@cotal-ai/core 0.11.6 → 0.13.0

package/dist/endpoint-guard.js

@@ -0,0 +1,468 @@
+/**
+ * The GUARD CHECKPOINT (SPEC §13.6): the pre-effect authorization hook. A command carrying the
+ * governed `ai.cotal.guarded` trait MUST NOT effect until the guard endpoint named by the
+ * verified trait value answered ALLOW (class call). Answers: `allow | deny | hold` plus
+ * optional SIGNED obligations (attenuations the endpoint MUST apply; monotonic, §13.10 replay
+ * matrix: bound to the goal/request, reusable within it). `hold` converts the action to
+ * `waiting` on a checkpoint OWNED BY THE GUARD DECISION (the guard's authenticated responder
+ * is the checkpoint holder — only IT can release the hold). Timeout, an unreachable guard, a
+ * garbled answer, or an invalid obligation is DENY (fail closed). Ordering is
+ * guard-then-effect; side-effecting guards own their own reconciliation.
+ *
+ * This module is THE guard gate. There is exactly one: {@link runGuardGate} owns the guard
+ * call, the closed answer parse, and the D28 obligation verification, and BOTH production
+ * rails run through it — the ephemeral serve rail via `assertGovernedPreEffect` (which
+ * refuses hold, since an ephemeral request cannot wait) and the action composite via
+ * {@link gateGoalExecution} (which ROUTES hold into the checkpoint pause and a guard deny
+ * into the shared terminal commit). {@link reconcileGuardHold} is the durable backstop that
+ * converges a settled hold whose projection crashed mid-flight. The gate never guesses:
+ * every path that is not a well-formed, obligation-valid ALLOW or HOLD is a refusal.
+ */
+import { EpEnvelopeError } from "./endpoint-envelope.js";
+import { canonicalJson } from "./canonical.js";
+import { verifyArtifactSignature, resolveAnchorForUse, assertAnchorScopeCovers } from "./endpoint-signing.js";
+import { mintCheckpoint, resumeCheckpoint, readCheckpointSpec, readCheckpointSettle, expireCheckpoint } from "./endpoint-checkpoint.js";
+import { transitionGoal, commitGoalResult, projectGoalTerminal, readGoalSpec, readGoalStatus, readGoalResult, ownerCommitProof, claimGuardClearanceMint, snapshotRef } from "./endpoint-action.js";
+const isRec = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+/** THIS module is THE gate, so it claims the one-shot clearance mint at load: a guarded goal's
+ *  edge into `running` opens only with a clearance minted here - by the gate's own allow,
+ *  release, and reconcile arms, each of which verified the guard's answer or its recorded
+ *  settlement first. No other module can claim the mint (the second claim throws). */
+const mintGuardClearance = claimGuardClearanceMint();
+/** The gate-VERIFIED obligation sets, branded so the durable HOLD ingress can require that its
+ *  obligations came from {@link runGuardGate}'s verification (signature, anchor role/scope,
+ *  windows, request binding) and not from a structurally shaped fake: {@link holdGuardedGoal}
+ *  is a public composition seam, and an unverified set persisted there would return through
+ *  release/reconcile under the same trusted type as a verified one. Entries are DEEP-FROZEN at
+ *  verification, so a branded obligation cannot be mutated away from the bytes its signature
+ *  verified over. */
+const VERIFIED_OBLIGATIONS = new WeakSet();
+function deepFreeze(v) {
+    if (v === null || typeof v !== "object")
+        return;
+    for (const k of Object.keys(v))
+        deepFreeze(v[k]);
+    Object.freeze(v);
+}
+function denyClosed(why) {
+    throw new EpEnvelopeError("permission-denied", `guard gate DENIES: ${why} (SPEC 13.6: timeout, an unreachable guard, or a garbled answer is deny; the gate fails closed, never open)`);
+}
+function parseObligation(raw, i) {
+    if (!isRec(raw))
+        denyClosed(`obligation[${i}] is not an object`);
+    const o = raw;
+    const allowed = new Set(["v", "space", "requestId", "signer", "attenuations", "iat", "exp", "sig"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            denyClosed(`obligation[${i}] carries the unknown field "${k}" (closed schema)`);
+    if (o.v !== 1 || typeof o.space !== "string" || o.space.length === 0)
+        denyClosed(`obligation[${i}] has no version/space`);
+    if (typeof o.requestId !== "string" || o.requestId.length === 0)
+        denyClosed(`obligation[${i}] binds no requestId`);
+    if (!isRec(o.signer) || typeof o.signer.keyId !== "string")
+        denyClosed(`obligation[${i}] names no signer keyId`);
+    if (!Array.isArray(o.attenuations) || o.attenuations.length === 0 || !o.attenuations.every(isRec))
+        denyClosed(`obligation[${i}] carries no structured attenuations (an obligation that attenuates nothing is garbled)`);
+    for (const f of ["iat", "exp"])
+        if (typeof o[f] !== "number" || !Number.isSafeInteger(o[f]) || o[f] < 0)
+            denyClosed(`obligation[${i}] ${f} is not a non-negative safe integer`);
+    if (o.exp <= o.iat)
+        denyClosed(`obligation[${i}] exp is not after iat`);
+    if (typeof o.sig !== "string" || o.sig.length === 0)
+        denyClosed(`obligation[${i}] is unsigned`);
+    return o;
+}
+/** Race an await against the REMAINING guard budget: the whole gate (the guard call AND every
+ *  obligation's anchor resolution) is ONE bounded operation, so a stuck registry after the
+ *  guard answered cannot hang the gate. Timeout is DENY (SPEC 13.6: fail closed). Races
+ *  `Promise.resolve(p)` unconditionally (a non-native thenable must not bypass the deadline). */
+async function withGateBudget(p, remainingMs, what) {
+    if (remainingMs <= 0)
