@dsh-enhanced/lark-channel 0.1.65 → 0.1.67

package/lib/rsi-release-build.d.ts

@@ -1,4 +1,5 @@
 import { type RsiBuildEnvironment } from './rsi-build.js';
+import type { LinuxRsiBuildEnvironment } from './rsi-linux-runtime-bootstrap.js';
 interface Pin {
     path: string;
     sha256: string;
@@ -18,24 +19,39 @@ export interface RsiReleaseBuildEnvironment {
     image: string;
     releaseBuild: RsiReleaseBuildConfig;
 }
+/** Native replacement for the immutable Docker image export: the release trees
+ * are copied from the independently verified schema 3 Linux runtime, and the
+ * receipt binds that runtime's content digest instead of an image reference. */
+export interface NativeRsiReleaseBuildEnvironment {
+    schemaVersion: 2;
+    backend: 'linux-native';
+    sourceCommit: string;
+    runtimeDigest: string;
+    releaseBuild: RsiReleaseBuildConfig;
+}
+export type PreparedReleaseBuildEnvironment = RsiReleaseBuildEnvironment | NativeRsiReleaseBuildEnvironment;
+export type ReleaseBuildInput = RsiBuildEnvironment | LinuxRsiBuildEnvironment;
 export declare class RsiReleaseBuildUnavailableError extends Error {
     constructor(message: string);
 }
-/** Verify existing exported inputs only; never creates a container or repairs a
- * missing export. The caller separately verifies the source image evidence. */
+/** Verify existing exported inputs only; never creates a container, copies
+ * assets or repairs a missing export. The caller separately verifies the source
+ * image evidence or the schema 3 Linux runtime. */
 export declare function readRsiReleaseBuildEnvironment(input: {
     dshHome: string;
     profile: string;
-    build: RsiBuildEnvironment;
+    build: ReleaseBuildInput;
     signal?: AbortSignal;
-}): Promise<RsiReleaseBuildEnvironment>;
-/** Caller holds the home lifecycle lock. Exports only fixed assets from the
- * already prepared immutable image; the container is never started. */
+}): Promise<PreparedReleaseBuildEnvironment>;
+/** Caller holds the home lifecycle lock. A Docker build exports fixed assets
+ * from the already prepared immutable image (the container is never started);
+ * a schema 3 native build copies the same three trees from the verified Linux
+ * runtime. Neither path needs a Docker CLI, daemon, socket or image. */
 export declare function prepareRsiReleaseBuildEnvironment(input: {
     dshHome: string;
     profile: string;
-    build: RsiBuildEnvironment;
+    build: ReleaseBuildInput;
     signal?: AbortSignal;
-}): Promise<RsiReleaseBuildEnvironment>;
+}): Promise<PreparedReleaseBuildEnvironment>;
 export {};
 //# sourceMappingURL=rsi-release-build.d.ts.map

package/lib/rsi-release-build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rsi-release-build.d.ts","sourceRoot":"","sources":["../src/rsi-release-build.ts"],"names":[],"mappings":"AAMA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAElF,UAAU,GAAG;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC9C,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,GAAG,CAAC;IAAC,aAAa,EAAE,GAAG,CAAC;IAAC,cAAc,EAAE,GAAG,CAAC;IAAC,cAAc,EAAE,GAAG,CAAA;IACpF,QAAQ,EAAE,GAAG,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,SAAS,EAAE,GAAG,CAAA;CAC9C;AACD,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,qBAAqB,CAAA;CAC3F;AAGD,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,OAAO,EAAE,MAAM;CAC5B;AAeD;+EAC+E;AAC/E,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CACnF,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAgBtC;AA4BD;uEACuE;AACvE,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CACnF,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA2FtC"}
+{"version":3,"file":"rsi-release-build.d.ts","sourceRoot":"","sources":["../src/rsi-release-build.ts"],"names":[],"mappings":"AAOA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAA;AAEhF,UAAU,GAAG;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC9C,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,GAAG,CAAC;IAAC,aAAa,EAAE,GAAG,CAAC;IAAC,cAAc,EAAE,GAAG,CAAC;IAAC,cAAc,EAAE,GAAG,CAAA;IACpF,QAAQ,EAAE,GAAG,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;CAC/C;AACD,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,qBAAqB,CAAA;CAC3F;AACD;;gFAEgF;AAChF,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;IAC/D,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,qBAAqB,CAAA;CAC3D;AACD,MAAM,MAAM,+BAA+B,GAAG,0BAA0B,GAAG,gCAAgC,CAAA;AAC3G,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,wBAAwB,CAAA;AAK9E,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,OAAO,EAAE,MAAM;CAC5B;AAmBD;;mDAEmD;AACnD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CACjF,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA2B3C;AA6CD;;;wEAGwE;AACxE,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CACjF,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAyG3C"}

package/lib/rsi-release-build.js

@@ -7,11 +7,12 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
     return path;
 };
 import { createHash, randomUUID } from 'node:crypto';
-import { chmod, copyFile, lstat, mkdir, mkdtemp, readdir, rename, rm } from 'node:fs/promises';
