@dsh-enhanced/assistant-recovery 0.1.24 → 0.1.30

package/lib/index.d.ts

@@ -12,6 +12,7 @@ export * from './catalog.js';
 export { ConfigSchema, normalizeRecoveryConfig, } from './config.js';
 export type { NormalizedConfig, NormalizedRecoveryJob, RecoveryActivationState, RecoveryJobConfig, } from './config.js';
 export * from './executor.js';
+export * from './operator.js';
 export * from './port.js';
 export { AssistantRecoveryError, recoveryActivationPlanDigest, recoveryAutomationDefinition, recoveryAutomationId, } from './service.js';
 export * from './store.js';

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,IAAI,oCAAoC,CAAA;AACrD,eAAO,MAAM,MAAM,UAOlB,CAAA;AACD,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACpD,YAAY,EAAE,UAAU,IAAI,uBAAuB,EAAE,CAAA;AACrD,cAAc,kBAAkB,CAAA;AAChC,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,OAAO,EACL,YAAY,EACZ,uBAAuB,GACxB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AACpB,cAAc,eAAe,CAAA;AAC7B,cAAc,WAAW,CAAA;AACzB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAE5D;AAED,eAAe,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,IAAI,oCAAoC,CAAA;AACrD,eAAO,MAAM,MAAM,UAOlB,CAAA;AACD,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACpD,YAAY,EAAE,UAAU,IAAI,uBAAuB,EAAE,CAAA;AACrD,cAAc,kBAAkB,CAAA;AAChC,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,OAAO,EACL,YAAY,EACZ,uBAAuB,GACxB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,aAAa,CAAA;AACpB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,WAAW,CAAA;AACzB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAE5D;AAED,eAAe,wBAAwB,CAAA"}

package/lib/index.js

@@ -15,6 +15,7 @@ export * from './automation-executor.js';
 export * from './catalog.js';
 export { ConfigSchema, normalizeRecoveryConfig, } from './config.js';
 export * from './executor.js';
+export * from './operator.js';
 export * from './port.js';
 export { AssistantRecoveryError, recoveryActivationPlanDigest, recoveryAutomationDefinition, recoveryAutomationId, } from './service.js';
 export * from './store.js';

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE/D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,IAAI,GAAG,iCAAiC,CAAA;AACrD,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,sBAAsB;IACtB,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,6BAA6B;IAC7B,iBAAiB;CAClB,CAAA;AACD,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAEpD,cAAc,kBAAkB,CAAA;AAChC,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,OAAO,EACL,YAAY,EACZ,uBAAuB,GACxB,MAAM,aAAa,CAAA;AAOpB,cAAc,eAAe,CAAA;AAC7B,cAAc,WAAW,CAAA;AACzB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAkB;IACpD,IAAI,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED,eAAe,wBAAwB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE/D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,IAAI,GAAG,iCAAiC,CAAA;AACrD,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,sBAAsB;IACtB,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,6BAA6B;IAC7B,iBAAiB;CAClB,CAAA;AACD,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAEpD,cAAc,kBAAkB,CAAA;AAChC,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,OAAO,EACL,YAAY,EACZ,uBAAuB,GACxB,MAAM,aAAa,CAAA;AAOpB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,WAAW,CAAA;AACzB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,cAAc,CAAA;AACrB,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAkB;IACpD,IAAI,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED,eAAe,wBAAwB,CAAA"}

package/lib/operator.d.ts

@@ -0,0 +1,33 @@
+import { recoverySchemaVersion } from './sqlite.js';
+import type { RecoveryBootstrapState } from './types.js';
+export declare const RECOVERY_OPERATOR_SNAPSHOT_PROTOCOL: "assistant-recovery/operator-snapshot/v1";
+export type RecoveryOperatorSnapshotErrorCode = 'invalid-path' | 'missing-parent' | 'missing-file' | 'unsafe-parent' | 'unsafe-file' | 'unsafe-wal' | 'unsafe-shm' | 'database-busy' | 'database-unavailable' | 'schema-too-old' | 'schema-too-new' | 'database-corrupt' | 'database-drift' | 'wal-drift' | 'shm-drift';
+export declare class RecoveryOperatorSnapshotError extends Error {
+    readonly code: RecoveryOperatorSnapshotErrorCode;
+    constructor(code: RecoveryOperatorSnapshotErrorCode, message: string);
+}
+export interface RecoveryOperatorDatabaseIdentity {
+    /** Decimal OS device id captured from the opened database file. */
+    readonly device: string;
+    /** Decimal OS inode id captured from the opened database file. */
+    readonly inode: string;
+    readonly size: number;
+    /** Local consistency digest over the main database and its exact WAL bytes, if present. */
+    readonly digest: string;
+}
+export interface RecoveryOperatorSnapshot {
+    readonly protocol: typeof RECOVERY_OPERATOR_SNAPSHOT_PROTOCOL;
+    readonly schemaVersion: typeof recoverySchemaVersion;
+    readonly database: RecoveryOperatorDatabaseIdentity;
+    readonly bootstrap: RecoveryBootstrapState;
+    /** Canonical SHA-256 consistency digest. It is not an authenticity attestation. */
+    readonly snapshotDigest: string;
+}
+/**
+ * Read the already-existing schema-v4 bootstrap state without creating,
+ * migrating, chmodding, checkpointing, or changing journal mode. The returned
+ * digests detect local source drift; they do not prove authenticity against a
+ * same-UID process or privileged attacker.
+ */
+export declare function inspectRecoveryOperatorSnapshot(databasePath: string): RecoveryOperatorSnapshot;
+//# sourceMappingURL=operator.d.ts.map

