@dsh-enhanced/assistant-isolation 0.1.65 → 0.1.67

package/lib/linux-repository-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-repository-runner.js","sourceRoot":"","sources":["../src/linux-repository-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAqC,MAAM,aAAa,CAAA;AAEtG,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,8BAA8B,EAC/B,MAAM,+BAA+B,CAAA;AACxG,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,qCAAqC,EACxG,0BAA0B,EAAE,2BAA2B,EAAgC,MAAM,sBAAsB,CAAA;AACrH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAA;AACtJ,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAA;AACpH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAA6B,MAAM,yBAAyB,CAAA;AAE1H,OAAO,EAAE,4CAA4C,EAA4B,MAAM,4BAA4B,CAAA;AACnH,OAAO,EAAE,mCAAmC,EAAE,+BAA+B,EAAkC,MAAM,2BAA2B,CAAA;AA4BhJ,MAAM,GAAG,GAAG,MAAM,CAAA;AAClB,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA;AAC5B,MAAM,UAAU,GAAG,SAAS,CAAA;AAC5B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAA;AAC3B,MAAM,KAAK,GAAG,YAAY,CAAA;AAC1B,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;IACxG,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAC1K,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC3B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpG,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;AACrF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACrI,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI;OACzG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAA;AAC3H,MAAM,SAAS,GAAG,CAAC,GAAiB,EAAE,MAAM,GAAG,kCAAkC,EAAmB,EAAE,CAAC,GAAG,CAAC,MAAM;OAC5G,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAA;AAE1G;oEACoE;AACpE,SAAS,eAAe,CAAC,IAAY,EAAE,QAA2B,EAAE,aAAoB;IACtF,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAAC,MAAM,KAAK,CAAA;IAAC,CAAC;IACjI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;WAC7F,SAAS,CAAC,IAAI,GAAG,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACpH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IACxC,IAAI,IAAI,CAAA;IACR,IAAI,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC5C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC;oBAAC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,CAAA;gBAAC,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBAAC,IAAK,OAAiC,CAAC,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBAAC,MAAM,OAAO,CAAA;gBAAC,CAAC;gBACtI,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;YACpE,CAAC;YACD,OAAM;QACR,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;WAClH,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3F,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM,CAAA;QAC7B,IAAI,IAAI,CAAA;QACR,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;QACjI,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;eAClH,YAAY,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,YAAY,KAAK,CAAC;eAChE,QAAQ,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QACpK,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;QACjJ,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC;yEAC+B,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAA;QACrF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;;oFAE4C,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,aAAa,QAAQ,CAAC,eAAe,EAAE,EAAE,aAAa,CAAC,CAAA;QACxJ,IAAI,YAAY,IAAI,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IACjH,CAAC;YAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AAChC,CAAC;AAED;0EAC0E;AAC1E,MAAM,OAAO,qBAAqB;IACvB,MAAM,CAAuC;IAC7C,SAAS,CAAkC;IAC3C,SAAS,CAAmB;IAC5B,OAAO,CAAiB;IACxB,cAAc,CAAQ;IACtB,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IAC9B,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,cAAc,GAAG,CAAC,CAAA;IACT,QAAQ,GAAG,IAAI,GAAG,EAAgD,CAAA;IAClE,MAAM,GAAG,IAAI,GAAG,EAAwC,CAAA;IACxD,YAAY,GAAG,IAAI,GAAG,EAAoD,CAAA;IAC1E,MAAM,CAAe;IAC9B,WAAW,CAA0C;IACrD,MAAM,CAA4C;IAClD,MAAM,CAA2B;IACxB,cAAc,CAA8B;IAC5C,eAAe,CAA8B;IACtD,OAAO,GAAG,EAAE,CAAA;IACZ,OAAO,GAAG,IAAI,CAAA;IACd,aAAa,CAA2B;IAExC,YAAY,KAAkC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE;eAC9F,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;eACtU,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;eAClK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI;eAC9E,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,GAAG,UAAU;eAC5E,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG;eACvG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC/F,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC1H,IAAI,SAAS;YAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;QACrG,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;eAC3F,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QACpH,MAAM,OAAO,GAAG,8BAA8B,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY;YACvJ,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAChG,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1D,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;gBAChH,oBAAoB,EAAE,mCAAmC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QACvJ,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS;eACnF,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QAClN,IAAI,CAAC,SAAS,GAAG,OAAO,CAAA;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACvC,IAAI,WAAW,CAAC,SAAS,GAAG,UAAU,IAAI,WAAW,CAAC,eAAe,GAAG,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACnJ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW;YACvG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7H,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,cAAc,KAAK,CAAC,eAAe,EAAE;YAC/H,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAA;QAC/E,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;QACvE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;YACzI,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACjC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;QAC/D,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC7C,IAAI,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE;eAC5G,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACjI,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAA;QAC1E,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;QACtD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAA;QACpE,IAAI,CAAC,eAAe,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAA;QACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC3B,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,cAAc,KAAa,OAAO,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC;IACpF,IAAI,aAAa,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAA,CAAC,CAAC;IACnE,YAAY;QACV,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3D,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAA;IAChH,CAAC;IACD,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBACnF,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAClI,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IACD,UAAU,CAAC,MAAoB;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACrF,IAAI,CAAC,UAAU,EAAE,CAAA;IACnB,CAAC;IACD,KAAK,CAAC,GAAiB;QACrB,OAAO,GAAG,CAAC,OAAO,KAAK,cAAc,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;eAClH,GAAG,CAAC,aAAa,EAAE,aAAa,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAA;IACxE,CAAC;IACD,cAAc;QACZ,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBACnF,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC1H,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;mBAC/G,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,cAAc,CAAC,GAAG;mBACvI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;mBACjI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,CAAA;QACzG,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,GAAW;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAC1G,CAAC;IACD,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,UAAU,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;QAC1D,SAAS,CAAC;YACR,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBACnF,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;YACzD,IAAI,CAAC;gBAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAAC,MAAK;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACxF,IAAI,CAAC,CAAC,KAAK,YAAY,oBAAoB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM,KAAK,CAAA;gBACpH,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAC9F,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;QACnC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBACpG,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;QACxG,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;wBACnF,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;gBACzD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC5E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;wBACjB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;wBACrD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;wBACnB,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;4BAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA,CAAC,CAAC,CAAC,CAAA;oBAClG,CAAC;oBACD,OAAM;gBACR,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,8DAA8D,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAC3C,CAAC,EAAE,IAAI,CAAC,CAAA;QACR,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACnB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;IACvB,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,OAAO,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAA;YAC1E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAM;gBACzB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAA;gBAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAQ;gBAC3D,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACxG,CAAC;QACH,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,KAAmC;QAC1C,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,wBAAwB,IAAI,CAAC,KAAK,CAAC,OAAO;eACxF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,cAAc,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;eAC7F,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;eAC1G,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;eAC7E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;mBAClG,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;eACnF,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ;eAC1F,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACnK,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9J,CAAC;IACD,OAAO,CAAC,MAAuB,EAAE,YAAuC,EAAE,EAAE,cAAoC;QAC9G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAA;IACrJ,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,GAAiB,EAAE,UAAU,GAAG,KAAK;QACnD,MAAM,SAAS,GAAG,GAAS,EAAE,GAAG,IAAI,UAAU;YAAE,IAAI,CAAC,UAAU,EAAE,CAAC;;YAAM,IAAI,CAAC,UAAU,EAAE,CAAA,CAAC,CAAC,CAAA;QAC3F,IAAI,CAAC,GAAG,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/D,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/J,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAA;QACpG,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAA;YACtD,SAAS,EAAE,CAAA;YACX,IAAI,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,4BAA4B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC7D,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;gBAC3H,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAChG,CAAC;YACD,IAAI,MAAM,qCAAqC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,SAAS,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;YAAC,CAAC;QAC5G,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS,EAAE,CAAA;QAAC,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1F,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAA;IAC1I,CAAC;IACD;oEACgE;IAChE,GAAG,GAAG,CAAC,GAAW,EAAE,OAAqC,EAAE,WAAyD,EAAE,MAAmB,EAAwC,EAAE;QACjL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAA;QACvG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAChF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAE,GAAG,CAAC,CAAA;YAC3C,IAAI,KAAK;gBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;;gBAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9E,CAAC,CAAA;QACD,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,GAAiC,EAAE,WAAyD,EAAE,MAAmB,EAAE,UAAkB;QAC3J,IAAI,OAAO,WAAW,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACzG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACxE,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;QACzG,MAAM,IAAI,CAAC,MAAM,CAAA;QACjB,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,CAAA;QAC1C,IAAI,gBAAgB,GAAG,KAAK,CAAA;QAC5B,MAAM,aAAa,GAAG,EAAE,CAAA;QACxB,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,KAAK,UAAU,IAAI,IAAI,CAAC,cAAc,KAAK,cAAc;eAC/I,IAAI,CAAC,WAAW,EAAE,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;eAC7F,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAA;QACvF,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,QAAQ;gBAAE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;YAClE,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;gBACnE,MAAM,4CAA4C,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACxG,CAAC;;gBAAM,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACpD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACvB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC/D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACvB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;YACvC,gBAAgB,GAAG,IAAI,CAAA;YACvB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE;gBAChM,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa;gBACnG,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS;gBACtG,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC,eAAe;oBACnG,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE;gBAC5D,aAAa,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,YAAY;oBACvG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACvG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAClC,IAAI,CAAC;gBAAC,OAAO,MAAM,OAAO,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;YACrH,IAAI,QAAQ,IAAI,CAAC,CAAC,gBAAgB,IAAI,kCAAkC,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC;gBAClK,MAAM,+BAA+B,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO;oBACvE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,GAAiB,EAAE,aAAqB;QACtD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,aAAa,IAAI,4BAA4B,CAAC,GAAG,CAAC,aAAc,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YACxI,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;QACnF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzC,IAAI,OAAO;YAAE,OAAO,MAAM,OAAO,CAAA;QACjC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAC3B,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtG,IAAI,CAAC,UAAU,EAAE,CAAA;QACnB,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAA;IACxD,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,WAAyD,EAAE,MAAmB,EAAE,QAAgB,EAAE,MAAkB;QAC9H,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,IAAI,GAAe,GAAG,EAAE,GAAE,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAChI,uEAAuE;QACvE,6EAA6E;QAC7E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACxF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC3D,MAAM,CAAC,cAAc,EAAE,CAAA;oBACvB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;wBAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;oBAAC,CAAC;oBAC/F,IAAI,CAAC,UAAU,EAAE,CAAA;oBACjB,OAAO,WAAW,CAAC,MAAM,CAAC,CAAA;gBAC5B,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAAC,CAAC;gBACL,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;IAC5E,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,OAAqC,EAAE,WAAyD,EAAE,MAAmB;QACzJ,IAAI,GAAG,GAAG,OAAO,CAAA;QACjB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9I,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,OAAO,EAAE;gBAAE,OAAM;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAA,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACzJ,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YACzF,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACnE,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YACxI,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACjC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YACrI,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO;gBACtF,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;YACtG,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;oBACnH,gBAAgB,EAAE,GAAG,CAAC,gBAAiB,EAAE,WAAW,EAAE,GAAG,CAAC,WAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YACrG,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACnE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