@descryy/mcp 0.5.0 → 0.7.0

package/dist/tools/observe-runtime.d.ts

@@ -1,165 +1,23 @@
 /**
- * `observe_runtime` — boot or attach to a real application, watch it, and write
- * what was witnessed into the graph as R4 facts.
- *
- * **The second tool that writes, and the first that writes something no
- * re-index can reproduce.** `analyze` re-derives the graph from source already
- * on disk, so nothing it writes is a new claim about the world. This one runs
- * a real process and records what it saw happen, which is the one accuracy
- * source architecture §11B.3 calls *"the core technical moat"* and the one a
- * purely static tool is structurally unable to reach: *"a purely static
- * code-graph tool is capped at R3 permanently. It has no runtime."*
- *
- * ## What this composes, and what it invents
- *
- * It invents no mechanism. Every stage already existed, gate-verified, in
- * `descry-runtime`, and every one of them was dormant — the whole point of
- * `DEC-NEXT-mcp-runtime-dependency-boundary-for-r4-evidence`, which measured
- * that `applyRuntimeObservations` had **zero production callers anywhere**,
- * not in `descry-desktop` and not in `descry-runtime`'s own pipeline. Four
- * shipped components in a row, and this tool is the wire between them:
- *
- * 1. `runInstrumentedExecution` (`@descryy/runtime-orchestrator`) spawns or
- *    attaches the declared services, starts the adapter's collectors, drains
- *    them for a stated window, and writes every item through `EvidenceStore`.
- * 2. `correlateExecution` (`@descryy/runtime-evidence-correlation`) resolves
- *    each evidence item to the graph node it is *about* — the resolve-then-
- *    attribute pass. This answers identity, not edges.
- * 3. `confirmObservedFrontendCaller` (`@descryy/runtime-graph-correlator`)
- *    turns a captured call-site stack plus a resolved endpoint into a
- *    `RuntimeEdgeObservation`, and
- * 4. calls `applyRuntimeObservations` (`@descryy/core`) with it, which
- *    promotes, mints or contradicts the edge and writes the EARNED ledger.
- *
- * ## Why stage 3 exists rather than deriving edges from stage 2 directly
- *
- * `uat-phase-1-bug-fixes.md` Phase 2 describes step 2 as producing
- * `RuntimeEdgeObservation[]`. It does not, and the difference is load-bearing
- * rather than pedantic: `correlateExecution` returns
- * `CorrelationAttribution`s — *(evidenceId, graphNodeId)* pairs saying which
- * single node an observation is about. An edge needs **two** endpoints and a
- * witnessed relationship between them, and manufacturing one by pairing up
- * attributions that happen to co-occur in the same run would mint edges from
- * temporal coincidence. That is precisely the wrong-direction failure rule 2
- * exists to prevent, arriving through the one mechanism built to make the
- * graph *more* trustworthy.
- *
- * So the observation comes from the one shipped producer that can honestly
- * make one: a captured stack naming the caller, against an endpoint the same
- * observation named. Both endpoints come from the observation itself. Every
- * other correlated item is reported in the counts and produces no edge, which
- * is a disclosed gap rather than a silent one.
- *
- * ## What this closure can actually witness today — measured, not assumed
- *
- * The wire is complete, and what it can carry changed when the runtime packages
- * were published at 0.1.0 and pinned here — so this paragraph is the record of
- * a limit that was real and is now lifted, kept rather than deleted because the
- * shape of it recurs.
- *
- * **It used to be that no producer of the required pair — HTTP evidence
- * carrying a call-site stack — was in this server's closure.** The browser
- * network collector never has been. The outbound-fetch instrumentation in
- * `@descryy/runtime-external-service-observation` existed, was proven in
- * `descry-runtime`, and was not installed here at all. So a run resolved both
- * kinds of node and wrote no edge, and `STANDING_NOTES` said so on every call
- * because "no edge was written" and "nothing here could have written one" are
- * different statements.
- *
- * **That second producer is now in the closure**, transitively through
- * `@descryy/runtime-orchestrator`, which applies the adapter's
- * `outboundHttpLaunch()` between the interpreter and the script so the client
- * is patched before any application code can capture an unpatched one. Measured
- * end to end in `observe-runtime-outbound.conformance.test.ts`: two real
- * processes, 17 `EXTERNAL_REQUEST` items alongside 18 `BACKEND_LOG`, one
- * `USES_API` edge minted at R4, and the first `strongly supported` reply this
- * server has produced.