package/lib/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAgC,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEtF,eAAO,MAAM,mCAAmC,EAC5C,yCAAkD,CAAA;AAEtD,MAAM,MAAM,iCAAiC,GACvC,cAAc,GACd,gBAAgB,GAChB,cAAc,GACd,eAAe,GACf,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,WAAW,GACX,WAAW,CAAA;AAEjB,qBAAa,6BAA8B,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,iCAAiC;gBAAvC,IAAI,EAAE,iCAAiC,EAAE,OAAO,EAAE,MAAM;CAI9E;AAED,MAAM,WAAW,gCAAgC;IAC/C,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,mCAAmC,CAAA;IAC7D,QAAQ,CAAC,aAAa,EAAE,OAAO,qBAAqB,CAAA;IACpD,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAA;IACnD,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;IAC1C,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AA0dD;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,MAAM,GAAG,wBAAwB,CAiJ9F"}

package/lib/operator.js

@@ -0,0 +1,678 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { closeSync, constants, existsSync, fstatSync, lstatSync, mkdtempSync, openSync, readdirSync, readSync, realpathSync, rmSync, rmdirSync, unlinkSync, writeSync, } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { DatabaseSync } from 'node:sqlite';
+import { canonicalRecoveryBootstrapAttestationSet, RecoveryBootstrapAttestationError, recoveryBootstrapAttestationSetDigest, } from './attestation.js';
+import { recoverySchemaVersion } from './sqlite.js';
+export const RECOVERY_OPERATOR_SNAPSHOT_PROTOCOL = 'assistant-recovery/operator-snapshot/v1';
+export class RecoveryOperatorSnapshotError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'RecoveryOperatorSnapshotError';
+    }
+}
+const DIGEST = /^[a-f0-9]{64}$/u;
+const FAILURE_CODE = /^[a-z0-9][a-z0-9.-]{0,63}$/u;
+const FILE_READ_BUFFER_BYTES = 64 * 1024;
+const inodeBindSupported = process.platform === 'linux';
+const procSelfFd = '/proc/self/fd';
+function canonicalJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    const record = value;
+    return `{${Object.keys(record).sort().map(key => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(',')}}`;
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
+        for (const child of Object.values(value))
+            deepFreeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+function fail(code, message) {
+    throw new RecoveryOperatorSnapshotError(code, message);
+}
+function fileExists(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function hasControlCharacter(value) {
+    return [...value].some((character) => {
+        const point = character.codePointAt(0);
+        return point <= 0x1f || point === 0x7f;
+    });
+}
+function pinPrivateParent(path) {
+    let descriptor;
+    try {
+        descriptor = openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            fail('missing-parent', 'assistant-recovery operator snapshot parent does not exist');
+        }
+        fail('unsafe-parent', 'assistant-recovery operator snapshot parent is unavailable');
+    }
+    try {
+        const pathname = lstatSync(path, { bigint: true });
+        const metadata = fstatSync(descriptor, { bigint: true });
+        const uid = process.getuid?.();
+        const physical = realpathSync(path);
+        if (!pathname.isDirectory() || pathname.isSymbolicLink() || !metadata.isDirectory()
+            || pathname.dev !== metadata.dev || pathname.ino !== metadata.ino || physical !== path
+            || uid === undefined || metadata.uid !== BigInt(uid)
+            || (metadata.mode & 3647n) !== 0n || (metadata.mode & 320n) !== 320n) {
+            fail('unsafe-parent', 'assistant-recovery operator snapshot parent must be a private owner directory without symlinks');
+        }
+        const pinned = { descriptor, path, device: metadata.dev, inode: metadata.ino, mode: metadata.mode };
+        descriptor = undefined;
+        return pinned;
+    }
+    catch (error) {
+        if (error instanceof RecoveryOperatorSnapshotError)
+            throw error;
+        fail('unsafe-parent', 'assistant-recovery operator snapshot parent cannot be resolved');
+    }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
+    throw new Error('unreachable');
+}
+function connectionInodes(exclude) {
+    let entries;
+    try {
+        entries = readdirSync(procSelfFd);
+    }
+    catch {
+        fail('database-unavailable', 'assistant-recovery cannot inspect SQLite connection descriptors');
+    }
+    const inodes = [];
+    for (const entry of entries) {
+        const descriptor = Number(entry);
+        if (!Number.isInteger(descriptor) || descriptor <= 2 || exclude.has(descriptor))
+            continue;
+        let metadata;
+        try {
+            metadata = fstatSync(descriptor, { bigint: true });
+        }
+        catch {
+            continue;
+        }
+        if (metadata.isFile())
+            inodes.push({ device: metadata.dev, inode: metadata.ino });
+    }
+    return inodes;
+}
+function assertConnectionBound(files, exclude) {
+    const held = connectionInodes(exclude);
+    for (const file of files) {
+        if (!held.some(inode => inode.device === file.device && inode.inode === file.inode)) {
+            fail('database-drift', 'assistant-recovery SQLite connection is not bound to its pinned inode');
+        }
+    }
+}
+function pinTempDirectory(path) {
+    let descriptor;
+    try {
+        descriptor = openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        const pathname = lstatSync(path, { bigint: true });
+        const metadata = fstatSync(descriptor, { bigint: true });
+        const uid = process.getuid?.();
+        if (!pathname.isDirectory() || pathname.isSymbolicLink() || !metadata.isDirectory()
+            || pathname.dev !== metadata.dev || pathname.ino !== metadata.ino
+            || (metadata.mode & 4095n) !== 448n
+            || uid === undefined || metadata.uid !== BigInt(uid)) {
+            fail('database-unavailable', 'assistant-recovery temporary snapshot directory is unsafe');
+        }
+        const pinned = { path, descriptor, device: metadata.dev, inode: metadata.ino };
+        descriptor = undefined;
+        return pinned;
+    }
+    catch (error) {
+        if (error instanceof RecoveryOperatorSnapshotError)
+            throw error;
+        fail('database-unavailable', 'assistant-recovery temporary snapshot directory cannot be pinned');
+    }
+    finally {
+        if (descriptor !== undefined)
+            try {
+                closeSync(descriptor);
+            }
+            catch { }
+    }
+    throw new Error('unreachable');
+}
+function copyAndPin(source, target, driftCode) {
+    const buffer = Buffer.allocUnsafe(FILE_READ_BUFFER_BYTES);
+    let destination;
+    try {
+        destination = openSync(target, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600);
+        let position = 0n;
+        while (position < source.size) {
+            const length = Number(source.size - position > BigInt(buffer.length) ? BigInt(buffer.length) : source.size - position);
+            const count = readSync(source.descriptor, buffer, 0, length, Number(position));
+            if (count <= 0)
+                fail(driftCode, `${basename(source.path)} changed while it was copied`);