+        throw new EpEnvelopeError("permission-denied", `${what} found the guard budget already exhausted; the gate is one bounded operation and timeout is DENY (SPEC 13.6: fail closed)`);
+    let timer;
+    const deadline = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new EpEnvelopeError("permission-denied", `${what} did not answer within the remaining ${remainingMs}ms guard budget; timeout is DENY (SPEC 13.6: fail closed)`)), remainingMs);
+    });
+    try {
+        return await Promise.race([Promise.resolve(p), deadline]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** Verify one obligation against the trust-anchor registry: D28 signature over the EXACT RAW
+ *  artifact, `obligations` role, scope covering the GUARDED endpoint, anchor window at `iat`,
+ *  obligation window at `now`, space + request binding. Any failure denies (fail closed), and
+ *  the anchor resolution runs within the gate's REMAINING budget. */
+async function verifyObligation(raw, ob, i, opts) {
+    if (ob.space !== opts.space)
+        denyClosed(`obligation[${i}] is bound to space ${ob.space}, not ${opts.space}`);
+    if (ob.requestId !== opts.requestId)
+        denyClosed(`obligation[${i}] binds requestId ${ob.requestId}, not this request's ${opts.requestId} (an obligation is bound to its goal/request)`);
+    if (opts.now < ob.iat || opts.now > ob.exp)
+        denyClosed(`obligation[${i}] is outside its validity window [${ob.iat}, ${ob.exp}] at now ${opts.now}`);
+    let anchor;
+    try {
+        anchor = await withGateBudget(resolveAnchorForUse(opts.resolveAnchor, { keyId: ob.signer.keyId, role: "obligations", at: ob.iat }), opts.remainingMs(), `obligation[${i}]'s anchor resolution`);
+        assertAnchorScopeCovers(anchor, "obligations", opts.endpoint, `obligation[${i}] for endpoint`);
+        verifyArtifactSignature(raw, anchor);
+    }
+    catch (e) {
+        denyClosed(`obligation[${i}] does not verify (${e.message})`);
+    }
+}
+/** Parse the guard endpoint's raw answer body, CLOSED per decision. Anything else denies. */
+function parseGuardAnswer(raw) {
+    if (!isRec(raw))
+        denyClosed("the guard answered with a non-object body");
+    const o = raw;
+    const allowed = new Set(["v", "decision", "reason", "token", "holdDeadlineMs", "obligations"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            denyClosed(`the guard answer carries the unknown field "${k}" (closed schema)`);
+    if (o.v !== 1)
+        denyClosed("the guard answer version is not 1");
+    if (o.decision !== "allow" && o.decision !== "deny" && o.decision !== "hold")
+        denyClosed(`the guard decision ${JSON.stringify(o.decision)} is not allow|deny|hold`);
+    const rawObs = o.obligations === undefined ? [] : o.obligations;
+    if (!Array.isArray(rawObs))
+        denyClosed("the guard answer obligations is not an array");
+    if (o.decision === "deny") {
+        if (o.obligations !== undefined || o.token !== undefined || o.holdDeadlineMs !== undefined)
+            denyClosed("a deny answer carries allow/hold fields (garbled cross-variant answer)");
+        if (o.reason !== undefined && typeof o.reason !== "string")
+            denyClosed("the deny reason is not a string");
+        return { answer: { decision: "deny", ...(o.reason !== undefined ? { reason: o.reason } : {}) }, rawObligations: [] };
+    }
+    if (o.reason !== undefined)
+        denyClosed(`a ${o.decision} answer carries a deny reason (garbled cross-variant answer)`);
+    const obligations = rawObs.map((r, i) => parseObligation(r, i));
+    if (o.decision === "allow") {
+        if (o.token !== undefined || o.holdDeadlineMs !== undefined)
+            denyClosed("an allow answer carries hold fields (garbled cross-variant answer)");
+        return { answer: { decision: "allow", obligations }, rawObligations: rawObs };
+    }
+    if (typeof o.token !== "string" || o.token.length === 0)
+        denyClosed("a hold answer names no checkpoint token");
+    if (typeof o.holdDeadlineMs !== "number" || !Number.isSafeInteger(o.holdDeadlineMs) || o.holdDeadlineMs <= 0)
+        denyClosed("a hold answer has no positive integer holdDeadlineMs (deadlines are mandatory, SPEC 13.6)");
+    return { answer: { decision: "hold", token: o.token, holdDeadlineMs: o.holdDeadlineMs, obligations }, rawObligations: rawObs };
+}
+/** Run the §13.6 guard gate for one guarded request: call the guard endpoint (via the injected
+ *  seam) within `deadlineMs`, and classify FAIL-CLOSED — the ONLY outcomes are a verified
+ *  ALLOW, a verified HOLD (the caller then wires the pause via {@link holdGuardedGoal}), or a
+ *  `permission-denied` throw. A timeout, transport failure, garbled answer, cross-variant
+ *  fields, or an obligation that does not verify (signature, scope, window, request binding)
+ *  all DENY. Ordering is guard-then-effect: call this BEFORE any effect. */
+export async function runGuardGate(opts) {
+    if (typeof opts.guardEndpoint !== "string" || opts.guardEndpoint.length === 0)
+        denyClosed("the guarded trait names no guard endpoint");
+    if (!Number.isSafeInteger(opts.deadlineMs) || opts.deadlineMs <= 0)
+        throw new EpEnvelopeError("failed-precondition", `the guard deadline must be a positive integer; got ${JSON.stringify(opts.deadlineMs)}`);
+    if (!Number.isSafeInteger(opts.now) || opts.now < 0)
+        throw new EpEnvelopeError("failed-precondition", `now must be a non-negative safe integer; got ${JSON.stringify(opts.now)}`);
+    // ONE total gate budget: the guard call and every obligation verification share this clock,
+    // so a stuck anchor registry AFTER the guard answered is still a bounded DENY.
