@dsh-enhanced/lark-channel 0.1.48 → 0.1.53

package/lib/rsi-authority-runtime.js

@@ -0,0 +1,393 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { chmod, lstat, mkdir, mkdtemp, open, readdir, realpath, rename, rm } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { isDeepStrictEqual } from 'node:util';
+import { rsiBuildResources as io } from './rsi-build.js';
+import { version } from './version.js';
+const PHASES = ['pr', 'review', 'merge', 'build', 'sign', 'publish', 'registry-verify', 'catalog-admission'];
+const EXECUTABLES = {
+    approval: 'dsh-source-approval-authority.js', release: 'dsh-source-release-authority.js',
+    adoption: 'dsh-source-adoption-authority.js', observation: 'dsh-task-observation-authority.js',
+    qualification: 'dsh-live-qualification-authority.js', hostAuthority: 'dsh-systemd-host-authority.js',
+    hostAttestor: 'dsh-systemd-host-attestor.js',
+};
+const MAX_ENTRIES = 512, MAX_FILE = 160_000_000, MAX_TOTAL = 256_000_000;
+const CONTRACT_PACKAGE = '@dsh-enhanced/assistant-growth-contract';
+const CONTRACT_ROOT = `node_modules/${CONTRACT_PACKAGE}`;
+const RUNTIME_DIRECTORIES = ['bin', 'lib', 'node_modules', 'node_modules/@dsh-enhanced', CONTRACT_ROOT, `${CONTRACT_ROOT}/lib`];
+function fail(message) { throw new Error(`rsi authority runtime: ${message}`); }
+function hash(bytes) { return createHash('sha256').update(bytes).digest('hex'); }
+function exactPath(path) {
+    return isAbsolute(path) && resolve(path) === path
+        && !path.includes('\0') && !path.includes('\r') && !path.includes('\n');
+}
+function environment(home) { return { PATH: '/usr/bin:/bin', LANG: 'C', LC_ALL: 'C', HOME: home }; }
+function pin(root, path, sha256) { return { path: join(root, path), sha256 }; }
+function result(root, entries) {
+    const found = (path) => {
+        const item = entries.find(entry => entry.path === path);
+        if (!item)
+            fail(`missing asset: ${path}`);
+        return pin(root, path, item.sha256);
+    };
+    const executables = {};
+    for (const [key, filename] of Object.entries(EXECUTABLES))
+        executables[key] = found(`bin/${filename}`);
+    const releaseAdapters = {};
+    for (const phase of PHASES)
+        releaseAdapters[phase] = found(`bin/dsh-local-release-${phase}.js`);
+    return { schemaVersion: 1, packageVersion: version, root, node: found('node'), executables, releaseAdapters,
+        processHelper: found('lib/adapter-process.js'), observerClient: found('lib/runtime-observer-protocol.js'),
+        catalogValidator: found('lib/catalog.js'), catalogInterpreter: found('lib/catalog-interpreter.js') };
+}
+async function asset(path, maximum, signal) {
+    signal.throwIfAborted();
+    const bytes = await io.readStable(path, maximum, false, true);
+    signal.throwIfAborted();
+    return bytes;
+}
+async function sourceAssets(packageRoot, nodePath, signal) {
+    await io.directory(packageRoot, false);
+    await io.directory(join(packageRoot, 'bin'), false);
+    await io.directory(join(packageRoot, 'lib'), false);
+    const packageBytes = await asset(join(packageRoot, 'package.json'), 65_536, signal);
+    const manifest = JSON.parse(packageBytes.toString('utf8'));
+    if (manifest.name !== '@dsh-enhanced/plugin-control-plane' || manifest.version !== version || manifest.type !== 'module')
+        fail('installed package identity differs');
+    if (typeof manifest.dependencies?.[CONTRACT_PACKAGE] !== 'string')
+        fail('installed shared contract is not declared');
+    const libraries = (await readdir(join(packageRoot, 'lib'))).filter(name => name.endsWith('.js')).sort();
+    if (!libraries.length || libraries.length + 19 > MAX_ENTRIES)
+        fail('library entry bound exceeded');
+    const names = new Map([['package.json', join(packageRoot, 'package.json')], ['node', nodePath]]);
+    for (const name of libraries)
+        names.set(`lib/${name}`, join(packageRoot, 'lib', name));
+    for (const name of Object.values(EXECUTABLES))
+        names.set(`bin/${name}`, join(packageRoot, 'bin', name));
+    for (const phase of PHASES)
+        names.set(`bin/dsh-local-release-${phase}.js`, join(packageRoot, 'bin', 'dsh-local-release-adapter.js'));
+    // Resolve through this package's manifest, but accept only its own dependency
+    // edge or the adjacent edge in the same pnpm virtual-store node_modules.
