@cuna_labs/cli 0.1.0

package/dist/journey/api-effects.js

@@ -0,0 +1,386 @@
+import { withProviderLaunchIntent } from "./provider-launch-intent.js";
+import { createPublishedProviderSessionV2, requireMatchingPreset } from "./remote-workspace.js";
+import { sessionFailure } from "./session-failure.js";
+import { decideCapability, requireCapability } from "../api/client.js";
+import { EXIT_CODES, CunaError } from "../core/errors.js";
+import { isOpenCodeRuntimeUnverifiedCapabilityRejection, isOpenCodeSupervisorUpgradeReason, isOpenCodeSupervisorUpgradeCapabilityRejection, openCodeRuntimeUnverified, openCodeSupervisorUpgradeRequired, } from "../machines/opencode-supervisor.js";
+import { machineProviderAvailability } from "../machines/provider-availability.js";
+const MACHINE_POLL_LIMIT = 60;
+const CHILD_POLL_LIMIT = 90;
+function fail(code, message, exitCode = EXIT_CODES.remote, details) {
+    return new CunaError({ code, message, exitCode, ...(details === undefined ? {} : { details }) });
+}
+function recency(machine, now) {
+    const timestamp = machine.updatedAt ?? machine.createdAt;
+    if (timestamp === undefined)
+        return "unknown";
+    const observed = Date.parse(timestamp);
+    if (!Number.isFinite(observed) || observed > now + 5_000)
+        return "unknown";
+    return now - observed <= 30 * 24 * 60 * 60 * 1_000 ? "recent" : "not_recent";
+}
+function machineState(value) {
+    const states = new Set(["creating", "running", "paused", "suspended", "stopped", "deleted", "error"]);
+    return states.has(value) ? value : "unknown";
+}
+function relativeCwd(cwd) {
+    return cwd.replace(/^\/workspace\/?/u, "") || ".";
+}
+/**
+ * Map the durable writer seat onto the selection's attachment fact.
+ *
+ *   available ∧ writer = null          → detached   (nobody types; reuse)
+ *   available ∧ writer = this client   → detached   (our own seat; the
+ *                                         reconnect path reissues with the
+ *                                         resume handle)
+ *   available ∧ writer = other client  → attached   (name the holder)
+ *   owner_unrecoverable | none         → unknown    (no attestable PTY)
+ *
+ * Without our own client instance id every held seat is another client's:
+ * claiming a seat as ours on no evidence would race a terminal that has a
+ * writer.
+ */
+export function attachmentFromSeat(seat, ownClientInstanceId) {
+    if (seat.state !== "available")
+        return { attachment: "unknown" };
+    if (seat.writerClientInstanceId === null)
+        return { attachment: "detached" };
+    // The row names the last writer forever; only its connection says whether
+    // that client is there now. A writer that has detached leaves the terminal
+    // reusable, which is the whole point of a durable session.
+    if (!seat.writerAttached)
+        return { attachment: "detached" };
+    if (ownClientInstanceId !== undefined && seat.writerClientInstanceId === ownClientInstanceId) {
+        return { attachment: "detached" };
+    }
+    return { attachment: "attached", attachmentHolder: seat.writerClientInstanceId };
+}
+/**
+ * An edge that does not serve the seat route answers 404. Both spellings the
+ * transport gives a 404 map to "the fact is not published here": a plain
+ * 404 is `operation_not_served`, a Problem-shaped `resource_not_found` is
+ * `not_found`. Every other error is a real failure and propagates.
+ */
+function isSeatUnserved(error) {
+    return error instanceof CunaError &&
+        (error.code === "cuna.remote.operation_not_served" || error.code === "cuna.remote.not_found");
+}
+function sessionObservation(session, seat) {
+    return Object.freeze({
+        id: session.id,
+        machineId: session.machineId,
+        name: session.name,
+        agent: session.agent,
+        workspaceIdentity: session.workspaceBindingId ?? "unknown",
+        workspaceGeneration: session.workspaceGeneration ?? 0,
+        cwd: relativeCwd(session.cwd),
+        authMode: session.authMode,
+        processState: session.processState,
+        ...seat,
+        freshness: "fresh",
+        createdAt: session.createdAt,
+    });
+}
+async function defaultSleep(milliseconds, signal) {
+    if (signal.aborted)
+        throw signal.reason;
+    await new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, milliseconds);
+        signal.addEventListener("abort", () => { clearTimeout(timer); reject(signal.reason); }, { once: true });
+    });
+}
+export function createApiAgentJourneyEffects(input) {
+    const now = input.now ?? Date.now;
+    const sleep = input.sleep ?? defaultSleep;
+    const effects = {
+        inspectWorkspace: input.inspectWorkspace,
+        async observeMachines({ signal }) {
+            const page = await input.client.listMachines(signal);
+            if (page.nextCursor !== undefined) {
+                throw fail("cuna.journey.machine_page_incomplete", "Machine selection requires a complete bounded collection.", EXIT_CODES.policy);
+            }
+            return Promise.all(page.items.map(async (machine) => {
+                let support = "unknown";
+                let supportReason;
+                const provider = machineProviderAvailability(machine);
+                if (!provider.actionable || provider.agent !== input.requestedAgent) {
+                    return Object.freeze({
+                        id: machine.id,
+                        name: machine.name,
+                        agent: provider.agent ?? "unknown",
+                        requestedAgentSupport: "unsupported",
+                        state: machineState(machine.state),
+                        ownership: "owned",
+                        freshness: "fresh",
+                        recency: recency(machine, now()),
+                        resources: Object.freeze({
+                            ...(machine.vcpus === undefined ? {} : { vcpus: machine.vcpus }),
+                            ...(machine.memoryMiB === undefined ? {} : { memoryMiB: machine.memoryMiB }),
+                        }),
+                        costStatus: "unknown",
+                    });
+                }
+                try {
+                    const snapshot = await input.client.discoverCapabilities("machine", machine.id, signal);
+                    if (snapshot.subjectScope !== "machine" || snapshot.subjectId !== machine.id) {
+                        return Object.freeze({
+                            id: machine.id,
+                            name: machine.name,
+                            agent: "unknown",