+    const gateDeadlineAt = Date.now() + opts.deadlineMs;
+    const remainingMs = () => gateDeadlineAt - Date.now();
+    let called;
+    try {
+        called = await withGateBudget(opts.callGuard({
+            guardEndpoint: opts.guardEndpoint,
+            endpoint: opts.request.endpoint,
+            ...(opts.request.command !== undefined ? { command: opts.request.command } : {}),
+            requestId: opts.request.id,
+            caller: opts.request.caller,
+        }), remainingMs(), "the guard");
+    }
+    catch (e) {
+        if (e instanceof EpEnvelopeError && e.code === "permission-denied")
+            throw e;
+        denyClosed(`the guard call failed (${e?.message ?? String(e)})`);
+    }
+    if (!isRec(called))
+        denyClosed("the guard call seam returned no authenticated responder identity");
+    // SINGLE-READ the responder BEFORE any touch of the answer (security H3, both vectors): the
+    // `responder` PROPERTY itself is read exactly once into a local - an accessor on the seam
+    // result could otherwise answer the type-check with the authenticated identity and the
+    // capture with an attacker's - and the scalars are then read only from that one object,
+    // validated as read locals, and frozen before `called.answer` (whose serialization runs
+    // caller getters) is ever evaluated.
+    const rawResponder = called.responder;
+    if (!isRec(rawResponder))
+        denyClosed("the guard call seam returned no authenticated responder identity");
+    const responderId = rawResponder.id;
+    const responderUid = rawResponder.lifecycleUid;
+    if (typeof responderId !== "string" || responderId.length === 0 || typeof responderUid !== "string" || responderUid.length === 0)
+        denyClosed("the guard call seam returned no authenticated responder identity");
+    const responder = Object.freeze({ id: responderId, lifecycleUid: responderUid });
+    // SNAPSHOT the seam's answer to a DETACHED value BEFORE the parse and the anchor awaits: the
+    // obligation signatures verify over EXACTLY these bytes, so a caller that mutates the raw
+    // answer/obligations during the awaited anchor resolution can never split what was
+    // parsed/scoped from what the signature verifies (D28 consuming boundary).
+    let answerSnapshot;
+    try {
+        answerSnapshot = JSON.parse(canonicalJson(called.answer));
+    } // throws on non-interchangeable I-JSON; the detached tree is unreachable to the caller
+    catch (e) {
+        return denyClosed(`the guard answer is not interchangeable JSON (${e.message})`);
+    }
+    const { answer, rawObligations } = parseGuardAnswer(answerSnapshot);
+    if (answer.decision === "deny")
+        throw new EpEnvelopeError("permission-denied", `the guard denied this request${answer.reason !== undefined ? `: ${answer.reason}` : ""} (SPEC 13.6: guard-then-effect)`);
+    for (let i = 0; i < answer.obligations.length; i++)
+        await verifyObligation(rawObligations[i], answer.obligations[i], i, { resolveAnchor: opts.resolveAnchor, now: opts.now, space: opts.space, endpoint: opts.request.endpoint, requestId: opts.request.id, remainingMs });
+    // Brand + deep-freeze the VERIFIED set: from here on these exact objects (and only they)
+    // prove "verified by THIS gate" at the durable HOLD ingress, and cannot be mutated away
+    // from the bytes their signatures verified over.
+    for (const ob of answer.obligations) {
+        deepFreeze(ob);
+        VERIFIED_OBLIGATIONS.add(ob);
+    }
+    if (answer.decision === "allow")
+        return { decision: "allow", obligations: answer.obligations };
+    return { decision: "hold", token: answer.token, holdDeadlineMs: answer.holdDeadlineMs, obligations: answer.obligations, responder };
+}
+/** The ACTION composite's guard gate (§13.6): run by the OWNING instance for a guarded goal
+ *  BEFORE any execution effect — the counterpart of the ephemeral rail's
+ *  `assertGovernedPreEffect`, with hold ROUTED instead of refused. {@link runGuardGate} does
+ *  the calling, parsing, and obligation verification; this seam projects the verdict onto the
+ *  goal:
+ *   - ALLOW: the goal transitions accepted → running under the owner's construction-bound
+ *     proof (this projection is the owner's admission to execute) and the VERIFIED
+ *     obligations return for the executor, which MUST apply them;
+ *   - HOLD: {@link holdGuardedGoal} mints the guard-holder-bound checkpoint and projects
+ *     `waiting`;
+ *   - DENY (or ANY fail-closed gate refusal: timeout, garble, unverifiable obligation): the
+ *     goal commits terminal `failed` at the shared commit point under the OWNER's
+ *     construction-bound proof — the owner runs this gate, so the deny predicate is the
+ *     owner's own refusal to execute, carrying the gate's reason in the terminal payload.