;YACxF,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;YACzE,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;oBAC7H,IAAI,CAAC,OAAO,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;oBACnE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC5F,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE;oBACtB,IAAI,CAAC,OAAO,EAAE;wBAAE,OAAO,KAAK,CAAA;oBAC5B,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAA;gBAC/E,CAAC,EAAE,CAAC,CAAA;YACJ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS;gBAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;YAChH,0EAA0E;YAC1E,8DAA8D;YAC9D,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;YAClF,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAA;YAC/B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAA;YAClC,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,MAAM,MAAM,GAAoB,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAC7H,SAAS,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBACxE,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAA;YACjK,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAA;gBACvC,IAAI,KAAK,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;gBACnF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAO,CAAC,CAAA;YACtC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAA;YAAC,CAAC;QAClI,CAAC;gBAAS,CAAC;YAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;IACpC,CAAC;IACD;0EACsE;IACtE,0BAA0B,GAAG,CAAC,GAAW,EAAE,MAAoB,EAAoD,EAAE;QACnH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,QAAQ,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAA;QAC/D,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,KAAK,CAAC,2BAA2B,CAAC,GAAW,EAAE,MAAoB;QACjE,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC9H,CAAC,CAAA;QACD,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC5I,CAAC,CAAA;QACD,IAAI,EAAE,CAAA;QACN,MAAM,IAAI,CAAC,MAAM,CAAA;QACjB,SAAS,EAAE,CAAA;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3B,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,aAAa,KAAK,CAAC,IAAI,4BAA4B,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,cAAc;mBAC5L,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;mBACnH,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,SAAS,CAAA;YAClI,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;YAC3I,SAAS,EAAE,CAAA;YACX,0EAA0E;YAC1E,2EAA2E;YAC3E,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;mBACzD,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;mBACjE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;mBACvE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAA;YACnF,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACrG,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS,EAAE,CAAC;YAAC,OAAO,SAAS,CAAA;QAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,GAAW;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACnE,MAAM,IAAI,CAAC,MAAM,CAAA;QACjB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3E,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAC3B,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtG,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAA;QACpD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,iBAAiB;YAAE,OAAO,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;QAClF,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC5I,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAA;YACpG,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,IAAI,MAAM,qCAAqC,CAAC,GAAG,CAAC,CAAA;YACvG,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,OAAO,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,OAAO,SAAS,CAAA;QAAC,CAAC;IACjD,CAAC;IACD,KAAK,GAAG,KAAK,IAAmB,EAAE;QAChC,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAA;QACvD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrE,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;YAC1F,IAAI,CAAC;gBAAC,IAAI,IAAI,CAAC,WAAW;oBAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QACjH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,MAAM,IAAI,CAAC,aAAa,CAAA;IACjC,CAAC,CAAA;CACF"}

package/lib/linux-runner-state-migration.d.ts

@@ -0,0 +1,94 @@
+import { type LinuxRunnerStateSeal } from './linux-runner-state.js';
+export interface LinuxVerifierHandoverInput {
+    /** Runner role directory name (audit only); paths are supplied explicitly. */
+    name: string;
+    /** Physical private state root inside the staging copy (cp target). */
+    stageStateRoot: string;
+    /** Physical seal destination inside the staging copy. */
+    stageSealPath: string;
+    /** Logical live state root recorded as the new grant workspace and in the seal. */
+    liveStateRoot: string;
+    /** Logical live seal path returned in the ref for the owner config. */
+    liveSealPath: string;
+    /** Digest currently frozen in the staged grant; binds the copy to live authority. */
+    oldAuthorityDigest: string;
+    /** Recomputed owner authority digest; must differ so request keys never collide. */
+    newAuthorityDigest: string;
+    /** Pre-upgrade workspace when the home itself is being relocated. */
+    oldWorkspace?: string;
+    /** Seal the caller already published with resealLinuxRunnerState over the same
+     * staging tree. Optional: omitting it keeps the original reseal-on-handover
+     * behavior and still refuses a pre-existing staged seal. */
+    existingSeal?: LinuxRunnerStateSeal;
+    expiresAt: number;
+    maxRuns: number;
+    maxTotalDurationMs: number;
+    /** Injected settlement timestamp; the primitive never reads a clock. */
+    now: number;
+}
+export interface LinuxVerifierHandoverResult {
+    readonly seal: LinuxRunnerStateSeal;
+    readonly jobsMigrated: number;
+    readonly activeSettled: number;
+}
+export declare function migrateLinuxVerifierRunnerState(input: LinuxVerifierHandoverInput): LinuxVerifierHandoverResult;
+export interface LinuxRepositoryHandoverInput {
+    stageStateRoot: string;
+    stageSealPath: string;
+    liveStateRoot: string;
+    liveSealPath: string;
+}
+/** The repository runner is linux-native only: its state is a brand-new empty
+ * sealed ledger, even when verifier ledgers carry migrated Docker history. */
+export declare function prepareLinuxRepositoryHandoverState(input: LinuxRepositoryHandoverInput): LinuxRunnerStateSeal;
+export interface LinuxVerifierHandoverPreparationInput {
+    /** Runner role directory name (audit only); paths are supplied explicitly. */
+    name: string;
+    /** Physical private state root inside the staging copy (cp target). */
+    stageStateRoot: string;
+    /** Physical seal destination inside the staging copy. */
+    stageSealPath: string;
+    /** Logical live state root recorded in the seal and returned as the grant workspace. */
+    liveStateRoot: string;
+    /** Logical live seal path returned in the ref for the owner config. */
+    liveSealPath: string;
+}
+export interface LinuxVerifierHandoverPreparation {
+    readonly seal: LinuxRunnerStateSeal;
+    /** Identity of the staging copy's Docker-era grant. `principalDigest` is the
+     * `oldAuthorityDigest` the handover expects; the numeric fields are
+     * cross-checks only, because the caller supplies freshly compiled new terms. */
+    readonly grant: {
+        readonly principalDigest: string;
+        readonly revision: number;
+        readonly expiresAt: number;
+        readonly maxRuns: number;
+        readonly maxTotalDurationMs: number;
+    };
+}
+export declare function prepareLinuxVerifierHandoverState(input: LinuxVerifierHandoverPreparationInput): LinuxVerifierHandoverPreparation;
+export interface LinuxVerifierStagingPreparation {
+    /** `handover` when the staging copy carries the Docker-era verifier ledger;
+     * `fresh` when the role never ran under Docker and the staged tree has no
+     * ledger at all. */
+    readonly mode: 'handover' | 'fresh';
+    readonly seal: LinuxRunnerStateSeal;
+    /** Only a handover result carries the staged Docker-era grant identity. */
+    readonly grant?: LinuxVerifierHandoverPreparation['grant'];
+}
+/**
+ * One-shot staging seam for one verifier role of a Docker-era owner Home.
