@dharma-ai-labs/agent-fabric 0.2.80 → 0.2.82

package/dist/demoEnrollment.d.ts

@@ -0,0 +1,41 @@
+import { type SecureSecretStore } from '@dharma-ai-labs/agent-fabric-relay-client';
+export interface DemoDeviceConnectOptions {
+    hqUrl: string;
+    organizationId: string;
+    repositoryId: string;
+    normalizedRepository: string;
+    installationId: string;
+    grant: string;
+    deviceName: string;
+    platform: 'windows' | 'wsl' | 'macos' | 'linux';
+    stateRoot: string;
+    maximumWaitMs?: number;
+}
+export type DemoDeviceScope = Pick<DemoDeviceConnectOptions, 'hqUrl' | 'organizationId' | 'repositoryId' | 'normalizedRepository' | 'installationId' | 'stateRoot'>;
+export interface DemoDeviceConnectDependencies {
+    store?: SecureSecretStore;
+    fetcher?: typeof fetch;
+    sleep?: (milliseconds: number) => Promise<void>;
+    onApprovalRequired?: (url: string) => Promise<void>;
+}
+export declare function verifyDemoDevice(input: DemoDeviceScope, deps?: Pick<DemoDeviceConnectDependencies, 'store' | 'fetcher'>): Promise<{
+    ok: true;
+    stage: "device_signed_ready";
+    organizationId: string;
+    repositoryId: string;
+    normalizedRepository: string;
+    deviceId: string;
+    configPath: string;
+    repositoryPackageState: "not_connected";
+}>;
+export declare function connectDemoDevice(input: DemoDeviceConnectOptions, deps?: DemoDeviceConnectDependencies): Promise<{
+    ok: true;
+    stage: "device_signed_ready";
+    organizationId: string;
+    repositoryId: string;
+    normalizedRepository: string;
+    deviceId: string;
+    configPath: string;
+    repositoryPackageState: "not_connected";
+}>;
+//# sourceMappingURL=demoEnrollment.d.ts.map

package/dist/demoEnrollment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoEnrollment.d.ts","sourceRoot":"","sources":["../src/demoEnrollment.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8C,KAAK,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAM/H,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,EACzD,OAAO,GAAG,gBAAgB,GAAG,cAAc,GAAG,sBAAsB,GAAG,gBAAgB,GAAG,WAAW,CAAC,CAAC;AAgBzG,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAkGD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAC3D,IAAI,GAAE,IAAI,CAAC,6BAA6B,EAAE,OAAO,GAAG,SAAS,CAAM;;;;;;;;;GA8EpE;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,EACrE,IAAI,GAAE,6BAAkC;;;;;;;;;GAuDzC"}

package/dist/demoEnrollment.js

@@ -0,0 +1,247 @@
+import { createHash, randomBytes, randomUUID, sign } from 'node:crypto';
+import { chmod, mkdir, readFile, rename, unlink, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { loadOrCreateDeviceIdentity, normalizeHqUrl } from '@dharma-ai-labs/agent-fabric-relay-client';
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const CODE = /^[A-Za-z0-9_-]{43}$/;
+const BROWSER_CODE = /^[0-9A-F]{20}$/;
+function assertInput(input) {
+    if (!/^org_[A-Za-z0-9]+$/.test(input.organizationId)
+        || !UUID.test(input.repositoryId) || !UUID.test(input.installationId)
+        || !CODE.test(input.grant) || input.deviceName.trim().length < 2
+        || input.deviceName.length > 120 || !input.normalizedRepository
+        || !['windows', 'wsl', 'macos', 'linux'].includes(input.platform)) {
+        throw new Error('Demo device setup context is invalid. Copy a fresh repository-specific prompt.');
+    }
+}
+class DemoDeviceApiError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+    }
+}
+function apiError(body, status) {
+    const item = body && typeof body === 'object' ? body : {};
+    const nested = item.error && typeof item.error === 'object' && !Array.isArray(item.error)
+        ? item.error : null;
+    const code = typeof nested?.code === 'string' ? nested.code
+        : typeof item.error === 'string' ? item.error : `http_${status}`;
+    const message = typeof nested?.message === 'string' ? nested.message
+        : typeof item.message === 'string' ? item.message : 'Demo device request failed.';
+    return new DemoDeviceApiError(code, message);
+}
+async function readJsonResponse(response) {
+    const body = await response.json().catch(() => null);
+    if (!response.ok)
+        throw apiError(body, response.status);
+    if (!body || typeof body !== 'object' || Array.isArray(body)
+        || body.ok !== true) {
+        throw new Error('Demo device response is not a JSON object.');
+    }
+    return body;
+}
+function scopePath(input, origin) {
+    const scope = createHash('sha256').update(`${origin}\0${input.organizationId}\0${input.repositoryId}`)
+        .digest('hex').slice(0, 32);
+    return resolve(input.stateRoot, 'demo', scope, 'device.json');
+}
+async function writePrivateJson(path, value) {
+    const directory = dirname(path);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(value)}\n`, { mode: 0o600, flag: 'wx' });
+    await rename(temporary, path);
+    if (process.platform !== 'win32')
+        await chmod(path, 0o600);
+}
+function approvalUri(value, origin, input) {
+    if (typeof value !== 'string')
+        throw new Error('Demo device verification origin is missing.');
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error('Demo device verification origin is invalid.');
+    }
+    if (url.origin !== origin || url.pathname !== '/demo/fabric/approve'
+        || url.username || url.password || url.hash || url.searchParams.size !== 3
+        || url.searchParams.getAll('orgId').length !== 1
+        || url.searchParams.getAll('repositoryId').length !== 1
+        || url.searchParams.getAll('code').length !== 1
+        || url.searchParams.get('orgId') !== input.organizationId
+        || url.searchParams.get('repositoryId') !== input.repositoryId
