsC;IAC9D,UAAU,MAAM;IAChB,SAAS,cAAc;IACvB,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,MAAM,MAAM;IACZ,eAAe,cAAc;IAC7B,WAAW,cAAc;IACzB,aAAa,cAAc;GAC5B,CAAC;GACD,OAAO;IACN,UAAU,MAAM;IAChB,SAAS,WAAW;IACpB,UAAU,WAAW;IACrB,QAAQ,WAAW,WAAW,WAAW,WAAW;GACrD;EACD;EACA,SAAS,OAAO,EAAE,cAAc;GAC/B,MAAM,WAAW,OAAO,OAAO;GAM/B,KADc,MAJU,sCAAsC,MAAM,IAAI,QAAQ;IAC/E,SAAS,YAAY;IACrB,QAAQ,MAAM;GACf,CAAC,EAAA,CACuB,OAAO,MAAM,SAAS,KAAK,YAAY,SAAS,OACpE,CAAA,EAAO,WAAW,aAAa,MAAM,IAAI,MAAM,gCAAgC;GACnF,MAAM,sCAAsC,OAAO,MAAM;EAC1D;CACD;AACD;AAeA,eAAsB,iCACrB,OACA,UAOI,CAAC,GAC6C;CAClD,MAAM,QAAQ,KAAK,IAClB,GACA,KAAK,IACJ,KAAK,MAAM,QAAQ,SAAS,0CAA0C,GACtE,sCACD,CACD;CACA,MAAM,iBAAiB,QAAQ,uBAAO,IAAI,KAAK;CAC/C,MAAM,YAAY,KAAK,IACtB,GACA,KAAK,MAAM,QAAQ,aAAa,uCAAuC,CACxE;CACA,MAAM,cAAc,IAAI,KAAK,eAAe,QAAQ,IAAI,SAAS,CAAC,CAAC,YAAY;CAC/E,MAAM,OAAO,MAAM,GACjB,QACA;;;;;;;;;;;;;YAcD,CAAC,CACA,IAAI,aAAa,KAAK;CACxB,MAAM,UAAU,QAAQ,WAAW,uCAAuC,KAAK;CAC/E,MAAM,mBAAmB,QAAQ,oBAAoB;CACrD,MAAM,SAAiD;EACtD,WAAW;EACX,QAAQ;EACR,SAAS;EACT,WAAW;EACX,QAAQ;EACR,OAAO,CAAC;CACT;CACA,KAAK,MAAM,OAAO,MAAM;EACvB,OAAO,aAAa;EACpB,IAAI;GACH,MAAM,UAAU,MAAM,iBACrB,MAAM,IACN;IACC,0BAA0B,IAAI;IAC9B,YACC,QAAQ,cAAc,gCAAgC,MAAM,YAAY,QAAQ;GAClF,GACA,OACD;GACA,IAAI,QAAQ,WAAW,UAAU,OAAO,UAAU;QAC7C,IAAI,QAAQ,WAAW,mBAAmB,OAAO,aAAa;QAC9D,OAAO,WAAW;GACvB,OAAO,MAAM,KAAK;IACjB,0BAA0B,IAAI;IAC9B,QAAQ,QAAQ;IAChB,eAAe,QAAQ;GACxB,CAAC;EACF,QAAQ;GACP,OAAO,UAAU;GACjB,OAAO,MAAM,KAAK;IACjB,0BAA0B,IAAI;IAC9B,QAAQ;IACR,eAAe;GAChB,CAAC;EACF;CACD;CACA,OAAO;AACR;AAqBA,SAAS,yBACR,WACyC;CACzC,IAAI,CAAC,WAAW,OAAO;CACvB,IAAI,UAAU,iBAAiB,gCAAgC,IAAI,UAAU,aAAa,GACzF,OAAO;CAER,IAAI,UAAU,iBAAiB,UAAU,mBAAmB,eAC3D,OAAO;CAER,IAAI,UAAU,mBAAmB,UAAU,OAAO;CAClD,IAAI,UAAU,mBAAmB,YAAY,OAAO;CACpD,OAAO;AACR;AAEA,SAAS,wBAAwB,OAG/B;CACD,IAAI,UAAU,UACb,OAAO;EACN,OAAO;EACP,aAAa;CACd;CAED,IAAI,UAAU,aACb,OAAO;EACN,OAAO;EACP,aAAa;CACd;CAED,IAAI,UAAU,WACb,OAAO;EACN,OAAO;EACP,aACC;CACF;CAED,IAAI,UAAU,mBACb,OAAO;EACN,OAAO;EACP,aACC;CACF;CAED,OAAO;EACN,OAAO;EACP,aAAa;CACd;AACD;AAEA,SAAgB,wCACf,OACyC;CAUzC,OAAO;EACN,SAAS;EACT,OAVA,MAAM,GACJ,QACA;;yCAGD,CAAC,CACA,IAAI,CAAC,CACN,KAAK,QAAQ,IAAI,0BAGX,CAAA,CAAW,KAAK,6BAA6B;GACnD,MAAM,QAAQ,yBACb,iCAAiC,MAAM,IAAI,wBAAwB,CACpE;GACA,OAAO;IACN;IACA;IACA,GAAG,wBAAwB,KAAK;IAChC,0BAA0B;IAC1B,mBAAmB;GACpB;EACD,CAAC;CACF;AACD;AAEA,SAAS,0BAEP,MAAgB;CACjB,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM;EAC/B,MAAM,QAAQ,EAAE,cAAc,EAAE;EAChC,MAAM,QAAQ,EAAE,cAAc,EAAE;EAChC,IAAI,UAAU,OAAO,OAAO,MAAM,cAAc,KAAK;EACrD,OAAO,EAAE,KAAK,cAAc,EAAE,IAAI;CACnC,CAAC;AACF;AAEA,SAAS,yBACR,MACA,iBACiC;CACjC,OAAO,0BACN,KAAK,QAAQ,QAAQ;EAAC;EAAW;EAAW;CAAQ,CAAC,CAAC,SAAS,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC,CACzF,CAAC,CAAC,KAAK,SAAS;EACf,MAAM,IAAI;EACV,OAAO,IAAI;EACX,QAAQ,IAAI;EACZ,UAAU,IAAI;EACd,GAAI,kBACD;GACA,SAAS,IAAI;GACb,OAAO,IAAI;GACX,UAAU,IAAI;EACf,IACC,CAAC;CACL,EAAE;AACH;AAEA,SAAS,+BACR,aACA,iBAC2B;CAC3B,IAAI,mBAAmB,CAAC,YAAY,iBACnC,OAAO;CAER,MAAM,UACL,YAAY,UAAU,YACnB,uCACA,YAAY,UAAU,WACrB,mCACA,YAAY,UAAU,aACrB,+CACA,YAAY;CAClB,OAAO;EACN,GAAG;EACH;EACA,iBAAiB;GAChB,GAAG,YAAY;GACf,SAAS;GACT,OAAO;EACR;CACD;AACD;AAEA,SAAS,cAAkC;CAC1C,OAAO,QAAQ,IAAI,kBAAkB,KAAK,KAAK,KAAA;AAChD;;;AAIA,SAAS,oBAAoB,OAAmC;CAK/D,QAJmB,SAAS,GAAA,CAC1B,QAAQ,oBAAoB,EAAE,CAAC,CAC/B,MAAM,GAAG,EAAE,CAAC,CACZ,KACK,KAAa;AACrB;AAEA,SAAS,SAAS,MAAc,UAA0B;CACzD,MAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,SAAS,IAAI,EAAE;CACzD,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AACzC;AAEA,IAAM,sBAAsB,SAAS,+BAA+B,OAAS;AAC7E,IAAM,eAAe,SAAS,wBAAwB,GAAI;AAE1D,eAAe,wBAAwB,SAAkB,UAA0C;CAClG,MAAM,gBAAgB,OAAO,SAAS,QAAQ,QAAQ,IAAI,gBAAgB,KAAK,IAAI,EAAE;CACrF,IAAI,OAAO,SAAS,aAAa,KAAK,gBAAgB,UACrD,OAAO;CAER,MAAM,SAAS,QAAQ;CACvB,IAAI,CAAC,QAAQ,OAAO,OAAO,MAAM,CAAC;CAClC,MAAM,SAAS,OAAO,UAAU;CAChC,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CACZ,IAAI;EACH,OAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,IAAI,CAAC,OAAO;GACZ,SAAS,MAAM;GACf,IAAI,QAAQ,UAAU;IACrB,MAAM,OAAO,OAAO;IACpB,OAAO;GACR;GACA,OAAO,KAAK,KAAK;EAClB;CACD,UAAU;EACT,OAAO,YAAY;CACpB;CACA,OAAO,OAAO,OAAO,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC;AAC/D;AAEA,IAAM,sBACL;AAGD,SAAS,cAAc,KAAqB;CAC3C,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,OAAO,OAAO,SAAS,GAAG,OAAO,WAAW,OAAO,WAAW,OAAO;AACtE;AAEA,SAAS,sBAA8C;CACtD,OAAO,EAAE,OAAO,eAAe;AAChC;AAEA,IAAM,8BAA8B;AAKpC,IAAM,uCAAuC;AAE7C,SAAS,4BAA4B,GAAG,SAAqC;CAC5E,MAAM,SAAS,QAAQ,MACrB,cAAc,cAAc,wBAAwB,cAAc,qBACpE;CACA,IAAI,QAAQ,QAAQ,KAAK,mCAAmC,QAAQ;AACrE;AAEA,SAAS,aAAa,KAAuB;CAC5C,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU,OAAO;CAC5C,MAAM,OAAO,UAAU,MAAM,OAAQ,IAA2B,QAAQ,EAAE,IAAI;CAC9E,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;CACrD,OAAO,SAAS,iBAAiB,QAAQ,SAAS,oBAAoB;AACvE;AAEA,SAAS,oBACR,OACA,UACA,OACA,WACwB;CACxB,IAAI;EACH,IAAI,CAAC,YAAY,MAAM,IAAI,UAAU,OAAO,SAAS,GACpD,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAgB;EAAS;CAEvD,SAAS,KAAK;EACb,IAAI,aAAa,GAAG,GACnB,OAAO;GAAE,IAAI;GAAO,QAAQ;GAA6B;EAAS;EAEnE,MAAM;CACP;CAEA,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,wBAAwB,IAAI,GAAI,EAAA,CAAE,YAAY;CACnF,IAAI;EACH,cAAc,MAAM,IAAI,MAAM;CAC/B,SAAS,KAAK;EACb,IAAI,CAAC,aAAa,GAAG,GAAG,MAAM;CAG/B;CACA,OAAO;AACR;AAEA,SAAS,oBAAoB,MAA+B;CAC3D,OAAO,CAAC,KAAK,MAAM,KAAK,WAAW;AACpC;AAEA,SAAS,0BAA0B,GAAY;CAC9C,EAAE,OAAO,eAAe,GAAG;CAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;AAC1D;AAEA,SAAS,iCACR,SACA,MACA,SAM8B;CAC9B,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,QAAQ,QAAQ,OAAO,kBAAkB,KAAK;CACpD,MAAM,kBAAkB,QAAQ,OAAO,sBAAsB,KAAK;CAClE,MAAM,kBAAkB,QAAQ,OAAO,qBAAqB;CAC5D,MAAM,wBAAwB,QAAQ,OAAO,qBAAqB;CAClE,MAAM,oBAAoB,oBAAoB,KAAA,KAAa,0BAA0B,KAAA;CACrF,MAAM,SAAS,0BAA0B;EACxC,QAAQ,QAAQ;EAChB,eAAe,cAAc,QAAQ,GAAG;EACxC,WAAW;EACX;EACA;EACA,aAAa;EACb,qBAAqB,QAAQ;EAC7B,WAAW;EACX,WAAW,QAAQ;CACpB,CAAC;CACD,IAAI,qBAAqB,OAAO,WAAW,UAC1C,OAAO;EAAE,IAAI;EAAO,QAAQ;CAA2B;CAExD,IAAI,OAAO,WAAW,WACrB,OAAO;EACN,IAAI;EACJ,QAAQ,OAAO,WAAW,uBAAuB,OAAO,SAAS;CAClE;CAaD,IAAI,CAVgB,gBAAgB;EACnC,QAAQ,QAAQ;EAChB,eAAe,cAAc,QAAQ,GAAG;EACxC,WAAW;EACX;EACA;EACA,WAAW;EACX,WAAW,QAAQ;EACnB,UAAU,QAAQ;CACnB,CACK,GAAa,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAoB;CAClE,IACC,OAAO,WAAW,aACjB,QAAQ,0BAA0B,MAAM,sCAEzC,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAsB;CAEnD,OAAO;EAAE,IAAI;EAAM,SAAS,OAAO,WAAW,UAAU,IAAI;CAAE;AAC/D;AAEA,SAAS,iCACR,OACA,UACA,SACwB;CACxB,IAAI;EAEH,IAAI,CADa,4CAA4C,MAAM,IAAI,UAAU,OAC5E,GACa;OAAA,MAAM,GACrB,QACA;;;kDAID,CAAC,CACA,MAAM,CAAC,CACP,IAAI,QACF,MAAa,KAAA,GAAW,OAAO;IAAE,IAAI;IAAO,QAAQ;IAAgB;GAAS;EAAA;EAElF,OAAO;CACR,SAAS,KAAK;EACb,IAAI,aAAa,GAAG,GACnB,OAAO;GAAE,IAAI;GAAO,QAAQ;GAA6B;EAAS;EAEnE,MAAM;CACP;AACD;AAEA,SAAS,qBACR,OACA,SACA,MACiB;CACjB,MAAM,YAAY,QAAQ,OAAO,mBAAmB,KAAK,GAAA,CAAI,KAAK;CAClE,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,QAAQ,QAAQ,OAAO,kBAAkB,KAAK;CACpD,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,OAC7C,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmB;CAAS;CAGzD,MAAM,UAAU,MAAM,GACpB,QACA;;;;gDAKD,CAAC,CACA,IAAI,QAAQ;CAOd,IAAI,CAAC,SACJ,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAgB;CAAS;CAGtD,MAAM,oBAAoB,OAAO,QAAQ,sBAAsB,EAAE,CAAC,CAAC,KAAK;CACxE,MAAM,YAAY,OAAO,QAAQ,cAAc,EAAE,CAAC,CAAC,KAAK;CACxD,IAAI,CAAC,qBAAqB,CAAC,WAC1B,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA0B;CAAS;CAEhE,IAAI,qBAAqB,SAAS,MAAM,mBACvC,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAwB;CAAS;CAG9D,IAAI;CACJ,IAAI;EACH,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;EACjF,eAAe,iCAAiC,SAAS,MAAM;GAC9D;GACA;GACA,qBAAqB;GACrB,wBAAwB,QAAQ;EACjC,CAAC;CACF,QAAQ;EACP,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAgC;EAAS;CACtE;CACA,IAAI,CAAC,aAAa,IACjB,OAAO;EAAE,IAAI;EAAO,QAAQ,aAAa;EAAQ;CAAS;CAI3D,MAAM,cAAc,oBAAoB,OAAO,UAAU,wBADvC,IAAI,KAAK,EAAA,CAAE,YACmC,CAAS;CACzE,IAAI,aAAa,OAAO;CACxB,IAAI,aAAa,YAAY,sCAAsC;EAClE,MAAM,gBAAgB,iCAAiC,OAAO,UAAU,aAAa,OAAO;EAC5F,IAAI,eAAe,OAAO;CAC3B;CACA,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAM;CAAS;AAC3C;AAEA,eAAe,+BACd,OACA,SACA,MAC0B;CAC1B,MAAM,WAAW,QAAQ,OAAO,2BAA2B,KAAK,GAAA,CAAI,KAAK;CACzE,MAAM,YAAY,QAAQ,OAAO,mBAAmB,KAAK,GAAA,CAAI,KAAK;CAClE,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,YAAY,QAAQ,OAAO,sBAAsB,KAAK;CAC5D,MAAM,QAAQ,QAAQ,OAAO,kBAAkB,KAAK;CACpD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,OACzD,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAGzE,MAAM,SAAS,0BAA0B;CACzC,IAAI,CAAC,OAAO,oBACX,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA8C;CAAS;CAGpF,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACjF,IAAI;CACJ,IAAI;EACH,IAAI,UAA0C;EAC9C,IAAI,OAAO,4BAA4B;GACtC,MAAM,CAAC,QAAQ,gBAAgB,MAAM,YACpC,OACA,GAAG,aAAa,OAAO,kBAAkB,EAAE,6BAA6B,mBAAmB,OAAO,KAClG;IACC,SAAS,EAAE,+BAA+B,OAAO,2BAA2B;IAC5E,UAAU,KAAK,IAAI,GAAG,OAAO,uBAAuB;GACrD,CACD;GACA,IAAI,WAAW,KAAK,UAAU;EAC/B,OACC,KAAK,MAAM,WAAW,OAAO,uBAAuB;GACnD,MAAM,YAAY,GAAG,aAAa,OAAO,kBAAkB,EAAE,uBAAuB,mBAAmB,OAAO,EAAE,YAAY,mBAAmB,OAAO;GACtJ,MAAM,CAAC,QAAQ,iBAAiB,MAAM,YAAY,OAAO,WAAW;IACnE,SAAS,iBAAiB;KACzB,UAAU;KACV,QAAQ,MAAM;KACd,QAAQ;KACR,KAAK;KACL,WAAW,OAAO,MAAM,CAAC;KACzB,SAAS,YAAY;IACtB,CAAC;IACD,UAAU,KAAK,IAAI,GAAG,OAAO,uBAAuB;GACrD,CAAC;GACD,IAAI,WAAW,KAAK;IACnB,UAAU;IACV;GACD;EACD;EAED,IAAI,CAAC,SAAS,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAiC;EAAS;EACpF,eAAe;CAChB,QAAQ;EACP,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAiC;EAAS;CACvE;CAEA,MAAM,QAAQ,aAAa;CAC3B,MAAM,mBAAmB,aAAa;CACtC,IAAI,CAAC,SAAS,CAAC,kBACd,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAEzE,IACC,OAAO,sBAAsB,SAAS,KACtC,CAAC,OAAO,sBAAsB,SAAS,OAAO,MAAM,QAAQ,CAAC,GAE7D,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAkC;CAAS;CAExE,IAAI,MAAM,YAAY,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA2B;CAAS;CACtF,IAAI,OAAO,iBAAiB,SAAS,MAAM,OAAO,MAAM,gBAAgB,GACvE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA8C;CAAS;CAEpF,IAAI,OAAO,iBAAiB,QAAQ,MAAM,OAAO,MAAM,QAAQ,GAC9D,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAkC;CAAS;CAExE,IAAI,OAAO,iBAAiB,OAAO,MAAM,GACxC,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAEzE,MAAM,kBAAkB,OAAO,iBAAiB,cAAc,EAAE,CAAC,CAAC,KAAK;CACvE,MAAM,oBAAoB,OAAO,iBAAiB,eAAe,EAAE,CAAC,CAAC,KAAK;CAC1E,IAAI,CAAC,mBAAmB,qBAAqB,eAAe,MAAM,mBACjE,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA2C;CAAS;CAEjF,IAAI,MAAM,qBAAqB,UAC9B,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAmC;CAAS;CAEzE,IAAI,MAAM,mBAAmB,eAC5B,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAiC;CAAS;CAEvE,IAAI,IAAI,KAAK,MAAM,UAAU,qBAAK,IAAI,KAAK,GAC1C,OAAO;EAAE,IAAI;EAAO,QAAQ;EAA2B;CAAS;CAGjE,MAAM,eAAe,MAAM,GACzB,QACA;oEAED,CAAC,CACA,IAAI,QAAQ;CACd,IAAI;CACJ,IAAI;EACH,wBAAwB,iCAAiC,SAAS,MAAM;GACvE;GACA,WAAW;GACX,qBAAqB;GACrB,wBAAwB,cAAc,6CAA6C;EACpF,CAAC;CACF,QAAQ;EACP,OAAO;GAAE,IAAI;GAAO,QAAQ;GAAgD;EAAS;CACtF;CACA,IAAI,CAAC,sBAAsB,IAC1B,OAAO;EAAE,IAAI;EAAO,QAAQ,sBAAsB;EAAQ;CAAS;CAEpE,IAAI,CAAC,6BAA6B,MAAM,IAAI,UAAU,iBAAiB,iBAAiB,GACvF,OAAO;EAAE,IAAI;EAAO,QAAQ;EAAuC;CAAS;CAI7E,MAAM,cAAc,oBAAoB,OAAO,UAAU,wBADvC,IAAI,KAAK,EAAA,CAAE,YACmC,CAAS;CACzE,IAAI,aAAa,OAAO;CACxB,oBAAoB,MAAM,IAAI,UAAU,CAAC,GAAG;EAC3C,MAAM,OAAO,iBAAiB,gBAAgB,EAAE,CAAC,CAAC,KAAK,KAAK,KAAA;EAC5D,mBAAmB;EACnB,WAAW;EACX,cAAc;CACf,CAAC;CACD,IAAI,sBAAsB,YAAY,sCAAsC;EAC3E,MAAM,gBAAgB,iCACrB,OACA,UACA,sBAAsB,OACvB;EACA,IAAI,eAAe,OAAO;CAC3B;CACA,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAM;CAAS;AAC3C;AAEA,SAAS,cAAc,OAA0B;CAChD,IAAI,SAAS,MAAM,OAAO,CAAC;CAC3B,IAAI,OAAO,UAAU,UACpB,IAAI;EACH,MAAM,SAAS,KAAK,MAAM,KAAK;EAC/B,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC;EACpC,OAAO,OAAO,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;CACxE,QAAQ;EACP,OAAO,CAAC;CACT;CAED,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;AACvE;AAEA,SAAS,uBACR,OACA,cAC2C;CAC3C,MAAM,eAAe,0BAA0B;CAC/C,MAAM,MAAM,MAAM,GAChB,QACA,sGACD,CAAC,CACA,IAAI,YAAY;CAGlB,IAAI,CAAC,KACJ,OAAO;EACN,SAAS,aAAa;EACtB,SAAS,aAAa;CACvB;CAGD,IAAI,EADgB,IAAI,yBAAyB,QAAQ,IAAI,yBAAyB,OAErF,OAAO;EACN,SAAS,aAAa;EACtB,SAAS,aAAa;CACvB;CAED,OAAO;EACN,SAAS,cAAc,IAAI,qBAAqB;EAChD,SAAS,cAAc,IAAI,qBAAqB;CACjD;AACD;AAEA,SAAS,oBACR,KACA,WAC0B;CAC1B,OAAO;EACN,SAAS,aAAa,IAAI,qBAAsC;EAChE,SAAS,aAAa,IAAI,qBAAsC;EAChE,mBACC,WAAW,WAAW,aAAa,IAAI,qBAAsC;EAC9E,mBACC,WAAW,WAAW,aAAa,IAAI,qBAAsC;EAC9E,iBAAiB,IAAI,yBAAyB,QAAQ,IAAI,yBAAyB;CACpF;AACD;AAEA,SAAS,mBAAmB,OAA+B;CAE1D,OADa,OAAO,SAAS,EAAE,CAAC,CAAC,KAC1B,KAAQ;AAChB;AAEA,SAAS,qBAAqB,OAAoB,cAAiD;CAClG,MAAM,WAAW,aAAa,KAAK;CACnC,IAAI,CAAC,UAAU,OAAO,CAAC;CAwBvB,OAvBa,MAAM,GACjB,QACA;;;;;;;;;;;;;;;;;;yBAmBD,CAAC,CACA,IAAI,QACC,CAAA,CAAK,KAAK,SAAS;EACzB,UAAU,OAAO,IAAI,YAAY,EAAE;EACnC,OAAO,OAAO,IAAI,SAAS,IAAI,YAAY,EAAE;EAC7C,MAAM,OAAO,IAAI,QAAQ,MAAM;EAC/B,gBAAgB,OAAO,IAAI,kBAAkB,OAAO;EACpD,gBAAgB,mBAAmB,IAAI,cAAc;EACrD,UAAU,mBAAmB,IAAI,QAAQ;EACzC,MAAM,OAAO,IAAI,QAAQ,QAAQ;EACjC,kBAAkB,OAAO,IAAI,oBAAoB,CAAC;EAClD,YAAY,mBAAmB,IAAI,UAAU;CAC9C,EAAE;AACH;AAEA,SAAS,uBAAuB,OAA0B;CACzD,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;CACtC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CAMnC,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;EAAE,UAAU;EAAG,YAAY;CAAI,CAAC,CAAC,CACrC,MAAM,IAAI,GAAG,OAAO,OAAO,UAAU,CAAC,GAAG,GAAG,OAAO,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC,CAAC,CACpF,IAAI;CACN,MAAM,WAAW,EACf,OAAO;EAAE,UAAU,OAAO,OAAO;EAAU,UAAU,OAAO,OAAO;CAAS,CAAC,CAAC,CAC9E,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC,CAChD,IAAI;CACN,IAAI,UAAU;EAKb,IAAI,SAAS,aAAa,GACzB,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;GAAE,UAAU;GAAG,YAAY;EAAI,CAAC,CAAC,CACrC,MAAM,GAAG,OAAO,OAAO,UAAU,MAAM,OAAO,CAAC,CAAC,CAChD,IAAI;EAEP;CACD;CACA,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,OAAO;EACP,UAAU,MAAM;EAChB,cAAc,MAAM;EACpB,UAAU;EACV,QAAQ;EACR,sBAAsB;EACtB,YAAY;EACZ,YAAY;CACb,CAAC,CAAC,CACD,IAAI;AACP;AAEA,SAAS,0BAA0B,OAA4B;CAC9D,MAAM,WAAW,gCAAgC,KAAK;CACtD,uBAAuB,KAAK;CAC5B,OAAO;AACR;AAEA,SAAS,gCAAgC,OAA4B;CACpE,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CAC5E,MAAM,2BAA2B,QAAQ;CACzC,OAAO;AACR;AAEA,SAAS,2BAA2B,OAAoB,SAAgC;CACvF,MAAM,OAAO,MAAM