@dsh-enhanced/lark-channel 0.1.48 → 0.1.53

package/lib/rsi-bootstrap.js

@@ -0,0 +1,363 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, readdir, realpath, rmdir, unlink } from 'node:fs/promises';
+import { createHash, randomBytes } from 'node:crypto';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { pathToFileURL } from 'node:url';
+import { DatabaseSync } from 'node:sqlite';
+import { ControlPlaneStore, controlPlaneSchemaVersion } from '@dsh-enhanced/plugin-control-plane';
+import { compileRsiAuthorityConfigs } from './rsi-authority-config.js';
+import { compileRsiProfiles } from './rsi-profile.js';
+import { validateRsiAuthorities } from './rsi-setup.js';
+import { prepareRsiAuthorityResources } from './rsi-authority-resources.js';
+import { prepareRsiAuthorityRuntime } from './rsi-authority-runtime.js';
+import { readRsiHostUpdateOverlayChain } from './rsi-host-update.js';
+import { readRsiSourceMaintenance } from './rsi-source-maintenance.js';
+import { rsiBuildResources as io } from './rsi-build.js';
+function sameOwnedFile(stat, file) {
+    return stat.dev === file.dev && stat.ino === file.ino && stat.size === file.size
+        && stat.mtimeNs === file.mtimeNs && stat.ctimeNs === file.ctimeNs;
+}
+const hash = (value) => createHash('sha256').update(value).digest('hex');
+const json = (value) => `${JSON.stringify(value, null, 2)}\n`;
+function fail(message) { throw new Error(`rsi bootstrap: ${message}`); }
+function within(path, root) {
+    return isAbsolute(path) && resolve(path) === path && path.startsWith(`${root}/`) && !path.includes('\0') && !/[\r\n]/u.test(path);
+}
+async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+async function privateFile(path, maximum = 2_097_152) {
+    if (await realpath(path) !== path)
+        fail(`noncanonical file: ${path}`);
+    const stat = await lstat(path);
+    if (stat.nlink !== 1 || !stat.isFile())
+        fail(`unsafe file: ${path}`);
+    await io.directory(dirname(path));
+    return io.readStable(path, maximum, true);
+}
+async function verifyRepairReceipts(overlay, home, profile) {
+    if (hash(await privateFile(join(home, '.rsi-setup-journal.json'))) !== overlay.repair.after.journalDigest
+        || hash(await privateFile(join(home, 'rsi-creation-builds', profile, 'bootstrap.json'), 65_536))
+            !== overlay.repair.after.creationReceiptDigest)
+        fail('signed owner repair receipts changed');
+}
+/** Read-only retry admission before either Host is stopped. */
+export async function inspectRsiOwnerConfiguration(input) {
+    input.signal.throwIfAborted();
+    const { manifest, resources, patches } = input;
+    const manifestPath = join(resources.configRoot, 'manifest.json');
+    const bootstrapSource = (await privateFile(join(resources.configRoot, 'bootstrap.json'))).toString('utf8');
+    const receipt = JSON.parse(bootstrapSource);
+    const home = dirname(dirname(manifest.controlPlane.runtimeObserver.profilePath));
+    const overlayPath = join(resources.configRoot, 'host-update-overlays.json');
+    const overlay = readRsiHostUpdateOverlayChain({ source: await exists(overlayPath)
+            ? (await privateFile(overlayPath)).toString('utf8') : undefined,
+        resources, dshHome: home, profile: manifest.targetProfile, bootstrapSource });
+    const effective = overlay.latest ?? receipt;
+    const expectedResult = { schemaVersion: 1, manifestPath,
+        manifestDigest: hash(json(manifest)), targetProfile: manifest.targetProfile,
+        coordinatorProfile: manifest.coordinatorProfile };
+    if (receipt.schemaVersion !== 1 || !isDeepStrictEqual(effective.result, expectedResult)
+        || !effective.files || typeof effective.files !== 'object' || Array.isArray(effective.files)