+                            requestedAgentSupport: "unknown",
+                            state: machineState(machine.state),
+                            ownership: "owned",
+                            freshness: "fresh",
+                            recency: recency(machine, now()),
+                            resources: Object.freeze({}),
+                            costStatus: "unknown",
+                        });
+                    }
+                    const decision = decideCapability(snapshot, "agent_sessions.create", now());
+                    support = decision.status === "supported"
+                        ? "supported"
+                        : decision.status === "unsupported"
+                            ? "unsupported"
+                            : "unknown";
+                    supportReason = decision.status === "supported" ? undefined : decision.reason;
+                }
+                catch {
+                    support = "unknown";
+                }
+                const requestedAgentBlocker = input.requestedAgent === "opencode" &&
+                    support === "unsupported" &&
+                    isOpenCodeSupervisorUpgradeReason(supportReason)
+                    ? "opencode-supervisor-update-required"
+                    : undefined;
+                return Object.freeze({
+                    id: machine.id,
+                    name: machine.name,
+                    agent: provider.agent ?? "unknown",
+                    requestedAgentSupport: support,
+                    ...(requestedAgentBlocker === undefined ? {} : { requestedAgentBlocker }),
+                    state: machineState(machine.state),
+                    ownership: "owned",
+                    freshness: "fresh",
+                    recency: recency(machine, now()),
+                    resources: Object.freeze({
+                        ...(machine.vcpus === undefined ? {} : { vcpus: machine.vcpus }),
+                        ...(machine.memoryMiB === undefined ? {} : { memoryMiB: machine.memoryMiB }),
+                    }),
+                    costStatus: "unknown",
+                });
+            }));
+        },
+        async createMachine({ requestedAgent, idempotencyKey, requestId, onDispatch, signal }) {
+            await requireCapability({ client: input.client, scope: "account", capabilityId: "machines.create", now, signal });
+            if (!await input.authorizeMachineCreate({ requestedAgent, signal })) {
+                throw fail("cuna.journey.machine_create_not_authorized", "Machine creation was not authorized.", EXIT_CODES.policy);
+            }
+            // Everything above this line fails before anything is sent: the
+            // capability check and the person's own confirmation.
+            onDispatch();
+            const machine = await input.client.createMachine({
+                name: `cuna-${requestedAgent}-${requestId.slice(0, 8)}`,
+                agent: requestedAgent,
+                background: true,
+            }, idempotencyKey, requestId, signal);
+            return Object.freeze({ id: machine.id, state: machineState(machine.state) });
+        },
+        async reconcileMachineCreate({ requestId, signal }) {
+            for (let attempt = 0; attempt < MACHINE_POLL_LIMIT; attempt += 1) {
+                let request = await input.client.getMachineCreateRequest(requestId, signal);
+                if (request.state === "unknown" || request.action === "reconcile") {
+                    request = await input.client.reconcileMachineCreateRequest(requestId, signal);
+                }
+                if (request.state === "settled" || request.state === "provider_succeeded") {
+                    const machine = await input.client.getMachine(request.machineId, signal);
+                    return Object.freeze({ id: machine.id, state: machineState(machine.state) });
+                }
+                if (request.state === "terminal_failed" || request.action === "none") {
+                    throw fail("cuna.journey.machine_create_failed", "Machine creation reached an authoritative failure.");
+                }
+                await sleep(Math.min(2_000, 100 * 2 ** Math.min(attempt, 4)), signal);
+            }
+            return "unreconcilable";
+        },
+        async ensureMachineReady({ machineId, observedState, signal }) {
+            let state = observedState;
+            if (state === "paused" || state === "suspended") {
+                state = machineState((await input.client.transitionMachine(machineId, "resume", signal)).state);
+            }
+            else if (state === "stopped") {
+                state = machineState((await input.client.transitionMachine(machineId, "start", signal)).state);
+            }
+            else if (state === "deleted" || state === "error" || state === "unknown") {
+                throw fail("cuna.journey.machine_not_reusable", "The selected machine is not safely reusable.", EXIT_CODES.policy);
+            }
+            for (let attempt = 0; attempt < MACHINE_POLL_LIMIT; attempt += 1) {
+                if (state === "running")
+                    return Object.freeze({ id: machineId, state });
+                const observed = await input.client.getMachine(machineId, signal);
+                state = machineState(observed.state);
+                if (state === "deleted" || state === "error" || state === "unknown") {
+                    throw fail("cuna.journey.machine_not_ready", "The machine did not reach running state.");
+                }
+                await sleep(Math.min(2_000, 100 * 2 ** Math.min(attempt, 4)), signal);
+            }
+            throw fail("cuna.journey.machine_ready_timeout", "Machine readiness remained unproven.", EXIT_CODES.network);
+        },
+        synchronizeWorkspace: input.synchronizeWorkspace,
+        async observeAgentSessions({ machineId, signal }) {
+            const page = await input.client.listAgentSessions(machineId, { limit: 100 }, signal);
+            if (page.nextCursor !== undefined) {
+                throw fail("cuna.journey.agent_session_page_incomplete", "AgentSession selection requires a complete bounded collection.", EXIT_CODES.policy);
+            }
+            return Object.freeze(await Promise.all(page.items.map(async (session) => {
+                // Only a session that could be reused is asked for its seat. A
+                // terminal or starting one is refused on its process state before the
+                // seat would matter, and reading it would only spend a request.
