@cotal-ai/core 0.12.0 → 0.13.0

package/dist/endpoint-records.js

@@ -0,0 +1,591 @@
+/**
+ * v0.4 record-contract helpers (SPEC §13.4 "Record", §13.7 kinds, §13.9 writer table, §13.12
+ * binding) — the registered kind table with its pinned key grammars, the split-key CAS write
+ * discipline, and the merged read/watch with the §13.4 staleness rules.
+ *
+ * A record is stored in the per-space `cotal_records_<space>` KV as TWO keys with independent
+ * revisions, `<key>.spec` and `<key>.status` — the split IS the broker-enforced writer boundary
+ * (each writer role holds publish authority on its own key only). The single exception is the
+ * lifecycle alias HEAD, one atomic unsplit key. Writes are per-key CAS and a lost race is a
+ * LOUD `conflict` the caller re-reads and re-decides (§13.8) — deliberately unlike the ACL
+ * registry's internal retry, because record writers are fenced principals whose lost CAS is a
+ * decision point, never a last-writer-wins policy.
+ *
+ * These are the primitives the mediated writer principals (§13.9) build on; nothing here grants
+ * anything. Untrusted callers never hold raw reads on this bucket — their reads ride the
+ * mediator (§13.9 "Mediated reads"); the helpers below run inside trusted principals.
+ */
+import { Kvm } from "@nats-io/kv";
+import { token } from "./subjects.js";
+import { endpointToken, assertBoundedOwner, assertIdToken, assertLifecycleToken, assertPoolToken, } from "./endpoint-subjects.js";
+import { EpEnvelopeError } from "./endpoint-envelope.js";
+/** The per-space records bucket (§13.12): per-key CAS; `allow_direct=true`, but the lifecycle
+ *  head and every FENCED read are leader-served `STREAM.MSG.GET` (§13.9) — helpers here are the
+ *  non-fencing paths; a fence is always a revision-pinned CAS WRITE, never a read. */
+export function recordsBucket(space) {
+    return `cotal_records_${token(space)}`;
+}
+/** Open the records bucket. Auth mode OPENs the bucket pre-created at space setup; a privileged
+ *  caller passes `{ create: true }` to CREATE it (setup only). Mirrors {@link openAclRegistry}. */
+export async function openRecordsBucket(nc, space, opts = {}) {
+    const kvm = new Kvm(nc);
+    return opts.create ? kvm.create(recordsBucket(space)) : kvm.open(recordsBucket(space));
+}
+/** LEADER-SERVED read of one records-KV key: `STREAM.MSG.GET last_by_subj` on the bucket's
+ *  backing stream, never `kv.get`/`DIRECT.GET`. A FENCING read — a fresh-check a mediated
+ *  writer acts on before publishing authority state — needs read-your-writes against the
+ *  leader; the bucket keeps `allow_direct=true` for the non-fencing paths, and a
+ *  follower-served Direct Get may answer with a superseded revision, which is exactly the
+ *  staleness a fence must not carry (§13.9, the same rule as {@link readLastFact}).
+ *  `undefined` = the key has never been written. A DEL/PURGE marker is a DELETION, never
+ *  absence — fail-closed refusal, the caller reconciles the store. */
+export async function readRecordLeader(jsm, space, key) {
+    const bucket = recordsBucket(space);
+    let m;
+    try {
+        m = await jsm.streams.getMessage(`KV_${bucket}`, { last_by_subj: `$KV.${bucket}.${key}` });
+    }
+    catch (e) {
+        if (e.code === 10037)
+            return undefined; // no message on the subject
+        throw e;
+    }
+    if (!m)
+        return undefined;
+    const op = m.header?.get("KV-Operation");
+    if (op)
+        throw new EpEnvelopeError("failed-precondition", `the record ${key} carries a ${op} marker; a deletion is never absence - reconcile the store (SPEC 13.7)`);
+    try {
+        return { value: JSON.parse(new TextDecoder().decode(m.data)), revision: m.seq };
+    }
+    catch (e) {
+        throw new EpEnvelopeError("internal", `record ${key} does not decode as JSON: ${e.message}`);
+    }
+}
+const qEndpoint = { name: "endpoint", assert: (v) => endpointToken(v) };
+const qOwner = (name) => ({ name, assert: (v) => assertBoundedOwner(v, name) });
+const qUid = (name) => ({ name, assert: (v) => assertLifecycleToken(v, name) });
+const qId = (name) => ({ name, assert: (v) => assertIdToken(v, name) });
+/** The lifecycle alias HEAD (§13.7/§13.9): `lifecycle.<owner>.<actor>` — ONE atomic unsplit
+ *  key, the authoritative current mapping and the only `mappingRevision` source. Activation
+ *  and terminal retirement serialize on its CAS; a fresh authority read of it is a
+ *  leader-served `STREAM.MSG.GET` by the trusted mapping-reader, never a follower-served get. */
+export const LIFECYCLE_HEAD = {
+    kind: "lifecycle",
+    qualifiers: [qOwner("owner"), qOwner("actor")],
+    split: false,
+    writers: { spec: "minting-manager-commit", status: "minting-manager-commit" },
+    mediation: "mediated",
+};
+/** The §13.1 space-global UID RESERVATION (§13.7): `uid.<lifecycleUid>` — ONE atomic unsplit
+ *  key, create-only and NEVER-DELETED for the life of the space. The KEY is the reservation
+ *  (the value records the reserving authority + intended alias, audit only): the minting