+ *  Obligations bind to the GOAL id (§13.10: bound to its goal/request, reusable within it). */
+export async function gateGoalExecution(ctx, args) {
+    const goal = snapshotRef(args.goal);
+    // The gate runs only on a goal whose ACCEPTED record binds THIS guard (SPEC 13.6/13.7): the
+    // record's binding is what transitionGoal enforces on the edge into running, so a goal with
+    // no recorded binding would pass the gate here yet stay publicly transitionable - an
+    // unrecorded guard is unenforceable, and a mismatched one gates against the wrong authority.
+    // Both are wiring defects, refused loudly before the guard is consulted.
+    const gateSpec = await readGoalSpec(ctx, goal);
+    if (gateSpec === undefined)
+        throw new EpEnvelopeError("failed-precondition", `goal "${goal.goalId}" is unknown; the gate runs on an accepted goal (SPEC 13.6)`);
+    if (gateSpec.value.guard !== args.guardEndpoint)
+        throw new EpEnvelopeError("failed-precondition", `goal "${goal.goalId}"'s accepted record ${gateSpec.value.guard === undefined ? "binds no guard" : `binds guard ${JSON.stringify(gateSpec.value.guard)}`} but the gate was asked to consult ${JSON.stringify(args.guardEndpoint)}; an unrecorded or mismatched guard binding is unenforceable and never gates (SPEC 13.6/13.7)`);
+    let verdict;
+    try {
+        verdict = await runGuardGate({
+            guardEndpoint: args.guardEndpoint,
+            request: { endpoint: goal.endpoint, id: goal.goalId, caller: goal.caller },
+            callGuard: args.callGuard,
+            deadlineMs: args.deadlineMs,
+            now: args.now,
+            space: ctx.space,
+            resolveAnchor: args.resolveAnchor,
+        });
+    }
+    catch (e) {
+        if (!(e instanceof EpEnvelopeError && e.code === "permission-denied"))
+            throw e; // wiring errors propagate; only the gate's fail-closed deny terminalizes
+        const res = await commitGoalResult(ctx, {
+            ref: goal, now: args.now, cause: "deny", denial: { kind: "owner", owner: ownerCommitProof(ctx) },
+            data: { code: "permission-denied", reason: e.message },
+        });
+        return { outcome: "denied", won: res.won, fact: res.fact, status: res.status };
+    }
+    if (verdict.decision === "hold") {
+        // The VERIFIED obligations ride the hold's durable record (§13.6/§13.10: MUST-apply,
+        // reusable within the goal) — verified-then-dropped would release the executor with zero
+        // attenuations after the pause.
+        const status = await holdGuardedGoal(ctx, {
+            goal, hold: { token: verdict.token, holdDeadlineMs: verdict.holdDeadlineMs, responder: verdict.responder, obligations: verdict.obligations },
+            instanceId: args.instanceId, epoch: args.epoch, now: args.now,
+        });
+        return { outcome: "waiting", hold: { token: verdict.token, holdDeadlineMs: verdict.holdDeadlineMs }, obligations: verdict.obligations, status };
+    }
+    const status = await transitionGoal(ctx, goal, "running", { owner: ownerCommitProof(ctx), clearance: mintGuardClearance(ctx, goal.goalId) });
+    return { outcome: "running", obligations: verdict.obligations, status };
+}
+/** The durable HOLD reconciler (§13.6): converge a goal whose guard-hold checkpoint SETTLED
+ *  while the goal projection lags (a release or expiry crashed mid-flight, or the timer fire
+ *  settled the checkpoint and the owner's projection is still owed). For a goal `waiting` on
+ *  checkpoint T whose spec binds THIS goal:
+ *   - settle RESUMED: finish the projection to `running` (idempotent);
+ *   - settle EXPIRED: drive the terminal deny via {@link expireGuardHold} (idempotent);
+ *   - still live: nothing to do — the timer plane owns the deadline.
+ *  A goal not waiting, or waiting on a token whose checkpoint does not bind it, is left
+ *  untouched: this reconciler converges exactly the holds this module minted. (The
+ *  mint-then-no-wait partial state is recovered by RETRYING the gate — the mint is
+ *  idempotent-if-identical and the transition completes; a dedicated repair arm was
+ *  panel-adjudicated as insurance ahead of composition and deliberately not built.)