+import { chmod, copyFile, cp, lstat, mkdir, mkdtemp, readdir, rename, rm } from 'node:fs/promises';
 import { createRequire } from 'node:module';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { isDeepStrictEqual } from 'node:util';
+import { linuxRuntimeDigest, validateLinuxRuntime, verifyLinuxRuntime } from '@dsh-enhanced/assistant-isolation';
 import { rsiBuildResources as io } from './rsi-build.js';
 export class RsiReleaseBuildUnavailableError extends Error {
     constructor(message) { super(`rsi release build unavailable: ${message}`); }
@@ -27,8 +28,12 @@ async function inspect(root) {
     return adapter.inspectLocalReleaseBuildEnvironment({ pnpmRoot: join(root, 'toolchain'),
         storeRoot: join(root, 'store'), cacheRoot: join(root, 'cache') });
 }
-/** Verify existing exported inputs only; never creates a container or repairs a
- * missing export. The caller separately verifies the source image evidence. */
+function nativeRuntime(build) {
+    return build.schemaVersion === 3 && build.backend === 'linux-native' ? build.runtime : undefined;
+}
+/** Verify existing exported inputs only; never creates a container, copies
+ * assets or repairs a missing export. The caller separately verifies the source
+ * image evidence or the schema 3 Linux runtime. */
 export async function readRsiReleaseBuildEnvironment(input) {
     if (!isAbsolute(input.dshHome) || resolve(input.dshHome) !== input.dshHome
         || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(input.profile))
@@ -42,16 +47,28 @@ export async function readRsiReleaseBuildEnvironment(input) {
         fail('existing release environment is incomplete');
     const receipt = JSON.parse((await io.readStable(join(final, 'bootstrap.json'), 65_536, true)).toString('utf8'));
     const { receiptDigest, ...content } = receipt;
-    if (receipt.schemaVersion !== 1 || receipt.dshHome !== input.dshHome || receipt.profile !== input.profile
-        || receipt.sourceCommit !== input.build.sourceCommit || receipt.image !== input.build.sourceBuild.image
+    const matchesInput = receipt.schemaVersion === 1
+        ? input.build.schemaVersion === 1 && receipt.image === input.build.sourceBuild.image
+        : receipt.schemaVersion === 2 && (() => {
+            const runtime = nativeRuntime(input.build);
+            return runtime !== undefined && receipt.backend === 'linux-native'
+                && receipt.runtimeDigest === linuxRuntimeDigest(runtime);
+        })();
+    // A Docker plan may never be continued by a native receipt or the reverse.
+    if (!matchesInput || receipt.dshHome !== input.dshHome || receipt.profile !== input.profile
+        || receipt.sourceCommit !== input.build.sourceCommit
         || digest(JSON.stringify(content)) !== receiptDigest
         || !isDeepStrictEqual(receipt.releaseBuild, await inspect(final)))
         fail('release environment differs from its receipt');
     input.signal?.throwIfAborted();
-    return { schemaVersion: 1, sourceCommit: receipt.sourceCommit, image: receipt.image, releaseBuild: receipt.releaseBuild };
+    return receipt.schemaVersion === 1
+        ? { schemaVersion: 1, sourceCommit: receipt.sourceCommit, image: receipt.image, releaseBuild: receipt.releaseBuild }
+        : { schemaVersion: 2, backend: 'linux-native', sourceCommit: receipt.sourceCommit,
+            runtimeDigest: receipt.runtimeDigest, releaseBuild: receipt.releaseBuild };
 }
-// Docker cp preserves image mode bits. Make exported resources private, reject
-// links/devices, and separate any hard links before the adapter pins the trees.
+// Docker cp preserves image mode bits and the native runtime trees are already
+// owner-private. Make exported resources private, reject links/devices, and
+// separate any hard links before the adapter pins the trees.
 async function harden(root, signal) {
     let entries = 0, bytes = 0;
     const visit = async (path) => {
@@ -87,16 +104,42 @@ async function harden(root, signal) {
     };
     await visit(root);
 }
-/** Caller holds the home lifecycle lock. Exports only fixed assets from the
- * already prepared immutable image; the container is never started. */
+/** Copy the three release trees from the verified immutable Linux runtime. The
+ * runtime is the native equivalent of the never-started image: its whole-tree
+ * digest is rechecked before any byte is read, and copies never follow links. */
+async function exportNativeAssets(assets, runtime, signal) {
+    await verifyLinuxRuntime(runtime, signal);
+    for (const [source, target] of [[runtime.nativePnpmRoot, join(assets, 'toolchain')],
+        [runtime.storePath, join(assets, 'store')], [runtime.cachePath, join(assets, 'cache')]]) {
+        const item = await lstat(source);
+        if (!item.isDirectory() || item.isSymbolicLink() || process.getuid && item.uid !== process.getuid())
+            fail('runtime release tree is unsafe');
+        await cp(source, target, { recursive: true, errorOnExist: true, force: false, verbatimSymlinks: true });
+    }
+    // A freshly prepared runtime store has no project registry yet; the adapter
+    // requires one and every release keeps its own, never stale runtime links.