+    const resolvedContract = createRequire(join(packageRoot, 'package.json')).resolve(`${CONTRACT_PACKAGE}/package.json`);
+    const contractRoot = dirname(await realpath(resolvedContract));
+    const edges = [join(packageRoot, 'node_modules', CONTRACT_PACKAGE)];
+    if (basename(dirname(packageRoot)) === '@dsh-enhanced' && basename(dirname(dirname(packageRoot))) === 'node_modules'
+        && basename(dirname(dirname(dirname(dirname(packageRoot))))) === '.pnpm') {
+        edges.push(join(dirname(packageRoot), 'assistant-growth-contract'));
+    }
+    const edgeRoots = await Promise.all(edges.map(async (edge) => realpath(edge).catch(() => undefined)));
+    if (!edgeRoots.includes(contractRoot))
+        fail('installed shared contract resolved outside its dependency edge');
+    await io.directory(contractRoot, false);
+    await io.directory(join(contractRoot, 'lib'), false);
+    const contractPackageBytes = await asset(join(contractRoot, 'package.json'), 65_536, signal);
+    const contractManifest = JSON.parse(contractPackageBytes.toString('utf8'));
+    if (contractManifest.name !== CONTRACT_PACKAGE || contractManifest.version !== version || contractManifest.type !== 'module'
+        || Object.keys(contractManifest.dependencies ?? {}).length || Object.keys(contractManifest.optionalDependencies ?? {}).length) {
+        fail('installed shared contract identity or dependency boundary differs');
+    }
+    names.set(`${CONTRACT_ROOT}/package.json`, join(contractRoot, 'package.json'));
+    const contractLibraries = (await readdir(join(contractRoot, 'lib'))).filter(name => name.endsWith('.js')).sort();
+    if (!contractLibraries.includes('index.js') || names.size + contractLibraries.length > MAX_ENTRIES)
+        fail('shared contract entry bound exceeded');
+    for (const name of contractLibraries)
+        names.set(`${CONTRACT_ROOT}/lib/${name}`, join(contractRoot, 'lib', name));
+    const files = [];
+    let total = 0;
+    for (const [path, sourcePath] of names) {
+        const bytes = path === 'package.json' ? packageBytes : path === `${CONTRACT_ROOT}/package.json`
+            ? contractPackageBytes : await asset(sourcePath, MAX_FILE, signal);
+        total += bytes.length;
+        if (total > MAX_TOTAL)
+            fail('asset byte bound exceeded');
+        const sourceMode = (await lstat(sourcePath)).mode & 0o777;
+        files.push({ path, sourcePath, bytes, sourceSha256: hash(bytes), sourceMode });
+    }
+    const node = files.find(file => file.path === 'node').bytes;
+    if (!node.subarray(0, 4).equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46])))
+        fail('Node interpreter is not native ELF');
+    const nodeVersion = await io.command(nodePath, ['--version'], environment(packageRoot), signal, 10_000, 1024);
+    const match = /^v(\d+)\.(\d+)\.(\d+)$/u.exec(nodeVersion);
+    if (!match || !(Number(match[1]) === 22 && Number(match[2]) >= 19 || Number(match[1]) >= 24))
+        fail('Node version is outside package engines');
+    return files;
+}
+async function verifySources(files, signal) {
+    const seen = new Set();
+    for (const file of files) {
+        if (seen.has(file.sourcePath))
+            continue;
+        seen.add(file.sourcePath);
+        if (hash(await asset(file.sourcePath, MAX_FILE, signal)) !== file.sourceSha256
+            || ((await lstat(file.sourcePath)).mode & 0o777) !== file.sourceMode)
+            fail('installed source changed');
+    }
+}
+function deployedBytes(file, root) {
+    if (file.path === 'package.json')
+        return Buffer.from('{"type":"module"}\n');
+    if (!file.path.startsWith('bin/'))
+        return file.bytes;
+    const first = file.bytes.toString('utf8', 0, 128).split('\n', 1)[0] ?? '';
+    if (!first.startsWith('#!'))