+            let written = 0;
+            while (written < count)
+                written += writeSync(destination, buffer, written, count - written);
+            position += BigInt(count);
+        }
+    }
+    finally {
+        if (destination !== undefined)
+            try {
+                closeSync(destination);
+            }
+            catch { }
+    }
+    const copied = pinPrivateFile(target, 'unsafe-file');
+    if (copied.size !== source.size || copied.digest !== source.digest) {
+        try {
+            closeSync(copied.descriptor);
+        }
+        catch { }
+        fail(driftCode, `${basename(source.path)} private copy does not match its pinned source`);
+    }
+    return copied;
+}
+function removePinnedTemp(temp) {
+    const anchor = `${procSelfFd}/${temp.descriptor}`;
+    for (const name of ['recovery.sqlite', 'recovery.sqlite-wal', 'recovery.sqlite-shm']) {
+        try {
+            unlinkSync(`${anchor}/${name}`);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                fail('database-drift', 'assistant-recovery private snapshot copy cannot be removed');
+            }
+        }
+    }
+    if (readdirSync(anchor).length !== 0)
+        fail('database-drift', 'assistant-recovery private snapshot directory is not empty');
+    const pathname = lstatSync(temp.path, { bigint: true });
+    const metadata = fstatSync(temp.descriptor, { bigint: true });
+    if (pathname.dev !== temp.device || pathname.ino !== temp.inode
+        || metadata.dev !== temp.device || metadata.ino !== temp.inode) {
+        fail('database-drift', 'assistant-recovery private snapshot directory was retargeted');
+    }
+    closeSync(temp.descriptor);
+    rmdirSync(temp.path);
+}
+function pinnedParentMatches(parent) {
+    try {
+        const pathname = lstatSync(parent.path, { bigint: true });
+        const descriptor = fstatSync(parent.descriptor, { bigint: true });
+        return pathname.isDirectory() && !pathname.isSymbolicLink() && descriptor.isDirectory()
+            && pathname.dev === parent.device && pathname.ino === parent.inode
+            && descriptor.dev === parent.device && descriptor.ino === parent.inode
+            && descriptor.mode === parent.mode;
+    }
+    catch {
+        return false;
+    }
+}
+function digestDescriptor(descriptor, size) {
+    const digest = createHash('sha256');
+    const buffer = Buffer.allocUnsafe(FILE_READ_BUFFER_BYTES);
+    let offset = 0n;
+    while (offset < size) {
+        const remaining = size - offset;
+        const requested = remaining > BigInt(buffer.byteLength) ? buffer.byteLength : Number(remaining);
+        const count = readSync(descriptor, buffer, 0, requested, Number(offset));
+        if (count <= 0)
+            fail('database-drift', 'assistant-recovery database changed while it was inspected');
+        digest.update(buffer.subarray(0, count));
+        offset += BigInt(count);
+    }
+    return digest.digest('hex');
+}
+function pinPrivateFile(path, unsafeCode) {
+    let descriptor;
+    try {
+        descriptor = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+        const metadata = fstatSync(descriptor, { bigint: true });
+        const uid = process.getuid?.();
+        if (!metadata.isFile() || metadata.nlink !== 1n
+            || uid === undefined || metadata.uid !== BigInt(uid)
+            || (metadata.mode & 4095n) !== 384n || metadata.size > BigInt(Number.MAX_SAFE_INTEGER)) {
+            fail(unsafeCode, `assistant-recovery ${basename(path)} must be one private owner-readable regular file`);
+        }
+        const pinned = {
+            descriptor,
+            path,
+            device: metadata.dev,
+            inode: metadata.ino,
+            size: metadata.size,
+            mode: metadata.mode,
+            modifiedAt: metadata.mtimeNs,
+            changedAt: metadata.ctimeNs,
+            digest: digestDescriptor(descriptor, metadata.size),
+        };
+        descriptor = undefined;
+        return pinned;
+    }
+    catch (error) {
+        if (error instanceof RecoveryOperatorSnapshotError)
+            throw error;
+        if (error.code === 'ENOENT') {
+            if (unsafeCode === 'unsafe-file') {
+                fail('missing-file', 'assistant-recovery database does not exist');
+            }
+            fail(unsafeCode === 'unsafe-wal' ? 'wal-drift' : 'shm-drift', `assistant-recovery ${basename(path)} disappeared while it was inspected`);
+        }
+        fail(unsafeCode, `assistant-recovery ${basename(path)} could not be opened safely`);
+    }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
+    throw new Error('unreachable');
+}
+function samePinnedFile(before) {
+    try {
+        const path = lstatSync(before.path, { bigint: true });
+        const descriptor = fstatSync(before.descriptor, { bigint: true });
+        return path.isFile() && !path.isSymbolicLink() && path.nlink === 1n
+            && path.dev === before.device && path.ino === before.inode
+            && descriptor.dev === before.device && descriptor.ino === before.inode
+            && descriptor.size === before.size && descriptor.mode === before.mode
+            && descriptor.mtimeNs === before.modifiedAt && descriptor.ctimeNs === before.changedAt
+            && digestDescriptor(before.descriptor, descriptor.size) === before.digest;
+    }
+    catch {
+        return false;
+    }
+}
+function pinnedPathIdentityMatches(file) {
+    try {
+        const path = lstatSync(file.path, { bigint: true });
+        const descriptor = fstatSync(file.descriptor, { bigint: true });
+        return path.isFile() && !path.isSymbolicLink() && path.nlink === 1n
+            && path.dev === file.device && path.ino === file.inode
+            && descriptor.dev === file.device && descriptor.ino === file.inode;
+    }
+    catch {
+        return false;
+    }
+}
+function pinFiles(path) {
+    if (fileExists(`${path}-journal`)) {
+        fail('database-busy', 'assistant-recovery database has an active rollback journal');
+    }
+    const hasWal = fileExists(`${path}-wal`);
+    const hasShm = fileExists(`${path}-shm`);
+    if (hasWal !== hasShm) {
+        fail(hasWal ? 'shm-drift' : 'wal-drift', 'assistant-recovery WAL sidecar set is incomplete');
+    }
+    const database = pinPrivateFile(path, 'unsafe-file');
+    try {
+        if (!hasWal)
+            return { database };
+        const wal = pinPrivateFile(`${path}-wal`, 'unsafe-wal');
+        try {
+            const shm = pinPrivateFile(`${path}-shm`, 'unsafe-shm');
+            return { database, wal, shm };
+        }
+        catch (error) {
+            closeSync(wal.descriptor);
+            throw error;
+        }
+    }
+    catch (error) {
+        closeSync(database.descriptor);
+        throw error;
+    }
+}
+function closePinned(files) {
+    closeSync(files.database.descriptor);
+    if (files.wal !== undefined)
+        closeSync(files.wal.descriptor);
+    if (files.shm !== undefined)
+        closeSync(files.shm.descriptor);
+}
+function assertNoDrift(path, files) {
+    if (!samePinnedFile(files.database)) {
+        fail('database-drift', 'assistant-recovery database changed while it was inspected');
+    }