+ *
+ * The branch is decided from the staged tree, before anything is written: a
+ * staged ledger means the role has Docker-era verifier history and must go
+ * through prepareLinuxVerifierHandoverState (which upgrades it to v9 and
+ * publishes the seal its grant rewrite needs). A role the Docker-era Home never
+ * ran has no ledger — the live Home's verifier state directories are empty
+ * because that history lives in the Docker-era control plane — so its native
+ * state is exactly a fresh install's: an empty v9 ledger sealed under
+ * `logicalStateRoot`/`logicalSealPath`. The caller cannot request the weaker
+ * path for a role that has history, and a staged seal without a ledger is
+ * refused instead of overwritten.
+ */
+export declare function prepareLinuxVerifierStagingState(input: LinuxVerifierHandoverPreparationInput): LinuxVerifierStagingPreparation;
+//# sourceMappingURL=linux-runner-state-migration.d.ts.map

package/lib/linux-runner-state-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-runner-state-migration.d.ts","sourceRoot":"","sources":["../src/linux-runner-state-migration.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AA2J5D,MAAM,WAAW,0BAA0B;IACzC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAA;IACtB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAA;IACrB,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAA;IACpB,qFAAqF;IACrF,kBAAkB,EAAE,MAAM,CAAA;IAC1B,oFAAoF;IACpF,kBAAkB,EAAE,MAAM,CAAA;IAC1B,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;gEAE4D;IAC5D,YAAY,CAAC,EAAE,oBAAoB,CAAA;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,0BAA0B,GAAG,2BAA2B,CAwI9G;AAED,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;8EAC8E;AAC9E,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,4BAA4B,GAAG,oBAAoB,CAe7G;AAED,MAAM,WAAW,qCAAqC;IACpD,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAA;IACtB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,aAAa,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC;;oFAEgF;IAChF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;QAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;KACpC,CAAA;CACF;AA6BD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,qCAAqC,GAC3C,gCAAgC,CAuDlC;AAED,MAAM,WAAW,+BAA+B;IAC9C;;wBAEoB;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC,OAAO,CAAC,CAAA;CAC3D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,+BAA+B,CAoBjC"}

package/lib/linux-runner-state-migration.js

@@ -0,0 +1,463 @@
+import { createHash } from 'node:crypto';
+import { chmodSync, closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, unlinkSync } from 'node:fs';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { grantDigest, IsolationLedger } from './ledger.js';
+import { linuxRunnerStateSchemaDigest, resealLinuxRunnerState, validateLinuxRunnerStateSeal } from './linux-runner-state.js';
+/**
+ * Authorized Docker (or macOS seatbelt) -> linux-native backend handover for a
+ * single verifier runner ledger, executed offline against a disposable staging
+ * copy of the owner home.
+ *
+ * Guarantees:
+ *  - the grant keeps id 'verification' / revision 1; only its identity five,
+ *    terms and digest are rewritten, with the exact freeze-order byte formula
+ *    syncGrants uses, so the native runner's first sync is a no-op;
+ *  - historical job rows keep their identity five columns and are only flagged
+ *    migrated=1. The unique eight-tuple therefore never collides with a native
+ *    request (new authority digest) while grant_id-keyed usage keeps counting;
+ *  - prepared/running rows are settled to unknown/quiescent:false by direct
+ *    SQL identical to settle()'s terminal update, and their Docker creation
+ *    witnesses are retired to isolation_audit rather than carried forward;
+ *  - the Docker-era controller lease is expired inside the same transaction, so
+ *    the first linux-native claim fences forward immediately instead of waiting
+ *    for the old owner's wall-clock TTL to lapse;
+ *  - the ledger is checkpointed with no sidecars and resealed over the staging
+ *    file identities while recording the logical live paths.
+ *
+ * A caller that must publish the seal before the handover (so the new authority
+ * digest can be recomputed from it) first calls
+ * prepareLinuxVerifierHandoverState, which upgrades the staged ledger to v9 and
+ * publishes the seal over it (it never reads a clock and performs no audited
+ * write). It then passes that ref as `existingSeal` to the handover itself. The primitive then proves the staged
+ * seal is that exact reference and that its body still binds the staging tree,
+ * performs the same rewrite, and returns the reusable ref instead of resealing.
+ * Without `existingSeal` nothing changes: a staged seal is still refused.
+ *
+ * The primitive never reads a clock and never opens a runner: the orchestrator
+ * supplies every value after recompiling the owner authority itself. Because the
+ * rewritten grant is pinned to revision 1, the orchestrator must also pass the
+ * exact expiresAt/maxRuns/maxTotalDurationMs the upgraded owner configuration
+ * grants: a later syncGrants with different terms fails as a revision-digest
+ * mismatch, which would only surface after the cutover.
+ *
+ * Not covered: a linux-native runner whose seal was written under schema 8 is
+ * refused (its jobs are native history, and seals require ledgerSchemaVersion 9).
+ * Such a state needs an explicit resealLinuxRunnerState({ requireEmpty: false })
+ * caller, or discard-and-reinstall; this primitive never silently reinterprets it.