,GACjB,QAAQ,uDAAuD,CAAC,CAChE,IAAI;CACN,KAAK,MAAM,OAAO,MAEjB,IADkB,aAAa,IAAI,cAC/B,CAAA,CAAU,SAAS,OAAO,GAAG,OAAO,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK,KAAK;CAEpF,OAAO;AACR;AAEA,SAAS,wBAAwB,OAAoB,gBAAgC;CACpF,MAAM,WAAW,OAAO,kBAAkB,EAAE,CAAC,CAAC,KAAK;CACnD,IAAI,CAAC,YAAY,aAAa,aAAa,aAAa,MAAM,UAAU,OAAO;CAC/E,MAAM,sBAAsB,YAAY,MAAM;CAC9C,MAAM,SAAS,MAAM,GACnB,QACA;;;;;;;;;;;;;;;;;;;;;;;;;;UA2BD,CAAC,CACA,IACA,MAAM,SACN,MAAM,kBACN,qBACA,UACA,MAAM,SACN,gCACA,0BACD;CACD,OAAO,OAAO,OAAO,WAAW,CAAC;AAClC;AAEA,SAAS,wBACR,aACA,UAC0B;CAC1B,IAAI,UAAU,OAAO;CACrB,MAAM,aAAa,MAAM,QAAQ,YAAY,kBAAkB,IAC5D,YAAY,mBAAmB,KAAK,SAAS;EAC7C,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;EAC9C,MAAM,SAAS;EACf,MAAM,eAAe,MAAM,QAAQ,OAAO,SAAS,IAAI,OAAO,UAAU,SAAS;EACjF,OAAO;GACN,WAAW,OAAO;GAClB,cAAc,OAAO,gBAAgB;GACrC,QAAQ,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;GACxD,cAAc,OAAO,gBAAgB;GACrC,YAAY,OAAO,cAAc;GACjC,OAAO,QAAQ,OAAO,KAAK;GAC3B,sBAAsB,QAAQ,OAAO,oBAAoB;GACzD,2BAA2B,QAAQ,OAAO,yBAAyB;GACnE,gCAAgC,OAAO,kCAAkC;GACzE,gCAAgC,OAAO,kCAAkC;GACzE,aAAa;GACb,WAAW,CAAC;GACZ,eAAe;EAChB;CACD,CAAC,IACA,CAAC;CACJ,OAAO;EACN,GAAG;EACH,oBAAoB;CACrB;AACD;AA8BA,SAAS,6BAA6B,QAAyD;CAC9F,QAAQ,QAAR;EACC,KAAK,2BACJ,OAAO;EACR,KAAK,4BACJ,OAAO;EACR,KAAK,iBACJ,OAAO;CACT;AACD;AAEA,eAAe,qBACd,OACA,OAiBC;CACD,MAAM,SAAS,0BAA0B;CAGzC,IAAI,sBAAsE;CAC1E,IAAI,CAAC,OAAO,oBACX,sBAAsB;MAChB,IAAI,OAAO,sBAAsB,WAAW,GAClD,sBAAsB;MAChB,IAAI,CAAC,OAAO,aAClB,sBAAsB;CAEvB,IAAI,qBACH,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QAAQ;EACR,QAAQ,6BAA6B,mBAAmB;CACzD;CAED,MAAM,aAAa,MAAM,uBAAuB,OAAO,MAAM;CAC7D,MAAM,mBAAmB,OAAO,MAAM,eAAe,EAAE,CAAC,CAAC,KAAK;CAC9D,MAAM,aAAa,WAAW,QAC5B,SAAS,OAAO,KAAK,aAAa,EAAE,CAAC,CAAC,KAAK,MAAM,MAAM,YACzD;CACA,MAAM,qBAAqB,mBACxB,WAAW,QAAQ,SAAS,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK,MAAM,gBAAgB,IACtF;CACH,MAAM,qBAAqB,IAAI,IAC9B,mBAAmB,KAAK,SAAS,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CACvF;CACA,IAAI,CAAC,oBAAoB,mBAAmB,OAAO,GAClD,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,MAAM,QAAQ,mBAAmB;CACjC,IAAI,CAAC,OACJ,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QAAQ;CACT;CAED,MAAM,YAAY,OAAO,MAAM,cAAc,EAAE,CAAC,CAAC,KAAK;CACtD,MAAM,UAAU,YAAY,KAAK,MAAM,SAAS,KAAK,KAAK,IAAI,IAAI;CAClE,IAAI,MAAM,SAAS,SAClB,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,MAAM,kBAAkB,OAAO,MAAM,eAAe,EAAE,CAAC,CAAC,KAAK;CAC7D,MAAM,gBAAgB,OAAO,MAAM,cAAc,EAAE,CAAC,CAAC,KAAK;CAC1D,MAAM,WAAW,OAAO,MAAM,gBAAgB,EAAE,CAAC,CAAC,KAAK,KAAK;CAC5D,MAAM,gBAAgB,MAAM,QAAQ,MAAM,SAAS,IAChD,MAAM,UAAU,QAAQ,UAA2B,OAAO,UAAU,QAAQ,IAC5E,CAAC;CACJ,IAAI,CAAC,eACJ,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,IAAI,CAAC,mBAAmB,qBAAqB,aAAa,MAAM,iBAC/D,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAGD,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM,IACxC,MAAM,OAAO,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IACtE,CAAC;CACJ,MAAM,gBAAgB,MAAM,QAAQ,MAAM,YAAY,IACnD,MAAM,aAAa,KAAK,UAAU,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IAC5E,CAAC;CACJ,IAAI;CACJ,IAAI,MAAM,iBAAiB;EAC1B,IAAI,CAAC,SAAS,SAAS,MAAM,eAAe,GAC3C,OAAO;GACN,IAAI;GACJ,QAAQ;GACR,OAAO;GACP,QACC;EACF;EAED,IAAI,CAAC,cAAc,SAAS,MAAM,eAAe,GAChD,OAAO;GACN,IAAI;GACJ,QAAQ;GACR,OAAO;GACP,QACC;EACF;EAED,UAAU,MAAM;CACjB,OAAO;EACN,IAAI,SAAS,WAAW,GACvB,OAAO;GACN,IAAI;GACJ,QAAQ;GACR,OAAO;GACP,QACC,SAAS,SAAS,IACf,gHACA;EACL;EAED,UAAU,SAAS;CACpB;CACA,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;CACtC,MAAM,WAAW,EACf,OAAO;EACP,gBAAgB,OAAO,UAAU;EACjC,oBAAoB,OAAO,UAAU;EACrC,YAAY,OAAO,UAAU;EAC7B,gBAAgB,OAAO,UAAU;EACjC,yBAAyB,OAAO,UAAU;CAC3C,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,MAAM,YAAY,CAAC,CAAC,CAC9D,IAAI;CACN,MAAM,sBAAsB,OAAO,UAAU,sBAAsB,EAAE,CAAC,CAAC,KAAK;CAC5E,IAAI,YAAY,uBAAuB,wBAAwB,iBAC9D,OAAO;EACN,IAAI;EACJ,QAAQ;EACR,OAAO;EACP,QACC;CACF;CAED,MAAM,2BAA2B;EAChC,IAAI;GACH,MAAM,MAAM,KAAK,MAAM,OAAO,UAAU,kBAAkB,IAAI,CAAC;GAC/D,OAAO,MAAM,QAAQ,GAAG,IACrB,IAAI,QAAQ,UAA2B,OAAO,UAAU,QAAQ,IAChE,CAAC;EACL,QAAQ;GACP,OAAO,CAAC;EACT;CACD,EAAA,CAAG;CACH,MAAM,gBAAgB,KAAK,UAAU,eAAe,eAAe,iBAAiB,CAAC;CACrF,MAAM,oCAAoC,OAAO,QAAQ;EACxD;EACA,mBAAmB,MAAM;EACzB,GAAI,MAAM,4BACP,EAAE,2BAA2B,MAAM,0BAA0B,IAC7D,CAAC;CACL,CAAC;CAOD,MAAM,iBAAiB,OAAO,sBAAsB;CACpD,IAAI;CACJ,IAAI;CACJ,IAAI,CAAC,UAAU;EACd,IAAI,kBAAmC;EACvC,IAAI,kBAAmC;EACvC,IAAI,gBAAgB;GACnB,MAAM,QAAQ,8BAA8B,MAAM,IAAI,gBAAgB,OAAO;GAC7E,IAAI,OAAO,iBAAiB;IAC3B,kBAAkB,MAAM,oBAAoB;IAC5C,kBAAkB,MAAM,oBAAoB;GAC7C;EACD;EACA,MAAM,kBAAkB,MAAM,eAAe;EAC7C,MAAM,kBAAkB,MAAM,eAAe;EAC7C,MAAM,kBAAkB,oBAAoB,KAAA,IAAY,kBAAkB;EAC1E,MAAM,kBAAkB,oBAAoB,KAAA,IAAY,kBAAkB;EAC1E,eAAe,kBAAkB,KAAK,UAAU,eAAe,IAAI;EACnE,eAAe,kBAAkB,KAAK,UAAU,eAAe,IAAI;CACpE;CAEA,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;CAqDnC,OApDe,MAAM,GAAG,kBAAkB;EACzC,IAAI,CAAC,UAAU;GACd,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,OAAO;IACP,gBAAgB,MAAM;IACtB,MAAM;IACN,oBAAoB,mBAAmB;IACvC,YAAY;IACZ,gBAAgB;IAChB,uBAAuB,gBAAgB;IACvC,uBAAuB,gBAAgB;IACvC,YAAY;IACZ,cAAc;IACd,+BAA+B;IAC/B,yBAAyB;GAC1B,CAAC,CAAC,CACD,IAAI;GACN,OAAO;IACN,IAAI;IACJ,gBAAgB,MAAM;IACtB,SAAS;IACT,SAAS;IACT,MAAM;IACN,UAAU;GACX;EACD;EACA,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI;GACJ,MAAM;GACN,oBAAoB,mBAAmB,SAAS,sBAAsB;GACtE,YAAY,iBAAiB,SAAS,cAAc;GACpD,gBAAgB;GAChB,cAAc;GAKd,GAAK,SAAyD,0BAC3D,CAAC,IACD;IAAE,yBAAyB;IAAS,+BAA+B;GAAe;EACtF,CAAC,CAAC,CACD,MAAM,GAAG,OAAO,UAAU,gBAAgB,MAAM,YAAY,CAAC,CAAC,CAC9D,IAAI;EACN,OAAO;GACN,IAAI;GACJ,gBAAgB,MAAM;GACtB,SAAS;GACT,SAAS;GACT,MAAM;GACN,UAAU;EACX;CACD,CAAC,CAAC,CACK;AACR;AAEA,SAAS,iBACR,OACA,cACA,eACA,KACA,UAA2E,CAAC,GACiB;CAC7F,MAAM,CAAC,WAAW,WAAW,sCAAsC,MAAM,IAAI,KAAK,cAAc;EAC/F;EACA,kBAAkB,QAAQ;EAC1B,uBAAuB,QAAQ;CAChC,CAAC;CACD,OAAO;EACN;EACA,SAAS,SAAS,iBAAiB;EACnC,eAAe,UAAU,sBAAsB,OAAO,IAAI;CAC3D;AACD;AAMA,SAAS,6BACR,OACA,KACiC;CACjC,IAAI,CAAC,IAAI,qBAAqB,OAAO;CACrC,MAAM,eAAe,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK;CAC3D,MAAM,UAAU,OAAO,IAAI,YAAY,MAAM,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM;CACtE,MAAM,QAAQ,gCAAgC,MAAM,IAAI;EAAE;EAAc;CAAQ,CAAC;CACjF,OAAO;EACN,UAAU,MAAM;EAChB,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,iBAAiB,CAAC,MAAM;CACzB;AACD;;;;;;AAOA,SAAS,WACR,OACA,KACA,UACA,iBACA,uBACA,eAC0B;CAC1B,MAAM,SAAS,OAAO,IAAI,kBAAkB,EAAE;CAC9C,MAAM,YAAY,iBAAiB,IAAI,MAAM,KAAK;EAAE,IAAI;EAAG,KAAK;CAAE;CAClE,MAAM,kBAAkB,uBAAuB,IAAI,MAAM;CACzD,MAAM,YAAY,aAAa,IAAI,cAA+B;CAClE,MAAM,eAAe,0BAA0B,MAAM,IAAI;EACxD,eAAe,iBAAiB;EAChC,cAAc;CACf,CAAC;CACD,OAAO;EACN,gBAAgB,IAAI;EACpB,MAAM,IAAI;EACV,aAAa,WAAW,IAAI,qBAAqB;EACjD,QAAQ,QAAQ,IAAI,kBAAkB;EACtC,WAAW,WAAW,YAAY,CAAC;EACnC,eAAe,UAAU;EACzB,cAAc,IAAI;EAClB,cAAc,IAAI;EAClB,YAAY,WAAW,IAAI,aAAa;EACxC,iBAAiB,IAAI,mBAAmB;EACxC,6BAA6B,IAAI,+BAA+B;EAChE,WAAW,QAAQ,IAAI,UAAU;EACjC,qBAAqB,QAAQ,IAAI,mBAAmB;EACpD,2BAA2B,6BAA6B,OAAO,GAAG;EAClE,UAAU,IAAI,YAAY;EAC1B,oBAAoB,IAAI,sBAAsB;EAC9C,mBAAmB,qBAAqB,OAAO,MAAM;EAKrD,gBAAgB;EAChB,eAAe,EACd,GAAG,oBAAoB,KAAK,uBAAuB,OAAO,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,EAC5F;EACA,YAAY;GAAE,IAAI,UAAU;GAAI,KAAK,UAAU;EAAI;EACnD,kBAAkB;GACjB,OAAO,iBAAiB,SAAS;GACjC,WAAW,iBAAiB,aAAa,CAAC;GAC1C,SAAS,iBAAiB,WAAW;EACtC;EACA,+BACC,OAAO,IAAI,kCAAkC,WAC1C,IAAI,gCACJ;EACJ,yBACC,OAAO,IAAI,4BAA4B,WAAW,IAAI,0BAA0B;CAClF;AACD;AAEA,SAAS,uBAAuB,OAA+B;CAE9D,IAAI,CADS,OAAO,SAAS,EAAE,CAAC,CAAC,KAC5B,GAAM,OAAO;CAClB,OAAO;AACR;AAEA,SAAS,kBACR,KACA,UACA,WAC0B;CAC1B,MAAM,gBAAgB,uBAAuB,IAAI,KAAK;CACtD,OAAO;EACN,GAAG;EACH,OAAO,WAAW,IAAI,QAAQ;EAC9B,gBAAgB,CAAC,YAAY,iBAAiB;EAC9C,QAAQ,cAAc,GAAG;EACzB,SAAS,YAAY,WAAW,SAAS,UAAU,KAAK;CACzD;AACD;AAEA,IAAM,sCAAsC;AAC5C,IAAM,+BAA+B;AAErC,SAAS,4BACR,OACgD;CAChD,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,sCAAsC,GAAI,EAAA,CAAE,YAAY;CAC7F,MAAM,YAAY,gCAAgC,MAAM,IAAI,EAAE,UAAU,OAAO,CAAC;CAChF,MAAM,sBAAM,IAAI,IAA8C;CAC9D,KAAK,MAAM,WAAW,WAAW;EAChC,MAAM,KAAK,OAAO,QAAQ,kBAAkB,EAAE,CAAC,CAAC,KAAK;EACrD,IAAI,CAAC,IAAI;EACT,IAAI,IAAI,IAAI,OAAO;CACpB;CACA,OAAO;AACR;AAEA,SAAS,mBACR,OACA,eACA,UAC0B;CAC1B,MAAM,SAAS,MAAM,GACnB,QACA;;;;;sBAMD,CAAC,CACA,IAAI,iBAAiB,IAAI,iBAAiB,IAAI,sBAAsB;CAGtE,MAAM,QACL,iBAAiB,WACd,8BAA8B,MAAM,IAAI;EACxC;EACA,SAAS;CACV,CAAC,IACA;EAAE,WAAW,CAAC;EAAG,SAAS;EAAG,UAAU;EAAG,cAAc;EAAG,yBAAyB,CAAC;CAAE;CAC3F,MAAM,oBAA4C,CAAC;CACnD,KAAK,MAAM,QAAQ,MAAM,WACxB,kBAAkB,KAAK,WAAW,kBAAkB,KAAK,WAAW,KAAK;CAE1E,MAAM,iBAAiB,OAAO,QAAQ,mBAAmB,CAAC;CAC1D,MAAM,UAAU,OAAO,QAAQ,WAAW,CAAC;CAC3C,MAAM,YAAY,MAAM,UAAU;CAUlC,OAAO;EACN,OAVa,MAAM,eACjB,oBACA,YACC,iBACA,UACC,oBACA,iBACC,sBACA;EAGL,oBAAoB;GACnB,iBAAiB;GACjB;GACA,WAAW,QAAQ,aAAa;EACjC;EACA,iBAAiB;GAChB,SAAS,MAAM;GACf,kBAAkB,WAAW,+BAA+B;GAC5D,cAAc,CAAC,YAAY,CAAC;GAC5B,cAAc,MAAM;GACpB;GACA,qBAAqB;GACrB,UAAU,MAAM;GAChB,OAAO,WAAW,MAAM,UAAU,MAAM,GAAG,EAAE,IAAI,KAAA;EAClD;EACA,UAAU,CAAC;CACZ;AACD;AAEA,SAAS,0BAA0B,OAA6C;CAC/E,MAAM,OAAO,uBAAuB,KAAK;CACzC,MAAM,cAAc,KAAK;CACzB,MAAM,gBAAgB,KAAK,QACzB,SAAS,QACT,IAAI,eAAe,CAAC,WAAW,IAAI,aAAa,WAAW,IAAI,aAAa,SAC7E,IACD;CACA,MAAM,cAAc,MAAM,wBAAwB;CAClD,MAAM,uBAAuB,IAAI,IAChC,2BAA2B,MAAM,IAAI,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,CACxE,UAAU,oBACV,SACD,CAAC,CACF;CACA,MAAM,mCAAmB,IAAI,IAc3B;CACF,KAAK,MAAM,OAAO,MAAM;EACvB,MAAM,WAAW,2BAA2B;GAC3C,KAAK,IAAI;GACT,WAAW,IAAI;GACf,WAAW,IAAI;GACf,SAAS,IAAI;GACb,aAAa,IAAI;EAClB,CAAC;EACD,MAAM,YAAY,qBAAqB,IAAI,SAAS,KAAK;EACzD,MAAM,gBAAgB,WAAW,qBAAqB;EACtD,MAAM,iBACL,iBACA,kBAAkB,0BAClB,kBAAkB,gCACf,gBACA,WAAW;EACf,MAAM,WAAW,iBAAiB,IAAI,SAAS,KAAK;EACpD,MAAM,gBAAgB,YAAY,GAAyC;EAC3E,MAAM,eAAe,IAAI,cAAc;EACvC,IAAI,UAAU;GACb,SAAS,gBAAgB;GACzB,IAAI,eAAe,SAAS,6BAA6B;QACpD,SAAS,2BAA2B;GACzC,IAAI,iBAAiB,CAAC,SAAS,mBAAmB,eAAe,SAAS,kBACzE,SAAS,kBAAkB;GAE5B,IAAI,SAAS,eAAe,SAAS,mCACpC,SAAS,eAAe,KAAK,+BAA+B,KAAK,aAAa,CAAC;GAEhF;EACD;EACA,iBAAiB,IAAI,SAAS,OAAO;GACpC,oBAAoB,SAAS;GAC7B,iBAAiB,SAAS;GAC1B,iBAAiB,SAAS,kBAAkB,IAAI,WAAW,IAAI,OAAO,SAAS;GAC/E,cAAc;GACd,2BAA2B,gBAAgB,IAAI;GAC/C,yBAAyB,gBAAgB,IAAI;GAC7C,iBAAiB;GACjB,gBAAgB,CAAC,+BAA+B,KAAK,aAAa,CAAC;GACnE,oBAAoB,kBAAkB;GACtC,mBAAmB,iBACf,WAAW,qBACb,8GACC;EACJ,CAAC;CACF;CACA,MAAM,kBAAkB,iBAAiB;CACzC,MAAM,SAAS,CAAC,GAAG,iBAAiB,OAAO,CAAC,CAAC,CAAC,MAC5C,MAAM,UACN,MAAM,eAAe,KAAK,iBACzB,MAAM,mBAAmB,GAAA,CAAI,cAAc,KAAK,mBAAmB,EAAE,KACtE,KAAK,mBAAmB,cAAc,MAAM,kBAAkB,CAChE;CACA,MAAM,eAAe,gCAAgC,MAAM,EAAE,CAAC,CAC5D,QACC,UACA,MAAM,aAAa,0BACnB,MAAM,aAAa,6BACrB,CAAC,CACA,KAAK,WAAW;EAChB,gBAAgB,MAAM;EACtB,OAAO,MAAM,SAAS,MAAM;EAC5B,UAAU,MAAM;CACjB,EAAE;CACH,OAAO;EACN,UAAU;EACV,cAAc;EACd,UAAU,cAAc;EACxB,iBAAiB;EACjB;EACA,mBAAmB;EACnB,eAAe;CAChB;AACD;AAuBA,IAAM,oCAAoC;AAC1C,IAAM,8CAA8C;AAepD,SAAS,YAAY,OAAkC,QAAQ,KAAoB;CAClF,MAAM,aAAa,OAAO,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;CACpD,IAAI,CAAC,YAAY,OAAO;CACxB,OAAO,WAAW,SAAS,QAAQ,GAAG,WAAW,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK;AAC3E;AAEA,SAAS,+BACR,KACA,eACiC;CACjC,OAAO;EACN,IAAI,IAAI;EACR,MAAM,IAAI;EACV,OAAO,YAAY,IAAI,OAAO,GAAG,KAAK,UAAU,IAAI;EACpD,cAAc,YAAY,IAAI,SAAS;EACvC,YAAY,IAAI,cAAc;EAC9B,YAAY,IAAI,cAAc;EAC9B,WAAW,gBAAgB,UAAU;EACrC,SAAS,IAAI,WAAW;EACxB,KAAK,IAAI,OAAO;EAChB,YAAY,IAAI,cAAc;CAC/B;AACD;AAEA,SAAS,uBAAuB,OAA+D;CAC9F,OAAO,MAAM,GACX,QACA;;;;;;;;;;;;;;;;;;;;;;;sEAwBD,CAAC,CACA,IACA,6CACA,6BACD;AACF;AAEA,SAAS,oCAAoC,OAKlC;CACV,MAAM,cAAc,MAAM,MAAM,wBAAwB;CACxD,MAAM,UAAU,MAAM,KACpB,KAAK,QAAQ;EACb,MAAM,YAAY,YAAY,GAAyC,IAAI,UAAU;EACrF,OAAO,GAAG,IAAI,GAAG,GAAG,IAAI,OAAO,EAAE,GAAG,IAAI,YAAY,GAAG,GAAG;CAC3D,CAAC,CAAC,CACD,KAAK,CAAC,CACN,KAAK,GAAG;CACV,OAAO,OAAO,KAAK,GAAG,MAAM,kBAAkB,GAAG,MAAM,QAAQ,GAAG,WAAW,MAAM,CAAC,CAAC,SACpF,WACD;AACD;AA4BA,SAAS,iCACR,OACA,mBAC8B;CAmB9B,OAlBa,MAAM,GACjB,QACA;;;;;;;;;;;;;+BAcD,CAAC,CACA,IACK,CAAA,CAAK,QAAQ,QAAQ;EAQ3B,OAPiB,2BAA2B;GAC3C,KAAK,IAAI;GACT,WAAW,IAAI;GACf,WAAW,IAAI;GACf,SAAS,IAAI;GACb,aAAa,IAAI;EAClB,CACO,CAAA,CAAS,UAAU;CAC3B,CAAC;AACF;AAEA,SAAS,+BACR,OACA,MACS;CACT,MAAM,cAAc,MAAM,wBAAwB;CAClD,MAAM,UAAU,KACd,KAAK,QAAQ;EACb,MAAM,YAAY,YAAY,GAAyC,IAAI,UAAU;EACrF,OAAO,GAAG,IAAI,GAAG,GAAG,IAAI,OAAO,EAAE,GAAG;CACrC,CAAC,CAAC,CACD,KAAK,CAAC,CACN,KAAK,GAAG;CACV,OAAO,OAAO,KAAK,SAAS,MAAM,CAAC,CAAC,SAAS,WAAW;AACzD;AAEA,SAAS,oCACR,OACA,OAC0B;CAC1B,IAAI,CAAC,MAAM,kBAAkB,KAAK,GACjC,MAAM,IAAI,MAAM,+CAA+C;CAEhE,MAAM,OAAO,iCAAiC,OAAO,MAAM,iBAAiB;CAC5E,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,MAAM,cAAc,MAAM,wBAAwB;CAClD,MAAM,YAAY,KAAK,QAAQ,QAAQ,YAAY,GAAyC,CAAC;CAC7F,MAAM,oBAAoB,+BAA+B,OAAO,IAAI;CACpE,MAAM,UAAU;EACf,oBAAoB;EACpB,0BAA0B,UAAU;EACpC,yBAAyB,KAAK,SAAS,UAAU;EACjD,oBAAoB,MAAM;CAC3B;CACA,IAAI,CAAC,MAAM,WACV,OAAO;EAAE,WAAW;EAAO,GAAG;CAAQ;CAEvC,IAAI,MAAM,sBAAsB,mBAC/B,MAAM,IAAI,MAAM,gEAAgE;CAEjF,MAAM,GAAG,kBAAkB;EAC1B,KAAK,MAAM,OAAO,WAAW,MAAM,OAAO,IAAI,EAAE;CACjD,CAAC,CAAC,CAAC;CACH,OAAO;EAAE,WAAW;EAAM,wBAAwB,UAAU;EAAQ,GAAG;CAAQ;AAChF;AAEA,SAAS,iCAAiC,OAAoB,SAAuB;CACpF,IAAI,YAAY,wBAAwB;CAcxC,IAAI,CAbQ,MAAM,GAChB,QACA;;;;;;;;YASD,CAAC,CACA,IAAI,SAAS,MAAM,QAChB,GAAK,MAAM,IAAI,MAAM,kDAAkD,SAAS;AACtF;AAEA,SAAS,mCACR,OACA,mBAC4C;CAC5C,OAAO,uBAAuB,KAAK,CAAC,CAAC,QAAQ,QAAQ;EAQpD,OAPiB,2BAA2B;GAC3C,KAAK,IAAI;GACT,WAAW,IAAI;GACf,WAAW,IAAI;GACf,SAAS,IAAI;GACb,aAAa,IAAI;EAClB,CACO,CAAA,CAAS,UAAU;CAC3B,CAAC;AACF;AAEA,SAAS,mCACR,OACA,MAC4C;CAC5C,MAAM,mBAAmB,KAAK,QAAQ,QACrC,MAAM,kBAAkB,GAAyC,CAClE;CACA,IAAI,iBAAiB,WAAW,GAC/B,MAAM,IAAI,MACT,mHACD;CAED,MAAM,cAAc,MAAM,GACxB,QACA;;mBAEgB,iBAAiB,UAAU,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,EAC3D,CAAC,CACA,IAAI,GAAG,iBAAiB,KAAK,QAAQ,IAAI,EAAE,CAAC;CAM9C,MAAM,cAAc,IAAI,IAAI,YAAY,KAAK,QAAQ,CAAC,OAAO,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;CAC3E,KAAK,MAAM,OAAO,kBAAkB;EACnC,MAAM,UAAU,YAAY,IAAI,IAAI,EAAE;EACtC,IACC,SAAS,aAAa,iCACtB,QAAQ,WAAW,KACnB,QAAQ,YAER,MAAM,IAAI,MACT,+EACD;CAEF;CACA,OAAO;AACR;AAEA,SAAS,sCACR,OACA,OACwC;CACxC,IAAI,CAAC,MAAM,kBAAkB,KAAK,GACjC,MAAM,IAAI,MAAM,+CAA+C;CAChE,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,qCAAqC;CAChF,IAAI,MAAM,YAAY,wBACrB,MAAM,IAAI,MAAM,2EAA2E;CAE5F,IAAI,MAAM,YAAY,+BACrB,MAAM,IAAI,MAAM,2EAA2E;CAE5F,MAAM,cAAc,gCAAgC,MAAM,EAAE,CAAC,CAAC,MAC5D,UAAU,MAAM,aAAa,MAAM,OACrC;CACA,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,YAAY,MAAM,QAAQ,iCAAiC;CAC7F,iCAAiC,OAAO