+ *  authority wins this create BEFORE any gate or head write, a create conflict BURNS the
+ *  candidate (the alias head alone cannot reject the same UID under a different alias, and
+ *  the gate./cred. families key by UID alone), and a DEL/PURGE marker is corruption, never
+ *  reusable absence. */
+export const UID_RESERVATION = {
+    kind: "uid",
+    qualifiers: [qUid("lifecycleUid")],
+    split: false,
+    writers: { spec: "minting-authority", status: "minting-authority" },
+    mediation: "mediated",
+};
+/** The fixed sentinel target token for an admission with no target lifecycle (§13.7/§13.8). */
+export const OBLIGATION_EP_SENTINEL = "ep";
+/** The §13.8 TARGET-INDEXED ACCEPTANCE OBLIGATION (§13.7): one atomic unsplit key per
+ *  acceptance identity, `oblig.<targetUid>.<endpoint>.<cOwner>.<cActor>.<cUid>.<id>` — the ONE
+ *  durable serialization coordinate on which a durable acceptance/start contends with its
+ *  authority head's movement (no cross-stream CAS exists). Target-first, so a retirement
+ *  barrier enumerates `oblig.<targetUid>.>`; an admission under policy with NO target lifecycle
+ *  keys the row with the fixed sentinel target token `ep` (which the §13.1 UID grammar can
+ *  never produce), excluded from retirement drains and included in the endpoint's policy drain
+ *  via `oblig.*.<endpoint>.>`. Create-only winner, monotonic value states
+ *  (`provisional → accepted → terminal` | `provisional → rejected`), NEVER-DELETED. Writer:
+ *  the admission mediator ONLY (§13.9; the canonicalizer holds no raw `oblig.` grant). */
+export const OBLIGATION = {
+    kind: "oblig",
+    qualifiers: [
+        { name: "targetUid", assert: (v) => (v === OBLIGATION_EP_SENTINEL ? v : assertLifecycleToken(v, "targetUid")) },
+        qEndpoint, qOwner("cOwner"), qOwner("cActor"), qUid("cUid"), qId("id"),
+    ],
+    split: false,
+    writers: { spec: "admission-mediator", status: "admission-mediator" },
+    mediation: "mediated",
+};
+/** The §13.6 IMMUTABLE ADMISSION-POLICY VERSION (§13.7): `policy.<endpoint>.<digest-hex>` — one
+ *  atomic unsplit key per policy version, create-only, NEVER-DELETED, never overwritten.
+ *  `<digest-hex>` is the SHA-256 hex of the record's canonical value bytes, so the key is
+ *  SELF-CERTIFYING: a reader re-digests the value it read and refuses a mismatch. The govern
+ *  head's `enforcedPolicyKey`/`pendingPolicyKey` name keys of exactly this kind, which is what
+ *  keeps both the enforced and the pending policy readable through a mutation's whole drain
+ *  window (§13.6). Writer: the provisioner registration path ONLY (§13.9). */
+export const POLICY_VERSION = {
+    kind: "policy",
+    qualifiers: [qEndpoint, {
+            name: "digestHex",
+            assert: (v) => {
+                if (!/^[0-9a-f]{64}$/.test(v))
+                    throw new Error(`policy digest ${JSON.stringify(v)} is not 64 lowercase hex chars (SPEC 13.7)`);
+                return v;
+            },
+        }],
+    split: false,
+    writers: { spec: "provisioner-registration", status: "provisioner-registration" },
+    mediation: "mediated",
+};
+/** The §13.1 PER-STREAM RETIREMENT FRONTIERS (§13.7): `frontier.<lifecycleUid>` — ONE atomic
+ *  unsplit key per retired lifecycle, create-only, NEVER-DELETED, written by the terminal
+ *  retirement barrier AFTER the obligation drain, the pool cleaner, and the cleaner-credential
+ *  revoke+evict, and BEFORE the gate/head terminals (§13.1 order). The value records the
+ *  retirement `opId` and each bounded stream's last sequence at retirement — the cutoffs that
+ *  bound the predecessor's half-open interval `(activationFrontier, retirementFrontier]`; they
+ *  are never a successor's start (a successor captures its OWN activation frontier). */
+export const RETIREMENT_FRONTIER = {
+    kind: "frontier",
+    qualifiers: [qUid("lifecycleUid")],
+    split: false,
+    writers: { spec: "minting-authority", status: "minting-authority" },
+    mediation: "mediated",
+};
+/** The endpoint-wide GOVERNANCE HEAD (§13.7 "a self-published descriptor cannot strip, forge,
+ *  or downgrade a governed annotation"): `govern.<endpoint>` — ONE atomic unsplit key holding
+ *  the endpoint's MONOTONIC (append-only) BINDING governed-trait imposition per command, plus
+ *  the single in-flight registration's PROVISIONAL slot (endpoint-service.ts): the head is the
+ *  endpoint's registration linearization point — every registration CAS-takes the slot under
+ *  its frozen gate, holds it through spec publication, and promotes its impositions to binding
+ *  only after the publish commits. Governance is a HISTORY-bearing, endpoint-wide property, not
+ *  a per-instance descriptor state: once BOUND, an imposition persists across instances AND
+ *  across command removal (a tombstone), until an authorized revocation (the D18
+ *  governance-consent artifact) lifts it — so a re-registration, a fresh instanceId, and a
+ *  remove→re-add cannot launder a strip.