+    await mkdir(join(assets, 'store', 'v11', 'projects'), { recursive: true, mode: 0o700 });
+}
+/** Caller holds the home lifecycle lock. A Docker build exports fixed assets
+ * from the already prepared immutable image (the container is never started);
+ * a schema 3 native build copies the same three trees from the verified Linux
+ * runtime. Neither path needs a Docker CLI, daemon, socket or image. */
 export async function prepareRsiReleaseBuildEnvironment(input) {
+    const dockerBuild = input.build.schemaVersion === 1 ? input.build : undefined;
+    const runtime = nativeRuntime(input.build);
+    if ((dockerBuild === undefined) === (runtime === undefined))
+        fail('unsupported release build backend');
     if (!isAbsolute(input.dshHome) || resolve(input.dshHome) !== input.dshHome
         || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(input.profile)
-        || input.build.schemaVersion !== 1 || !/^[a-f0-9]{40}$/u.test(input.build.sourceCommit)
-        || !/^sha256:[a-f0-9]{64}$/u.test(input.build.sourceBuild.image))
+        || !/^[a-f0-9]{40}$/u.test(input.build.sourceCommit))
         fail('invalid resource binding');
-    if (process.platform !== 'linux' || process.arch !== 'x64')
-        throw new RsiReleaseBuildUnavailableError('Linux x64 is required');
+    if (dockerBuild && !/^sha256:[a-f0-9]{64}$/u.test(dockerBuild.sourceBuild.image))
+        fail('invalid resource binding');
+    if (runtime)
+        validateLinuxRuntime(runtime);
+    if (process.platform !== 'linux' || !['x64', 'arm64'].includes(process.arch)) {
+        throw new RsiReleaseBuildUnavailableError('Linux x64/arm64 is required');
+    }
     await io.directory(input.dshHome, false);
     for (const path of ['/usr/bin/bwrap', '/usr/bin/tar']) {
         try {
@@ -117,7 +160,7 @@ export async function prepareRsiReleaseBuildEnvironment(input) {
             throw error;
     }
     await io.directory(parent);
-    const final = join(parent, input.profile), image = input.build.sourceBuild.image;
+    const final = join(parent, input.profile);
     const signal = AbortSignal.any([input.signal ?? new AbortController().signal, AbortSignal.timeout(600_000)]);
     try {
         await lstat(final);
@@ -139,11 +182,11 @@ export async function prepareRsiReleaseBuildEnvironment(input) {
     const stage = await mkdtemp(join(parent, `.${input.profile}-stage-`));
     await chmod(stage, 0o700);
     const assets = join(stage, 'assets'), token = randomUUID(), container = `dsh-release-assets-${token}`;
-    const docker = input.build.sourceBuild.dockerPath;
+    const docker = dockerBuild?.sourceBuild.dockerPath;
     let containerMayExist = false, claimed;
     const run = (args, cleanup = false) => io.command(docker, args, io.isolatedEnvironment(stage), cleanup ? new AbortController().signal : signal, cleanup ? 30_000 : 180_000);
     const cleanupContainer = async () => {
-        if (!containerMayExist)
+        if (!containerMayExist || !docker)
             return;
         // Generated name and unguessable label bind cleanup even if create's reply
         // was lost. Do not delete a replacement container with another label.
@@ -161,24 +204,30 @@ export async function prepareRsiReleaseBuildEnvironment(input) {
     try {
         await mkdir(join(stage, 'docker-config'), { mode: 0o700 });
         await mkdir(assets, { mode: 0o700 });
-        for (const name of ['toolchain', 'store', 'cache'])
-            await mkdir(join(assets, name), { mode: 0o700 });
-        await mkdir(join(assets, 'store', 'v11', 'files'), { recursive: true, mode: 0o700 });
-        containerMayExist = true;
-        await run(['create', '--name', container, '--label', `org.dsh.release-assets=${token}`,
-            '--network', 'none', '--read-only', '--entrypoint', '/bin/false', image]);
-        for (const [source, target] of [
-            ['/opt/pnpm-native/node_modules/@pnpm/exe/.', join(assets, 'toolchain')],
-            ['/usr/local/bin/node', join(assets, 'toolchain', 'node')],
-            // The image's projects registry points at its deleted /seed checkout.
-            // Each release uses a fresh writable registry, never those stale links.
-            ['/opt/pnpm-store/v11/files/.', join(assets, 'store', 'v11', 'files')],
-            ['/opt/pnpm-store/v11/index.db', join(assets, 'store', 'v11', 'index.db')],
-            ['/opt/pnpm-cache/.', join(assets, 'cache')],
-        ])
-            await run(['cp', `${container}:${source}`, target]);
-        await cleanupContainer();
-        await mkdir(join(assets, 'store', 'v11', 'projects'), { recursive: true, mode: 0o700 });
+        if (dockerBuild) {
+            const image = dockerBuild.sourceBuild.image;
+            for (const name of ['toolchain', 'store', 'cache'])
+                await mkdir(join(assets, name), { mode: 0o700 });
+            await mkdir(join(assets, 'store', 'v11', 'files'), { recursive: true, mode: 0o700 });
+            containerMayExist = true;
+            await run(['create', '--name', container, '--label', `org.dsh.release-assets=${token}`,
+                '--network', 'none', '--read-only', '--entrypoint', '/bin/false', image]);
+            for (const [source, target] of [
+                ['/opt/pnpm-native/node_modules/@pnpm/exe/.', join(assets, 'toolchain')],
+                ['/usr/local/bin/node', join(assets, 'toolchain', 'node')],
+                // The image's projects registry points at its deleted /seed checkout.
+                // Each release uses a fresh writable registry, never those stale links.