+ */
+const DIGEST = /^[a-f0-9]{64}$/u;
+const NAME = /^[a-z0-9][a-z0-9-]{0,63}$/u;
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/u;
+const SEAL_KEYS = ['schemaVersion', 'protocol', 'id', 'kind', 'uid', 'stateRoot', 'ledger', 'ledgerSchemaVersion', 'schemaSha256'];
+const sha = (value) => createHash('sha256').update(value).digest('hex');
+function fail(message) { throw new Error(`Linux runner handover: ${message}`); }
+function canonical(value) {
+    return typeof value === 'string' && isAbsolute(value) && resolve(value) === value && value !== '/' && !/[\p{Cc}\\]/u.test(value);
+}
+function positive(value, maximum) {
+    return Number.isSafeInteger(value) && value >= 1 && value <= maximum;
+}
+function privateDirectory(path) {
+    const info = lstatSync(path);
+    if (realpathSync(path) !== path || !info.isDirectory() || info.isSymbolicLink()
+        || info.uid !== process.getuid?.() || (info.mode & 0o777) !== 0o700)
+        fail('staging directory is not private and canonical');
+}
+function privateSealParent(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    chmodSync(path, 0o700);
+    privateDirectory(path);
+}
+function present(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        return false;
+    }
+}
+function removeSidecar(path) {
+    let info;
+    try {
+        info = lstatSync(path);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw error;
+    }
+    if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.uid !== process.getuid?.())
+        fail('ledger sidecar is not a private regular file');
+    unlinkSync(path);
+}
+function exact(value, keys) {
+    return !!value && typeof value === 'object' && Object.getPrototypeOf(value) === Object.prototype
+        && Reflect.ownKeys(value).length === keys.length && keys.every(key => Object.hasOwn(value, key))
+        && Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item);
+}
+function sealIdentity(value) {
+    return exact(value, ['path', 'dev', 'ino']) && canonical(value.path)
+        && Number.isSafeInteger(value.dev) && Number(value.dev) >= 0
+        && Number.isSafeInteger(value.ino) && Number(value.ino) >= 0;
+}
+/** Read back a staged seal written by resealLinuxRunnerState. The body records
+ * physical staging dev/ino next to the logical live paths, so this proves the
+ * reusable ref, the tree and the ledger all still describe the same state. */
+function readStagedSeal(path) {
+    const info = lstatSync(path);
+    if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.uid !== process.getuid?.()
+        || (info.mode & 0o777) !== 0o600 || info.size > 16_384)
+        fail('existing seal is not a private canonical file');
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const opened = fstatSync(fd);
+        if (opened.dev !== info.dev || opened.ino !== info.ino)
+            fail('existing seal changed while being read');
+        const bytes = readFileSync(fd);
+        const body = JSON.parse(bytes.toString('utf8'));
+        if (!exact(body, SEAL_KEYS) || body.schemaVersion !== 1 || body.protocol !== 'dsh-linux-runner-state/v1'
+            || typeof body.id !== 'string' || !UUID.test(body.id) || body.kind !== 'verification'
+            || body.uid !== process.getuid?.() || !sealIdentity(body.stateRoot) || !sealIdentity(body.ledger)
+            || body.ledgerSchemaVersion !== 9 || typeof body.schemaSha256 !== 'string' || !DIGEST.test(body.schemaSha256))
+            fail('existing seal body differs');
+        const after = lstatSync(path);
+        if (after.dev !== info.dev || after.ino !== info.ino || after.nlink !== 1)
+            fail('existing seal changed while being read');
+        return { body: body, bytes };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Prove `ref` is the staged seal and still binds the staging copy and the live
+ * locations. Runs before any ledger mutation and again before returning it. */
+function assertReusableSeal(input, value) {
+    let ref;
+    try {
+        ref = validateLinuxRunnerStateSeal(value);
+    }
+    catch {
+        fail('invalid handover input');
+    }
+    if (ref.path !== input.liveSealPath)
+        fail('existing seal does not bind the live seal path');
+    if (!present(input.stageSealPath))
+        fail('existing seal is missing from the staging copy');
+    const { body, bytes } = readStagedSeal(input.stageSealPath);
+    if (sha(bytes) !== ref.sha256)
+        fail('existing seal reference differs from the staged seal');
+    const ledgerPath = join(input.stageStateRoot, 'ledger.sqlite');
+    if (body.stateRoot.path !== input.liveStateRoot || body.ledger.path !== join(input.liveStateRoot, 'ledger.sqlite'))
+        fail('existing seal logical locations differ from the handover');
+    let digest;
+    try {
+        digest = linuxRunnerStateSchemaDigest(ledgerPath);
+    }
+    catch (error) {
+        fail(`existing seal ledger is not sealable (${error.message})`);
+    }
+    if (body.schemaSha256 !== digest)
+        fail('existing seal schema digest differs from the staged ledger');
+    const root = lstatSync(input.stageStateRoot), ledger = lstatSync(ledgerPath);
+    if (body.stateRoot.dev !== root.dev || body.stateRoot.ino !== root.ino
+        || body.ledger.dev !== ledger.dev || body.ledger.ino !== ledger.ino)
+        fail('existing seal identities differ from the staging copy');
+    return ref;
+}
+export function migrateLinuxVerifierRunnerState(input) {
+    if (process.platform !== 'linux' || !process.getuid?.())
+        fail('requires non-root Linux');
+    if (!input || typeof input !== 'object' || Object.getPrototypeOf(input) !== Object.prototype
+        || Reflect.ownKeys(input).some(key => !['name', 'stageStateRoot', 'stageSealPath', 'liveStateRoot', 'liveSealPath',
+            'oldAuthorityDigest', 'newAuthorityDigest', 'oldWorkspace', 'existingSeal', 'expiresAt', 'maxRuns',
+            'maxTotalDurationMs', 'now'].includes(String(key)))
+        || typeof input.name !== 'string' || !NAME.test(input.name)
+        || !canonical(input.stageStateRoot) || !canonical(input.stageSealPath)
+        || !canonical(input.liveStateRoot) || !canonical(input.liveSealPath)
+        || (input.oldWorkspace !== undefined && !canonical(input.oldWorkspace))
+        || !DIGEST.test(input.oldAuthorityDigest) || !DIGEST.test(input.newAuthorityDigest)
+        || input.oldAuthorityDigest === input.newAuthorityDigest
+        || !positive(input.expiresAt, Number.MAX_SAFE_INTEGER)
+        || !positive(input.maxRuns, 10_000) || !positive(input.maxTotalDurationMs, 86_400_000)
+        || !Number.isSafeInteger(input.now) || input.now < 0)
+        fail('invalid handover input');
+    const oldWorkspace = input.oldWorkspace ?? input.liveStateRoot;
+    if (input.stageSealPath === input.stageStateRoot || input.stageSealPath.startsWith(input.stageStateRoot + '/')
+        || input.stageStateRoot.startsWith(input.stageSealPath + '/')
+        || input.liveSealPath === input.liveStateRoot || input.liveSealPath.startsWith(input.liveStateRoot + '/')
+        || input.liveStateRoot.startsWith(input.liveSealPath + '/'))
+        fail('state and seal paths are nested');
+    privateDirectory(input.stageStateRoot);
+    privateDirectory(dirname(input.stageStateRoot));
+    const ledgerPath = join(input.stageStateRoot, 'ledger.sqlite');
+    let staged;
+    try {
+        staged = lstatSync(ledgerPath);
+    }
+    catch {
+        fail('verifier ledger is missing from the staging copy');
+    }
+    if (!staged.isFile() || staged.isSymbolicLink() || staged.uid !== process.getuid() || (staged.mode & 0o777) !== 0o600 || staged.nlink !== 1)
+        fail('verifier ledger is not private and canonical');
+    // Reuse path: the staged seal is expected, but only the exact caller-published
+    // reference that still binds this copy and the live locations is accepted.