,MAAM,OAAO;CACrD,MAAM,OAAO,mCAAmC,OAAO,MAAM,iBAAiB;CAC9E,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,sCAAsC;CAC7E,MAAM,mBAAmB,mCAAmC,OAAO,IAAI;CACvE,MAAM,gBAAgB,CACrB,GAAG,IAAI,IACN,KACE,KAAK,QAAQ,OAAO,IAAI,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACvD,QAAQ,aAAa,YAAY,aAAa,MAAM,QAAQ,CAC/D,CACD,CAAC,CAAC,KAAK;CACP,OAAO;EACN,4BAA4B,cAAc;EAC1C,0BAA0B,cAAc,MAAM,GAAG,CAAC;EAClD,oBAAoB,oCAAoC;GACvD;GACA,SAAS,MAAM;GACf;GACA,mBAAmB,MAAM;EAC1B,CAAC;EACD,cAAc,KAAK;EACnB,2BAA2B,iBAAiB;EAC5C,UAAU,MAAM;EAChB,sBAAsB,KAAK,SAAS,iBAAiB;EACrD,oBAAoB,YAAY,SAAS,YAAY;EACrD,SACC;EACD,oBAAoB,MAAM;CAC3B;AACD;AAEA,SAAS,gCACR,OACA,OAC0B;CAC1B,MAAM,UAAU,sCAAsC,OAAO,KAAK;CAClE,IAAI,MAAM,sBAAsB,QAAQ,oBACvC,MAAM,IAAI,MACT,+EACD;CAED,MAAM,OAAO,mCACZ,OACA,mCAAmC,OAAO,MAAM,iBAAiB,CAClE;CACA,MAAM,GAAG,kBAAkB;EAC1B,KAAK,MAAM,OAAO,MAAM,MAAM,oBAAoB,IAAI,IAAI,MAAM,OAAO;CACxE,CAAC,CAAC,CAAC;CACH,OAAO;EACN,IAAI;EACJ,GAAG;EACH,yBAAyB,KAAK;EAC9B,sBAAsB,0BAA0B,KAAK;CACtD;AACD;AAMA,IAAM,gCAAgC;AAEtC,SAAS,cAAc,OAA8D;CACpF,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,gCAAgC,GAAI,EAAA,CAAE,YAAY;CACvF,MAAM,OAAO,MAAM,GACjB,QACA;;;;;6BAMD,CAAC,CACA,IAAI,MAAM;CAKZ,MAAM,sBAAM,IAAI,IAAyC;CACzD,KAAK,MAAM,OAAO,MAAM;EACvB,MAAM,KAAK,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,IAAI;EACT,IAAI,IAAI,IAAI;GAAE,IAAI,OAAO,IAAI,UAAU,CAAC;GAAG,KAAK,OAAO,IAAI,WAAW,CAAC;EAAE,CAAC;CAC3E;CACA,OAAO;AACR;AAMA,SAAS,YAAY,OAAgB,UAAU,0BAAmC;CACjF,MAAM,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;CACrC,IAAI,CAAC,KAAK,OAAO;CACjB,MAAM,aAAa,IAAI,QAAQ,KAAK,QAAQ;CAC5C,MAAM,YAAY,2BAA2B,KAAK,GAAG;CACrD,MAAM,KAAK,IAAI,KAAK,YAAY,aAAa,GAAG,WAAW,OAAO;CAClE,IAAI,OAAO,MAAM,GAAG,QAAQ,CAAC,GAAG,OAAO;CACvC,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG,QAAQ,KAAK;CAC3C,OAAO,QAAQ,KAAK,QAAQ;AAC7B;AAEA,SAAS,WAAW,MAAwD;CAC3E,MAAM,aAAa,KAAK;CACxB,MAAM,aAAa,KAAK;CACxB,MAAM,WAAW,QAAQ,KAAK,SAAS;CAEvC,MAAM,YAAY,YAAY,UAAU;CACxC,MAAM,YAAY,YAAY,UAAU;CAExC,IAAI;CACJ,IAAI,YAAY,EAAE,aAAa,YAAY,YAAY;MAClD,IAAI,UAAU,YAAY;MAC1B,IAAI,aAAa,WAAW,YAAY;MACxC,IAAI,cAAc,YAAY,YAAY;MAC1C,YAAY;CAKjB,OAAO;EACN,aAJkB,WAAW,UAAU,YAAY,OAAO,aAAa,UAAU;EAKjF,aAJkB,YAAY,OAAO,aAAa,UAAU;EAK5D,YAAY;EACZ,OAAO,aAAa;EACpB,cAAc;EACd,cAAc;CACf;AACD;AAEA,SAAS,cAAc,SAA0C;CAChE,IAAI,QAAQ,IAAI,OAAO;CACvB,IAAI,QAAQ,OAAO,OAAO;CAC1B,OAAO;AACR;AAEA,SAAS,kBAAkB,QAAuD;CACjF,IAAI;EACH,MAAM,MAAM,aAAa,KAAK,QAAQ,MAAM,GAAG,YAAY,GAAG,MAAM;EACpE,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,SAAS,UAC7D,OAAO;GAAE,MAAM,OAAO;GAAM,MAAM,OAAO;EAAK;CAEhD,QAAQ,CAER;CACA,OAAO;AACR;AAEA,IAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCpB,SAAS,yBAAyB,GAAY;CAC7C,MAAM,SAAS,EAAE,IAAI,OAAO,sBAAsB,KAAK;CACvD,OAAO,wBAAwB,uBAAuB,wBAAwB,MAAM,CAAC;AACtF;;;;;;;;AASA,SAAgB,mBAAmB,UAAwB,OAAiC,CAAC,GAAG;CAC/F,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,iBAAiB,KAAK,kBAAkB;CAE9C,SAAS,oBAAoB,GAAY,KAAa,eAAwB;EAC7E,IAAI,CAAC,gBAAgB,OAAO;EAC5B,MAAM,SAAS,EAAE,IAAI,WAAW,SAAS,EAAE,IAAI,WAAW,UAAU,EAAE,IAAI,WAAW;EACrF,MAAM,SAAS,eAAe,QAAQ,MACrC,GAAG,EAAE,IAAI,OAAO,GAAG,gBAAgB,SAAS,OAAO,GAAG,OACtD,gBACG,SACC,eAAe,YACf,eAAe,gBAChB,SACC,eAAe,2BACf,eAAe,4BACpB;EACA,IAAI,OAAO,SAAS,OAAO;EAC3B,EAAE,OAAO,eAAe,OAAO,OAAO,WAAW,CAAC;EAClD,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB,eAAe,OAAO;EAAY,GAAG,GAAG;CAChF;CAGA,IAAI,IAAI,eAAe,MAAM;EAC5B,MAAM,QAAQ,SAAS;EACvB,QAAQ,YAAY;GACnB,IAAI,OAAO,qBAAqB,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;GAC7D,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,iBAAiB;GACrB,IAAI,qBAAqB;GACzB,IAAI,mBAAkC;GACtC,IAAI,CAAC,KAAK,IAAI;IAEb,KAD0B,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KACvE,GAAkB;KACrB,iBAAiB;KAGjB,MAAM,mBAAmB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KACjE,IAAI,kBAAkB,OAAO;IAC9B,OAAO;KACN,iBAAiB;KACjB,MAAM,gBAAgB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KAC9D,IAAI,eAAe,OAAO;IAC3B;IACA,mBAAmB,KAAK;IACxB,OAAO,MAAM,+BAA+B,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;IACzE,qBAAqB;GACtB;GACA,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,CAAC,KAAK,IAAI;IAEb,MAAM,eAAe,SAAS,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KAAK,CAAC;IAMrF,IAAI,uBADH,gBAAiB,oBAAoB,QAAQ,qBAAqB,oBAElE,QAAQ,KACP,mCAAmC,KAAK,OAAO,sBAAsB,oBAAoB,OAAO,iBAAiB,aAAa,QAAQ,EAAE,IAAI,KAAK,UAAU,oBAAoB,EAAE,IAAI,OAAO,mBAAmB,CAAC,GACjN;SAEA,4BAA4B,kBAAkB,KAAK,MAAM;IAE1D,QACE,iBAAiB,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,MACjE,EAAE,KAAK,oBAAoB,GAAG,GAAG;GAEnC;GACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;GAC1D,IAAI,SAAS,OAAO;GAEpB,IAAI;IACH,IACC,EAAE,IAAI,OAAO,iCAAiC,MAAM,OACpD,oBAAoB,EAAE,IAAI,OAAO,oBAAoB,GAAG,gBAAgB,GAKxE,MAAM,sCAAsC,MAAM,IAAI,KAAA,GAAW;KAChE,SAAS,YAAY;KACrB,QAAQ,MAAM;IACf,CAAC;IAEF,MAAM,CAAC,UAAU,eAAe,qBAAqB,MAAM,IAAI,EAC9D,SAAS,YAAY,EACtB,CAAC;IACD,MAAM,YAAY,kBAAkB,MAAM,EAAE;IAC5C,MAAM,aAAa,yBAAyB,CAAC;IAC7C,MAAM,mBAAmB,uBAAuB,UAAU,IACvD,4BAA4B,MAAM,IAAI;KACtC,eAAe;KACf,cAAc,KAAK;IACpB,CAAC,IACA;IACH,MAAM,WAAoC;KACzC,WAAW;KACX,kBAAkB;KAClB;KACA,iBAAiB;KACjB,YAAY,uBAAuB,WAAW,IAAI;KAClD,iBAAiB;KACjB,eAAe;IAChB;IACA,IAAI,qBAAqB,MACxB,SAAS,oBAAoB;IAE9B,OAAO,EAAE,KAAK,QAAQ;GACvB,QAAQ;IACP,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC/C;EACD,EAAA,CAAG;CACJ,CAAC;CAGD,IAAI,IAAI,YAAY,MAAM;EACzB,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,qBAAqB,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;EAC/D,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;EACjE,IAAI,CAAC,KAAK,IAAI;GACb,4BAA4B,KAAK,MAAM;GACvC,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,oBAAoB,GAAG,GAAG;EACtF;EACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;EAC1D,IAAI,SAAS,OAAO;EACpB,MAAM,eAAe,KAAK;EAE1B,IAAI;GACH,MAAM,aAAa,EAAE,IAAI,MAAM,sBAAsB;GACrD,MAAM,aAAa,yBAAyB,CAAC;GAC7C,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GACjF,MAAM,eAAe,sBAAsB,YAAY,eAAe,KAAA,GAAW;IAChF,IAAI,MAAM;IACV;IACA,sBAAsB;IACtB;GACD,CAAC;GACD,IAAI,CAAC,aAAa,IACjB,OAAO,EAAE,KACR,8BACC,kBAAkB,MAAM,EAAE,GAC1B,aAAa,QACb,uBACA,IACD,GACA,GACD;GAED,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;GACtC,MAAM,WAAW,OAAO,SAAS,EAAE,IAAI,MAAM,OAAO,KAAK,OAAO,EAAE;GAClE,MAAM,gBAAgB,EAAE,IAAI,MAAM,YAAY;GAC9C,MAAM,aACL,iBAAiB,QAAQ,cAAc,KAAK,CAAC,CAAC,SAAS,IACpD,OAAO,SAAS,eAAe,EAAE,IACjC;GACJ,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,KAAK;GACjD,MAAM,iBAAiB,EAAE,IAAI,MAAM,iBAAiB,KAAK;GACzD,MAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,GAAI,CAAC,IAAI;GAClF,MAAM,SAAS,0BAA0B,MAAM,IAAI;IAClD;IACA;IACA,UAAU;IACV,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa;IACvD;IACA;IACA,SAAS,aAAa,SAAS,WAAW,aAAa,WAAW,KAAA;GACnE,CAAC;GACD,IAAI,OAAO,gBACV,OAAO,EAAE,KACR;IACC,OAAO;IACP,iBAAiB;IACjB,GAAG,uBAAuB,OAAO,OAAO,aAAa,QAAQ;GAC9D,GACA,GACD;GAED,MAAM,EAAE,KAAK,YAAY,aAAa;GACtC,MAAM,WAAW,iBAAiB,OAAO,cAAc,eAAe,KAAK,EAC1E,uBAAuB,oBACtB,EAAE,IAAI,OAAO,oBAAoB,GACjC,gBACD,EACD,CAAC;GACD,OAAO,EAAE,KAAK;IACb,gBAAgB;IAChB,iBAAiB;IACjB,UAAU,aAAa;IACvB,YAAY,SAAS;IACrB,aAAa,SAAS;IACtB,iBAAiB,SAAS;IAC1B,uBAAuB,SAAS;IAChC,KAAK,SAAS;IACd,aAAa;IACb,SAAS,SAAS;IAClB,gBAAgB,SAAS;GAC1B,CAAC;EACF,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAC/C;CACD,CAAC;CAGD,IAAI,IAAI,iBAAiB,MAAM;EAC9B,MAAM,QAAQ,SAAS;EACvB,QAAQ,YAAY;GACnB,IAAI,OAAO,qBAAqB,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;GAC7D,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,iBAAiB;GACrB,IAAI,qBAAqB;GACzB,IAAI,mBAAkC;GACtC,IAAI,CAAC,KAAK,IAAI;IAEb,KAD0B,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KACvE,GAAkB;KACrB,iBAAiB;KAGjB,MAAM,mBAAmB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KACjE,IAAI,kBAAkB,OAAO;IAC9B,OAAO;KACN,iBAAiB;KACjB,MAAM,gBAAgB,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK;KAC9D,IAAI,eAAe,OAAO;IAC3B;IACA,mBAAmB,KAAK;IACxB,OAAO,MAAM,+BAA+B,OAAO,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;IACzE,qBAAqB;GACtB;GACA,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;GACjE,IAAI,CAAC,KAAK,IAAI;IAEb,MAAM,eAAe,SAAS,EAAE,IAAI,OAAO,2BAA2B,KAAK,GAAA,CAAI,KAAK,CAAC;IAMrF,IAAI,uBADH,gBAAiB,oBAAoB,QAAQ,qBAAqB,oBAElE,QAAQ,KACP,mCAAmC,KAAK,OAAO,sBAAsB,oBAAoB,OAAO,iBAAiB,aAAa,QAAQ,EAAE,IAAI,KAAK,UAAU,oBAAoB,EAAE,IAAI,OAAO,mBAAmB,CAAC,GACjN;SAEA,4BAA4B,kBAAkB,KAAK,MAAM;IAE1D,QACE,iBAAiB,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,MACjE,EAAE,KAAK,oBAAoB,GAAG,GAAG;GAEnC;GACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;GAC1D,IAAI,SAAS,OAAO;GAEpB,IAAI;IACH,MAAM,aAAa,EAAE,IAAI,MAAM,sBAAsB;IACrD,MAAM,aAAa,yBAAyB,CAAC;IAC7C,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IACjF,MAAM,eAAe,sBAAsB,YAAY,eAAe,KAAA,GAAW;KAChF,IAAI,MAAM;KACV;KACA,sBAAsB;KACtB,cAAc,KAAK;IACpB,CAAC;IACD,IAAI,CAAC,aAAa,IACjB,OAAO,EAAE,KACR,8BACC,kBAAkB,MAAM,EAAE,GAC1B,aAAa,QACb,uBACA,IACD,GACA,GACD;IAED,MAAM,gBAAgB,EAAE,IAAI,MAAM,YAAY;IAC9C,MAAM,aACL,iBAAiB,QAAQ,cAAc,KAAK,CAAC,CAAC,SAAS,IACpD,OAAO,SAAS,eAAe,EAAE,IACjC;IACJ,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,KAAK;IACjD,MAAM,iBAAiB,EAAE,IAAI,MAAM,iBAAiB,KAAK;IACzD,MAAM,YAAY,EAAE,IAAI,MAAM,YAAY,KAAK;IAC/C,MAAM,WAAW,OAAO,SAAS,EAAE,IAAI,MAAM,OAAO,KAAK,OAAO,EAAE;IAElE,MAAM,QAAQ,OAAO,SAAS,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,GAAI,CAAC,IAAI;IAElF,IAAI,cAAc,QAAQ,CAAC,OAAO,SAAS,UAAU,GACpD,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAEnD,IAAI,CAAC,YACJ,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IAGpD,MAAM,SAAS,8BAA8B,MAAM,IAAI;KACtD;KACA;KACA;KACA;KACA;KACA,cAAc,KAAK;KACnB,SAAS,aAAa,SAAS,WAAW,aAAa,WAAW,KAAA;IACnE,CAAC;IAED,OAAO,EAAE,KAAK;KACb,UAAU,aAAa;KACvB,YAAY,OAAO,SAAS;KAC5B,aAAa,OAAO,SAAS;KAC7B,iBAAiB,OAAO,SAAS;KACjC,uBAAuB,OAAO,SAAS;KACvC,iBAAiB;KACjB,OAAO,OAAO;KACd,iBAAiB,OAAO;KACxB,UAAU,OAAO;IAClB,CAAC;GACF,SAAS,KAAK;IACb,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;IACrD,IAAI,YAAY,yBAAyB,YAAY,qBACpD,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,GAAG;IAEtC,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC/C;EACD,EAAA,CAAG;CACJ,CAAC;CAGD,IAAI,KAAK,WAAW,OAAO,MAAM;EAChC,MAAM,QAAQ,SAAS;EACvB,MAAM,MAAM,MAAM,wBAAwB,EAAE,IAAI,KAAK,mBAAmB;EACxE,IAAI,OAAO,MACV,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAGlD,MAAM,OAAO,qBAAqB,OAAO,EAAE,KAAK,GAAG;EACnD,IAAI,oBAAoB,IAAI,GAAG,OAAO,0BAA0B,CAAC;EACjE,IAAI,CAAC,KAAK,IAAI;GACb,4BAA4B,KAAK,MAAM;GACvC,OAAO,oBAAoB,GAAG,EAAE,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,oBAAoB,GAAG,GAAG;EACtF;EACA,MAAM,UAAU,oBAAoB,GAAG,KAAK,UAAU,IAAI;EAC1D,IAAI,SAAS,OAAO;EACpB,MAAM,eAAe,KAAK;EAE1B,IAAI;EACJ,IAAI;GACH,MAAM,SAAS,KAAK,MAAM,IAAI,SAAS,OAAO,CAAC;GAC/C,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;GAE7C,OAAO;EACR,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EAEA,MAAM,aAAa,wBAClB,uBACA,wBAAwB,KAAK,eAAe,CAC7C;EACA,MAAM,CAAC,iBAAiB,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;EACjF,MAAM,eAAe,sBAAsB,KAAK,UAAU,OAAO,OAAO,MAAM,UAAU,GAAG;GAC1F,IAAI,MAAM;GACV;GACA,sBAAsB;GACtB;EACD,CAAC;EACD,IAAI,CAAC,aAAa,IACjB,OAAO,EAAE,KACR,8BACC,kBAAkB,MAAM,EAAE,GAC1B,aAAa,QACb,uBACA,IACD,GACA,GACD;EAED,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,GAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,cAAc,GAAG,GAAG;EAE5C,IAAI,KAAK,IAAI,SAAS,cACrB,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAG7C,MAAM,gBAAgB,sBAAsB,IAAI;EAChD,MAAM,eAAe,sBAAsB,KAAK,aAAa;EAC7D,MAAM,cAAc,cAAc,QAAQ,OAAO,GAAG,YAAY,gBAAgB;EAChF,IAAI,YAAY,SAAS,KAAK,CAAC,aAAa,SAAS,gBAAgB,GACpE,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;EAE7D,IAAI;GACH,KAAK,MAAM,MAAM,aAAa,0BAA0B,EAAE;EAC3D,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;EACzD;EACA,KAAK,MAAM,MAAM,eAChB,IAAI,GAAG,cAAc,gBAAgB,GAAG,oBAAoB,cAC3D,OAAO,EAAE,KACR;GACC,OAAO;GACP,QAAQ;GACR,OAAO,GAAG;EACX,GACA,GACD;EAMF,MAAM,WAAW,iBAAiB,OAAO,cAAc,eAAe,eAAe;GACpF,kBAAkB;GAClB,uBAAuB,aAAa,SAAS,gBAAgB;EAC9D,CAAC;EAGD,MAAM,WAAW,2BAA2B,MAAM,IAAI,eAAe,eAAe;GACnF,SAAS,eAAe;GACxB;EACD,CAAC;EACD,IAAI,UACH,OAAO,EAAE,KACR;GACC,OAAO;GACP,QAAQ,SAAS,WAAW,EAAE,EAAE,UAAU;GAC1C,YAAY,SAAS;GACrB,iBAAiB;GACjB,UAAU,aAAa;EACxB,GACA,GACD;EAGD,MAAM,SAAS,oBAAoB,MAAM,IAAI,SAAS,SAAS,eAAe,MAAM,OAAO;EAC3F,MAAM,UAAU,OAAO,UAAU,SAAS;EAC1C,OAAO,EAAE,KAAK;GACb,GAAG;GACH;GACA,gBAAgB,SAAS;GACzB,iBAAiB;GACjB,UAAU,aAAa;EACxB,CAAC;CACF,CAAC;CAED,OAAO;AACR;AAEA,eAAe,kDAA8F;CAC5G,MAAM,SAAS,0BAA0B;CACzC,MAAM,8BACL,OAAO,mBAAmB,SAAS,KAAK,OAAO,sBAAsB,SAAS;CAC/E,MAAM,YAAY,OAAO,mBAAmB,KAAK;CACjD,MAAM,cAAc,OAAO,2BAA2B,KAAK;CAC3D,MAAM,WAAW,CAChB,GAAG,IAAI,IAAI,OAAO,sBAAsB,KAAK,YAAY,QAAQ,KAAK,CAAC,CAAC,CACzE,CAAC,CAAC,OAAO,OAAO;CAChB,IAAI,CAAC,6BACJ,OAAO;EACN,cAAc;EACd,eAAe;EACf,aAAa,CAAC;CACf;CAED,IAAI,CAAC,aAAa,CAAC,eAAe,SAAS,WAAW,GACrD,OAAO;EACN,cAAc;EACd,eAAe;EACf,aAAa,CAAC;CACf;CAED,IAAI,SAAS,SAAS,IACrB,OAAO;EACN,cAAc;EACd,eAAe;EACf,aAAa,CAAC;CACf;CAED,IAAI;EACH,MAAM,eACL,MAAM,QAAQ,IACb,SAAS,KAAK,YACb,6BAA6B;GAC5B;GACA,iBAAiB;GACjB;GACA;EACD,CAAC,CACF,CACD,EAAA,CACC,KAAK;EACP,IAAI,YAAY,SAAS,KACxB,OAAO;GACN,cAAc;GACd,eAAe;GACf,aAAa,CAAC;EACf;EAED,OAAO;GAAE,cAAc;GAAa,eAAe;GAAM;EAAY;CACtE,QAAQ;EACP,OAAO;GACN,cAAc;GACd,eAAe;GACf,aAAa,CAAC;EACf;CACD;AACD;;;;;;;;AASA,SAAgB,WACf,UACA,sBACA,UAA6B,CAAC,GAC7B;CACD,MAAM,MAAM,IAAI,KAAK;CACrB,MAAM,wBAAwB,QAAQ,yBAAyB;CAC/D,MAAM,yBAAyB,QAAQ,0BAA0B;CACjE,MAAM,0BACL,QAAQ,yCACR;CACD,MAAM,6BAA6B,YAAwD;EAC1F,IAAI;GACH,OAAO,MAAM,wBAAwB;EACtC,QAAQ;GACP,OAAO;IACN,cAAc;IACd,eAAe;IACf,aAAa,CAAC;GACf;EACD;CACD;CACA,MAAM,sBAAsB,OAAO,UAAuB;EACzD,IAAI,qBAAqB;EACzB,IAAI;GACH,qBAAqB,OAAO,sBAAsB,CAAC,CAAC,oBAAoB,EAAE;EAC3E,QAAQ;GACP,qBAAqB;EACtB;EACA,OAAO;GACN,eAAe,MAAM;GACrB,kBAAkB,mBAAmB;IACpC,cAAc;IACd,QAAQ,SAAS;IACjB,cAAc,MAAM;GACrB,CAAC;GACD,aAAa,MAAM,2BAA2B;EAC/C;CACD;CAEA,IAAI,IAAI,kDAAkD,OAAO,MAAM;EACtE,MAAM,QAAQ,SAAS;EACvB,0BAA0B,KAAK;EAC/B,OAAO,EAAE,KAAK,4BAA4B,MAAM,IAAI,MAAM,oBAAoB,KAAK,CAAC,CAAC;CACtF,CAAC;CAED,IAAI,MAAM,+CAA+C,OAAO,MAAM;EACrE,MAAM,MAAM,MAAM,wBAAwB,EAAE,IAAI,KAAK,IAAK;EAC1D,IAAI,CAAC,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;EACpE,IAAI;EACJ,IAAI;GACH,MAAM,SAAS,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;GAC9C,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAChE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