- *
- * **Two limits remain, and they are stated rather than inferred from a zero.**
- * An *attached* service is not launched by Descry, so the instrumentation
- * cannot be installed into it and its outbound calls carry no stack. And
- * browser-side traffic still needs `@descryy/runtime-browser`, which is not
- * here. Both are in `STANDING_NOTES`.
- *
- * The rule that outlives all of it: a disclosure about the closure is a fact
- * about *this build*, not about what `descry-runtime` can do. The two came
- * apart once already, when the cross-boundary lane landed and this file still
- * claimed the capability was absent. Re-check it against the installed tree
- * when the pins move, not against the source repository.
- * Descry.
- *
- * ## Why no denial is ever emitted
- *
- * `applyRuntimeObservations` accepts `held: false`. Nothing here ever sends
- * one, and `confirmObservedFrontendCaller`'s own header explains why: a run
- * establishes that a call *happened*; it cannot establish that one did not,
- * because a run exercises the paths it happens to take. Demoting a correct
- * edge on the strength of a route this run did not visit would be worse than
- * never running.
- *
- * ## Class and tier
- *
- * `action` — DEC-278's own test is *"can this call's effect change a later
- * finding without the developer having said so"*, and this one spawns
- * processes and writes R4 edges that cap every later reliability class
- * differently. It is gated by the same two-call `confirmToken` handshake
- * `questions` uses, and additionally by the environment profile's declared
- * `safetyLevel` (DEC-270): booting a service is a **write** against the
- * target, so a `readOnly` profile refuses. An all-attach run is genuinely
- * read-only — `ServiceConfiguration.attach`'s own contract is that Descry
- * never executes code in, or applies limits to, a process it did not spawn —
- * so it is allowed under `readOnly`, and that distinction is stated in the
- * disclosures rather than inferred silently.
- *
- * `evidence` — it reports what was witnessed and what was written. It draws no
- * conclusion about the user's code; nothing here reads or writes a finding, a
- * hypothesis or a category (RT-027).
- *
- * ## No new query tools
- *
- * None are needed and none are added. `impact`, `propagation` and the rest
- * already read the `resolution` field, so an edge this tool promotes to R4
- * becomes visible through every one of them on the next call, with no change
- * to any of them.
- */
+ * `observe_runtime` — boot or attach to a real application, write what was witnessed into the
+ * graph as R4 facts. Composes existing descry-runtime stages, no new mechanism (DEC-NEXT-mcp-
+ * runtime-dependency-boundary-for-r4-evidence). `action`/`evidence` (DEC-278), gated by
+ * confirmToken + profile safetyLevel (DEC-270). Never emits a denial. */
 import type { SignalTypeCount } from "@descryy/ir";
-import type { Evidence, ServiceConfiguration } from "@descryy/runtime-contracts";
+import type { Evidence, FilesystemPolicy, NetworkPolicy, ResourceLimits, ServiceConfiguration } from "@descryy/runtime-contracts";
 import type { RunOptions } from "@descryy/runtime-controller";
 import type { EnvironmentProfile } from "@descryy/runtime-environment-profile";
 import { type ToolDefinition } from "./kit.ts";
 import { type RuntimeAdapterSpec } from "../runtime-registry.ts";
-/**
- * One service's readiness declaration, derived from `RunOptions` rather than
- * imported by name.
- *
- * `@descryy/runtime-controller` declares `ServiceReadinessSpec` and does not
- * export it from its index — a real gap in that package, but fixing it there
- * would mean a republish and a version bump across everything that pins the
- * controller, to obtain a type this file can derive exactly. Deriving is also
- * the more durable of the two: this cannot drift from what `run()` actually
- * accepts, because it *is* what `run()` accepts.
- */
+/** One service's readiness declaration, derived from RunOptions rather than imported by
+ *  name — @descryy/runtime-controller doesn't export ServiceReadinessSpec, and deriving
+ *  can't drift from what run() actually accepts, because it *is* what run() accepts. */
 type ServiceReadinessSpec = RunOptions["readiness"][string];
 /** Where evidence lands when the call does not say. Beside the graph, not inside it. */
 export declare const DEFAULT_EVIDENCE_RELATIVE_PATH: string;
-/**
- * What one declared service did, reported from the one source that survives the
- * call: `Execution.processes`.
- *
- * **Deliberately not the controller's `ServiceStartResult`**, which carries a
- * per-service `stage`/`readiness.reason` and would be the better answer.