+        fail('CLI has no shebang');
+    return Buffer.concat([Buffer.from(`#!${join(root, 'node')}\n`), file.bytes.subarray(Buffer.byteLength(first) + 1)]);
+}
+async function writeFile(path, bytes, mode) {
+    const fd = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, mode);
+    try {
+        await fd.writeFile(bytes);
+        await fd.chmod(mode);
+        await fd.sync();
+    }
+    finally {
+        await fd.close();
+    }
+}
+async function verifyTree(root, entries, signal) {
+    await io.directory(root);
+    const expected = new Map(entries.map(item => [item.path, item]));
+    const visit = async (folder, relative = '') => {
+        signal.throwIfAborted();
+        const names = await readdir(folder);
+        for (const name of names) {
+            const path = relative ? `${relative}/${name}` : name;
+            const full = join(root, path), item = await lstat(full);
+            if (item.isSymbolicLink() || item.nlink !== 1 && item.isFile() || process.getuid && item.uid !== process.getuid())
+                fail('deployed asset is linked or unowned');
+            if (item.isDirectory()) {
+                if (!RUNTIME_DIRECTORIES.includes(path) || !entries.some(entry => entry.path.startsWith(`${path}/`))
+                    || (item.mode & 0o777) !== 0o700)
+                    fail('unexpected runtime directory');
+                await visit(full, path);
+            }
+            else if (item.isFile()) {
+                if (path === 'receipt.json')
+                    continue;
+                const entry = expected.get(path);
+                if (!entry || item.size !== entry.size || (item.mode & 0o777) !== entry.mode
+                    || hash(await asset(full, MAX_FILE, signal)) !== entry.sha256)
+                    fail(`deployed asset changed: ${path}`);
+                expected.delete(path);
+            }
+            else
+                fail('nonregular runtime entry');
+        }
+    };
+    await visit(root);
+    if (expected.size)
+        fail('deployed asset missing');
+    const receipt = await lstat(join(root, 'receipt.json'));
+    if (!receipt.isFile() || receipt.nlink !== 1 || (receipt.mode & 0o777) !== 0o600)
+        fail('unsafe receipt');
+}
+async function verifyRuntime(runtime, signal) {
+    const env = environment(runtime.root);
+    const modules = ['source-approval-authority', 'source-release-authority', 'source-adoption-authority',
+        'task-observation-authority', 'live-qualification-authority', 'systemd-host-authority',
+        'runtime-observer-protocol', 'adapter-process'];
+    const urls = modules.map(name => pathToFileURL(join(runtime.root, 'lib', `${name}.js`)).href);
+    const script = `await Promise.all(${JSON.stringify(urls)}.map(url => import(url)))`;
+    await io.command(runtime.node.path, ['--input-type=module', '--eval', script], env, signal, 10_000, 4096);
+    for (const [key, spec] of [['hostAttestor', runtime.executables.hostAttestor], ...Object.entries(runtime.releaseAdapters)]) {
+        const expected = key === 'hostAttestor' ? 'dsh-systemd-host-attestor-8' : 'dsh-local-release-adapter-1';
+        const output = await io.command(runtime.node.path, [spec.path, '--version'], env, signal, 10_000, 4096);
+        if (output !== expected)
+            fail(`CLI version check failed: ${key}`);
+    }
+}
+/** Read a copied runtime receipt through its physical stage path, retaining
+ * the logical paths embedded in the original installation. */
+export async function readRsiAuthorityRuntimeReceipt(input) {
+    const { logicalHome, physicalHome, profile } = input;
+    if (!exactPath(logicalHome) || !exactPath(physicalHome) || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(profile))
+        fail('invalid copied runtime binding');
+    const root = join(physicalHome, 'rsi-authority-runtimes', profile);
+    const source = await io.readStable(join(root, 'receipt.json'), 65_536, true);
+    const receipt = JSON.parse(source.toString('utf8'));
+    const { digest, ...body } = receipt;
+    if (receipt.schemaVersion !== 1 || receipt.root !== join(logicalHome, 'rsi-authority-runtimes', profile)
+        || !Array.isArray(receipt.entries) || receipt.entries.length > MAX_ENTRIES
+        || !/^[a-f0-9]{64}$/u.test(digest) || hash(JSON.stringify(body)) !== digest)
+        fail('copied runtime receipt differs');
+    const signal = input.signal ?? new AbortController().signal;
+    await verifyTree(root, receipt.entries, signal);
+    const { entries: _entries, ...runtime } = body;
+    return { runtime, receiptDigest: hash(source) };
+}
+/** Replace only the copied runtime under a stopped Home stage. The receipt and
+ * shebangs keep their logical Home paths, so the transaction can rename Home. */