+        || Object.keys(effective.files).length > 512
+        || effective.files[manifestPath] !== expectedResult.manifestDigest)
+        fail('existing owner receipt differs before stopping Hosts');
+    const roots = [resources.configRoot, resources.stateRoot, resources.registry.root];
+    for (const [path, digest] of Object.entries(effective.files)) {
+        input.signal.throwIfAborted();
+        if (!roots.some(root => within(path, root)) || !/^[a-f0-9]{64}$/u.test(digest)
+            || hash(await privateFile(path)) !== digest)
+            fail('existing configuration changed before stopping Hosts');
+    }
+    const key = await privateFile(manifest.controlPlane.runtimeObserver.keyPath, 32);
+    if (key.length !== 32 || hash(key) !== receipt.observerKeyDigest)
+        fail('observer identity changed before stopping Hosts');
+    const repair = overlay.records.findLast(record => record.kind === 'rsi-owner-repair-overlay');
+    if (repair?.kind === 'rsi-owner-repair-overlay')
+        await verifyRepairReceipts(repair, home, manifest.targetProfile);
+    if (overlay.latest) {
+        const patchDigests = { [manifest.targetProfile]: hash(patches.targetPatch),
+            [manifest.coordinatorProfile]: hash(patches.coordinatorPatch) };
+        for (const [profile, digest] of Object.entries(overlay.latest.patches)) {
+            const path = join(home, 'profiles', profile, 'cordis.patch.yml');
+            if (!within(path, join(home, 'profiles')) || hash(await privateFile(path)) !== digest)
+                fail('signed owner profile changed before stopping Hosts');
+        }
+        if (Object.entries(patchDigests).some(([profile, digest]) => overlay.latest?.patches[profile] !== digest)
+            || hash(json({ files: effective.files, patches: overlay.latest.patches })) !== overlay.latest.planDigest
+            || overlay.latest.runtimeReceiptDigest !== hash(await privateFile(join(home, 'rsi-authority-runtimes', manifest.targetProfile, 'receipt.json'), 65_536)))
+            fail('signed owner profiles changed before stopping Hosts');
+    }
+    else if (hash(json({ files: effective.files, patches })) !== receipt.planDigest) {
+        fail('owner receipt digest changed before stopping Hosts');
+    }
+    input.signal.throwIfAborted();
+}
+/** Prepare runnable owner-bound configurations, without changing either Host.
+ * The installer must hold the DSH_HOME lifecycle lock and reread the current
+ * owner/profile sources before calling. Configurations and grants are immutable
+ * for this preparation; retry never renews a grant or resets a live ledger. */
+export async function prepareRsiOwnerConfiguration(input, context) {
+    const signal = AbortSignal.any([context.signal ?? new AbortController().signal, AbortSignal.timeout(120_000)]);
+    signal.throwIfAborted();
+    const { manifest, resources } = input;
+    if (context.binding.status !== 'active' || context.binding.owner.status !== 'active'
+        || context.binding.owner.role !== 'owner' || context.binding.conversation.kind !== 'dm'
+        || !isDeepStrictEqual(context.binding.principal, context.binding.owner.principal))
+        fail('active owner DM binding is required');
+    const observer = manifest.controlPlane.runtimeObserver;
+    if (!observer)
+        fail('runtime observer is required');
+    const home = dirname(dirname(observer.profilePath));
+    if (observer.profilePath !== join(home, 'profiles', manifest.targetProfile)
+        || resources.root !== join(home, 'rsi-authorities', manifest.targetProfile))
+        fail('installation paths differ');
+    // Revalidate persisted identities and program copies before writing grants.
+    // These calls preserve the installation IDs; they do not adopt foreign state.
