@dharma-ai-labs/agent-fabric 0.2.190 → 0.2.191

package/dist/codexSetupPortalIngress.test.js

@@ -0,0 +1,355 @@
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { posix } from 'node:path';
+import { compileFunction } from 'node:vm';
+import { spawn, spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { EventEmitter } from 'node:events';
+import test from 'node:test';
+import ts from 'typescript';
+import { commandExitCode, parseCliOptions } from './index.js';
+import { canonicalize } from '@dharma-ai-labs/agent-fabric-contracts';
+async function declaration(name, dependencies) {
+    const source = await readFile(new URL('../src/index.ts', import.meta.url), 'utf8');
+    const ast = ts.createSourceFile('index.ts', source, ts.ScriptTarget.Latest, true);
+    const nodes = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === name);
+    assert.equal(nodes.length, 1);
+    const output = ts.transpileModule(nodes[0].getText(ast), { compilerOptions: {
+            target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.CommonJS
+        }, reportDiagnostics: true });
+    assert.equal(output.diagnostics?.filter(d => d.category === ts.DiagnosticCategory.Error).length, 0);
+    return compileFunction(output.outputText.replaceAll('import.meta.url', '"file:///synthetic/index.js"')
+        + `\nreturn ${name};`, ['exports', ...Object.keys(dependencies)])({}, ...Object.values(dependencies));
+}
+// Actual CLI composition; only filesystem, remote preparation and provider
+// boundaries are synthetic. No enrolled client or model is used by these tests.
+async function fixture() {
+    const process_ = Object.assign(new EventEmitter(), { platform: 'linux', getuid: () => 1000,
+        cwd: () => '/home/synthetic/source', env: { DHARMA_HOME: '/home/synthetic/device', CODEX_HOME: '/home/synthetic/provider' },
+        stdin: { synthetic: true } });
+    const reference = '11111111-1111-4111-8111-111111111111';
+    const prepared = { initialUserPrompt: 'EXACT_PUBLIC_ORIGINAL', initialUserPromptSha256: 'a'.repeat(64),
+        promptSha256: 'b'.repeat(64), binding: { recipientEmail: 'member@example.test', repositoryRemoteUrl: 'https://github.com/example/repository.git' },
+        intent: { operationId: '22222222-2222-4222-8222-222222222222', setupReference: reference,
+            organizationId: 'org_fixture', recipientMembershipId: '33333333-3333-4333-8333-333333333333',
+            origin: 'https://hq.example', repositoryFingerprint: 'sha256:' + 'c'.repeat(64),
+            scopeDigest: 'sha256:' + 'd'.repeat(64), contractDigest: 'sha256:' + 'e'.repeat(64),
+            policyRevision: 'policy-v1', expiresAt: new Date(Date.now() + 60000).toISOString() } };
+    const counts = { inputs: 0, preparations: 0, accounts: 0, accountCloses: 0, hosts: 0, closes: 0, reserves: 0, resumes: 0 };
+    let changed = false, denyBudget = false, failClose = false, failPreparation = false, foreignConfig = false;
+    let changeOnAccountClose = false, harness = 'codex', sourceMatches = true;
+    let revokeBeforeTurn = false, dispatched = 0;
+    let cancelOnConfigRead = false, resumeSignalListeners;
+    let cancelDuringFinalCurrent = false, finalCurrentArmed = false;
+    let reconcile;
+    let completion = { operationId: prepared.intent.operationId, setupReference: reference,
+        readinessReceiptId: '44444444-4444-4444-8444-444444444444' };
+    let result = { ok: true, stage: 'complete', sharedRepositoryReady: true }, launched, resumed;
+    const info = { isFile: () => true, isDirectory: () => true, isSymbolicLink: () => false,
+        uid: 1000, mode: 0o700, dev: 1n, ino: 2n, size: 3n, mtimeNs: 4n, ctimeNs: 5n };
+    const ingress = await declaration('codexPortalSetup', {
+        process: process_, normalizeHqUrl: (value) => new URL(value).origin,
+        required: (flags, key) => { if (!flags.get(key))
+            throw new Error('missing'); return flags.get(key); },
+        readCodexSetupPublicStdin: async () => { counts.inputs++; return prepared.initialUserPrompt; },
+        requestCodexSetupHostPreparation: async (input) => {
+            counts.preparations++;
+            assert.equal(input.initialUserPrompt, prepared.initialUserPrompt);
+            if (failPreparation || revokeBeforeTurn && counts.preparations > 1)
+                throw new Error('codex_setup_portal_preparation_unavailable');
+            return prepared;
+        }, VERSION: 'synthetic-version', realpath: async (path) => path,
+        dharmaHome: () => process_.env.DHARMA_HOME, fileURLToPath: () => '/synthetic/index.js',
+        lstat: async () => {
+            if (finalCurrentArmed) {
+                finalCurrentArmed = false;
+                process_.emit('SIGINT');
+            }
+            return { ...info, ino: changed ? 99n : 2n };
+        },
+        boundedInteger: (value, fallback, min, max) => {