+                ['/opt/pnpm-store/v11/files/.', join(assets, 'store', 'v11', 'files')],
+                ['/opt/pnpm-store/v11/index.db', join(assets, 'store', 'v11', 'index.db')],
+                ['/opt/pnpm-cache/.', join(assets, 'cache')],
+            ])
+                await run(['cp', `${container}:${source}`, target]);
+            await cleanupContainer();
+            await mkdir(join(assets, 'store', 'v11', 'projects'), { recursive: true, mode: 0o700 });
+        }
+        else {
+            await exportNativeAssets(assets, runtime, signal);
+        }
         await harden(assets, signal);
         const toolchain = join(assets, 'toolchain');
         const environment = { PATH: `${toolchain}:/usr/bin:/bin`, HOME: stage, LANG: 'C', LC_ALL: 'C' };
@@ -193,8 +242,11 @@ export async function prepareRsiReleaseBuildEnvironment(input) {
         claimed = { dev: identity.dev, ino: identity.ino };
         for (const name of ['toolchain', 'store', 'cache'])
             await rename(join(assets, name), join(final, name));
-        const result = { schemaVersion: 1, sourceCommit: input.build.sourceCommit,
-            image, releaseBuild: await inspect(final) };
+        const result = dockerBuild
+            ? { schemaVersion: 1, sourceCommit: input.build.sourceCommit,
+                image: dockerBuild.sourceBuild.image, releaseBuild: await inspect(final) }
+            : { schemaVersion: 2, backend: 'linux-native', sourceCommit: input.build.sourceCommit,
+                runtimeDigest: linuxRuntimeDigest(runtime), releaseBuild: await inspect(final) };
         const content = { ...result, dshHome: input.dshHome, profile: input.profile };
         await io.writeExclusive(join(final, 'bootstrap.json'), JSON.stringify({ ...content, receiptDigest: digest(JSON.stringify(content)) }));
         await io.syncDirectory(final);

package/lib/rsi-release-build.js.map

@@ -1 +1 @@
-{"version":3,"file":"rsi-release-build.js","sourceRoot":"","sources":["../src/rsi-release-build.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAA4B,MAAM,gBAAgB,CAAA;AAYlF,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD,YAAY,OAAe,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;CACpF;AACD,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAC1F,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE3G,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,CAAA;IAC/F,MAAM,OAAO,GAAG,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC,IAAI,EAExG,CAAA;IACD,IAAI,OAAO,OAAO,CAAC,mCAAmC,KAAK,UAAU;QAAE,IAAI,CAAC,8DAA8D,CAAC,CAAA;IAC3I,OAAO,OAAO,CAAC,mCAAmC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QACpF,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;AACrE,CAAC;AAED;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAEpD;IACC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO;WACrE,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAChG,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACrD,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;IAC5J,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAC1H,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAA;IAC7C,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WACpG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK;WACpG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,aAAa;WACjD,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;IACzH,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC9B,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAA;AAC3H,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,MAAmB;IACrD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QAClD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,EAAE,OAAO,GAAG,OAAO;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;QACjE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;QACrH,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACxB,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACvE,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAA;YAClB,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,IAAI,KAAK,GAAG,aAAa;gBAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;YAC3F,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,SAAS,GAAG,GAAG,IAAI,SAAS,UAAU,EAAE,EAAE,CAAA;gBAChD,IAAI,CAAC;oBAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAAC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;gBAAC,CAAC;wBAC9D,CAAC;oBAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAAC,CAAC;YAClD,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACtD,CAAC;;YAAM,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AAED;uEACuE;AACvE,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAEvD;IACC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO;WACrE,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;WACzD,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;WACpF,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACpG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,CAAC,CAAA;IAC9H,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxC,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACvC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,+BAA+B,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;YACxH,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;IACxD,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAAC,CAAC;IAClI,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAA;IAChF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC5G,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,MAAM,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;QAAC,CAAC;QAC9E,OAAO,OAAO,EAAE,CAAC;YAAC,IAAK,OAAiC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,OAAO,CAAA;QAAC,CAAC;IAC7F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC,CAAA;IACrE,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,EAAE,SAAS,GAAG,sBAAsB,KAAK,EAAE,CAAA;IACrG,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAA;IACjD,IAAI,iBAAiB,GAAG,KAAK,EAAE,OAAiD,CAAA;IAChF,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACrG,OAAO,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9E,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;QACjD,IAAI,CAAC,iBAAiB;YAAE,OAAM;QAC9B,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,SAAS,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACpG,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,iBAAiB,GAAG,KAAK,CAAC;YAAC,OAAM;QAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,mDAAmD,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACtH,IAAI,KAAK,KAAK,KAAK;YAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;QAC/D,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACxC,iBAAiB,GAAG,KAAK,CAAA;IAC3B,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpC,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpF,iBAAiB,GAAG,IAAI,CAAA;QACxB,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,KAAK,EAAE;YACpF,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAA;QAC3E,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI;YAC7B,CAAC,2CAA2C,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACxE,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC1D,sEAAsE;YACtE,wEAAwE;YACxE,CAAC,6BAA6B,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACtE,CAAC,8BAA8B,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC1E,CAAC,mBAAmB,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACpC;YAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;QAC/D,MAAM,gBAAgB,EAAE,CAAA;QACxB,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACvF,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC3C,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,GAAG,SAAS,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAC/F,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzG,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzG,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,QAAQ;YAAE,IAAI,CAAC,2DAA2D,CAAC,CAAA;QAC7H,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;QACrB,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAA;QACvF,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QACvG,MAAM,MAAM,GAA+B,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;YACnG,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAA;QAC7C,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QAC7E,MAAM,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtI,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC7D,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzD,IAAI,OAAO,EAAE,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7I,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,2EAA2E;QAC3E,IAAI,CAAC;YAAC,MAAM,gBAAgB,EAAE,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;IAChI,CAAC;AACH,CAAC"}