+                if (session.processState !== "ready" && session.processState !== "running") {
+                    return sessionObservation(session, { attachment: "unknown" });
+                }
+                let seat;
+                try {
+                    await requireCapability({ client: input.client, scope: "agent_session", resourceId: session.id, capabilityId: "terminal_seats.read", allowedInteractions: ["read_only"], now, signal });
+                    seat = await input.client.getAgentSessionTerminalSeat(session.id, signal);
+                }
+                catch (error) {
+                    if (isSeatUnserved(error))
+                        return sessionObservation(session, { attachment: "unknown" });
+                    throw error;
+                }
+                return sessionObservation(session, attachmentFromSeat(seat, input.clientInstanceId));
+            })));
+        },
+        async createAgentSession({ machineId, agent, authMode, credentialBindingId, workspace, signal }) {
+            try {
+                await requireCapability({
+                    client: input.client,
+                    scope: "machine",
+                    resourceId: machineId,
+                    capabilityId: "agent_sessions.create",
+                    now,
+                    signal,
+                });
+            }
+            catch (error) {
+                if (agent === "opencode" && isOpenCodeSupervisorUpgradeCapabilityRejection(error)) {
+                    throw openCodeSupervisorUpgradeRequired({
+                        ...(error.details === undefined ? {} : { details: error.details }),
+                        machineId,
+                        cause: error,
+                    });
+                }
+                if (agent === "opencode" && isOpenCodeRuntimeUnverifiedCapabilityRejection(error)) {
+                    throw openCodeRuntimeUnverified({
+                        ...(error.details === undefined ? {} : { details: error.details }),
+                        machineId,
+                        cause: error,
+                    });
+                }
+                throw error;
+            }
+            if (agent === 'opencode' || agent === 'codex' || agent === 'claude-code') {
+                if (authMode !== 'interactive_login' || credentialBindingId !== undefined || !workspace.executionWorkspaceId || workspace.generation < 1 || !input.selectProviderPreset)
+                    throw fail('cuna.provider.v2_unavailable', 'The agent requires a selected V2 profile and a published execution Workspace.');
+                const preset = await input.selectProviderPreset(signal);
+                requireMatchingPreset(agent, preset);
+                if (!input.providerLaunchState)
+                    throw fail('cuna.provider.v2_unavailable', 'Durable provider launch state is unavailable.');
+                const executionWorkspaceId = workspace.executionWorkspaceId;
+                const session = await withProviderLaunchIntent({ ...input.providerLaunchState, machineId, executionWorkspaceId, confirmNew: async () => await input.confirmNewProviderLaunch?.(signal) ?? false, intent: { executionWorkspaceId, generation: workspace.generation, cwd: workspace.remoteCwd, profileId: preset.profile_id, profileRevision: preset.profile_revision, agent, authMode }, create: operationId => createPublishedProviderSessionV2({ client: input.client, machineId, agent, preset, operationId, executionWorkspaceId, generation: workspace.generation, cwd: workspace.remoteCwd, signal }) });
+                return Object.freeze({ id: session.id, machineId: session.machineId });
+            }
+            throw fail('cuna.provider.v2_unavailable', 'This agent has no supported canonical V2 launch profile.');
+        },
+        async ensureAgentSessionReady({ agentSessionId, signal }) {
+            for (let attempt = 0; attempt < CHILD_POLL_LIMIT; attempt += 1) {
+                if (signal?.aborted)
+                    throw signal.reason;
+                const session = await input.client.getAgentSession(agentSessionId, signal);
+                if (session.requestState === "failed") {
+                    if (session.workspaceFailureCode !== undefined) {
+                        const messages = {
+                            "workspace.remote_edits": "Remote edits prevent synchronization. Preserve and reconcile those edits before retrying.",
+                            "workspace.in_use": "This workspace is still in use or waiting for a previous session to finish. Inspect its sessions before retrying.",
+                            "workspace.replacement_requires_fence": "This Workspace cannot replace its files while writer exclusion is unverified. Its existing files were preserved.",
+                            "workspace.materialization_manifest_limit": "This Workspace exceeds the runtime file manifest limit. Reduce the synchronized file set before retrying.",
+                        };
+                        throw fail("cuna.journey.workspace_materialization_failed", messages[session.workspaceFailureCode] ?? "The runtime could not prepare this Workspace. Its failure code identifies the refused operation.", EXIT_CODES.remote, { reason: session.workspaceFailureCode });
+                    }
+                    throw sessionFailure(session, "The AgentSession request failed before attach.");
+                }
+                if (signal?.aborted)
+                    throw signal.reason;
+                if (session.id !== agentSessionId) {
+                    throw fail("cuna.journey.session_identity_mismatch", "The readiness observation describes a different AgentSession.");
+                }
+                if (session.processState === "ready" || session.processState === "running") {
+                    // A durable process acknowledgement can precede the registry's exact
+                    // PTY attachment. Wait for that authority without dispatching again.