+ *
+ *  NORMATIVE STATUS: `govern` is NOT yet in the frozen SPEC's §13.7 kind table, §13.9 writer
+ *  matrix, or §13.12 records-bucket binding — it is implemented ahead of a pending P0
+ *  reconciliation decision (the spec's governance-continuity requirement implies a durable,
+ *  shared imposition record the frozen text does not name; multiple provisioners must read one
+ *  head, so a process-internal store cannot satisfy it). The amendment is recorded in the
+ *  control-surface STATUS; the operator decides spec changes. */
+export const GOVERN_HEAD = {
+    kind: "govern",
+    qualifiers: [qEndpoint],
+    split: false,
+    writers: { spec: "provisioner-registration", status: "provisioner-registration" },
+    mediation: "mediated",
+};
+/** The §13.7 core kinds, pinned. Keys: `<kind>.<qualifiers…>` then `.spec`/`.status`. */
+export const RECORD_KINDS = {
+    svc: {
+        kind: "svc",
+        qualifiers: [qEndpoint, qUid("instanceId")],
+        split: true,
+        writers: { spec: "provisioner-registration", status: "instance-commit-epoch-fenced" },
+        mediation: "mediated",
+    },
+    signer: {
+        kind: "signer",
+        qualifiers: [qId("keyId")],
+        split: true,
+        writers: { spec: "operator-registry", status: "operator-registry" },
+        mediation: "mediated",
+    },
+    handle: {
+        // Issuer-namespaced (§13.9): two issuers can never collide or cross-revoke.
+        kind: "handle",
+        qualifiers: [qId("issuerKeyId"), qId("id")],
+        split: true,
+        writers: { spec: "issuer-create-only", status: "issuer-or-operator-monotonic" },
+        mediation: "mediated",
+    },
+    contracts: {
+        // Advisory browse index; `describe` is authoritative. Readers fail loud on invalid state.
+        kind: "contracts",
+        qualifiers: [qEndpoint],
+        split: true,
+        writers: { spec: "instance", status: "instance" },
+        mediation: "direct",
+    },
+    goal: {
+        kind: "goal",
+        qualifiers: [qEndpoint, qOwner("cOwner"), qOwner("cActor"), qUid("cUid"), qId("goalId")],
+        split: true,
+        writers: { spec: "commit-path", status: "commit-path" },
+        mediation: "mediated",
+    },
+    cp: {
+        kind: "cp",
+        qualifiers: [qEndpoint, qId("token")],
+        split: true,
+        writers: { spec: "commit-path", status: "commit-path" },
+        mediation: "mediated",
+    },
+    lease: {
+        // The item's acceptance identity (§13.2) keys the lease.
+        kind: "lease",
+        qualifiers: [qEndpoint, { name: "pool", assert: assertPoolToken }, qOwner("cOwner"), qOwner("cActor"), qUid("cUid"), qId("id")],
+        split: true,
+        writers: { spec: "pool-owner-lease-command", status: "pool-owner-lease-command" },
+        mediation: "mediated",
+    },
+    lifecycle: {
+        // The optional per-UID append-only audit detail — never the authority (that is the HEAD).
+        kind: "lifecycle",
+        qualifiers: [qOwner("owner"), qOwner("actor"), qUid("lifecycleUid")],
+        split: true,
+        writers: { spec: "minting-manager-commit", status: "minting-manager-commit" },
+        mediation: "mediated",
+    },
+};
+/** The canonical AUTHORITY-CONTROL record kinds (§13.9): the mapping head, the UID reservation,
+ *  the governance/policy heads, the acceptance obligation, and the retirement frontier. This is
+ *  the SINGLE SOURCE consumed BOTH by the registry below AND by the record-reader seam
+ *  ({@link ../endpoint-binding.ts}.recordReaderConfig): a caller reader durable may target NONE of
+ *  these authority-only subtrees (nats-server#8274, the sealed records scanner owns `oblig.`), so
+ *  adding a kind here extends registration AND the reader exclusion together — no parallel
+ *  hand-kept deny-list to drift. `lifecycle` is DUAL: its atomic HEAD (`LIFECYCLE_HEAD`) is
+ *  authority, while its deeper per-UID `RECORD_KINDS.lifecycle` detail is a caller-readable audit
+ *  record; the seam admits the detail but head-guards the atomic key. */
+export const AUTHORITY_KIND_DEFS = [
+    LIFECYCLE_HEAD, UID_RESERVATION, GOVERN_HEAD, OBLIGATION, POLICY_VERSION, RETIREMENT_FRONTIER,
+];
+/** RUNTIME-freeze a def: `readonly` is type-level only, and this module's collections are a
+ *  SECURITY classification the reader seam consults, so identity (built here) must also be
+ *  integrity (unchangeable after export). Every def, its qualifiers array, each qualifier, and
+ *  its writers object freeze; under ESM strict mode a later mutation THROWS instead of silently
+ *  removing an exclusion or a head guard (the panel's identity-vs-integrity class, the same as
+ *  the sealed-scanner handle). */
+function freezeDef(def) {
+    for (const q of def.qualifiers)
+        Object.freeze(q);
+    Object.freeze(def.qualifiers);
+    Object.freeze(def.writers);
+    return Object.freeze(def);
+}
+const registry = new Map();
+for (const def of [...Object.values(RECORD_KINDS), ...AUTHORITY_KIND_DEFS]) {
+    freezeDef(def);
+    const list = registry.get(def.kind) ?? [];
+    list.push(def);
+    registry.set(def.kind, list);
+}
+Object.freeze(AUTHORITY_KIND_DEFS);
+Object.freeze(RECORD_KINDS);
+/** The record-reader ALLOWLIST predicate (§13.9): a kind is CALLER-READABLE iff the registry holds
+ *  a def for it that is NOT an authority-control def — a caller `RECORD_KIND` (core or a registered
+ *  third-party kind). A PURE authority kind (`oblig`/`uid`/`govern`/`policy`/`frontier`) and any
+ *  UNREGISTERED kind return false (a reader may target neither); a DUAL-token kind (`lifecycle`)
+ *  returns true because its audit detail is readable, and the seam then head-guards it. The
