@dsh-enhanced/plugin-control-plane 0.1.48 → 0.1.53
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +187 -15
- package/bin/dsh-live-qualification-authority.js +15 -0
- package/bin/dsh-local-release-adapter.js +331 -9
- package/bin/dsh-systemd-host-attestor.js +359 -9
- package/bin/dsh-systemd-host-authority.js +12 -0
- package/lib/adoption-coordinator.d.ts +3 -1
- package/lib/adoption-coordinator.d.ts.map +1 -1
- package/lib/adoption-coordinator.js +24 -9
- package/lib/adoption-coordinator.js.map +1 -1
- package/lib/cli.d.ts.map +1 -1
- package/lib/cli.js +33 -14
- package/lib/cli.js.map +1 -1
- package/lib/creation-capability-feedback.d.ts +23 -0
- package/lib/creation-capability-feedback.d.ts.map +1 -0
- package/lib/creation-capability-feedback.js +132 -0
- package/lib/creation-capability-feedback.js.map +1 -0
- package/lib/creation-capability-journal.d.ts +66 -0
- package/lib/creation-capability-journal.d.ts.map +1 -0
- package/lib/creation-capability-journal.js +775 -0
- package/lib/creation-capability-journal.js.map +1 -0
- package/lib/creation-capability-runtime.d.ts +63 -0
- package/lib/creation-capability-runtime.d.ts.map +1 -0
- package/lib/creation-capability-runtime.js +578 -0
- package/lib/creation-capability-runtime.js.map +1 -0
- package/lib/creation-capability-source.d.ts +37 -0
- package/lib/creation-capability-source.d.ts.map +1 -0
- package/lib/creation-capability-source.js +328 -0
- package/lib/creation-capability-source.js.map +1 -0
- package/lib/creation-capability-types.d.ts +265 -0
- package/lib/creation-capability-types.d.ts.map +1 -0
- package/lib/creation-capability-types.js +2 -0
- package/lib/creation-capability-types.js.map +1 -0
- package/lib/deployment-readiness.d.ts +16 -0
- package/lib/deployment-readiness.d.ts.map +1 -1
- package/lib/deployment-readiness.js +48 -1
- package/lib/deployment-readiness.js.map +1 -1
- package/lib/effect-blocked-replay.js +2 -2
- package/lib/effect-blocked-replay.js.map +1 -1
- package/lib/foreground-deployment-runtime.d.ts +3 -0
- package/lib/foreground-deployment-runtime.d.ts.map +1 -1
- package/lib/foreground-deployment-runtime.js +55 -13
- package/lib/foreground-deployment-runtime.js.map +1 -1
- package/lib/foreground-deployment.d.ts.map +1 -1
- package/lib/foreground-deployment.js +5 -0
- package/lib/foreground-deployment.js.map +1 -1
- package/lib/host-attestor.d.ts +2 -0
- package/lib/host-attestor.d.ts.map +1 -1
- package/lib/host-attestor.js +8 -1
- package/lib/host-attestor.js.map +1 -1
- package/lib/host-inputs.d.ts +13 -0
- package/lib/host-inputs.d.ts.map +1 -0
- package/lib/host-inputs.js +162 -0
- package/lib/host-inputs.js.map +1 -0
- package/lib/host-maintenance.d.ts +61 -0
- package/lib/host-maintenance.d.ts.map +1 -0
- package/lib/host-maintenance.js +158 -0
- package/lib/host-maintenance.js.map +1 -0
- package/lib/host-readiness.d.ts +5 -0
- package/lib/host-readiness.d.ts.map +1 -0
- package/lib/host-readiness.js +22 -0
- package/lib/host-readiness.js.map +1 -0
- package/lib/index.d.ts +16 -0
- package/lib/index.d.ts.map +1 -1
- package/lib/index.js +7 -0
- package/lib/index.js.map +1 -1
- package/lib/live-qualification-authority.d.ts +32 -0
- package/lib/live-qualification-authority.d.ts.map +1 -0
- package/lib/live-qualification-authority.js +280 -0
- package/lib/live-qualification-authority.js.map +1 -0
- package/lib/live-qualification-client.d.ts +4 -0
- package/lib/live-qualification-client.d.ts.map +1 -0
- package/lib/live-qualification-client.js +22 -0
- package/lib/live-qualification-client.js.map +1 -0
- package/lib/live-qualification-runtime.d.ts +78 -0
- package/lib/live-qualification-runtime.d.ts.map +1 -0