+                    try {
+                        await requireCapability({ client: input.client, scope: "agent_session", resourceId: agentSessionId,
+                            capabilityId: "terminal_connections.create", allowedInteractions: ["native"], now, signal });
+                        if (signal?.aborted)
+                            throw signal.reason;
+                        return Object.freeze({ id: session.id, machineId: session.machineId });
+                    }
+                    catch (error) {
+                        if (signal?.aborted)
+                            throw signal.reason;
+                        if (!(error instanceof CunaError
+                            && ["cuna.capability.unknown", "cuna.capability.temporarily_unavailable"].includes(error.code)
+                            && error.details?.capability_id === "terminal_connections.create"
+                            && ["supervisor_registry_unavailable", "agent_session_not_ready", "runtime_lease_expired"].includes(String(error.details?.reason))))
+                            throw error;
+                    }
+                }
+                if (["exited", "failed", "terminated"].includes(session.processState)) {
+                    throw sessionFailure(session, "The AgentSession reached a terminal state before attach.");
+                }
+                await sleep(Math.min(2_000, 100 * 2 ** Math.min(attempt, 4)), signal);
+            }
+            throw new CunaError({
+                code: "cuna.journey.agent_session_ready_timeout",
+                message: "Cuna stopped waiting for AgentSession readiness. The remote request may still be pending.",
+                exitCode: EXIT_CODES.network,
+                hint: `Inspect the existing request before starting another session: cuna agent-sessions get ${agentSessionId}`,
+                details: { agent_session_id: agentSessionId },
+            });
+        },
+        attach: input.attach,
+        async reconcileCancellation({ ledger, signal }) {
+            if (input.reconcileCancellation !== undefined) {
+                await input.reconcileCancellation({ ledger, signal });
+                return;
+            }
+            if (ledger.createdAgentSessionId !== undefined) {
+                await input.client.getAgentSession(ledger.createdAgentSessionId, signal).catch(() => undefined);
+            }
+            // An absent request identity proves no create was dispatched, so there is
+            // nothing to reconcile. It used to be present unconditionally, which made
+            // every cancelled journey that merely SELECTED a machine query a request
+            // identity the producer had never been told about.
+            if (ledger.createdMachineId === undefined && ledger.machineCreateRequestId !== undefined) {
+                const requestId = ledger.machineCreateRequestId;
+                try {
+                    let request = await input.client.getMachineCreateRequest(requestId, signal);
+                    if (request.state === "unknown" || request.action === "reconcile") {
+                        request = await input.client.reconcileMachineCreateRequest(requestId, signal);
+                    }
+                    if (request.state === "settled" || request.state === "provider_succeeded") {
+                        await input.client.getMachine(request.machineId, signal);
+                    }
+                }
+                catch {
+                    // A missing request proves no cleanup target; a transport failure
+                    // remains unproven and is reported by the cancellation result.
+                }
+            }
+            if (ledger.createdMachineId !== undefined) {
+                await input.client.getMachine(ledger.createdMachineId, signal).catch(() => undefined);
+            }
+        },
+    };
+    return Object.freeze(effects);
+}
+//# sourceMappingURL=api-effects.js.map

package/dist/journey/api-effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-effects.js","sourceRoot":"","sources":["../../src/journey/api-effects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,wBAAwB,EAAC,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAC,gCAAgC,EAAC,qBAAqB,EAAC,MAAM,uBAAuB,CAAC;AAE7F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAsB,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,SAAS,EAAiB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,8CAA8C,EAC9C,iCAAiC,EACjC,8CAA8C,EAC9C,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAQnF,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AA8B5B,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,WAAqB,UAAU,CAAC,MAAM,EAAE,OAAgC;IACnH,OAAO,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,GAAW;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IACzD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,GAAG,GAAG,KAAK;QAAE,OAAO,SAAS,CAAC;IAC3E,OAAO,GAAG,GAAG,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9G,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AACpD,CAAC;AAMD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA8B,EAC9B,mBAAuC;IAEvC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACjE,IAAI,IAAI,CAAC,sBAAsB,KAAK,IAAI;QAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC5D,IAAI,mBAAmB,KAAK,SAAS,IAAI,IAAI,CAAC,sBAAsB,KAAK,mBAAmB,EAAE,CAAC;QAC7F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,SAAS;QAC/B,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAqB,EAAE,IAAoB;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,iBAAiB,EAAE,OAAO,CAAC,kBAAkB,IAAI,SAAS;QAC1D,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,CAAC;QACrD,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG,IAAI;QACP,SAAS,EAAE,OAAgB;QAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,YAAoB,EAAE,MAAmB;IACnE,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAkC;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC;IAC1C,MAAM,OAAO,GAAwB;QACnC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,KAAK,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,sCAAsC,EAAE,2DAA2D,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACrI,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAClD,IAAI,OAAO,GAA4C,SAAS,CAAC;gBACjE,IAAI,aAAiC,CAAC;gBACtC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;oBACpE,OAAO,MAAM,CAAC,MAAM,CAAC;wBACnB,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAkB;wBAC3C,qBAAqB,EAAE,aAAsB;wBAC7C,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;wBAClC,SAAS,EAAE,OAAgB;wBAC3B,SAAS,EAAE,OAAgB;wBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;wBAChC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;4BACvB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;4BAChE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;yBAC7E,CAAC;wBACF,UAAU,EAAE,SAAkB;qBAC/B,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBACxF,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;wBAC7E,OAAO,MAAM,CAAC,MAAM,CAAC;4BACnB,EAAE,EAAE,OAAO,CAAC,EAAE;4BACd,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,KAAK,EAAE,SAAkB;4BACzB,qBAAqB,EAAE,SAAkB;4BACzC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;4BAClC,SAAS,EAAE,OAAgB;4BAC3B,SAAS,EAAE,OAAgB;4BAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;4BAChC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC5B,UAAU,EAAE,SAAkB;yBAC/B,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC5E,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW;wBACvC,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,aAAa;4BACjC,CAAC,CAAC,aAAa;4BACf,CAAC,CAAC,SAAS,CAAC;oBAChB,aAAa,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAChF,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,SAAS,CAAC;gBACtB,CAAC;gBACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,cAAc,KAAK,UAAU;oBAC/D,OAAO,KAAK,aAAa;oBACzB,iCAAiC,CAAC,aAAa,CAAC;oBAChD,CAAC,CAAC,qCAA8C;oBAChD,CAAC,CAAC,SAAS,CAAC;gBACd,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAkB;oBAC3C,qBAAqB,EAAE,OAAO;oBAC9B,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC;oBACzE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;oBAClC,SAAS,EAAE,OAAgB;oBAC3B,SAAS,EAAE,OAAgB;oBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;oBAChC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;wBACvB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;wBAChE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;qBAC7E,CAAC;oBACF,UAAU,EAAE,SAAkB;iBAC/B,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,CAAC;QACN,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE;YACnF,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAClH,IAAI,CAAC,MAAM,KAAK,CAAC,sBAAsB,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,CACR,4CAA4C,EAC5C,sCAAsC,EACtC,UAAU,CAAC,MAAM,CAClB,CAAC;YACJ,CAAC;YACD,gEAAgE;YAChE,sDAAsD;YACtD,UAAU,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC/C,IAAI,EAAE,QAAQ,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACvD,KAAK,EAAE,cAAc;gBACrB,UAAU,EAAE,IAAI;aACjB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;YAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,kBAAkB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjE,IAAI,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC5E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClE,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;oBAC1E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACrE,MAAM,IAAI,CAAC,oCAAoC,EAAE,oDAAoD,CAAC,CAAC;gBACzG,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE;YAC3D,IAAI,KAAK,GAAG,aAAa,CAAC;YAC1B,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAChD,KAAK,GAAG,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClG,CAAC;iBAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,GAAG,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACjG,CAAC;iBAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,CAAC,mCAAmC,EAAE,8CAA8C,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACrH,CAAC;YACD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,kBAAkB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjE,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAClE,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACpE,MAAM,IAAI,CAAC,gCAAgC,EAAE,0CAA0C,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,IAAI,CAAC,oCAAoC,EAAE,sCAAsC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/G,CAAC;QACD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,KAAK,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,4CAA4C,EAAE,gEAAgE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAChJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACtE,+DAA+D;gBAC/D,sEAAsE;gBACtE,gEAAgE;gBAChE,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC3E,OAAO,kBAAkB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,IAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;oBACxL,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,cAAc,CAAC,KAAK,CAAC;wBAAE,OAAO,kBAAkB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