;GAE3D,OAAO;EACR,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;EAC3D;EACA,IACC,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,KAC7B,CAAC,OAAO,OAAO,MAAM,aAAa,KAClC,CAAC,OAAO,OAAO,MAAM,qBAAqB,KAC1C,OAAO,KAAK,gBAAgB,YAC5B,OAAO,KAAK,wBAAwB,UAEpC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAA6B,GAAG,GAAG;EAE3D,IAAI;GACH,MAAM,QAAQ,SAAS;GACvB,MAAM,SAAS,sBAAsB;GACrC,MAAM,gBAAgB,OAAO,qBAC1B,aAAa,OAAO,kBAAkB,IACtC;GACH,MAAM,oCAAoC,gBACvC,wBAAwB,aAAa,IACrC;GACH,IAAI,8BAAsF,CAAC;GAC3F,IAAI,eACH,IAAI;IAGH,8BAA8B,oCAC7B,OACA,OAAO,oBACP,OAAO,qBACR;GACD,QAAQ;IAGP,8BAA8B,CAAC;GAChC;GAED,MAAM,SAAS,MAAM,0BAA0B,MAAM,IAAI;IACxD,QAAQ,EAAE,IAAI,MAAM,QAAQ;IAC5B,aAAa,KAAK;IAClB,qBAAqB,KAAK;IAC1B;IACA,2BAA2B,MAAM,UAAU;KAC1C,MAAM,iBAAiB,wBAAwB,IAAI;KACnD,MAAM,kBAAkB,wBAAwB,KAAK;KACrD,OAAO,mBAAmB,QAAQ,mBAAmB;IACtD;IACA,wBAAwB,OAAO,OAAO,0BAA0B;KAC/D,MAAM,gCAAgC,wBAAwB,MAAM,aAAa;KACjF,IACC,CAAC,OAAO,sBACR,CAAC,OAAO,8BACR,CAAC,qCACD,CAAC,iCACD,kCAAkC,mCAElC,OAAO;KAER,MAAM,UAAU,MAAM,uBAAuB;MAC5C,SAAS,MAAM;MACf,aAAa;MACb,WAAW,OAAO;MAClB,aAAa,OAAO;KACrB,CAAC;KACD,OACC,SAAS,aAAa,MAAM,WAAW,QAAQ,iBAAiB;IAElE;GACD,CAAC;GACD,IAAI;IACH,QAAQ,+BAA+B;GACxC,QAAQ,CAER;GACA,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,EAAE,iBAAiB,iCACtB,OAAO,EAAE,KAAK,EAAE,OAAO,qBAA8B,GAAG,GAAG;GAE5D,MAAM,SACL,MAAM,SAAS,sBACZ,MACA,MAAM,SAAS,mBACd,MACA,MAAM,SAAS,oCACf,MAAM,SAAS,+BACf,MAAM,SAAS,uBACd,MACA;GACN,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,KAAK,GAAG,MAAM;EAC5C;CACD,CAAC;CAED,MAAM,6BACL,OACA,WACyF;EACzF,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;EACxE,MAAM,OAAO;EACb,MAAM,UAAU,IAAI,IAAI,SAAS,CAAC,YAAY,yBAAyB,IAAI,CAAC,UAAU,CAAC;EACvF,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,QAAQ,KAAK,QAAQ,GACrF,OAAO;EAER,MAAM,WAAW,KAAK,SAAS,KAAK,UAAU;GAC7C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;GACxE,MAAM,UAAU;GAChB,MAAM,8BAAc,IAAI,IAAI;IAAC;IAAY;IAAoB;IAAa;GAAa,CAAC;GACxF,IACC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,IAAI,GAAG,CAAC,KACxD,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,qBAAqB,YACpC,OAAO,QAAQ,cAAc,aAC5B,OAAO,OAAO,SAAS,aAAa,KAAK,OAAO,QAAQ,gBAAgB,WAEzE,OAAO;GAER,OAAO;IACN,UAAU,QAAQ;IAClB,kBAAkB,QAAQ;IAC1B,WAAW,QAAQ;IACnB,GAAI,OAAO,QAAQ,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;GACxF;EACD,CAAC;EACD,IAAI,SAAS,MAAM,YAAY,WAAW,IAAI,GAAG,OAAO;EACxD,IAAI,UAAU,OAAO,KAAK,4BAA4B,UAAU,OAAO;EACvE,OAAO;GACI;GACV,GAAI,SAAS,EAAE,yBAAyB,KAAK,wBAAkC,IAAI,CAAC;EACrF;CACD;CAEA,IAAI,KAAK,yDAAyD,OAAO,MAAM;EAC9E,MAAM,OAAO,0BAA0B,MAAM,oBAAoB,CAAC,GAAG,KAAK;EAC1E,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAClE,MAAM,QAAQ,SAAS;EACvB,IAAI;GACH,0BAA0B,KAAK;GAC/B,MAAM,SAAS,8BACd,MAAM,IACN,MAAM,oBAAoB,KAAK,GAC/B,IACD;GACA,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC1D,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC5D,IAAI,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC3D,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GACrD;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACvD;CACD,CAAC;CAED,IAAI,KAAK,wDAAwD,OAAO,MAAM;EAC7E,MAAM,OAAO,0BAA0B,MAAM,oBAAoB,CAAC,GAAG,IAAI;EACzE,IAAI,CAAC,QAAQ,EAAE,6BAA6B,OAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAExD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,0BAA0B,KAAK;GAC/B,MAAM,SAAS,6BACd,MAAM,IACN;IAAE,cAAc,MAAM;IAAS,eAAe,MAAM;GAAS,GAC7D,MAAM,oBAAoB,KAAK,GAC/B,IACD;GACA,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC1D,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC5D,IAAI,OAAO,WAAW,WAAW,OAAO,WAAW,YAClD,OAAO,EAAE,KAAK,QAAQ,GAAG;GAE1B,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;GACpD;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EACtD,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAGD,IAAI,IAAI,oBAAoB,OAAO,MAAM;EACxC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,aAAgB,OAAe,OAAmB;IACvD,IAAI,QAAQ,IAAI,8BAA8B,KAAK,OAAO,GAAG;IAC7D,MAAM,YAAY,KAAK,IAAI;IAC3B,QAAQ,KAAK,yBAAyB,MAAM,OAAO;IACnD,IAAI;KACH,OAAO,GAAG;IACX,UAAU;KACT,QAAQ,KAAK,yBAAyB,MAAM,GAAG,KAAK,IAAI,IAAI,UAAU,GAAG;IAC1E;GACD;GACA,MAAM,WAAW,UAAU,EAAE,IAAI,MAAM,oBAAoB,CAAC;GAC5D,MAAM,sBAAsB,UAAU,EAAE,IAAI,MAAM,qBAAqB,CAAC;GACxE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK;GAC1C,MAAM,SAAS,UAAU,mCAAmC,0BAA0B,CAAC;GACvF,MAAM,YAAY,UAAU,2BAA2B,kBAAkB,MAAM,EAAE,CAAC;GAElF,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GAEtC,MAAM,YAAY,UAAU,mBAC3B,EACE,OAAO;IACP,WAAW,OAAO,WAAW;IAC7B,aAAa,OAAO,WAAW;GAChC,CAAC,CAAC,CACD,KAAK,OAAO,UAAU,CAAC,CACvB,MAAM,CAAC,CAAC,CACR,IAAI,CACP;GAEA,MAAM,cAAc,UAAU,qBAC7B,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,eAAe,CAAC,CAAC,MAAM,GAAG,OAAO,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACrF;GAEA,MAAM,eAAe,UAAU,sBAC9B,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,CAAC,CAAC,IAAI,CACzD;GACA,IAAI;GAYJ,IAAI;IACH,iBAAiB,UAAU,wBAC1B,EACE,OAAO,CAAC,CACR,KAAK,OAAO,kBAAkB,CAAC,CAC/B,MAAM,GAAG,OAAO,mBAAmB,IAAI,CAAC,CAAC,CAAC,CAC1C,IAAI,CACP;GACD,QAAQ;IACP,iBAAiB,KAAA;GAClB;GAEA,MAAM,cAAc,UAAU,qBAC7B,EACE,OAAO,EAAE,cAAc,IAAI,OAAO,UAAU,YAAY,EAAE,CAAC,CAAC,CAC5D,KAAK,OAAO,SAAS,CAAC,CACtB,IAAI,CACP;GAKA,MAAM,gBAAgB,UAAU,uBAC/B,+BAA+B,4BAA4B,MAAM,EAAE,GAAG,QAAQ,CAC/E;GACA,MAAM,yBAAyB,UAAU,qCACxC,mDAAmD,MAAM,EAAE,CAC5D;GACA,MAAM,wBAAwB;IAC7B,QAAQ,uBAAuB;IAC/B,GAAI,WACD,EACA,QAAQ,uBAAuB,OAAO,KAAK,WAAW;KACrD,gBAAgB,MAAM;KACtB,UAAU,MAAM;KAChB,MAAM,MAAM;KACZ,cAAc,MAAM;KACpB,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,eAAe,MAAM;KACrB,cAAc,MAAM;KACpB,aAAa,MAAM;KACnB,kBAAkB,MAAM;KACxB,YAAY,MAAM;IACnB,EAAE,EACH,IACC,CAAC;GACL;GAEA,MAAM,YAAY,aAAa;GAC/B,MAAM,cAAc,aAAa;GACjC,MAAM,WAAW,aAAa;GAC9B,MAAM,gBAAgB,UAAU,2BAA2B,kBAAkB,MAAM,MAAM,CAAC;GAS1F,MAAM,gBAAgB,QAAQ,aAAa;GAC3C,MAAM,eAAe,gBAClB,qBAAqB,cAAc,KAAK,GAAG,cAAc,SACzD;GAEH,IAAI,mBAAmB;GACvB,IAAI,CAAC,OAAO,aACX,mBAAmB;QACb,IAAI,cAAc,CAAC,YAAY,OAAO,QAAQ,IAAI,OAAO,eAAe,EAAE,IAChF,mBAAmB;QACb,IAAI,CAAC,eACX,mBAAmB;GAGpB,MAAM,gBAAyC;IAC9C,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,WAAW;KACV,SAAS,OAAO;KAChB,cAAc,OAAO;KACrB,aAAa,OAAO;KACpB,uBACC,UAAU,yBACT,gBAAgB,yBACjB;KACD,aAAc,gBAAgB,eAAiC;KAC/D,kBACC,OAAO,gBAAgB,qBAAqB,WACzC,eAAe,mBACf;KACJ,kBACC,OAAO,gBAAgB,qBAAqB,WACzC,eAAe,mBACf;KACJ,6BACC,OAAO,gBAAgB,gCAAgC,WACpD,eAAe,8BACf;KACJ,4BACC,OAAO,gBAAgB,+BAA+B,WACnD,eAAe,6BACf;KACJ,YAAa,gBAAgB,cAAgC;KAC7D,eAAgB,gBAAgB,iBAAmC;IACpE;IACA,gBAAgB;IAChB,8CAA8C;IAC9C,YAAY,OAAO,cAAc,SAAS,CAAC;IAC3C,cAAc,aAAa,gBAAgB;IAC3C,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,uBACC,OAAO,oBAAoB,SAAS,KAAK,OAAO,oBAAoB,SAAS;IAC9E,gBAAgB;KACf,SAAS,OAAO;KAChB,SAAS,OAAO;IACjB;IACA,qBAAqB,mBACpB,OACC,WAAW,aAA2C,MACvD,QACD;IACA,UAAU,CAAC;GACZ;GAEA,IAAI,UAAU;IACb,cAAc,YAAY,WAAW,aAAa;IAClD,cAAc,cAAc,WAAW,eAAe;IACtD,cAAc,OAAO,GAAG,OAAO,SAAS,GAAG,OAAO;IAClD,cAAc,oBAAoB;IAClC,cAAc,uBAAuB;IACrC,cAAc,oBAAoB;GACnC;GAEA,MAAM,gBAAgB,uBAAuB,KAAK;GAClD,IAAI,eAAe,SAAS,cAAc,UAAU,WAAW;IAC9D,mBAAmB,cAAc;IACjC,cAAc,eAAe;IAC7B,cAAc,iBAAiB,cAAc,UAAU,cAAc;IACrE,cAAc,gBAAgB,cAAc,UAAU;GACvD;GAEA,MAAM,sBAAsB,MAAM,0BAA0B,OAAO,MAAM;GACzE,MAAM,cAAc,UAAU,qBAC7B,wBAAwB,qBAAqB,QAAQ,CACtD;GAGA,MAAM,WAAW,UAChB,kBACM,MAAM,GAAG,QAAQ,WAAW,CAAC,CAAC,IAAI,CACzC;GACA,MAAM,kBAAkB,UAAU,uBAAuB,cAAc,KAAK,CAAC;GAC7E,MAAM,wBAAwB,UAAU,qCACvC,4BAA4B,KAAK,CAClC;GACA,MAAM,aAAa,SAAS,KAAK,QAAQ;IACxC,MAAM,OAAO,WACZ,OACA,KACA,UACA,iBACA,uBACC,WAAW,aAA2C,IACxD;IACA,KAAK,SAAS,WAAW,IAAI;IAC7B,OAAO;GACR,CAAC;GAED,MAAM,WAAoC,CAAC;GAC3C,KAAK,MAAM,QAAQ,YAClB,SAAS,OAAO,KAAK,cAAc,KAAK,KAAK;GAI9C,MAAM,cAAc,UAAU,qBAC7B,EACE,OAAO;IACP,gBAAgB,OAAO,aAAa;IACpC,IAAI,OAAO,aAAa;IACxB,OAAO,OAAO,aAAa;IAC3B,YAAY,OAAO,aAAa;IAChC,aAAa,OAAO,aAAa;IACjC,QAAQ,OAAO,aAAa;IAC5B,SAAS,OAAO,aAAa;IAC7B,uBAAuB,OAAO,aAAa;IAC3C,sBAAsB,OAAO,aAAa;IAC1C,4BAA4B,OAAO,aAAa;GACjD,CAAC,CAAC,CACD,KAAK,OAAO,YAAY,CAAC,CACzB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,CAAC,CAC9C,MAAM,EAAE,CAAC,CACT,IAAI,CACP;GACA,MAAM,iCAAiB,IAAI,IAAsB;GASjD,UAPC,yBAEC,MAAM,GAAG,QAAQ,uDAAuD,CAAC,CAAC,IAAI,CAKhF,CAAA,CAAgB,SAAS,YAAY;IACpC,MAAM,QAAQ,aAAa,QAAQ,cAA+B;IAClE,IAAI,MAAM,QAAQ,eAAe,IAAI,OAAO,QAAQ,kBAAkB,EAAE,GAAG,KAAK;GACjF,CAAC;GACD,MAAM,gBAAgB,YAAY,KAAK,QAAQ;IAC9C,MAAM,QAAQ,WAAW,eAAe,IAAI,OAAO,IAAI,kBAAkB,EAAE,CAAC,IAAI,KAAA;IAChF,OAAO,kBAAkB,KAAK,UAAU,KAAK;GAC9C,CAAC;GACD,MAAM,qBAAqB,OAAO,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK;GAEpE,MAAM,cAAuC;IAC5C,GAAG;IACH,wBAAwB,yBAAyB,oBAAoB,MAAM,EAAE,GAAG,QAAQ;IACxF,OAAO;IACP,SAAS;IACT,MAAM,CAAC;IACP,MAAM,CAAC;GACR;GACA,MAAM,gBAAgB,UAAU,uBAAuB,MAAM,yBAAyB,CAAC;GACvF,MAAM,eAAe,UAAU,4BAA4B,0BAA0B,KAAK,CAAC;GAC3F,MAAM,gBAAgB,UAAU,uBAAuB,MAAM,qBAAqB,OAAO,CAAC;GAC1F,MAAM,gCAAgC,UAAU,uCAC/C,wCAAwC,KAAK,CAC9C;GACA,IAAI,eAA0C,CAAC;GAC/C,IAAI,uBAAuB,YAAY,OAAO,4BAC7C,IAAI;IACH,eAAe,MAAM,4BAA4B,MAAM;GACxD,QAAQ;IACP,eAAe,CAAC;GACjB;GAGD,IAAI,qBAAqB,QAAQ,mBAAmB,WAAW,kBAAkB,GAAG;IACnF,mBAAmB;IACnB,cAAc,eAAe;IAC7B,cAAc,gBAAgB,mBAAmB,QAAQ,qBAAqB,EAAE;IAChF,YAAY,eAAe;IAC3B,YAAY,gBAAgB,mBAAmB,QAAQ,qBAAqB,EAAE;GAC/E;GAEA,IAAI,qBAAqB,MAAM;IAC9B,MAAM,aAAa,IAAI,IACtB,WAAW,KAAK,SACf,OAAQ,KAAK,QAAgD,cAAc,EAAE,CAC9E,CACD;IACA,MAAM,uBAAuB,QAC5B,cAAc,MACb,cAAc,EAAE,CAAC,WAAW,WAC5B,YAAY,cAAc,EAAE,CAAC,WAAW,CAC1C;IACA,MAAM,aACL,WAAW,SAAS,KACpB,WAAW,OACT,SACA,OAAQ,KAAK,QAAoC,cAAc,EAAE,MAAM,SACzE;IACD,IAAI,sBAAsB;KAEzB,IADoB,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,GACxD,mBAAmB;UAC/B,IAAI,YAAY,mBAAmB;UACnC,IAAI,WAAW,SAAS,GAAG,mBAAmB;IACpD,OAAO,IAAI,WAAW,IAAI,UAAU,GACnC,mBAAmB;SACb,IAAI,YACV,mBAAmB;SACb,IAAI,WAAW,SAAS,KAAK,CAAC,WAAW,IAAI,QAAQ,GAC3D,mBAAmB;IAEpB,cAAc,eAAe;IAC7B,YAAY,eAAe;GAC5B;GAEA,MAAM,kBAA2C;IAChD,GAAG;IACH,QAAQ;IACR,OAAO;IACP,UAAU,cAAc,MAAM,GAAG,CAAC;IAClC,gBAAgB;IAChB,sBAAsB;IACtB,gBAAgB;IAChB,iCAAiC;IACjC;GACD;GACA,IAAI,uBAAuB,UAC1B,gBAAgB,gBAAgB;GAEjC,OAAO,EAAE,KAAK,eAAe;EAC9B;CACD,CAAC;CAGD,IAAI,IAAI,oBAAoB,MAAM;EACjC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,WAAW,UAAU,EAAE,IAAI,MAAM,oBAAoB,CAAC;GAC5D,MAAM,OAAO,MAAM,GAAG,QAAQ,WAAW,CAAC,CAAC,IAAI;GAC/C,MAAM,kBAAkB,cAAc,KAAK;GAC3C,MAAM,wBAAwB,4BAA4B,KAAK;GAO/D,MAAM,gBANI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACnB,CAAA,CAChB,OAAO,EAAE,WAAW,OAAO,WAAW,UAAU,CAAC,CAAC,CAClD,KAAK,OAAO,UAAU,CAAC,CACvB,MAAM,CAAC,CAAC,CACR,IACqB,CAAA,EAAW,aAA2C;GAE7E,MAAM,QAAQ,KAAK,KAAK,QACvB,WAAW,OAAO,KAAK,UAAU,iBAAiB,uBAAuB,aAAa,CACvF;GACA,OAAO,EAAE,KAAK;IAAE,OAAO;IAAO,UAAU,CAAC;GAAS,CAAC;EACpD;CACD,CAAC;CAQD,IAAI,IAAI,qDAAqD,MAAM;EAClE,MAAM,QAAQ,SAAS;EACvB,MAAM,eAAe,OAAO,EAAE,IAAI,MAAM,gBAAgB,KAAK,EAAE,CAAC,CAAC,KAAK;EACtE,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;EACzE,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,GAAG;EAChD,IAAI,SAAS,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;EAC7D,MAAM,kBAAkB,SAAS,EAAE,IAAI,MAAM,cAAc,GAAG,IAAO;EAKrE,MAAM,eAAe,KAAK,IAAI,KAAK,IAAI,iBAAiB,CAAC,GAAG,MAAiB;EAC7E,MAAM,WACL,eAAe,qBAAI,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,GAAM,EAAA,CAAE,YAAY,IAAI,KAAA;EACjF,MAAM,UAAU,2BAA2B,MAAM,IAAI;GACpD;GACA;GACA;EACD,CAAC;EAKD,MAAM,UAJY,gCAAgC,MAAM,IAAI;GAC3D;GACA;EACD,CACgB,CAAA,CAAU,MAAM;GAC/B,gBAAgB;GAChB,OAAO;GACP,WAAW,CAAC;GACZ,SAAS;EACV;EACA,OAAO,EAAE,KAAK;GACb,gBAAgB;GAChB;GACA,OAAO;EACR,CAAC;CACF,CAAC;CAGD,IAAI,IAAI,qBAAqB,MAAM;EAClC,MAAM,QAAQ,SAAS;EACvB;GACC,uBAAuB,KAAK;GAC5B,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,MAAM,gBAAgB,UAAU,EAAE,IAAI,MAAM,eAAe,CAAC;GAC5D,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM;GAC3C,MAAM,OAAO,gBACV,MAAM,QAAQ,OAAO,OAAO,YAAY,CAAC,CAAC,IAAI,IAC9C,MACC,MAAM,IAAI,GAAG,OAAO,OAAO,QAAQ,QAAQ,GAAG,GAAG,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,CAAC,CACvF,QAAQ,OAAO,OAAO,YAAY,CAAC,CACnC,IAAI;GACR,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,CAAC;EAC9B;CACD,CAAC;CAGD,IAAI,IAAI,uBAAuB,MAAM;EACpC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,IAAI,QAAQ,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE;GAC7C,IAAI,SAAS,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;GAC7D,QAAQ,KAAK,IAAI,OAAO,GAAG;GAC3B,MAAM,OAAO,EACX,OAAO;IACP,gBAAgB,OAAO,aAAa;IACpC,IAAI,OAAO,aAAa;IACxB,OAAO,OAAO,aAAa;IAC3B,YAAY,OAAO,aAAa;IAChC,aAAa,OAAO,aAAa;IACjC,QAAQ,OAAO,aAAa;IAC5B,SAAS,OAAO,aAAa;IAC7B,uBAAuB,OAAO,aAAa;IAC3C,sBAAsB,OAAO,aAAa;IAC1C,4BAA4B,OAAO,aAAa;GACjD,CAAC,CAAC,CACD,KAAK,OAAO,YAAY,CAAC,CACzB,QAAQ,KAAK,OAAO,aAAa,WAAW,CAAC,CAAC,CAC9C,MAAM,KAAK,CAAC,CACZ,IAAI;GACN,MAAM,WAAW,UAAU,EAAE,IAAI,MAAM,oBAAoB,CAAC;GAC5D,MAAM,QAAQ,KAAK,KAAK,QAAQ,kBAAkB,KAAK,QAAQ,CAAC;GAChE,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU,CAAC;GAAS,CAAC;EAC7C;CACD,CAAC;CAUD,IAAI,IAAI,sBAAsB,MAAM;EACnC,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,SAAS,0BAA0B;GACzC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,IAAI;GACJ,IAAI;GACJ,IAAI;GAEJ,IAAI;IACH,MAAM,CAAC,IAAI,MAAM,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1E,WAAW;IACX,cAAc;IAMd,YALY,EACV,OAAO,EAAE,YAAY,OAAO,WAAW,WAAW,CAAC,CAAC,CACpD,KAAK,OAAO,UAAU,CAAC,CACvB,MAAM,GAAG,OAAO,WAAW,WAAW,EAAE,CAAC,CAAC,CAC1C,IACU,CAAA,EAAK,cAAc;GAChC,QAAQ;IACP,OAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;GAC5D;GAEA,IAAI,CAAC,YAAY,CAAC,aACjB,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAGnD,OAAO,EAAE,KAAK;IACb,WAAW;IACX;IACA,YAAY,aAAa;IACzB,qBAAqB;IACrB,WAAW,0BAA0B,MAAM;GAC5C,CAAC;EACF;CACD,CAAC;CAOD,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC/C,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,IAAI;GACJ,IAAI;IACH,OAAO,MAAM,EAAE,IAAI,KAA8B;GAClD,QAAQ;IACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;GAC7C;GACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;GAC5D,MAAM,UAAU,OAAO,KAAK,QAAQ,EAAE;GACtC,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;GAC1E,IAAI,CAAC,QAAQ,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;GAClE,IAAI;GACJ,IAAI;IACH,OAAO,+BAA+B,SAAS,MAAM;GACtD,SAAS,OAAO;IACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,eAAe,GAAG,GAAG;GACtF;GAMA,IAAI,CALW,EACb,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACG,GAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC3D,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,KAAK,CAAC,CAAC,CACb,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;GACN,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;EAC3B;CACD,CAAC;CAED,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACtC,MAAM,QAAQ,SAAS;EACvB,IAAI,OAAgC,CAAC;EACrC,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,CAAC;EACT;EAEA,IAAI,CADW,0BACV,CAAA,CAAO,aACX,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;EAE9C,MAAM,UACL,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,KAAK,IAAI,KAAK,QAAQ,KAAK,IAAI;EACjF,MAAM,kBACL,OAAO,KAAK,mBAAmB,YAAY,KAAK,eAAe,KAAK,IACjE,KAAK,eAAe,KAAK,IACzB;EACJ,IAAI;EACJ,IAAI,SAAS;GACZ,MAAM,SAAS,2BAA2B,OAAO,OAAO;GACxD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GACjE,UAAU,CAAC,MAAM;EAClB,OAAO,IAAI,iBAIV,UAH0B,MAAM,GAC9B,QAAQ,gEAAgE,CAAC,CACzE,IAAI,eACI,CAAA,CACR,KAAK,QAAQ,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACrD,OAAO,OAAO;OAKhB,UAHoB,MAAM,GAAG,QAAQ,uCAAuC,CAAC,CAAC,IAGpE,CAAA,CAAY,KAAK,QAAQ,OAAO,IAAI,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO;EAE3F,MAAM,QAAQ,CAAC;EACf,KAAK,MAAM,UAAU,SAAS;GAI7B,MAAM,SAAS,MAAM,YAAY,MAAM,IAAI,QAAQ;IAClD,SAAS,YAAY;IACrB,QAAQ,MAAM;IACd,SAAS,MAAM;GAChB,CAAC;GACD,MAAM,KAAK;IACV,gBAAgB;IAChB,GAAG;IACH,YAAY,KAAA;IACZ,aAAa,sBAAsB,OAAO,UAAU;GACrD,CAAC;EACF;EACA,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;CAED,IAAI,KAAK,yBAAyB,OAAO,MAAM;EAC9C,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;EAC5D,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAC1E,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,IACvC,KAAK,QACJ,QAAQ,UAA2B,OAAO,UAAU,QAAQ,CAAC,CAC7D,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACf;EACH,MAAM,UAAU,MAAM,QAAQ,KAAK,OAAO,IACvC,KAAK,QACJ,QAAQ,UAA2B,OAAO,UAAU,QAAQ,CAAC,CAC7D,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO,IACf;EACH,MAAM,gBAAgB,QAAQ,KAAK,cAAc;EACjD,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EAMtC,IAAI,CALW,EACb,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACG,GAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAC3D,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI;GACJ,uBAAuB,gBAAgB,OAAO,KAAK,UAAU,WAAW,CAAC,CAAC;GAC1E,uBAAuB,gBAAgB,OAAO,KAAK,UAAU,WAAW,CAAC,CAAC;EAC3E,CAAC,CAAC,CACD,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,MAAM,MAAM,EACV,OAAO;GACP,uBAAuB,OAAO,UAAU;GACxC,uBAAuB,OAAO,UAAU;EACzC,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,IAAI,CAAC,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EACxD,OAAO,EAAE,KAAK;GACb,IAAI;GACJ,eAAe,oBAAoB,KAAK,uBAAuB,OAAO,YAAY,CAAC;EACpF,CAAC;CACF,CAAC;CAED,IAAI,IAAI,uCAAuC,MAAM;EACpD,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,GAAG,CAAC;EAC7D,OAAO,EAAE,KAAK;GACb,QAAQ,gCAAgC,MAAM,EAAE;GAChD,UAAU,iCAAiC,MAAM,EAAE;GACnD,UAAU,2BAA2B,MAAM,IAAI,EAAE,MAAM,CAAC;GACxD,wBAAwB;EACzB,CAAC;CACF,CAAC;CAED,IAAI,IAAI,6CAA6C,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,OAAO,EAAE,KACR,qCAAqC,MAAM,IAAI;GAC9C,cAAc,MAAM;GACpB,eAAe,MAAM;EACtB,CAAC,CACF;CACD,CAAC;CAED,IAAI,IAAI,yCAAyC,MAAM;EACtD,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,OAAO,EAAE,KACR,0BAA0B,MAAM,IAAI;GACnC,cAAc,MAAM;GACpB,eAAe,MAAM;EACtB,CAAC,CACF;CACD,CAAC;CAED,IAAI,IAAI,yCAAyC,MAAM;EACtD,MAAM,QAAQ,SAAS;EACvB,OAAO,EAAE,KAAK,0BAA0B,MAAM,EAAE,CAAC;CAClD,CAAC;CAED,IAAI,IAAI,wDAAwD,MAAM;EACrE,OAAO,EAAE,KAAK,wCAAwC,SAAS,CAAC,CAAC;CAClE,CAAC;CAED,IAAI,KAAK,+CAA+C,OAAO,MAAM;EACpE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI;GACH,OAAO,EAAE,KAAK,4BAA4B,MAAM,IAAI,IAAI,CAAC;EAC1D,SAAS,OAAO;GACf,IAAI,iBAAiB,iCAAiC;IACrD,IAAI,MAAM,WAAW,aACpB,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,UAAU,GAAG,GAAG;IAE9C,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,UAAU,GAAG,GAAG;GAC9C;GACA,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAClD;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;EACpD;CACD,CAAC;CAED,IAAI,KAAK,8CAA8C,OAAO,MAAM;EACnE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI;GACH,MAAM,UAAU,sCAAsC,IAAI;GAI1D,MAAM,UAAU,UACb,CACA,GAAG,IAAI,IACN,QAAQ,QAAQ,SAAS,WACxB,OAAO,UAAU,kBAAkB,SAAS,CAAC,OAAO,UAAU,MAAM,IAAI,CAAC,CAC1E,CACD,CACD,CAAC,CAAC,SAAS,IACV,CAAC;GACJ,MAAM,SAAS,OACd,UAC4D;IAC5D,MAAM,SAAS,QAAQ;IACvB,IAAI,CAAC,QAAQ,OAAO,2BAA2B,MAAM,IAAI,WAAW,IAAI;IACxE,OAAO,qCAAqC,MAAM,IAAI,cAAc,OAAO,QAAQ,CAAC,CAAC;GACtF;GACA,MAAM,SAAS,MAAM,OAAO,CAAC;GAC7B,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC1D,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;GAC5D,IAAI,OAAO,WAAW,WAAW,OAAO,WAAW,YAClD,OAAO,EAAE,KAAK,QAAQ,GAAG;GAE1B,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;GACjD;GACA,OAAO,EAAE,KACR;IACC,SAAS;IACT,QAAQ;IACR,sBAAsB;IACtB,WAAW;IACX,UAAU,CAAC;IACX,YAAY;IACZ,YAAY;GACb,GACA,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,iDAAiD,OAAO,MAAM;EACtE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC1D,IAAI;GACH,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;GAG9D,MAAM,cAAc,mCADL,8BADA,0BAC8B,CACU,GAAQ,IAAI;GACnE,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;GACvE,MAAM,WACL,SAAS,gBACN,2BAA2B,MAAM,gBAAgB,IACjD,2BAA2B,MAAM,oBAAoB;GACzD,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,mCAAmC;GAClE,IAAI,SAAS,gBAAgB,aAAa,MAAM,SAC/C,MAAM,IAAI,MAAM,0BAA0B;GAE3C,MAAM,UAAU,iCACf,OACA,MACA,yBAAyB,MAAM,QAAQ,CACxC;GACA,OAAO,EAAE,KAAK;IAAE;IAAM;GAAQ,CAAC;EAChC,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,2BAA2B,GAC7E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,yCAAyC,OAAO,MAAM;EAC9D,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC1D,IAAI;GACH,MAAM,OAAO,oBAAoB,KAAK,QAAQ,KAAK,WAAW;GAC9D,MAAM,SAAS,0BAA0B;GACzC,MAAM,SAAS,8BAA8B,MAAM;GACnD,MAAM,cAAc,mCAAmC,QAAQ,IAAI;GACnE,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;GACvE,MAAM,WACL,SAAS,gBACN,2BAA2B,MAAM,gBAAgB,IACjD,2BAA2B,MAAM,oBAAoB;GACzD,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,mCAAmC;GAClE,IAAI,SAAS,gBAAgB,aAAa,MAAM,SAC/C,MAAM,IAAI,MAAM,0BAA0B;GAE3C,MAAM,UAAU,iCACf,OACA,MACA,yBAAyB,MAAM,QAAQ,CACxC;GACA,MAAM,iBAAiB,2BAA2B,MAAM,4BAA4B;GACpF,IAAI,CAAC,gBAAgB,MAAM,IAAI,MAAM,qCAAqC;GAC1E,IAAI,mBAAmB,QAAQ,0BAC9B,OAAO,EAAE,KAAK;IAAE,OAAO;IAA6B;GAAQ,GAAG,GAAG;GAEnE,MAAM,iBAAiB,8BAA8B,OAAO,MAAM,UAAU,OAAO;GACnF,MAAM,wBAAwB,MAAM,8BAA8B,cAAc;GAChF,MAAM,UAAU,6BAA6B,qBAAqB,MAAM,UAAU,GAAG,MAAM;GAC3F,MAAM,WAAW,oBAAoB,KAAK,SAAS;GACnD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,mBAAmB;GACjD,IAAI,YAAY,MAAM,MAAM,IAAI,MAAM,mBAAmB;GAKzD,MAAM,SADmB,SAAS,iBAAiB,OAAO,mBAEvD,MAAM,8BAA8B;IACpC;IACA,gBAAgB,OAAO,sBAAsB;IAC7C,QAAQ;IACR;IACA,WAAW,MAAM;IACjB,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;IAClD,YAAY;IACZ,cAAc,SAAS,gBAAgB,WAAW;IAClD,kBAAkB,SAAS,eAAe,WAAW;IACrD,iBAAiB,SAAS,eAAe,QAAQ,QAAQ,WAAW;IACpE;IACA;GACD,CAAC,IACA,MAAM,uCAAuC;IAC7C;IACA,gBAAgB,OAAO,sBAAsB;IAC7C;IACA,UAAU,QAAQ,QAAQ;IAC1B,SAAS,YAAY;IACrB,WAAW,OAAO,sBAAsB;IACxC;IACA;GACD,CAAC;GACH,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAM;IAAS,QAAQ;GAAO,CAAC;EAC1D,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,0BAA0B,GAC5E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,yCAAyC,OAAO,MAAM;EAC9D,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,MAAM,oBAAoB,CAAC;EACzC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAEhD,MAAM,OAAO;EACb,IACC,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,QAAQ,QAAQ,KAC/C,OAAO,OAAO,MAAM,QAAQ,KAAK,OAAO,KAAK,WAAW,WAEzD,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAEhD,IAAI;GACH,OAAO,EAAE,KACR,6BACC,MAAM,IACN;IAAE,cAAc,MAAM;IAAS,eAAe,MAAM;GAAS,GAC7D,EAAE,QAAQ,KAAK,WAAW,KAAK,CAChC,CACD;EACD,SAAS,OAAO;GACf,IAAI,aAAa,KAAK,GAAG;IACxB,EAAE,OAAO,eAAe,GAAG;IAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC/C;GACA,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EACjD;CACD,CAAC;CAED,MAAM,sBAAsB,UAAiE;EAC5F,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;EACxE,MAAM,OAAO;EACb,MAAM,8BAAc,IAAI,IAAI;GAAC;GAAgB;GAAqB;GAAY;EAAe,CAAC;EAC9F,IACC,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,IAAI,GAAG,CAAC,KACrD,OAAO,KAAK,iBAAiB,YAC7B,OAAO,KAAK,sBAAsB,YAClC,OAAO,KAAK,aAAa,UAEzB,OAAO;EAER,OAAO;GACN,cAAc,KAAK;GACnB,mBAAmB,KAAK;GACxB,UAAU,KAAK;GACf,GAAI,OAAO,OAAO,MAAM,eAAe,IAAI,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;EACrF;CACD;CAEA,IAAI,KAAK,gDAAgD,OAAO,MAAM;EACrE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,MAAM,UAAU,mBAAmB,IAAI;EACvC,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC7D,uBAAuB,KAAK;EAC5B,MAAM,SAAS,6BACd,MAAM,IACN;GAAE,cAAc,MAAM;GAAS,eAAe,MAAM;EAAS,GAC7D,OACD;EACA,IAAI,OAAO,WAAW,WAAW,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,QAAQ,GAAG;EACxF,IAAI,OAAO,WAAW,aAAa,OAAO,EAAE,KAAK,QAAQ,GAAG;EAC5D,IAAI,OAAO,WAAW,WAAW,OAAO,EAAE,KAAK,QAAQ,GAAG;EAC1D,OAAO,EAAE,KAAK,MAAM;CACrB,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EAC1E,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IACC,CAAC,QACD,CAAC,MAAM,QAAQ,KAAK,QAAQ,KAC5B,KAAK,SAAS,WAAW,KACzB,KAAK,SAAS,SAAS,KAEvB,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAChD,MAAM,WAAW,KAAK,SAAS,IAAI,kBAAkB;EACrD,IAAI,SAAS,MAAM,YAAY,WAAW,IAAI,GAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAChD,uBAAuB,KAAK;EAC5B,MAAM,SAAS,iCACd,MAAM,IACN;GAAE,cAAc,MAAM;GAAS,eAAe,MAAM;EAAS,GAC7D,QACD;EACA,OAAO,EAAE,KAAK,QAAQ,OAAO,QAAQ,MAAM,SAAS,KAAK,WAAW,SAAS,IAAI,MAAM,GAAG;CAC3F,CAAC;CAED,IAAI,IAAI,sBAAsB,OAAO,MAAM;EAC1C,MAAM,QAAQ,SAAS;EACvB,MAAM,QAAQ,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,CAAC;EAC5D,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC;EAC7D,MAAM,YAAY,0BAA0B,MAAM,IAAI;GACrD,gBAAgB,EAAE,IAAI,MAAM,iBAAiB;GAC7C;GACA;GACA,OAAO,EAAE,IAAI,MAAM,GAAG;GACtB,SAAS,EAAE,IAAI,MAAM,UAAU;GAC/B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC7B,CAAC;EACD,MAAM,aAAa,MAAM,yBAAyB,OAAO,KAAA,GAAW,KAAK;EACzE,MAAM,gBAAgB,IAAI,IACzB,WAAW,KAAK,cAAc,CAAC,UAAU,cAAc,SAAS,CAAC,CAClE;EACA,MAAM,mCAAmB,IAAI,IAA4C;EACzE,MAAM,WAAW,MAAM,GACrB,QAAQ;;;kEAGsD,CAAC,CAC/D,IAAI,MAAM,OAAO;EACnB,KAAK,MAAM,QAAQ,UAAU;GAC5B,MAAM,YAAY,cAAc,IAAI,KAAK,YAAY;GACrD,IAAI,CAAC,WAAW;GAChB,MAAM,UAAU,iBAAiB,IAAI,KAAK,0BAA0B,KAAK,CAAC;GAC1E,QAAQ,KAAK;IACZ,QAAQ,UAAU;IAClB,WAAW;KACV,OAAO,UAAU,UAAU;KAC3B,OAAO,UAAU,UAAU;KAC3B,aAAa,UAAU,UAAU;IAClC;GACD,CAAC;GACD,iBAAiB,IAAI,KAAK,4BAA4B,OAAO;EAC9D;EACA,OAAO,EAAE,KAAK;GACb,GAAG;GACH,UAAU,UAAU,SAAS,KAAK,aAAa;IAC9C,GAAG;IACH,SAAS,iBAAiB,IAAI,QAAQ,kBAAkB,KAAK,CAAC;GAC/D,EAAE;EACH,CAAC;CACF,CAAC;CAED,IAAI,KAAK,uCAAuC,OAAO,MAAM;EAC5D,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB,KAAK;GACpF,MAAM,UAAU,2BAA2B,MAAM,SAAS,KAAK;GAC/D,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GAC5E,MAAM,SAAS,qCAAqC,MAAM,IAAI;IAC7D;IACA;IACA;GACD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;GAAO,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,QAAQ,SAAS,WAAW,IAAI,MAAM,GAAG;EAC5E;CACD,CAAC;CAED,IAAI,KAAK,6BAA6B,OAAO,MAAM;EAClD,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB,KAAK;GACpF,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB;GAC/E,MAAM,YAAY,KAAK,cAAc;GACrC,MAAM,SAAS,oCAAoC,OAAO;IACzD;IACA;IACA;GACD,CAAC;GACD,IAAI,CAAC,WACJ,OAAO,EAAE,KACR;IACC,OAAO;IACP,SAAS;GACV,GACA,GACD;GAED,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;GAAO,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,QAAQ,SAAS,WAAW,IAAI,MAAM,GAAG;EAC5E;CACD,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,wBAAwB,MAAM,KAAK;GACnC,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;GAIzC,MAAM,EAAE,SAAS,kBAAkB,OAAO,MAAM,WAHxB,IAAI,KAC3B,IAAI,KAAK,SAAS,CAAC,CAAC,QAAQ,IAAI,2BAA2B,OAAO,GACnE,CAAC,CAAC,YACyD,CAAe;GAC1E,OAAO,EAAE,KAAK,qBAAqB,IAAI,CAAC;EACzC,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,yBAAyB,GAC3E,GACD;EACD;CACD,CAAC;CAED,IAAI,KAAK,6BAA6B,OAAO,MAAM;EAClD,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,wBAAwB,MAAM,IAAI;GAClC,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;GAIzC,MAAM,EAAE,MAAM,WAAW,kBAAkB,OAAO,MAAM,WAHhC,IAAI,KAC3B,IAAI,KAAK,SAAS,CAAC,CAAC,QAAQ,IAAI,2BAA2B,OAAO,GACnE,CAAC,CAAC,YACiE,CAAe;GAClF,IAAI,OAAO,KAAK,2BAA2B,CAAC,CAAC,KAAK,MAAM,KAAK,0BAC5D,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;GAE7D,MAAM,uBAAuB;IAC5B,IAAI;KACH,OAAO,MAAM,GACX,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,KAAK,WAAW;IACvB,QAAQ;KAGP;IACD;GACD,EAAA,CAAG;GACH,IAAI,iBAAiB,kBAAkB,0BACtC,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;GAKxD,MAAM,SAAS,MAAM,8BAA8B;IAClD,SAAS,KAAK;IACd,gBAAgB,OAAO,sBAAsB;IAC7C,QAAQ;IACR,UAAU;IACV,WAAW,MAAM;IACjB,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;IAClD,aAAa,KAAK;IAClB,0BAA0B,KAAK;IAC/B,gBAAgB,KAAK;IACrB,oBAAoB,gCAAgC,MAAM,gBAAgB;IAC1E,iBAAiB,KAAK,iBAAiB;IACvC,iBAAiB,KAAK;IACtB,kBAAkB,KAAK,SAAS,KAAK,aAAa;KACjD,cAAc,QAAQ;KACtB,uBAAuB,QAAQ;IAChC,EAAE;IACF,eAAe,KAAK,SAAS,KAAK,aAAa;KAC9C,oBAAoB,QAAQ;KAC5B,cAAc,QAAQ;KACtB,uBAAuB,QAAQ;IAChC,EAAE;GACH,CAAC;GACD,IACC,OAAO,OAAO,gBAAgB,EAAE,CAAC,CAAC,KAAK,MAAM,KAAK,eAClD,OAAO,OAAO,+BAA+B,EAAE,CAAC,CAAC,KAAK,MAAM,KAAK,0BAEjE,MAAM,IAAI,MAAM,oCAAoC;GAErD,MAAM,UAAU,OAAO;GACvB,IAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GACnE,MAAM,IAAI,MAAM,oCAAoC;GAErD,MAAM,QAAQ,OAAQ,QAAoC,SAAS,EAAE,CAAC,CAAC,KAAK;GAC5E,MAAM,YAAY,OAAQ,QAAoC,cAAc,EAAE,CAAC,CAAC,KAAK;GACrF,MAAM,OAAO,OAAO,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK;GAC5C,MAAM,UAAU,OAAO,OAAO,WAAW,EAAE,CAAC,CAAC,KAAK;GAClD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,SACrC,MAAM,IAAI,MAAM,oCAAoC;GAErD,MAAM,gBAAgB;IAAE,GAAG;IAAM,iBAAiB,IAAI,KAAK,SAAS,CAAC,CAAC,YAAY;GAAE;GACpF,sBAAsB,MAAM,IAAI,eAAe;IAC9C,UAAU,OAAO,OAAO,aAAa,EAAE,CAAC,CAAC,KAAK,KAAK;IACnD,aAAa,kBAAkB,KAAK;GACrC,CAAC;GACD,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,GAAG,qBAAqB,aAAa;IACrC,QAAQ;KACP;KACA;KACA,YAAY,cAAc;IAC3B;GACD,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,wBAAwB,GAC1E,GACD;EACD;CACD,CAAC;CAED,IAAI,IAAI,0CAA0C,OAAO,MAAM;EAC9D,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,EAAE,YAAY,MAAM,gCAAgC,WAAW;GACrE,OAAO,EAAE,KACR,QAAQ,UAAU,aAAa;IAAE,GAAG;IAAS,OAAO;GAAgB,IAAI,OACzE;EACD,SAAS,OAAO;GACf,MAAM,SAAS,gCAAgC,OAAO;IACrD,MAAM;IACN,QAAQ;GACT,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM;EACpD;