- * `runInstrumentedExecution` does not return it — `serviceStartResults` is a
- * property of `ExecutionController`, which that function creates, uses and
- * drops, so it is genuinely unavailable to a caller rather than merely
- * unplumbed here. What is knowable is reported and nothing is invented to fill
- * the gap: a service with no `ProcessHandle` did not start, and the
- * execution-level `executionState` (`FAILED_START` in particular) is what says
- * a readiness check is why.
- *
- * A `null` `exitCode` with a `null` `signal` on a process that has not exited
- * is the healthy case, not a missing value — POSIX only sets an exit code on a
- * normal `exit()`, so `signal` is what distinguishes a crash from a clean exit.
- */
+/** What one declared service did, from Execution.processes — not ServiceStartResult, which
+ *  runInstrumentedExecution doesn't return. No ProcessHandle means never-started;
+ *  `executionState` (FAILED_START) says why when known. */
 export interface ObservedService {
     readonly service: string;
     /** False when no process handle exists for it at all — it never started. */
@@ -174,12 +32,8 @@ export interface ObservedService {
     /** Non-null means killed by this signal, whatever `exitCode` says. */
     readonly signal: string | null;
 }
-/**
- * What the correlation pass resolved, by family. Counts rather than rows: a
- * long run produces thousands of evidence items and this reply is read by an
- * agent, not archived. The rows themselves are in the evidence store, keyed by
- * `executionId`, which is returned so they can be found.
- */
+/** What the correlation pass resolved, by family — counts, not rows (a long run produces
+ *  thousands of items). Rows themselves live in the evidence store, keyed by executionId. */
 export interface CorrelationSummary {
     readonly considered: number;
     readonly skipped: number;
@@ -190,11 +44,8 @@ export interface CorrelationSummary {
     /** Non-empty means the correlation machinery itself broke, not that it looked and found nothing. */
     readonly harnessErrors: readonly string[];
 }
-/**
- * The R4 write, reported in `applyRuntimeObservations`'s own six-way
- * vocabulary so a reader can account for every observation without inspecting
- * the store.
- */
+/** The R4 write, in applyRuntimeObservations's own six-way vocabulary so a reader can
+ *  account for every observation without inspecting the store. */
 export interface RuntimeWriteSummary {
     /** Edges the graph already held below R4, now witnessed and raised to R4. */
     readonly promoted: readonly string[];
@@ -204,10 +55,8 @@ export interface RuntimeWriteSummary {
     readonly confirmed: readonly string[];
     /** Observations the graph declined to act on, with the resolver's own reason. */
     readonly refused: readonly string[];
-    /**
-     * Always empty today, and present so that stays visible rather than
-     * unstated. This tool emits no denial — see the header.
-     */
+    /** Always empty today — this tool emits no denial (see header) — kept visible rather
+     *  than unstated. */
     readonly contradictions: readonly string[];
     /** A denial aimed at an edge already at R4. Out of scope by construction; reported, not laundered. */
     readonly staleR4: readonly string[];
@@ -233,26 +82,6 @@ interface DeclaredService {
     readonly readiness: ServiceReadinessSpec;
     readonly attached: boolean;
 }
-/**
- * Every argument this tool takes, read and validated in one place.
- *
- * Extracted from `run` so that `describeAction` can call it too. That is the
- * whole point of the extraction: an `action` tool's first call is the one a
- * caller makes *before* it has a token, and therefore the only cheap place to
- * learn its arguments are wrong. Minting a token, and a paragraph describing
- * an action, for a declaration that cannot possibly run asks a developer to
- * confirm something that was never going to happen — and delivers the real
- * refusal on the second call, after the confirmation.
- *
- * Nothing here touches the filesystem, spawns anything or reads the graph: it
- * is argument reading and nothing else, which is what makes it safe to run at
- * mint time, outside the call budget.
- *
- * Ruled in `documents/decisions-inbox/DEC-387.md`.
- *
- * Exported for its own test: several of the argument rules are conditional and
- * cheaper to assert directly than through a full run.
- */
 export declare function readArguments(args: Record<string, unknown>, repoPath: string): {
     readonly profile: EnvironmentProfile;
     readonly adapterSpec: RuntimeAdapterSpec;
@@ -262,30 +91,18 @@ export declare function readArguments(args: Record<string, unknown>, repoPath: s
     readonly fidelityRaw: number;
     readonly environmentTier: string;
     readonly evidencePath: string;
+    readonly resourceLimits: ResourceLimits | undefined;
+    readonly filesystemPolicy: FilesystemPolicy | undefined;
+    readonly networkPolicy: NetworkPolicy | undefined;
+    readonly sandboxBackend: "bwrap" | "container" | undefined;
 };
-/**
- * The two fields the channel mapping actually reads.