+    const hasWal = fileExists(`${path}-wal`);
+    const hasShm = fileExists(`${path}-shm`);
+    if ((files.wal === undefined) !== !hasWal || (files.shm === undefined) !== !hasShm) {
+        if ((files.wal === undefined) !== !hasWal)
+            fail('wal-drift', 'assistant-recovery WAL changed while it was inspected');
+        fail('shm-drift', 'assistant-recovery SHM changed while it was inspected');
+    }
+    if (files.wal !== undefined && !samePinnedFile(files.wal)) {
+        fail('wal-drift', 'assistant-recovery WAL changed while it was inspected');
+    }
+    // SQLite may update WAL-index lock/read-mark bytes even through a read-only
+    // connection. File identity, size, mode, and timestamps still detect an
+    // externally replaced, resized, or persisted SHM generation without
+    // misclassifying SQLite's own transient lock bookkeeping as state mutation.
+    if (files.shm !== undefined) {
+        try {
+            const pathState = lstatSync(files.shm.path, { bigint: true });
+            const descriptorState = fstatSync(files.shm.descriptor, { bigint: true });
+            if (!pathState.isFile() || pathState.isSymbolicLink() || pathState.nlink !== 1n
+                || pathState.dev !== files.shm.device || pathState.ino !== files.shm.inode
+                || descriptorState.dev !== files.shm.device || descriptorState.ino !== files.shm.inode
+                || descriptorState.size !== files.shm.size || descriptorState.mode !== files.shm.mode
+                || descriptorState.mtimeNs !== files.shm.modifiedAt || descriptorState.ctimeNs !== files.shm.changedAt) {
+                fail('shm-drift', 'assistant-recovery SHM changed while it was inspected');
+            }
+        }
+        catch (error) {
+            if (error instanceof RecoveryOperatorSnapshotError)
+                throw error;
+            fail('shm-drift', 'assistant-recovery SHM changed while it was inspected');
+        }
+    }
+}
+function boundedFailureCode(value) {
+    if (value === null)
+        return undefined;
+    if (typeof value !== 'string' || value !== value.normalize('NFC').trim()
+        || !FAILURE_CODE.test(value)) {
+        fail('database-corrupt', 'assistant-recovery bootstrap failure code is corrupt');
+    }
+    return value;
+}
+function safeInteger(value, minimum) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < minimum) {
+        fail('database-corrupt', 'assistant-recovery bootstrap numeric state is corrupt');
+    }
+    return value;
+}
+function bootstrapState(row) {
+    if (row === undefined || typeof row.bootstrap_attestations_json !== 'string'
+        || typeof row.bootstrap_attestation_set_digest !== 'string'
+        || !DIGEST.test(row.bootstrap_attestation_set_digest)) {
+        fail('database-corrupt', 'assistant-recovery bootstrap singleton is corrupt');
+    }
+    const status = row.bootstrap_status;
+    if (status !== 'failed' && status !== 'idle' && status !== 'running' && status !== 'succeeded') {
+        fail('database-corrupt', 'assistant-recovery bootstrap status is corrupt');
+    }
+    const generation = safeInteger(row.bootstrap_generation, 0);
+    const updatedAt = safeInteger(row.updated_at, 0);
+    if (status !== 'idle' && generation < 1) {
+        fail('database-corrupt', 'assistant-recovery bootstrap generation is corrupt');
+    }
+    if (row.bootstrap_attestation_valid !== 0 && row.bootstrap_attestation_valid !== 1) {
+        fail('database-corrupt', 'assistant-recovery bootstrap attestation validity is corrupt');
+    }
+    const failureCode = boundedFailureCode(row.bootstrap_failure_code);
+    if ((status === 'failed') !== (failureCode !== undefined)) {
+        fail('database-corrupt', 'assistant-recovery bootstrap failure state is inconsistent');
+    }
+    let attestations;
+    try {
+        const parsed = JSON.parse(row.bootstrap_attestations_json);
+        attestations = canonicalRecoveryBootstrapAttestationSet(parsed);
+    }
+    catch (error) {
+        if (error instanceof RecoveryBootstrapAttestationError || error instanceof SyntaxError) {
+            fail('database-corrupt', 'assistant-recovery bootstrap attestation set is corrupt');
+        }
+        throw error;
+    }
+    const canonical = JSON.stringify(attestations);
+    const actualDigest = recoveryBootstrapAttestationSetDigest(attestations);
+    const storedDigest = row.bootstrap_attestation_set_digest;
+    const valid = row.bootstrap_attestation_valid === 1;
+    if (canonical !== row.bootstrap_attestations_json
+        || !timingSafeEqual(Buffer.from(actualDigest), Buffer.from(storedDigest))
+        || (!valid && attestations.length !== 0) || (status === 'succeeded' && !valid)) {
+        fail('database-corrupt', 'assistant-recovery bootstrap attestation proof is inconsistent');
+    }
+    return deepFreeze({
+        status,
+        ...(failureCode === undefined ? {} : { failureCode }),
+        generation,
+        attestationValid: valid,
+        attestationSetDigest: storedDigest,
+        attestations,
+        updatedAt,
+    });
+}
+function storageDigest(files) {
+    return createHash('sha256').update(canonicalJson({
+        protocol: 'assistant-recovery/operator-database/v1',
+        database: files.database.digest,
+        wal: files.wal?.digest ?? null,
+    })).digest('hex');
+}
+function classifySqliteError(error) {
+    const message = error instanceof Error ? error.message.toLowerCase() : '';
+    const sqlite = error;
+    if (sqlite.errcode === 5 || sqlite.errcode === 6 || /(?:busy|locked)/u.test(message)) {
+        fail('database-busy', 'assistant-recovery database is busy');
+    }
+    if (/(?:malformed|not a database|database disk image|file is encrypted|no such table|no such column|datatype mismatch|constraint)/u.test(message)) {
+        fail('database-corrupt', 'assistant-recovery database is corrupt');
+    }
+    fail('database-unavailable', 'assistant-recovery database could not be inspected');
+}
+/**
+ * Read the already-existing schema-v4 bootstrap state without creating,
+ * migrating, chmodding, checkpointing, or changing journal mode. The returned
+ * digests detect local source drift; they do not prove authenticity against a
+ * same-UID process or privileged attacker.
+ */
+export function inspectRecoveryOperatorSnapshot(databasePath) {
+    if (typeof databasePath !== 'string' || !isAbsolute(databasePath)
+        || resolve(databasePath) !== databasePath || databasePath === '/'
+        || hasControlCharacter(databasePath)) {
+        fail('invalid-path', 'assistant-recovery operator snapshot path must be canonical and absolute');
+    }
+    const parent = dirname(databasePath);
+    const pinnedParent = pinPrivateParent(parent);
+    if (!existsSync(databasePath)) {
+        closeSync(pinnedParent.descriptor);
+        fail('missing-file', 'assistant-recovery database does not exist');
+    }
+    let physical;
+    try {
+        physical = realpathSync(databasePath);
+    }
+    catch {
+        closeSync(pinnedParent.descriptor);
+        fail('unsafe-file', 'assistant-recovery database cannot be resolved');
+    }
+    if (physical !== join(parent, basename(databasePath))) {