+            const n = value === undefined ? fallback : Number(value);
+            if (!Number.isInteger(n) || n < min || n > max)
+                throw new Error('invalid');
+            return n;
+        }, isAbsolute: posix.isAbsolute, resolve: posix.resolve, homedir: () => '/home/synthetic',
+        preflightBootstrapWorkspaceIdentity: async () => ({ fingerprint: sourceMatches ? prepared.intent.repositoryFingerprint : 'foreign' }),
+        detectBootstrapProvider: async () => harness,
+        openCodexSetupOwnedConnection: async () => {
+            counts.accounts++;
+            return { accountEmail: 'provider@example.test', close: async () => {
+                    counts.accountCloses++;
+                    if (changeOnAccountClose)
+                        changed = true;
+                } };
+        },
+        openCodexBootstrapFromPortalCommand: async (input) => {
+            launched = input;
+            counts.hosts++;
+            if (!await input.reserve(prepared.intent.operationId, input.maximumProviderCostCents))
+                throw new Error('budget');
+            dispatched++;
+            return { threadId: 'owned_thread', turnId: 'owned_turn', settled: Promise.resolve(), verifiedCompletion: completion,
+                close: async () => { counts.closes++; if (failClose)
+                    throw new Error('PRIVATE_VENDOR_FAILURE'); } };
+        },
+        reserveCodexSetupLaunch: async (input) => { counts.reserves++; return !denyBudget && await input.current(); },
+        readDeviceConfig: async () => {
+            if (cancelOnConfigRead)
+                process_.emit('SIGINT');
+            if (cancelDuringFinalCurrent)
+                finalCurrentArmed = true;
+            return { organizationId: 'org_fixture', hqUrl: 'https://hq.example',
+                setupClaimReference: foreignConfig ? 'foreign' : reference, setupClaimRepositoryFingerprint: prepared.intent.repositoryFingerprint };
+        },
+        UUID_PATTERN: /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/,
+        canonicalize, parseCliOptions, bootstrap: async (flags) => {
+            counts.resumes++;
+            resumed = flags;
+            resumeSignalListeners = ['SIGINT', 'SIGTERM'].map(signal => process_.listenerCount(signal));
+            return reconcile ? reconcile() : result;
+        },
+    });
+    const flags = new Map([['stdin', true], ['portal-url', 'https://hq.example'], ['organization-id', 'org_fixture'],
+        ['setup-reference', reference], ['workspace', '/home/synthetic/source']]);
+    return { ingress, flags, counts, prepared, process: process_,
+        changeRuntime: () => { changed = true; }, denyBudget: () => { denyBudget = true; }, failClose: () => { failClose = true; },
+        failPreparation: () => { failPreparation = true; }, foreignConfig: () => { foreignConfig = true; }, setResult: (value) => { result = value; },
+        changeOnAccountClose: () => { changeOnAccountClose = true; }, wrongHarness: () => { harness = 'unknown'; },
+        foreignSource: () => { sourceMatches = false; },
+        setCompletion: (value) => { completion = value; },
+        revokeBeforeTurn: () => { revokeBeforeTurn = true; }, get dispatched() { return dispatched; },
+        cancelOnConfigRead: () => { cancelOnConfigRead = true; }, get resumeSignalListeners() { return resumeSignalListeners; },
+        cancelDuringFinalCurrent: () => { cancelDuringFinalCurrent = true; },
+        setReconcile: (operation) => { reconcile = operation; },
+        get launched() { return launched; }, get resumed() { return resumed; } };
+}
+// A disposable Node process exercises real OS signals without native clients,
+// credentials, network, filesystem mutations or an actual bootstrap operation.
+if (process.argv.includes('--ingress-signal-fixture')) {
+    const f = await fixture();
+    f.process.once = (event, listener) => { process.once(event, listener); return f.process; };
+    f.process.removeListener = (event, listener) => { process.removeListener(event, listener); return f.process; };
+    f.process.listenerCount = process.listenerCount.bind(process);
+    f.setReconcile(async () => {
+        process.stdout.write('RECONCILIATION_PENDING\n');
+        await new Promise(resolve => setTimeout(resolve, 60000));
+        process.stdout.write('FORBIDDEN_LATER_EFFECT\n');
+        return { ok: true };
+    });
+    await f.ingress(f.flags);
+    throw new Error('signal fixture unexpectedly continued');
+}
+test('public dry-run prepares binding but launches no provider, reserves nothing and does not enroll', async () => {
+    const f = await fixture();
+    f.flags.set('dry-run', true);
+    const result = await f.ingress(f.flags);
+    assert.equal(result.ok, true);
+    assert.equal(result.effects, false);
+    assert.equal(result.enrollmentChanged, false);