- package/lib/live-qualification-runtime.js +367 -0
- package/lib/live-qualification-runtime.js.map +1 -0
- package/lib/live-qualification.d.ts +73 -0
- package/lib/live-qualification.d.ts.map +1 -0
- package/lib/live-qualification.js +164 -0
- package/lib/live-qualification.js.map +1 -0
- package/lib/native-source-build-worker.d.ts +4 -0
- package/lib/native-source-build-worker.d.ts.map +1 -0
- package/lib/native-source-build-worker.js +87 -0
- package/lib/native-source-build-worker.js.map +1 -0
- package/lib/native-source-build.d.ts +36 -0
- package/lib/native-source-build.d.ts.map +1 -0
- package/lib/native-source-build.js +143 -0
- package/lib/native-source-build.js.map +1 -0
- package/lib/native-source-pack.d.ts +11 -0
- package/lib/native-source-pack.d.ts.map +1 -0
- package/lib/native-source-pack.js +83 -0
- package/lib/native-source-pack.js.map +1 -0
- package/lib/owner-task-gaps.d.ts +2 -0
- package/lib/owner-task-gaps.d.ts.map +1 -1
- package/lib/owner-task-gaps.js +9 -1
- package/lib/owner-task-gaps.js.map +1 -1
- package/lib/runtime-epoch.d.ts +69 -0
- package/lib/runtime-epoch.d.ts.map +1 -0
- package/lib/runtime-epoch.js +139 -0
- package/lib/runtime-epoch.js.map +1 -0
- package/lib/runtime-observer-protocol.d.ts +3 -3
- package/lib/runtime-observer-protocol.js +5 -5
- package/lib/runtime-observer-protocol.js.map +1 -1
- package/lib/runtime-observer.d.ts.map +1 -1
- package/lib/runtime-observer.js +42 -6
- package/lib/runtime-observer.js.map +1 -1
- package/lib/service.d.ts +248 -4
- package/lib/service.d.ts.map +1 -1
- package/lib/service.js +1431 -64
- package/lib/service.js.map +1 -1
- package/lib/source-adoption-authority.d.ts +3 -0
- package/lib/source-adoption-authority.d.ts.map +1 -1
- package/lib/source-adoption-authority.js +13 -3
- package/lib/source-adoption-authority.js.map +1 -1
- package/lib/source-adoption-runner.d.ts +3 -0
- package/lib/source-adoption-runner.d.ts.map +1 -1
- package/lib/source-adoption-runner.js +16 -4
- package/lib/source-adoption-runner.js.map +1 -1
- package/lib/source-approval-authority.d.ts.map +1 -1
- package/lib/source-approval-authority.js +1 -0
- package/lib/source-approval-authority.js.map +1 -1
- package/lib/source-baseline.d.ts +37 -0
- package/lib/source-baseline.d.ts.map +1 -0
- package/lib/source-baseline.js +250 -0
- package/lib/source-baseline.js.map +1 -0
- package/lib/source-build.d.ts +43 -9
- package/lib/source-build.d.ts.map +1 -1
- package/lib/source-build.js +670 -57
- package/lib/source-build.js.map +1 -1
- package/lib/source-context.d.ts +18 -0
- package/lib/source-context.d.ts.map +1 -1
- package/lib/source-context.js +85 -11
- package/lib/source-context.js.map +1 -1
- package/lib/source-creation.d.ts +106 -0
- package/lib/source-creation.d.ts.map +1 -0
- package/lib/source-creation.js +664 -0
- package/lib/source-creation.js.map +1 -0
- package/lib/source-job-types.d.ts +28 -1
- package/lib/source-job-types.d.ts.map +1 -1
- package/lib/source-jobs.d.ts +33 -3
- package/lib/source-jobs.d.ts.map +1 -1
- package/lib/source-jobs.js +420 -43
- package/lib/source-jobs.js.map +1 -1
- package/lib/source-maintenance.d.ts +66 -0
- package/lib/source-maintenance.d.ts.map +1 -0
- package/lib/source-maintenance.js +177 -0
- package/lib/source-maintenance.js.map +1 -0
- package/lib/source-revision.d.ts +57 -0
- package/lib/source-revision.d.ts.map +1 -0
- package/lib/source-revision.js +175 -0
- package/lib/source-revision.js.map +1 -0
- package/lib/source-workspace.d.ts +19 -14
- package/lib/source-workspace.d.ts.map +1 -1
- package/lib/source-workspace.js +90 -17
- package/lib/source-workspace.js.map +1 -1