+        || !BROWSER_CODE.test(url.searchParams.get('code') || '')) {
+        throw new Error('Demo device verification origin or repository scope is invalid.');
+    }
+    return url.toString();
+}
+function signedStatusRequest(origin, input, deviceId, privateJwk, sequence) {
+    const url = new URL(`/api/demo/fabric/repositories/${input.repositoryId}/status`, origin);
+    url.searchParams.set('orgId', input.organizationId);
+    const sessionId = randomUUID();
+    const messageId = randomUUID();
+    const timestamp = new Date().toISOString();
+    const nonce = randomBytes(24).toString('base64url');
+    const payload = Buffer.from(JSON.stringify({
+        bodyHash: `sha256:${createHash('sha256').update('').digest('hex')}`,
+        deviceId, messageId, method: 'GET', nonce,
+        organizationId: input.organizationId,
+        pathname: `${url.pathname}${url.search}`, sequence, sessionId, timestamp,
+    }));
+    const signature = sign(null, payload, { key: privateJwk, format: 'jwk' }).toString('base64url');
+    return { url: url.toString(), deviceId, sequence, createdAt: timestamp, headers: {
+            'x-dharma-device-id': deviceId,
+            'x-dharma-session-id': sessionId,
+            'x-dharma-message-id': messageId,
+            'x-dharma-timestamp': timestamp,
+            'x-dharma-nonce': nonce,
+            'x-dharma-sequence': String(sequence),
+            'x-dharma-signature': signature,
+        } };
+}
+export async function verifyDemoDevice(input, deps = {}) {
+    const origin = normalizeHqUrl(input.hqUrl);
+    const configPath = scopePath(input, origin);
+    const pendingPath = `${configPath}.pending-status.json`;
+    const config = JSON.parse(await readFile(configPath, 'utf8'));
+    if (config.schema !== 'dharma.demo-device/v1' || config.hqUrl !== origin
+        || config.organizationId !== input.organizationId || config.repositoryId !== input.repositoryId
+        || config.normalizedRepository !== input.normalizedRepository
+        || config.installationId !== input.installationId || !UUID.test(config.deviceId)
+        || !Number.isSafeInteger(config.nextSequence) || config.nextSequence < 1) {
+        throw new Error('Demo device config does not match the requested repository and installation.');
+    }
+    const identity = await loadOrCreateDeviceIdentity({ hqUrl: origin,
+        organizationId: `${input.organizationId}:${input.repositoryId}`,
+        installationId: input.installationId, store: deps.store });
+    if (config.publicKeyEd25519 !== identity.publicKeyEd25519) {
+        throw new Error('Demo device key does not match its protected local identity.');
+    }
+    let hasPending = false;
+    let pending = signedStatusRequest(origin, input, config.deviceId, identity.privateJwk, config.nextSequence);
+    try {
+        const existing = JSON.parse(await readFile(pendingPath, 'utf8'));
+        if (existing.deviceId !== config.deviceId || existing.url !== pending.url
+            || !Number.isSafeInteger(existing.sequence) || existing.sequence < config.nextSequence
+            || !Number.isFinite(Date.parse(existing.createdAt))) {
+            throw new Error('Pending Demo device status does not match this identity.');
+        }
+        hasPending = true;
+        pending = Date.now() - Date.parse(existing.createdAt) < 4 * 60_000
+            ? existing
+            : signedStatusRequest(origin, input, config.deviceId, identity.privateJwk, existing.sequence);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT') {
+            throw new Error('Pending Demo device status is invalid; preserve it for recovery.', { cause: error });
+        }
+    }
+    const requestStatus = async () => {
+        await writePrivateJson(pendingPath, pending);
+        return readJsonResponse(await (deps.fetcher || fetch)(pending.url, {
+            method: 'GET', headers: pending.headers,
+        }));
+    };
+    let status = null;
+    try {
+        status = await requestStatus();
+    }
+    catch (error) {
+        if (!hasPending || !(error instanceof DemoDeviceApiError)
+            || error.code !== 'demo_fabric_sequence_out_of_order')
+            throw error;
+        const candidates = [pending.sequence - 1, pending.sequence + 1]
+            .filter((sequence) => sequence >= config.nextSequence);
+        let recovered = false;
+        for (const sequence of candidates) {
+            pending = signedStatusRequest(origin, input, config.deviceId, identity.privateJwk, sequence);
+            try {
+                status = await requestStatus();
+                recovered = true;
+                break;
+            }
+            catch (candidateError) {
+                if (!(candidateError instanceof DemoDeviceApiError)
+                    || candidateError.code !== 'demo_fabric_sequence_out_of_order')
+                    throw candidateError;
+            }
+        }
+        if (!recovered)
+            throw error;
+    }
+    if (!status || status.organizationId !== input.organizationId || status.repositoryId !== input.repositoryId
+        || status.deviceId !== config.deviceId || status.normalizedRepository !== input.normalizedRepository) {
+        throw new Error('Signed Demo status did not confirm the exact repository and device.');
+    }
+    config.signedReady = true;
+    config.nextSequence = pending.sequence + 1;
+    await writePrivateJson(configPath, config);
+    await unlink(pendingPath).catch(() => { });
+    return { ok: true, stage: 'device_signed_ready',
+        organizationId: input.organizationId, repositoryId: input.repositoryId,
+        normalizedRepository: input.normalizedRepository, deviceId: config.deviceId,