+        closeSync(pinnedParent.descriptor);
+        fail('unsafe-file', 'assistant-recovery database path must not contain symlinks');
+    }
+    let files;
+    try {
+        files = pinFiles(databasePath);
+    }
+    catch (error) {
+        closeSync(pinnedParent.descriptor);
+        throw error;
+    }
+    let database;
+    let temporary;
+    let temporaryPath;
+    let copies = [];
+    let transaction = false;
+    let result;
+    let deferredError;
+    const selfDescriptors = () => new Set([
+        pinnedParent.descriptor, files.database.descriptor, files.wal?.descriptor,
+        files.shm?.descriptor, temporary?.descriptor, ...copies.map(file => file.descriptor),
+    ].filter((descriptor) => descriptor !== undefined));
+    try {
+        let bound;
+        let target;
+        // A clean database is opened by its already-pinned inode. A live WAL is
+        // copied into a pinned owner-only directory so SQLite never opens a source
+        // pathname or writes source SHM lock/read-mark state.
+        if (files.wal === undefined) {
+            target = inodeBindSupported
+                ? `file://${procSelfFd}/${files.database.descriptor}?mode=ro&immutable=1`
+                : `${pathToFileURL(databasePath).href}?mode=ro&immutable=1`;
+            bound = [files.database];
+        }
+        else {
+            temporaryPath = mkdtempSync(join(tmpdir(), 'assistant-recovery-operator-snapshot-'));
+            temporary = pinTempDirectory(temporaryPath);
+            const anchor = `${procSelfFd}/${temporary.descriptor}`;
+            const main = copyAndPin(files.database, `${anchor}/recovery.sqlite`, 'database-drift');
+            let wal;
+            try {
+                wal = copyAndPin(files.wal, `${anchor}/recovery.sqlite-wal`, 'wal-drift');
+            }
+            catch (error) {
+                try {
+                    closeSync(main.descriptor);
+                }
+                catch { }
+                ;
+                throw error;
+            }
+            copies = Object.freeze([main, wal]);
+            target = `file://${anchor}/recovery.sqlite?mode=ro`;
+            bound = copies;
+            assertNoDrift(databasePath, files);
+        }
+        assertNoDrift(databasePath, files);
+        if (!pinnedPathIdentityMatches(files.database)) {
+            fail('database-drift', 'assistant-recovery database path changed before open');
+        }
+        database = new DatabaseSync(target, { readOnly: true });
+        if (inodeBindSupported)
+            assertConnectionBound([bound[0]], selfDescriptors());
+        if (!pinnedPathIdentityMatches(files.database)) {
+            fail('database-drift', 'assistant-recovery database path changed during open');
+        }
+        database.exec('PRAGMA query_only = ON; PRAGMA busy_timeout = 0; BEGIN');
+        transaction = true;
+        const queryOnly = database.prepare('PRAGMA query_only').get();
+        if (queryOnly.query_only !== 1)
+            fail('database-unavailable', 'assistant-recovery read-only guard was not enabled');
+        const versionRow = database.prepare('PRAGMA user_version').get();
+        if (typeof versionRow.user_version !== 'number' || !Number.isSafeInteger(versionRow.user_version)) {
+            fail('database-corrupt', 'assistant-recovery schema version is corrupt');
+        }
+        if (versionRow.user_version < recoverySchemaVersion) {
+            fail('schema-too-old', `assistant-recovery schema ${versionRow.user_version} is older than required schema ${recoverySchemaVersion}`);
+        }
+        if (versionRow.user_version > recoverySchemaVersion) {
+            fail('schema-too-new', `assistant-recovery schema ${versionRow.user_version} is newer than supported schema ${recoverySchemaVersion}`);
+        }
+        const rows = database.prepare(`
+      SELECT bootstrap_status, bootstrap_failure_code, bootstrap_generation,
+             bootstrap_attestation_valid, bootstrap_attestations_json,
+             bootstrap_attestation_set_digest, updated_at
+      FROM recovery_runtime_state WHERE singleton = 1 LIMIT 2
+    `).all();
+        if (rows.length !== 1)
+            fail('database-corrupt', 'assistant-recovery bootstrap singleton is missing or ambiguous');
+        const bootstrap = bootstrapState(rows[0]);
+        if (inodeBindSupported)
+            assertConnectionBound(bound, selfDescriptors());
+        assertNoDrift(databasePath, files);
+        const databaseIdentity = deepFreeze({
+            device: files.database.device.toString(10),
+            inode: files.database.inode.toString(10),
+            size: Number(files.database.size),
+            digest: storageDigest(files),
+        });
+        const unsigned = deepFreeze({
+            protocol: RECOVERY_OPERATOR_SNAPSHOT_PROTOCOL,
+            schemaVersion: recoverySchemaVersion,
+            database: databaseIdentity,
+            bootstrap,
+        });
+        result = deepFreeze({
+            ...unsigned,
+            snapshotDigest: createHash('sha256').update(canonicalJson(unsigned)).digest('hex'),
+        });
+    }
+    catch (error) {
+        deferredError = error;
+    }
+    finally {
+        if (transaction) {
+            try {
+                database?.exec('ROLLBACK');
+            }
+            catch (error) {
+                deferredError ??= error;
+            }
+        }
+        try {
+            database?.close();
+        }
+        catch (error) {
+            deferredError ??= error;
+        }
+        try {
+            assertNoDrift(databasePath, files);
+        }
+        catch (error) {
+            deferredError ??= error;
+        }
+        if (!pinnedParentMatches(pinnedParent)) {
+            // A parent replacement invalidates every earlier pathname observation;
+            // it deliberately overrides a deferred lower-level drift error.
+            deferredError = new RecoveryOperatorSnapshotError('unsafe-parent', 'assistant-recovery operator snapshot parent changed while it was inspected');
+        }
+        for (const copy of copies)
+            try {
+                closeSync(copy.descriptor);
+            }
+            catch { }
+        if (temporary !== undefined) {
+            try {
+                removePinnedTemp(temporary);
+            }
+            catch (error) {
+                deferredError ??= error;
+            }
+        }
+        else if (temporaryPath !== undefined) {
+            try {
+                rmSync(temporaryPath, { recursive: true, force: true });
+            }
+            catch (error) {
+                deferredError ??= error;
+            }
+        }
+        try {
+            closePinned(files);
+        }
+        catch (error) {
+            deferredError ??= error;
+        }
+        try {
+            closeSync(pinnedParent.descriptor);
+        }
+        catch (error) {
+            deferredError ??= error;
+        }
+    }
+    if (deferredError !== undefined) {
+        if (deferredError instanceof RecoveryOperatorSnapshotError)
+            throw deferredError;
+        classifySqliteError(deferredError);
+    }
+    return result;
+}
+//# sourceMappingURL=operator.js.map

