@dsh-enhanced/plugin-control-plane 0.1.48 → 0.1.53

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (185) hide show
  1. package/README.md +187 -15
  2. package/bin/dsh-live-qualification-authority.js +15 -0
  3. package/bin/dsh-local-release-adapter.js +331 -9
  4. package/bin/dsh-systemd-host-attestor.js +359 -9
  5. package/bin/dsh-systemd-host-authority.js +12 -0
  6. package/lib/adoption-coordinator.d.ts +3 -1
  7. package/lib/adoption-coordinator.d.ts.map +1 -1
  8. package/lib/adoption-coordinator.js +24 -9
  9. package/lib/adoption-coordinator.js.map +1 -1
  10. package/lib/cli.d.ts.map +1 -1
  11. package/lib/cli.js +33 -14
  12. package/lib/cli.js.map +1 -1
  13. package/lib/creation-capability-feedback.d.ts +23 -0
  14. package/lib/creation-capability-feedback.d.ts.map +1 -0
  15. package/lib/creation-capability-feedback.js +132 -0
  16. package/lib/creation-capability-feedback.js.map +1 -0
  17. package/lib/creation-capability-journal.d.ts +66 -0
  18. package/lib/creation-capability-journal.d.ts.map +1 -0
  19. package/lib/creation-capability-journal.js +775 -0
  20. package/lib/creation-capability-journal.js.map +1 -0
  21. package/lib/creation-capability-runtime.d.ts +63 -0
  22. package/lib/creation-capability-runtime.d.ts.map +1 -0
  23. package/lib/creation-capability-runtime.js +578 -0
  24. package/lib/creation-capability-runtime.js.map +1 -0
  25. package/lib/creation-capability-source.d.ts +37 -0
  26. package/lib/creation-capability-source.d.ts.map +1 -0
  27. package/lib/creation-capability-source.js +328 -0
  28. package/lib/creation-capability-source.js.map +1 -0
  29. package/lib/creation-capability-types.d.ts +265 -0
  30. package/lib/creation-capability-types.d.ts.map +1 -0
  31. package/lib/creation-capability-types.js +2 -0
  32. package/lib/creation-capability-types.js.map +1 -0
  33. package/lib/deployment-readiness.d.ts +16 -0
  34. package/lib/deployment-readiness.d.ts.map +1 -1
  35. package/lib/deployment-readiness.js +48 -1
  36. package/lib/deployment-readiness.js.map +1 -1
  37. package/lib/effect-blocked-replay.js +2 -2
  38. package/lib/effect-blocked-replay.js.map +1 -1
  39. package/lib/foreground-deployment-runtime.d.ts +3 -0
  40. package/lib/foreground-deployment-runtime.d.ts.map +1 -1
  41. package/lib/foreground-deployment-runtime.js +55 -13
  42. package/lib/foreground-deployment-runtime.js.map +1 -1
  43. package/lib/foreground-deployment.d.ts.map +1 -1
  44. package/lib/foreground-deployment.js +5 -0
  45. package/lib/foreground-deployment.js.map +1 -1
  46. package/lib/host-attestor.d.ts +2 -0
  47. package/lib/host-attestor.d.ts.map +1 -1
  48. package/lib/host-attestor.js +8 -1
  49. package/lib/host-attestor.js.map +1 -1
  50. package/lib/host-inputs.d.ts +13 -0
  51. package/lib/host-inputs.d.ts.map +1 -0
  52. package/lib/host-inputs.js +162 -0
  53. package/lib/host-inputs.js.map +1 -0
  54. package/lib/host-maintenance.d.ts +61 -0
  55. package/lib/host-maintenance.d.ts.map +1 -0
  56. package/lib/host-maintenance.js +158 -0
  57. package/lib/host-maintenance.js.map +1 -0
  58. package/lib/host-readiness.d.ts +5 -0
  59. package/lib/host-readiness.d.ts.map +1 -0
  60. package/lib/host-readiness.js +22 -0
  61. package/lib/host-readiness.js.map +1 -0
  62. package/lib/index.d.ts +16 -0
  63. package/lib/index.d.ts.map +1 -1
  64. package/lib/index.js +7 -0
  65. package/lib/index.js.map +1 -1
  66. package/lib/live-qualification-authority.d.ts +32 -0
  67. package/lib/live-qualification-authority.d.ts.map +1 -0
  68. package/lib/live-qualification-authority.js +280 -0
  69. package/lib/live-qualification-authority.js.map +1 -0
  70. package/lib/live-qualification-client.d.ts +4 -0
  71. package/lib/live-qualification-client.d.ts.map +1 -0
  72. package/lib/live-qualification-client.js +22 -0
  73. package/lib/live-qualification-client.js.map +1 -0
  74. package/lib/live-qualification-runtime.d.ts +78 -0
  75. package/lib/live-qualification-runtime.d.ts.map +1 -0
  76. package/lib/live-qualification-runtime.js +367 -0
  77. package/lib/live-qualification-runtime.js.map +1 -0
  78. package/lib/live-qualification.d.ts +73 -0
  79. package/lib/live-qualification.d.ts.map +1 -0
