@cotal-ai/auth 0.58.0 → 0.60.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authority-client.d.ts.map +1 -1
- package/dist/authority-client.js +5 -1
- package/dist/authority-client.js.map +1 -1
- package/dist/barrier-evict.d.ts +7 -0
- package/dist/barrier-evict.d.ts.map +1 -1
- package/dist/barrier-evict.js +83 -21
- package/dist/barrier-evict.js.map +1 -1
- package/dist/callout.d.ts.map +1 -1
- package/dist/callout.js +9 -3
- package/dist/callout.js.map +1 -1
- package/dist/commands.js +18 -11
- package/dist/commands.js.map +1 -1
- package/dist/derive.d.ts +5 -0
- package/dist/derive.d.ts.map +1 -1
- package/dist/derive.js +15 -1
- package/dist/derive.js.map +1 -1
- package/dist/grant-command.d.ts +9 -8
- package/dist/grant-command.d.ts.map +1 -1
- package/dist/grant-command.js +9 -8
- package/dist/grant-command.js.map +1 -1
- package/dist/idp.d.ts +10 -1
- package/dist/idp.d.ts.map +1 -1
- package/dist/idp.js +11 -3
- package/dist/idp.js.map +1 -1
- package/dist/index.d.ts +5 -3
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -2
- package/dist/index.js.map +1 -1
- package/dist/issuer.d.ts +3 -1
- package/dist/issuer.d.ts.map +1 -1
- package/dist/issuer.js +6 -2
- package/dist/issuer.js.map +1 -1
- package/dist/ledger.d.ts +6 -7
- package/dist/ledger.d.ts.map +1 -1
- package/dist/ledger.js +1 -1
- package/dist/ledger.js.map +1 -1
- package/dist/managed-agent-enrollment.d.ts +29 -1
- package/dist/managed-agent-enrollment.d.ts.map +1 -1
- package/dist/managed-agent-enrollment.js +45 -1
- package/dist/managed-agent-enrollment.js.map +1 -1
- package/dist/manager-admin-authorization.d.ts +13 -4
- package/dist/manager-admin-authorization.d.ts.map +1 -1
- package/dist/manager-admin-authorization.js +15 -7
- package/dist/manager-admin-authorization.js.map +1 -1
- package/dist/manager-authority.d.ts +11 -7
- package/dist/manager-authority.d.ts.map +1 -1
- package/dist/manager-authority.js +9 -7
- package/dist/manager-authority.js.map +1 -1
- package/dist/manager-goal-index.d.ts +2 -3
- package/dist/manager-goal-index.d.ts.map +1 -1
- package/dist/manager-goal-index.js +2 -2
- package/dist/manager-goal-index.js.map +1 -1
- package/dist/manager-maintenance.d.ts +2 -3
- package/dist/manager-maintenance.d.ts.map +1 -1
- package/dist/manager-maintenance.js +8 -2
- package/dist/manager-maintenance.js.map +1 -1
- package/dist/permissions.d.ts +15 -1
- package/dist/permissions.d.ts.map +1 -1
- package/dist/permissions.js +20 -1
- package/dist/permissions.js.map +1 -1
- package/dist/platform-control.d.ts +47 -0
- package/dist/platform-control.d.ts.map +1 -0
- package/dist/platform-control.js +117 -0
- package/dist/platform-control.js.map +1 -0
- package/dist/provider.d.ts.map +1 -1
- package/dist/provider.js +36 -11
- package/dist/provider.js.map +1 -1
- package/dist/records-scanner.d.ts.map +1 -1
- package/dist/records-scanner.js +3 -2
- package/dist/records-scanner.js.map +1 -1
- package/dist/retained-manager-validation.d.ts +9 -6
- package/dist/retained-manager-validation.d.ts.map +1 -1
- package/dist/retained-manager-validation.js +9 -7
- package/dist/retained-manager-validation.js.map +1 -1
- package/dist/service.d.ts +75 -29
- package/dist/service.d.ts.map +1 -1
- package/dist/service.js +127 -31
- package/dist/service.js.map +1 -1
- package/dist/session-redemption.d.ts +51 -0
- package/dist/session-redemption.d.ts.map +1 -0
- package/dist/session-redemption.js +61 -0
- package/dist/session-redemption.js.map +1 -0
- package/dist/token.d.ts +15 -2
- package/dist/token.d.ts.map +1 -1
- package/dist/token.js +30 -3
- package/dist/token.js.map +1 -1
- package/package.json +3 -3
|
@@ -11,8 +11,9 @@
|
|
|
11
11
|
* must not be able to reach the host's writers. `supervise` is required explicitly — `spawn` and
|
|
12
12
|
* `admin` are ordinary agent capabilities and must never imply supervision of a manager lifecycle.
|
|
13
13
|
*/
|
|
14
|
-
import { EpEnvelopeError, managedRetirementOpId, parseRemoteManagedAgentEnrollmentRequest, parseRemoteManagedAgentPrepareRetirementRequest, remoteManagerActors, } from "@cotal-ai/core";
|
|
14
|
+
import { EpEnvelopeError, managedRetirementOpId, parseRemoteManagedAgentEnrollmentRequest, parseRemoteManagedAgentPrepareRetirementRequest, parseRemoteManagedAgentRuntimeCreateRequest, parseRemoteManagedAgentRuntimeStatusRequest, remoteManagerActors, } from "@cotal-ai/core";
|
|
15
15
|
import { timingSafeEqual } from "node:crypto";
|
|
16
|
+
import { ledgerAuthorizeGrant } from "./ledger.js";
|
|
16
17
|
import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
|
|
17
18
|
/** Host policy authorizing one fresh managed-agent enrollment. Returns the parsed request so the
|
|
18
19
|
* caller consumes the validated copy rather than the raw body it received. */
|
|
@@ -64,4 +65,47 @@ export async function authorizeRemoteManagedAgentPrepareRetirement(args) {
|
|
|
64
65
|
throw new EpEnvelopeError("permission-denied", "manager prepare-retirement proof does not match current host registration");
|
|
65
66
|
return r;
|
|
66
67
|
}
|
|
68
|
+
/**
|
|
69
|
+
* The shared runtime door: the enrollment door's gate, epoch, and proof checks, plus the ledger
|
|
70
|
+
* grant read here rather than passed in, so no host composition can decide without it.