+{"version":3,"file":"rsi-release-build.js","sourceRoot":"","sources":["../src/rsi-release-build.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAqB,MAAM,mCAAmC,CAAA;AACnI,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAA4B,MAAM,gBAAgB,CAAA;AAwBlF,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD,YAAY,OAAe,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;CACpF;AACD,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAC1F,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE3G,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,CAAA;IAC/F,MAAM,OAAO,GAAG,MAAM,MAAM,kCAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC,IAAI,EAExG,CAAA;IACD,IAAI,OAAO,OAAO,CAAC,mCAAmC,KAAK,UAAU;QAAE,IAAI,CAAC,8DAA8D,CAAC,CAAA;IAC3I,OAAO,OAAO,CAAC,mCAAmC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QACpF,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,KAAwB;IAC7C,OAAO,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAClG,CAAC;AAED;;mDAEmD;AACnD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAEpD;IACC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO;WACrE,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAChG,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACrD,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;IAC5J,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAC1H,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAA;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,KAAK,CAAC;QAC9C,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK;QACpF,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACnC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC1C,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc;mBAC7D,OAAO,CAAC,aAAa,KAAK,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC5D,CAAC,CAAC,EAAE,CAAA;IACR,2EAA2E;IAC3E,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WACtF,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY;WACjD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,aAAa;WACjD,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;IACzH,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC9B,OAAO,OAAO,CAAC,aAAa,KAAK,CAAC;QAChC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;QACpH,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;YAC/E,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAA;AAChF,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,6DAA6D;AAC7D,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,MAAmB;IACrD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QAClD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,EAAE,OAAO,GAAG,OAAO;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;QACjE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;QACrH,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACxB,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACvE,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAA;YAClB,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,IAAI,KAAK,GAAG,aAAa;gBAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;YAC3F,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,SAAS,GAAG,GAAG,IAAI,SAAS,UAAU,EAAE,EAAE,CAAA;gBAChD,IAAI,CAAC;oBAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAAC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;gBAAC,CAAC;wBAC9D,CAAC;oBAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAAC,CAAC;YAClD,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACtD,CAAC;;YAAM,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AAED;;iFAEiF;AACjF,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAqB,EAAE,MAAmB;IAC1F,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjF,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAU,EAAE,CAAC;QACnG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAC3I,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAA;IACzG,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACzF,CAAC;AAED;;;wEAGwE;AACxE,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAEvD;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7E,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,IAAI,CAAC,mCAAmC,CAAC,CAAA;IACtG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO;WACrE,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;WACzD,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACxF,IAAI,WAAW,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAClH,IAAI,OAAO;QAAE,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,+BAA+B,CAAC,6BAA6B,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxC,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACvC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,+BAA+B,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;YACxH,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;IACxD,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAAC,CAAC;IAClI,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC5G,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,MAAM,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;QAAC,CAAC;QAC9E,OAAO,OAAO,EAAE,CAAC;YAAC,IAAK,OAAiC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,OAAO,CAAA;QAAC,CAAC;IAC7F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC,CAAA;IACrE,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,EAAE,SAAS,GAAG,sBAAsB,KAAK,EAAE,CAAA;IACrG,MAAM,MAAM,GAAG,WAAW,EAAE,WAAW,CAAC,UAAU,CAAA;IAClD,IAAI,iBAAiB,GAAG,KAAK,EAAE,OAAiD,CAAA;IAChF,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAO,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,EACtG,OAAO,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9E,MAAM,gBAAgB,GAAG,KAAK,IAAmB,EAAE;QACjD,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM;YAAE,OAAM;QACzC,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,SAAS,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACpG,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,iBAAiB,GAAG,KAAK,CAAC;YAAC,OAAM;QAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,mDAAmD,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACtH,IAAI,KAAK,KAAK,KAAK;YAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;QAC/D,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACxC,iBAAiB,GAAG,KAAK,CAAA;IAC3B,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,CAAA;YAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACpG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACpF,iBAAiB,GAAG,IAAI,CAAA;YACxB,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,KAAK,EAAE;gBACpF,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAA;YAC3E,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI;gBAC7B,CAAC,2CAA2C,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACxE,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC1D,sEAAsE;gBACtE,wEAAwE;gBACxE,CAAC,6BAA6B,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACtE,CAAC,8BAA8B,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC1E,CAAC,mBAAmB,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;aACpC;gBAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;YAC/D,MAAM,gBAAgB,EAAE,CAAA;YACxB,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACzF,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAQ,EAAE,MAAM,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC3C,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,GAAG,SAAS,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAC/F,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzG,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzG,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,QAAQ;YAAE,IAAI,CAAC,2DAA2D,CAAC,CAAA;QAC7H,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;QACrB,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAA;QACvF,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QACvG,MAAM,MAAM,GAAoC,WAAW;YACzD,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;gBAC1D,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE;YAC5E,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;gBACnF,aAAa,EAAE,kBAAkB,CAAC,OAAQ,CAAC,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAA;QACrF,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QAC7E,MAAM,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtI,MAAM,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC7D,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzD,IAAI,OAAO,EAAE,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7I,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,2EAA2E;QAC3E,IAAI,CAAC;YAAC,MAAM,gBAAgB,EAAE,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;IAChI,CAAC;AACH,CAAC"}

package/lib/rsi-scanner-retirement-config.d.ts

@@ -0,0 +1,34 @@
+import type { MemoryLearningOwner } from '@dsh-enhanced/assistant-growth-contract';
+import type { Config as AutomationsConfig } from '@dsh-enhanced/assistant-automations';
+import type { Config as PolicyConfig } from '@dsh-enhanced/assistant-policy';
+import type { RevokedOwnerRouteQuery } from '@dsh-enhanced/assistant-delivery';
+import type { ScannerRetirementTarget } from './rsi-scanner-retirement-transition.js';
+export interface ScannerRetirementConfigurationInput {
+    readonly effectiveConfig: string;
+    readonly dshHome: string;
+    readonly profile: string;
+    readonly owner: MemoryLearningOwner;
+}
+export interface ScannerRetirementConfiguration {
+    readonly effectiveConfigDigest: string;
+    readonly ownerQuery: Readonly<RevokedOwnerRouteQuery>;
+    readonly automationsDatabasePath: string;
+    readonly policyConfig: Readonly<PolicyConfig>;
+    readonly automationsConfig: Readonly<AutomationsConfig>;
+    readonly targets: readonly ScannerRetirementTarget[];
+}
+export declare class ScannerRetirementConfigurationError extends Error {
+    constructor();
+}
+/**
+ * Pure derivation from the target profile's frozen, DSH-validated effective config.