  80. package/lib/live-qualification.js +164 -0
  81. package/lib/live-qualification.js.map +1 -0
  82. package/lib/native-source-build-worker.d.ts +4 -0
  83. package/lib/native-source-build-worker.d.ts.map +1 -0
  84. package/lib/native-source-build-worker.js +87 -0
  85. package/lib/native-source-build-worker.js.map +1 -0
  86. package/lib/native-source-build.d.ts +36 -0
  87. package/lib/native-source-build.d.ts.map +1 -0
  88. package/lib/native-source-build.js +143 -0
  89. package/lib/native-source-build.js.map +1 -0
  90. package/lib/native-source-pack.d.ts +11 -0
  91. package/lib/native-source-pack.d.ts.map +1 -0
  92. package/lib/native-source-pack.js +83 -0
  93. package/lib/native-source-pack.js.map +1 -0
  94. package/lib/owner-task-gaps.d.ts +2 -0
  95. package/lib/owner-task-gaps.d.ts.map +1 -1
  96. package/lib/owner-task-gaps.js +9 -1
  97. package/lib/owner-task-gaps.js.map +1 -1
  98. package/lib/runtime-epoch.d.ts +69 -0
  99. package/lib/runtime-epoch.d.ts.map +1 -0
  100. package/lib/runtime-epoch.js +139 -0
  101. package/lib/runtime-epoch.js.map +1 -0
  102. package/lib/runtime-observer-protocol.d.ts +3 -3
  103. package/lib/runtime-observer-protocol.js +5 -5
  104. package/lib/runtime-observer-protocol.js.map +1 -1
  105. package/lib/runtime-observer.d.ts.map +1 -1
  106. package/lib/runtime-observer.js +42 -6
  107. package/lib/runtime-observer.js.map +1 -1
  108. package/lib/service.d.ts +248 -4
  109. package/lib/service.d.ts.map +1 -1
  110. package/lib/service.js +1431 -64
  111. package/lib/service.js.map +1 -1
  112. package/lib/source-adoption-authority.d.ts +3 -0
  113. package/lib/source-adoption-authority.d.ts.map +1 -1
  114. package/lib/source-adoption-authority.js +13 -3
  115. package/lib/source-adoption-authority.js.map +1 -1
  116. package/lib/source-adoption-runner.d.ts +3 -0
  117. package/lib/source-adoption-runner.d.ts.map +1 -1
  118. package/lib/source-adoption-runner.js +16 -4
  119. package/lib/source-adoption-runner.js.map +1 -1
  120. package/lib/source-approval-authority.d.ts.map +1 -1
  121. package/lib/source-approval-authority.js +1 -0
  122. package/lib/source-approval-authority.js.map +1 -1
  123. package/lib/source-baseline.d.ts +37 -0
  124. package/lib/source-baseline.d.ts.map +1 -0
  125. package/lib/source-baseline.js +250 -0
  126. package/lib/source-baseline.js.map +1 -0
  127. package/lib/source-build.d.ts +43 -9
  128. package/lib/source-build.d.ts.map +1 -1
  129. package/lib/source-build.js +670 -57
  130. package/lib/source-build.js.map +1 -1
  131. package/lib/source-context.d.ts +18 -0
  132. package/lib/source-context.d.ts.map +1 -1
  133. package/lib/source-context.js +85 -11
  134. package/lib/source-context.js.map +1 -1
  135. package/lib/source-creation.d.ts +106 -0
  136. package/lib/source-creation.d.ts.map +1 -0
  137. package/lib/source-creation.js +664 -0
  138. package/lib/source-creation.js.map +1 -0
  139. package/lib/source-job-types.d.ts +28 -1
  140. package/lib/source-job-types.d.ts.map +1 -1
  141. package/lib/source-jobs.d.ts +33 -3
  142. package/lib/source-jobs.d.ts.map +1 -1
  143. package/lib/source-jobs.js +420 -43
  144. package/lib/source-jobs.js.map +1 -1
  145. package/lib/source-maintenance.d.ts +66 -0
  146. package/lib/source-maintenance.d.ts.map +1 -0
  147. package/lib/source-maintenance.js +177 -0
  148. package/lib/source-maintenance.js.map +1 -0
  149. package/lib/source-revision.d.ts +57 -0
  150. package/lib/source-revision.d.ts.map +1 -0
  151. package/lib/source-revision.js +175 -0
  152. package/lib/source-revision.js.map +1 -0
  153. package/lib/source-workspace.d.ts +19 -14
  154. package/lib/source-workspace.d.ts.map +1 -1
  155. package/lib/source-workspace.js +90 -17
  156. package/lib/source-workspace.js.map +1 -1
  157. package/lib/sqlite.d.ts +13 -3
  158. package/lib/sqlite.d.ts.map +1 -1
  159. package/lib/sqlite.js +362 -1
  160. package/lib/sqlite.js.map +1 -1
  161. package/lib/store.d.ts +258 -3
  162. package/lib/store.d.ts.map +1 -1
  163. package/lib/store.js +2257 -96
  164. package/lib/store.js.map +1 -1
  165. package/lib/systemd-host-authority.d.ts +68 -0
  166. package/lib/systemd-host-authority.d.ts.map +1 -0