+        configPath, repositoryPackageState: 'not_connected' };
+}
+export async function connectDemoDevice(input, deps = {}) {
+    assertInput(input);
+    const origin = normalizeHqUrl(input.hqUrl);
+    const fetcher = deps.fetcher || fetch;
+    const sleep = deps.sleep || ((milliseconds) => new Promise((accept) => setTimeout(accept, milliseconds)));
+    const identity = await loadOrCreateDeviceIdentity({ hqUrl: origin,
+        organizationId: `${input.organizationId}:${input.repositoryId}`,
+        installationId: input.installationId, store: deps.store });
+    const started = await readJsonResponse(await fetcher(`${origin}/api/demo/fabric/enrollments`, {
+        method: 'POST', headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ orgId: input.organizationId, repositoryId: input.repositoryId,
+            grant: input.grant, name: input.deviceName.trim(), platform: input.platform,
+            publicKeyEd25519: identity.publicKeyEd25519 }),
+    }));
+    if (started.organizationId !== input.organizationId || started.repositoryId !== input.repositoryId
+        || !CODE.test(String(started.deviceCode || '')) || !Number.isFinite(Date.parse(String(started.expiresAt || '')))) {
+        throw new Error('Demo enrollment response does not match the requested repository.');
+    }
+    const verificationUri = approvalUri(started.verificationUri, origin, input);
+    if (started.status === 'pending')
+        await deps.onApprovalRequired?.(verificationUri);
+    const deadline = Math.min(Date.parse(String(started.expiresAt)), Date.now() + Math.min(Math.max(input.maximumWaitMs ?? 10 * 60_000, 1_000), 15 * 60_000));
+    let deviceId = '';
+    while (Date.now() < deadline) {
+        const polled = await readJsonResponse(await fetcher(`${origin}/api/demo/fabric/enrollments/poll`, {
+            method: 'POST', headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ orgId: input.organizationId, deviceCode: started.deviceCode }),
+        }));
+        if (polled.status === 'approved') {
+            if (polled.repositoryId !== input.repositoryId || !UUID.test(String(polled.deviceId || ''))) {
+                throw new Error('Approved Demo device does not match the requested repository.');
+            }
+            deviceId = String(polled.deviceId);
+            break;
+        }
+        if (polled.status !== 'pending')
+            throw new Error(`Demo device approval ended: ${String(polled.status || 'unknown')}.`);
+        await sleep(Math.min(2_000, Math.max(0, deadline - Date.now())));
+    }
+    if (!deviceId)
+        throw new Error('Demo device approval timed out. Resume from the same prompt while its grant is valid.');
+    const configPath = scopePath(input, origin);
+    try {
+        const existing = JSON.parse(await readFile(configPath, 'utf8'));
+        if (existing.deviceId !== deviceId || existing.publicKeyEd25519 !== identity.publicKeyEd25519) {
+            throw new Error('Existing Demo device belongs to another approved identity.');
+        }
+        return verifyDemoDevice(input, deps);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    await writePrivateJson(configPath, { schema: 'dharma.demo-device/v1',
+        hqUrl: origin, organizationId: input.organizationId, repositoryId: input.repositoryId,
+        normalizedRepository: input.normalizedRepository, installationId: input.installationId,
+        deviceId, publicKeyEd25519: identity.publicKeyEd25519,
+        enrolledAt: new Date().toISOString(), signedReady: false, nextSequence: 1 });
+    return verifyDemoDevice(input, deps);
+}
+//# sourceMappingURL=demoEnrollment.js.map

package/dist/demoEnrollment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoEnrollment.js","sourceRoot":"","sources":["../src/demoEnrollment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAmB,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAA0B,MAAM,2CAA2C,CAAC;AAE/H,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,IAAI,GAAG,qBAAqB,CAAC;AACnC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAuCtC,SAAS,WAAW,CAAC,KAA+B;IAClD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;WAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;WAClE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;WAC7D,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB;WAC5D,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,MAAM,kBAAmB,SAAQ,KAAK;IACf;IAArB,YAAqB,IAAY,EAAE,OAAe;QAChD,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADV,SAAI,GAAJ,IAAI,CAAQ;IAEjC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,MAAc;IAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACvF,CAAC,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;QACzD,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;QAClE,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;IACpF,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;WACtD,IAAgC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,KAAsB,EAAE,MAAc;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;SACnG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAc,EAAE,KAA+B;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9F,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAC7B,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAAC,CAAC;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,sBAAsB;WAC/D,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;WACvE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;WAC7C,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC;WACpD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;WAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,cAAc;WACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY;WAC3D,