+    assert.deepEqual(f.counts, { inputs: 1, preparations: 1, accounts: 0, accountCloses: 0, hosts: 0, closes: 0, reserves: 0, resumes: 0 });
+    assert.equal(f.process.listenerCount('SIGINT'), 0);
+    assert.equal(f.process.listenerCount('SIGTERM'), 0);
+});
+test('missing provider-cost value is rejected before public input or any admission', async () => {
+    const f = await fixture();
+    f.flags.set('maximum-provider-cost-cents', true);
+    await assert.rejects(f.ingress(f.flags), /codex_setup_ingress_options_invalid/);
+    assert.deepEqual(f.counts, { inputs: 0, preparations: 0, accounts: 0, accountCloses: 0, hosts: 0, closes: 0, reserves: 0, resumes: 0 });
+});
+test('cancellation after original host completion prevents grant-free reconciliation', async () => {
+    const f = await fixture();
+    f.cancelOnConfigRead();
+    const result = await f.ingress(f.flags);
+    assert.equal(result.ok, false);
+    assert.equal(f.counts.resumes, 0);
+    assert.equal(f.process.listenerCount('SIGINT'), 0);
+    assert.equal(f.process.listenerCount('SIGTERM'), 0);
+});
+test('cancellation during final async context validation cannot cross into reconciliation', async () => {
+    const f = await fixture();
+    f.cancelDuringFinalCurrent();
+    const result = await f.ingress(f.flags);
+    assert.equal(result.ok, false);
+    assert.equal(f.counts.resumes, 0);
+    assert.equal(f.process.listenerCount('SIGINT'), 0);
+    assert.equal(f.process.listenerCount('SIGTERM'), 0);
+});
+test('post-host reconciliation restores normal SIGINT and SIGTERM handling before write-capable bootstrap', async () => {
+    const f = await fixture();
+    await f.ingress(f.flags);
+    assert.equal(f.counts.resumes, 1);
+    assert.deepEqual(f.resumeSignalListeners, [0, 0]);
+});
+for (const signal of ['SIGINT', 'SIGTERM']) {
+    test(`actual ${signal} terminates pending reconciliation before a later effect`, { skip: process.platform !== 'linux', timeout: 15000 }, async () => {
+        const child = spawn(process.execPath, [fileURLToPath(import.meta.url), '--ingress-signal-fixture'], { stdio: ['ignore', 'pipe', 'pipe'] });
+        let output = '', errors = '', signalled = false, forced = false;
+        const timeout = setTimeout(() => { forced = true; child.kill('SIGKILL'); }, 10000);
+        try {
+            child.stdout.on('data', chunk => {
+                output += String(chunk);
+                if (!signalled && output.includes('RECONCILIATION_PENDING')) {
+                    signalled = true;
+                    child.kill(signal);
+                }
+            });
+            child.stderr.on('data', chunk => { errors += String(chunk); });
+            const ended = await new Promise((resolve, reject) => {
+                child.once('error', reject);
+                child.once('close', (code, endedSignal) => resolve({ code, signal: endedSignal }));
+            });
+            assert.equal(signalled, true, errors);
+            assert.equal(forced, false, 'cancellation was swallowed; owned fixture required forced cleanup');
+            assert.equal(ended.signal, signal);
+            assert.equal(ended.code, null);
+            assert.doesNotMatch(output, /FORBIDDEN_LATER_EFFECT/);
+        }
+        finally {
+            clearTimeout(timeout);
+            if (child.exitCode === null && child.signalCode === null)
+                child.kill('SIGKILL');
+        }
+    });
+}
+test('changed source consent is rechecked at the turn boundary before reservation or model dispatch', async () => {
+    const f = await fixture();
+    f.revokeBeforeTurn();
+    const result = await f.ingress(f.flags);
+    assert.equal(result.ok, false);
+    assert.equal(f.counts.preparations, 2);
+    assert.equal(f.counts.reserves, 0);
+    assert.equal(f.dispatched, 0);
+    assert.equal(f.counts.resumes, 0);
+});
+for (const cause of ['no-tool', 'concurrent-config', 'foreign-operation', 'foreign-reference', 'invalid-receipt']) {
+    test(`original host ${cause} cannot be attributed as completed by matching device config`, async () => {
+        const f = await fixture();
+        const proof = { operationId: f.prepared.intent.operationId, setupReference: f.prepared.intent.setupReference,
+            readinessReceiptId: '44444444-4444-4444-8444-444444444444' };
+        if (cause === 'foreign-operation')
+            proof.operationId = proof.readinessReceiptId;
+        if (cause === 'foreign-reference')
+            proof.setupReference = proof.readinessReceiptId;
+        if (cause === 'invalid-receipt')
+            proof.readinessReceiptId = 'not-a-receipt';
+        f.setCompletion(cause === 'no-tool' || cause === 'concurrent-config' ? undefined : proof);
+        // Even an exact same-reference config written concurrently must not replace
+        // proof from this owned original operation. No config mutation is replayed.