  167. package/lib/systemd-host-authority.js +424 -0
  168. package/lib/systemd-host-authority.js.map +1 -0
  169. package/lib/task-observation-evidence.d.ts +32 -0
  170. package/lib/task-observation-evidence.d.ts.map +1 -0
  171. package/lib/task-observation-evidence.js +62 -0
  172. package/lib/task-observation-evidence.js.map +1 -0
  173. package/lib/task-observation-runtime.d.ts +2 -3
  174. package/lib/task-observation-runtime.d.ts.map +1 -1
  175. package/lib/task-observation-runtime.js +7 -39
  176. package/lib/task-observation-runtime.js.map +1 -1
  177. package/lib/task-observation-store.js +1 -1
  178. package/lib/trust.d.ts.map +1 -1
  179. package/lib/trust.js +0 -0
  180. package/lib/trust.js.map +1 -1
  181. package/lib/types.d.ts +57 -7
  182. package/lib/types.d.ts.map +1 -1
  183. package/lib/version.d.ts +1 -1
  184. package/lib/version.js +1 -1
  185. package/package.json +22 -14
@@ -0,0 +1,37 @@
1
+ import { type PluginCreationVerificationCertificate } from '@dsh-enhanced/assistant-growth-contract';
2
+ declare const PROTOCOL: "dsh-created-capability-source/v1";
3
+ export interface CreationCapabilitySourceEntry {
4
+ path: string;
5
+ mode: '100644' | '100755';
6
+ oid: string;
7
+ }
8
+ export interface CreationCapabilitySourceFile extends CreationCapabilitySourceEntry {
9
+ bytes: number;
10
+ sha256: string;
11
+ content: string;
12
+ }
13
+ /** Private exact staged-source data. Catalog and lock are bound by OID only. */
14
+ export interface CreationCapabilitySourceSnapshot {
15
+ protocol: typeof PROTOCOL;
16
+ baseCommit: string;
17
+ scope: readonly string[];
18
+ treeDigest: string;
19
+ patchDigest: string;
20
+ entries: readonly CreationCapabilitySourceEntry[];
21
+ files: readonly CreationCapabilitySourceFile[];
22
+ digest: string;
23
+ }
24
+ export declare function creationCapabilitySourceDigest(payload: Omit<CreationCapabilitySourceSnapshot, 'digest'>): string;
25
+ /** Offline structural and byte verification; signature, owner and current authority belong to the journal. */
26
+ export declare function validateCreationCapabilitySource(snapshot: unknown, certificate: Pick<PluginCreationVerificationCertificate, 'plan'>): asserts snapshot is CreationCapabilitySourceSnapshot;
27
+ /** Capture exactly the same temporary-index digest domain as checkedSourceSnapshot. */
28
+ export declare function captureCreationCapabilitySource(input: {
29
+ worktree: string;
30
+ baseCommit: string;
31
+ scope: readonly string[];
32
+ certificate: Pick<PluginCreationVerificationCertificate, 'plan'>;
33
+ environment: NodeJS.ProcessEnv;
34
+ signal?: AbortSignal;
35
+ }): Promise<CreationCapabilitySourceSnapshot>;
36
+ export {};
37
+ //# sourceMappingURL=creation-capability-source.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"creation-capability-source.d.ts","sourceRoot":"","sources":["../src/creation-capability-source.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuB,KAAK,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AAIzH,QAAA,MAAM,QAAQ,EAAG,kCAA2C,CAAA;AAgB5D,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,4BAA6B,SAAQ,6BAA6B;IACjF,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,OAAO,QAAQ,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,SAAS,6BAA6B,EAAE,CAAA;IACjD,KAAK,EAAE,SAAS,4BAA4B,EAAE,CAAA;IAC9C,MAAM,EAAE,MAAM,CAAA;CACf;AA8DD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,gCAAgC,EAAE,QAAQ,CAAC,GAAG,MAAM,CAqChH;AAsBD,8GAA8G;AAC9G,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,OAAO,EAChE,WAAW,EAAE,IAAI,CAAC,qCAAqC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,gCAAgC,CA6CxH;AAmCD,uFAAuF;AACvF,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9D,WAAW,EAAE,IAAI,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CACvH,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAyD5C"}
@@ -0,0 +1,328 @@
1
+ import { createHash } from 'node:crypto';
2
+ import { lstat, mkdtemp, readdir, realpath, rm } from 'node:fs/promises';
3
+ import { tmpdir } from 'node:os';
4
+ import { join, resolve } from 'node:path';
5
+ import { canonicalGrowthJson } from '@dsh-enhanced/assistant-growth-contract';
6
+ import { ControlPlaneCliError } from './errors.js';
7