+ * Revalidates provider identity, realms, bound paths and every scanner owner scope.
+ * It does not revalidate the entire Control Plane grant chain: its full normalizer
+ * performs I/O and rejects some expired grants. Expiry cannot forbid permanent
+ * retirement, and this function creates no grant or write/execution authority.
+ * Optional peer validators/digests are resolved only for lanes actually present.
+ * Service configs preserve all effective values; the parent must separately bind
+ * this digest to its transaction and disable timers only in its temporary Context.
+ */
+export declare function deriveScannerRetirementConfiguration(input: ScannerRetirementConfigurationInput): ScannerRetirementConfiguration;
+//# sourceMappingURL=rsi-scanner-retirement-config.d.ts.map

package/lib/rsi-scanner-retirement-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-scanner-retirement-config.d.ts","sourceRoot":"","sources":["../src/rsi-scanner-retirement-config.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,KAAK,EAAE,MAAM,IAAI,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AACtF,OAAO,KAAK,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC5E,OAAO,KAAK,EAAuB,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AAKnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAErF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC;AACD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IACrD,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IACvD,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CACrD;AACD,qBAAa,mCAAoC,SAAQ,KAAK;;CAE7D;AAmHD;;;;;;;;;GASG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,mCAAmC,GAAG,8BAA8B,CAkF/H"}

package/lib/rsi-scanner-retirement-config.js

@@ -0,0 +1,272 @@
+import { createHash } from 'node:crypto';
+import { createRequire } from 'node:module';
+import { isAbsolute, join, resolve } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { growthObjectDigest, validateMemoryLearningOwner } from '@dsh-enhanced/assistant-growth-contract';
+import { externalPrincipalId, ownerRouteAuthorityHash } from '@dsh-enhanced/assistant-delivery';
+import { isAlias, isMap, isScalar, isSeq, parseDocument } from 'yaml';
+import { getRsiMemoryLearningValidators } from './rsi-memory-learning.js';
+export class ScannerRetirementConfigurationError extends Error {
+    constructor() { super('scanner retirement configuration is unavailable'); this.name = 'ScannerRetirementConfigurationError'; }
+}
+const requirePeer = createRequire(import.meta.url);
+const modules = {
+    personal: 'personal-assistant', delivery: 'assistant-delivery', lark: 'lark-channel',
+    growth: 'assistant-growth-driver', control: 'plugin-control-plane', memory: 'assistant-memory-learning', verifier: 'assistant-verifier',
+};
+function fail() { throw new ScannerRetirementConfigurationError(); }
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return fail();
+    return value;
+}
+function absolute(value) {
+    if (typeof value !== 'string' || value === '/' || !isAbsolute(value) || resolve(value) !== value
+        || value.normalize('NFC') !== value || value.trim() !== value || /[\p{Cc}]/u.test(value))
+        fail();
+    return value;
+}
+function freeze(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        Object.values(value).forEach(freeze);
+        Object.freeze(value);
+    }
+    return value;
+}
+function homeExpression(value, home) {
+    if (typeof value !== 'string')
+        return fail();
+    const match = /^dshHomePath\((['"])([^'"\\]+)\1\)$/u.exec(value);
+    if (!match || isAbsolute(match[2]) || match[2].split('/').some(part => !part || part === '.' || part === '..'))