+export async function replaceRsiAuthorityRuntimeInStage(input, options = {}) {
+    const previous = await readRsiAuthorityRuntimeReceipt(input);
+    const signal = AbortSignal.any([input.signal ?? new AbortController().signal, AbortSignal.timeout(120_000)]);
+    const parent = join(input.physicalHome, 'rsi-authority-runtimes');
+    await io.directory(parent);
+    const final = join(input.logicalHome, 'rsi-authority-runtimes', input.profile);
+    if (previous.runtime.root !== final)
+        fail('previous runtime root changed');
+    const physical = join(parent, input.profile);
+    const packageRoot = options.packageRoot ?? dirname(createRequire(import.meta.url).resolve('@dsh-enhanced/plugin-control-plane/package.json'));
+    const nodePath = await realpath(options.nodePath ?? process.execPath);
+    if (!exactPath(packageRoot) || !exactPath(nodePath))
+        fail('source paths must be canonical');
+    const files = await sourceAssets(packageRoot, nodePath, signal);
+    const logicalSourcePath = (path) => path === input.physicalHome ? input.logicalHome
+        : path.startsWith(`${input.physicalHome}${sep}`)
+            ? join(input.logicalHome, relative(input.physicalHome, path)) : path;
+    const entries = files.map(file => {
+        const bytes = deployedBytes(file, final);
+        return { path: file.path, sha256: hash(bytes), size: bytes.length,
+            mode: file.path === 'node' || file.path.startsWith('bin/') ? 0o700 : 0o600,
+            sourcePath: logicalSourcePath(file.sourcePath), sourceSha256: file.sourceSha256,
+            sourceSize: file.bytes.length, sourceMode: file.sourceMode };
+    }).sort((a, b) => a.path.localeCompare(b.path));
+    const runtime = result(final, entries);
+    const stage = await mkdtemp(join(parent, `.${input.profile}-update-`));
+    const backup = await mkdtemp(join(parent, `.${input.profile}-previous-`));
+    await rm(backup, { recursive: true });
+    let moved = false;
+    try {
+        await chmod(stage, 0o700);
+        for (const directory of RUNTIME_DIRECTORIES)
+            await mkdir(join(stage, directory), { mode: 0o700 });
+        for (const file of files) {
+            const entry = entries.find(item => item.path === file.path);
+            await writeFile(join(stage, file.path), deployedBytes(file, final), entry.mode);
+        }
+        await verifySources(files, signal);
+        const body = { ...runtime, entries };
+        await writeFile(join(stage, 'receipt.json'), Buffer.from(JSON.stringify({ ...body, digest: hash(JSON.stringify(body)) })), 0o600);
+        await verifyTree(stage, entries, signal);
+        for (const directory of [...RUNTIME_DIRECTORIES].reverse())
+            await io.syncDirectory(join(stage, directory));
+        await io.syncDirectory(stage);
+        await rename(physical, backup);
+        moved = true;
+        try {
+            await rename(stage, physical);
+        }
+        catch (error) {
+            await rename(backup, physical);
+            moved = false;
+            throw error;
+        }
+        const actual = await readRsiAuthorityRuntimeReceipt(input);
+        if (!isDeepStrictEqual(actual.runtime, runtime))
+            fail('replacement runtime differs');
+        await verifyRuntime({ ...runtime, root: physical, node: { ...runtime.node, path: join(physical, 'node') },
+            executables: Object.fromEntries(Object.entries(runtime.executables).map(([key, pin]) => [key, { ...pin, path: join(physical, 'bin', EXECUTABLES[key]) }])),
+            releaseAdapters: Object.fromEntries(Object.entries(runtime.releaseAdapters).map(([key, pin]) => [key, { ...pin, path: join(physical, 'bin', `dsh-local-release-${key}.js`) }])) }, signal);
+        await rm(backup, { recursive: true });
+        return runtime;
+    }
+    catch (error) {
+        if (moved) {
+            await rm(physical, { recursive: true, force: true });
+            await rename(backup, physical);
+        }
+        throw error;
+    }
+    finally {
+        await rm(stage, { recursive: true, force: true });
+        if (!moved)
+            await rm(backup, { recursive: true, force: true });
+    }
+}
+/** Caller holds the home lifecycle lock. Only this function's stage/final claim is removed on failure. */
+export async function prepareRsiAuthorityRuntime(input, options = {}) {
+    if (!exactPath(input.dshHome) || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(input.profile))
+        fail('invalid home or profile');
+    if (process.platform !== 'linux')
+        fail('Linux is required');
+    await io.directory(input.dshHome, false);
+    const packageRoot = options.packageRoot ?? dirname(createRequire(import.meta.url).resolve('@dsh-enhanced/plugin-control-plane/package.json'));