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,SAAS,MAAM,iCAAiC,OAAO,WAAW;GACxE,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,cAAc;IACd,YAAY,OAAO;IACnB,OAAO,OAAO,WAAW,kBAAkB;GAC5C,CAAC;EACF,SAAS,OAAO;GACf,MAAM,SAAS,gCAAgC,OAAO;IACrD,MAAM;IACN,QAAQ;GACT,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM;EACpD;CACD,CAAC;CAED,IAAI,IAAI,8BAA8B,OAAO,MAAM;EAElD,MAAM,QAAQ,MAAM,yBADN,SAC+B,GAAO,KAAA,GAAW,KAAK;EACpE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;CAED,IAAI,IAAI,2CAA2C,OAAO,MAAM;EAC/D,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,MAAM,CAAC,QAAQ,MAAM,yBAAyB,OAAO,WAAW;EAChE,OAAO,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;CAC1E,CAAC;CAED,MAAM,sBAAsB,OAAO,MAAe;EACjD,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,WAAW,MAAM,6BAA6B,OAAO,WAAW;GACtE,IAAI,CAAC,SAAS,UACb,OAAO,EAAE,KACR,EACC,OACC,SAAS,UAAU,cAAc,yBAAyB,0BAC5D,GACA,GACD;GAED,MAAM,CAAC,aAAa,MAAM,yBAAyB,OAAO,WAAW;GACrE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;GAAU,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAKtD,IAJc,MAAM,GAClB,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,WACF,MAAU,aACb,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,SAAS,wBAAwB,MAAM,GAAG;EAC1E;CACD;CAEA,IAAI,KAAK,mDAAmD,mBAAmB;CAE/E,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,QAAQ,SAAS;EACvB,MAAM,cAAc,OAAO,EAAE,IAAI,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC,KAAK;EAClE,IAAI,CAAC,wBAAwB,KAAK,WAAW,GAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;EAErD,IAAI;GACH,MAAM,OAAO,MAAM,gCAAgC,OAAO,WAAW;GACrE,IAAI,KAAK,YAGR,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,cAAc;IAAa,OAAO;IAAU;GAAK,CAAC;EAC7E,SAAS,OAAO;GACf,MAAM,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAKtD,IAJc,MAAM,GAClB,QAAQ,2DAA2D,CAAC,CACpE,MAAM,CAAC,CACP,IAAI,WACF,MAAU,aACb,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,GAAG,SAAS,wBAAwB,MAAM,GAAG;EAC1E;CACD,CAAC;CAED,IAAI,KAAK,2CAA2C,OAAO,MAAM;EAChE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;GACH,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB,KAAK;GACpF,MAAM,UAAU,2BAA2B,MAAM,UAAU,KAAK;GAChE,MAAM,oBAAoB,2BAA2B,MAAM,oBAAoB;GAC/E,MAAM,qBAAqB,KAAK,yBAAyB;GACzD,MAAM,UAAU,sCAAsC,OAAO;IAC5D;IACA;GACD,CAAC;GACD,IAAI,CAAC,oBACJ,OAAO,EAAE,KACR;IACC,OAAO;IACP,SAAS,QAAQ;IACjB;GACD,GACA,GACD;GAED,OAAO,EAAE,KACR,gCAAgC,OAAO;IACtC;IACA;IACA;GACD,CAAC,CACF;EACD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,QAAQ,SAAS,WAAW,IAAI,MAAM,GAAG;EAC5E;CACD,CAAC;CAED,IAAI,IAAI,8CAA8C,OAAO,MAAM;EAClE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;EACJ,IAAI;GACH,MAAM,2BAA2B,yBAAyB,MAAM,4BAA4B;GAC5F,MAAM,eAAe,+BAA+B,IAAI;GACxD,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,MAAM,WAAW,2CAA2C,MAAM,IAAI,YAAY;GAClF,IAAI,SAAS,8BAA8B,WAAW,WAAW,GAChE,OAAO,EAAE,KACR;IACC,OAAO;IACP,SACC;IACD,oBAAoB,SAAS;GAC9B,GACA,GACD;GAED,MAAM,uBAAuB,8BAC5B,SAAS,UACT,wBACD;GACA,IAAI,qBAAqB,SAAS,GAAG;IACpC,MAAM,eAAe,CAAC,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,IAAI,CAAC,CAAC;IACrF,MAAM,gBAAgB,CACrB,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,kBAAkB,CAAC,CAC7E,CAAC,CAAC,QAAQ,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;IAClF,OAAO,EAAE,KACR;KACC,OAAO;KACP,qBAAqB;KACrB,2BAA2B;KAC3B,oBAAoB,SAAS;IAC9B,GACA,GACD;GACD;GACA,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GAC5E,MAAM,UAAU,kCAAkC,MAAM,IAAI;IAC3D;IACA,GAAG;GACJ,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,oBAAoB,SAAS;GAAS,CAAC;EAC3E,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAED,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACvE,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EACvD,IAAI;EACJ,IAAI;GACH,MAAM,cAAc,KAAK;GACzB,IAAI,CAAC,MAAM,QAAQ,WAAW,KAAK,YAAY,WAAW,GACzD,OAAO,EAAE,KAAK,EAAE,OAAO,qCAAqC,GAAG,GAAG;GAEnE,MAAM,gBAAgB,YAAY,KAAK,QAAQ;IAC9C,IAAI,OAAO,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAC9D,MAAM,IAAI,MAAM,gCAAgC;IAEjD,OAAO,+BAA+B,GAA8B;GACrE,CAAC;GACD,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,MAAM,WAAW,cAAc,KAAK,iBACnC,2CAA2C,MAAM,IAAI,YAAY,CAClE;GACA,MAAM,WAAW,SAAS,MAAM,aAC/B,SAAS,8BAA8B,WAAW,WAAW,CAC9D;GACA,IAAI,UACH,OAAO,EAAE,KACR;IACC,OAAO;IACP,SACC;IACD,oBAAoB,SAAS;GAC9B,GACA,GACD;GAED,MAAM,uBAAuB,SAAS,SAAS,aAC9C,8BAA8B,SAAS,UAAU,CAAC,CAAC,CACpD;GACA,IAAI,qBAAqB,SAAS,GAAG;IACpC,MAAM,eAAe,CAAC,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,IAAI,CAAC,CAAC;IACrF,MAAM,gBAAgB,CACrB,GAAG,IAAI,IAAI,qBAAqB,KAAK,YAAY,QAAQ,kBAAkB,CAAC,CAC7E,CAAC,CAAC,QAAQ,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;IAClF,OAAO,EAAE,KACR;KACC,OAAO;KACP,qBAAqB;KACrB,2BAA2B;KAC3B,oBAAoB,SAAS,SAAS,aAAa,SAAS,QAAQ;IACrE,GACA,GACD;GACD;GACA,MAAM,CAAC,YAAY,qBAAqB,MAAM,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;GAC5E,MAAM,eAAe,MAAM,GAAG,kBAC7B,cAAc,KAAK,iBAClB,kCAAkC,MAAM,IAAI;IAAE;IAAU,GAAG;GAAa,CAAC,CAC1E,CACD;GACA,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,UAAU,aAAa;IACvB,oBAAoB,SAAS,SAAS,aAAa,SAAS,QAAQ;GACrE,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAED,IAAI,OAAO,kDAAkD,OAAO,MAAM;EACzE,MAAM,QAAQ,SAAS;EACvB,MAAM,KAAK,OAAO,EAAE,IAAI,MAAM,IAAI,CAAC;EACnC,IAAI;EACJ,IAAI;GACH,6BAA6B,MAAM,wCAAwC,MAAM,EAAE;GACnF,MAAM,UAAU,kCAAkC,MAAM,IAAI,EAAE;GAC9D,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;GAAQ,CAAC;EACpC,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF,UAAU;GACT,6BAA6B;EAC9B;CACD,CAAC;CAED,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;EAC5D,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAC1E,MAAM,mBACL,KAAK,YAAY,OAAO,KAAA,IAAY,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,KAAK;EAC3E,MAAM,oBACL,OAAO,KAAK,wBAAwB,YAAY,KAAK,sBAAsB,KAAA;EAC5E,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,OAAO,EACX,OAAO;GACP,gBAAgB,OAAO,UAAU;GACjC,UAAU,OAAO,UAAU;GAC3B,qBAAqB,OAAO,UAAU;EACvC,CAAC,CAAC,CACD,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAEzD,IAAI,cAAc,KAAK,YAAY;EACnC,IAAI,wBAAwB,QAAQ,KAAK,mBAAmB;EAC5D,IAAI,qBAAqB,KAAA,GAAW;GACnC,cAAc;GACd,IAAI,kBAAkB;IACrB,MAAM,QAAQ,EACZ,OAAO;KACP,UAAU,OAAO,OAAO;KACxB,UAAU,OAAO,OAAO;KACxB,QAAQ,OAAO,OAAO;IACvB,CAAC,CAAC,CACD,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,gBAAgB,CAAC,CAAC,CACnD,IAAI;IACN,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;IAC3D,IAAI,MAAM,WAAW,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;IAC/E,wBAAwB,qBAAqB,QAAQ,MAAM,QAAQ;GACpE,OACC,wBAAwB,qBAAqB;EAE/C,OAAO,IAAI,sBAAsB,KAAA,GAAW;GAC3C,wBAAwB;GACxB,IAAI,mBACH,cAAc,MAAM;QACd,IAAI,gBAAgB,MAAM,SAChC,cAAc;EAEhB;EAEA,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI;GACJ,UAAU;GACV,qBAAqB,wBAAwB,IAAI;EAClD,CAAC,CAAC,CACD,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IAAI;EACN,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,UAAU;GAAa,qBAAqB;EAAsB,CAAC;CAC9F,CAAC;CAED,IAAI,KAAK,oBAAoB,OAAO,MAAM;EACzC,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,iBAAiB,OAAO,KAAK,gBAAgB,EAAE;EACrD,IAAI,CAAC,eAAe,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EACjF,IAAI;EACJ,IAAI;GACH,cAAc,+BAA+B,gBAAgB,cAAc;EAC5E,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBAAuB,GACzE,GACD;EACD;EACA,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,QAAQ;GACb,UAAU,WAAW;GACrB,cAAc;GACd,UAAU;GACV,QAAQ;GACR,sBAAsB;GACtB,YAAY;GACZ,YAAY;EACb;EACA,EAAE,OAAO,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI;EAC1C,OAAO,EAAE,KAAK,KAAK;CACpB,CAAC;CAED,IAAI,KAAK,2BAA2B,OAAO,MAAM;EAChD,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,IAAI;EACJ,IAAI;GACH,cAAc,+BAA+B,OAAO,KAAK,gBAAgB,EAAE,GAAG,cAAc;EAC7F,SAAS,OAAO;GACf,OAAO,EAAE,KACR,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBAAuB,GACzE,GACD;EACD;EACA,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAAC,IAAI;EAC5F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC3D,MAAM,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACzC,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;GAAE,cAAc;GAAa,YAAY;EAAU,CAAC,CAAC,CACzD,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAC1C,IAAI;EACN,OAAO,EAAE,KAAK;GAAE,GAAG;GAAO,cAAc;GAAa,YAAY;EAAU,CAAC;CAC7E,CAAC;CAED,IAAI,KAAK,0BAA0B,OAAO,MAAM;EAC/C,MAAM,QAAQ,SAAS;EACvB,uBAAuB,KAAK;EAC5B,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,iBAAiB,OAAO,KAAK,oBAAoB,EAAE,CAAC,CAAC,KAAK;EAChE,MAAM,mBAAmB,OAAO,KAAK,sBAAsB,EAAE,CAAC,CAAC,KAAK;EACpE,IAAI,CAAC,gBAAgB,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAC9E,IAAI,CAAC,kBAAkB,OAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;EAClF,IAAI,mBAAmB,kBAAkB,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;EAC9F,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,wBAAwB,MAAM,mCAAmC,MAAM,IAAI,CAChF,gBACA,gBACD,CAAC;EAGD,eAAe,qBAAqB;EACpC,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,SAAS,MAAM,GACnB,kBAAkB;GAClB,MAAM,UAAU,EACd,OAAO,CAAC,CACR,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,cAAc,CAAC,CAAC,CACjD,IAAI;GACN,MAAM,YAAY,EAChB,OAAO,CAAC,CACR,KAAK,OAAO,MAAM,CAAC,CACnB,MAAM,GAAG,OAAO,OAAO,UAAU,gBAAgB,CAAC,CAAC,CACnD,IAAI;GACN,IAAI,CAAC,WAAW,CAAC,WAAW,OAAO;IAAE,OAAO;IAAmB,QAAQ;GAAa;GACpF,IAAI,QAAQ,WAAW,UACtB,OAAO;IAAE,OAAO;IAA4B,QAAQ;GAAa;GAElE,IAAI,UAAU,WAAW,UACxB,OAAO;IAAE,OAAO;IAA8B,QAAQ;GAAa;GAEpE,IAAI,UAAU,YAAY,UAAU,aAAa,MAAM,SACtD,OAAO;IAAE,OAAO;IAA8C,QAAQ;GAAa;GAEpF,MAAM,cAAc,EAClB,OAAO,CAAC,CACR,KAAK,OAAO,qBAAqB,CAAC,CAClC,MAAM,GAAG,OAAO,sBAAsB,aAAa,gBAAgB,CAAC,CAAC,CACrE,IAAI;GACN,MAAM,qCAAqB,IAAI,IAAsD;GACrF,KAAK,MAAM,cAAc,aAAa;IACrC,MAAM,oBAAoB,EACxB,OAAO,CAAC,CACR,KAAK,OAAO,qBAAqB,CAAC,CAClC,MACA,IACC,GAAG,OAAO,sBAAsB,SAAS,WAAW,OAAO,GAC3D,GAAG,OAAO,sBAAsB,aAAa,cAAc,CAC5D,CACD,CAAC,CACA,IAAI;IACN,IACC,sBACC,kBAAkB,SAAS,WAAW,QACtC,kBAAkB,WAAW,WAAW,SAEzC,OAAO;KAAE,OAAO;KAAmC,QAAQ;IAAa;IAEzE,mBAAmB,IAAI,WAAW,SAAS,iBAAiB;GAC7D;GACA,MAAM,mBAAmB,EACvB,OAAO,CAAC,CACR,KAAK,OAAO,iBAAiB,CAAC,CAC9B,MACA,IACC,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,gBAAgB,CAC3D,CACD,CAAC,CACA,IAAI;GACN,MAAM,oCAAoB,IAAI,IAA2D;GACzF,KAAK,MAAM,aAAa,kBAAkB;IACzC,MAAM,mBAAmB,EACvB,OAAO,CAAC,CACR,KAAK,OAAO,iBAAiB,CAAC,CAC9B,MACA,IACC,GACC,OAAO,kBAAkB,4BACzB,UAAU,0BACX,GACA,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,cAAc,CACzD,CACD,CAAC,CACA,IAAI;IACN,IAAI,oBAAoB,iBAAiB,WAAW,UAAU,QAC7D,OAAO;KAAE,OAAO;KAAqC,QAAQ;IAAa;IAE3E,kBAAkB,IAAI,UAAU,4BAA4B,gBAAgB;GAC7E;GAEA,MAAM,cAAc,WAAW,QAAQ,CAAC,CACtC,OACA,KAAK,UAAU;IACd,MAAM;IACN;IACA;IACA,OAAO,WAAW;GACnB,CAAC,CACF,CAAC,CACA,OAAO,KAAK;GACd,MAAM,WAAW,EACf,OAAO;IACP,UAAU,OAAO,gBAAgB;IACjC,mBAAmB,OAAO,gBAAgB;GAC3C,CAAC,CAAC,CACD,KAAK,OAAO,eAAe,CAAC,CAC5B,MAAM,GAAG,OAAO,gBAAgB,aAAa,gBAAgB,CAAC,CAAC,CAC/D,IAAI;GACN,IAAI,SAAS,SAAS,GAAG;IACxB,MAAM,eAAe;IACrB,MAAM,WAAW,SAAS,KAAK,aAAa;KAC3C,UAAU,QAAQ;KAClB,oBAAoB;KACpB,kBAAkB;KAClB,QAAQ;IACT,EAAE;IACF,MAAM,GACJ,QAAQ;;;uCAGwB,CAAC,CACjC,IACA,cACA,kBAAkB,iBAAiB,GAAG,kBACtC,KAAK,UAAU;KAAE;KAAgB;IAAiB,CAAC,GACnD,KAAK,UAAU,QAAQ,GACvB,SAAS,QACT,MAAM,SACN,MAAM,UACN,GACD;IAED,KAAK,MAAM,WAAW,UAAU;KAC/B,MAAM,WAAW,WAAW,QAAQ,CAAC,CACnC,OAAO,+BAA+B,aAAa,IAAI,QAAQ,UAAU,CAAC,CAC1E,OAAO,KAAK;KACd,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OAAO,0BAA0B,aAAa,IAAI,QAAQ,UAAU,CAAC,CACrE,OAAO,KAAK;KAgBd,IAfsB,MAAM,GAC1B,QAAQ;;;;+CAI+B,CAAC,CACxC,IACA,gBACA,UACA,cACA,gBACA,KACA,QAAQ,UACR,gBAEE,CAAA,CAAc,YAAY,GAC7B,MAAM,IAAI,MAAM,sCAAsC;KACvD,MAAM,UAAU,MAAM,GACpB,QAAQ,qEAAqE,CAAC,CAC9E,IAAI,QAAQ,QAAQ;KACtB,IAAI,CAAC,WAAW,QAAQ,uBAAuB,QAAQ,oBAAoB,GAC1E,MAAM,IAAI,MAAM,8CAA8C;KAE/D,MAAM,GACJ,QAAQ,8DAA8D,CAAC,CACvE,IAAI,QAAQ,QAAQ;KACtB,MAAM,GACJ,QAAQ;;;;wDAIwC,CAAC,CACjD,IACA,WAAW,QAAQ,CAAC,CAClB,OAAO,4BAA4B,aAAa,IAAI,QAAQ,UAAU,CAAC,CACvE,OAAO,KAAK,GACd,cACA,QAAQ,UACR,kBACA,gBACA,QAAQ,mBACR,QAAQ,oBACR,MAAM,SACN,MAAM,UACN,GACD;IACF;GACD;GAEA,KAAK,MAAM,cAAc,aAAa;IAErC,IAD0B,mBAAmB,IAAI,WAAW,OACxD,GAAmB;KACtB,EAAE,OAAO,OAAO,qBAAqB,CAAC,CACpC,MACA,IACC,GAAG,OAAO,sBAAsB,SAAS,WAAW,OAAO,GAC3D,GAAG,OAAO,sBAAsB,aAAa,gBAAgB,CAC9D,CACD,CAAC,CACA,IAAI;KACN;IACD;IACA,MAAM,WAAW,WAAW,QAAQ,CAAC,CACnC,OAAO,0CAA0C,YAAY,IAAI,WAAW,SAAS,CAAC,CACtF,OAAO,KAAK;IACd,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OAAO,qCAAqC,YAAY,IAAI,WAAW,SAAS,CAAC,CACjF,OAAO,KAAK;IACd,EAAE,OAAO,OAAO,qBAAqB,CAAC,CACpC,IAAI;KACJ,aAAa;KACb,YAAY;KACZ;KACA,iBAAiB;KACjB,oBAAoB;KACpB,iBAAiB;KACjB,YAAY;IACb,CAAC,CAAC,CACD,MACA,IACC,GAAG,OAAO,sBAAsB,SAAS,WAAW,OAAO,GAC3D,GAAG,OAAO,sBAAsB,aAAa,gBAAgB,CAC9D,CACD,CAAC,CACA,IAAI;GACP;GACA,KAAK,MAAM,aAAa,kBAAkB;IAEzC,IADyB,kBAAkB,IAAI,UAAU,0BACrD,GAAkB;KACrB,EAAE,OAAO,OAAO,iBAAiB,CAAC,CAChC,MACA,IACC,GACC,OAAO,kBAAkB,4BACzB,UAAU,0BACX,GACA,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,gBAAgB,CAC3D,CACD,CAAC,CACA,IAAI;KACN;IACD;IACA,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OACA,yCAAyC,YAAY,IAAI,UAAU,4BACpE,CAAC,CACA,OAAO,KAAK;IACd,MAAM,iBAAiB,WAAW,QAAQ,CAAC,CACzC,OACA,oCAAoC,YAAY,IAAI,UAAU,4BAC/D,CAAC,CACA,OAAO,KAAK;IACd,EAAE,OAAO,OAAO,iBAAiB,CAAC,CAChC,IAAI;KACJ,cAAc;KACd,YAAY;KACZ,iBAAiB;KACjB,iBAAiB;KACjB,oBAAoB;KACpB,iBAAiB;KACjB,YAAY;IACb,CAAC,CAAC,CACD,MACA,IACC,GACC,OAAO,kBAAkB,4BACzB,UAAU,0BACX,GACA,GAAG,OAAO,kBAAkB,gBAAgB,UAAU,GACtD,GAAG,OAAO,kBAAkB,cAAc,gBAAgB,CAC3D,CACD,CAAC,CACA,IAAI;GACP;GACA,EAAE,OAAO,OAAO,kCAAkC,CAAC,CACjD,IAAI;IAAE,uBAAuB;IAAgB,YAAY;GAAI,CAAC,CAAC,CAC/D,MACA,GAAG,OAAO,mCAAmC,uBAAuB,gBAAgB,CACrF,CAAC,CACA,IAAI;GACN,MAAM,GACJ,QAAQ;;;;;4EAK8D,CAAC,CACvE,IACA,kBACA,gBACA,kBACA,gBACA,kBACA,gBACA,KACA,kBACA,kBACA,gBACD;GAED,MAAM,aAAa,EACjB,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,UAAU,eAAe,CAAC,CAAC,CACjC,MAAM,GAAG,OAAO,UAAU,UAAU,gBAAgB,CAAC,CAAC,CACtD,IAAI;GACN,IAAI,QAAQ,UACX,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAC/B,MAAM,GAAG,OAAO,UAAU,UAAU,cAAc,CAAC,CAAC,CACpD,IAAI;GAEP,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;IAAE,QAAQ;IAAU,sBAAsB;IAAgB,YAAY;GAAI,CAAC,CAAC,CAChF,MAAM,GAAG,OAAO,OAAO,UAAU,gBAAgB,CAAC,CAAC,CACnD,IAAI;GACN,OAAO,EAAE,aAAa,OAAO,WAAW,WAAW,CAAC,EAAE;EACvD,CAAC,CAAC,CACD,UAAU;EACZ,IAAI,WAAW,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,OAAO,MAAM,GAAG,OAAO,MAAM;EAC3E,OAAO,EAAE,KAAK,EAAE,cAAc,OAAO,YAAY,CAAC;CACnD,CAAC;CAED,IAAI,KAAK,+BAA+B,OAAO,MAAM;EACpD