+ *  A converged `running` carries the hold's RECORDED verified obligations (§13.6/§13.10:
+ *  MUST-apply, reusable within the goal — the pause never launders them away). */
+export async function reconcileGuardHold(ctx, args) {
+    const goal = snapshotRef(args.goal);
+    const status = await readGoalStatus(ctx, goal);
+    if (status === undefined || status.value.state !== "waiting" || status.value.checkpoint === undefined)
+        return { converged: "none" };
+    const token = status.value.checkpoint.token;
+    let obligations;
+    try {
+        ({ obligations } = await bindCheckpointToGoal(ctx, goal, token));
+    }
+    catch {
+        return { converged: "none" };
+    } // a foreign/unknown token's wait is not this reconciler's to converge
+    const settle = await readCheckpointSettle(ctx.jsm, ctx.space, { endpoint: goal.endpoint, token });
+    if (settle === undefined)
+        return { converged: "none" };
+    if (settle.settle === "resumed") {
+        const cur = await readGoalStatus(ctx, goal);
+        if (cur?.value.state === "waiting" && cur.value.checkpoint?.token === token)
+            await transitionGoal(ctx, goal, "running", { owner: ownerCommitProof(ctx), clearance: mintGuardClearance(ctx, goal.goalId) });
+        return { converged: "running", obligations };
+    }
+    await expireGuardHold(ctx, { goal, token, now: args.now });
+    return { converged: "denied" };
+}
+/** Convert a HELD action to `waiting` on a checkpoint OWNED BY THE GUARD DECISION (§13.6): the
+ *  checkpoint's holder is the guard's authenticated responder (only IT may resume), the
+ *  deadline is the hold's (mandatory), and the goal's status projects `waiting` carrying the
+ *  checkpoint coordinate. The mint is idempotent and the timer is armed through the mediated
+ *  plane by the checkpoint module. */
+export async function holdGuardedGoal(ctx, args) {
+    // The durable ingress admits ONLY gate-verified obligations (freelance HIGH): this is a
+    // public composition seam, and the store carries the persisted set as custody WITHOUT
+    // re-verifying (the gate verified at HOLD time) - so a structurally shaped set that never
+    // passed runGuardGate's verification must refuse HERE, or release/reconcile would later
+    // return it under the same trusted type as a verified one.
+    for (const [i, ob] of (args.hold.obligations ?? []).entries())
+        if (!VERIFIED_OBLIGATIONS.has(ob))
+            throw new EpEnvelopeError("permission-denied", `hold obligation[${i}] was not verified by THIS gate; obligations enter a hold only through runGuardGate's verification (signature, anchor role/scope, window, request binding) - a structurally shaped set never authorizes (SPEC 13.6/13.10)`);
+    await mintCheckpoint(ctx.kv, ctx.js, ctx.space, {
+        ref: { endpoint: args.goal.endpoint, token: args.hold.token },
+        instanceId: args.instanceId, epoch: args.epoch,
+        goal: { caller: args.goal.caller, goalId: args.goal.goalId },
+        ...(args.hold.obligations !== undefined && args.hold.obligations.length > 0 ? { obligations: args.hold.obligations } : {}),
+        holder: args.hold.responder,
+        deadline: args.now + args.hold.holdDeadlineMs, now: args.now,
+    });
+    // The pause is OWNER-authored (the owner mints the checkpoint and records the wait), not a
+    // remote executor's progress step, so a target-pinned goal's hold does not require executor
+    // currency here — the guard responder, not a superseded executor, is the checkpoint holder.
+    // The authority is the CONSTRUCTION-BOUND owner proof from this context, never a raw flag.
+    return transitionGoal(ctx, args.goal, "waiting", { fields: { checkpoint: { token: args.hold.token, deadlineGeneration: 1 } }, owner: ownerCommitProof(ctx) });
+}
+/** Bind a hold's checkpoint token to THIS goal (§13.6): read the checkpoint's recorded spec and
+ *  require its `goal` to be the exact goal being released/expired — a checkpoint pauses ONE
+ *  recorded goal (holdGuardedGoal mints it with that binding), so a valid token for goal A must
+ *  never drive a transition on unrelated goal B. Fail-closed: an unknown token, a spec with no
+ *  goal binding, or a mismatched caller/goalId all refuse before any state is touched. */
+async function bindCheckpointToGoal(ctx, goal, token) {
+    const spec = await readCheckpointSpec(ctx.kv, { endpoint: goal.endpoint, token });
+    if (spec === undefined)
+        throw new EpEnvelopeError("failed-precondition", `checkpoint "${token}" is unknown on endpoint "${goal.endpoint}"; a guard hold names a minted checkpoint (SPEC 13.6)`);
+    const g = spec.goal;
+    if (g === undefined)
+        throw new EpEnvelopeError("permission-denied", `checkpoint "${token}" records no goal binding; it does not pause goal "${goal.goalId}" and cannot drive its transition (SPEC 13.6)`);
+    if (g.goalId !== goal.goalId || g.caller.owner !== goal.caller.owner || g.caller.actor !== goal.caller.actor || g.caller.uid !== goal.caller.uid)
+        throw new EpEnvelopeError("permission-denied", `checkpoint "${token}" pauses goal "${g.goalId}" (${g.caller.owner}.${g.caller.actor}/${g.caller.uid}), not the presented goal "${goal.goalId}"; a hold's token is goal-bound, never a free release of any goal on the endpoint (SPEC 13.6)`);
+    // The hold's RECORDED verified obligations (persisted at mint; §13.6/§13.10 MUST-apply,
+    // reusable within the goal): release/reconcile return exactly this set, signatures intact.
+    return { obligations: (spec.obligations ?? []) };
+}
+/** Release a guard hold: the GUARD (the checkpoint's holder, presenting as itself) resumes the
+ *  one-use checkpoint, and the goal leaves `waiting` back to `running`. The token is first bound
+ *  to THIS goal (a valid token for another goal never releases it), THEN the resume seam
+ *  enforces holder binding, one-use, and the deadline fence (a hold past its deadline drives
+ *  the EXPIRED settlement there and refuses; an expired hold never releases).