package/lib/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,SAAS,EACT,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EACL,wCAAwC,EACxC,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAGnD,MAAM,CAAC,MAAM,mCAAmC,GAC5C,yCAAkD,CAAA;AAmBtD,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACjC;IAArB,YAAqB,IAAuC,EAAE,OAAe;QAC3E,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAAmC;QAE1D,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAA;IAC7C,CAAC;CACF;AAgED,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAClD,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAA;AACxC,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;AACvD,MAAM,UAAU,GAAG,eAAe,CAAA;AAElC,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAC1E,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;AACvH,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YAAE,UAAU,CAAC,KAAK,CAAC,CAAA;QACtF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,IAAI,CAAC,IAAuC,EAAE,OAAe;IACpE,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAA;QACvC,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAChG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAA;QACtF,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,4DAA4D,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;eAC9E,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,KAAK,IAAI;eACnF,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;eACjD,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAM,CAAC,KAAK,IAAM,EAAE,CAAC;YAC7E,IAAI,CAAC,eAAe,EAAE,gGAAgG,CAAC,CAAA;QACzH,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAA;QACnG,UAAU,GAAG,SAAS,CAAA;QACtB,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6BAA6B;YAAE,MAAM,KAAK,CAAA;QAC/D,IAAI,CAAC,eAAe,EAAE,gEAAgE,CAAC,CAAA;IACzF,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4B;IACpD,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QAAC,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAC/C,IAAI,CAAC,sBAAsB,EAAE,iEAAiE,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,MAAM,GAA6C,EAAE,CAAA;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAQ;QACzF,IAAI,QAAqB,CAAA;QACzB,IAAI,CAAC;YAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC7E,IAAI,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA4B,EAAE,OAA4B;IACvF,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,gBAAgB,EAAE,uEAAuE,CAAC,CAAA;QACjG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAC9F,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;QAC9B,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;eAC9E,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eAC9D,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM;eACpC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,sBAAsB,EAAE,2DAA2D,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAA;QAC9E,UAAU,GAAG,SAAS,CAAA;QACtB,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6BAA6B;YAAE,MAAM,KAAK,CAAA;QAC/D,IAAI,CAAC,sBAAsB,EAAE,kEAAkE,CAAC,CAAA;IAClG,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC;gBAAC,SAAS,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CACjB,MAAkB,EAClB,MAAc,EACd,SAAqF;IAErF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAA;IACzD,IAAI,WAA+B,CAAA;IACnC,IAAI,CAAC;QACH,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAChG,IAAI,QAAQ,GAAG,EAAE,CAAA;QACjB,OAAO,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAA;YACtH,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9E,IAAI,KAAK,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YACvF,IAAI,OAAO,GAAG,CAAC,CAAA;YACf,OAAO,OAAO,GAAG,KAAK;gBAAE,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,GAAG,OAAO,CAAC,CAAA;YAC3F,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC;gBAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACnE,IAAI,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB;IACxC,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAA;IACjD,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAA;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAA;IAC1H,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK;WAC1D,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACjE,IAAI,CAAC,gBAAgB,EAAE,8DAA8D,CAAC,CAAA;IACxF,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC1B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,OAAO,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,UAAU,CAAC,WAAW,EAAE;eAClF,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK;eAC/D,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK;eACnE,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,OAAO,MAAM,GAAG,IAAI,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,GAAG,MAAM,CAAA;QAC/B,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC/F,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACxE,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAA;QACpG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QACxC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,UAAmG;IAEnG,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE;eAC1C,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;eACjD,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,IAAM,IAAI,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7F,IAAI,CAAC,UAAU,EAAE,sBAAsB,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;QAC1G,CAAC;QACD,MAAM,MAAM,GAAe;YACzB,UAAU;YACV,IAAI;YACJ,MAAM,EAAE,QAAQ,CAAC,GAAG;YACpB,KAAK,EAAE,QAAQ,CAAC,GAAG;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,UAAU,EAAE,QAAQ,CAAC,OAAO;YAC5B,SAAS,EAAE,QAAQ,CAAC,OAAO;YAC3B,MAAM,EAAE,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC;SACpD,CAAA;QACD,UAAU,GAAG,SAAS,CAAA;QACtB,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6BAA6B;YAAE,MAAM,KAAK,CAAA;QAC/D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;gBACjC,IAAI,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAA;YACpE,CAAC;YACD,IAAI,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAC1D,sBAAsB,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;QAC9E,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,sBAAsB,QAAQ,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACrF,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,MAAkB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;eAC9D,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK;eACvD,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC,KAAK;eACnE,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;eAClE,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS;eACnF,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAgB;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;eAC9D,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK;eACnD,UAAU,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,eAAe,EAAE,4DAA4D,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACpD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;QAChC,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,IAAI,MAAM,EAAE,YAAY,CAAC,CAAA;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,IAAI,MAAM,EAAE,YAAY,CAAC,CAAA;YACvD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACzB,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB;IACrC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACpC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAkB;IACrD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,IAAI,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACnF,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;QACrH,IAAI,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;IAC5E,CAAC;IACD,4EAA4E;IAC5E,wEAAwE;IACxE,oEAAoE;IACpE,4EAA4E;IAC5E,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7D,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACzE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE;mBAC1E,SAAS,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK;mBACvE,eAAe,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK;mBACnF,eAAe,CAAC,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI;mBAClF,eAAe,CAAC