|
|
71
|
+
*/
|
|
72
|
+
async function authorizeRemoteManagedAgentRuntime(r, args, what) {
|
|
73
|
+
if (r.space !== args.space)
|
|
74
|
+
throw new EpEnvelopeError("permission-denied", `${what} request names space ${r.space}, not host space ${args.space}`);
|
|
75
|
+
if (r.target.owner !== args.owner)
|
|
76
|
+
throw new EpEnvelopeError("permission-denied", `${what} target owner "${r.target.owner}" does not match authenticated owner "${args.owner}"`);
|
|
77
|
+
let scope;
|
|
78
|
+
try {
|
|
79
|
+
scope = ledgerAuthorizeGrant(args.dir)(args.owner, r.actor).scope ?? [];
|
|
80
|
+
}
|
|
81
|
+
catch (e) {
|
|
82
|
+
throw new EpEnvelopeError("permission-denied", `${what} found no ledger grant for the manager actor: ${e instanceof Error ? e.message : String(e)}`);
|
|
83
|
+
}
|
|
84
|
+
if (!scope.includes("supervise"))
|
|
85
|
+
throw new EpEnvelopeError("permission-denied", `${what} needs scope "supervise"; spawn/admin do not imply it`);
|
|
86
|
+
const actors = remoteManagerActors(r.instanceId);
|
|
87
|
+
const gate = await args.observeManagerGate(r.instanceId);
|
|
88
|
+
if (!gate || gate.state !== "open")
|
|
89
|
+
throw new EpEnvelopeError("failed-precondition", `${what} found no current open manager gate for instance ${r.instanceId}`);
|
|
90
|
+
const servePrincipal = `${args.owner}.${actors.serve}`;
|
|
91
|
+
if (gate.principal !== servePrincipal)
|
|
92
|
+
throw new EpEnvelopeError("permission-denied", `manager gate belongs to ${gate.principal}, not serve principal ${servePrincipal}`);
|
|
93
|
+
if (gate.processEpoch !== r.serveEpoch)
|
|
94
|
+
throw new EpEnvelopeError("conflict", `manager serve epoch ${r.serveEpoch} is stale; current is ${gate.processEpoch}`);
|
|
95
|
+
const expectedProof = remoteManagerCurrentRegistrationProof(args.proofSecret, args.owner, r, gate);
|
|
96
|
+
if (!timingSafeEqual(Buffer.from(r.registrationProof), Buffer.from(expectedProof)))
|
|
97
|
+
throw new EpEnvelopeError("permission-denied", `manager ${what} proof does not match current host registration`);
|
|
98
|
+
return { owner: args.owner, instanceId: r.instanceId, actor: r.actor, target: { ...r.target } };
|
|
99
|
+
}
|
|
100
|
+
/**
|
|
101
|
+
* Host policy deciding one hosted runtime create (class A). It touches no provider and persists
|
|
102
|
+
* nothing. The host applies its own intent match and performs the create after this returns.
|
|
103
|
+
*/
|
|
104
|
+
export async function authorizeRemoteManagedAgentRuntimeCreate(args) {
|
|
105
|
+
return authorizeRemoteManagedAgentRuntime(parseRemoteManagedAgentRuntimeCreateRequest(args.request), args, "managed agent runtime-create");
|
|
106
|
+
}
|
|
107
|
+
/** Host policy authenticating one runtime status read. It authorizes no effect. */
|
|
108
|
+
export async function authorizeRemoteManagedAgentRuntimeStatus(args) {
|
|
109
|
+
return authorizeRemoteManagedAgentRuntime(parseRemoteManagedAgentRuntimeStatusRequest(args.request), args, "managed agent runtime-status");
|
|
110
|
+
}
|
|
67
111
|
//# sourceMappingURL=managed-agent-enrollment.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"managed-agent-enrollment.js","sourceRoot":"","sources":["../src/managed-agent-enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,wCAAwC,EACxC,+CAA+C,EAC/C,mBAAmB,
|
|
1
|
+
{"version":3,"file":"managed-agent-enrollment.js","sourceRoot":"","sources":["../src/managed-agent-enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,wCAAwC,EACxC,+CAA+C,EAC/C,2CAA2C,EAC3C,2CAA2C,EAC3C,mBAAmB,GAKpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAmBzF;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAA+C;IAE/C,MAAM,CAAC,GAAG,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5H,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+EAA+E,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4EAA4E,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/I,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mEAAmE,CAAC,CAAC;IACtH,OAAO,CAAC,CAAC;AACX,CAAC;AAWD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,IAAsD;IAEtD,MAAM,CAAC,GAAG,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uFAAuF,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC,MAAM,CAAC,KAAK,yCAAyC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC3J,gGAAgG;IAChG,iEAAiE;IACjE,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QACzB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC,IAAI,gDAAgD,YAAY,aAAa,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACrL,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,sEAAsE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACzI,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2EAA2E,CAAC,CAAC;IAC9H,OAAO,CAAC,CAAC;AACX,CAAC;AAqBD;;;GAGG;AACH,KAAK,UAAU,kCAAkC,CAC/C,CAAkF,EAClF,IAAsE,EACtE,IAAY;IAEZ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,yCAAyC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAChJ,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,iDAAiD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,uDAAuD,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,IAAI,oDAAoD,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9H,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,WAAW,IAAI,iDAAiD,CAAC,CAAC;IACnH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,IAAoF;IAEpF,OAAO,kCAAkC,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC;AAC7I,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,IAAoF;IAEpF,OAAO,kCAAkC,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC;AAC7I,CAAC"}
|
|
@@ -1,10 +1,13 @@
|
|
|
1
|
-
import { type RemoteManagerAdminAuthorizationRequest, type RemoteManagerAdminAuthorizationResult } from "@cotal-ai/core";
|
|
2
|
-
|
|
1
|
+
import { type RemoteManagerAdminAuthorizationRequest, type RemoteManagerAdminAuthorizationResult, type PlatformControlAssignment } from "@cotal-ai/core";
|
|
2
|
+
/** `allowPlatform` admits a platform `p_…` caller owner, for the platform control holder only
|
|
3
|
+
* (SPEC 13.1), so its admin check answers the same non-oracular decision as any other caller. */
|
|
4
|
+
export declare function parseRemoteManagerAdminAuthorizationRequest(raw: unknown, opts?: {
|
|
5
|
+
allowPlatform?: boolean;
|
|
6
|
+
}): RemoteManagerAdminAuthorizationRequest;
|
|
3
7
|
export declare function authorizeRemoteManagerAdmin(args: {
|
|
4
8
|
request: RemoteManagerAdminAuthorizationRequest;
|
|
5
9
|
space: string;
|
|
6
10
|
managerOwner: string;
|
|
7
|
-
managerScope: string[];
|
|
8
11
|
proofSecret: string | Uint8Array;
|
|
9
12
|
dir: string;
|
|
10
13
|
observeManagerGate: (instanceId: string) => Promise<{
|
|
@@ -13,5 +16,11 @@ export declare function authorizeRemoteManagerAdmin(args: {
|
|
|
13
16
|
processEpoch: number;
|
|
14
17
|
registrationRevision: number;
|
|
15
18
|
} | null>;
|
|
16
|
-
}
|
|
19
|
+
} & ({
|
|
20
|
+
managerScope: string[];
|
|
21
|
+
managerAssignment?: never;
|
|
22
|
+
} | {
|
|
23
|
+
managerAssignment: PlatformControlAssignment;
|
|
24
|
+
managerScope?: never;
|
|
25
|
+
})): Promise<RemoteManagerAdminAuthorizationResult>;
|
|
17
26
|
//# sourceMappingURL=manager-admin-authorization.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-admin-authorization.d.ts","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"manager-admin-authorization.d.ts","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,KAAK,yBAAyB,EAC/B,MAAM,gBAAgB,CAAC;AASxB;iGACiG;AACjG,wBAAgB,2CAA2C,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,sCAAsC,CAyCxJ;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,sCAAsC,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,CAAC;IAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,iBAAiB,EAAE,yBAAyB,CAAC;IAAC,YAAY,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CA8BpL"}
|
|
@@ -1,10 +1,13 @@
|
|
|
1
|
-
import { EpEnvelopeError, assertDerivedOwnerToken, assertLifecycleToken, assertValidOwnerToken, remoteManagerActors, } from "@cotal-ai/core";
|
|
1
|
+
import { EpEnvelopeError, assertDerivedOwnerToken, assertPrincipalOwnerToken, assertLifecycleToken, assertValidOwnerToken, remoteManagerActors, } from "@cotal-ai/core";
|
|
2
2
|
import { timingSafeEqual } from "node:crypto";
|
|
3
3
|
import { findActorUnified } from "./ledger.js";
|
|
4
|
+
import { requireManagerAuthorityHolder } from "./platform-control.js";
|
|
4
5
|
import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
|
|
5
6
|
const identityNames = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
|
|
6
7
|
const bad = (message) => { throw new EpEnvelopeError("bad-request", `manager admin authorization request ${message}`); };
|
|
7
|
-
|
|
8
|
+
/** `allowPlatform` admits a platform `p_…` caller owner, for the platform control holder only
|
|
9
|
+
* (SPEC 13.1), so its admin check answers the same non-oracular decision as any other caller. */
|
|
10
|
+
export function parseRemoteManagerAdminAuthorizationRequest(raw, opts = {}) {
|
|
8
11
|
if (raw === null || typeof raw !== "object" || Array.isArray(raw))
|
|
9
12
|
bad("must be an object");
|
|
10
13
|
const o = raw;
|
|
@@ -49,7 +52,10 @@ export function parseRemoteManagerAdminAuthorizationRequest(raw) {
|
|
|
49
52
|
for (const key of ["owner", "actor", "lifecycleUid"])
|
|
50
53
|
if (typeof caller[key] !== "string" || caller[key].length === 0)
|
|
51
54
|
bad(`requires non-empty caller.${key}`);
|
|
52
|
-
|
|
55
|
+
if (opts.allowPlatform)
|
|
56
|
+
assertPrincipalOwnerToken(caller.owner, { allowPlatform: true });
|
|
57
|
+
else
|
|
58
|
+
assertDerivedOwnerToken(caller.owner);
|
|
53
59
|
assertValidOwnerToken(caller.actor);
|
|
54
60
|
assertLifecycleToken(caller.lifecycleUid, "manager admin authorization caller lifecycleUid");
|
|
55
61
|
return {
|
|
@@ -61,11 +67,12 @@ export function parseRemoteManagerAdminAuthorizationRequest(raw) {
|
|
|
61
67
|
};
|
|
62
68
|
}
|
|
63
69
|
export async function authorizeRemoteManagerAdmin(args) {
|
|
64
|
-
const request = parseRemoteManagerAdminAuthorizationRequest(args.request);
|
|
70
|
+
const request = parseRemoteManagerAdminAuthorizationRequest(args.request, { allowPlatform: args.managerAssignment !== undefined });
|
|
65
71
|
if (request.space !== args.space)
|
|
66
72
|
throw new EpEnvelopeError("permission-denied", `manager admin authorization names space ${request.space}, not this host space ${args.space}`);
|
|
67
|
-
|
|
68
|
-
|
|
73
|
+
requireManagerAuthorityHolder(args.managerAssignment !== undefined
|
|
74
|
+
? { holder: "platform", owner: args.managerOwner, assignment: args.managerAssignment }
|
|
75
|
+
: { owner: args.managerOwner, scope: args.managerScope ?? [] }, request.instanceId, 'manager admin authorization needs manager scope "supervise"');
|
|
69
76
|
const actors = remoteManagerActors(request.instanceId);
|
|
70
77
|
const gate = await args.observeManagerGate(request.instanceId);
|
|
71
78
|
if (!gate || gate.state !== "open")
|
|
@@ -81,8 +88,9 @@ export async function authorizeRemoteManagerAdmin(args) {
|
|
|
81
88
|
// A valid current-manager request gets one non-oracular decision. The authoritative unified row is
|
|
82
89
|
// read fresh for every call. Absence, revocation, a narrowed scope, owner drift, and lifecycle drift
|
|
83
90
|
// are all the same `false`; corrupt/unreadable state throws and therefore fails the operation closed.
|
|
91
|
+
// The ledger holds rows for derived owners only, so a platform owner's caller is that same absence.