+        fail();
+    return absolute(join(home, match[2]));
+}
+function plain(node, home) {
+    if (node === null || node === undefined)
+        return null;
+    if (isAlias(node))
+        return fail();
+    if (isScalar(node)) {
+        if (node.tag === 'tag:yaml.org,2002:js')
+            return homeExpression(node.value, home);
+        if (node.tag || !['string', 'number', 'boolean', 'object'].includes(typeof node.value)
+            || typeof node.value === 'number' && !Number.isFinite(node.value))
+            return fail();
+        return node.value;
+    }
+    if (node.tag)
+        return fail();
+    if (isSeq(node))
+        return node.items.map(item => plain(item, home));
+    if (!isMap(node))
+        return fail();
+    const result = {};
+    for (const pair of node.items) {
+        if (!isScalar(pair.key) || pair.key.tag || typeof pair.key.value !== 'string'
+            || ['__proto__', 'constructor', 'prototype', '__jsExpr'].includes(pair.key.value)
+            || Object.hasOwn(result, pair.key.value))
+            fail();
+        result[pair.key.value] = plain(pair.value, home);
+    }
+    return result;
+}
+function rows(effective) {
+    if (typeof effective !== 'string' || Buffer.byteLength(effective) > 8 * 1024 * 1024)
+        return fail();
+    const document = parseDocument(effective, { uniqueKeys: true });
+    if (document.errors.length || !isSeq(document.contents))
+        return fail();
+    const result = new Map();
+    for (const row of document.contents.items) {
+        if (!isMap(row))
+            return fail();
+        const id = row.get('id');
+        if (typeof id !== 'string' || id.normalize('NFC').trim() !== id || !id || result.has(id))
+            fail();
+        result.set(id, row);
+    }
+    return result;
+}
+function configured(entries, name, home, required = false) {
+    const id = `dsh-enhanced-${name}`, packageName = `@dsh-enhanced/${name}`;
+    const candidates = [...entries.values()].filter(row => row.get('name') === packageName || row.get('id') === id);
+    if (candidates.length === 0) {
+        if (required)
+            fail();
+        return undefined;
+    }
+    if (candidates.length !== 1)
+        return fail();
+    const row = candidates[0];
+    const unconfiguredMemory = name === modules.memory && row.get('disabled') === true && !row.has('config');
+    if (row.get('id') !== id || row.get('name') !== packageName
+        || !unconfiguredMemory && row.get('disabled') !== undefined && row.get('disabled') !== false
+        || row.items.some(pair => !isScalar(pair.key) || !['id', 'name', 'config', 'disabled', 'inject'].includes(String(pair.key.value))))
+        fail();
+    // Array injection is the stock bundle dependency gate. Object injection,
+    // isolate/intercept/filter/group or future metadata may change service realms.
+    if (row.has('inject')) {
+        const inject = plain(row.get('inject', true), home);
+        if (!Array.isArray(inject) || inject.some(value => typeof value !== 'string' || !value)
+            || new Set(inject).size !== inject.length)
+            fail();
+    }
+    // The installed stock memory bundle has no frozen grant or scanner identity.
+    // A disabled row WITH configuration cannot silently disappear from this proof.
+    if (unconfiguredMemory)
+        return undefined;
+    return object(plain(row.get('config', true), home));
+}
+function scope(value, owner) {
+    if (!isDeepStrictEqual(object(value), { ownerRouteId: owner.authorityId, principalId: owner.principalId,
+        workspace: owner.workspace, preset: owner.agentPreset }))
+        fail();
+}
+function canonicalAuthority(value) {
+    const authority = object(value);
+    const hash = ownerRouteAuthorityHash(authority);
+    const ordered = { id: authority.id,
+        conversation: { channel: authority.conversation.channel, account: authority.conversation.account, tenant: authority.conversation.tenant,
+            kind: authority.conversation.kind, chat: authority.conversation.chat,
+            ...(authority.conversation.thread === undefined ? {} : { thread: authority.conversation.thread }) },
+        principal: { channel: authority.principal.channel, account: authority.principal.account, tenant: authority.principal.tenant, user: authority.principal.user },
+        workspace: authority.workspace, agentPreset: authority.agentPreset, policyRef: authority.policyRef, minimumGeneration: authority.minimumGeneration };
+    if (createHash('sha256').update(JSON.stringify(ordered)).digest('hex') !== hash)
+        fail();
+    return ordered;
+}
+function checkDatabases(configs) {
+    const seen = new Set();
+    function visit(value) {
+        if (!value || typeof value !== 'object')
+            return;
+        for (const [key, child] of Object.entries(value)) {
+            if (key === 'databasePath') {
+                const path = absolute(child);
+                if (seen.has(path))
+                    fail();
+                seen.add(path);
+            }
+            else
+                visit(child);
+        }
+    }
+    configs.forEach(visit);
+}
+/**
+ * Pure derivation from the target profile's frozen, DSH-validated effective config.
+ * Revalidates provider identity, realms, bound paths and every scanner owner scope.
+ * It does not revalidate the entire Control Plane grant chain: its full normalizer
+ * performs I/O and rejects some expired grants. Expiry cannot forbid permanent
+ * retirement, and this function creates no grant or write/execution authority.
+ * Optional peer validators/digests are resolved only for lanes actually present.
+ * Service configs preserve all effective values; the parent must separately bind
+ * this digest to its transaction and disable timers only in its temporary Context.
+ */
+export function deriveScannerRetirementConfiguration(input) {
+    try {
+        if (Object.keys(input).sort().join(',') !== 'dshHome,effectiveConfig,owner,profile')
+            fail();
+        const home = absolute(input.dshHome);
+        if (typeof input.profile !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(input.profile))
+            fail();
+        const owner = validateMemoryLearningOwner(input.owner);
+        if (!/^principal_[0-9a-f-]{8,}$/u.test(owner.principalRecordId))
+            fail();
+        const entries = rows(input.effectiveConfig);
+        // Only the existing embedded target-profile composition is supported.