+    const existingSeal = input.existingSeal === undefined ? undefined : assertReusableSeal(input, input.existingSeal);
+    if (existingSeal === undefined && present(input.stageSealPath))
+        fail('staging state was already handed over');
+    // Opening through the current ledger brings any older schema to v9 (adding the
+    // migrated column) using the shipped migration chain; the handover then only
+    // performs its own audited, authority-specific rewrite.
+    const migrated = new IsolationLedger(ledgerPath, { now: () => input.now });
+    migrated.close();
+    let activeSettled = 0, jobsMigrated = 0;
+    const database = new DatabaseSync(ledgerPath, { enableForeignKeyConstraints: true });
+    try {
+        database.exec('PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000; PRAGMA synchronous = FULL;');
+        database.exec('BEGIN IMMEDIATE');
+        try {
+            if (database.prepare('PRAGMA user_version').get()?.user_version !== 9
+                || database.prepare("SELECT value FROM schema_meta WHERE key='schema-version'").get()?.value !== '9')
+                fail('ledger is not schema 9');
+            const grant = database.prepare('SELECT digest, revision, expires_at, max_runs, max_total_duration_ms, revoked, principal_digest, principal_record_id, principal_version, workspace, agent_preset FROM isolation_grants WHERE id=?').get('verification');
+            if (!grant)
+                fail('verification grant is missing from the staged ledger');
+            if (grant.revision !== 1 || grant.principal_version !== 1 || grant.agent_preset !== 'verification'
+                || grant.principal_digest !== input.oldAuthorityDigest
+                || grant.principal_record_id !== `verification:${input.oldAuthorityDigest}`
+                || grant.workspace !== oldWorkspace)
+                fail('staged verification grant does not match the live authority');
+            if (database.prepare("SELECT 1 FROM isolation_jobs WHERE backend_kind='linux-native' LIMIT 1").get())
+                fail('staged ledger already contains linux-native jobs');
+            const counts = database.prepare('SELECT COUNT(*) AS total, COALESCE(SUM(CASE WHEN migrated=1 THEN 1 ELSE 0 END),0) AS done FROM isolation_jobs').get();
+            if (counts.total > 0 && counts.done === counts.total)
+                fail('staged ledger was already handed over');
+            if (counts.done !== 0)
+                fail('staged ledger is partially migrated');
+            jobsMigrated = counts.total;
+            const active = database.prepare("SELECT id, version, backend_kind, dispatch_attempted, creation_witness_json FROM isolation_jobs WHERE status IN ('prepared','running')").all();
+            const audit = database.prepare('INSERT INTO isolation_audit(occurred_at, action, job_id, grant_id, detail) VALUES (?, ?, ?, ?, ?)');
+            const settle = database.prepare("UPDATE isolation_jobs SET status='unknown', result_json=?, creation_witness_json=NULL, version=version+1, updated_at=? WHERE id=? AND version=? AND status IN ('prepared','running')");
+            for (const job of active) {
+                audit.run(input.now, 'backend-handover-witness-retired', job.id, 'verification', JSON.stringify({ backend: job.backend_kind, dispatchAttempted: job.dispatch_attempted,
+                    witnessSha256: job.creation_witness_json === null ? null : sha(job.creation_witness_json) }));
+                const result = { jobId: job.id, status: 'unknown', quiescent: false, stdout: '', stderr: '', artifacts: [], reason: 'verification-recovery-no-replay' };
+                const changed = settle.run(JSON.stringify(result), input.now, job.id, job.version);
+                if (changed.changes !== 1)
+                    fail('active job settlement changed an unexpected row');
+                activeSettled += 1;
+            }
+            // Identity five columns of every historical row stay untouched; the row is
+            // only fenced from replay, capacity and recovery. Terminal rows keep their
+            // witnesses and results byte-for-byte.
+            const flagged = database.prepare('UPDATE isolation_jobs SET migrated=1 WHERE migrated=0').run();
+            if (flagged.changes !== jobsMigrated)
+                fail('job migration count differs');
+            const next = {
+                principalDigest: input.newAuthorityDigest,
+                principalRecordId: `verification:${input.newAuthorityDigest}`,
+                principalVersion: 1,
+                workspace: input.liveStateRoot,
+                agentPreset: 'verification',
+                id: 'verification', revision: 1,
+                expiresAt: input.expiresAt, maxRuns: input.maxRuns, maxTotalDurationMs: input.maxTotalDurationMs,
+            };
+            const rewritten = database.prepare('UPDATE isolation_grants SET digest=?, revision=1, expires_at=?, max_runs=?, max_total_duration_ms=?, revoked=0, revoke_reason=NULL, principal_digest=?, principal_record_id=?, principal_version=?, workspace=?, agent_preset=? WHERE id=?')