+ *  record-reader seam calls this instead of a deny-list, so an unregistered/authority kind can
+ *  never pass and a new authority kind added to {@link AUTHORITY_KIND_DEFS} is excluded by
+ *  construction. */
+const AUTHORITY_DEF_SET = new Set(AUTHORITY_KIND_DEFS);
+export function callerReadableRecordKind(kind) {
+    const defs = registry.get(kind);
+    return defs !== undefined && defs.some((d) => !AUTHORITY_DEF_SET.has(d));
+}
+/** Register a third-party record kind. Reverse-DNS names ONLY — single-label kind names are
+ *  reserved for the kinds this module pins (§13.7); a re-registration throws, no silent
+ *  replacement. The kind name tokenizes `.`→`_` exactly like an endpoint name. */
+export function registerRecordKind(def) {
+    const kindToken = endpointToken(def.kind);
+    if (!kindToken.includes("_"))
+        throw new Error(`record kind "${def.kind}" is single-label: those are reserved for core kinds; third-party kinds are reverse-DNS (SPEC 13.7)`);
+    const entry = { ...def, kind: kindToken };
+    const list = registry.get(kindToken) ?? [];
+    if (list.some((d) => d.qualifiers.length === entry.qualifiers.length && d.split === entry.split))
+        throw new Error(`record kind "${def.kind}" is already registered with this key arity`);
+    freezeDef(entry); // registered defs carry the same runtime integrity as the core ones
+    list.push(entry);
+    registry.set(kindToken, list);
+    return entry;
+}
+// ---- key grammar (§13.7): build and parse ---------------------------------------------------
+function baseTokens(def, qualifiers) {
+    if (qualifiers.length !== def.qualifiers.length)
+        throw new Error(`record kind "${def.kind}" takes ${def.qualifiers.length} qualifier(s) (${def.qualifiers.map((q) => q.name).join(", ")}); got ${qualifiers.length}`);
+    return [def.kind, ...def.qualifiers.map((q, i) => q.assert(qualifiers[i]))];
+}
+/** The unsplit key of an atomic kind (the lifecycle head). Throws for a split kind. */
+export function recordAtomicKey(def, qualifiers) {
+    if (def.split)
+        throw new Error(`record kind "${def.kind}" is .spec/.status-split; it has no atomic key`);
+    return baseTokens(def, qualifiers).join(".");
+}
+/** The `.spec` key of a split kind. */
+export function recordSpecKey(def, qualifiers) {
+    if (!def.split)
+        throw new Error(`record kind "${def.kind}" is atomic; it has no .spec key`);
+    return [...baseTokens(def, qualifiers), "spec"].join(".");
+}
+/** The `.status` key of a split kind. */
+export function recordStatusKey(def, qualifiers) {
+    if (!def.split)
+        throw new Error(`record kind "${def.kind}" is atomic; it has no .status key`);
+    return [...baseTokens(def, qualifiers), "status"].join(".");
+}
+/** Parse a records-bucket key against the registry. `null` = no registered grammar matches —
+ *  fail-closed, MUST NOT be handled (an unknown kind throws at the caller, no silent fallback).
+ *  Split-only trust model as in the subject parser: shape and registry dispatch here; token
+ *  grammars were enforced at build/mint time. */
+export function parseRecordKey(key) {
+    const toks = key.split(".");
+    const candidates = registry.get(toks[0]);
+    if (!candidates)
+        return null;
+    const last = toks[toks.length - 1];
+    for (const def of candidates) {
+        if (def.split && (last === "spec" || last === "status") && toks.length === def.qualifiers.length + 2)
+            return { def, qualifiers: toks.slice(1, -1), part: last };
+        if (!def.split && toks.length === def.qualifiers.length + 1)
+            return { def, qualifiers: toks.slice(1), part: "atomic" };
+    }
+    return null;
+}
+// ---- split-key CAS writes (§13.4/§13.8: a lost CAS is a LOUD conflict) ----------------------
+function encodeValue(value) {
+    return new TextEncoder().encode(JSON.stringify(value));
+}
+/** JetStream's expected-last-subject-sequence failure — the ONE broker condition behind every
+ *  create-only/revision-pinned CAS loss here and in the journal (§13.4/§13.8). Keyed on the
+ *  STRUCTURED `err_code` (`JetStreamApiCodes.StreamWrongLastSequence` 10071 and its
+ *  `…Unknown` sibling 10164, the same pair the KV client's own create() classifies), never on
+ *  message text: wording varies across server versions and a missed classification would turn
+ *  a benign concurrent write into an unhandled throw inside a mediated writer. */
+export function isCasLoss(e) {
+    const code = e?.code;
+    return code === 10071 || code === 10164;
+}
+function conflict(message, cause) {
+    const err = new EpEnvelopeError("conflict", message);
+    err.cause = cause;
+    throw err;
+}
+/** Create-only write of one record key, CAS-fenced against the key's ENTIRE history (a
+ *  revision-0 expectation on the subject): an existing key OR a DEL/PURGE tombstone is a loud
+ *  `conflict`. Deliberately NOT the KV client's own `create()`, which silently RECREATES over a
+ *  tombstone — that would let whoever can delete a key re-open a one-use identity (rebind a
+ *  settled checkpoint's holder, reset a decided lease, resurrect a terminal goal). Here a
+ *  deletion permanently CLOSES the key (§13.8's create-only discipline; deletion is fail-closed
+ *  state, never absence), and this CAS is the arbiter — a caller's marker pre-check is only a
+ *  fast path, since a delete landing between check and create loses here, not there. Residual:
+ *  a tombstone COMPACTED out of the bucket's history is indistinguishable from true absence at
+ *  the broker; nothing in core compacts or deletes records keys, so that is operator store
+ *  surgery — reconcile-the-store territory. Any other broker failure propagates untranslated.