- package/lib/sqlite.d.ts +13 -3
- package/lib/sqlite.d.ts.map +1 -1
- package/lib/sqlite.js +362 -1
- package/lib/sqlite.js.map +1 -1
- package/lib/store.d.ts +258 -3
- package/lib/store.d.ts.map +1 -1
- package/lib/store.js +2257 -96
- package/lib/store.js.map +1 -1
- package/lib/systemd-host-authority.d.ts +68 -0
- package/lib/systemd-host-authority.d.ts.map +1 -0
- package/lib/systemd-host-authority.js +424 -0
- package/lib/systemd-host-authority.js.map +1 -0
- package/lib/task-observation-evidence.d.ts +32 -0
- package/lib/task-observation-evidence.d.ts.map +1 -0
- package/lib/task-observation-evidence.js +62 -0
- package/lib/task-observation-evidence.js.map +1 -0
- package/lib/task-observation-runtime.d.ts +2 -3
- package/lib/task-observation-runtime.d.ts.map +1 -1
- package/lib/task-observation-runtime.js +7 -39
- package/lib/task-observation-runtime.js.map +1 -1
- package/lib/task-observation-store.js +1 -1
- package/lib/trust.d.ts.map +1 -1
- package/lib/trust.js +0 -0
- package/lib/trust.js.map +1 -1
- package/lib/types.d.ts +57 -7
- package/lib/types.d.ts.map +1 -1
- package/lib/version.d.ts +1 -1
- package/lib/version.js +1 -1
- package/package.json +22 -14
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
import { type PluginCreationVerificationCertificate } from '@dsh-enhanced/assistant-growth-contract';
|
|
2
|
+
declare const PROTOCOL: "dsh-created-capability-source/v1";
|
|
3
|
+
export interface CreationCapabilitySourceEntry {
|
|
4
|
+
path: string;
|
|
5
|
+
mode: '100644' | '100755';
|
|
6
|
+
oid: string;
|
|
7
|
+
}
|
|
8
|
+
export interface CreationCapabilitySourceFile extends CreationCapabilitySourceEntry {
|
|
9
|
+
bytes: number;
|
|
10
|
+
sha256: string;
|
|
11
|
+
content: string;
|
|
12
|
+
}
|
|
13
|
+
/** Private exact staged-source data. Catalog and lock are bound by OID only. */
|
|
14
|
+
export interface CreationCapabilitySourceSnapshot {
|
|
15
|
+
protocol: typeof PROTOCOL;
|
|
16
|
+
baseCommit: string;
|
|
17
|
+
scope: readonly string[];
|
|
18
|
+
treeDigest: string;
|
|
19
|
+
patchDigest: string;
|
|
20
|
+
entries: readonly CreationCapabilitySourceEntry[];
|
|
21
|
+
files: readonly CreationCapabilitySourceFile[];
|
|
22
|
+
digest: string;
|
|
23
|
+
}
|
|
24
|
+
export declare function creationCapabilitySourceDigest(payload: Omit<CreationCapabilitySourceSnapshot, 'digest'>): string;
|
|
25
|
+
/** Offline structural and byte verification; signature, owner and current authority belong to the journal. */
|
|
26
|
+
export declare function validateCreationCapabilitySource(snapshot: unknown, certificate: Pick<PluginCreationVerificationCertificate, 'plan'>): asserts snapshot is CreationCapabilitySourceSnapshot;
|
|
27
|
+
/** Capture exactly the same temporary-index digest domain as checkedSourceSnapshot. */
|
|
28
|
+
export declare function captureCreationCapabilitySource(input: {
|
|
29
|
+
worktree: string;
|
|
30
|
+
baseCommit: string;
|
|
31
|
+
scope: readonly string[];
|
|
32
|
+
certificate: Pick<PluginCreationVerificationCertificate, 'plan'>;
|
|
33
|
+
environment: NodeJS.ProcessEnv;
|
|
34
|
+
signal?: AbortSignal;
|
|
35
|
+
}): Promise<CreationCapabilitySourceSnapshot>;
|
|
36
|
+
export {};
|
|
37
|
+