,OAAO,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC,OAAO,KAAK,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACzG,IAAI,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,6BAA6B;gBAAE,MAAM,KAAK,CAAA;YAC/D,IAAI,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;WACnE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,kBAAkB,EAAE,sDAAsD,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,OAAe;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACjF,IAAI,CAAC,kBAAkB,EAAE,uDAAuD,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAA6B;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,2BAA2B,KAAK,QAAQ;WACvE,OAAO,GAAG,CAAC,gCAAgC,KAAK,QAAQ;WACxD,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAA;IACnC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/F,IAAI,CAAC,kBAAkB,EAAE,gDAAgD,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAA;IAC3D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IAChD,IAAI,MAAM,KAAK,MAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,kBAAkB,EAAE,oDAAoD,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,GAAG,CAAC,2BAA2B,KAAK,CAAC,IAAI,GAAG,CAAC,2BAA2B,KAAK,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,kBAAkB,EAAE,8DAA8D,CAAC,CAAA;IAC1F,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAClE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,kBAAkB,EAAE,4DAA4D,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,YAAqD,CAAA;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAY,CAAA;QACrE,YAAY,GAAG,wCAAwC,CACrD,MAAiD,CAClD,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iCAAiC,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACvF,IAAI,CAAC,kBAAkB,EAAE,yDAAyD,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IAC9C,MAAM,YAAY,GAAG,qCAAqC,CAAC,YAAY,CAAC,CAAA;IACxE,MAAM,YAAY,GAAG,GAAG,CAAC,gCAAgC,CAAA;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,2BAA2B,KAAK,CAAC,CAAA;IACnD,IAAI,SAAS,KAAK,GAAG,CAAC,2BAA2B;WAC5C,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;WACtE,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,kBAAkB,EAAE,gEAAgE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,UAAU,CAAC;QAChB,MAAM;QACN,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,UAAU;QACV,gBAAgB,EAAE,KAAK;QACvB,oBAAoB,EAAE,YAAY;QAClC,YAAY;QACZ,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAkB;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC/C,QAAQ,EAAE,yCAAyC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC/B,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI;KAC/B,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,MAAM,MAAM,GAAG,KAA8B,CAAA;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,+HAA+H,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClJ,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,CAAC,sBAAsB,EAAE,oDAAoD,CAAC,CAAA;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,YAAoB;IAClE,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;WAC5D,OAAO,CAAC,YAAY,CAAC,KAAK,YAAY,IAAI,YAAY,KAAK,GAAG;WAC9D,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,cAAc,EAAE,0EAA0E,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACpC,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtD,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,CAAC,aAAa,EAAE,4DAA4D,CAAC,CAAA;IACnF,CAAC;IAED,IAAI,KAAkB,CAAA;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,QAAkC,CAAA;IACtC,IAAI,SAAiC,CAAA;IACrC,IAAI,aAAiC,CAAA;IACrC,IAAI,MAAM,GAA0B,EAAE,CAAA;IACtC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,MAA4C,CAAA;IAChD,IAAI,aAAsB,CAAA;IAC1B,MAAM,eAAe,GAAG,GAAwB,EAAE,CAAC,IAAI,GAAG,CAAC;QACzD,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU;QACzE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;KACrF,CAAC,MAAM,CAAC,CAAC,UAAU,EAAwB,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAA;IACzE,IAAI,CAAC;QACH,IAAI,KAA4B,CAAA;QAChC,IAAI,MAAc,CAAA;QAClB,wEAAwE;QACxE,2EAA2E;QAC3E,sDAAsD;QACtD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,kBAAkB;gBACzB,CAAC,CAAC,UAAU,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,sBAAsB;gBACzE,CAAC,CAAC,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,sBAAsB,CAAA;YAC7D,KAAK,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC,CAAA;YACpF,SAAS,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAA;YAC3C,MAAM,MAAM,GAAG,GAAG,UAAU,IAAI,SAAS,CAAC,UAAU,EAAE,CAAA;YACtD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,MAAM,kBAAkB,EAAE,gBAAgB,CAAC,CAAA;YACtF,IAAI,GAA2B,CAAA;YAC/B,IAAI,CAAC;gBAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,sBAAsB,EAAE,WAAW,CAAC,CAAA;YAAC,CAAC;YACjF,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;gBAAA,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;YAC1E,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YACnC,MAAM,GAAG,UAAU,MAAM,0BAA0B,CAAA;YACnD,KAAK,GAAG,MAAM,CAAA;YACd,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;QACD,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,gBAAgB,EAAE,sDAAsD,CAAC,CAAA;QAChF,CAAC;QACD,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,IAAI,kBAAkB;YAAE,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QAC7E,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,gBAAgB,EAAE,sDAAsD,CAAC,CAAA;QAChF,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACvE,WAAW,GAAG,IAAI,CAAA;QAClB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAAG,EAA8B,CAAA;QACzF,IAAI,SAAS,CAAC,UAAU,KAAK,CAAC;YAAE,IAAI,CAAC,sBAAsB,EAAE,oDAAoD,CAAC,CAAA;QAClH,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAgC,CAAA;QAC9F,IAAI,OAAO,UAAU,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC,kBAAkB,EAAE,8CAA8C,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,UAAU,CAAC,YAAY,GAAG,qBAAqB,EAAE,CAAC;YACpD,IAAI,CAAC,gBAAgB,EAAE,6BAA6B,UAAU,CAAC,YAAY,kCAAkC,qBAAqB,EAAE,CAAC,CAAA;QACvI,CAAC;QACD,IAAI,UAAU,CAAC,YAAY,GAAG,qBAAqB,EAAE,CAAC;YACpD,IAAI,CAAC,gBAAgB,EAAE,6BAA6B,UAAU,CAAC,YAAY,mCAAmC,qBAAqB,EAAE,CAAC,CAAA;QACxI,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;KAK7B,CAAC,CAAC,GAAG,EAA+B,CAAA;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,kBAAkB,EAAE,gEAAgE,CAAC,CAAA;QACjH,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACzC,IAAI,kBAAkB;YAAE,qBAAqB,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;QACvE,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAClC,MAAM,gBAAgB,GAAG,UAAU,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC;SAC7B,CAAC,CAAA;QACF,MAAM,QAAQ,GAAqD,UAAU,CAAC;YAC5E,QAAQ,EAAE,mCAAmC;YAC7C,aAAa,EAAE,qBAAqB;YACpC,QAAQ,EAAE,gBAAgB;YAC1B,SAAS;SACV,CAAC,CAAA;QACF,MAAM,GAAG,UAAU,CAAC;YAClB,GAAG,QAAQ;YACX,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACnF,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,GAAG,KAAK,CAAA;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,aAAa,KAAK,KAAK,CAAA;YAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC;YAAC,QAAQ,EAAE,KAAK,EAAE,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,aAAa,KAAK,KAAK,CAAA;QAAC,CAAC;QACnE,IAAI,CAAC;YAAC,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,aAAa,KAAK,KAAK,CAAA;QAAC,CAAC;QACpF,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,uEAAuE;YACvE,gEAAgE;YAChE,aAAa,GAAG,IAAI,6BAA6B,CAC/C,eAAe,EACf,4EAA4E,CAC7E,CAAA;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,IAAI,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACtE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC;gBAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,aAAa,KAAK,KAAK,CAAA;YAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,aAAa,KAAK,KAAK,CAAA;YAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC;YAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,aAAa,KAAK,KAAK,CAAA;QAAC,CAAC;QACpE,IAAI,CAAC;YAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,aAAa,KAAK,KAAK,CAAA;QAAC,CAAC;IACtF,CAAC;IACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,aAAa,YAAY,6BAA6B;YAAE,MAAM,aAAa,CAAA;QAC/E,mBAAmB,CAAC,aAAa,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,MAAO,CAAA;AAChB,CAAC"}