+ *  Returns the created revision. */
+export async function createRecordEntry(kv, key, value) {
+    try {
+        return await kv.put(key, encodeValue(value), { previousSeq: 0 });
+    }
+    catch (e) {
+        if (isCasLoss(e))
+            conflict(`create of ${key} lost its CAS: the key already exists or carries a deletion marker (re-read and re-decide, SPEC 13.8)`, e);
+        throw e;
+    }
+}
+/** Revision-pinned CAS update of one record key. A moved revision is a loud `conflict`; any
+ *  other broker failure propagates untranslated. Returns the new revision. */
+export async function updateRecordEntry(kv, key, value, expectedRevision) {
+    try {
+        return await kv.update(key, encodeValue(value), expectedRevision);
+    }
+    catch (e) {
+        if (isCasLoss(e))
+            conflict(`update of ${key} at revision ${expectedRevision} lost its CAS (re-read and re-decide, SPEC 13.8)`, e);
+        throw e;
+    }
+}
+/** Status values MUST carry `observedSpecRevision` (§13.4) — the merged-read staleness rules
+ *  key on it. Enforced at the write seam so a status without it can never exist. */
+export function assertStatusValue(value) {
+    const o = value.observedSpecRevision;
+    if (typeof o !== "number" || !Number.isSafeInteger(o) || o < 0)
+        throw new Error(`a record status value must carry a non-negative integer observedSpecRevision (SPEC 13.4); got ${JSON.stringify(o)}`);
+    return value;
+}
+function decodeEntry(e, key) {
+    try {
+        return e.json();
+    }
+    catch (err) {
+        // Mediated-writer state that does not decode is a writer bug; readers fail loud (§13.9).
+        throw new EpEnvelopeError("internal", `record ${key} does not decode as JSON: ${err.message}`);
+    }
+}
+const liveEntry = (e) => !!e && e.operation === "PUT";
+/** §13.8 retry/backoff: exponential, base 250 ms, factor 2, cap 15 s, full jitter. */
+function backoffMs(attempt) {
+    return Math.random() * Math.min(15_000, 250 * 2 ** attempt);
+}
+/** Merged logical read of a split record (§13.4): both keys, both revisions, the staleness
+ *  classification. `observedSpecRevision > spec.revision` (a lagging spec read, possible across
+ *  replica freshness points) triggers bounded spec re-reads until caught up or the deadline —
+ *  the mismatched pair is NEVER returned. Absent record → `undefined`; a status without its
+ *  spec is torn state → `failed-precondition`. */
+export async function readRecord(kv, def, qualifiers, opts = {}) {
+    const sKey = recordSpecKey(def, qualifiers);
+    const tKey = recordStatusKey(def, qualifiers);
+    const deadline = Date.now() + (opts.deadlineMs ?? 15_000);
+    let specEntry = await kv.get(sKey);
+    let statusEntry = await kv.get(tKey);
+    // Absent spec + live status is USUALLY a read-order artifact, not corruption: the spec get
+    // can land just before an ordered create commits spec-then-status, both visible by the time
+    // the status get runs. Stabilize with bounded spec re-reads (re-checking status in case the
+    // record is mid-deletion) and declare torn state only when the absence is STABLE across the
+    // deadline — a transient interleaving must never be classified as corruption (§13.4).
+    for (let attempt = 0; !liveEntry(specEntry) && liveEntry(statusEntry); attempt++) {
+        if (Date.now() >= deadline)
+            throw new EpEnvelopeError("failed-precondition", `record ${tKey} exists without its spec key (stable across bounded re-reads); torn record state, refusing to read`);
+        await new Promise((r) => setTimeout(r, Math.min(backoffMs(attempt), Math.max(0, deadline - Date.now()))));
+        specEntry = await kv.get(sKey);
+        if (!liveEntry(specEntry))
+            statusEntry = await kv.get(tKey);
+    }
+    if (!liveEntry(specEntry))
+        return undefined;
+    if (!liveEntry(statusEntry)) {
+        return { spec: { value: decodeEntry(specEntry, sKey), revision: specEntry.revision }, staleProjection: false };
+    }
+    const statusValue = decodeEntry(statusEntry, tKey);
+    const observed = statusValue.observedSpecRevision;
+    if (typeof observed !== "number" || !Number.isSafeInteger(observed) || observed < 0)
+        throw new EpEnvelopeError("internal", `record ${tKey} carries no valid observedSpecRevision (SPEC 13.4)`);
+    // A lagging spec read: re-read the spec key, bounded, until it catches up to what the status
+    // writer demonstrably observed. Never trust the mismatched pair (§13.4).