|
|
84
92
|
let authorized = false;
|
|
85
|
-
if (request.caller.owner === args.managerOwner) {
|
|
93
|
+
if (request.caller.owner === args.managerOwner && args.managerAssignment === undefined) {
|
|
86
94
|
const row = findActorUnified(args.dir, request.caller.owner, request.caller.actor);
|
|
87
95
|
authorized = row?.lifecycleUid === request.caller.lifecycleUid && row.scope.includes("admin");
|
|
88
96
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-admin-authorization.js","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,
|
|
1
|
+
{"version":3,"file":"manager-admin-authorization.js","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAEzF,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAExI;iGACiG;AACjG,MAAM,UAAU,2CAA2C,CAAC,GAAY,EAAE,OAAoC,EAAE;IAC9G,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5J,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,6BAA6B;QAAE,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAC3H,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,wCAAwC,CAAC,CAAC;IACvF,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,0CAA0C,CAAC,CAAC;IAClG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACxH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAqC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrJ,MAAM,UAAU,GAAG,EAA0D,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACzK,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5G,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAY,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAiC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;QAAE,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAU;QAC3D,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAC3G,IAAI,IAAI,CAAC,aAAa;QAAE,yBAAyB,CAAC,MAAM,CAAC,KAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;;QAC9F,uBAAuB,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IACrD,qBAAqB,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IAC9C,oBAAoB,CAAC,MAAM,CAAC,YAAsB,EAAE,iDAAiD,CAAC,CAAC;IACvG,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe;QAC7F,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACxF,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAClF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,UAAU;QAC9C,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE;KACtH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IASkF;IAClI,MAAM,OAAO,GAAG,2CAA2C,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC,CAAC;IACnI,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,OAAO,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAChL,6BAA6B,CAC3B,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE;QACtF,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,EAChE,OAAO,CAAC,UAAU,EAClB,6DAA6D,CAC9D,CAAC;IACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,+EAA+E,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1L,MAAM,iBAAiB,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACjE,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+CAA+C,IAAI,CAAC,SAAS,SAAS,iBAAiB,EAAE,CAAC,CAAC;IACpL,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,2CAA2C,OAAO,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/L,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CAAC;IAEnI,mGAAmG;IACnG,qGAAqG;IACrG,sGAAsG;IACtG,oGAAoG;IACpG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACvF,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,UAAU,GAAG,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { remoteManagerActors, type RemoteManagerAuthorityMaterial, type RemoteManagerAuthorityRequest, type RemoteRunAdmissionRequest, type RemoteRunAttemptRequest, type RunAdmissionView, type RunStatusValue, type RunDriverGrantArgs, type RunOperatorGrantArgs, type RemoteRunAdmissionResult, type IssuedStore, type IssuedSourceRef } from "@cotal-ai/core";
|
|
2
2
|
import type { KV } from "@nats-io/kv";
|
|
3
|
+
import { type ManagerAuthorityHolder } from "./platform-control.js";
|
|
3
4
|
/** Host-only renewal authorization. The embedding host supplies a fresh gate and active run
|
|
4
5
|
* observation from its authoritative stores, never coordinates asserted by the participant. */
|
|
5
6
|
export declare function authorizeRemoteManagerRenewal(args: {
|
|
@@ -23,11 +24,10 @@ export declare function authorizeRemoteManagerRenewal(args: {
|
|
|
23
24
|
instanceId: string;
|
|
24
25
|
} | null>;
|
|
25
26
|
}): Promise<void>;
|
|
26
|
-
/** Host-only typed request after the IdP proof and ledger row
|
|
27
|
-
|
|
27
|
+
/** Host-only typed request after the IdP proof and ledger row (a human holder) or the platform
|
|
28
|
+
* control assignment (a platform holder) have been authenticated. */
|
|
29
|
+
export type IssueRemoteManagerAuthorityArgs = ManagerAuthorityHolder & {
|
|
28
30
|
request: RemoteManagerAuthorityRequest;
|
|
29
|
-
owner: string;
|
|
30
|
-
scope: string[];
|
|
31
31
|
/** The host-side phase executor. It validates the live instance/gate state and signs only the
|
|
32
32
|
* phase's fixed profile set for the caller-generated nkeys. */
|
|
33
33
|
issue: (args: {
|
|
@@ -45,9 +45,13 @@ export interface IssueRemoteManagerAuthorityArgs {
|
|
|
45
45
|
request: RemoteManagerAuthorityRequest;
|
|
46
46
|
}) => Promise<void>;
|
|
47
47
|
now?: () => number;
|
|
48
|
-
}
|
|
49
|
-
/** Closed request parser: unknown fields and profile-like extensions are refused, never ignored.
|
|
50
|
-
|
|
48
|
+
};
|
|
49
|
+
/** Closed request parser: unknown fields and profile-like extensions are refused, never ignored.
|
|
50
|
+
* `allowPlatform` admits a platform `p_…` retirement target owner, for the platform control holder
|
|
51
|
+
* only (SPEC 13.1); the retirement check still requires the target owner to equal the holder's. */
|
|
52
|
+
export declare function parseRemoteManagerAuthorityRequest(raw: unknown, opts?: {
|
|
53
|
+
allowPlatform?: boolean;
|
|
54
|
+
}): RemoteManagerAuthorityRequest;
|
|
51
55
|
/** Issue one lifecycle phase after the IdP proof and interactive row were fresh-read. */
|
|
52
56
|
export declare function issueRemoteManagerAuthority(args: IssueRemoteManagerAuthorityArgs): Promise<RemoteManagerAuthorityMaterial>;
|
|
53
57
|
type ManagerGate = {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-authority.d.ts","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"manager-authority.d.ts","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,mBAAmB,EACnB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAE7B,KAAK,WAAW,EAChB,KAAK,eAAe,EAQrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEnG;+FAC+F;AAC/F,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;IACV,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;KAC5G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB;AAED;qEACqE;AACrE,MAAM,MAAM,+BAA+B,GAAG,sBAAsB,GAAG;IACrE,OAAO,EAAE,6BAA6B,CAAC;IACvC;mEAC+D;IAC/D,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;QAC/C,OAAO,EAAE,6BAA6B,CAAC;KACxC,KAAK,OAAO,CAAC;QAAE,WAAW,EAAE,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G;iGAC6F;IAC7F,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,6BAA6B,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAMF;;mGAEmG;AACnG,wBAAgB,kCAAkC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,6BAA6B,CA6GtI;AAED,yFAAyF;AACzF,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,+BAA+B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CA4DhI;AAED,KAAK,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC;AAMnI,iGAAiG;AACjG,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,CA+BtF;AAuBD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,UAAU,EAAE,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAoCpC;AAKD,yDAAyD;AACzD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,uBAAuB,CAkClF;AAED,0FAA0F;AAC1F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAC;QAAC,SAAS,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,CAAA;CAAE,GACrL;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,oBAAoB,CAAA;KAAE,CAAA;CAAE,CAAC;AAE/G;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5D,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtE,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4BjC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
|
-
import { EpEnvelopeError, assertDerivedOwnerToken, assertLifecycleToken, assertValidOwnerToken, managedRetirementOpId, remoteManagerActors, EP_RAIL_V1, admissionKey, admissionSnapshot, createRunAdmission, isIssuedCaller, issuedPermitsSubject, parseEpSubject, } from "@cotal-ai/core";
|
|
1
|
+
import { EpEnvelopeError, assertDerivedOwnerToken, assertPrincipalOwnerToken, assertLifecycleToken, assertValidOwnerToken, managedRetirementOpId, remoteManagerActors, EP_RAIL_V1, admissionKey, admissionSnapshot, createRunAdmission, isIssuedCaller, issuedPermitsSubject, parseEpSubject, } from "@cotal-ai/core";
|
|
2
2
|
import { timingSafeEqual } from "node:crypto";
|
|
3
3
|
import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
|
|
4
|
+
import { requireManagerAuthorityHolder } from "./platform-control.js";
|
|
4
5
|
/** Host-only renewal authorization. The embedding host supplies a fresh gate and active run
|
|
5
6
|
* observation from its authoritative stores, never coordinates asserted by the participant. */
|
|
6
7
|
export async function authorizeRemoteManagerRenewal(args) {
|
|
@@ -29,8 +30,10 @@ export async function authorizeRemoteManagerRenewal(args) {
|
|
|
29
30
|
function requestError(what) {
|
|
30
31
|
throw new EpEnvelopeError("bad-request", `manager-service authority request ${what}`);
|
|
31
32
|
}
|
|
32
|
-
/** Closed request parser: unknown fields and profile-like extensions are refused, never ignored.