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,IAAI,YAAY,MAAM,SACrB,OAAO,EAAE,KAAK,EAAE,OAAO,kDAAkD,GAAG,GAAG;EAEhF,MAAM,wBAAwB,MAAM,mCAAmC,MAAM,IAAI,CAAC,OAAO,CAAC;EAE1F,eAAe,qBAAqB;EACpC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;EACtC,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,CAAC,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAAC,IAAI;EAC5F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAC3D,IAAI,MAAM,WAAW,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;EAC/E,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,EAAE,OAAO,OAAO,MAAM,CAAC,CACrB,IAAI;GAAE,QAAQ;GAAe,YAAY;EAAI,CAAC,CAAC,CAC/C,MAAM,GAAG,OAAO,OAAO,UAAU,OAAO,CAAC,CAAC,CAC1C,IAAI;EACN,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,IAAI,EAAE,UAAU,KAAK,CAAC,CAAC,CACvB,MAAM,GAAG,OAAO,UAAU,UAAU,OAAO,CAAC,CAAC,CAC7C,IAAI;EACN,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC3B,CAAC;CAED,IAAI,KAAK,kCAAkC,OAAO,MAAM;EACvD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,iBAAiB,OAAO,KAAK,oBAAoB,EAAE,CAAC,CAAC,KAAK;EAChE,IAAI,CAAC,gBAAgB,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;EAC9E,MAAM,UAAU,wBAAwB,OAAO,cAAc;EAC7D,IAAI,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EACzE,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,kBAAkB;GAAgB;EAAQ,CAAC;CACtE,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EAC1D,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;EAC5D,MAAM,cAAc,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK;EACxD,MAAM,kBAAkB,OAAO,KAAK,qBAAqB,EAAE,CAAC,CAAC,KAAK;EAClE,MAAM,+BAA+B,OAAO,OAAO,MAAM,8BAA8B;EACvF,MAAM,4BAA4B,OAAO,KAAK,gCAAgC,EAAE,CAAC,CAAC,KAAK;EACvF,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;EAC1E,IAAI,gCAAgC,CAAC,2BACpC,OAAO,EAAE,KAAK,EAAE,OAAO,iDAAiD,GAAG,GAAG;EAE/E,IAAI,6BAA6B,CAAC,iBACjC,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;EAE3D,IAAI;GACH,MAAM,SAAS,MAAM,qBAAqB,OAAO;IAChD;IACA,aAAa,eAAe,KAAA;IAC5B,iBAAiB,mBAAmB,KAAA;IACpC,2BAA2B,6BAA6B,KAAA;GACzD,CAAC;GACD,IAAI,CAAC,OAAO,IACX,OAAO,EAAE,KACR;IACC,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;GAClD,GACA,EAAE,QAAQ,OAAO,OAA0B,CAC5C;GAED,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,gBAAgB,OAAO;IACvB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,oBAAoB;GACrB,CAAC;EACF,SAAS,OAAO;GACf,IAAI,iBAAiB,kDACpB,OAAO,EAAE,KACR;IACC,OAAO,MAAM;IACb,QACC;GACF,GACA,EAAE,QAAQ,IAAI,CACf;GAED,OAAO,EAAE,KACR;IACC,OAAO;IACP,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAC9D,GACA,EAAE,QAAQ,IAAI,CACf;EACD;CACD,CAAC;CAED,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,MAAM,iBAAiB,KAAK,mBAAmB,OAAO,OAAO,OAAO,KAAK,mBAAmB,EAAE;EAC9F,MAAM,SAAS,OAAO,KAAK,UAAU,YAAY,CAAC,CAAC,KAAK;EACxD,MAAM,WAAW,oBAAoB,KAAK,SAAS;EACnD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,IAAI,KAAK,mBAAmB,QAAQ,OAAO,KAAK,oBAAoB,UACnE,OAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;EAE/D,IAAI,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC,SAAS,MAAM,GACvD,OAAO,EAAE,KAAK,EAAE,OAAO,iDAAiD,GAAG,GAAG;EAE/E,IAAI,YAAY,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;EACvF,IAAI;GACH,MAAM,SAAS,0BAA0B;GACzC,MAAM,SAAS,MAAM,8BAA8B;IAClD;IACA;IACA;IACA;IACA,WAAW;IACX,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK,MAAM;EACrB,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF;CACD,CAAC;CAED,IAAI,KAAK,6BAA6B,OAAO,MAAM;EAClD,MAAM,QAAQ,SAAS;EACvB,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,QAAQ,OAAO,KAAK,WAAW,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;EAC5F,IAAI;GACH,MAAM,UAAU,oBAAoB,qBAAqB,KAAK,MAAM,CAAC;GACrE,MAAM,kBAAkB,QAAQ,SAAS,iBAAiB,QAAQ,SAAS;GAC3E,IAAI,iBAAiB,gCAAgC,KAAK;QACrD,0BAA0B,KAAK;GACpC,IAAI,CAAC,QAAQ,gBAAgB,CAAC,iBAAiB,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;GAC3F,MAAM,CAAC,QAAQ,aAAa,MAAM,YACjC,QACA,GAAG,aAAa,QAAQ,eAAe,EAAE,sBACzC;IAAE,MAAM,EAAE,OAAO,QAAQ,MAAM;IAAG,UAAU;GAAG,CAChD;GACA,IAAI,SAAS,OAAO,UAAU,KAC7B,OAAO,EAAE,KACR,EACC,OAAO,kBACJ,yBAAyB,WAAW,KAAK,IACzC,OAAO,WAAW,SAAS,gBAAgB,EAC/C,GACA,WAAW,MAAM,MAAM,GACxB;GAED,MAAM,SAAS,sBAAsB;GACrC,MAAM,aAAa,kBAChB,uCAAuC;IACvC,MAAM,QAAQ;IACd,sBAAsB,WAAW;IACjC,oBAAoB,WAAW;GAChC,CAAC,IACA,MAAM;GACT,MAAM,iBACL,QAAQ,SAAS,gBACd,OAAO,WAAW,kBAAkB,EAAE,CAAC,CAAC,KAAK,IAC7C,OAAO,WAAW,sBAAsB,EAAE,CAAC,CAAC,KAAK;GACrD,IAAI,iBAAiB;IACpB,IACC,OAAO,WAAW,QAAQ,EAAE,CAAC,CAAC,KAAK,MAAM,QAAQ,QACjD,CAAC,kBACD,OAAO,WAAW,2BAA2B,EAAE,CAAC,CAAC,KAAK,MACrD,OAAO,QAAQ,2BAA2B,EAAE,CAAC,CAAC,KAAK,KACnD,QAAQ,SAAS,iBAAiB,mBAAmB,QAAQ,kBAC7D,QAAQ,SAAS,kBAChB,eAAe,OAAO,QAAQ,wBAAwB,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,eACtE,QAAQ,SAAS,gBAAgB,mBAAmB,QAAQ,oBAE7D,OAAO,EAAE,KAAK,EAAE,OAAO,mCAAmC,GAAG,GAAG;IAEjE,IAAI,WAAW,mBAAmB,MACjC,OAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;IAEpE,IAAI;IACJ,IAAI;KACH,iBAAiB,MAAM,8BAA8B,UAAU,iBAAiB;MAC/E,QACC,QAAQ,SAAS,gBACd;OAAE,MAAM;OAAe,cAAc;MAAe,IACpD;OAAE,MAAM;OAAc,kBAAkB;MAAe;MAC3D,QAAQ,OAAO,QAAQ,2BAA2B,EAAE,CAAC,CAAC,KAAK;KAC5D,CAAC;IACF,QAAQ;KACP,OAAO,EAAE,KAAK,EAAE,OAAO,mCAAmC,GAAG,GAAG;IACjE;IACA,MAAM,UAAU,mDACf,OACA;KACC,MAAM,QAAQ;KACd,gBAAgB,QAAQ,SAAS,gBAAgB,iBAAiB;KAClE,sBAAsB,QAAQ,SAAS,gBAAgB,aAAa;KACpE,oBAAoB,QAAQ,SAAS,eAAe,aAAa;KACjE,aAAa,qBAAqB,MAAM,aAAa;IACtD,GACA,OAAO,QAAQ,KAAK,GACpB,cACD;IACA,OAAO,EAAE,KAAK;KACb,GAAG;KACH,gBACC,eAAe,YAAY,eACxB,eAAe,eAAe,cAC9B,MAAM;KACV,aAAa,QAAQ,QAAQ;KAC7B,YAAY;IACb,CAAC;GACF;GACA,OAAO,EAAE,KAAK;IACb,GAAG;IACH,gBAAgB,MAAM;IACtB,aAAa,mBAAmB;KAC/B,cAAc,OAAO,OAAO,oBAAoB,EAAE;KAClD,QAAQ,SAAS;KACjB,cAAc,MAAM;IACrB,CAAC;GACF,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,KAAK,EAAE,GAAG,GAAG;EAC9D;CACD,CAAC;CAQD,IAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,QAAQ,SAAS;EACvB,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,WAAW,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC,KAAK;EAChD,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;EAU9D,MAAM,gBAAgB,uBALH,SAAS,MAC3B,oEAEkB,CAAA,GAAa,EAAE,EAAE,KAAK,KAAK,QAES;EACvD,IAAI,eAAe,SAAS,gBAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,cAAc,MAAM,GAAG,GAAG;EAElD,IAAI,eAAe,SAAS,QAC3B,IAAI;GAEH,MAAM,WADI,QAAQ,MAAM,IAAI,EAAE,OAAO,CACpB,CAAA,CACf,OAAO,EAAE,oBAAoB,OAAO,UAAU,mBAAmB,CAAC,CAAC,CACnE,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,cAAc,SAAS,CAAC,CAAC,CACnE,IAAI;GACN,MAAM,sBAAsB,OAAO,UAAU,sBAAsB,EAAE,CAAC,CAAC,KAAK;GAC5E,IAAI,uBAAuB,wBAAwB,cAAc,aAChE,OAAO,EAAE,KACR;IACC,OAAO;IACP,QACC;GACF,GACA,GACD;GAED,oBAAoB,MAAM,IAAI,cAAc,WAAW,cAAc,WAAW;IAC/E,mBAAmB,cAAc;IACjC,WAAW,cAAc;IACzB,cAAc;GACf,CAAC;GACD,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,MAAM;IACN,gBAAgB,cAAc;GAC/B,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF;EAGD,IAAI,gBAAgB;EACpB,IAAI,kBAAkB;EACtB,IAAI;GACH,MAAM,UAAU,oBAAoB,qBAAqB,QAAQ,CAAC;GAClE,gBAAgB,QAAQ,QAAQ,YAAY;GAC5C,kBAAkB,QAAQ,SAAS,iBAAiB,QAAQ,SAAS;GACrE,IAAI,iBAAiB,gCAAgC,KAAK;QACrD,0BAA0B,KAAK;GACpC,MAAM,2BACL,OAAO,KAAK,+BAA+B,WACxC,KAAK,2BAA2B,KAAK,IACrC;GACJ,IAAI,mBAAmB,CAAC,0BACvB,OAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;GAEpE,MAAM,SAAS,MAAM,8BAA8B;IAClD,aAAa;IACb,QAAQ,MAAM;IACd,kBAAkB,kBAAkB,OAAO,MAAM;IACjD,sBACC,QAAQ,SAAS,eACd,OACA,OAAO,KAAK,mBAAmB,WAC9B,KAAK,iBACL,MAAM;IACX,mBAAmB,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;IAC7E,0BAA0B,4BAA4B;GACvD,CAAC;GACD,MAAM,OAAO,kBACV,yBACA,gBACC,kBACA;GACJ,IAAI,iBAAiB;IACpB,MAAM,sBAAsB,OAAO,OAAO,eAAe,EAAE,CAAC,CAAC,KAAK;IAClE,IAAI,CAAC,MAAM,8BAA8B,mBAAmB,GAC3D,OAAO,EAAE,KACR;KACC,GAAG;KACH;KACA,aAAa;KACb,kBAAkB;KAClB,QACC;IACF,GACA,GACD;GAEF;GACA,KAAK,iBAAiB,oBAAoB,uBAAuB,CAAC,EAAE,UAAU,YAC7E,OAAO,EAAE,KACR;IACC,GAAG;IACH;IACA,aAAa;IACb,kBAAkB;IAClB,QAAQ,gBACL,8JACA;GACJ,GACA,GACD;GAED,OAAO,EAAE,KAAK;IACb,GAAG;IACH;GACD,CAAC;EACF,SAAS,OAAO;GACf,IAAI,eAAe,OAAO,EAAE,KAAK,+BAA+B,KAAK,GAAG,GAAG;GAC3E,IAAI,iBAAiB,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,KAAK,EAAE,GAAG,GAAG;GAClF,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;EACrF;CACD,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACrD,MAAM,SAAS,8BAA8B;EAC7C,OAAO,EAAE,KAAK,MAAM;CACrB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACrD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,kBAAkB,UAAU,EAAE,IAAI,MAAM,kBAAkB,CAAC;EACjE,IAAI;GACH,MAAM,QAAQ,MAAM,4BAA4B;IAC/C;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO;GAAO,CAAC;EAChC,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,iCAAiC,OAAO,MAAM;EACtD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,MAAM,cAAc,OAAO,KAAK,gBAAgB,EAAE,CAAC,CAAC,KAAK,KAAK;EAC9D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI;IACH,MAAM,eAAe,MAAM,0BAA0B;KACpD,OAAO,SAAS;KAChB;KACA;KACA,aAAa,eAAe,MAAM,gBAAgB;IACnD,CAAC;IACD,OAAO,EAAE,KAAK;KAAE,IAAI;KAAM;KAAO,eAAe;KAAc;IAAO,CAAC;GACvE,SAAS,YAAY;IACpB,OAAO,EAAE,KAAK;KACb,IAAI;KACJ;KACA,eAAe;KACf,eAAe;MACd,MAAM;MACN,OAAO,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;KAC5E;KACA;IACD,CAAC;GACF;EACD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,kDAAkD,OAAO,MAAM;EACvE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,cAAc,OAAO,KAAK,gBAAgB,EAAE,CAAC,CAAC,KAAK;EACzD,IAAI,CAAC,aAAa,OAAO,EAAE,KAAK;GAAE,OAAO;GAAyB;EAAO,GAAG,GAAG;EAC/E,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB;GAAO,GAAG,GAAG;GACnE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO;GAAO,CAAC;EAC1C,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACxE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,8BAA8B;IACjD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAuC;GAAO,GAAG,GAAG;GACvF,MAAM,SAAS,iCAAiC,OAAO;GACvD,OAAO,EAAE,KAAK;IACb,IAAI;IACJ;IACA,QAAQ,8BAA8B;IACtC,uBAAuB;IACvB;GACD,CAAC;EACF,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EAC1E,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,gCAAgC;IACnD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmC;GAAO,GAAG,GAAG;GACnF,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO;GAAO,CAAC;EAC1C,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,IAAI,kDAAkD,OAAO,MAAM;EACtE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,4BAA4B;IAC/C;IACA,iBAAiB,UAAU,EAAE,IAAI,MAAM,kBAAkB,CAAC;IAC1D,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS;GAAO,CAAC;EACnD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,kDAAkD,OAAO,MAAM;EACvE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,UAAU,qBAAqB,MAAM,UAAU;EACrD,MAAM,QAAQ,qBAAqB,MAAM,OAAO;EAChD,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,CAAC,WAAW,CAAC,OAAO,OAAO,EAAE,KAAK;GAAE,OAAO;GAA+B;EAAO,GAAG,GAAG;EAC3F,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA;IACA,MAAM,qBAAqB,MAAM,MAAM;IACvC,eAAe,qBAAqB,MAAM,gBAAgB;IAC1D,eAAe,qBAAqB,MAAM,gBAAgB;IAC1D,wBAAwB,qBAAqB,MAAM,2BAA2B;IAC9E;IACA,cAAc,qBAAqB,MAAM,eAAe;IACxD,QAAQ,qBAAqB,MAAM,QAAQ;IAC3C,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO,UAAU;IAAS;GAAO,CAAC;EAC7D,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,MAAM,4DAA4D,OAAO,MAAM;EAClF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA;IACA,OAAO,KAAK,UAAU,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,OAAO;IAChF,MAAM,KAAK,SAAS,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,MAAM;IAC7E,eACC,KAAK,mBAAmB,KAAA,IACrB,KAAA,IACA,qBAAqB,MAAM,gBAAgB;IAC/C,eACC,KAAK,mBAAmB,KAAA,IACrB,KAAA,IACA,qBAAqB,MAAM,gBAAgB;IAC/C,wBACC,KAAK,8BAA8B,KAAA,IAChC,KAAA,IACA,qBAAqB,MAAM,2BAA2B;IAC1D;IACA,cACC,KAAK,kBAAkB,KAAA,IACpB,KAAA,IACA,qBAAqB,MAAM,eAAe;IAC9C,QAAQ,KAAK,WAAW,KAAA,IAAY,KAAA,IAAY,qBAAqB,MAAM,QAAQ;IACnF,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB;GAAO,GAAG,GAAG;GACnE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAO,UAAU;IAAS;GAAO,CAAC;EAC7D,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,IAAI,oEAAoE,OAAO,MAAM;EACxF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,sCAAsC;IACzD;IACA;IACA,gBAAgB,UAAU,EAAE,IAAI,MAAM,iBAAiB,CAAC;IACxD,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS,UAAU;IAAS;GAAO,CAAC;EACtE,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,oEAAoE,OAAO,MAAM;EACzF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,OAAO,MAAM,oBAAoB,CAAC;EACxC,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,WAAW,qBAAqB,MAAM,WAAW;EACvD,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,MAAM,OAAO,qBAAqB,MAAM,MAAM;EAC9C,MAAM,gBAAgB,qBAAqB,MAAM,gBAAgB;EACjE,MAAM,yBAAyB,qBAAqB,MAAM,2BAA2B;EACrF,MAAM,eAAe,qBAAqB,MAAM,eAAe;EAC/D,MAAM,qBAAqB,qBAAqB,MAAM,sBAAsB;EAC5E,MAAM,WACL,qBAAqB,MAAM,WAAW,KACtC,mCAAmC,SAAS,WAAW,GAAG;GACzD;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD,CAAC;EACF,IAAI;GACH,MAAM,aAAa,MAAM,sCAAsC;IAC9D;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,UAAU;IAAS,UAAU;IAAS;GAAO,CAAC;EACrF,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KACH,sFACA,OAAO,MAAM;EACZ,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,MAAM,cAAc,4BAA4B,MAAM;EACtD,IAAI,aAAa,OAAO,EAAE,KAAK,YAAY,MAAM,YAAY,UAAU;EACvE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,OAAO,MAAM,oBAAoB,GAAG,EAAE,YAAY,KAAK,CAAC;EAC9D,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK;GAAE,OAAO;GAAgB;EAAO,GAAG,GAAG;EAC/D,MAAM,kBAAkB,qBAAqB,MAAM,kBAAkB;EACrE,IAAI,OAAO,MAAM,eAAe,GAC/B,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmC;EAAO,GAAG,GAAG;EAExE,MAAM,eAAe,qBAAqB,MAAM,eAAe;EAC/D,MAAM,qBAAqB,qBAAqB,MAAM,sBAAsB;EAC5E,MAAM,WACL,qBAAqB,MAAM,WAAW,KACtC,mCAAmC,UAAU,WAAW,GAAG;GAC1D;GACA;GACA;GACA;GACA;GACA;EACD,CAAC;EACF,IAAI;GAYH,IAAI,CAAC,MAXY,uCAAuC;IACvD;IACA;IACA;IACA;IACA;IACA;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB;GAAO,GAAG,GAAG;GACrE,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,UAAU;IACV,UAAU;IACV,WAAW;IACX;GACD,CAAC;EACF,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CACD;CAEA,IAAI,KAAK,kCAAkC,OAAO,MAAM;EACvD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,UAAU,6BAA6B,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,GAAG,MAAM;EACvF,MAAM,iBAAiB,KAAK,mBAAmB,OAAO,OAAO,OAAO,KAAK,mBAAmB,EAAE;EAC9F,MAAM,SAAS,OAAO,KAAK,UAAU,YAAY,CAAC,CAAC,KAAK;EACxD,MAAM,WAAW,oBAAoB,KAAK,SAAS;EACnD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI,KAAK,mBAAmB,QAAQ,OAAO,KAAK,oBAAoB,UACnE,OAAO,EAAE,KAAK;GAAE,OAAO;GAAkC;EAAO,GAAG,GAAG;