+                .run(grantDigest(next), input.expiresAt, input.maxRuns, input.maxTotalDurationMs, next.principalDigest, next.principalRecordId, next.principalVersion, next.workspace, next.agentPreset, 'verification');
+            if (rewritten.changes !== 1)
+                fail('verification grant rewrite changed an unexpected row');
+            // Retire the Docker-era controller lease in the same transaction. The
+            // staged row still names the old owner UUID with a wall-clock expiry, so
+            // claimController would reject the new owner until that TTL lapsed; an
+            // expired lease makes the first native claim fence forward immediately.
+            const retired = database.prepare('UPDATE isolation_controller SET expires_at=? WHERE singleton=1').run(input.now);
+            if (retired.changes > 1)
+                fail('controller retirement changed an unexpected row');
+            const backends = database.prepare('SELECT DISTINCT backend_kind AS backend FROM isolation_jobs ORDER BY backend_kind').all();
+            audit.run(input.now, 'backend-handover-controller-retired', null, 'verification', JSON.stringify({ leasesRetired: retired.changes }));
+            audit.run(input.now, 'backend-handover', null, 'verification', JSON.stringify({ name: input.name, from: backends.map(item => item.backend), to: 'linux-native',
+                jobs: jobsMigrated, active: activeSettled,
+                fromAuthority: input.oldAuthorityDigest, toAuthority: input.newAuthorityDigest }));
+            database.exec('COMMIT');
+        }
+        catch (error) {
+            try {
+                database.exec('ROLLBACK');
+            }
+            catch { /* Preserve the original failure. */ }
+            throw error;
+        }
+        const checkpoint = database.prepare('PRAGMA wal_checkpoint(TRUNCATE)').get();
+        if (!checkpoint || checkpoint.busy !== 0)
+            fail('ledger checkpoint did not complete');
+    }
+    finally {
+        database.close();
+    }
+    if (present(`${ledgerPath}-journal`))
+        fail('staged ledger left a rollback journal behind');
+    removeSidecar(`${ledgerPath}-wal`);
+    removeSidecar(`${ledgerPath}-shm`);
+    chmodSync(ledgerPath, 0o600);
+    if (existingSeal !== undefined) {
+        // The published seal is returned unchanged, so prove the rewrite left the
+        // sealed identities and schema exactly as they were before the transaction.
+        return Object.freeze({ seal: assertReusableSeal(input, existingSeal), jobsMigrated, activeSettled });
+    }
+    privateSealParent(dirname(input.stageSealPath));
+    const seal = resealLinuxRunnerState({
+        stateRoot: input.stageStateRoot, sealPath: input.stageSealPath, kind: 'verification',
+        logicalStateRoot: input.liveStateRoot, logicalSealPath: input.liveSealPath,
+    });
+    return Object.freeze({ seal, jobsMigrated, activeSettled });
+}
+/** The repository runner is linux-native only: its state is a brand-new empty
+ * sealed ledger, even when verifier ledgers carry migrated Docker history. */
+export function prepareLinuxRepositoryHandoverState(input) {
+    if (process.platform !== 'linux' || !process.getuid?.())
+        fail('requires non-root Linux');
+    if (!input || typeof input !== 'object' || Object.getPrototypeOf(input) !== Object.prototype
+        || Reflect.ownKeys(input).length !== 4
+        || !canonical(input.stageStateRoot) || !canonical(input.stageSealPath)
+        || !canonical(input.liveStateRoot) || !canonical(input.liveSealPath))
+        fail('invalid repository handover input');
+    privateDirectory(dirname(input.stageStateRoot));
+    mkdirSync(input.stageStateRoot, { recursive: true, mode: 0o700 });
+    chmodSync(input.stageStateRoot, 0o700);
+    privateDirectory(input.stageStateRoot);
+    privateSealParent(dirname(input.stageSealPath));
+    return resealLinuxRunnerState({
+        stateRoot: input.stageStateRoot, sealPath: input.stageSealPath, kind: 'repository', requireEmpty: true,
+        logicalStateRoot: input.liveStateRoot, logicalSealPath: input.liveSealPath,
+    });
+}
+/**
+ * Publish the verification seal over an unsealed staging copy before the new
+ * owner authority digest is compiled, then let migrateLinuxVerifierRunnerState
+ * (given this exact ref as `existingSeal`) perform the audited rewrite.
+ *
+ * Opening through the shipped ledger upgrades an older staging copy to v9 with
+ * the same chain the handover would use; that path is data-only, so the schema
+ * digest sealed here survives the later grant/job rewrite. One-shot by design:
+ * an existing staged seal means the handover already ran, and a staging copy
+ * whose grant is not the live Docker-era owner grant is never sealed.