+    const actualResources = await prepareRsiAuthorityResources({ dshHome: home, profile: manifest.targetProfile, signal });
+    if (!isDeepStrictEqual(actualResources, resources))
+        fail('signing resources differ from the installation');
+    const runtime = await prepareRsiAuthorityRuntime({ dshHome: home, profile: manifest.targetProfile, signal });
+    if (!isDeepStrictEqual(runtime, input.runtime))
+        fail('authority runtime differs from the installation');
+    const compiled = compileRsiAuthorityConfigs(input);
+    const manifestPath = join(resources.configRoot, 'manifest.json');
+    const receiptPath = join(resources.configRoot, 'bootstrap.json');
+    const overlayPath = join(resources.configRoot, 'host-update-overlays.json');
+    const files = { ...compiled.files };
+    if (Object.hasOwn(files, manifestPath) || Object.hasOwn(files, receiptPath) || Object.hasOwn(files, overlayPath))
+        fail('reserved configuration path');
+    files[manifestPath] = json(manifest);
+    if (Object.keys(files).length > 64 || Object.entries(files).some(([path, value]) => !within(path, resources.configRoot) || typeof value !== 'string' || Buffer.byteLength(value) > 2_097_152))
+        fail('configuration output exceeds its bounds');
+    if (!within(observer.keyPath, resources.configRoot) || Object.hasOwn(files, observer.keyPath)
+        || [manifestPath, receiptPath, overlayPath].includes(observer.keyPath))
+        fail('observer key must have a separate private configuration path');
+    const ledgerPath = join(manifest.controlPlane.statePath, 'control.sqlite');
+    if (!within(ledgerPath, resources.stateRoot) || !within(observer.socketPath, resources.stateRoot))
+        fail('runtime state must stay in the installation state root');
+    const readSourceMaintenance = async () => {
+        const path = join(home, 'rsi-sources', manifest.targetProfile, 'maintenance.json');
+        if (!await exists(path))
+            return [];
+        const maintained = await readRsiSourceMaintenance({ logicalHome: home, physicalHome: home,
+            profile: manifest.targetProfile, signal });
+        if (maintained.workspace.repository !== manifest.controlPlane.sourceJobs?.repository
+            || !isDeepStrictEqual(maintained.workspace.baseline, manifest.controlPlane.sourceJobs.baseline)) {
+            fail('source maintenance differs from owner configuration');
+        }
+        return maintained.records;
+    };
+    const sourceMaintenance = await readSourceMaintenance();
+    const directories = [...new Set([...compiled.directories, dirname(ledgerPath), dirname(observer.keyPath),
+            ...Object.keys(files).map(dirname)])].sort((left, right) => left.length - right.length || left.localeCompare(right));
+    const roots = [resources.configRoot, resources.stateRoot, resources.registry.root];
+    if (directories.some(path => !roots.some(root => path === root || within(path, root))))
+        fail('generated directory is outside prepared resources');
+    const expectedFiles = Object.fromEntries(Object.entries(files).sort(([left], [right]) => left.localeCompare(right)).map(([path, value]) => [path, hash(value)]));
+    const result = { schemaVersion: 1, manifestPath, manifestDigest: hash(files[manifestPath]),
+        targetProfile: manifest.targetProfile, coordinatorProfile: manifest.coordinatorProfile };
+    const verify = async (rememberSqliteSidecars) => {
+        signal.throwIfAborted();
+        for (const directory of directories)
+            await io.directory(directory);
+        await privateFile(ledgerPath, 268_435_456);
+        const database = new DatabaseSync(ledgerPath, { readOnly: true });
+        try {
+            const row = database.prepare('PRAGMA user_version').get();
+            if (row.user_version !== controlPlaneSchemaVersion)
+                fail('control ledger schema differs from the installed runtime');
+            const stored = database.prepare('SELECT record_json FROM source_maintenance WHERE repository=? ORDER BY sequence')
+                .all(manifest.controlPlane.sourceJobs.repository).map(row => JSON.parse(String(row.record_json)));
+            if (!isDeepStrictEqual(stored, sourceMaintenance)