+        const result = await f.ingress(f.flags);
+        assert.equal(result.ok, false);
+        assert.equal(f.counts.resumes, 0);
+        assert.equal(result.code, 'codex_setup_ingress_readiness_unconfirmed');
+    });
+}
+for (const reason of ['runtime-change', 'harness', 'repository']) {
+    test(`ingress requalifies ${reason} before native model dispatch`, async () => {
+        const f = await fixture();
+        if (reason === 'runtime-change')
+            f.changeOnAccountClose();
+        if (reason === 'harness')
+            f.wrongHarness();
+        if (reason === 'repository')
+            f.foreignSource();
+        const result = await f.ingress(f.flags);
+        assert.equal(result.ok, false);
+        assert.equal(result.code, 'codex_setup_ingress_context_unqualified');
+        assert.equal(f.counts.hosts, 0);
+        assert.equal(f.counts.reserves, 0);
+        assert.equal(f.counts.resumes, 0);
+        if (reason === 'runtime-change')
+            assert.equal(f.counts.accountCloses, 1);
+        else
+            assert.equal(f.counts.accounts, 0);
+    });
+}
+test('official ingress passes original prompt and independent binding into owned host, then reconciles only matching consumed setup', async () => {
+    const f = await fixture(), result = await f.ingress(f.flags);
+    assert.equal(result.ok, true);
+    assert.equal(f.launched.initialUserPrompt, f.prepared.initialUserPrompt);
+    assert.equal(f.launched.initialUserPromptBinding, f.prepared.binding);
+    assert.equal(f.launched.expectedAccountEmail, 'provider@example.test');
+    assert.notEqual(f.launched.expectedAccountEmail, f.prepared.binding.recipientEmail);
+    assert.equal(f.counts.accounts, 1);
+    assert.equal(f.counts.accountCloses, 1);
+    assert.equal(f.counts.hosts, 1);
+    assert.equal(f.counts.reserves, 1);
+    assert.equal(f.counts.resumes, 1);
+    assert.equal(f.resumed?.get('resume'), true);
+    assert.equal(f.resumed?.has('setup-reference'), false);
+    assert.equal(f.resumed?.has('grant'), false);
+    assert.equal(f.resumed?.has('setup-recipient-membership-id'), false);
+    assert.equal(result.portalIngress.hardInvoiceCapProven, false);
+    assert.equal(result.portalIngress.actualUsd, null);
+});
+for (const reason of ['preparation', 'homes', 'budget', 'foreign-config', 'close', 'unready']) {
+    test(`official ingress never converts ${reason} into success or retries authority`, async () => {
+        const f = await fixture();
+        if (reason === 'preparation')
+            f.failPreparation();
+        if (reason === 'homes')
+            f.process.env.DHARMA_HOME = '';
+        if (reason === 'budget')
+            f.denyBudget();
+        if (reason === 'foreign-config')
+            f.foreignConfig();
+        if (reason === 'close')
+            f.failClose();
+        if (reason === 'unready')
+            f.setResult({ ok: false, stage: 'signed_package_pending' });
+        const result = await f.ingress(f.flags);
+        assert.equal(result.ok, false);
+        assert.ok(f.counts.hosts <= 1);
+        assert.ok(f.counts.resumes <= 1);
+        if (reason !== 'unready')
+            assert.equal(f.counts.resumes, 0);
+        if (reason === 'preparation' || reason === 'homes')
+            assert.equal(f.counts.accounts, 0);
+        assert.equal(JSON.stringify(result).includes('PRIVATE_VENDOR_FAILURE'), false);
+        assert.equal(f.process.listenerCount('SIGINT'), 0);
+    });
+}
+for (const extra of [['--grant', 'PUBLIC_TEST_NOT_A_GRANT'], ['--maximum-provider-cost-cents']]) {
+    test(`actual CLI bin refuses ${extra[0]} before stdin/network/provider`, () => {
+        const result = spawnSync(process.execPath, [new URL('./bin.js', import.meta.url).pathname.replace(/^\/([A-Za-z]:)/, '$1'),
+            'setup', 'codex', '--stdin', ...extra], { input: '', encoding: 'utf8', timeout: 15000 });
+        assert.equal(result.status, 2);
+        assert.match(result.stderr, /codex_setup_ingress_options_invalid/);
+        assert.equal(result.stdout, '');
+    });
+}
+test('setup ingress exit status requires complete shared readiness, not a terminal native turn', () => {
+    const argv = ['setup', 'codex', '--stdin'];
+    assert.equal(commandExitCode(argv, { ok: false, stage: 'setup_host_unconfirmed' }), 1);
+    assert.equal(commandExitCode(argv, { ok: true, stage: 'pending', sharedRepositoryReady: false }), 1);
+    assert.equal(commandExitCode(argv, { ok: true, stage: 'complete', sharedRepositoryReady: true }), 0);
+    assert.equal(commandExitCode([...argv, '--dry-run'], { ok: true, stage: 'setup_host_plan', effects: false }), 0);
+});
+test('trusted completion composition exposes an original receipt only after independent readiness verification', async () => {
+    let callbacks, verified = false;
+    const start = await declaration('startCodexBootstrapNativeHost', {
+        resolve: posix.resolve, dharmaHome: () => '/home/synthetic/device',
+        runCodexBootstrapHostScope: async (scope, operation) => operation(scope),
+        openBootstrapVault: async () => ({ close: async () => { } }),
+        createCodexBootstrapCompletionOwner: async () => ({ verify: async () => verified }),
+        reportCodexSetupFailure: () => { throw new Error('unexpected fixture error'); },
+        startCodexSetupNativeHost: async (input) => {
+            callbacks = input;
+            await input.openJournal({ original: true });
+            return { threadId: 'original_thread', turnId: 'original_turn', settled: Promise.resolve(), close: async () => { } };
+        },
+    });
+    const host = await start({ intent: { operationId: 'original-operation', setupReference: 'original-reference' } });
+    await host.settled;
+    assert.equal(host.verifiedCompletion, undefined, 'turn completion must not acknowledge a setup tool');
+    assert.equal(await callbacks.verifyReadiness('receipt', { operationId: 'original-operation', setupReference: 'original-reference' }, 'digest'), false);
+    assert.equal(host.verifiedCompletion, undefined);
+    verified = true;
+    assert.equal(await callbacks.verifyReadiness('receipt', { operationId: 'original-operation', setupReference: 'original-reference' }, 'digest'), true);
+    assert.deepEqual(host.verifiedCompletion, { operationId: 'original-operation', setupReference: 'original-reference', readinessReceiptId: 'receipt' });
+    assert.equal(Object.isFrozen(host.verifiedCompletion), true);
+    verified = false;