+    for (let attempt = 0; (specEntry?.revision ?? 0) < observed; attempt++) {
+        if (Date.now() >= deadline)
+            throw new EpEnvelopeError("deadline-exceeded", `spec ${sKey} (revision ${specEntry?.revision}) never caught up to the status writer's observed revision ${observed} within the deadline`);
+        await new Promise((r) => setTimeout(r, Math.min(backoffMs(attempt), Math.max(0, deadline - Date.now()))));
+        specEntry = await kv.get(sKey);
+        if (!liveEntry(specEntry))
+            throw new EpEnvelopeError("failed-precondition", `record ${sKey} disappeared while resolving a lagging spec read`);
+    }
+    return {
+        spec: { value: decodeEntry(specEntry, sKey), revision: specEntry.revision },
+        status: { value: statusValue, revision: statusEntry.revision, observedSpecRevision: observed },
+        staleProjection: observed < specEntry.revision,
+    };
+}
+/** Read an atomic (unsplit) record — the lifecycle head. NOT a fence: an authority read of the
+ *  head (mapping currency before effect) is a leader-served `STREAM.MSG.GET` by the trusted
+ *  mapping-reader (§13.9); this helper is the ordinary non-fencing read, and every fence is a
+ *  revision-pinned CAS write against the returned revision. */
+export async function readAtomicRecord(kv, def, qualifiers) {
+    const key = recordAtomicKey(def, qualifiers);
+    const e = await kv.get(key);
+    if (!liveEntry(e))
+        return undefined;
+    return { value: decodeEntry(e, key), revision: e.revision };
+}
+// ---- merged watch (§13.4/§13.8 snapshot-then-deltas, resync on gap) -------------------------
+/** Watch a split record: the current merged snapshot first, then a re-merged view per delta.
+ *
+ *  Cursor discipline (§13.4/§13.8): ONE ordered consumer supplies BOTH the snapshot (the
+ *  per-key last values the watch replays first) and the deltas after it — the cursor is the
+ *  consumer's own position, so nothing between "snapshot" and "watch start" can ever be
+ *  skipped. (A cursor derived from independent `get` reads — `max(specRev,statusRev)+1` — is
+ *  provably gap-prone: mixed-freshness/TOCTOU reads let a higher revision on one key jump the
+ *  resume point past an unseen update on the other.) Replay entries accumulate silently; the
+ *  first merged view is yielded when the replay completes, and every later delta re-yields the
+ *  merged view. A watcher that errors, ends, or observes a status ahead of its cached spec
+ *  (impossible from honest writers in an unbroken ordered watch) RESYNCS with a fresh consumer
+ *  — a fresh full snapshot, duplicates tolerated, never a patch across a gap.
+ *
+ *  Resyncs are budgeted on CONSECUTIVE no-progress incarnations, reset once an incarnation
+ *  delivers at least one ordered post-snapshot delta (a lifetime-cumulative budget would kill a
+ *  long-lived watch on accumulated benign blips; a snapshot alone must not count as progress or
+ *  an immediately-ending iterator would spin forever). Ends when the spec key is deleted (the
+ *  record is retired — a watch started on an already-retired record ends immediately) or when
+ *  `signal` aborts. A status whose spec key NEVER existed in the consistent replay view is real
+ *  torn state (`failed-precondition`) — the single-consumer view cannot false-positive this. */
+export async function* watchRecord(kv, def, qualifiers, opts = {}) {
+    const sKey = recordSpecKey(def, qualifiers);
+    const tKey = recordStatusKey(def, qualifiers);
+    const maxResyncs = opts.maxResyncs ?? 8;
+    let consecutiveNoProgress = 0;
+    for (;;) {
+        if (consecutiveNoProgress > maxResyncs)
+            throw new EpEnvelopeError("unavailable", `watch of ${sKey} exhausted ${maxResyncs} consecutive resyncs without delta progress`);
+        // Last values + updates from one ordered consumer. The client marks replay entries with
+        // isUpdate=false up to the LAST initial entry (which arrives with isUpdate=true) — so the
+        // first isUpdate=true entry completes the snapshot, and a zero-entry replay (absent record)
+        // yields nothing until the first live delta arrives.
+        const iter = await kv.watch({ key: [sKey, tKey] });
+        const stop = () => iter.stop();
+        opts.signal?.addEventListener("abort", stop, { once: true });
+        let spec;
+        let status;
+        let specSeen = false; // a DEL/PURGE last value counts as seen (retired), just not live
+        let initialized = false;
+        let progressed = false;
+        const merged = () => spec
+            ? { spec, ...(status ? { status } : {}), staleProjection: !!status && status.observedSpecRevision < spec.revision }
+            : undefined;
+        try {
+            for await (const e of iter) {
+                if (opts.signal?.aborted)
+                    return;
+                const completesReplay = !initialized && e.isUpdate;
+                if (e.key === sKey) {
+                    specSeen = true;
+                    if (e.operation !== "PUT")
+                        return; // spec deleted: the record is (or was) retired
+                    spec = { value: decodeEntry(e, sKey), revision: e.revision };
+                }
+                else if (e.key === tKey) {
+                    if (e.operation !== "PUT") {
+                        status = undefined;
+                    }
+                    else {
+                        const v = decodeEntry(e, tKey);
+                        const observed = v.observedSpecRevision;
+                        if (typeof observed !== "number" || !Number.isSafeInteger(observed) || observed < 0)
+                            throw new EpEnvelopeError("internal", `record ${tKey} carries no valid observedSpecRevision (SPEC 13.4)`);
+                        // Within replay, a status may precede its spec in stream order (older last value
+                        // first) — judge coherence only once the replay's consistent view is complete.
+                        if ((initialized || completesReplay) && spec && observed > spec.revision)
+                            break; // status ahead of spec: writer anomaly — resync, never patch forward
+                        status = { value: v, revision: e.revision, observedSpecRevision: observed };
+                    }
+                }
+                if (!initialized && !e.isUpdate)
+                    continue; // mid-replay: accumulate silently
+                if (completesReplay) {
+                    initialized = true;
+                    // The replay is a consistent view: a live status whose spec key never appeared is
+                    // REAL torn state, not a read-order artifact — fail loud, never relist over it.