+                || !isDeepStrictEqual(await readSourceMaintenance(), sourceMaintenance))
+                fail('source maintenance ledger differs from retained history');
+        }
+        finally {
+            database.close();
+            await rememberSqliteSidecars?.();
+        }
+        const patches = await compileRsiProfiles({ manifest, dshHome: home, ...context.profiles, owner: context.binding });
+        await validateRsiAuthorities(manifest, context.binding, manifest.serviceEnvironment?.target);
+        for (const phase of Object.keys(runtime.releaseAdapters)) {
+            signal.throwIfAborted();
+            const adapter = await import(__rewriteRelativeImportExtension(pathToFileURL(runtime.releaseAdapters[phase].path).href));
+            if (typeof adapter.inspectLocalReleaseAdapterConfiguration !== 'function')
+                fail('installed release adapter lacks configuration inspection');
+            const actual = adapter.inspectLocalReleaseAdapterConfiguration(manifest.serviceEnvironment.target, phase);
+            const expected = compiled.trust.releaseAdapters[phase];
+            if (!isDeepStrictEqual(actual, { id: expected.id, phase, executablePath: expected.path,
+                authority: expected.authority, keyId: expected.keyId }))
+                fail('release adapter configuration differs from trust');
+        }
+        signal.throwIfAborted();
+        return patches;
+    };
+    if (await exists(receiptPath)) {
+        const bootstrapSource = (await privateFile(receiptPath)).toString('utf8');
+        const receipt = JSON.parse(bootstrapSource);
+        const overlay = readRsiHostUpdateOverlayChain({ source: await exists(overlayPath)
+                ? (await privateFile(overlayPath)).toString('utf8') : undefined,
+            resources, dshHome: home, profile: manifest.targetProfile, bootstrapSource });
+        const effective = overlay.latest ?? receipt;
+        if (receipt.schemaVersion !== 1 || !isDeepStrictEqual(effective.files, expectedFiles)
+            || !isDeepStrictEqual(effective.result, result))
+            fail('existing owner configuration differs; retain it for reconciliation');
+        for (const [path, digest] of Object.entries(expectedFiles))
+            if (hash(await privateFile(path)) !== digest)
+                fail('existing configuration changed');
+        const key = await privateFile(observer.keyPath, 32);
+        if (key.length !== 32 || hash(key) !== receipt.observerKeyDigest)
+            fail('observer identity changed');
+        const patches = await verify();
+        const repair = overlay.records.findLast(record => record.kind === 'rsi-owner-repair-overlay');
+        if (repair?.kind === 'rsi-owner-repair-overlay')
+            await verifyRepairReceipts(repair, home, manifest.targetProfile);
+        if (overlay.latest) {
+            const patchDigests = { [manifest.targetProfile]: hash(patches.targetPatch),
+                [manifest.coordinatorProfile]: hash(patches.coordinatorPatch) };
+            for (const [profile, digest] of Object.entries(overlay.latest.patches)) {
+                const path = join(home, 'profiles', profile, 'cordis.patch.yml');
+                if (!within(path, join(home, 'profiles')) || hash(await privateFile(path)) !== digest)
+                    fail('signed owner profile changed');
+            }
+            if (Object.entries(patchDigests).some(([profile, digest]) => overlay.latest?.patches[profile] !== digest)
+                || hash(json({ files: expectedFiles, patches: overlay.latest.patches })) !== overlay.latest.planDigest
+                || overlay.latest.runtimeReceiptDigest !== hash(await privateFile(join(home, 'rsi-authority-runtimes', manifest.targetProfile, 'receipt.json'), 65_536)))
+                fail('signed Host update differs from compiled configuration');
+        }
+        else if (hash(json({ files: expectedFiles, patches })) !== receipt.planDigest)
+            fail('owner or compiled profiles changed');
+        return result;
+    }
+    // First preparation must not overwrite an operator's configuration or attach
+    // new installation IDs to an existing ledger. A crash leaves inspectable
+    // partial resources; it is never interpreted as a fresh installation.