+    await callbacks.verifyReadiness('receipt', { operationId: 'original-operation', setupReference: 'original-reference' }, 'digest');
+    assert.equal(host.verifiedCompletion, undefined, 'failed revalidation must withdraw an earlier acknowledgement');
+});
+//# sourceMappingURL=codexSetupPortalIngress.test.js.map

package/dist/codexSetupPortalIngress.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalIngress.test.js","sourceRoot":"","sources":["../src/codexSetupPortalIngress.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,QAAQ,EAAC,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAC,KAAK,EAAC,MAAM,WAAW,CAAC;AAChC,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,EAAC,KAAK,EAAE,SAAS,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAC,eAAe,EAAE,eAAe,EAAC,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAC,YAAY,EAAC,MAAM,wCAAwC,CAAC;AAEpE,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,YAAqC;IAC5E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;IACxG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,eAAe,EAAE;YAC1E,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ;SAAC,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpG,OAAO,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;UAClG,YAAY,IAAI,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAqC,CAAC;AAC9I,CAAC;AAED,2EAA2E;AAC3E,gFAAgF;AAChF,KAAK,UAAU,OAAO;IACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;QACvF,GAAG,EAAE,GAAG,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE,EAAC,WAAW,EAAE,wBAAwB,EAAE,UAAU,EAAE,0BAA0B,EAAC;QACzH,KAAK,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,EAAC,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,sCAAsC,CAAC;IACzD,MAAM,QAAQ,GAAG,EAAC,iBAAiB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnG,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAC,cAAc,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,2CAA2C,EAAC;QAChJ,MAAM,EAAE,EAAC,WAAW,EAAE,sCAAsC,EAAE,cAAc,EAAE,SAAS;YACrF,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,sCAAsC;YAC5F,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnF,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;IACzF,MAAM,MAAM,GAAG,EAAC,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAC,CAAC;IACzH,IAAI,OAAO,GAAG,KAAK,EAAE,UAAU,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK,EAAE,aAAa,GAAG,KAAK,CAAC;IAC3G,IAAI,oBAAoB,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC1E,IAAI,gBAAgB,GAAG,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC;IAC7C,IAAI,kBAAkB,GAAG,KAAK,EAAE,qBAA2C,CAAC;IAC5E,IAAI,wBAAwB,GAAG,KAAK,EAAE,iBAAiB,GAAG,KAAK,CAAC;IAChE,IAAI,SAA+C,CAAC;IACpD,IAAI,UAAU,GAAQ,EAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS;QACxF,kBAAkB,EAAE,sCAAsC,EAAC,CAAC;IAC9D,IAAI,MAAM,GAAQ,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,qBAAqB,EAAE,IAAI,EAAC,EAAE,QAAa,EAAE,OAAqC,CAAC;IACnI,MAAM,IAAI,GAAG,EAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK;QACpF,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAC,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,kBAAkB,EAAE;QACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM;QAC3E,QAAQ,EAAE,CAAC,KAAuB,EAAE,GAAW,EAAE,EAAE,GAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC;QAC7H,yBAAyB,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,QAAQ,CAAC,iBAAiB,CAAC,CAAA,CAAC;QAC5F,gCAAgC,EAAE,KAAK,EAAE,KAAU,EAAE,EAAE;YACrD,MAAM,CAAC,YAAY,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACzF,IAAI,eAAe,IAAI,gBAAgB,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAAC,OAAO,QAAQ,CAAC;QACrJ,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI;QACvE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,qBAAqB;QACtF,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,iBAAiB,EAAE,CAAC;gBAAA,iBAAiB,GAAG,KAAK,CAAC;gBAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAA,CAAC;YAC5E,OAAO,EAAC,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAC,CAAC;QAC5C,CAAC;QACD,cAAc,EAAE,CAAC,KAAU,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE;YACzE,MAAM,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QACjJ,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB;QACzF,mCAAmC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,EAAC,CAAC;QACnI,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;QAC5C,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO,EAAC,YAAY,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;oBAC9H,MAAM,CAAC,aAAa,EAAE,CAAC;oBAAC,IAAI,oBAAoB;wBAAE,OAAO,GAAG,IAAI,CAAC;gBACnE,CAAC,EAAC,CAAC;QAAA,CAAC;QACJ,mCAAmC,EAAE,KAAK,EAAE,KAAU,EAAE,EAAE;YACxD,QAAQ,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,wBAAwB,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjH,UAAU,EAAE,CAAC;YACb,OAAO,EAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,kBAAkB,EAAE,UAAU;gBAChH,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;QACrG,CAAC;QACD,uBAAuB,EAAE,KAAK,EAAE,KAAU,EAAE,EAAE,GAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC;QAChH,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,IAAI,kBAAkB;gBAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,wBAAwB;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YACvD,OAAO,EAAC,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,oBAAoB;gBAChE,mBAAmB,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,+BAA+B,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAC,CAAC;QACxI,CAAC;QACD,YAAY,EAAE,2EAA2E;QACzF,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,KAAuB,EAAE,EAAE;YAC1E,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,KAAK,CAAC;YAClC,qBAAqB,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5F,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1C,CAAC;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAc,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,CAAC,iBAAiB,EAAE,aAAa,CAAC;QAC3H,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ;QACzD,aAAa,EAAE,GAAG,EAAE,GAAE,OAAO,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAE,UAAU,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAE,SAAS,GAAG,IAAI,CAAC,CAAA,CAAC;QACpH,eAAe,EAAE,GAAG,EAAE,GAAE,eAAe,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,GAAE,aAAa,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,SAAS,EAAE,CAAC,KAAU,EAAE,EAAE,GAAE,MAAM,GAAG,KAAK,CAAC,CAAA,CAAC;QAC5I,oBAAoB,EAAE,GAAG,EAAE,GAAE,oBAAoB,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,GAAE,OAAO,GAAG,SAAS,CAAC,CAAA,CAAC;QACtG,aAAa,EAAE,GAAG,EAAE,GAAE,aAAa,GAAG,KAAK,CAAC,CAAA,CAAC;QAC7C,aAAa,EAAE,CAAC,KAAU,EAAE,EAAE,GAAE,UAAU,GAAG,KAAK,CAAC,CAAA,CAAC;QACpD,gBAAgB,EAAE,GAAG,EAAE,GAAE,gBAAgB,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,IAAI,UAAU,KAAI,OAAO,UAAU,CAAC,CAAA,CAAC;QACzF,kBAAkB,EAAE,GAAG,EAAE,GAAE,kBAAkB,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,IAAI,qBAAqB,KAAI,OAAO,qBAAqB,CAAC,CAAA,CAAC;QACnH,wBAAwB,EAAE,GAAG,EAAE,GAAE,wBAAwB,GAAG,IAAI,CAAC,CAAA,CAAC;QAClE,YAAY,EAAE,CAAC,SAAiC,EAAE,EAAE,GAAE,SAAS,GAAG,SAAS,CAAC,CAAA,CAAC;QAC7E,IAAI,QAAQ,KAAI,OAAO,QAAQ,CAAC,CAAA,CAAC,EAAE,IAAI,OAAO,KAAI,OAAO,OAAO,CAAC,CAAA,CAAC,EAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAE,OAAO,CAAC,IAAI,CAAC,KAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;IACnG,CAAC,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAE,OAAO,CAAC,cAAc,CAAC,KAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;IACvH,CAAC,CAAC,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC3D,CAAC;AACD,IAAI,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;IAChH,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAClH,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAC,CAAC,CAAC;IACtI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAChF,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAC,CAAC,CAAC;AACxI,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;IACrG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;IACrH,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,IAAI,CAAC,UAAU,MAAM,0DAA0D,EAAE,EAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,OAAO,EAAE,KAAK,EAAC,EAAE,KAAK,IAAI,EAAE;QAChJ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,EAChG,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAC,CAAC,CAAC;QACvC,IAAI,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAChE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,GAAE,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC9B,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;oBAAA,SAAS,GAAG,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAA,CAAC;YACtG,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAE,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAuD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC;YAChH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,mEAAmE,CAAC,CAAC;YACjG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YAAA,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,iBAAiB,CAAU,EAAE,CAAC;IAC3H,IAAI,CAAC,iBAAiB,KAAK,8DAA8D,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,EAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc;YACzG,kBAAkB,EAAE,sCAAsC,EAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,mBAAmB;YAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAChF,IAAI,KAAK,KAAK,mBAAmB;YAAE,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnF,IAAI,KAAK,KAAK,iBAAiB;YAAE,KAAK,CAAC,kBAAkB,GAAG,eAAe,CAAC;QAC5E,CAAC,CAAC,aAAa,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1F,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,MAAM,MAAM,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,YAAY,CAAU,EAAE,CAAC;IAC1E,IAAI,CAAC,uBAAuB,MAAM,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAM,KAAK,gBAAgB;YAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC1D,IAAI,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,YAAY,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,YAAY;YAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;QACrG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvG,IAAI,MAAM,KAAK,gBAAgB;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;;YACpE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,+HAA+H,EAAE,KAAK,IAAI,EAAE;IAC/I,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACxG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,+BAA+B,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;IACvG,IAAI,CAAC,mCAAmC,MAAM,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAM,KAAK,aAAa;YAAE,CAAC,CAAC,eAAe,EAAE,CAAC;QAClD,IAAI,MAAM,KAAK,OAAO;YAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,QAAQ;YAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,gBAAgB;YAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,OAAO;YAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,SAAS,CAAC,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC;IAChG,IAAI,CAAC,0BAA0B,KAAK,CAAC,CAAC,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC;YACvH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,EAAE,EAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;QACnG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACpG,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,qBAAqB,EAAE,IAAI,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC,EAAE,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;IAC1H,IAAI,SAAc,EAAE,QAAQ,GAAG,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,+BAA+B,EAAE;QAC/D,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,wBAAwB;QAClE,0BAA0B,EAAE,KAAK,EAAE,KAAU,EAAE,SAAc,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;QAClF,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAC,CAAC;QACzD,mCAAmC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAC,CAAC;QACjF,uBAAuB,EAAE,GAAG,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA,CAAC;QAC7E,yBAAyB,EAAE,KAAK,EAAE,KAAU,EAAE,EAAE;YAC9C,SAAS,GAAG,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,WAAW,CAAC,EAAC,QAAQ,EAAE,IAAI,EAAC,CAAC,CAAC;YAC7D,OAAO,EAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAC,CAAC;QACnH,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAC,MAAM,EAAE,EAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAC,EAAC,CAAC,CAAC;IAC9G,MAAM,IAAI,CAAC,OAAO,CAAC;IACnB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,EAAE,mDAAmD,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,EAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAC,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACrJ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IACjD,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,EAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IACpJ,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,SAAS,EAAC,CAAC,CAAC;IACpJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7D,QAAQ,GAAG,KAAK,CAAC;IACjB,MAAM,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,EAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAC,EAAE,QAAQ,CAAC,CAAC;IAChI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,EAAE,8DAA8D,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC"}

package/dist/codexSetupPortalPreparation.d.ts

@@ -0,0 +1,28 @@
+import type { CodexSetupIntent } from './codexSetupAdmission.js';