|
|
33
|
-
|
|
33
|
+
/** Closed request parser: unknown fields and profile-like extensions are refused, never ignored.
|
|
34
|
+
* `allowPlatform` admits a platform `p_…` retirement target owner, for the platform control holder
|
|
35
|
+
* only (SPEC 13.1); the retirement check still requires the target owner to equal the holder's. */
|
|
36
|
+
export function parseRemoteManagerAuthorityRequest(raw, opts = {}) {
|
|
34
37
|
if (raw === null || typeof raw !== "object" || Array.isArray(raw))
|
|
35
38
|
requestError("must be an object");
|
|
36
39
|
const o = raw;
|
|
@@ -111,7 +114,7 @@ export function parseRemoteManagerAuthorityRequest(raw) {
|
|
|
111
114
|
retirement = {
|
|
112
115
|
id: r.id,
|
|
113
116
|
target: {
|
|
114
|
-
owner: assertDerivedOwnerToken(target.owner),
|
|
117
|
+
owner: opts.allowPlatform ? assertPrincipalOwnerToken(target.owner, { allowPlatform: true }) : assertDerivedOwnerToken(target.owner),
|
|
115
118
|
actor: assertValidOwnerToken(target.actor),
|
|
116
119
|
lifecycleUid: target.lifecycleUid,
|
|
117
120
|
},
|
|
@@ -158,9 +161,8 @@ export function parseRemoteManagerAuthorityRequest(raw) {
|
|
|
158
161
|
}
|
|
159
162
|
/** Issue one lifecycle phase after the IdP proof and interactive row were fresh-read. */
|
|
160
163
|
export async function issueRemoteManagerAuthority(args) {
|
|
161
|
-
const r = parseRemoteManagerAuthorityRequest(args.request);
|
|
162
|
-
|
|
163
|
-
throw new EpEnvelopeError("permission-denied", 'manager-service authority needs scope "supervise"; spawn/admin do not imply it');
|
|
164
|
+
const r = parseRemoteManagerAuthorityRequest(args.request, { allowPlatform: args.holder === "platform" });
|
|
165
|
+
requireManagerAuthorityHolder(args, r.instanceId, 'manager-service authority needs scope "supervise"; spawn/admin do not imply it');
|
|
164
166
|
const actors = remoteManagerActors(r.instanceId);
|
|
165
167
|
const ids = Object.values(r.identities).map((identity) => identity.id);
|
|
166
168
|
if (r.retirement)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-authority.js","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EAanB,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAEzF;+FAC+F;AAC/F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAYnD;IACC,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC3E,YAAY,CAAC,8BAA8B,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,yEAAyE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+CAA+C,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uEAAuE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,GAAI,CAAC,MAAM;YAClG,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,GAAI,CAAC,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAI,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,GAAI,CAAC,YAAY;YAChH,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AAoBD,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,kCAAkC,CAAC,GAAY;IAC7D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IACpP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B;QAAE,YAAY,CAAC,wDAAwD,CAAC,CAAC;IAChI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC1N,YAAY,CAAC,mHAAmH,CAAC,CAAC;IACpI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,CAAU;QAC7F,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,8BAA8B,CAAC,CAAC;IAC7E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,gCAAgC,CAAC,CAAC;IACxF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC;QACvG,YAAY,CAAC,+DAA+D,CAAC,CAAC;IAChF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9H,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,sCAAsC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,EAAE,CAAC;QAC5I,YAAY,CAAC,4DAA4D,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;QACjE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,mCAAmC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;IAC1F,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACvF,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,+BAA+B,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACnG,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QACzE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,kDAAkD,CAAC,CAAC;IACjF,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,GAA0C,CAAC;QACvD,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gEAAgE;YAC5G,YAAY,CAAC,sGAAsG,CAAC,CAAC;QACvH,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAClE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACxE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC5E,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACjG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACxG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACxC,YAAY,CAAC,gHAAgH,CAAC,CAAC;QACjI,GAAG,GAAG,CAAiE,CAAC;IAC1E,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,qBAAqB,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,OAA8C,CAAC;QAC3D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAC3F,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC3I,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACzE,YAAY,CAAC,sEAAsE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC1F,IAAI,UAAuD,CAAC;IAC5D,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,UAAiD,CAAC;QAC9D,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,2BAA2B;YACvE,YAAY,CAAC,qEAAqE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,CAAC,MAA6C,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;YAC9E,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAC/G,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;YAC3H,YAAY,CAAC,uGAAuG,CAAC,CAAC;QACxH,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,kDAAkD,CAAC,CAAC;QAC9F,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvD,YAAY,CAAC,iFAAiF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvH,UAAU,GAAG;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC5C,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;YACD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,4BAA4B,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;IAC1F,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mCAAmC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7I,MAAM,UAAU,GAAG,EAAiD,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAmD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,UAAU;KACX,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAqC;IACrF,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CAAC;IACnI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,oGAAoG,CAAC,CAAC;IACjJ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC;QAC7I,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB;QACpD,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;QACpE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB;YAChC,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC;YAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU;oBAC1B,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;oBAC1C,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO;wBACvB,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;wBAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;4BACzB,CAAC,CAAC,CAAC,gBAAgB,CAAC;4BACpB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ;gCACxB,CAAC,CAAC,CAAC,qBAAqB,CAAC;gCAC3B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,QAAQ;QACzB,IAAI,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sCAAsC,IAAI,EAAE,CAAC,CAAC;IACtH,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sDAAsD,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACpF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,YAAY,EAAE,CAAC,CAAC,mBAAmB;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC5B,MAAM;QACN,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,WAAW;KACZ,CAAC;AACJ,CAAC;AAID,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,8BAA8B,CAAC,GAAY;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAChL,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB;QAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QAC/G,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,YAAY,CAAC,CAAC;IAC3D,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,qBAAqB,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAAE,cAAc,CAAC,qCAAqC,CAAC,CAAC;IACzJ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;QAAE,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACpI,MAAM,GAAG,GAAG,CAAC,CAAC,UAA4C,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9G,cAAc,CAAC,8CAA8C,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAA4B,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACzJ,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAA4C,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAqC,CAAC;IACpD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,eAAe;QAChG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC3G,cAAc,CAAC,0DAA0D,CAAC,CAAC;IAC7E,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAoB;QAC3H,mBAAmB,EAAE,CAAC,CAAC,mBAA6B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QACxI,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,UAAU;QAClG,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiB,EAAE;KACpE,CAAC;AACJ,CAAC;AAED;sFACsF;AACtF,KAAK,UAAU,6BAA6B,CAC1C,CAAuK,EACvK,IAA2K,EAC3K,IAAY;IAEZ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,kDAAkD,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,IAAI,wBAAwB,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gDAAgD,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAYpC;IACC,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAC7H,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAC7F,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QACnG,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,wHAAwH,CAAC,CAAC;IAC3K,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;IAChC,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QACjI,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+DAA+D,CAAC,CAAC;IAClH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;IACvH,MAAM,SAAS,GAAiB;QAC9B,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;QACjG,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;QACxE,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;KACrC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,GAAG,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,GAAG,CAAC;QAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;YACpH,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;YAC9D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,qDAAqD,CAAC,CAAC;QACjH,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC,yDAAyD;AACzD,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAAE,cAAc,CAAC,gCAAgC,CAAC,CAAC;IACvF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,8BAA8B,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9I,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAc,EAAE,WAAqB,EAAE,EAAE,EAAE;QACpE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,oCAAoC,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,uCAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5K,OAAO,CAA4B,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC,KAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;YACpI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACnK,cAAc,CAAC,wGAAwG,CAAC,CAAC;QAC3H,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;IAC3O,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC;QACzH,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,cAAc,CAAC,oEAAoE,CAAC,CAAC;IACvF,IAAI,OAAsC,CAAC;IAC3C,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;YAAE,cAAc,CAAC,qEAAqE,CAAC,CAAC;QAC5K,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAC/M,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAW/C;IACC,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,2DAA2D,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAC7H,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,uDAAuD,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,KAAK,KAAK,WAAW,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ;YAC7D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC5H,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;YAC5F,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,wDAAwD,CAAC,CAAC;QAChH,MAAM,GAAG,GAAuB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/K,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC;IAClL,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAS,CAAC;IACvB,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8DAA8D,CAAC,CAAC;IACnH,MAAM,WAAW,GAAyB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACzM,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;AAC7F,CAAC"}
|
|
1
|
+
{"version":3,"file":"manager-authority.js","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EAanB,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAA+B,MAAM,uBAAuB,CAAC;AAEnG;+FAC+F;AAC/F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAYnD;IACC,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC3E,YAAY,CAAC,8BAA8B,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,yEAAyE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+CAA+C,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uEAAuE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,GAAI,CAAC,MAAM;YAClG,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,GAAI,CAAC,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAI,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,GAAI,CAAC,YAAY;YAChH,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AAmBD,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;mGAEmG;AACnG,MAAM,UAAU,kCAAkC,CAAC,GAAY,EAAE,OAAoC,EAAE;IACrG,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IACpP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B;QAAE,YAAY,CAAC,wDAAwD,CAAC,CAAC;IAChI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC1N,YAAY,CAAC,mHAAmH,CAAC,CAAC;IACpI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,CAAU;QAC7F,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,8BAA8B,CAAC,CAAC;IAC7E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,gCAAgC,CAAC,CAAC;IACxF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC;QACvG,YAAY,CAAC,+DAA+D,CAAC,CAAC;IAChF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9H,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,sCAAsC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,EAAE,CAAC;QAC5I,YAAY,CAAC,4DAA4D,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;QACjE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,mCAAmC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;IAC1F,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACvF,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,+BAA+B,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACnG,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QACzE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,kDAAkD,CAAC,CAAC;IACjF,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,GAA0C,CAAC;QACvD,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gEAAgE;YAC5G,YAAY,CAAC,sGAAsG,CAAC,CAAC;QACvH,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAClE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACxE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC5E,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACjG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACxG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACxC,YAAY,CAAC,gHAAgH,CAAC,CAAC;QACjI,GAAG,GAAG,CAAiE,CAAC;IAC1E,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,qBAAqB,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,OAA8C,CAAC;QAC3D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAC3F,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC3I,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACzE,YAAY,CAAC,sEAAsE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC1F,IAAI,UAAuD,CAAC;IAC5D,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,UAAiD,CAAC;QAC9D,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,2BAA2B;YACvE,YAAY,CAAC,qEAAqE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,CAAC,MAA6C,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;YAC9E,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAC/G,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;YAC3H,YAAY,CAAC,uGAAuG,CAAC,CAAC;QACxH,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,kDAAkD,CAAC,CAAC;QAC9F,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvD,YAAY,CAAC,iFAAiF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvH,UAAU,GAAG;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACpI,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;YACD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,4BAA4B,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;IAC1F,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mCAAmC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7I,MAAM,UAAU,GAAG,EAAiD,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAmD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,UAAU;KACX,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAqC;IACrF,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC,CAAC;IAC1G,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,oGAAoG,CAAC,CAAC;IACjJ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC;QAC7I,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB;QACpD,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;QACpE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB;YAChC,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC;YAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU;oBAC1B,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;oBAC1C,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO;wBACvB,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;wBAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;4BACzB,CAAC,CAAC,CAAC,gBAAgB,CAAC;4BACpB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ;gCACxB,CAAC,CAAC,CAAC,qBAAqB,CAAC;gCAC3B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,QAAQ;QACzB,IAAI,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sCAAsC,IAAI,EAAE,CAAC,CAAC;IACtH,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sDAAsD,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACpF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,YAAY,EAAE,CAAC,CAAC,mBAAmB;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC5B,MAAM;QACN,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,WAAW;KACZ,CAAC;AACJ,CAAC;AAID,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,8BAA8B,CAAC,GAAY;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAChL,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB;QAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QAC/G,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,YAAY,CAAC,CAAC;IAC3D,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,qBAAqB,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAAE,cAAc,CAAC,qCAAqC,CAAC,CAAC;IACzJ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;QAAE,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACpI,MAAM,GAAG,GAAG,CAAC,CAAC,UAA4C,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9G,cAAc,CAAC,8CAA8C,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAA4B,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACzJ,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAA4C,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAqC,CAAC;IACpD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,eAAe;QAChG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC3G,cAAc,CAAC,0DAA0D,CAAC,CAAC;IAC7E,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAoB;QAC3H,mBAAmB,EAAE,CAAC,CAAC,mBAA6B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QACxI,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,UAAU;QAClG,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiB,EAAE;KACpE,CAAC;AACJ,CAAC;AAED;sFACsF;AACtF,KAAK,UAAU,6BAA6B,CAC1C,CAAuK,EACvK,IAA2K,EAC3K,IAAY;IAEZ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,kDAAkD,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,IAAI,wBAAwB,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gDAAgD,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAYpC;IACC,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAC7H,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAC7F,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QACnG,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,wHAAwH,CAAC,CAAC;IAC3K,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;IAChC,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QACjI,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+DAA+D,CAAC,CAAC;IAClH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;IACvH,MAAM,SAAS,GAAiB;QAC9B,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;QACjG,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;QACxE,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;KACrC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,GAAG,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,GAAG,CAAC;QAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;YACpH,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;YAC9D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,qDAAqD,CAAC,CAAC;QACjH,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC,yDAAyD;AACzD,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAAE,cAAc,CAAC,gCAAgC,CAAC,CAAC;IACvF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,8BAA8B,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9I,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAc,EAAE,WAAqB,EAAE,EAAE,EAAE;QACpE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,oCAAoC,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,uCAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5K,OAAO,CAA4B,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC,KAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;YACpI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACnK,cAAc,CAAC,wGAAwG,CAAC,CAAC;QAC3H,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;IAC3O,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC;QACzH,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,cAAc,CAAC,oEAAoE,CAAC,CAAC;IACvF,IAAI,OAAsC,CAAC;IAC3C,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;YAAE,cAAc,CAAC,qEAAqE,CAAC,CAAC;QAC5K,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAC/M,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAW/C;IACC,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,2DAA2D,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAC7H,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,uDAAuD,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,KAAK,KAAK,WAAW,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ;YAC7D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC5H,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;YAC5F,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,wDAAwD,CAAC,CAAC;QAChH,MAAM,GAAG,GAAuB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/K,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC;IAClL,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAS,CAAC;IACvB,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8DAA8D,CAAC,CAAC;IACnH,MAAM,WAAW,GAAyB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACzM,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;AAC7F,CAAC"}
|
|
@@ -1,10 +1,9 @@
|
|
|
1
1
|
import { type GoalIndexEntry, type RemoteManagerGoalIndexScanRequest, type RemoteManagerGoalIndexScanResult } from "@cotal-ai/core";
|
|
2
|
+
import { type ManagerAuthorityHolder } from "./platform-control.js";
|
|
2
3
|
export declare function parseRemoteManagerGoalIndexScanRequest(raw: unknown): RemoteManagerGoalIndexScanRequest;
|
|
3
|
-
export declare function authorizeRemoteManagerGoalIndexScan(args: {
|
|
4
|
+
export declare function authorizeRemoteManagerGoalIndexScan(args: ManagerAuthorityHolder & {
|
|
4
5
|
request: RemoteManagerGoalIndexScanRequest;
|
|
5
6
|
space: string;
|
|
6
|
-
owner: string;
|
|
7
|
-
scope: string[];
|
|
8
7
|
proofSecret: string | Uint8Array;
|
|
9
8
|
observeManagerGate: (instanceId: string) => Promise<{
|
|
10
9
|
state: "open" | "frozen" | "retired";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-goal-index.d.ts","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,EACtC,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"manager-goal-index.d.ts","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,EACtC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAKnG,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,OAAO,GAAG,iCAAiC,CA+BtG;AAED,wBAAsB,mCAAmC,CAAC,IAAI,EAAE,sBAAsB,GAAG;IACvF,OAAO,EAAE,iCAAiC,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAc7C;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,iCAAiC,EAC1C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,cAAc,EAAE,GACxB,gCAAgC,CASlC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { EpEnvelopeError, assertLifecycleToken, assertValidOwnerToken, remoteManagerActors, } from "@cotal-ai/core";
|
|
2
2
|
import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
|
|
3
3
|
import { timingSafeEqual } from "node:crypto";
|
|
4
|
+
import { requireManagerAuthorityHolder } from "./platform-control.js";
|
|
4
5
|
const identityNames = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
|
|
5
6
|
const bad = (message) => { throw new EpEnvelopeError("bad-request", `manager goal-index scan request ${message}`); };
|
|
6
7
|
export function parseRemoteManagerGoalIndexScanRequest(raw) {
|
|
@@ -51,8 +52,7 @@ export async function authorizeRemoteManagerGoalIndexScan(args) {
|
|
|
51
52
|
const request = parseRemoteManagerGoalIndexScanRequest(args.request);
|
|
52
53
|
if (request.space !== args.space)
|
|
53
54
|
throw new EpEnvelopeError("permission-denied", `manager goal-index scan names space ${request.space}, not this host space ${args.space}`);
|
|
54
|
-
|
|
55
|
-
throw new EpEnvelopeError("permission-denied", 'manager goal-index scan needs scope "supervise"');
|
|
55
|
+
requireManagerAuthorityHolder(args, request.instanceId, 'manager goal-index scan needs scope "supervise"');
|
|
56
56
|
const actors = remoteManagerActors(request.instanceId);
|
|
57
57
|
const gate = await args.observeManagerGate(request.instanceId);
|
|
58
58
|
if (!gate || gate.state !== "open")