+ import { runLocalBuffer, runLocalCommand } from './source-workspace.js';
8
+ const PROTOCOL = 'dsh-created-capability-source/v1';
9
+ const DOMAIN = 'dsh-created-capability-source-v1\0';
10
+ const COMMIT = /^[a-f0-9]{40}$/u;
11
+ const DIGEST = /^[a-f0-9]{64}$/u;
12
+ const NAME = /^(?=.{1,64}$)[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
13
+ const SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/u;
14
+ const MAX_FILES = 64;
15
+ const MAX_FILE_BYTES = 65_536;
16
+ const MAX_TOTAL_BYTES = 262_144;
17
+ const MAX_INDEX_BYTES = 131_072;
18
+ const MAX_PATCH_BYTES = 8_388_608;
19
+ const MAX_JSON_BYTES = 2_097_152;
20
+ const MAX_DIRECTORY_NODES = 256;
21
+ const MAX_DIRECTORY_DEPTH = 32;
22
+ const MAX_PATH_BYTES = 1_024;
23
+ function invalid(reason) {
24
+ throw new ControlPlaneCliError('SOURCE_BOUNDARY', `created capability source ${reason}`);
25
+ }
26
+ function sha256(bytes) { return createHash('sha256').update(bytes).digest('hex'); }
27
+ function exactRecord(value, keys, label) {
28
+ if (value === null || typeof value !== 'object' || Array.isArray(value)
29
+ || Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length !== 0)
30
+ invalid(label);
31
+ const descriptors = Object.getOwnPropertyDescriptors(value);
32
+ const actual = Object.keys(descriptors).sort();
33
+ if (actual.length !== keys.length || actual.some((key, index) => key !== [...keys].sort()[index])
34
+ || actual.some(key => !descriptors[key].enumerable || !('value' in descriptors[key])))
35
+ invalid(label);
36
+ return value;
37
+ }
38
+ function exactArray(value, max, label) {
39
+ if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length > max
40
+ || Object.getOwnPropertySymbols(value).length !== 0
41
+ || Object.getOwnPropertyNames(value).length !== value.length + 1
42
+ || !Array.from({ length: value.length }, (_, i) => Object.hasOwn(value, i)).every(Boolean)
43
+ || Object.entries(Object.getOwnPropertyDescriptors(value)).some(([key, descriptor]) => key !== 'length'
44
+ && (!/^(0|[1-9][0-9]*)$/u.test(key) || !descriptor.enumerable || !('value' in descriptor))))
45
+ invalid(label);
46
+ return value;
47
+ }
48
+ function certificatePlan(certificate) {
49
+ if (certificate === null || typeof certificate !== 'object' || Object.getPrototypeOf(certificate) !== Object.prototype)
50
+ invalid('certificate');
51
+ const descriptor = Object.getOwnPropertyDescriptor(certificate, 'plan');
52
+ if (!descriptor || !('value' in descriptor) || !descriptor.enumerable)
53
+ invalid('certificate plan');
54
+ return exactRecord(descriptor.value, ['id', 'digest', 'name', 'sourceTreeDigest', 'sourcePatchDigest',
55
+ 'artifactSha256', 'artifactBytes', 'generatorDigest'], 'certificate plan');
56
+ }
57
+ function checkedScope(name, scope) {
58
+ if (!NAME.test(name) || name.normalize('NFC') !== name)
59
+ invalid('plugin name');
60
+ const expected = [`plugins/${name}`, 'plugins/README.md', 'pnpm-lock.yaml'].sort();
61
+ const actual = exactArray(scope, 3, 'scope');
62
+ if (actual.length !== 3 || actual.some((value, index) => value !== expected[index]))
63
+ invalid('scope');
64
+ return expected;
65
+ }
66
+ function safePluginPath(path, root) {
67
+ if (path.length > MAX_PATH_BYTES || !path.startsWith(`${root}/`)
68
+ || path !== path.normalize('NFC') || Buffer.byteLength(path, 'utf8') > MAX_PATH_BYTES)
69
+ return false;
70
+ const relative = path.slice(root.length + 1);
71
+ const segments = relative.split('/');
72
+ return segments.every(segment => SEGMENT.test(segment) && !['.git', '.gitattributes', '.gitmodules', 'node_modules', 'lib'].includes(segment))
73
+ && !relative.includes('\\');
74
+ }
75
+ function strictUtf8(bytes, label, allowNul = false) {
76
+ if (!allowNul && bytes.includes(0))
77
+ invalid(`${label} contains NUL`);
78
+ let decoded;
79
+ try {
80
+ decoded = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
81
+ }
82
+ catch {
83
+ invalid(`${label} is not UTF-8`);
84
+ }
85
+ if (!Buffer.from(decoded, 'utf8').equals(bytes))
86
+ invalid(`${label} is not canonical UTF-8`);
87
+ return decoded;
88
+ }
89
+ export function creationCapabilitySourceDigest(payload) {
90
+ // Bound strings and aggregate worst-case JSON escaping before allocating encoded JSON.