//# sourceMappingURL=creation-capability-source.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"creation-capability-source.d.ts","sourceRoot":"","sources":["../src/creation-capability-source.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuB,KAAK,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AAIzH,QAAA,MAAM,QAAQ,EAAG,kCAA2C,CAAA;AAgB5D,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,4BAA6B,SAAQ,6BAA6B;IACjF,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,OAAO,QAAQ,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,SAAS,6BAA6B,EAAE,CAAA;IACjD,KAAK,EAAE,SAAS,4BAA4B,EAAE,CAAA;IAC9C,MAAM,EAAE,MAAM,CAAA;CACf;AA8DD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,gCAAgC,EAAE,QAAQ,CAAC,GAAG,MAAM,CAqChH;AAsBD,8GAA8G;AAC9G,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,OAAO,EAChE,WAAW,EAAE,IAAI,CAAC,qCAAqC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,gCAAgC,CA6CxH;AAmCD,uFAAuF;AACvF,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9D,WAAW,EAAE,IAAI,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CACvH,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAyD5C"}
|
|
@@ -0,0 +1,328 @@
|
|
|
1
|
+
import { createHash } from 'node:crypto';
|
|
2
|
+
import { lstat, mkdtemp, readdir, realpath, rm } from 'node:fs/promises';
|
|
3
|
+
import { tmpdir } from 'node:os';
|
|
4
|
+
import { join, resolve } from 'node:path';
|
|
5
|
+
import { canonicalGrowthJson } from '@dsh-enhanced/assistant-growth-contract';
|
|
6
|
+
import { ControlPlaneCliError } from './errors.js';
|
|
7
|
+
import { runLocalBuffer, runLocalCommand } from './source-workspace.js';
|
|
8
|
+
const PROTOCOL = 'dsh-created-capability-source/v1';
|
|
9
|
+
const DOMAIN = 'dsh-created-capability-source-v1\0';
|
|
10
|
+
const COMMIT = /^[a-f0-9]{40}$/u;
|
|
11
|
+
const DIGEST = /^[a-f0-9]{64}$/u;
|
|
12
|
+
const NAME = /^(?=.{1,64}$)[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
|
|
13
|
+
const SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/u;
|
|
14
|
+
const MAX_FILES = 64;
|
|
15
|
+
const MAX_FILE_BYTES = 65_536;
|
|
16
|
+
const MAX_TOTAL_BYTES = 262_144;
|
|
17
|
+
const MAX_INDEX_BYTES = 131_072;
|
|
18
|
+
const MAX_PATCH_BYTES = 8_388_608;
|
|
19
|
+
const MAX_JSON_BYTES = 2_097_152;
|
|
20
|
+
const MAX_DIRECTORY_NODES = 256;
|
|
21
|
+
const MAX_DIRECTORY_DEPTH = 32;
|
|
22
|
+
const MAX_PATH_BYTES = 1_024;
|
|
23
|
+
function invalid(reason) {
|
|
24
|
+
throw new ControlPlaneCliError('SOURCE_BOUNDARY', `created capability source ${reason}`);
|
|
25
|
+
}
|
|
26
|
+
function sha256(bytes) { return createHash('sha256').update(bytes).digest('hex'); }
|
|
27
|
+
function exactRecord(value, keys, label) {
|
|
28
|
+
if (value === null || typeof value !== 'object' || Array.isArray(value)
|
|
29
|
+
|| Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length !== 0)
|
|
30
|
+
invalid(label);
|
|
31
|
+
const descriptors = Object.getOwnPropertyDescriptors(value);
|
|
32
|
+
const actual = Object.keys(descriptors).sort();
|
|
33
|
+
if (actual.length !== keys.length || actual.some((key, index) => key !== [...keys].sort()[index])
|
|
34
|
+
|| actual.some(key => !descriptors[key].enumerable || !('value' in descriptors[key])))
|
|
35
|
+
invalid(label);
|
|
36
|
+
return value;
|
|
37
|
+
}
|
|
38
|
+
function exactArray(value, max, label) {
|
|
39
|
+
if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length > max
|
|
40
|
+
|| Object.getOwnPropertySymbols(value).length !== 0
|
|
41
|
+
|| Object.getOwnPropertyNames(value).length !== value.length + 1
|
|
42
|
+
|| !Array.from({ length: value.length }, (_, i) => Object.hasOwn(value, i)).every(Boolean)
|
|
43
|
+
|| Object.entries(Object.getOwnPropertyDescriptors(value)).some(([key, descriptor]) => key !== 'length'
|
|
44
|
+
&& (!/^(0|[1-9][0-9]*)$/u.test(key) || !descriptor.enumerable || !('value' in descriptor))))
|
|
45
|
+
invalid(label);
|
|
46
|
+
return value;
|
|
47
|
+
}
|
|
48
|
+
function certificatePlan(certificate) {
|
|
49
|
+
if (certificate === null || typeof certificate !== 'object' || Object.getPrototypeOf(certificate) !== Object.prototype)