;oBACzF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC,CAAC,CAAC;QACP,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE;YAC7F,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,SAAS;oBACrB,YAAY,EAAE,uBAAuB;oBACrC,GAAG;oBACH,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,KAAK,UAAU,IAAI,8CAA8C,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClF,MAAM,iCAAiC,CAAC;wBACtC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;wBAClE,SAAS;wBACT,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,KAAK,KAAK,UAAU,IAAI,8CAA8C,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClF,MAAM,yBAAyB,CAAC;wBAC9B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;wBAClE,SAAS;wBACT,KAAK,EAAE,KAAK;qBACb,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAG,KAAK,KAAG,UAAU,IAAE,KAAK,KAAG,OAAO,IAAE,KAAK,KAAG,aAAa,EAAC,CAAC;gBAC7D,IAAG,QAAQ,KAAG,mBAAmB,IAAE,mBAAmB,KAAG,SAAS,IAAE,CAAC,SAAS,CAAC,oBAAoB,IAAE,SAAS,CAAC,UAAU,GAAC,CAAC,IAAE,CAAC,KAAK,CAAC,oBAAoB;oBAAC,MAAM,IAAI,CAAC,8BAA8B,EAAC,+EAA+E,CAAC,CAAC;gBACpR,MAAM,MAAM,GAAC,MAAM,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACtD,qBAAqB,CAAC,KAAK,EAAC,MAAM,CAAC,CAAC;gBACpC,IAAG,CAAC,KAAK,CAAC,mBAAmB;oBAAC,MAAM,IAAI,CAAC,8BAA8B,EAAC,+CAA+C,CAAC,CAAC;gBACzH,MAAM,oBAAoB,GAAC,SAAS,CAAC,oBAAoB,CAAC;gBAC1D,MAAM,OAAO,GAAC,MAAM,wBAAwB,CAAC,EAAC,GAAG,KAAK,CAAC,mBAAmB,EAAC,SAAS,EAAC,oBAAoB,EAAC,UAAU,EAAC,KAAK,IAAE,EAAE,CAAA,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAC,MAAM,CAAC,IAAE,KAAK,EAAC,MAAM,EAAC,EAAC,oBAAoB,EAAC,UAAU,EAAC,SAAS,CAAC,UAAU,EAAC,GAAG,EAAC,SAAS,CAAC,SAAS,EAAC,SAAS,EAAC,MAAM,CAAC,UAAU,EAAC,eAAe,EAAC,MAAM,CAAC,gBAAgB,EAAC,KAAK,EAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,WAAW,CAAA,EAAE,CAAA,gCAAgC,CAAC,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,SAAS,EAAC,KAAK,EAAC,MAAM,EAAC,WAAW,EAAC,oBAAoB,EAAC,UAAU,EAAC,SAAS,CAAC,UAAU,EAAC,GAAG,EAAC,SAAS,CAAC,SAAS,EAAC,MAAM,EAAC,CAAC,EAAC,CAAC,CAAC;gBACliB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,EAAE,EAAC,OAAO,CAAC,EAAE,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,IAAI,CAAC,8BAA8B,EAAC,0DAA0D,CAAC,CAAC;QACxG,CAAC;QACD,KAAK,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE;YACtD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBAC/D,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;gBACzC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC3E,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;oBACtC,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;wBAC/C,MAAM,QAAQ,GAA2B;4BACvC,wBAAwB,EAAE,2FAA2F;4BACrH,kBAAkB,EAAE,mHAAmH;4BACvI,sCAAsC,EAAE,kHAAkH;4BAC1J,0CAA0C,EAAE,2GAA2G;yBACxJ,CAAC;wBACF,MAAM,IAAI,CAAC,+CAA+C,EAAE,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,kGAAkG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;oBACzQ,CAAC;oBACD,MAAM,cAAc,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAC;gBAClF,CAAC;gBACD,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;gBACzC,IAAI,OAAO,CAAC,EAAE,KAAK,cAAc,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,wCAAwC,EAAE,+DAA+D,CAAC,CAAC;gBACxH,CAAC;gBACD,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC3E,qEAAqE;oBACrE,qEAAqE;oBACrE,IAAI,CAAC;wBACH,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc;4BAChG,YAAY,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;wBAC/F,IAAI,MAAM,EAAE,OAAO;4BAAE,MAAM,MAAM,CAAC,MAAM,CAAC;wBACzC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBACzE,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,MAAM,EAAE,OAAO;4BAAE,MAAM,MAAM,CAAC,MAAM,CAAC;wBACzC,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS;+BAC3B,CAAC,yBAAyB,EAAE,yCAAyC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;+BAC3F,KAAK,CAAC,OAAO,EAAE,aAAa,KAAK,6BAA6B;+BAC9D,CAAC,iCAAiC,EAAE,yBAAyB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;4BAAE,MAAM,KAAK,CAAC;oBACrJ,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;oBACtE,MAAM,cAAc,CAAC,OAAO,EAAE,0DAA0D,CAAC,CAAC;gBAC5F,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,0CAA0C;gBAChD,OAAO,EAAE,2FAA2F;gBACpG,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,IAAI,EAAE,yFAAyF,cAAc,EAAE;gBAC/G,OAAO,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;YAC5C,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBAC9C,MAAM,KAAK,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClG,CAAC;YACD,0EAA0E;YAC1E,0EAA0E;YAC1E,yEAAyE;YACzE,mDAAmD;YACnD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBACzF,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC;gBAChD,IAAI,CAAC;oBACH,IAAI,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC5E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAClE,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAChF,CAAC;oBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;wBAC1E,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kEAAkE;oBAClE,+DAA+D;gBACjE,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist/journey/derived-identity.d.ts

@@ -0,0 +1,91 @@
+import type { AgentKind } from "../api/contracts.js";
+import type { MachineJourneySelection } from "./intent.js";
+/**
+ * A deterministic RFC 4122 version-5-shaped identifier for `domain` and `value`.
+ *
+ * Two call sites now need the same primitive — the workspace binding's
+ * `projectId`/`localInstanceId` and the machine-create request identity — so it
+ * is defined once. Two private copies of one derivation is the shape that lets
+ * one copy be "improved" and silently start minting different identifiers for
+ * records already written to a user's disk.