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,KAAsB,EACjE,QAAgB,EAAE,UAAsB,EAAE,QAAgB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,iCAAiC,KAAK,CAAC,YAAY,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1F,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,QAAQ,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACnE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;QACzC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;KACzE,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE;YAC/E,oBAAoB,EAAE,QAAQ;YAC9B,qBAAqB,EAAE,SAAS;YAChC,qBAAqB,EAAE,SAAS;YAChC,oBAAoB,EAAE,SAAS;YAC/B,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC;YACrC,oBAAoB,EAAE,SAAS;SAChC,EAAE,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAC3D,OAAiE,EAAE;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAG,UAAU,sBAAsB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAqB,CAAC;IAClF,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;WACnE,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;WAC5F,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB;WAC1D,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;WAC7E,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,KAAK,EAAE,MAAM;QAC/D,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,EAAE;QAC/D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAmB,CAAC;QACnF,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;eACpE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,YAAY;eACnF,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM;YAChE,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAClD,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,kEAAkE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,MAAM,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACjE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;SACxC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;IACF,IAAI,MAAM,GAAmC,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;eACpD,KAAK,CAAC,IAAI,KAAK,mCAAmC;YAAE,MAAM,KAAK,CAAC;QACrE,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;aAC5D,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7F,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;gBAC/B,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YAAC,OAAO,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,cAAc,YAAY,kBAAkB,CAAC;uBAC9C,cAAc,CAAC,IAAI,KAAK,mCAAmC;oBAAE,MAAM,cAAc,CAAC;YACzF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,MAAM,KAAK,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;WACtG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3C,MAAM,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,qBAA8B;QAC/D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;QACtE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ;QAC3E,UAAU,EAAE,sBAAsB,EAAE,eAAwB,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA+B,EACrE,OAAsC,EAAE;IACxC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,YAAoB,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,KAAK,EAAE,MAAM;QAC/D,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,EAAE;QAC/D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,OAAO,CAAC,GAAG,MAAM,8BAA8B,EAAE;QAC5F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;YAClF,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YAC3E,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;KACjD,CAAC,CAAC,CAAC;IACJ,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;WAC7F,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC,eAAe,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAC7D,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,GAAG,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IAC3F,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,OAAO,CAAC,GAAG,MAAM,mCAAmC,EAAE;YAChG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;SACtF,CAAC,CAAC,CAAC;QACJ,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;YACnF,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM;QACR,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;QACvH,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IACxH,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAqB,CAAC;QACpF,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,gBAAgB,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,uBAAuB;QAClE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;QACrF,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;QACtF,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/demoEnrollment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=demoEnrollment.test.d.ts.map

package/dist/demoEnrollment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoEnrollment.test.d.ts","sourceRoot":"","sources":["../src/demoEnrollment.test.ts"],"names":[],"mappings":""}

package/dist/demoEnrollment.test.js

@@ -0,0 +1,274 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { createHash, createPublicKey, verify } from 'node:crypto';
+import { mkdtemp, readFile, readdir, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { connectDemoDevice, verifyDemoDevice } from './demoEnrollment.js';
+import { run } from './index.js';
+const orgId = 'org_fixture';
+const repositoryId = '10000000-0000-4000-8000-000000000001';
+const deviceId = '30000000-0000-4000-8000-000000000001';
+const grant = 'A'.repeat(43);
+const deviceCode = 'B'.repeat(43);
+const browserCode = 'ABCDEF0123456789ABCD';
+const normalizedRepository = 'github.com/example/private';
+const hqUrl = 'https://dharma.example';
+function memoryStore() {
+    const values = new Map();
+    return { backend: 'linux-secret-service',
+        async get(account) { return values.get(account) || null; },
+        async put(account, value) { values.set(account, value); },