+    const nodePath = await realpath(options.nodePath ?? process.execPath);
+    if (!exactPath(packageRoot) || !exactPath(nodePath))
+        fail('source paths must be canonical');
+    const parent = join(input.dshHome, 'rsi-authority-runtimes');
+    try {
+        await mkdir(parent, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+    }
+    await io.directory(parent);
+    const final = join(parent, input.profile);
+    const signal = AbortSignal.any([input.signal ?? new AbortController().signal, AbortSignal.timeout(120_000)]);
+    const files = await sourceAssets(packageRoot, nodePath, signal);
+    const entries = files.map(file => {
+        const bytes = deployedBytes(file, final);
+        return { path: file.path, sha256: hash(bytes), size: bytes.length,
+            mode: file.path === 'node' || file.path.startsWith('bin/') ? 0o700 : 0o600,
+            sourcePath: file.sourcePath, sourceSha256: file.sourceSha256, sourceSize: file.bytes.length, sourceMode: file.sourceMode };
+    }).sort((a, b) => a.path.localeCompare(b.path));
+    const runtime = result(final, entries);
+    try {
+        await lstat(final);
+        const receipt = JSON.parse((await io.readStable(join(final, 'receipt.json'), 65_536, true)).toString('utf8'));
+        const { digest, ...body } = receipt;
+        if (hash(JSON.stringify(body)) !== digest || !isDeepStrictEqual(body, { ...runtime, entries }))
+            fail('runtime differs from receipt');
+        await verifyTree(final, entries, signal);
+        await verifySources(files, signal);
+        await verifyRuntime(runtime, signal);
+        return runtime;
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+        try {
+            await lstat(final);
+            fail('existing runtime is incomplete');
+        }
+        catch (found) {
+            if (found.code !== 'ENOENT')
+                throw found;
+        }
+    }
+    const stage = await mkdtemp(join(parent, `.${input.profile}-stage-`));
+    let claimed;
+    try {
+        await chmod(stage, 0o700);
+        for (const directory of RUNTIME_DIRECTORIES)
+            await mkdir(join(stage, directory), { mode: 0o700 });
+        for (const file of files) {
+            signal.throwIfAborted();
+            const entry = entries.find(item => item.path === file.path);
+            await writeFile(join(stage, file.path), deployedBytes(file, final), entry.mode);
+        }
+        await verifySources(files, signal);
+        const body = { ...runtime, entries };
+        await writeFile(join(stage, 'receipt.json'), Buffer.from(JSON.stringify({ ...body, digest: hash(JSON.stringify(body)) })), 0o600);
+        for (const directory of [...RUNTIME_DIRECTORIES].reverse())
+            await io.syncDirectory(join(stage, directory));
+        await io.syncDirectory(stage);
+        signal.throwIfAborted();
+        await mkdir(final, { mode: 0o700 });
+        const identity = await lstat(final);
+        claimed = { dev: identity.dev, ino: identity.ino };
+        for (const name of ['bin', 'lib', 'node_modules', 'node', 'package.json', 'receipt.json'])
+            await rename(join(stage, name), join(final, name));
+        await verifyTree(final, entries, signal);
+        await verifyRuntime(runtime, signal);
+        await io.syncDirectory(parent);
+        return runtime;
+    }
+    catch (error) {
+        if (claimed) {
+            const current = await lstat(final).catch(() => undefined);
+            if (current?.isDirectory() && current.dev === claimed.dev && current.ino === claimed.ino)
+                await rm(final, { recursive: true, force: true });
+        }
+        throw error;
+    }
+    finally {
+        await rm(stage, { recursive: true, force: true });
+        await io.syncDirectory(parent);
+    }
+}
+//# sourceMappingURL=rsi-authority-runtime.js.map

package/lib/rsi-authority-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-authority-runtime.js","sourceRoot":"","sources":["../src/rsi-authority-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACpG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,CAAU,CAAA;AAmBrH,MAAM,WAAW,GAA+B;IAC9C,QAAQ,EAAE,kCAAkC,EAAE,OAAO,EAAE,iCAAiC;IACxF,QAAQ,EAAE,kCAAkC,EAAE,WAAW,EAAE,mCAAmC;IAC9F,aAAa,EAAE,qCAAqC,EAAE,aAAa,EAAE,+BAA+B;IACpG,YAAY,EAAE,8BAA8B;CAC7C,CAAA;AACD,MAAM,WAAW,GAAG,GAAG,EAAE,QAAQ,GAAG,WAAW,EAAE,SAAS,GAAG,WAAW,CAAA;AACxE,MAAM,gBAAgB,GAAG,yCAAyC,CAAA;AAClE,MAAM,aAAa,GAAG,gBAAgB,gBAAgB,EAAE,CAAA;AACxD,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,4BAA4B,EAAE,aAAa,EAAE,GAAG,aAAa,MAAM,CAAC,CAAA;AAC/H,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAC9F,SAAS,IAAI,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AACzG,SAAS,SAAS,CAAC,IAAY;IAAa,