+        if ([...entries.values()].some(row => ['@dsh-enhanced/assistant-policy', '@dsh-enhanced/assistant-automations'].includes(String(row.get('name')))
+            || ['dsh-enhanced-assistant-policy', 'dsh-enhanced-assistant-automations'].includes(String(row.get('id')))))
+            fail();
+        const personal = configured(entries, modules.personal, home, true);
+        const delivery = configured(entries, modules.delivery, home, true);
+        const lark = configured(entries, modules.lark, home, true);
+        const growth = configured(entries, modules.growth, home);
+        const control = configured(entries, modules.control, home);
+        const memory = configured(entries, modules.memory, home);
+        const verifier = configured(entries, modules.verifier, home);
+        for (const candidate of [personal.personalMemory && object(personal.personalMemory).automaticLearning,
+            verifier?.sourceReviews, verifier?.memoryReviews]) {
+            if (candidate !== undefined && !isDeepStrictEqual(object(candidate).owner, owner))
+                fail();
+        }
+        const policyConfig = object(personal.assistantPolicy);
+        const automationsConfig = object(personal.assistantAutomations);
+        absolute(policyConfig.databasePath);
+        absolute(automationsConfig.databasePath);
+        absolute(automationsConfig.runsPath);
+        const databasePath = absolute(delivery.databasePath);
+        if (!Array.isArray(delivery.ownerRoutes))
+            fail();
+        const authorities = delivery.ownerRoutes.map(canonicalAuthority);
+        if (new Set(authorities.map(route => route.id)).size !== authorities.length)
+            fail();
+        const matching = authorities.filter(route => route.id === owner.authorityId);
+        if (matching.length !== 1)
+            fail();
+        const authority = matching[0];
+        if (authority.id !== owner.authorityId || ownerRouteAuthorityHash(authority) !== owner.authorityHash
+            || externalPrincipalId(authority.principal) !== owner.principalId || authority.workspace !== owner.workspace
+            || authority.agentPreset !== owner.agentPreset || authority.principal.channel !== 'lark'
+            || authority.conversation.kind !== 'dm' || authority.conversation.thread !== undefined
+            || absolute(delivery.defaultWorkspace) !== owner.workspace || delivery.defaultAgentPreset !== owner.agentPreset
+            || delivery.policyRef !== undefined && delivery.policyRef !== authority.policyRef
+            || lark.enabled !== true || lark.account !== authority.principal.account || lark.tenant !== authority.principal.tenant)
+            fail();
+        const targets = [];
+        if (growth) {
+            // Growth's normalizer is structural only; no filesystem/time validation.
+            const peer = requirePeer('@dsh-enhanced/assistant-growth-driver');
+            const normalized = peer.normalizeConfig(growth);
+            if (!normalized.enabled)
+                fail();
+            if (normalized.scope !== null)
+                scope(normalized.scope, owner);
+            if (normalized.usageLearning.enabled) {
+                scope(normalized.scope, owner);
+                // These scope objects contain only canonical strings, so the shared
+                // canonical JSON equals acceptanceDigest; real runtime tests fence this.
+                targets.push({ owner: 'assistant-growth-usage', automationId: `usage-scan-${growthObjectDigest(normalized.scope)}` });
+            }
+        }
+        if (control) {
+            if (control.adoptionCoordinator !== undefined)
+                fail();
+            const peer = requirePeer('@dsh-enhanced/plugin-control-plane');
+            if (control.sourceJobs !== undefined) {
+                const jobs = object(control.sourceJobs);
+                scope({ ownerRouteId: jobs.ownerRouteId, principalId: jobs.principalId, workspace: jobs.workspace, preset: jobs.preset }, owner);
+            }
+            if (control.runtimeObserver !== undefined && absolute(object(control.runtimeObserver).profilePath) !== join(home, 'profiles', input.profile))
+                fail();
+            if (control.sourceAdoptions !== undefined && object(control.sourceAdoptions).profile !== input.profile)
+                fail();
+            for (const [key, scannerOwner, prefix] of [
+                ['taskObservations', 'plugin-control-plane-task-observations', 'task-observation-scan-'],
+                ['liveQualification', 'plugin-control-plane-live-qualification', 'live-qualification-scan-'],
+            ])
+                if (control[key] !== undefined) {
+                    const scanner = object(control[key]);
+                    scope(scanner.scope, owner);
+                    const profilePath = absolute(scanner.profilePath);
+                    if (profilePath !== join(home, 'profiles', input.profile))
+                        fail();
+                    targets.push({ owner: scannerOwner, automationId: `${prefix}${peer.controlPlaneDigest({ scope: scanner.scope, profilePath })}` });
+                }
+        }
+        if (memory) {
+            const validated = getRsiMemoryLearningValidators().validateLearningConfig(memory);
+            if (!isDeepStrictEqual(validated.owner, owner))
+                fail();
+            targets.push({ owner: 'assistant-memory-learning', automationId: `memory-scan-${growthObjectDigest([validated.authorityId, validated.owner])}` });
+        }
+        checkDatabases([personal, delivery, ...[growth, control, memory].filter((value) => value !== undefined)]);
+        return freeze({ effectiveConfigDigest: createHash('sha256').update(input.effectiveConfig).digest('hex'),
+            ownerQuery: { databasePath, authority, principalRecordId: owner.principalRecordId, frozenPrincipalVersion: owner.principalVersion },
+            automationsDatabasePath: automationsConfig.databasePath, policyConfig, automationsConfig, targets });
+    }
+    catch {
+        return fail();
+    }
+}
+//# sourceMappingURL=rsi-scanner-retirement-config.js.map