+        async delete(account) { values.delete(account); } };
+}
+function options(stateRoot) {
+    return { hqUrl, organizationId: orgId, repositoryId, normalizedRepository,
+        grant, deviceName: 'Fixture laptop', platform: 'linux',
+        installationId: '40000000-0000-4000-8000-000000000001',
+        stateRoot, maximumWaitMs: 1_000 };
+}
+test('Demo enrollment verifies the browser origin, waits for approval and signs a scoped status request', async () => {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-demo-cli-'));
+    const calls = [];
+    let publicKey = '';
+    const fetcher = async (resource, init) => {
+        const url = new URL(String(resource));
+        calls.push(url.pathname);
+        if (url.pathname.endsWith('/enrollments')) {
+            const body = JSON.parse(String(init?.body));
+            assert.equal(body.grant, grant);
+            assert.equal(body.repositoryId, repositoryId);
+            publicKey = body.publicKeyEd25519;
+            return new Response(JSON.stringify({ ok: true, status: 'pending', organizationId: orgId,
+                repositoryId, deviceCode, expiresAt: new Date(Date.now() + 60_000).toISOString(),
+                verificationUri: `${hqUrl}/demo/fabric/approve?orgId=${orgId}&repositoryId=${repositoryId}&code=${browserCode}` }), { status: 202 });
+        }
+        if (url.pathname.endsWith('/poll')) {
+            assert.deepEqual(JSON.parse(String(init?.body)), { orgId, deviceCode });
+            return new Response(JSON.stringify({ ok: true, status: 'approved',
+                deviceId, repositoryId }), { status: 200 });
+        }
+        assert.equal(url.pathname, `/api/demo/fabric/repositories/${repositoryId}/status`);
+        const headers = new Headers(init?.headers);
+        const signingPayload = Buffer.from(JSON.stringify({
+            bodyHash: `sha256:${createHash('sha256').update('').digest('hex')}`,
+            deviceId,
+            messageId: headers.get('x-dharma-message-id'),
+            method: 'GET',
+            nonce: headers.get('x-dharma-nonce'),
+            organizationId: orgId,
+            pathname: `${url.pathname}${url.search}`,
+            sequence: Number(headers.get('x-dharma-sequence')),
+            sessionId: headers.get('x-dharma-session-id'),
+            timestamp: headers.get('x-dharma-timestamp'),
+        }));
+        assert.equal(verify(null, signingPayload, createPublicKey({ key: { kty: 'OKP', crv: 'Ed25519', x: publicKey }, format: 'jwk' }), Buffer.from(headers.get('x-dharma-signature'), 'base64url')), true);
+        return new Response(JSON.stringify({ ok: true, organizationId: orgId, repositoryId,
+            deviceId, normalizedRepository }), { status: 200 });
+    };
+    const approvals = [];
+    const connected = await connectDemoDevice(options(stateRoot), {
+        store: memoryStore(), fetcher, sleep: async () => { },
+        onApprovalRequired: async (url) => { approvals.push(url); },
+    });
+    assert.equal(connected.stage, 'device_signed_ready');
+    assert.equal(connected.deviceId, deviceId);
+    assert.deepEqual(calls, ['/api/demo/fabric/enrollments',
+        '/api/demo/fabric/enrollments/poll', `/api/demo/fabric/repositories/${repositoryId}/status`]);
+    assert.equal(approvals.length, 1);
+    assert.equal(new URL(approvals[0]).origin, hqUrl);
+    const config = JSON.parse(await readFile(connected.configPath, 'utf8'));
+    assert.equal(config.deviceId, deviceId);
+    assert.equal(config.grant, undefined);
+    assert.equal(config.privateKey, undefined);
+    if (process.platform !== 'win32')
+        assert.equal((await stat(connected.configPath)).mode & 0o777, 0o600);
+});
+test('Demo enrollment rejects an off-origin approval link before opening a browser or saving a device', async () => {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-demo-cli-invalid-'));
+    let opened = false;
+    const fetcher = async () => new Response(JSON.stringify({ ok: true, status: 'pending',
+        organizationId: orgId, repositoryId, deviceCode,
+        expiresAt: new Date(Date.now() + 60_000).toISOString(),
+        verificationUri: `https://attacker.example/demo/fabric/approve?orgId=${orgId}&repositoryId=${repositoryId}&code=${browserCode}` }), { status: 202 });
+    await assert.rejects(connectDemoDevice(options(stateRoot), { store: memoryStore(), fetcher,
+        onApprovalRequired: async () => { opened = true; } }), /verification origin/i);
+    assert.equal(opened, false);
+});
+test('Demo command dry-run verifies the local repository without a grant or device write', async () => {
+    const root = await mkdtemp(resolve(tmpdir(), 'dharma-demo-repo-'));
+    const home = await mkdtemp(resolve(tmpdir(), 'dharma-demo-home-'));
+    execFileSync('git', ['init', root]);
+    execFileSync('git', ['-C', root, 'remote', 'add', 'origin', 'git@github.com:Example/Private.git']);
+    const previous = process.env.DHARMA_HOME;
+    process.env.DHARMA_HOME = home;
+    try {
+        const receipt = await run(['demo', 'connect', '--dry-run', '--workspace', root,
+            '--portal-url', hqUrl, '--organization-id', orgId,
+            '--repository-id', repositoryId, '--normalized-repository', normalizedRepository]);
+        assert.equal(receipt.stage, 'demo_device_plan');
+        await assert.rejects(stat(resolve(home, 'installation.json')), { code: 'ENOENT' });
+        await assert.rejects(run(['demo', 'connect', '--dry-run', '--workspace', root,
+            '--portal-url', hqUrl, '--organization-id', orgId,
+            '--repository-id', repositoryId, '--normalized-repository', 'github.com/other/repo']), /does not match/);
+    }
+    finally {
+        if (previous === undefined)