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;WACxF,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAAC,CAAC;AAC3E,SAAS,WAAW,CAAC,IAAY,IAAuB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA,CAAC,CAAC;AAC9H,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc,IAAS,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA,CAAC,CAAC;AAC3G,SAAS,MAAM,CAAC,IAAY,EAAE,OAAgB;IAC5C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAA;QACzC,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,EAA6B,CAAA;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAA2B;QAAE,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAA;IAChI,MAAM,eAAe,GAAG,EAAwB,CAAA;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,eAAe,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,yBAAyB,KAAK,KAAK,CAAC,CAAA;IAC/F,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe;QACzG,aAAa,EAAE,KAAK,CAAC,wBAAwB,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,kCAAkC,CAAC;QACzG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,4BAA4B,CAAC,EAAE,CAAA;AACxG,CAAC;AACD,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,OAAe,EAAE,MAAmB;IACrE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7D,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,KAAK,CAAA;AACd,CAAC;AACD,KAAK,UAAU,YAAY,CAAC,WAAmB,EAAE,QAAgB,EAAE,MAAmB;IACpF,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACtC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAExD,CAAA;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,oCAAoC,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACpK,IAAI,OAAO,QAAQ,CAAC,YAAY,EAAE,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,2CAA2C,CAAC,CAAA;IACpH,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,GAAG,WAAW;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAClG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAChH,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IACtF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IACvG,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,yBAAyB,KAAK,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAA;IACpI,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,gBAAgB,eAAe,CAAC,CAAA;IACrH,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC9D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACnE,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,eAAe,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,cAAc;WAC/G,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACnG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,gEAAgE,CAAC,CAAA;IAC7G,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IACpD,MAAM,oBAAoB,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5F,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAExE,CAAA;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,gBAAgB,IAAI,gBAAgB,CAAC,OAAO,KAAK,OAAO,IAAI,gBAAgB,CAAC,IAAI,KAAK,QAAQ;WACvH,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAChI,IAAI,CAAC,mEAAmE,CAAC,CAAA;IAC3E,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,aAAa,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;IAC9E,MAAM,iBAAiB,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAChH,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,iBAAiB,CAAC,MAAM,GAAG,WAAW;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;IAChJ,KAAK,MAAM,IAAI,IAAI,iBAAiB;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,aAAa,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IAChH,MAAM,KAAK,GAAoG,EAAE,CAAA;IACjH,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,aAAa,eAAe;YAC7F,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;QACpE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,SAAS;YAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAE,CAAC,KAAK,CAAA;IAC5D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IAClH,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7G,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACzD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAA;IAC7I,OAAO,KAAK,CAAA;AACd,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,KAA+C,EAAE,MAAmB;IAC/F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,SAAQ;QACvC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY;eACzE,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAC1G,CAAC;AACH,CAAC;AACD,SAAS,aAAa,CAAC,IAAsD,EAAE,IAAY;IACzF,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IAC3E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAA;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;AACrH,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,IAAY;IAChE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IACnH,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAA;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AACvG,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgB,EAAE,MAAmB;IAC3E