+                    if (status && !specSeen)
+                        throw new EpEnvelopeError("failed-precondition", `record ${tKey} exists without its spec key in a consistent watch replay; torn record state`);
+                }
+                else {
+                    progressed = true;
+                }
+                // Never yield a mismatched ahead-pair — a status observed a spec revision higher than the
+                // one we hold (a re-read signal, §13.4). The per-status-entry check above catches a
+                // status DELTA arriving ahead; this universal guard also catches the replay case where a
+                // status was cached first and the SPEC entry then completed replay behind it, which that
+                // check would miss (it fires only while processing a status entry).
+                if (spec && status && status.observedSpecRevision > spec.revision)
+                    break; // resync, never patch forward
+                const m = merged();
+                if (m)
+                    yield m;
+            }
+            if (opts.signal?.aborted)
+                return;
+            // gap-break or iterator end: stream hiccup / writer anomaly — resync below
+        }
+        catch (e) {
+            if (e instanceof EpEnvelopeError && (e.code === "internal" || e.code === "failed-precondition"))
+                throw e; // writer bug, not a gap
+            // watcher transport error — resync from a fresh consumer
+        }
+        finally {
+            opts.signal?.removeEventListener("abort", stop);
+            iter.stop();
+        }
+        if (opts.signal?.aborted)
+            return;
+        consecutiveNoProgress = progressed ? 0 : consecutiveNoProgress + 1;
+    }
+}
+//# sourceMappingURL=endpoint-records.js.map

package/dist/endpoint-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-records.js","sourceRoot":"","sources":["../src/endpoint-records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,GAAG,EAAyB,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EACL,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,GACxF,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;sFAEsF;AACtF,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,iBAAiB,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;mGACmG;AACnG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAoD,EACpD,KAAa,EACb,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;sEAOsE;AACtE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAqB,EACrB,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;IACN,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAAwB,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,CAAC,4BAA4B;QAC5F,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,EAAE;QACJ,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,cAAc,GAAG,cAAc,EAAE,wEAAwE,CAAC,CAAC;IAC9J,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,6BAA8B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AA2BD,MAAM,SAAS,GAAoB,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;AACzF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AACzG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AACzG,MAAM,GAAG,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAEjG;;;iGAGiG;AACjG,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;IAC7E,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF;;;;;;wBAMwB;AACxB,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C,IAAI,EAAE,KAAK;IACX,UAAU,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACnE,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;;;;;;0FAS0F;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAkB;IACvC,IAAI,EAAE,OAAO;IACb,UAAU,EAAE;QACV,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE;QAC/G,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC;KACvE;IACD,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACrE,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF;;;;;;8EAM8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,CAAC,SAAS,EAAE;YACtB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;gBACZ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC;gBAC/H,OAAO,CAAC,CAAC;YACX,CAAC;SACF,CAAC;IACF,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACjF,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF;;;;;;wFAMwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAkB;IAChD,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACnE,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;;iEAiBiE;AACjE,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,CAAC,SAAS,CAAC;IACvB,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACjF,SAAS,EAAE,UAAU;CACtB,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAkC;IACzD,GAAG,EAAE;QACH,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,8BAA8B,EAAE;QACrF,SAAS,EAAE,UAAU;KACtB;IACD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,EAAE;QACnE,SAAS,EAAE,UAAU;KACtB;IACD,MAAM,EAAE;QACN,4EAA4E;QAC5E,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,8BAA8B,EAAE;QAC/E,SAAS,EAAE,UAAU;KACtB;IACD,SAAS,EAAE;QACT,0FAA0F;QAC1F,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,CAAC,SAAS,CAAC;QACvB,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;QACjD,SAAS,EAAE,QAAQ;KACpB;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxF,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE;QACvD,SAAS,EAAE,UAAU;KACtB;IACD,EAAE,EAAE;QACF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE;QACvD,SAAS,EAAE,UAAU;KACtB;IACD,KAAK,EAAE;QACL,yDAAyD;QACzD,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/H,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,0BAA0B,EAAE;QACjF,SAAS,EAAE,UAAU;KACtB;IACD,SAAS,EAAE;QACT,0FAA0F;QAC1F,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACpE,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,EAAE;QAC7E,SAAS,EAAE,UAAU;KACtB;CACF,CAAC;AAEF;;;;;;;;yEAQyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAA6B;IAC3D,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB;CAC9F,CAAC;AAEF;;;;;kCAKkC;AAClC,SAAS,SAAS,CAAC,GAAkB;IACnC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;QAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;AACpD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,mBAAmB,CAAC,EAAE,CAAC;IAC3E,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE5B;;;;;;;oBAOoB;AACpB,MAAM,iBAAiB,GAA+B,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnF,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;kFAEkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAmD;IACpF,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,qGAAqG,CAAC,CAAC;IACjJ,MAAM,KAAK,GAAkB,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,6CAA6C,CAAC,CAAC;IACzF,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,oEAAoE;IACtF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gGAAgG;AAEhG,SAAS,UAAU,CAAC,GAAkB,EAAE,UAAoB;IAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,MAAM;QAC7C,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,UAAU,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACvK,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,GAAkB,EAAE,UAAoB;IACtE,IAAI,GAAG,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,gDAAgD,CAAC,CAAC;IACzG,OAAO,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,aAAa,CAAC,GAAkB,EAAE,UAAoB;IACpE,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,kCAAkC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,eAAe,CAAC,GAAkB,EAAE,UAAoB;IACtE,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,oCAAoC,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAQD;;;iDAGiD;AACjD,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAClG,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YACzD,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAEhG,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;kFAKkF;AAClF,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,IAAI,GAAI,CAAwB,EAAE,IAAI,CAAC;IAC7C,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,KAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,GAAmC,CAAC,KAAK,GAAG,KAAK,CAAC;IACnD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;oCAWoC;AACpC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAM,EAAE,GAAW,EAAE,KAAc;IACzE,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,SAAS,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,aAAa,GAAG,uGAAuG,EAAE,CAAC,CAAC,CAAC;QACvJ,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAM,EAAE,GAAW,EAAE,KAAc,EAAE,gBAAwB;IACnG,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,SAAS,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,aAAa,GAAG,gBAAgB,gBAAgB,kDAAkD,EAAE,CAAC,CAAC,CAAC;QAClI,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,iBAAiB,CAAoC,KAAQ;IAC3E,MAAM,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,iGAAiG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxI,OAAO,KAA6C,CAAC;AACvD,CAAC;AAYD,SAAS,WAAW,CAAI,CAAU,EAAE,GAAW;IAC7C,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,EAAK,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yFAAyF;QACzF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAiB,EAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC;AAEpF,sFAAsF;AACtF,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED;;;;kDAIkD;AAClD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAM,EACN,GAAkB,EAClB,UAAoB,EACpB,OAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC;IAE1D,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,WAAW,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAErC,2FAA2F;IAC3F,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,sFAAsF;IACtF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QACjF,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YACxB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,UAAU,IAAI,oGAAoG,CAAC,CAAC;QACvK,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAAE,WAAW,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,CAAI,SAAS,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACpH,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAwC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,WAAW,CAAC,oBAAoB,CAAC;IAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,UAAU,IAAI,oDAAoD,CAAC,CAAC;IAE5G,6FAA6F;IAC7F,yEAAyE;IACzE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACvE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,QAAQ,IAAI,cAAc,SAAS,EAAE,QAAQ,8DAA8D,QAAQ,sBAAsB,CAAC,CAAC;QAC5L,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,UAAU,IAAI,kDAAkD,CAAC,CAAC;IACvH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,CAAI,SAAoB,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAG,SAAqB,CAAC,QAAQ,EAAE;QACtG,MAAM,EAAE,EAAE,KAAK,EAAE,WAAgB,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE;QACnG,eAAe,EAAE,QAAQ,GAAI,SAAqB,CAAC,QAAQ;KAC5D,CAAC;AACJ,CAAC;AAED;;;+DAG+D;AAC/D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAM,EACN,GAAkB,EAClB,UAAoB;IAEpB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAI,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,gGAAgG;AAEhG;;;;;;;;;;;;;;;;;;;gGAmBgG;AAChG,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW,CAChC,EAAM,EACN,GAAkB,EAClB,UAAoB,EACpB,OAAsD,EAAE;IAExD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IAExC,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,SAAS,CAAC;QACR,IAAI,qBAAqB,GAAG,UAAU;YACpC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,YAAY,IAAI,cAAc,UAAU,6CAA6C,CAAC,CAAC;QAElI,wFAAwF;QACxF,0FAA0F;QAC1F,4FAA4F;QAC5F,qDAAqD;QACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,IAAI,IAA4C,CAAC;QACjD,IAAI,MAAgD,CAAC;QACrD,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,iEAAiE;QACvF,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,MAAM,GAAG,GAAmC,EAAE,CAClD,IAAI;YACF,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,QAAQ,EAAE;YACnH,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;oBAAE,OAAO;gBACjC,MAAM,eAAe,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC;gBACnD,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;oBACnB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK;wBAAE,OAAO,CAAC,+CAA+C;oBAClF,IAAI,GAAG,EAAE,KAAK,EAAE,WAAW,CAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAClE,CAAC;qBAAM,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;oBAC1B,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;wBAC1B,MAAM,GAAG,SAAS,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,WAAW,CAAwC,CAAC,EAAE,IAAI,CAAC,CAAC;wBACtE,MAAM,QAAQ,GAAG,CAAC,CAAC,oBAAoB,CAAC;wBACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;4BACjF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,UAAU,IAAI,oDAAoD,CAAC,CAAC;wBAC5G,iFAAiF;wBACjF,+EAA+E;wBAC/E,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,IAAI,IAAI,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ;4BAAE,MAAM,CAAC,qEAAqE;wBACtJ,MAAM,GAAG,EAAE,KAAK,EAAE,CAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;oBACnF,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,QAAQ;oBAAE,SAAS,CAAC,kCAAkC;gBAC7E,IAAI,eAAe,EAAE,CAAC;oBACpB,WAAW,GAAG,IAAI,CAAC;oBACnB,kFAAkF;oBAClF,gFAAgF;oBAChF,IAAI,MAAM,IAAI,CAAC,QAAQ;wBACrB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,UAAU,IAAI,8EAA8E,CAAC,CAAC;gBACnJ,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,0FAA0F;gBAC1F,oFAAoF;gBACpF,yFAAyF;gBACzF,yFAAyF;gBACzF,oEAAoE;gBACpE,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,QAAQ;oBAAE,MAAM,CAAC,8BAA8B;gBACxG,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;gBACnB,IAAI,CAAC;oBAAE,MAAM,CAAC,CAAC;YACjB,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO;YACjC,2EAA2E;QAC7E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;gBAAE,MAAM,CAAC,CAAC,CAAC,wBAAwB;YAClI,yDAAyD;QAC3D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO;QACjC,qBAAqB,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}