+    const sqliteSidecars = [`${ledgerPath}-wal`, `${ledgerPath}-shm`];
+    if ((await readdir(resources.configRoot)).length || await exists(ledgerPath)
+        || (await Promise.all(sqliteSidecars.map(exists))).some(Boolean))
+        fail('unregistered configuration or ledger already exists');
+    const ownedFiles = [];
+    const ownedDirectories = [];
+    const remember = async (path) => {
+        const stat = await lstat(path, { bigint: true });
+        const digest = hash(await privateFile(path, 268_435_456));
+        const after = await lstat(path, { bigint: true });
+        if (stat.dev !== after.dev || stat.ino !== after.ino || stat.size !== after.size
+            || stat.mtimeNs !== after.mtimeNs || stat.ctimeNs !== after.ctimeNs)
+            fail('created file changed while recording cleanup ownership');
+        const previous = ownedFiles.find(file => file.path === path);
+        if (previous) {
+            if (!sameOwnedFile(stat, previous) || digest !== previous.digest)
+                fail('created file changed after cleanup ownership was recorded');
+            return;
+        }
+        ownedFiles.push({ path, dev: stat.dev, ino: stat.ino, size: stat.size,
+            mtimeNs: stat.mtimeNs, ctimeNs: stat.ctimeNs, digest });
+    };
+    const rememberSqliteSidecars = async () => {
+        for (const path of sqliteSidecars)
+            if (await exists(path))
+                await remember(path);
+    };
+    const directory = async (path) => {
+        if (roots.includes(path)) {
+            await io.directory(path);
+            return;
+        }
+        await directory(dirname(path));
+        try {
+            await mkdir(path, { mode: 0o700 });
+            const stat = await lstat(path);
+            ownedDirectories.push({ path, dev: stat.dev, ino: stat.ino });
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+        await io.directory(path);
+    };
+    const write = async (path, bytes) => {
+        signal.throwIfAborted();
+        const descriptor = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        try {
+            await descriptor.writeFile(bytes);
+            await descriptor.sync();
+        }
+        finally {
+            await descriptor.close();
+            await remember(path);
+        }
+    };
+    try {
+        for (const path of directories) {
+            signal.throwIfAborted();
+            await directory(path);
+        }
+        await write(observer.keyPath, randomBytes(32));
+        // Create the real schema. No empty-file stand-in is accepted as a ledger.
+        const store = new ControlPlaneStore({ path: ledgerPath });
+        try {
+            if (sourceMaintenance.length) {
+                const baseline = manifest.controlPlane.sourceJobs?.baseline;
+                if (!baseline)
+                    fail('retained source maintenance requires the original baseline');
+                await store.importSourceMaintenanceRecords(sourceMaintenance, { trust: compiled.trust, baseline });
+            }
+        }
+        finally {
+            store.close();
+            await remember(ledgerPath);
+            await rememberSqliteSidecars();
+        }
+        for (const [path, bytes] of Object.entries(files))
+            await write(path, bytes);
+        const planDigest = hash(json({ files: expectedFiles, patches: await verify(rememberSqliteSidecars) }));
+        const receipt = { schemaVersion: 1, planDigest, files: expectedFiles,
+            observerKeyDigest: hash(await privateFile(observer.keyPath, 32)), result };
+        await write(receiptPath, json(receipt));
+        for (const path of [...directories].reverse())
+            await io.syncDirectory(path);
+        return result;
+    }
+    catch (error) {
+        // Only remove exact resources created by this invocation. A changed file or
+        // nonempty directory survives for reconciliation instead of being erased.