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAAE,QAAQ,GAAG,EAAE,EAAiB,EAAE;QACnE,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YACvD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;gBAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;YAC9J,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;uBAC/F,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;oBAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;gBACxE,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,cAAc;oBAAE,SAAQ;gBACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI;uBACvE,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM;oBAAE,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;gBACxG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACvB,CAAC;;gBAAM,IAAI,CAAC,0BAA0B,CAAC,CAAA;QACzC,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IACjB,IAAI,QAAQ,CAAC,IAAI;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACjD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;AAC1G,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,OAA4B,EAAE,MAAmB;IAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,2BAA2B;QACnG,4BAA4B,EAAE,8BAA8B,EAAE,wBAAwB;QACtF,2BAA2B,EAAE,iBAAiB,CAAC,CAAA;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2BAA2B,CAAA;IACnF,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,qBAAqB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IACzG,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAoB,EAAE,CAAC;QAC9I,MAAM,QAAQ,GAAG,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,6BAA6B,CAAA;QACvG,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACvG,IAAI,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED;8DAC8D;AAC9D,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAEpD;IACC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IACpD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IACtJ,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IACnC,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,wBAAwB,EAAE,OAAO,CAAC;WACnG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW;WACvE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IACrH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAA;IAC3D,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAA;IAC9C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AACjD,CAAC;AAED;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAEvD,EAAE,UAAmB,EAAE;IACtB,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC5G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAA;IACjE,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,CAAA;IAC7I,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC3F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC/D,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW;QACjG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM;YAC/D,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YAC1E,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/E,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAA;IAChE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC,CAAA;IACzE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACzB,KAAK,MAAM,SAAS,IAAI,mBAAmB;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAE,CAAA;YAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACjI,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACxC,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC,OAAO,EAAE;YAAE,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAC1G,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,GAAG,IAAI,CAAA;QAC5C,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAAC,CAAC;QACrC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAA;QAC1D,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;QACpF,MAAM,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACvG,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,GAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAuC;YAC9M,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,qBAAqB,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAA2C,EAAE,EAAE,MAAM,CAAC,CAAA;QACtO,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAChC,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK;YAAE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAiE,EAChH,UAAmB,EAAE;IACrB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC3H,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,CAAA;IAC7I,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAA;IACrE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAA;IAC5D,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAAC,CAAC;IACrF,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM;YAC/D,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YAC1E,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAA;IAC9H,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;QACxH,