+ *
+ *  CRASH CONVERGENCE (the checkpoint settlement is the arbiter; the goal transition is its
+ *  derived projection): a crash between the one-use resume and the goal transition leaves the
+ *  checkpoint `resumed` and the goal `waiting` — the RETRY's resume loses `conflict`, so it
+ *  OBSERVES the recorded settlement, requires it to be THIS presenter's own `resumed` (a
+ *  foreign or expired settlement rethrows), and finishes the projection idempotently (a goal
+ *  already `running` is the converged state, not an error). */
+export async function releaseGuardHold(ctx, args) {
+    // Entry snapshots (single-read): the presenter is compared against the recorded settlement on
+    // the convergence path, and the FULL goal detaches ONCE here (MEDIUM) so bind, resume, and the
+    // projection all read this snapshot - a goal mutated across the resume await can never validate
+    // goal A's checkpoint and then project goal B.
+    const presenter = Object.freeze({ id: String(args.presenter.id), lifecycleUid: String(args.presenter.lifecycleUid) });
+    const goal = snapshotRef(args.goal);
+    const token = String(args.token);
+    const cpRef = { endpoint: goal.endpoint, token };
+    const { obligations } = await bindCheckpointToGoal(ctx, goal, token); // goal-binding BEFORE consuming the one-use resume
+    let settle;
+    try {
+        settle = await resumeCheckpoint(ctx.kv, ctx.js, ctx.jsm, ctx.space, { ref: cpRef, presenter, now: args.now });
+    }
+    catch (e) {
+        if (!(e instanceof EpEnvelopeError && e.code === "conflict"))
+            throw e;
+        // The one-use resume is already consumed: converge IFF the recorded settlement is THIS
+        // presenter's own resume (the crashed earlier attempt won); anything else rethrows.
+        const winner = await readCheckpointSettle(ctx.jsm, ctx.space, cpRef);
+        if (winner === undefined || winner.settle !== "resumed"
+            || winner.holder?.id !== presenter.id || winner.holder?.lifecycleUid !== presenter.lifecycleUid)
+            throw e;
+        settle = winner;
+    }
+    // The goal returns from its owner-driven pause to running (the guard's holder-bound resume is
+    // the authority, verified by resumeCheckpoint; the proof is construction-bound), but ONLY if it
+    // is currently waiting on THIS hold's checkpoint (HIGH 1): a stale or replayed release of an OLD
+    // (already-resumed) hold must never move a goal that is now waiting on a DIFFERENT, live hold. An
+    // already-running goal is the converged crash state (idempotent); a goal waiting on another token
+    // (or terminal/unknown) refuses.
+    const current = await readGoalStatus(ctx, goal);
+    if (current?.value.state === "running")
+        return { settle, status: current.value, obligations };
+    const waitingToken = current?.value.state === "waiting" ? current.value.checkpoint?.token : undefined;
+    if (waitingToken !== token)
+        throw new EpEnvelopeError("failed-precondition", `goal "${goal.goalId}" is not waiting on checkpoint "${token}" (${current === undefined ? "unknown goal" : current.value.state === "waiting" ? `it waits on "${String(waitingToken)}"` : `it is ${current.value.state}`}); a release of an old hold never moves a goal paused on a newer one (SPEC 13.6)`);
+    const status = await transitionGoal(ctx, goal, "running", { owner: ownerCommitProof(ctx), clearance: mintGuardClearance(ctx, goal.goalId) });
+    return { settle, status, obligations };
+}
+/** Settle an EXPIRED guard hold onto the goal: an expired hold is DENY (fail closed). The token
+ *  is first bound to THIS goal (an arbitrary token never terminal-fails an unrelated goal), then
+ *  the CHECKPOINT is owner-expired (settling its status and stopping its timers, so no orphaned
+ *  schedule lingers until the checkpoint's own deadline), and finally the goal commits terminal
+ *  `failed` (permission-denied) at the shared commit point — where a racing completion or cancel
+ *  may lawfully have won first (the caller observes the winner; the projection converges either
+ *  way). Idempotent: an already-terminal goal returns its winner. */
+export async function expireGuardHold(ctx, args) {
+    const goal = snapshotRef(args.goal); // detach the full goal ONCE (same discipline as release)
+    const token = String(args.token);
+    await bindCheckpointToGoal(ctx, goal, token); // goal-binding BEFORE terminalizing anything
+    const status = await readGoalStatus(ctx, goal);
+    if (status === undefined)
+        throw new EpEnvelopeError("failed-precondition", `goal "${goal.goalId}" is unknown; an expiry settles only an accepted goal (SPEC 13.6)`);
+    // Owner-expire the DUE checkpoint so its status settles and its timers stop (idempotent; an
+    // already-settled checkpoint returns its winner). The goal terminal is the authority for the
+    // caller, but the checkpoint must not be left waiting with a live timer.
+    const settled = await expireCheckpoint(ctx.kv, ctx.js, ctx.jsm, ctx.space, { ref: { endpoint: goal.endpoint, token }, now: args.now });
+    if (settled.settle === "resumed") {
+        // The hold was lawfully RELEASED before this expiry: a resumed hold never denies. A raced
+        // caller observes the goal's recorded terminal if one exists. If the release resumed the
+        // checkpoint but CRASHED before projecting the goal, the goal is still waiting on THIS token -
+        // FINISH that projection here (goal -> running) so it never hangs waiting forever (HIGH 4: a
+        // plain refusal is not crash recovery), then refuse (there is no terminal to return, and a
+        // resumed hold never denies). Idempotent: an already-running/re-held goal is not re-projected.