- *
- * Narrower than `Evidence` on purpose: `observe_tests` counts its channels
- * before its evidence has been through `EvidenceStore.write()`, so its items
- * have no `evidenceId` or `executionId` yet. Widening the parameter is how
- * both tools share one implementation of the count; the alternative was a cast
- * at one call site, which buys nothing and hides that the extra fields were
- * never used.
- */
+/** The two fields the channel mapping reads. Narrower than Evidence on purpose: observe_tests
+ *  counts channels before its evidence has an evidenceId/executionId — this lets both tools
+ *  share one implementation rather than a cast that hides the unused fields. */
 type WitnessableEvidence = Pick<Evidence, "eventType" | "source">;
-/**
- * `E` for this run — how many of the six channels it actually saw.
- *
- * The count itself is `@descryy/ir`'s `independentSignalTypes`, deliberately:
- * the clamp to six and the drop of `null` signals are that function's rules,
- * and a second implementation of them here is a second place for the
- * vocabulary to drift. This function's only job is the translation above.
- *
- * Exported for its own test — the mapping decides whether a witnessed answer
- * reads `strongly supported` or `unconfirmed`, which is too load-bearing to be
- * asserted only through a category two layers downstream.
- */
+/** `E` for this run — channels actually seen, via @descryy/ir's independentSignalTypes
+ *  (clamp-to-six and null-drop are that function's rules, not duplicated here). Exported for
+ *  its own test — this mapping decides `strongly supported` vs `unconfirmed`. */
 export declare function witnessedSignalTypes(evidence: readonly WitnessableEvidence[]): SignalTypeCount;
 export declare const observeRuntimeTool: ToolDefinition;
 export {};

package/dist/tools/observe-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observe-runtime.d.ts","sourceRoot":"","sources":["../../src/tools/observe-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2HG;AAKH,OAAO,KAAK,EAAsC,eAAe,EAAE,MAAM,aAAa,CAAC;AASvF,OAAO,KAAK,EACV,QAAQ,EAGR,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,sCAAsC,CAAC;AAO/F,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAA+C,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAI9G;;;;;;;;;;GAUG;AACH,KAAK,oBAAoB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,wFAAwF;AACxF,eAAO,MAAM,8BAA8B,QAAiC,CAAC;AAO7E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,4GAA4G;IAC5G,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,sHAAsH;IACtH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uGAAuG;IACvG,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,oGAAoG;IACpG,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,sGAAsG;IACtG,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gGAAgG;IAChG,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,0DAA0D;IAC1D,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAwPD,uEAAuE;AACvE,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AA2UD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf;IACD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,CAkBA;AA0hBD;;;;;;;;;GASG;AACH,KAAK,mBAAmB,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GAAG,eAAe,CAE9F;AAgHD,eAAO,MAAM,kBAAkB,EAAE,cAwBhC,CAAC"}
+{"version":3,"file":"observe-runtime.d.ts","sourceRoot":"","sources":["../../src/tools/observe-runtime.ts"],"names":[],"mappings":"AAAA;;;;yEAIyE;AAKzE,OAAO,KAAK,EAAsC,eAAe,EAAE,MAAM,aAAa,CAAC;AAcvF,OAAO,KAAK,EACV,QAAQ,EAER,gBAAgB,EAChB,aAAa,EAEb,cAAc,EACd,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,sCAAsC,CAAC;AAO/F,OAAO,EAOL,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAA+C,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAI9G;;wFAEwF;AACxF,KAAK,oBAAoB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,wFAAwF;AACxF,eAAO,MAAM,8BAA8B,QAAiC,CAAC;AAO7E;;2DAE2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,4GAA4G;IAC5G,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,sHAAsH;IACtH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;6FAC6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uGAAuG;IACvG,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,oGAAoG;IACpG,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED;kEACkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;yBACqB;IACrB,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,sGAAsG;IACtG,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gGAAgG;IAChG,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,0DAA0D;IAC1D,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAkSD,uEAAuE;AACvE,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AA8WD,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf;IACD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;CAC5D,CA6CA;AAucD;;gFAEgF;AAChF,KAAK,mBAAmB,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;AAElE;;iFAEiF;AACjF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GAAG,eAAe,CAE9F;AA+ED,eAAO,MAAM,kBAAkB,EAAE,cAwBhC,CAAC"}