package/lib/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "0.1.24";
+export declare const version = "0.1.30";
 //# sourceMappingURL=version.d.ts.map

package/lib/version.js

@@ -1,2 +1,2 @@
-export const version = '0.1.24';
+export const version = '0.1.30';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-enhanced/assistant-recovery",
-  "version": "0.1.24",
+  "version": "0.1.30",
   "description": "Deterministic Host recovery and supervised self-evolution runbook for DeepSeek Harness.",
   "license": "MIT",
   "type": "module",
@@ -74,19 +74,19 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
+    "@deepseek-ai/cordis": "4.0.2",
     "@types/node": "22.20.0",
     "typescript": "6.0.3",
     "vitest": "4.1.8",
-    "@dsh-enhanced/assistant-automations": "0.1.24",
-    "@dsh-enhanced/assistant-evaluation": "0.1.24",
-    "@dsh-enhanced/assistant-delivery": "0.1.24",
-    "@dsh-enhanced/assistant-evolution": "0.1.24",
-    "@dsh-enhanced/assistant-health": "0.1.24",
-    "@dsh-enhanced/preference-learning": "0.1.24"
+    "@dsh-enhanced/assistant-automations": "0.1.30",
+    "@dsh-enhanced/assistant-evaluation": "0.1.30",
+    "@dsh-enhanced/assistant-health": "0.1.30",
+    "@dsh-enhanced/assistant-evolution": "0.1.30",
+    "@dsh-enhanced/preference-learning": "0.1.30",
+    "@dsh-enhanced/assistant-delivery": "0.1.30"
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "3.18.1"
+    "@deepseek-ai/schemastery": "3.18.2"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",