+        const fact = await readGoalResult(ctx, goal);
+        if (fact !== undefined)
+            return { won: false, fact, status: await projectGoalTerminal(ctx, goal) };
+        const cur = await readGoalStatus(ctx, goal);
+        if (cur?.value.state === "waiting" && cur.value.checkpoint?.token === token)
+            await transitionGoal(ctx, goal, "running", { owner: ownerCommitProof(ctx), clearance: mintGuardClearance(ctx, goal.goalId) });
+        throw new EpEnvelopeError("failed-precondition", `the guard hold "${token}" was RELEASED (resumed at ${settled.ts}), not expired; the goal projection is converged to running and a resumed hold never denies (SPEC 13.6)`);
+    }
+    // An expired hold is DENY (fail closed) → the goal commits terminal failed via the `deny`
+    // cause at the shared commit point, where a racing completion/cancel may win first. The
+    // denial carries its AUTHORITATIVE PREDICATE: the commit boundary itself re-verifies that
+    // the named checkpoint binds THIS goal and that its recorded one-use settlement is EXPIRED
+    // (the expiry recorded just above) — a bare deny cause proves nothing and is refused there.
+    const res = await commitGoalResult(ctx, {
+        ref: goal, now: args.now, cause: "deny", denial: { kind: "hold-expired", token },
+        data: { code: "permission-denied", reason: `the guard hold "${token}" expired without a release; timeout is deny (SPEC 13.6: fail closed)` },
+    });
+    return res;
+}
+//# sourceMappingURL=endpoint-guard.js.map

package/dist/endpoint-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-guard.js","sourceRoot":"","sources":["../src/endpoint-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,uBAAuB,EAAuB,MAAM,uBAAuB,CAAC;AACnI,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAA6B,MAAM,0BAA0B,CAAC;AACnK,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,WAAW,EAA+E,MAAM,sBAAsB,CAAC;AAEhR,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAErH;;;sFAGsF;AACtF,MAAM,kBAAkB,GAAG,uBAAuB,EAAE,CAAC;AAErD;;;;;;qBAMqB;AACrB,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAmB,CAAC;AAC5D,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;QAAE,UAAU,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AA0BD,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,sBAAsB,GAAG,6GAA6G,CAAC,CAAC;AACzL,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,CAAS;IAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,UAAU,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACpG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,cAAc,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,CAAC;IACrI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,UAAU,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAC1H,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,UAAU,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IACnH,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,OAAQ,CAAC,CAAC,MAAkC,CAAC,KAAK,KAAK,QAAQ;QAAE,UAAU,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;IAC9I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/F,UAAU,CAAC,cAAc,CAAC,yFAAyF,CAAC,CAAC;IACvH,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC;YAAE,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5L,IAAK,CAAC,CAAC,GAAc,IAAK,CAAC,CAAC,GAAc;QAAE,UAAU,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAChG,OAAO,CAA+B,CAAC;AACzC,CAAC;AAED;;;iGAGiG;AACjG,KAAK,UAAU,cAAc,CAAI,CAAiB,EAAE,WAAmB,EAAE,IAAY;IACnF,IAAI,WAAW,IAAI,CAAC;QAClB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,2HAA2H,CAAC,CAAC;IACrL,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,wCAAwC,WAAW,2DAA2D,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACjN,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AACrG,CAAC;AAED;;;qEAGqE;AACrE,KAAK,UAAU,gBAAgB,CAC7B,GAAY,EAAE,EAAmB,EAAE,CAAS,EAC5C,IAAmI;IAEnI,IAAI,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,UAAU,CAAC,cAAc,CAAC,uBAAuB,EAAE,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7G,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QAAE,UAAU,CAAC,cAAc,CAAC,qBAAqB,EAAE,CAAC,SAAS,wBAAwB,IAAI,CAAC,SAAS,+CAA+C,CAAC,CAAC;IACvL,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG;QAAE,UAAU,CAAC,cAAc,CAAC,qCAAqC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpJ,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAC3B,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,EACpG,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC9D,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC/F,uBAAuB,CAAC,GAA8B,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,cAAc,CAAC,sBAAuB,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,+CAA+C,CAAC,mBAAmB,CAAC,CAAC;IACrI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;QAC1E,UAAU,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YACxF,UAAU,CAAC,wEAAwE,CAAC,CAAC;QACvF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,UAAU,CAAC,iCAAiC,CAAC,CAAC;QAC1G,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACjI,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,8DAA8D,CAAC,CAAC;IACtH,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,UAAU,CAAC,oEAAoE,CAAC,CAAC;QAC9I,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,UAAU,CAAC,yCAAyC,CAAC,CAAC;IAC/G,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC;QAC1G,UAAU,CAAC,2FAA2F,CAAC,CAAC;IAC1G,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AACjI,CAAC;AAsBD;;;;;4EAK4E;AAC5E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAYlC;IACC,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAC3E,UAAU,CAAC,2CAA2C,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,sDAAsD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC;QACjD,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gDAAgD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAE/H,4FAA4F;IAC5F,+EAA+E;IAC/E,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;IACpD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,IAAI,MAA4E,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3C,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;SAC5B,CAAC,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB;YAAE,MAAM,CAAC,CAAC;QAC5E,UAAU,CAAC,0BAA2B,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,UAAU,CAAC,kEAAkE,CAAC,CAAC;IACnG,4FAA4F;IAC5F,0FAA0F;IAC1F,uFAAuF;IACvF,wFAAwF;IACxF,wFAAwF;IACxF,qCAAqC;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,UAAU,CAAC,kEAAkE,CAAC,CAAC;IACzG,MAAM,WAAW,GAAG,YAAY,CAAC,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC;IAC/C