+            delete process.env.DHARMA_HOME;
+        else
+            process.env.DHARMA_HOME = previous;
+    }
+});
+test('lost status response resumes grant-free with exact replay, then retries an unseen expired sequence', async () => {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-demo-recovery-'));
+    const store = memoryStore();
+    const signed = [];
+    let loseResponse = true;
+    const fetcher = async (resource, init) => {
+        const url = new URL(String(resource));
+        if (url.pathname.endsWith('/enrollments')) {
+            return new Response(JSON.stringify({ ok: true, status: 'pending', organizationId: orgId,
+                repositoryId, deviceCode, expiresAt: new Date(Date.now() + 60_000).toISOString(),
+                verificationUri: `${hqUrl}/demo/fabric/approve?orgId=${orgId}&repositoryId=${repositoryId}&code=${browserCode}` }), { status: 202 });
+        }
+        if (url.pathname.endsWith('/poll')) {
+            return new Response(JSON.stringify({ ok: true, status: 'approved', deviceId, repositoryId }), { status: 200 });
+        }
+        signed.push(new Headers(init?.headers));
+        if (loseResponse) {
+            loseResponse = false;
+            throw new Error('connection lost after dispatch');
+        }
+        return new Response(JSON.stringify({ ok: true, organizationId: orgId, repositoryId,
+            deviceId, normalizedRepository, duplicate: signed.length === 2 }), { status: 200 });
+    };
+    await assert.rejects(connectDemoDevice(options(stateRoot), { store, fetcher }), /connection lost/);
+    const directory = resolve(stateRoot, 'demo', (await readdir(resolve(stateRoot, 'demo')))[0]);
+    const configPath = resolve(directory, 'device.json');
+    assert.equal(JSON.parse(await readFile(configPath, 'utf8')).signedReady, false);
+    const scope = options(stateRoot);
+    const recovered = await verifyDemoDevice(scope, { store, fetcher });
+    assert.equal(recovered.stage, 'device_signed_ready');
+    assert.equal(signed[0].get('x-dharma-message-id'), signed[1].get('x-dharma-message-id'));
+    assert.equal(signed[1].get('x-dharma-sequence'), '1');
+    const pendingPath = `${configPath}.pending-status.json`;
+    const pending = { url: `${hqUrl}/api/demo/fabric/repositories/${repositoryId}/status?orgId=${orgId}`,
+        deviceId, sequence: 2, createdAt: new Date(Date.now() - 5 * 60_000).toISOString(),
+        headers: {} };
+    await writeFile(pendingPath, JSON.stringify(pending));
+    const recoveredAfterExpiry = await verifyDemoDevice(scope, { store, fetcher });
+    assert.equal(recoveredAfterExpiry.stage, 'device_signed_ready');
+    assert.equal(signed.at(-1).get('x-dharma-sequence'), '2');
+    assert.equal(JSON.parse(await readFile(configPath, 'utf8')).nextSequence, 3);
+});
+test('expired status advances once only after a typed sequence conflict', async () => {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-demo-expired-'));
+    const store = memoryStore();
+    const sequences = [];
+    let acceptedSequence = 0;
+    const fetcher = async (resource, init) => {
+        const url = new URL(String(resource));
+        if (url.pathname.endsWith('/enrollments')) {
+            return new Response(JSON.stringify({ ok: true, status: 'pending', organizationId: orgId,
+                repositoryId, deviceCode, expiresAt: new Date(Date.now() + 60_000).toISOString(),
+                verificationUri: `${hqUrl}/demo/fabric/approve?orgId=${orgId}&repositoryId=${repositoryId}&code=${browserCode}` }), { status: 202 });
+        }
+        if (url.pathname.endsWith('/poll')) {
+            return new Response(JSON.stringify({ ok: true, status: 'approved', deviceId, repositoryId }), { status: 200 });
+        }
+        const sequence = Number(new Headers(init?.headers).get('x-dharma-sequence'));
+        sequences.push(sequence);
+        if (sequence !== acceptedSequence + 1) {
+            return new Response(JSON.stringify({ ok: false, error: {
+                    code: 'demo_fabric_sequence_out_of_order', message: 'Device sequence is out of order.',
+                } }), { status: 409 });
+        }
+        acceptedSequence = sequence;
+        return new Response(JSON.stringify({ ok: true, organizationId: orgId, repositoryId,
+            deviceId, normalizedRepository }), { status: 200 });
+    };
+    const connected = await connectDemoDevice(options(stateRoot), { store, fetcher });
+    assert.equal(acceptedSequence, 1);
+    const configPath = connected.configPath;
+    const pendingPath = `${configPath}.pending-status.json`;
+    await writeFile(pendingPath, JSON.stringify({
+        url: `${hqUrl}/api/demo/fabric/repositories/${repositoryId}/status?orgId=${orgId}`,
+        deviceId, sequence: 2, createdAt: new Date(Date.now() - 5 * 60_000).toISOString(), headers: {},
+    }));
+    acceptedSequence = 2;
+    const recovered = await verifyDemoDevice(options(stateRoot), { store, fetcher });
+    assert.equal(recovered.stage, 'device_signed_ready');
+    assert.deepEqual(sequences, [1, 2, 3]);
+    assert.equal(JSON.parse(await readFile(configPath, 'utf8')).nextSequence, 4);
+});
+test('a 0.2.81 pending sequence that skipped an unseen request recovers without another grant', async () => {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-demo-legacy-gap-'));
+    const store = memoryStore();
+    const sequences = [];
+    let lastAccepted = 0;
+    const fetcher = async (resource, init) => {
+        const url = new URL(String(resource));
+        if (url.pathname.endsWith('/enrollments')) {
+            return new Response(JSON.stringify({ ok: true, status: 'pending', organizationId: orgId,