91
+ let nodes = 0, maximumEncodedBytes = 0;
92
+ const seen = new Set();
93
+ const bound = (value, depth) => {
94
+ if (++nodes > 8192 || depth > 16)
95
+ invalid('JSON complexity');
96
+ if (typeof value === 'string') {
97
+ if (value.length > MAX_FILE_BYTES)
98
+ invalid('JSON string exceeds bound');
99
+ maximumEncodedBytes += 6 * Buffer.byteLength(value) + 2;
100
+ }
101
+ else if (value === null || typeof value === 'boolean' || typeof value === 'number') {
102
+ maximumEncodedBytes += 24;
103
+ }
104
+ else {
105
+ if (!value || typeof value !== 'object' || seen.has(value))
106
+ invalid('JSON value');
107
+ seen.add(value);
108
+ if (Array.isArray(value)) {
109
+ for (const item of exactArray(value, MAX_FILES + 2, 'JSON array'))
110
+ bound(item, depth + 1);
111
+ maximumEncodedBytes += value.length + 2;
112
+ }
113
+ else {
114
+ if (Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).length > 16)
115
+ invalid('JSON object');
116
+ const descriptors = Object.getOwnPropertyDescriptors(value);
117
+ for (const key of Reflect.ownKeys(value)) {
118
+ if (typeof key !== 'string' || key.length > 256)
119
+ invalid('JSON key');
120
+ const descriptor = descriptors[key];
121
+ if (!descriptor.enumerable || !('value' in descriptor))
122
+ invalid('JSON descriptor');
123
+ bound(key, depth + 1);
124
+ bound(descriptor.value, depth + 1);
125
+ maximumEncodedBytes += 2;
126
+ }
127
+ maximumEncodedBytes += 2;
128
+ }
129
+ seen.delete(value);
130
+ }
131
+ if (maximumEncodedBytes > MAX_JSON_BYTES)
132
+ invalid('JSON exceeds bound');
133
+ };
134
+ bound(payload, 0);
135
+ const encoded = canonicalGrowthJson(payload);
136
+ if (Buffer.byteLength(encoded, 'utf8') > MAX_JSON_BYTES)
137
+ invalid('JSON exceeds bound');
138
+ return sha256(`${DOMAIN}${encoded}`);
139
+ }
140
+ function indexText(entries) {
141
+ return entries.map(entry => `${entry.mode} ${entry.oid} 0\t${entry.path}\0`).join('');
142
+ }
143
+ function treeDigest(baseCommit, scope, text) {
144
+ return sha256(`dsh-source-tree-v2\0${baseCommit}\0${JSON.stringify(scope)}\0${text}`);
145
+ }
146
+ function patchDigest(baseCommit, scope, patch) {
147
+ return createHash('sha256').update(`dsh-source-patch-v2\0${baseCommit}\0${JSON.stringify(scope)}\0`).update(patch).digest('hex');
148
+ }
149
+ function inspectEntry(value, root, plugin) {
150
+ const entry = exactRecord(value, plugin ? ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'] : ['path', 'mode', 'oid'], 'entry');
151
+ if (typeof entry.path !== 'string' || typeof entry.mode !== 'string' || typeof entry.oid !== 'string'
152
+ || !COMMIT.test(entry.oid) || !['100644', '100755'].includes(entry.mode)
153
+ || !(safePluginPath(entry.path, root) || entry.path === 'plugins/README.md' || entry.path === 'pnpm-lock.yaml'))
154
+ invalid('entry metadata');
155
+ return entry;
156
+ }
157
+ /** Offline structural and byte verification; signature, owner and current authority belong to the journal. */
158
+ export function validateCreationCapabilitySource(snapshot, certificate) {
159
+ const plan = certificatePlan(certificate);
160
+ const value = exactRecord(snapshot, ['protocol', 'baseCommit', 'scope', 'treeDigest', 'patchDigest', 'entries', 'files', 'digest'], 'snapshot');
161
+ if (value.protocol !== PROTOCOL || typeof value.baseCommit !== 'string' || !COMMIT.test(value.baseCommit)
162
+ || typeof value.treeDigest !== 'string' || !DIGEST.test(value.treeDigest)
163
+ || typeof value.patchDigest !== 'string' || !DIGEST.test(value.patchDigest)
164
+ || typeof value.digest !== 'string' || !DIGEST.test(value.digest))
165
+ invalid('header');
166
+ const name = plan.name;
167
+ const scope = checkedScope(name, value.scope);
168
+ const root = `plugins/${name}`;
169
+ const entries = exactArray(value.entries, MAX_FILES + 2, 'entries');
170
+ const files = exactArray(value.files, MAX_FILES, 'files');
171
+ if (entries.length < 3 || files.length < 1)
172
+ invalid('empty source');
173
+ const seen = new Set();
174
+ const expectedFiles = [];
175
+ let previous = Buffer.alloc(0);
176
+ for (const unknownEntry of entries) {
177
+ const entry = inspectEntry(unknownEntry, root, false);
178
+ const order = Buffer.from(entry.path, 'utf8');
179
+ if (seen.has(entry.path) || previous.length && Buffer.compare(previous, order) >= 0)
180
+ invalid('index order or duplicate');
181
+ previous = order;
182
+ seen.add(entry.path);
183
+ if (entry.path.startsWith(`${root}/`))
184
+ expectedFiles.push(entry);
185
+ }
186
+ if (!seen.has('plugins/README.md') || !seen.has('pnpm-lock.yaml') || expectedFiles.length !== files.length)
187
+ invalid('index scope');
188
+ const text = indexText(entries);
189
+ if (Buffer.byteLength(text, 'utf8') > MAX_INDEX_BYTES || treeDigest(value.baseCommit, scope, text) !== value.treeDigest)
190
+ invalid('tree digest');
191
+ let total = 0;
192
+ for (let index = 0; index < files.length; index++) {
193
+ const file = exactRecord(files[index], ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'], 'file');
194
+ const expected = expectedFiles[index];
195
+ if (file.path !== expected.path || file.mode !== expected.mode || file.oid !== expected.oid