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAC9H,UAAU,CAAC,kEAAkE,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;IACjF,6FAA6F;IAC7F,0FAA0F;IAC1F,mFAAmF;IACnF,2EAA2E;IAC3E,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC,uFAAuF;IAC1J,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,UAAU,CAAC,iDAAkD,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IAAC,CAAC;IAE1G,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;QAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gCAAgC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC3K,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE;QAChD,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAChE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACvJ,yFAAyF;IACzF,wFAAwF;IACxF,iDAAiD;IACjD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACtF,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;AACtI,CAAC;AAED;;;;;;;;;;;;;;+FAc+F;AAC/F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,IAWC;IAMD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,4FAA4F;IAC5F,4FAA4F;IAC5F,qFAAqF;IACrF,6FAA6F;IAC7F,yEAAyE;IACzE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,SAAS;QACxB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,SAAS,IAAI,CAAC,MAAM,6DAA6D,CAAC,CAAC;IACtI,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,aAAa;QAC7C,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,SAAS,IAAI,CAAC,MAAM,uBAAuB,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,+FAA+F,CAAC,CAAC;IACpX,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,YAAY,CAAC;YAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YAC1E,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC;YAAE,MAAM,CAAC,CAAC,CAAC,yEAAyE;QACzJ,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;YACtC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;YAChG,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE;SAClE,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChC,qFAAqF;QACrF,yFAAyF;QACzF,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YACxC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;YAC5I,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;SAC9D,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAClJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7I,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;kFAakF;AAClF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAkB,EAClB,IAAoC;IAEpC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;QACnG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;IAC5C,IAAI,WAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,CAAC,EAAE,WAAW,EAAE,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,CAAC,CAAC,sEAAsE;IACxL,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,KAAK,KAAK;YACzE,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChI,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;sCAIsC;AACtC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAkB,EAClB,IAOC;IAED,wFAAwF;IACxF,sFAAsF;IACtF,0FAA0F;IAC1F,wFAAwF;IACxF,2DAA2D;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QAC3D,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,2NAA2N,CAAC,CAAC;IACpS,MAAM,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE;QAC9C,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;QAC7D,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;QAC9C,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAC5D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1H,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;QAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;KAC7D,CAAC,CAAC;IACH,2FAA2F;IAC3F,4FAA4F;IAC5F,4FAA4F;IAC5F,2FAA2F;IAC3F,OAAO,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChK,CAAC;AAED;;;;0FAI0F;AAC1F,KAAK,UAAU,oBAAoB,CAAC,GAAkB,EAAE,IAAa,EAAE,KAAa;IAClF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,IAAI,IAAI,KAAK,SAAS;QACpB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,eAAe,KAAK,6BAA6B,IAAI,CAAC,QAAQ,uDAAuD,CAAC,CAAC;IAC1K,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,KAAK,SAAS;QACjB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,KAAK,sDAAsD,IAAI,CAAC,MAAM,+CAA+C,CAAC,CAAC;IACvL,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG;QAC9I,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,KAAK,kBAAkB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,8BAA8B,IAAI,CAAC,MAAM,+FAA+F,CAAC,CAAC;IAC/R,wFAAwF;IACxF,2FAA2F;IAC3F,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAsB,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;+DAW+D;AAC/D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,IAAoG;IAEpG,8FAA8F;IAC9F,+FAA+F;IAC/F,gGAAgG;IAChG,+CAA+C;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,mDAAmD;IACzH,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;YAAE,MAAM,CAAC,CAAC;QACtE,uFAAuF;QACvF,oFAAoF;QACpF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;eAClD,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,KAAK,SAAS,CAAC,YAAY;YAAE,MAAM,CAAC,CAAC;QAC3G,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,gGAAgG;IAChG,iGAAiG;IACjG,kGAAkG;IAClG,kGAAkG;IAClG,iCAAiC;IACjC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,IAAI,YAAY,KAAK,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,SAAS,IAAI,CAAC,MAAM,mCAAmC,KAAK,MAAM,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,kFAAkF,CAAC,CAAC;IAC9V,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7I,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;qEAMqE;AACrE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAkB,EAClB,IAAmD;IAEnD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,yDAAyD;IAC9F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,6CAA6C;IAC3F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,SAAS,IAAI,CAAC,MAAM,mEAAmE,CAAC,CAAC;IAC5I,4FAA4F;IAC5F,6FAA6F;IAC7F,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACvI,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,0FAA0F;QAC1F,yFAAyF;QACzF,+FAA+F;QAC/F,6FAA6F;QAC7F,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAClG,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,KAAK,KAAK;YACzE,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChI,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,mBAAmB,KAAK,8BAA8B,OAAO,CAAC,EAAE,yGAAyG,CAAC,CAAC;IAC9N,CAAC;IACD,0FAA0F;IAC1F,wFAAwF;IACxF,0FAA0F;IAC1F,2FAA2F;IAC3F,4FAA4F;IAC5F,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;QACtC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;QAChF,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,KAAK,uEAAuE,EAAE;KAC7I,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}