+                repositoryId, deviceCode, expiresAt: new Date(Date.now() + 60_000).toISOString(),
+                verificationUri: `${hqUrl}/demo/fabric/approve?orgId=${orgId}&repositoryId=${repositoryId}&code=${browserCode}` }), { status: 202 });
+        }
+        if (url.pathname.endsWith('/poll')) {
+            return new Response(JSON.stringify({ ok: true, status: 'approved', deviceId, repositoryId }), { status: 200 });
+        }
+        const sequence = Number(new Headers(init?.headers).get('x-dharma-sequence'));
+        sequences.push(sequence);
+        if (sequence !== lastAccepted + 1) {
+            return new Response(JSON.stringify({ ok: false, error: {
+                    code: 'demo_fabric_sequence_out_of_order', message: 'Device sequence is out of order.',
+                } }), { status: 409 });
+        }
+        lastAccepted = sequence;
+        return new Response(JSON.stringify({ ok: true, organizationId: orgId, repositoryId,
+            deviceId, normalizedRepository }), { status: 200 });
+    };
+    const connected = await connectDemoDevice(options(stateRoot), { store, fetcher });
+    await writeFile(`${connected.configPath}.pending-status.json`, JSON.stringify({
+        url: `${hqUrl}/api/demo/fabric/repositories/${repositoryId}/status?orgId=${orgId}`,
+        deviceId, sequence: 3, createdAt: new Date(Date.now() - 5 * 60_000).toISOString(), headers: {},
+    }));
+    const recovered = await verifyDemoDevice(options(stateRoot), { store, fetcher });
+    assert.equal(recovered.stage, 'device_signed_ready');
+    assert.deepEqual(sequences, [1, 3, 2]);
+    assert.equal(JSON.parse(await readFile(connected.configPath, 'utf8')).nextSequence, 3);
+});
+test('expired status does not advance on an unrelated conflict', async () => {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-demo-conflict-'));
+    const store = memoryStore();
+    const sequences = [];
+    const fetcher = async (resource, init) => {
+        const url = new URL(String(resource));
+        if (url.pathname.endsWith('/enrollments')) {
+            return new Response(JSON.stringify({ ok: true, status: 'pending', organizationId: orgId,
+                repositoryId, deviceCode, expiresAt: new Date(Date.now() + 60_000).toISOString(),
+                verificationUri: `${hqUrl}/demo/fabric/approve?orgId=${orgId}&repositoryId=${repositoryId}&code=${browserCode}` }), { status: 202 });
+        }
+        if (url.pathname.endsWith('/poll')) {
+            return new Response(JSON.stringify({ ok: true, status: 'approved', deviceId, repositoryId }), { status: 200 });
+        }
+        const sequence = Number(new Headers(init?.headers).get('x-dharma-sequence'));
+        sequences.push(sequence);
+        if (sequence > 1)
+            return new Response(JSON.stringify({ ok: false, error: {
+                    code: 'demo_fabric_message_replay_conflict', message: 'Message conflict.',
+                } }), { status: 409 });
+        return new Response(JSON.stringify({ ok: true, organizationId: orgId, repositoryId,
+            deviceId, normalizedRepository }), { status: 200 });
+    };
+    const connected = await connectDemoDevice(options(stateRoot), { store, fetcher });
+    const pendingPath = `${connected.configPath}.pending-status.json`;
+    await writeFile(pendingPath, JSON.stringify({
+        url: `${hqUrl}/api/demo/fabric/repositories/${repositoryId}/status?orgId=${orgId}`,
+        deviceId, sequence: 2, createdAt: new Date(Date.now() - 5 * 60_000).toISOString(), headers: {},
+    }));
+    await assert.rejects(verifyDemoDevice(options(stateRoot), { store, fetcher }), /demo_fabric_message_replay_conflict/);
+    assert.deepEqual(sequences, [1, 2]);
+    assert.equal(JSON.parse(await readFile(connected.configPath, 'utf8')).nextSequence, 2);
+});
+//# sourceMappingURL=demoEnrollment.test.js.map

package/dist/demoEnrollment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoEnrollment.test.js","sourceRoot":"","sources":["../src/demoEnrollment.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAEjC,MAAM,KAAK,GAAG,aAAa,CAAC;AAC5B,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAC5D,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC7B,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAClC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAC1D,MAAM,KAAK,GAAG,wBAAwB,CAAC;AAEvC,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,sBAAsB;QACtC,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB;IAChC,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,oBAAoB;QACvE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAgB;QAC/D,cAAc,EAAE,sCAAsC;QACtD,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,IAAI,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;IACnH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAA2B,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YAC9C,SAAS,GAAG,IAAI,CAAC,gBAAiB,CAAC;YACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK;gBACrF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;gBAChF,eAAe,EAAE,GAAG,KAAK,8BAA8B,KAAK,iBAAiB,YAAY,SAAS,WAAW,EAAE,EAAE,CAAC,EACpH,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU;gBAC/D,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EACvB,iCAAiC,YAAY,SAAS,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,QAAQ,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YACnE,QAAQ;YACR,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC7C,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACpC,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;YACxC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAClD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC7C