196
+ || typeof file.content !== 'string' || file.content.length > MAX_FILE_BYTES
197
+ || typeof file.sha256 !== 'string' || !DIGEST.test(file.sha256)
198
+ || typeof file.bytes !== 'number' || !Number.isSafeInteger(file.bytes) || file.bytes < 0 || file.bytes > MAX_FILE_BYTES)
199
+ invalid('file metadata');
200
+ const bytes = Buffer.from(file.content, 'utf8');
201
+ if (bytes.length !== file.bytes || bytes.includes(0) || strictUtf8(bytes, String(file.path)) !== file.content
202
+ || sha256(bytes) !== file.sha256
203
+ || createHash('sha1').update(`blob ${bytes.length}\0`).update(bytes).digest('hex') !== file.oid)
204
+ invalid('file bytes');
205
+ total += bytes.length;
206
+ if (total > MAX_TOTAL_BYTES)
207
+ invalid('total bytes');
208
+ }
209
+ if (value.treeDigest !== plan.sourceTreeDigest || value.patchDigest !== plan.sourcePatchDigest)
210
+ invalid('certificate digest');
211
+ const payload = { protocol: PROTOCOL, baseCommit: value.baseCommit, scope: value.scope,
212
+ treeDigest: value.treeDigest, patchDigest: value.patchDigest, entries: value.entries, files: value.files };
213
+ if (creationCapabilitySourceDigest(payload) !== value.digest)
214
+ invalid('source digest');
215
+ }
216
+ async function listedPluginPaths(worktree, root, signal) {
217
+ const target = resolve(worktree, root);
218
+ const metadata = await lstat(target);
219
+ if (!metadata.isDirectory() || metadata.isSymbolicLink() || await realpath(target) !== target)
220
+ invalid('plugin root');
221
+ const paths = [];
222
+ let nodes = 0;
223
+ const visit = async (directory, prefix, depth) => {
224
+ signal?.throwIfAborted();
225
+ if (depth > MAX_DIRECTORY_DEPTH)
226
+ invalid('directory depth');
227
+ for (const entry of await readdir(directory, { withFileTypes: true })) {
228
+ signal?.throwIfAborted();
229
+ if (++nodes > MAX_DIRECTORY_NODES)
230
+ invalid('directory entries');
231
+ const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
232
+ const path = `${root}/${relative}`;
233
+ if (!safePluginPath(path, root))
234
+ invalid('plugin path');
235
+ if (entry.isDirectory()) {
236
+ const parent = join(directory, entry.name);
237
+ const stat = await lstat(parent);
238
+ if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(parent) !== parent)
239
+ invalid('plugin directory');
240
+ await visit(parent, relative, depth + 1);
241
+ }
242
+ else if (entry.isFile()) {
243
+ const stat = await lstat(join(directory, entry.name));
244
+ if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_FILE_BYTES)
245
+ invalid('non-regular or oversized file');
246
+ paths.push(path);
247
+ }
248
+ else
249
+ invalid('non-regular plugin entry');
250
+ if (paths.length > MAX_FILES)
251
+ invalid('file count');
252
+ }
253
+ };
254
+ await visit(target, '', 0);
255
+ return paths.sort();
256
+ }
257
+ /** Capture exactly the same temporary-index digest domain as checkedSourceSnapshot. */
258
+ export async function captureCreationCapabilitySource(input) {
259
+ const plan = certificatePlan(input.certificate);
260
+ const scope = checkedScope(plan.name, input.scope);
261
+ if (!COMMIT.test(input.baseCommit))
262
+ invalid('base commit');
263
+ const root = `plugins/${plan.name}`;
264
+ const temporary = await mkdtemp(join(tmpdir(), 'dsh-created-source-index-'));
265
+ try {
266
+ const environment = { ...input.environment, GIT_INDEX_FILE: join(temporary, 'index') };
267
+ const run = (args, maximumOutput) => runLocalBuffer('git', args, input.worktree, environment, { maximumOutput, ...(input.signal ? { signal: input.signal } : {}) });
268
+ const head = (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim();
269
+ if (head !== input.baseCommit)
270
+ invalid('worktree HEAD drift');
271
+ const stage = async () => {
272
+ await runLocalCommand('git', ['read-tree', input.baseCommit], input.worktree, environment, input.signal ? { signal: input.signal } : {});
273
+ await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], input.worktree, environment, input.signal ? { signal: input.signal } : {});
274
+ const index = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'ls-files', '--stage', '-z', '--', ...scope], MAX_INDEX_BYTES);
275
+ const patch = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'diff', '--cached', '--binary',
276
+ '--full-index', '--no-color', input.baseCommit, '--', ...scope], MAX_PATCH_BYTES);
277
+ return { index, patch };
278
+ };
279
+ const first = await stage();
280
+ const raw = strictUtf8(first.index, 'index', true);
281
+ const rows = raw.split('\0');
282
+ if (rows.pop() !== '' || rows.length < 3 || rows.length > MAX_FILES + 2)
283
+ invalid('index size');
284
+ const entries = rows.map(row => {
285
+ const match = /^(100644|100755) ([a-f0-9]{40}) 0\t(.+)$/u.exec(row);
286
+ if (!match)
287
+ invalid('index record');
288
+ return { path: match[3], mode: match[1], oid: match[2] };
289
+ });
290
+ if (indexText(entries) !== raw)
291
+ invalid('index roundtrip');
292
+ const paths = await listedPluginPaths(input.worktree, root, input.signal);
293
+ const indexPluginPaths = entries.filter(entry => entry.path.startsWith(`${root}/`)).map(entry => entry.path).sort();