+ */
+function verifierPreparationInput(input) {
+    const uid = process.getuid?.();
+    if (process.platform !== 'linux' || !uid)
+        fail('requires non-root Linux');
+    if (!input || typeof input !== 'object' || Object.getPrototypeOf(input) !== Object.prototype
+        || Reflect.ownKeys(input).length !== 5
+        || !['name', 'stageStateRoot', 'stageSealPath', 'liveStateRoot', 'liveSealPath'].every(key => Object.hasOwn(input, key))
+        || typeof input.name !== 'string' || !NAME.test(input.name)
+        || !canonical(input.stageStateRoot) || !canonical(input.stageSealPath)
+        || !canonical(input.liveStateRoot) || !canonical(input.liveSealPath))
+        fail('invalid verifier handover preparation input');
+    if (input.stageSealPath === input.stageStateRoot || input.stageSealPath.startsWith(input.stageStateRoot + '/')
+        || input.stageStateRoot.startsWith(input.stageSealPath + '/')
+        || input.liveSealPath === input.liveStateRoot || input.liveSealPath.startsWith(input.liveStateRoot + '/')
+        || input.liveStateRoot.startsWith(input.liveSealPath + '/'))
+        fail('state and seal paths are nested');
+    return uid;
+}
+export function prepareLinuxVerifierHandoverState(input) {
+    const uid = verifierPreparationInput(input);
+    privateDirectory(dirname(input.stageStateRoot));
+    privateDirectory(input.stageStateRoot);
+    const ledgerPath = join(input.stageStateRoot, 'ledger.sqlite');
+    let staged;
+    try {
+        staged = lstatSync(ledgerPath);
+    }
+    catch {
+        fail('verifier ledger is missing from the staging copy');
+    }
+    if (!staged.isFile() || staged.isSymbolicLink() || staged.uid !== uid || (staged.mode & 0o777) !== 0o600 || staged.nlink !== 1)
+        fail('verifier ledger is not private and canonical');
+    // Publish exactly once: a staged seal is the handover's fingerprint, so it is
+    // never replaced on trust (reseal would otherwise unlink it).
+    if (present(input.stageSealPath))
+        fail('staging state was already handed over');
+    // The caller's `now` belongs to the audited handover; this pre-seal step only
+    // brings the schema forward, so it deliberately uses the ledger's own clock.
+    new IsolationLedger(ledgerPath).close();
+    const database = new DatabaseSync(ledgerPath, { enableForeignKeyConstraints: true });
+    let grant;
+    try {
+        database.exec('PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000; PRAGMA synchronous = FULL;');
+        grant = database.prepare('SELECT revision, expires_at, max_runs, max_total_duration_ms, revoked, principal_digest,'
+            + ' principal_record_id, principal_version, agent_preset FROM isolation_grants WHERE id=?').get('verification');
+    }
+    finally {
+        try {
+            database.exec('PRAGMA wal_checkpoint(TRUNCATE)');
+        }
+        catch { /* Sidecars are probed below. */ }
+        database.close();
+    }
+    removeSidecar(`${ledgerPath}-wal`);
+    removeSidecar(`${ledgerPath}-shm`);
+    chmodSync(ledgerPath, 0o600);
+    if (!grant)
+        fail('verifier grant is not the staged owner grant');
+    const { revision, expires_at: expiresAt, max_runs: maxRuns, max_total_duration_ms: maxTotalDurationMs, revoked, principal_digest: principalDigest, principal_record_id: principalRecordId, principal_version: principalVersion, agent_preset: preset } = grant;
+    if (revision !== 1 || principalVersion !== 1 || preset !== 'verification' || revoked !== 0
+        || typeof principalDigest !== 'string' || !DIGEST.test(principalDigest)
+        || principalRecordId !== `verification:${principalDigest}`)
+        fail('verifier grant is not the staged owner grant');
+    // The caps are the ceilings the native runner config can express, so oversized
+    // Docker-era terms are refused with their own cause instead of being reported
+    // as an identity mismatch.
+    if (!positive(expiresAt, Number.MAX_SAFE_INTEGER)
+        || !positive(maxRuns, 10_000) || !positive(maxTotalDurationMs, 86_400_000))
+        fail('verifier grant exceeds the native handover budget');
+    privateSealParent(dirname(input.stageSealPath));
+    const seal = resealLinuxRunnerState({
+        stateRoot: input.stageStateRoot, sealPath: input.stageSealPath, kind: 'verification', requireEmpty: false,
+        logicalStateRoot: input.liveStateRoot, logicalSealPath: input.liveSealPath,
+    });
+    return Object.freeze({
+        seal,
+        grant: Object.freeze({ principalDigest, revision: 1, expiresAt, maxRuns, maxTotalDurationMs }),
+    });
+}
+/**
+ * One-shot staging seam for one verifier role of a Docker-era owner Home.
+ *
+ * The branch is decided from the staged tree, before anything is written: a
+ * staged ledger means the role has Docker-era verifier history and must go
+ * through prepareLinuxVerifierHandoverState (which upgrades it to v9 and
+ * publishes the seal its grant rewrite needs). A role the Docker-era Home never
+ * ran has no ledger — the live Home's verifier state directories are empty
+ * because that history lives in the Docker-era control plane — so its native
+ * state is exactly a fresh install's: an empty v9 ledger sealed under
+ * `logicalStateRoot`/`logicalSealPath`. The caller cannot request the weaker
+ * path for a role that has history, and a staged seal without a ledger is
+ * refused instead of overwritten.
+ */
+export function prepareLinuxVerifierStagingState(input) {
+    verifierPreparationInput(input);
+    if (!present(input.stageStateRoot)) {
+        mkdirSync(input.stageStateRoot, { recursive: true, mode: 0o700 });
+        chmodSync(input.stageStateRoot, 0o700);
+    }
+    privateDirectory(dirname(input.stageStateRoot));
+    privateDirectory(input.stageStateRoot);
+    const ledgerPath = join(input.stageStateRoot, 'ledger.sqlite');
+    if (present(ledgerPath)) {
+        const handedOver = prepareLinuxVerifierHandoverState(input);
+        return Object.freeze({ mode: 'handover', seal: handedOver.seal, grant: handedOver.grant });
+    }
+    if (present(input.stageSealPath))
+        fail('staging state was already sealed or handed over');
+    privateSealParent(dirname(input.stageSealPath));
+    const seal = resealLinuxRunnerState({
+        stateRoot: input.stageStateRoot, sealPath: input.stageSealPath, kind: 'verification', requireEmpty: true,
+        logicalStateRoot: input.liveStateRoot, logicalSealPath: input.liveSealPath,
+    });
+    return Object.freeze({ mode: 'fresh', seal });
+}
+//# sourceMappingURL=linux-runner-state-migration.js.map