+/** A public HTTPS receipt is presentation binding, not a host execution lease. */
+export declare function requestCodexSetupHostPreparation(input: {
+    origin: string;
+    organizationId: string;
+    setupReference: string;
+    cliVersion: string;
+    initialUserPrompt: unknown;
+    signal: AbortSignal;
+    fetcher?: typeof fetch;
+    now?: () => number;
+    sleep?: (milliseconds: number, signal: AbortSignal) => Promise<void>;
+}): Promise<Readonly<{
+    effects: false;
+    grantRedeemed: false;
+    initialUserPrompt: string;
+    initialUserPromptSha256: string;
+    promptSha256: string;
+    portalContextSha256: string;
+    binding: Readonly<{
+        recipientEmail: string;
+        repositoryRemoteUrl: string;
+    }>;
+    intent: Readonly<CodexSetupIntent>;
+    requiresHostExecutionAdmission: true;
+    requiresRecipientApproval: true;
+}>>;
+//# sourceMappingURL=codexSetupPortalPreparation.d.ts.map

package/dist/codexSetupPortalPreparation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalPreparation.d.ts","sourceRoot":"","sources":["../src/codexSetupPortalPreparation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,0BAA0B,CAAC;AAa/D,kFAAkF;AAClF,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IACnF,iBAAiB,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5F,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE;;;;;;;;;;;;;;IAqEA"}

package/dist/codexSetupPortalPreparation.js

@@ -0,0 +1,101 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { resolve } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { canonicalize, validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import { captureCodexSetupPromptBinding, captureCodexSetupUserPrompt, capturePublicCodexSetupPrompt } from './codexSetupUserPrompt.js';
+const fail = () => { throw new Error('codex_setup_portal_preparation_unavailable'); };
+/** A public HTTPS receipt is presentation binding, not a host execution lease. */
+export async function requestCodexSetupHostPreparation(input) {
+    // Capture before awaiting: no secret-bearing prose may reach the endpoint.
+    const initialUserPrompt = capturePublicCodexSetupPrompt(input.initialUserPrompt);
+    const pins = [...initialUserPrompt.replace(/\r\n/g, '\n').matchAll(/^Preparation context SHA256: ([a-f0-9]{64})\.$/gm)];
+    if (pins.length !== 1)
+        return fail();
+    const originalContextPin = pins[0][1];
+    const { origin, organizationId, setupReference, cliVersion } = input;
+    const initialUserPromptSha256 = createHash('sha256').update(initialUserPrompt, 'utf8').digest('hex');
+    const promptSha256 = createHash('sha256').update(initialUserPrompt.replace(/\r\n/g, '\n'), 'utf8').digest('hex');
+    const now = input.now ?? Date.now;
+    const signal = AbortSignal.any([input.signal, AbortSignal.timeout(15000)]);
+    let reader;
+    const cancel = () => { void reader?.cancel().catch(() => { }); };
+    try {
+        const url = new URL(origin);
+        if (url.origin !== origin || url.protocol !== 'https:' || url.username || url.password
+            || !/^org_[A-Za-z0-9]+$/.test(organizationId)
+            || !/^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(setupReference)
+            || !/^\d+\.\d+\.\d+$/.test(cliVersion) || signal.aborted)
+            return fail();
+        const response = await (input.fetcher ?? fetch)(origin + '/api/v1/agent-fabric/bootstrap/setup-claim', {
+            method: 'POST', redirect: 'error', credentials: 'omit', signal,
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ action: 'prepare_host', organizationId, setupReference, promptSha256 }),
+        });
+        if (signal.aborted || response.status !== 200 || !response.body
+            || !response.headers.get('content-type')?.toLowerCase().startsWith('application/json')
+            || Number(response.headers.get('content-length')) > 65536)
+            return fail();
+        reader = response.body.getReader();
+        signal.addEventListener('abort', cancel, { once: true });
+        const chunks = [];
+        let size = 0;
+        while (true) {
+            if (signal.aborted)
+                return fail();
+            const part = await reader.read();
+            if (part.done)
+                break;
+            size += part.value.byteLength;
+            if (size > 65536) {
+                await reader.cancel();
+                return fail();
+            }
+            chunks.push(part.value);
+        }
+        const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        const checked = await validateContract(resolve(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/setup-host-preparation/v1', value);
+        if (!checked.ok || signal.aborted)
+            return fail();
+        const prepared = value, at = now();
+        const contextSha256 = createHash('sha256').update('dharma.setup-host-context/v1\0').update(canonicalize({
+            cliVersion: prepared.cliVersion, expiresAt: prepared.expiresAt, binding: prepared.binding, context: prepared.context
+        })).digest('hex');
+        if (contextSha256 !== originalContextPin || prepared.integrity.contextSha256 !== originalContextPin)
+            return fail();
+        const issued = Date.parse(prepared.preparedAt), expires = Date.parse(prepared.expiresAt);
+        if (prepared.context.origin !== origin || prepared.context.organizationId !== organizationId
+            || prepared.context.setupReference !== setupReference || prepared.cliVersion !== cliVersion
+            || prepared.promptSha256 !== promptSha256 || !Number.isFinite(at)
+            || new Date(issued).toISOString() !== prepared.preparedAt
+            || new Date(expires).toISOString() !== prepared.expiresAt
+            || issued - at > 5000 || expires <= at || expires <= issued || expires - issued > 900000)
+            return fail();
+        const binding = captureCodexSetupPromptBinding(prepared.binding);
+        const intent = Object.freeze({
+            schema: 'dharma.codex-setup-intent/v1', ...prepared.context,
+            operationId: randomUUID(), hostContextId: randomUUID(),
+            issuedAt: prepared.preparedAt, expiresAt: prepared.expiresAt,
+        });
+        if (captureCodexSetupUserPrompt(initialUserPrompt, intent, binding) !== initialUserPrompt)
+            return fail();
+        // Match the claim client's bounded skew wait; never change the local clock
+        // or admit effects before the response's strict issued-at boundary.