294
+ if (paths.length !== indexPluginPaths.length || paths.some((path, index) => path !== indexPluginPaths[index]))
295
+ invalid('plugin file set');
296
+ const files = [];
297
+ let total = 0;
298
+ for (const entry of entries) {
299
+ if (!entry.path.startsWith(`${root}/`))
300
+ continue;
301
+ const bytes = await run(['cat-file', 'blob', entry.oid], MAX_FILE_BYTES);
302
+ if (bytes.length > MAX_FILE_BYTES)
303
+ invalid('file bytes');
304
+ total += bytes.length;
305
+ if (total > MAX_TOTAL_BYTES)
306
+ invalid('total bytes');
307
+ const content = strictUtf8(bytes, entry.path);
308
+ files.push({ ...entry, bytes: bytes.length, sha256: sha256(bytes), content });
309
+ }
310
+ const second = await stage();
311
+ if (!second.index.equals(first.index) || !second.patch.equals(first.patch)
312
+ || (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim() !== input.baseCommit)
313
+ invalid('worktree drift');
314
+ const payload = { protocol: PROTOCOL, baseCommit: input.baseCommit, scope, treeDigest: treeDigest(input.baseCommit, scope, raw),
315
+ patchDigest: patchDigest(input.baseCommit, scope, first.patch), entries, files };
316
+ const snapshot = { ...payload, digest: creationCapabilitySourceDigest(payload) };
317
+ validateCreationCapabilitySource(snapshot, input.certificate);
318
+ for (const entry of entries)
319
+ Object.freeze(entry);
320
+ for (const file of files)
321
+ Object.freeze(file);
322
+ return Object.freeze({ ...snapshot, scope: Object.freeze(scope), entries: Object.freeze(entries), files: Object.freeze(files) });
323
+ }
324
+ finally {
325
+ await rm(temporary, { recursive: true, force: true });
326
+ }
327
+ }
328
+ //# sourceMappingURL=creation-capability-source.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"creation-capability-source.js","sourceRoot":"","sources":["../src/creation-capability-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAA8C,MAAM,yCAAyC,CAAA;AACzH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvE,MAAM,QAAQ,GAAG,kCAA2C,CAAA;AAC5D,MAAM,MAAM,GAAG,oCAAoC,CAAA;AACnD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,IAAI,GAAG,8CAA8C,CAAA;AAC3D,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,cAAc,GAAG,MAAM,CAAA;AAC7B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,SAAS,CAAA;AACjC,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAC/B,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAA;AA0B5B,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE3G,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1H,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;WAC5F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAE,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAE,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACzG,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,GAAW,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WAC9F,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;WAChD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;WAC7D,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;WACvF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ;eAClG,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/G,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,WAAgE;IACvF,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9I,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAClG,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,mBAAmB;QACnG,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,kBAAkB,CAA6D,CAAA;AAC1I,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAwB;IAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrG,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;WAC3D,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,KAAK,CAAA;IACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;WACzI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IAChE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IACpE,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IAC1F,MAAM,CAAC;QAAC,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;IAC3F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAyD;IACtG,uFAAuF;IACvF,IAAI,KAAK,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;YACvE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrF,mBAAmB,IAAI,EAAE,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,EAAE,YAAY,CAAC;oBAAE,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzF,mBAAmB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YACzC,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;gBACnH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;gBAC3D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;wBAAE,OAAO,CAAC,UAAU,CAAC,CAAA;oBACpE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAE,CAAA;oBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;wBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;oBAClF,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;oBACzD,mBAAmB,IAAI,CAAC,CAAA;gBAC1B,CAAC;gBACD,mBAAmB,IAAI,CAAC,CAAA;YAC1B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,IAAI,mBAAmB,GAAG,cAAc;YAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACzE,CAAC,CAAA;IACD