EAEvE,IAAI,CAAC,CAAC,cAAc,mBAAmB,CAAC,CAAC,SAAS,MAAM,GACvD,OAAO,EAAE,KAAK;GAAE,OAAO;GAAkD;EAAO,GAAG,GAAG;EAEvF,IAAI,YAAY,MACf,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqC;EAAO,GAAG,GAAG;EAE1E,IAAI;GACH,MAAM,SAAS,MAAM,8BAA8B;IAClD;IACA;IACA;IACA;IACA,WAAW;IACX,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE,GAAG;IAAQ;GAAO,CAAC;EACpC,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC5D,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,kCAAkC;IACrD;IACA,WAAW,OAAO;IAClB,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS;GAAO,CAAC;EACnD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,4DAA4D,OAAO,MAAM;EACjF,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,YAAY,OAAO,EAAE,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,KAAK;EAC/D,IAAI,CAAC,WAAW,OAAO,EAAE,KAAK;GAAE,OAAO;GAAuB;EAAO,GAAG,GAAG;EAC3E,IAAI;GACH,MAAM,SAAS,MAAM,mCAAmC;IACvD;IACA,SAAS;IACT,YAAY;IACZ,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B;GAAO,GAAG,GAAG;GAC3E,IAAI,yBAAyB;GAC7B,IAAI,eAAe;GACnB,IAAI;IACH,yBAAyB,MAAM,6BAA6B;KAC3D,OAAO,SAAS;KAChB;KACA,SAAS,OAAO;KAChB;KACA,UAAU,OAAO;IAClB,CAAC;GACF,SAAS,YAAY;IACpB,eAAe;KACd,MAAM;KACN,OAAO,sBAAsB,QAAQ,WAAW,UAAU,OAAO,UAAU;IAC5E;GACD;GACA,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,SAAS;IACT,0BAA0B;IAC1B,eAAe;IACf;GACD,CAAC;EACF,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KACR;IAAE,OAAO;IAAS;GAAO,GACzB,QAAQ,SAAS,mBAAmB,KAAK,QAAQ,SAAS,WAAW,IAAI,MAAM,GAChF;EACD;CACD,CAAC;CAED,IAAI,KAAK,yDAAyD,OAAO,MAAM;EAC9E,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,YAAY,OAAO,EAAE,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,KAAK;EAC/D,IAAI,CAAC,WAAW,OAAO,EAAE,KAAK;GAAE,OAAO;GAAuB;EAAO,GAAG,GAAG;EAC3E,IAAI;GACH,MAAM,SAAS,MAAM,mCAAmC;IACvD;IACA,SAAS;IACT,YAAY;IACZ,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B;GAAO,GAAG,GAAG;GAC3E,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ;GAAO,CAAC;EACpD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,OAAO,EAAE,KACR;IAAE,OAAO;IAAS;GAAO,GACzB,QAAQ,SAAS,mBAAmB,KAAK,QAAQ,SAAS,WAAW,IAAI,MAAM,GAChF;EACD;CACD,CAAC;CAED,IAAI,IAAI,kCAAkC,OAAO,MAAM;EACtD,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GACH,MAAM,QAAQ,MAAM,6BAA6B;IAChD;IACA,iBAAiB,UAAU,EAAE,IAAI,MAAM,kBAAkB,CAAC;IAC1D,WAAW,OAAO;IAClB,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAO,UAAU;IAAS;GAAO,CAAC;EACnD,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK;IAAE,OAAO;IAAS;GAAO,GAAG,+BAA+B,OAAO,CAAC;EAClF;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,UAAU,6BAA6B,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK,GAAG,MAAM;EACvF,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;EACJ,IAAI;GACH,cAAc,+BAA+B,OAAO,KAAK,gBAAgB,EAAE,GAAG,cAAc;EAC7F,SAAS,OAAO;GACf,OAAO,EAAE,KACR;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU;IAAwB;GAAO,GACjF,GACD;EACD;EACA,IAAI;GACH,MAAM,SAAS,MAAM,8BAA8B;IAClD;IACA;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACrE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAQ;GAAO,CAAC;EAC3C,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,qDAAqD,OAAO,MAAM;EAC1E,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GAOH,IAAI,CAAC,MANY,+BAA+B;IAC/C;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACjE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;IAAU;GAAO,CAAC;EACxD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GAOH,IAAI,CAAC,MANY,8BAA8B;IAC9C;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACjE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;IAAU;GAAO,CAAC;EACxD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAYD,IAAI,KAAK,uDAAuD,OAAO,MAAM;EAE5E,MAAM,SAAS,8BADA,0BAC8B,CAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAMnE,MAAM,aAAa,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC9D,IAAI,CAAC,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAClE,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,QAAQ,EAAE,CAAC,CACrC,KAAK,CAAC,CACN,YAAY;EACd,IAAI,WAAW,YAAY,YAAY,YAAY,cAClD,OAAO,EAAE,KACR;GAAE,OAAO;GAAgB,QAAQ,8CAA8C;EAAU,GACzF,GACD;EAED,MAAM,OAAgC,YAAY,WAAW,WAAW;EAIxE,MAAM,qBAAqB,UAAgD;GAC1E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;GAChC,IAAI,UAAU,MAAM,OAAO;GAC3B,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,KAAA;GAClC,MAAM,UAAU,MACd,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACxC,QAAQ,SAAS,KAAK,SAAS,CAAC;GAClC,OAAO,QAAQ,WAAW,IAAI,OAAO;EACtC;EACA,MAAM,kBAAkB,kBAAkB,KAAK,gBAAgB;EAC/D,MAAM,kBAAkB,kBAAkB,KAAK,gBAAgB;EAC/D,MAAM,gBACL,oBAAoB,KAAA,KAAa,oBAAoB,KAAA,IAClD,KAAA,IACA;GAAE,kBAAkB;GAAiB,kBAAkB;EAAgB;EAC3E,MAAM,QAAQ,SAAS;EAEvB,IAAI,SAAS,UAAU;GACtB,MAAM,eAAe,OAAO,KAAK,kBAAkB,EAAE,CAAC,CAAC,KAAK;GAC5D,MAAM,YAAY,OAAO,KAAK,mBAAmB,EAAE,CAAC,CAAC,KAAK;GAC1D,MAAM,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,KAAK,KAAK;GAC/C,MAAM,uBAAuB,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK;GACjE,MAAM,iBAAiB,MAAM,QAAQ,KAAK,cAAc,IAAI,KAAK,iBAAiB,CAAC;GACnF,MAAM,YAAY,eACjB,CAAC,GACD,eAAe,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,CAAC,CACzF;GACA,IAAI,CAAC,gBAAgB,CAAC,WACrB,OAAO,EAAE,KAAK,EAAE,OAAO,yCAAyC,GAAG,GAAG;GAEvE,MAAM,cAAc,wBAAwB,qBAAqB,SAAS;GAC1E,IAAI,qBAAqB,SAAS,MAAM,aACvC,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;GAErD,MAAM,gBACL,mBAAmB,gBAAgB,SAAS,IAAI,KAAK,UAAU,eAAe,IAAI;GACnF,MAAM,gBACL,mBAAmB,gBAAgB,SAAS,IAAI,KAAK,UAAU,eAAe,IAAI;GACnF,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;GACnC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GAKtC,IAAI;IAyBH,IAAI,CAxBY,MAAM,GAAG,kBAAkB;KAM1C,IALiB,EACf,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACE,GAAU,OAAO;KACrB,EAAE,OAAO,OAAO,SAAS,CAAC,CACxB,OAAO;MACP,gBAAgB;MAChB;MACA,oBAAoB;MACpB,YAAY;MACZ,gBAAgB,KAAK,UAAU,SAAS;MACxC,uBAAuB;MACvB,uBAAuB;MACvB,YAAY;MACZ,cAAc;MACd,+BAA+B;MAC/B,yBAAyB;KAC1B,CAAC,CAAC,CACD,IAAI;KACN,OAAO;IACR,CAAC,CAAC,CACG,GACJ,OAAO,EAAE,KAAK;KAAE,OAAO;KAAe,QAAQ;IAA4B,GAAG,GAAG;GAElF,SAAS,OAAO;IAGf,MAAM,MAAM,iBAAiB,QAAQ,MAAM,QAAQ,YAAY,IAAI;IACnE,IAAI,IAAI,SAAS,QAAQ,KAAK,IAAI,SAAS,aAAa,GACvD,OAAO,EAAE,KAAK;KAAE,OAAO;KAAe,QAAQ;IAA4B,GAAG,GAAG;IAEjF,MAAM;GACP;GACA,OAAO,EAAE,KAAK;IACb,IAAI;IACJ,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT;IACA,UAAU;GACX,CAAC;EACF;EAIA,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,eAAe,OAAO,KAAK,kBAAkB,KAAK,wBAAwB,EAAE,CAAC,CAAC,KAAK;EACzF,MAAM,cAAc,OAAO,KAAK,eAAe,EAAE,CAAC,CAAC,KAAK;EACxD,IAAI,CAAC,gBAAgB,CAAC,aACrB,OAAO,EAAE,KAAK,EAAE,OAAO,0CAA0C,GAAG,GAAG;EAExE,IAAI;GACH,MAAM,SAAS,MAAM,qBAAqB,OAAO;IAChD;IACA;IACA,iBAAiB;IACjB;GACD,CAAC;GACD,IAAI,OAAO,IACV,OAAO,EAAE,KAAK,MAAM;GAErB,OAAO,EAAE,KACR;IACC,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;GAClD,GACA,OAAO,MACR;EACD,SAAS,OAAO;GAKf,OAAO,EAAE,KACR;IACC,OAAO;IACP,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAC9D,GACA,GACD;EACD;CACD,CAAC;CAQD,IAAI,IAAI,wDAAwD,MAAM;EAErE,MAAM,SAAS,8BADA,0BAC8B,CAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,gBAAgB,OAAO;EAC7B,IAAI,CAAC,eAAe,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EACtF,MAAM,QAAQ,SAAS;EACvB,MAAM,WAAW,8BAA8B,MAAM,IAAI,eAAe,OAAO;EAC/E,IAAI,UAAU,OAAO,EAAE,KAAK;GAAE,aAAa;GAAU;EAAO,CAAC;EAC7D,OAAO,EAAE,KAAK;GACb,aAAa;IACZ,gBAAgB;IAChB,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,kCAAkC;IAClC,YAAY;GACb;GACA;EACD,CAAC;CACF,CAAC;CAED,IAAI,IAAI,uDAAuD,OAAO,MAAM;EAE3E,MAAM,SAAS,8BADA,0BAC8B,CAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,MAAM,gBAAgB,OAAO;EAC7B,IAAI,CAAC,eAAe,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EACtF,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB;GAAO,GAAG,GAAG;EACrD;EACA,MAAM,iBAAiB,UAAgD;GACtE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;GAChC,IAAI,UAAU,MAAM,OAAO;GAC3B,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,KAAA;GAClC,MAAM,UAAU,MACd,KAAK,SAAS,OAAO,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACxC,QAAQ,SAAS,KAAK,SAAS,CAAC;GAClC,OAAO,QAAQ,WAAW,IAAI,OAAO;EACtC;EACA,MAAM,WAAW,OAAO,KAAK,oBAAoB,YAAY,KAAK,kBAAkB,KAAA;EACpF,MAAM,wBACL,OAAO,KAAK,qCAAqC,YAC9C,KAAK,mCACL,KAAA;EACJ,MAAM,sBACL,KAAK,2BAA2B,KAAA,IAC7B,KAAA,IACA,qBAAqB,MAAM,wBAAwB;EACvD,IAAI,0BAA0B,QAAQ,CAAC,qBACtC,OAAO,EAAE,KACR;GACC,OAAO;GACP;EACD,GACA,GACD;EAED,MAAM,QAAQ,SAAS;EACvB,IAAI;GACH,MAAM,cAAc,iCAAiC,MAAM,IAAI;IAC9D,gBAAgB;IAChB,UAAU;IACV,kBAAkB,cAAc,KAAK,gBAAgB;IACrD,kBAAkB,cAAc,KAAK,gBAAgB;IACrD,iBAAiB;IACjB,wBAAwB;IACxB,kCAAkC;GACnC,CAAC;GACD,OAAO,EAAE,KAAK;IAAE;IAAa;GAAO,CAAC;EACtC,SAAS,OAAO;GACf,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACjE,OAAO,EAAE,KAAK;IAAE,OAAO;IAAK;GAAO,GAAG,GAAG;EAC1C;CACD,CAAC;CAED,IAAI,KAAK,oDAAoD,OAAO,MAAM;EACzE,MAAM,SAAS,0BAA0B;EACzC,MAAM,SAAS,8BAA8B,MAAM;EACnD,IAAI,OAAO,cAAc,kBACxB,OAAO,EAAE,KAAK;GAAE,OAAO;GAA8B;EAAO,GAAG,GAAG;EAEnE,IAAI,CAAC,OAAO,kBACX,OAAO,EAAE,KAAK;GAAE,OAAO;GAAoC;EAAO,GAAG,GAAG;EAEzE,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE,CAAC,CAAC,KAAK;EAC7D,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB;EAAO,GAAG,GAAG;EACzE,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,UAAU,GAAG,MAAM;EAC5E,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;GAAE,OAAO;GAAqB;EAAO,GAAG,GAAG;EACvE,IAAI;GAOH,IAAI,CAAC,MANY,8BAA8B;IAC9C;IACA;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAoB;GAAO,GAAG,GAAG;GACjE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,WAAW;IAAU;GAAO,CAAC;EACxD,SAAS,OAAO;GACf,OAAO,EAAE,KAAK;IAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAAG;GAAO,GAAG,GAAG;EAC7F;CACD,CAAC;CAED,IAAI,IAAI,8BAA8B,OAAO,MAAM;EAClD,MAAM,UAAU,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK;EAC3D,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,MAAM,SAAS,0BAA0B;EACzC,IAAI;GACH,MAAM,QAAQ,MAAM,qCAAqC;IACxD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC;GACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;EACxB,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,GAAG;EACtC;CACD,CAAC;CAED,IAAI,KAAK,qCAAqC,OAAO,MAAM;EAC1D,IAAI;EACJ,IAAI;GACH,OAAO,MAAM,EAAE,IAAI,KAA8B;EAClD,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;EAC7C;EACA,MAAM,UAAU,OAAO,KAAK,YAAY,EAAE,CAAC,CAAC,KAAK;EACjD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC/D,MAAM,SAAS,0BAA0B;EACzC,IAAI;GAMH,IAAI,CAAC,MALY,sCAAsC;IACtD;IACA,WAAW,OAAO,sBAAsB;IACxC,aAAa,OAAO,8BAA8B;GACnD,CAAC,GACQ,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;GACxD,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,UAAU;GAAQ,CAAC;EAC9C,SAAS,OAAO;GACf,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,GAAG,GAAG;EACtC;CACD,CAAC;CAGD,IAAI,OAAO,oCAAoC,MAAM;EACpD,MAAM,QAAQ,SAAS;EACvB;GACC,MAAM,IAAI,QAAQ,MAAM,IAAI,EAAE,OAAO,CAAC;GACtC,MAAM,eAAe,EAAE,IAAI,MAAM,gBAAgB,CAAC,EAAE,KAAK;GACzD,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;GAM1E,IAAI,CALW,EACb,OAAO,EAAE,gBAAgB,OAAO,UAAU,eAAe,CAAC,CAAC,CAC3D,KAAK,OAAO,SAAS,CAAC,CACtB,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CACxD,IACG,GAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAC3D,EAAE,OAAO,OAAO,kBAAkB,CAAC,CACjC,MAAM,GAAG,OAAO,mBAAmB,gBAAgB,YAAY,CAAC,CAAC,CACjE,IAAI;GACN,EAAE,OAAO,OAAO,SAAS,CAAC,CAAC,MAAM,GAAG,OAAO,UAAU,gBAAgB,YAAY,CAAC,CAAC,CAAC,IAAI;GACxF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;EAC3B;CACD,CAAC;CAED,OAAO;AACR;;;ACpyQA,SAAgB,mBAAmB,UAAqC,CAAC,GAAG;CAC3E,MAAM,oBAAkB,QAAQ,mBAAmB;CACnD,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,sBAAsB,OAAO,MAAM;EAC1C,IAAI;GACH,MAAM,cAAc,kBAAkB;IACrC,WAAW,QAAQ,KAAK,MAAM;IAC9B,KAAK,QAAQ;GACd,CAAC;GACD,MAAM,SAAS,MAAM,kBAAgB;IACpC,gBAAgB;IAChB;GACD,CAAC;GACD,OAAO,EAAE,KAAK,MAAM;EACrB,QAAQ;GACP,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;EAC3D;CACD,CAAC;CAED,OAAO;AACR;;;;;;;;;;;;;AC8CA,IAAI,cAAkC;;AAGtC,SAAgB,WAAwB;CACvC,IAAI,CAAC,aACJ,cAAc,IAAI,YAAY,cAAc,CAAC;CAE9C,OAAO;AACR;;AAGA,SAAgB,aAAmB;CAClC,aAAa,MAAM;CACnB,cAAc;AACf;AAqCA,SAAS,qBAAqB,KAAiB;CAC9C,MAAM,aACL,QAAQ,IAAI,6BAA6B,KAAK,YAAY,WAAW,KAAK,WAAW;CAEtF,IAAI,IAAI,aAAa,OAAO,GAAG,SAAS;EACvC,EAAE,OAAO,iBAAiB,UAAU;EACpC,MAAM,KAAK;CACZ,CAAC;CACD,IAAI,IACH,aACA,YAAY;EACX,MAAM;EACN,qBAAqB,SAAS,KAAK,QAAQ,aAAa,EAAE;EAC1D,eAAe;CAChB,CAAC,CACF;CAEA,MAAM,YAAY,KAAK,YAAY,YAAY;CAC/C,IAAI,CAAC,WAAW,SAAS,GACxB,MAAM,IAAI,MACT,4BAA4B,UAAU,oEACvC;CAED,MAAM,YAAY,aAAa,WAAW,OAAO;CACjD,IAAI,IAAI,MAAM,MAAM;EACnB,IAAI,EAAE,IAAI,KAAK,WAAW,OAAO,GAChC,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;EAE1C,EAAE,OAAO,iBAAiB,UAAU;EACpC,OAAO,EAAE,KAAK,SAAS;CACxB,CAAC;AACF;AAEA,SAAgB,UAAU,MAAmB;CAC5C,MAAM,eAAe,MAAM,gBAAgB;CAC3C,MAAM,UAAU,MAAM,WAAW;CACjC,MAAM,WAAW,MAAM,YAAY;CACnC,MAAM,uBAAuB,MAAM,+BAA+B;CAClE,IAAI,mCAAmC,CAAC;CACxC,MAAM,MAAM,IAAI,KAAK;CAGrB,IAAI,IAAI,KAAK,iBAAiB,CAAC;CAC/B,IAAI,IAAI,KAAK,YAAY,EAAE,uBAAuB,CAAC,uBAAuB,EAAE,CAAC,CAAC;CAG9E,IAAI,MAAM,KAAK,aAAa,YAAY,CAAC;CACzC,IAAI,MAAM,KAAK,kBAAkB,YAAY,CAAC;CAC9C,IAAI,MAAM,KAAK,YAAY,YAAY,CAAC;CACxC,IAAI,MAAM,KAAK,aAAa,YAAY,CAAC;CACzC,IAAI,MAAM,KAAK,oBAAoB,YAAY,CAAC;CAChD,IAAI,MACH,KACA,qBAAqB;EACpB,UAAU;EACV,kBAAkB;EAClB,mBAAmB;CACpB,CAAC,CACF;CACA,IAAI,MAAM,KAAK,aAAa,EAAE,kBAAkB,QAAQ,CAAC,CAAC;CAC1D,IAAI,MAAM,KAAK,gBAAgB,cAAc,OAAO,CAAC;CACrD,IAAI,MACH,KACA,WAAW,cAAc,sBAAsB;EAC9C,uCAAuC,MAAM;EAC7C,oCAAoC,2BAA2B;EAC/D,uBAAuB,MAAM;EAC7B,wBAAwB,MAAM;CAC/B,CAAC,CACF;CACA,IAAI,MACH,KACA,gBAAgB;EACf,UAAU;EACV,wCAAwC,MAAM;EAC9C,wBAAwB,MAAM;EAC9B,uBAAuB,MAAM;EAC7B,6BAA6B,eAAe;GAC3C,6BAA6B;EAC9B;CACD,CAAC,CACF;CACA,IAAI,MAAM,KAAK,mBAAmB,EAAE,iBAAiB,MAAM,gBAAgB,CAAC,CAAC;CAE7E,qBAAqB,GAAG;CAExB,OAAO;AACR;;;;;;;;;;;AAYA,SAAgB,cAAc,MAAmB;CAChD,MAAM,eAAe,MAAM,gBAAgB;CAC3C,MAAM,mBAAmB,MAAM,wBAAwB,CAAC;CACxD,MAAM,cAAc,iBAAiB,WAAW,iCAAiC;CACjF,MAAM,YAAY,KAAK,IAAI,GAAG,KAAK,MAAM,iBAAiB,aAAa,GAAG,CAAC;CAC3E,MAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,iBAAiB,iBAAiB,EAAE,CAAC;CAClF,MAAM,MAAM,IAAI,KAAK;CACrB,IAAI,MACH,KACA,mBAAmB,cAAc,EAChC,gBAAgB;EACf,SAAS;EACT;EACA;EACA,0BAA0B,KAAK,IAC9B,GACA,KAAK,MAAM,iBAAiB,4BAA4B,KAAK,IAAI,IAAI,SAAS,CAAC,CAChF;EACA,8BAA8B,KAAK,IAClC,GACA,KAAK,MAAM,iBAAiB,gCAAgC,KAAK,IAAI,IAAI,aAAa,CAAC,CACxF;CACD,EACD,CAAC,CACF;CAGA,IAAI,IAAI,MAAM,MAAM,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG,CAAC;CAEvD,OAAO;AACR"}