+ */
+export declare function stableUuid(domain: string, value: string): string;
+/** Everything that decides WHICH machine a journey create is asking for. */
+export interface MachineCreateIdentityInput {
+    /** The authenticated principal the create is billed and scoped to. */
+    readonly userId: string;
+    /** The workspace the machine is created inside. */
+    readonly workspaceId: string;
+    /** The project root, canonicalized by the same authority the binding uses. */
+    readonly canonicalLocalRoot: string;
+    /** The agent the machine is created to run. */
+    readonly agent: AgentKind;
+    /** The machine the invocation asked for. */
+    readonly machine: MachineJourneySelection;
+}
+export interface MachineCreateIdentity {
+    /** The producer-side create-request identity, and the reconciliation key. */
+    readonly requestId: string;
+    /** The transport idempotency key carried by the same create. */
+    readonly idempotencyKey: string;
+    /** The intent digest both identities project from. Diagnostics only. */
+    readonly intentDigest: string;
+}
+/**
+ * Derive the durable identity of one machine-create request from the intent
+ * that asked for it.
+ *
+ * WHY THIS IS NOT `randomUUID()`. The identity below is the key
+ * `reconcileMachineCreate` looks the create up by. Minted from randomness it is
+ * lost with the process that minted it: a CLI interrupted between the provider
+ * accepting the create and the CLI recording it comes back with a different id,
+ * cannot find its own attempt, and creates a SECOND machine while the first
+ * bills forever with nothing able to name it. Derived from the intent, the
+ * re-run of an interrupted command re-derives the same id and reconciles.
+ * `journey/workspace-effects.ts` already derives the workspace binding's
+ * identities this way and for this reason; this is that discipline, not a
+ * second mechanism.
+ *
+ * EVERY INPUT IS NECESSARY:
+ *
+ *   `userId`   — two principals on one host, in one directory, running one
+ *     command must not derive one create identity. The id is a client-chosen
+ *     key into a producer-side table; scoping it to the principal makes a
+ *     cross-principal collision impossible under any producer keying, including
+ *     keyings this repository cannot read.
+ *
+ *   `workspaceId` — one principal may hold more than one workspace and a
+ *     machine belongs to exactly one. A create in workspace B must never
+ *     reconcile onto a machine created in workspace A.
+ *
+ *   `canonicalLocalRoot` — two projects are two machines. This is the same
+ *     canonical root `workspace-effects.ts` keys the binding on, taken from the
+ *     same authority rather than recomputed here, so the create identity and
+ *     the binding identity can never disagree about which project this is. A
+ *     lexical path would disagree the moment the user retried through a
+ *     symlink, a different case, or a relative spelling.
+ *
+ *   `agent` — `cuna claude` and `cuna codex` send different create bodies and
+ *     different machine names. Sharing an identity would reconcile the second
+ *     command onto a machine running the other agent.
+ *
+ *   `machine` — `--new` is a deliberately different request from the default
+ *     reconciling one, and the full selection is serialized rather than only
+ *     its kind so that a later change letting `--machine NAME` reach creation
+ *     cannot silently alias two names onto one identity.
+ *
+ * DELIBERATELY EXCLUDED: `syncMode`, `newSession`, `authMode` and
+ * `credentialBindingId` describe the AgentSession and the file transfer, not
+ * the machine. Admitting them would split one machine into several for
+ * invocations that are asking for the same machine.
+ *
+ * THE COST, stated because it is real. A derived identity is durable in both
+ * directions: once a create has settled, that identity keeps resolving to its
+ * outcome. If the machine is later deleted AND the local binding removed, the
+ * same invocation re-derives a spent identity and cannot create a replacement;
+ * `--new` derives a different one and is the way out. That is the price of
+ * being able to find an orphan at all, and it is bounded, whereas an orphan
+ * that nothing can name is not.
+ */
+export declare function deriveMachineCreateIdentity(input: MachineCreateIdentityInput): MachineCreateIdentity;
+//# sourceMappingURL=derived-identity.d.ts.map

package/dist/journey/derived-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived-identity.d.ts","sourceRoot":"","sources":["../../src/journey/derived-identity.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE3D;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMhE;AAED,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,qBAAqB,CAmBpG"}

package/dist/journey/derived-identity.js

@@ -0,0 +1,123 @@
+import { createHash } from "node:crypto";
+import { EXIT_CODES, CunaError } from "../core/errors.js";
+/**
+ * A deterministic RFC 4122 version-5-shaped identifier for `domain` and `value`.
+ *
+ * Two call sites now need the same primitive — the workspace binding's
+ * `projectId`/`localInstanceId` and the machine-create request identity — so it
+ * is defined once. Two private copies of one derivation is the shape that lets
+ * one copy be "improved" and silently start minting different identifiers for
+ * records already written to a user's disk.
+ */
+export function stableUuid(domain, value) {
+    const bytes = createHash("sha256").update(`${domain}\0${value}`, "utf8").digest().subarray(0, 16);
+    bytes[6] = (bytes[6] & 0x0f) | 0x50;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = bytes.toString("hex");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function invalidComponent(component) {
+    return new CunaError({
+        code: "cuna.journey.machine_create_identity_unavailable",
+        message: "Cuna cannot derive a durable identity for this machine-create request.",
+        exitCode: EXIT_CODES.policy,
+        hint: "Report this with `cuna version --json`; the journey refuses to create a machine it could not later find.",
+        details: { component },
+    });
+}
+function component(value, name) {
+    // NUL is the field separator below. A value carrying one would let two
+    // different inputs serialize to the same string, which is the one way a
+    // derived identity can collide across genuinely different creates.