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;SAC7C,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EACtC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EACrF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAE,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY;YAChF,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;QAC5D,KAAK,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACpD,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,8BAA8B;QACrD,mCAAmC,EAAE,iCAAiC,YAAY,SAAS,CAAC,CAAC,CAAC;IAChG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;IACnG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;IACjH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC/E,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,OAAO,GAAiB,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS;QACjG,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU;QAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QACtD,eAAe,EAAE,sDAAsD,KAAK,iBAAiB,YAAY,SAAS,WAAW,EAAE,EAAE,CAAC,EACpI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjB,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,OAAO;QACxF,kBAAkB,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;IACpG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACnE,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpC,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,oCAAoC,CAAC,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI;YAC5E,cAAc,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK;YACjD,iBAAiB,EAAE,YAAY,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAE,OAA6B,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI;YAC3E,cAAc,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK;YACjD,iBAAiB,EAAE,YAAY,EAAE,yBAAyB,EAAE,uBAAuB,CAAC,CAAC,EACvF,gBAAgB,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;;YACtD,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;IACpH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK;gBACrF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;gBAChF,eAAe,EAAE,GAAG,KAAK,8BAA8B,KAAK,iBAAiB,YAAY,SAAS,WAAW,EAAE,EAAE,CAAC,EACpH,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC1F,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,IAAI,YAAY,EAAE,CAAC;YAAC,YAAY,GAAG,KAAK,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;QAC9F,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY;YAChF,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAC5E,iBAAiB,CAAC,CAAC;IACrB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9G,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC3F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;IAEvD,MAAM,WAAW,GAAG,GAAG,UAAU,sBAAsB,CAAC;IACxD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,iCAAiC,YAAY,iBAAiB,KAAK,EAAE;QAClG,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QACjF,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK;gBACrF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;gBAChF,eAAe,EAAE,GAAG,KAAK,8BAA8B,KAAK,iBAAiB,YAAY,SAAS,WAAW,EAAE,EAAE,CAAC,EACpH,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC1F,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7E,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,QAAQ,KAAK,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;oBACrD,IAAI,EAAE,mCAAmC,EAAE,OAAO,EAAE,kCAAkC;iBACvF,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,gBAAgB,GAAG,QAAQ,CAAC;QAC5B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY;YAChF,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACxC,MAAM,WAAW,GAAG,GAAG,UAAU,sBAAsB,CAAC;IACxD,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QAC1C,GAAG,EAAE,GAAG,KAAK,iCAAiC,YAAY,iBAAiB,KAAK,EAAE;QAClF,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE;KAC/F,CAAC,CAAC,CAAC;IACJ,gBAAgB,GAAG,CAAC,CAAC;IACrB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;IACzG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK;gBACrF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;gBAChF,eAAe,EAAE,GAAG,KAAK,8BAA8B,KAAK,iBAAiB,YAAY,SAAS,WAAW,EAAE,EAAE,CAAC,EACpH,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC1F,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7E,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,QAAQ,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;oBACrD,IAAI,EAAE,mCAAmC,EAAE,OAAO,EAAE,kCAAkC;iBACvF,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,YAAY,GAAG,QAAQ,CAAC;QACxB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY;YAChF,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,SAAS,CAAC,GAAG,SAAS,CAAC,UAAU,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC;QAC5E,GAAG,EAAE,GAAG,KAAK,iCAAiC,YAAY,iBAAiB,KAAK,EAAE;QAClF,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE;KAC/F,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AACvH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK;gBACrF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;gBAChF,eAAe,EAAE,GAAG,KAAK,8BAA8B,KAAK,iBAAiB,YAAY,SAAS,WAAW,EAAE,EAAE,CAAC,EACpH,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAC1F,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7E,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;oBACvE,IAAI,EAAE,qCAAqC,EAAE,OAAO,EAAE,mBAAmB;iBAC1E,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY;YAChF,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,GAAG,SAAS,CAAC,UAAU,sBAAsB,CAAC;IAClE,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QAC1C,GAAG,EAAE,GAAG,KAAK,iCAAiC,YAAY,iBAAiB,KAAK,EAAE;QAClF,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE;KAC/F,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAC3E,qCAAqC,CAAC,CAAC;IACzC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAA8B,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AACvH,CAAC,CAAC,CAAC"}