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-goal-index.js","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"manager-goal-index.js","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAA+B,MAAM,uBAAuB,CAAC;AAEnG,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpI,MAAM,UAAU,sCAAsC,CAAC,GAAY;IACjE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAClJ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,yBAAyB;QAAE,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACnH,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,oCAAoC,CAAC,CAAC;IACnF,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,sCAAsC,CAAC,CAAC;IAC9F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACxH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAqC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrJ,MAAM,UAAU,GAAG,EAAqD,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACzK,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5G,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAY,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe;QACzF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACxF,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAClF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,UAAU;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,IAOzD;IACC,MAAM,OAAO,GAAG,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uCAAuC,OAAO,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5K,6BAA6B,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,iDAAiD,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,2EAA2E,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtL,MAAM,iBAAiB,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,IAAI,CAAC,SAAS,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAChL,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uCAAuC,OAAO,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,4EAA4E,CAAC,CAAC;IAC/H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA0C,EAC1C,KAAa,EACb,OAAyB;IAEzB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iEAAiE,CAAC,CAAC;IAC3G,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;QACxF,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChF,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC1E,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO;KACxC,CAAC;AACJ,CAAC"}
|
|
@@ -1,11 +1,10 @@
|
|
|
1
1
|
import { type RemoteManagerMaintenanceRequest, type RemoteManagerMaintenanceResult } from "@cotal-ai/core";
|
|
2
2
|
import type { AuthLedgerScanner } from "./ledger-scanner.js";
|
|
3
|
+
import { type ManagerAuthorityHolder } from "./platform-control.js";
|
|
3
4
|
export declare function parseRemoteManagerMaintenanceRequest(raw: unknown): RemoteManagerMaintenanceRequest;
|
|
4
|
-
export declare function authorizeRemoteManagerMaintenance(args: {
|
|
5
|
+
export declare function authorizeRemoteManagerMaintenance(args: ManagerAuthorityHolder & {
|
|
5
6
|
request: RemoteManagerMaintenanceRequest;
|
|
6
7
|
space: string;
|
|
7
|
-
owner: string;
|
|
8
|
-
scope: string[];
|
|
9
8
|
observeManagerGate(instanceId: string): Promise<{
|
|
10
9
|
state: "open" | "frozen" | "retired";
|
|
11
10
|
principal: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-maintenance.d.ts","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"manager-maintenance.d.ts","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAQnG,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,OAAO,GAAG,+BAA+B,CAiDlG;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE,sBAAsB,GAAG;IACrF,OAAO,EAAE,+BAA+B,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,GAAG,IAAI,CAAC,CAAC;IACV,OAAO,EAAE,iBAAiB,CAAC;CAC5B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAmC3C;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,+BAA+B,EACxC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,UAAU,GAAG,gBAAgB,CAAC,GAC1E,8BAA8B,CAEhC"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import { EpEnvelopeError, assertLifecycleToken, assertValidOwnerToken, epcredFamilyPrefix, parseLedgerRow, remoteManagerActors, } from "@cotal-ai/core";
|
|
2
|
+
import { requireManagerAuthorityHolder } from "./platform-control.js";
|
|
2
3
|
const identityNames = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
|
|
3
4
|
function requestError(what) {
|
|
4
5
|
throw new EpEnvelopeError("bad-request", `manager-service maintenance request ${what}`);
|
|
@@ -67,13 +68,18 @@ export async function authorizeRemoteManagerMaintenance(args) {
|
|
|
67
68
|
const r = parseRemoteManagerMaintenanceRequest(args.request);
|
|
68
69
|
if (r.space !== args.space)
|
|
69
70
|
throw new EpEnvelopeError("permission-denied", `manager maintenance request names space ${r.space}, not this host space ${args.space}`);
|
|
70
|
-
|
|
71
|
-
|
|
71
|
+
requireManagerAuthorityHolder(args, r.instanceId, 'manager maintenance needs scope "supervise"; spawn/admin do not imply it');
|
|
72
|
+
// The platform arm reaches only its own assigned instance, for both operations. The human arm may
|
|
73
|
+
// still reconcile a foreign slot holder in its space.
|
|
74
|
+
if (args.holder === "platform" && r.targetInstanceId !== args.assignment.instanceId)
|
|
75
|
+
throw new EpEnvelopeError("permission-denied", `platform control maintenance may target only assigned instance ${args.assignment.instanceId}, not ${r.targetInstanceId}`);
|
|
72
76
|
if (r.operation === "evict-family-principal" && r.targetInstanceId !== r.instanceId)
|
|
73
77
|
throw new EpEnvelopeError("permission-denied", `manager maintenance eviction may target only caller instance ${r.instanceId}, not ${r.targetInstanceId}`);
|
|
74
78
|
const gate = await args.observeManagerGate(r.targetInstanceId);
|
|
75
79
|
if (!gate || gate.state === "retired")
|
|
76
80
|
throw new EpEnvelopeError("failed-precondition", `manager maintenance found no live registration gate for instance ${r.targetInstanceId}`);
|
|
81
|
+
if (args.holder === "platform" && gate.principal !== `${args.owner}.${remoteManagerActors(r.targetInstanceId).serve}`)
|
|
82
|
+
throw new EpEnvelopeError("permission-denied", `platform control maintenance gate belongs to ${gate.principal}, not the platform serve principal`);
|
|
77
83
|
if (r.operation === "evict-family-principal") {
|
|
78
84
|
const servePrincipal = `${args.owner}.${remoteManagerActors(r.instanceId).serve}`;
|
|
79
85
|
if (gate.principal !== servePrincipal)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager-maintenance.js","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"manager-maintenance.js","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,6BAA6B,EAA+B,MAAM,uBAAuB,CAAC;AAEnG,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAElG,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,GAAY;IAC/D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB;QAC/E,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW;KAC3D,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,6BAA6B;QACvD,YAAY,CAAC,0DAA0D,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB;QACtF,YAAY,CAAC,wEAAwE,CAAC,CAAC;IACzF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QACjH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,gCAAgC,CAAC,CAAC;IAC/E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,kCAAkC,CAAC,CAAC;IAC1F,oBAAoB,CAAC,CAAC,CAAC,gBAA0B,EAAE,sCAAsC,CAAC,CAAC;IAC3F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,2CAA2C,CAAC,CAAC;IAC7H,CAAC;SAAM,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;QAAE,YAAY,CAAC,iDAAiD,CAAC,CAAC;IACtG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,YAAY,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,EAAmD,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,UAAU;QACV,gBAAgB,EAAE,CAAC,CAAC,gBAA0B;QAC9C,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IAUvD;IACC,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1I,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,0EAA0E,CAAC,CAAC;IAC9H,kGAAkG;IAClG,sDAAsD;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,CAAC,UAAU;QACjF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,kEAAkE,IAAI,CAAC,UAAU,CAAC,UAAU,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5K,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,UAAU;QACjF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gEAAgE,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5J,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QACnC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oEAAoE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7I,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACnH,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gDAAgD,IAAI,CAAC,SAAS,oCAAoC,CAAC,CAAC;IACrJ,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;YACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uCAAuC,IAAI,CAAC,SAAS,qDAAqD,cAAc,EAAE,CAAC,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnG,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;gBAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,+BAA+B,KAAK,CAAC,EAAE,oDAAoD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3J,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uDAAuD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,6DAA6D,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC5M,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAwC,EACxC,KAAa,EACb,MAA2E;IAE3E,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;AAC1C,CAAC"}
|