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACtF,OAAO,MAAM,CAAC,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,OAAiD;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,KAAwB,EAAE,IAAY;IAC5E,OAAO,MAAM,CAAC,uBAAuB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,KAAwB,EAAE,KAAa;IAC9E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClI,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,MAAe;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;IACnI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;WAChG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;WACrE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5I,OAAO,KAAiD,CAAA;AAC1D,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,gCAAgC,CAAC,QAAiB,EAChE,WAAgE;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAA;IAC/I,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACpG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACtE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WACxE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,KAA0B,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,aAAa,GAAoC,EAAE,CAAA;IACzD,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9B,KAAK,MAAM,YAAY,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;QACxH,QAAQ,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAClI,MAAM,IAAI,GAAG,SAAS,CAAC,OAA0C,CAAC,CAAA;IAClE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,eAAe,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/I,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAE,CAAA;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eACtF,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc;eACxE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;eAC5D,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;YAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QACnJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO;eACxG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;eAC7B,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACxH,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,eAAe;YAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,iBAAiB;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7H,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QACpF,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IAC5G,IAAI,8BAA8B,CAAC,OAA2D,CAAC,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,CAAA;AAC5I,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAoB;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrH,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;QACtF,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,KAAK,GAAG,mBAAmB;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,EAAE,KAAK,GAAG,mBAAmB;gBAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAChE,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAA;YAClC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;gBAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;oBAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;gBAClH,MAAM,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC1C,CAAC;iBACI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;oBAAE,OAAO,CAAC,+BAA+B,CAAC,CAAA;gBACnH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;;gBAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAGrD;IACC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAA;QACtF,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,aAAqB,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACrH,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QACjG,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACvF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAC/G,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YAC5I,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;gBAC1G,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YACnF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACzB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9F,MAAM,OAAO,GAAoC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC9D,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnE,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACnC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAA2C,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAA;QACtG,CAAC,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACnH,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACzI,MAAM,KAAK,GAAmC,EAAE,CAAA;QAChD,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,SAAQ;YAChD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAA;YACxE,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACxD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;YACrB,IAAI,KAAK,GAAG,eAAe;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAA;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;eACrE,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACzI,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC;YAC7H,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAClF,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAA;QAChF,gCAAgC,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClI,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;AACrE,CAAC"}