+    if (typeof value !== "string" || value.length === 0 || value.includes("\0")) {
+        throw invalidComponent(name);
+    }
+    return value;
+}
+/** The selection, serialized so that no two distinct selections share a string. */
+function selectionComponent(machine) {
+    if (machine === null || typeof machine !== "object")
+        throw invalidComponent("machine_selection");
+    if (machine.kind === "exact-name")
+        return `exact-name
${component(machine.name, "machine_selection")}`;
+    if (machine.kind === "new" || machine.kind === "automatic")
+        return machine.kind;
+    throw invalidComponent("machine_selection");
+}
+/**
+ * Derive the durable identity of one machine-create request from the intent
+ * that asked for it.
+ *
+ * WHY THIS IS NOT `randomUUID()`. The identity below is the key
+ * `reconcileMachineCreate` looks the create up by. Minted from randomness it is
+ * lost with the process that minted it: a CLI interrupted between the provider
+ * accepting the create and the CLI recording it comes back with a different id,
+ * cannot find its own attempt, and creates a SECOND machine while the first
+ * bills forever with nothing able to name it. Derived from the intent, the
+ * re-run of an interrupted command re-derives the same id and reconciles.
+ * `journey/workspace-effects.ts` already derives the workspace binding's
+ * identities this way and for this reason; this is that discipline, not a
+ * second mechanism.
+ *
+ * EVERY INPUT IS NECESSARY:
+ *
+ *   `userId`   — two principals on one host, in one directory, running one
+ *     command must not derive one create identity. The id is a client-chosen
+ *     key into a producer-side table; scoping it to the principal makes a
+ *     cross-principal collision impossible under any producer keying, including
+ *     keyings this repository cannot read.
+ *
+ *   `workspaceId` — one principal may hold more than one workspace and a
+ *     machine belongs to exactly one. A create in workspace B must never
+ *     reconcile onto a machine created in workspace A.
+ *
+ *   `canonicalLocalRoot` — two projects are two machines. This is the same
+ *     canonical root `workspace-effects.ts` keys the binding on, taken from the
+ *     same authority rather than recomputed here, so the create identity and
+ *     the binding identity can never disagree about which project this is. A
+ *     lexical path would disagree the moment the user retried through a
+ *     symlink, a different case, or a relative spelling.
+ *
+ *   `agent` — `cuna claude` and `cuna codex` send different create bodies and
+ *     different machine names. Sharing an identity would reconcile the second
+ *     command onto a machine running the other agent.
+ *
+ *   `machine` — `--new` is a deliberately different request from the default
+ *     reconciling one, and the full selection is serialized rather than only
+ *     its kind so that a later change letting `--machine NAME` reach creation
+ *     cannot silently alias two names onto one identity.
+ *
+ * DELIBERATELY EXCLUDED: `syncMode`, `newSession`, `authMode` and
+ * `credentialBindingId` describe the AgentSession and the file transfer, not
+ * the machine. Admitting them would split one machine into several for
+ * invocations that are asking for the same machine.
+ *
+ * THE COST, stated because it is real. A derived identity is durable in both
+ * directions: once a create has settled, that identity keeps resolving to its
+ * outcome. If the machine is later deleted AND the local binding removed, the
+ * same invocation re-derives a spent identity and cannot create a replacement;
+ * `--new` derives a different one and is the way out. That is the price of
+ * being able to find an orphan at all, and it is bounded, whereas an orphan
+ * that nothing can name is not.
+ */
+export function deriveMachineCreateIdentity(input) {
+    const serialized = [
+        component(input.userId, "user_id"),
+        component(input.workspaceId, "workspace_id"),
+        component(input.canonicalLocalRoot, "canonical_local_root"),
+        component(input.agent, "agent"),
+        selectionComponent(input.machine),
+    ].join("\0");
+    const intentDigest = createHash("sha256").update(serialized, "utf8").digest("hex");
+    return Object.freeze({
+        requestId: stableUuid("cuna.machine-create-request.v1", intentDigest),
+        // The producer accepts both a create-request identity and a transport
+        // idempotency key. Deriving only the first would leave a cross-process
+        // replay carrying a fresh key, which is a duplicate create under any
+        // producer that deduplicates on the key alone. Both are derived, so the
+        // replay is identical in every dimension the request carries.
+        idempotencyKey: `cuna-machine-create-${intentDigest}`,
+        intentDigest,
+    });
+}
+//# sourceMappingURL=derived-identity.js.map

package/dist/journey/derived-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived-identity.js","sourceRoot":"","sources":["../../src/journey/derived-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG1D;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAyBD,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,IAAI,SAAS,CAAC;QACnB,IAAI,EAAE,kDAAkD;QACxD,OAAO,EAAE,wEAAwE;QACjF,QAAQ,EAAE,UAAU,CAAC,MAAM;QAC3B,IAAI,EAAE,0GAA0G;QAChH,OAAO,EAAE,EAAE,SAAS,EAAE;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAY;IAC5C,uEAAuE;IACvE,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,kBAAkB,CAAC,OAAgC;IAC1D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,cAAc,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,CAAC;IACvG,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IAChF,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAiC;IAC3E,MAAM,UAAU,GAAG;QACjB,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;QAClC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC;QAC5C,SAAS,CAAC,KAAK,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;QAC3D,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;QAC/B,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;KAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,UAAU,CAAC,gCAAgC,EAAE,YAAY,CAAC;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,8DAA8D;QAC9D,cAAc,EAAE,uBAAuB,YAAY,EAAE;QACrD,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}