+        for (const file of ownedFiles.reverse()) {
+            try {
+                const stat = await lstat(file.path, { bigint: true });
+                if (sameOwnedFile(stat, file) && hash(await privateFile(file.path, 268_435_456)) === file.digest
+                    && sameOwnedFile(await lstat(file.path, { bigint: true }), file))
+                    await unlink(file.path);
+            }
+            catch { }
+        }
+        for (const entry of ownedDirectories.reverse()) {
+            try {
+                const stat = await lstat(entry.path);
+                if (stat.dev === entry.dev && stat.ino === entry.ino)
+                    await rmdir(entry.path);
+            }
+            catch { }
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=rsi-bootstrap.js.map

package/lib/rsi-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-bootstrap.js","sourceRoot":"","sources":["../src/rsi-bootstrap.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAA;AACjG,OAAO,EAAE,0BAA0B,EAAgC,MAAM,2BAA2B,CAAA;AACpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,6BAA6B,EAA8B,MAAM,sBAAsB,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAAE,MAAM,gBAAgB,CAAA;AA0BxD,SAAS,aAAa,CAAC,IAAiB,EAAE,IAAe;IACvD,OAAO,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;WAC3E,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAA;AACrE,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;AAC9E,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AACtF,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACnI,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAA;IAAC,CAAC;AAC5I,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAO,GAAG,SAAS;IAC1D,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;IACpE,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACjC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AAC3C,CAAC;AACD,KAAK,UAAU,oBAAoB,CAAC,OAA8B,EAAE,IAAY,EAAE,OAAe;IAC/F,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa;WACpG,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;AAClG,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAGlD;IACC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;IAC7B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IAChE,MAAM,eAAe,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAY,CAAA;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAgB,CAAC,WAAW,CAAC,CAAC,CAAA;IACjF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,6BAA6B,CAAC,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC;YAC/E,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACjE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAA;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAA;IAC3C,MAAM,cAAc,GAA0B,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY;QAC5E,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa;QAC3E,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAA;IACnD,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC;WAClF,CAAC,SAAS,CAAC,KAAK,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;WACzF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;WACzC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,cAAc,CAAC,cAAc;QAAE,IAAI,CAAC,sDAAsD,CAAC,CAAA;IAClI,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAClF,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;eACzE,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM;YAAE,IAAI,CAAC,sDAAsD,CAAC,CAAA;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAgB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACjF,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,iBAAiB;QAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;IACzH,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAA;IAC7F,IAAI,MAAM,EAAE,IAAI,KAAK,0BAA0B;QAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;IACjH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACxE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAA;QACjE,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM;gBACnF,IAAI,CAAC,oDAAoD,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;eACpG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,UAAU;eACrG,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EACzE,wBAAwB,EAAE,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7E,IAAI,CAAC,qDAAqD,CAAC,CAAA;IAC/D,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QAClF,IAAI,CAAC,oDAAoD,CAAC,CAAA;IAC5D,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;AAC/B,CAAC;AAED;;;+EAG+E;AAC/E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAA8B,EAC/E,OAAqC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC9G,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IACrC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;WAC/E,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,KAAK,IAAI;WACpF,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;IAChI,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAA;IACtD,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IACnD,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC;WACtE,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,CAAC,aAAa,CAAC;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAChH,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,eAAe,GAAG,MAAM,4BAA4B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;IACtH,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,SAAS,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IAC1G,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5G,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,iDAAiD,CAAC,CAAA;IACvG,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAA;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;IACnC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACrJ,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CACjF,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAA;IAC5J,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;WACxF,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,8DAA8D,CAAC,CAAA;IAC9I,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC1E,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;IACjK,MAAM,qBAAqB,GAAG,KAAK,IAAI,EAAE;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAA;QAClF,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QAClC,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;YACvF,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,IAAI,UAAU,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU;eAC/E,CAAC,iBAAiB,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC,qDAAqD,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,UAAU,CAAC,OAAO,CAAA;IAC3B,CAAC,CAAA;IACD,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,EAAE,CAAA;IACvD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;IACtH,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAClF,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;IACjJ,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAChK,MAAM,MAAM,GAA0B,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAE,CAAC;QAChH,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAA;IAC1F,MAAM,MAAM,GAAG,KAAK,EAAE,sBAA4C,EAAE,EAAE;QACpE,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,KAAK,MAAM,SAAS,IAAI,WAAW;YAAE,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QAClE,MAAM,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA8B,CAAA;YACrF,IAAI,GAAG,CAAC,YAAY,KAAK,yBAAyB;gBAAE,IAAI,CAAC,0DAA0D,CAAC,CAAA;YACpH,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,iFAAiF,CAAC;iBAC/G,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAW,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAY,CAAC,CAAA;YAC/G,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC;mBAC5C,CAAC,iBAAiB,CAAC,MAAM,qBAAqB,EAAE,EAAE,iBAAiB,CAAC;gBAAE,IAAI,CAAC,yDAAyD,CAAC,CAAA;QAC5I,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,KAAK,EAAE,CAAA;YAChB,MAAM,sBAAsB,EAAE,EAAE,CAAA;QAClC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QAClH,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAA;QAC5F,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAgD,EAAE,CAAC;YACxG,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,OAAO,GAAG,MAAM,MAAM,kCAAC,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAEnF,CAAA;YACD,IAAI,OAAO,OAAO,CAAC,uCAAuC,KAAK,UAAU;gBAAE,IAAI,CAAC,0DAA0D,CAAC,CAAA;YAC3I,MAAM,MAAM,GAAG,OAAO,CAAC,uCAAuC,CAAC,QAAQ,CAAC,kBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YAC1G,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAgB,CAAC,KAAK,CAAE,CAAA;YACxD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,IAAI;gBACpF,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;QACrH,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IACD,IAAI,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAG,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAY,CAAA;QACtD,MAAM,OAAO,GAAG,6BAA6B,CAAC,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC;gBAC/E,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAA;QAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAA;QAC3C,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC;eAChF,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,IAAI,CAAC,oEAAoE,CAAC,CAAA;QAC7H,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;YAAE,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM;gBAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAChJ,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,iBAAiB;YAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACnG,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAA;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAA;QAC7F,IAAI,MAAM,EAAE,IAAI,KAAK,0BAA0B;YAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;QACjH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACxE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAA;YACjE,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;gBAChE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM;oBAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;YAC7H,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;mBACpG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,UAAU;mBACnG,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EACzE,wBAAwB,EAAE,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;gBAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACjJ,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU;YAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;QAC3H,OAAO,MAAM,CAAA;IACf,CAAC;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,cAAc,GAAG,CAAC,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,CAAC,CAAA;IACjE,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,MAAM,CAAC,UAAU,CAAC;WACvE,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,qDAAqD,CAAC,CAAA;IAC/H,MAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,MAAM,gBAAgB,GAAsD,EAAE,CAAA;IAC9E,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eAC3E,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACrI,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QAC5D,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,IAAI,CAAC,2DAA2D,CAAC,CAAA;YACnI,OAAM;QACR,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;YACnE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAA;IACD,MAAM,sBAAsB,GAAG,KAAK,IAAI,EAAE;QACxC,KAAK,MAAM,IAAI,IAAI,cAAc;YAAE,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACjF,CAAC,CAAA;IACD,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QAC9D,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;QACvF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,KAAsB,EAAE,EAAE;QAC3D,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC5H,IAAI,CAAC;YAAC,