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;QACnC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;QACpI,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACxC,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAClC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACpC,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAAC,CAAC;QAClE,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC,CAAA;IACrE,IAAI,OAAiD,CAAA;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACzB,KAAK,MAAM,SAAS,IAAI,mBAAmB;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAE,CAAA;YAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACjI,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC,OAAO,EAAE;YAAE,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAC1G,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAA;QACvF,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QAC7I,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACxC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACpC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC9B,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzD,IAAI,OAAO,EAAE,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7I,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;AACjG,CAAC"}

package/lib/rsi-bootstrap-manifest.d.ts

@@ -0,0 +1,39 @@
+import { type ActiveLarkOwnerBinding } from '@dsh-enhanced/assistant-delivery';
+import { type RuntimeObserverTarget } from '@dsh-enhanced/plugin-control-plane';
+import { type Node } from 'yaml';
+import type { RsiAuthorityResources } from './rsi-authority-resources.js';
+import type { Pin, RsiAuthorityRuntime } from './rsi-authority-runtime.js';
+import type { RsiBuildEnvironment } from './rsi-build.js';
+import type { RsiSetupManifest } from './rsi-profile.js';
+import type { RsiSourceWorkspace } from './rsi-source.js';
+import type { RsiCreationBuildEnvironment } from './rsi-creation-build.js';
+export interface RsiBootstrapManifestInput {
+    dshHome: string;
+    targetProfile: string;
+    coordinatorProfile: string;
+    /** Exact `dsh --dump-config` YAML of the still unmodified target profile. */
+    targetEffective: string;
+    owner: ActiveLarkOwnerBinding;
+    resources: RsiAuthorityResources;
+    runtime: RsiAuthorityRuntime;
+    source: RsiSourceWorkspace;
+    sourceBuild: RsiBuildEnvironment['sourceBuild'];
+    /** Prepared immutable behavior image; absent for legacy manifests. */
+    creationBuild?: RsiCreationBuildEnvironment;
+    git: Pin;
+    now: number;
+    expiresAt: number;
+    /** Complete installed scope authorized for source repair. */
+    plugins: readonly string[];
+    /** Loader observations of stable rows that will not be rewritten by the compiler. */
+    observerTargets: readonly RuntimeObserverTarget[];
+    /** Exact installed profile files that Host will independently pin on activation. */
+    hostDeploymentInputs: readonly string[];
+}
+/** Include's entryListSchema keeps !!js as an inert raw `{__jsExpr}` value in
+ * Loader Entry.options. Runtime observation hashes that raw value before the
+ * Fiber interpolates it. Never evaluate the expression while preparing setup. */
+export declare function rawLoaderConfig(node: Node | string | number | boolean | null | undefined, label: string): unknown;
+/** This only creates a candidate deployment contract. It performs no I/O and issues no authority. */
+export declare function createRsiBootstrapManifest(input: RsiBootstrapManifestInput): RsiSetupManifest;
+//# sourceMappingURL=rsi-bootstrap-manifest.d.ts.map

package/lib/rsi-bootstrap-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-bootstrap-manifest.d.ts","sourceRoot":"","sources":["../src/rsi-bootstrap-manifest.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AAC9E,OAAO,EAAgF,KAAK,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAC7J,OAAO,EAAkD,KAAK,IAAI,EAAgB,MAAM,MAAM,CAAA;AAE9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,KAAK,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAC1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAIzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAA;AAW1E,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,sBAAsB,CAAA;IAC7B,SAAS,EAAE,qBAAqB,CAAA;IAChC,OAAO,EAAE,mBAAmB,CAAA;IAC5B,MAAM,EAAE,kBAAkB,CAAA;IAC1B,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAA;IAC/C,sEAAsE;IACtE,aAAa,CAAC,EAAE,2BAA2B,CAAA;IAC3C,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,qFAAqF;IACrF,eAAe,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACjD,oFAAoF;IACpF,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC;AAsBD;;iFAEiF;AACjF,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA6BjH;AAED,qGAAqG;AACrG,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,yBAAyB,GAAG,gBAAgB,CA0O7F"}