+        if (issued > at)
+            await (input.sleep ?? ((ms, ownedSignal) => delay(ms, undefined, { signal: ownedSignal })))(issued - at, signal);
+        const currentTime = now();
+        if (signal.aborted || !Number.isFinite(currentTime) || currentTime < issued || currentTime >= expires)
+            return fail();
+        // No provider, key store, setup journal or enrollment operation is entered.
+        return Object.freeze({ effects: false, grantRedeemed: false,
+            initialUserPrompt, initialUserPromptSha256, promptSha256, portalContextSha256: originalContextPin, binding, intent,
+            requiresHostExecutionAdmission: true, requiresRecipientApproval: true });
+    }
+    catch {
+        return fail();
+    }
+    finally {
+        signal.removeEventListener('abort', cancel);
+        reader?.releaseLock();
+    }
+}
+//# sourceMappingURL=codexSetupPortalPreparation.js.map

package/dist/codexSetupPortalPreparation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalPreparation.js","sourceRoot":"","sources":["../src/codexSetupPortalPreparation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,UAAU,EAAC,MAAM,aAAa,CAAC;AACnD,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,UAAU,IAAI,KAAK,EAAC,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAC,YAAY,EAAE,gBAAgB,EAAC,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAC,8BAA8B,EAAE,2BAA2B,EAAE,6BAA6B,EAAC,MAAM,2BAA2B,CAAC;AAYrI,MAAM,IAAI,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAA,CAAC,CAAC;AAE3F,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAItD;IACC,2EAA2E;IAC3E,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC,CAAC;IACxH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC;IACxC,MAAM,EAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAC,GAAG,KAAK,CAAC;IACnE,MAAM,uBAAuB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrG,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,MAA2D,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,EAAE,GAAE,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;eACjF,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC;eAC1C,CAAC,2EAA2E,CAAC,IAAI,CAAC,cAAc,CAAC;eACjG,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,4CAA4C,EAAE;YACrG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM;YAC9D,OAAO,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAC,CAAC;SAC7F,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI;eAC1D,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;eACnF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,KAAK;YAAE,OAAO,IAAI,EAAE,CAAC;QAC3E,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAiB,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACvD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAAA,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;YAAA,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAC5E,wDAAwD,EAAE,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,KAAoB,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACtG,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;SAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxI,IAAI,aAAa,KAAK,kBAAkB,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,KAAK,kBAAkB;YAAE,OAAO,IAAI,EAAE,CAAC;QACnH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc;eACvF,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU;eACxF,QAAQ,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;eAC9D,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,UAAU;eACtD,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,SAAS;eACtD,MAAM,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,GAAG,MAAM,GAAG,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1G,MAAM,OAAO,GAAG,8BAA8B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,MAAM,GAA+B,MAAM,CAAC,MAAM,CAAC;YACvD,MAAM,EAAE,8BAA8B,EAAE,GAAG,QAAQ,CAAC,OAAO;YAC3D,WAAW,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;YACtD,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,IAAI,2BAA2B,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,iBAAiB;YAAE,OAAO,IAAI,EAAE,CAAC;QACzG,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,MAAM,GAAG,EAAE;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,EAAC,MAAM,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAChI,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,MAAM,IAAI,WAAW,IAAI,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QACrH,4EAA4E;QAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,KAAc,EAAE,aAAa,EAAE,KAAc;YAC1E,iBAAiB,EAAE,uBAAuB,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM;YAClH,8BAA8B,EAAE,IAAa,EAAE,yBAAyB,EAAE,IAAa,EAAC,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QAAA,OAAO,IAAI,EAAE,CAAC;IAAA,CAAC;YAChB,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAAA,CAAC;AAC/E,CAAC"}

package/dist/codexSetupPortalPreparation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexSetupPortalPreparation.test.d.ts.map

package/dist/codexSetupPortalPreparation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalPreparation.test.d.ts","sourceRoot":"","sources":["../src/codexSetupPortalPreparation.test.ts"],"names":[],"mappings":""}