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;gBAC1D,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IAC5D,CAAC,CAAA;IACD,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAClF,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9C,0EAA0E;QAC1E,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACzD,IAAI,CAAC;YACH,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAA;gBAC3D,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,4DAA4D,CAAC,CAAA;gBACjF,MAAM,KAAK,CAAC,8BAA8B,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpG,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;YAC1B,MAAM,sBAAsB,EAAE,CAAA;QAChC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAA;QACtG,MAAM,OAAO,GAAY,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa;YAC3E,iBAAiB,EAAE,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAA;QAC5E,MAAM,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE;YAAE,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC3E,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,0EAA0E;QAC1E,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrD,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;uBAC3F,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC;oBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7F,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC;gBAAC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;oBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACtI,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/rsi-build.d.ts

@@ -0,0 +1,54 @@
+import type { Config as ControlPlaneConfig } from '@dsh-enhanced/plugin-control-plane';
+import { type RsiSourceWorkspace } from './rsi-source.js';
+type SourceBuild = Extract<NonNullable<ControlPlaneConfig['sourceBuild']>, {
+    image: string;
+}>;
+export declare class RsiBuildUnavailableError extends Error {
+    readonly code = "rsi-build-unavailable";
+    constructor(message: string);
+}
+export interface RsiBuildEnvironment {
+    schemaVersion: 1;
+    sourceCommit: string;
+    sourceBuild: SourceBuild;
+}
+declare function directory(path: string, privateMode?: boolean): Promise<void>;
+declare function readStable(path: string, maximum: number, privateMode?: boolean, allowRoot?: boolean): Promise<Buffer>;
+declare function writeExclusive(path: string, bytes: string | Buffer): Promise<void>;
+declare function syncDirectory(path: string): Promise<void>;
+/** Drain a cancelled builder, giving its own finally block time to remove its context. */
+declare function command(executable: string, args: readonly string[], environment: NodeJS.ProcessEnv, signal: AbortSignal, timeoutMs: number, outputLimit?: number): Promise<string>;
+declare function isolatedEnvironment(home: string): NodeJS.ProcessEnv;
+declare function hostPlatform(): 'linux/amd64' | 'darwin/amd64' | 'darwin/arm64';
+declare function localSocket(path?: string): Promise<string>;
+declare function dockerArgs(args: string[], scratch: string, socket?: string): string[];
+export declare const rsiBuildResources: {
+    directory: typeof directory;
+    readStable: typeof readStable;
+    writeExclusive: typeof writeExclusive;
+    syncDirectory: typeof syncDirectory;
+    command: typeof command;
+    isolatedEnvironment: typeof isolatedEnvironment;
+    hostPlatform: typeof hostPlatform;
+    localSocket: typeof localSocket;
+    dockerArgs: typeof dockerArgs;
+};
+/** Read recorded build inputs without creating resources or running Docker.
+ * Image availability is checked separately by preparation/execution. */
+export declare function readRsiBuildEnvironment(input: {
+    dshHome: string;
+    profile: string;
+    source: RsiSourceWorkspace;
+    signal?: AbortSignal;
+}): Promise<RsiBuildEnvironment>;
+/** Caller holds the DSH_HOME lifecycle lock; no profile or service is changed here. */
+export declare function prepareRsiBuildEnvironment(input: {
+    dshHome: string;
+    profile: string;
+    source: RsiSourceWorkspace;
+    dockerPath?: string | undefined;
+    socketPath?: string | undefined;
+    signal?: AbortSignal;
+}): Promise<RsiBuildEnvironment>;
+export {};
+//# sourceMappingURL=rsi-build.d.ts.map

package/lib/rsi-build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-build.d.ts","sourceRoot":"","sources":["../src/rsi-build.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,IAAI,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AACtF,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEjF,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAa7F,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,2BAA0B;gBAC3B,OAAO,EAAE,MAAM;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,WAAW,CAAA;CACzB;AA4BD,iBAAe,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE;AACD,iBAAe,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,UAAQ,EAAE,SAAS,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAYhH;AACD,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjF;AACD,iBAAe,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxD;AAED,0FAA0F;AAC1F,iBAAe,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAChG,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,SAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDnF;AAED,iBAAS,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAG5D;AAED,iBAAS,YAAY,IAAI,aAAa,GAAG,cAAc,GAAG,cAAc,CAKvE;AAED,iBAAe,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBzD;AAED,iBAAS,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAE9E;AAGD,eAAO,MAAM,iBAAiB;;;;;;;;;;CACW,CAAA;AAmJzC;wEACwE;AACxE,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IACtF,MAAM,EAAE,kBAAkB,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiBlF;AAED,uFAAuF;AACvF,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IACrH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6DxH"}