|
|
50
|
+
invalid('certificate');
|
|
51
|
+
const descriptor = Object.getOwnPropertyDescriptor(certificate, 'plan');
|
|
52
|
+
if (!descriptor || !('value' in descriptor) || !descriptor.enumerable)
|
|
53
|
+
invalid('certificate plan');
|
|
54
|
+
return exactRecord(descriptor.value, ['id', 'digest', 'name', 'sourceTreeDigest', 'sourcePatchDigest',
|
|
55
|
+
'artifactSha256', 'artifactBytes', 'generatorDigest'], 'certificate plan');
|
|
56
|
+
}
|
|
57
|
+
function checkedScope(name, scope) {
|
|
58
|
+
if (!NAME.test(name) || name.normalize('NFC') !== name)
|
|
59
|
+
invalid('plugin name');
|
|
60
|
+
const expected = [`plugins/${name}`, 'plugins/README.md', 'pnpm-lock.yaml'].sort();
|
|
61
|
+
const actual = exactArray(scope, 3, 'scope');
|
|
62
|
+
if (actual.length !== 3 || actual.some((value, index) => value !== expected[index]))
|
|
63
|
+
invalid('scope');
|
|
64
|
+
return expected;
|
|
65
|
+
}
|
|
66
|
+
function safePluginPath(path, root) {
|
|
67
|
+
if (path.length > MAX_PATH_BYTES || !path.startsWith(`${root}/`)
|
|
68
|
+
|| path !== path.normalize('NFC') || Buffer.byteLength(path, 'utf8') > MAX_PATH_BYTES)
|
|
69
|
+
return false;
|
|
70
|
+
const relative = path.slice(root.length + 1);
|
|
71
|
+
const segments = relative.split('/');
|
|
72
|
+
return segments.every(segment => SEGMENT.test(segment) && !['.git', '.gitattributes', '.gitmodules', 'node_modules', 'lib'].includes(segment))
|
|
73
|
+
&& !relative.includes('\\');
|
|
74
|
+
}
|
|
75
|
+
function strictUtf8(bytes, label, allowNul = false) {
|
|
76
|
+
if (!allowNul && bytes.includes(0))
|
|
77
|
+
invalid(`${label} contains NUL`);
|
|
78
|
+
let decoded;
|
|
79
|
+
try {
|
|
80
|
+
decoded = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
|
|
81
|
+
}
|
|
82
|
+
catch {
|
|
83
|
+
invalid(`${label} is not UTF-8`);
|
|
84
|
+
}
|
|
85
|
+
if (!Buffer.from(decoded, 'utf8').equals(bytes))
|
|
86
|
+
invalid(`${label} is not canonical UTF-8`);
|
|
87
|
+
return decoded;
|
|
88
|
+
}
|
|
89
|
+
export function creationCapabilitySourceDigest(payload) {
|
|
90
|
+
// Bound strings and aggregate worst-case JSON escaping before allocating encoded JSON.
|
|
91
|
+
let nodes = 0, maximumEncodedBytes = 0;
|
|
92
|
+
const seen = new Set();
|
|
93
|
+
const bound = (value, depth) => {
|
|
94
|
+
if (++nodes > 8192 || depth > 16)
|
|
95
|
+
invalid('JSON complexity');
|
|
96
|
+
if (typeof value === 'string') {
|
|
97
|
+
if (value.length > MAX_FILE_BYTES)
|
|
98
|
+
invalid('JSON string exceeds bound');
|
|
99
|
+
maximumEncodedBytes += 6 * Buffer.byteLength(value) + 2;
|
|
100
|
+
}
|
|
101
|
+
else if (value === null || typeof value === 'boolean' || typeof value === 'number') {
|
|
102
|
+
maximumEncodedBytes += 24;
|
|
103
|
+
}
|
|
104
|
+
else {
|
|
105
|
+
if (!value || typeof value !== 'object' || seen.has(value))
|
|
106
|
+
invalid('JSON value');
|
|
107
|
+
seen.add(value);
|
|
108
|
+
if (Array.isArray(value)) {
|
|
109
|
+
for (const item of exactArray(value, MAX_FILES + 2, 'JSON array'))
|
|
110
|
+
bound(item, depth + 1);
|
|
111
|
+
maximumEncodedBytes += value.length + 2;
|
|
112
|
+
}
|
|
113
|
+
else {
|
|
114
|
+
if (Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).length > 16)
|
|
115
|
+
invalid('JSON object');
|
|
116
|
+
const descriptors = Object.getOwnPropertyDescriptors(value);
|
|
117
|
+
for (const key of Reflect.ownKeys(value)) {
|
|
118
|
+
if (typeof key !== 'string' || key.length > 256)
|
|
119
|
+
invalid('JSON key');
|
|
120
|
+
const descriptor = descriptors[key];
|
|
121
|
+
if (!descriptor.enumerable || !('value' in descriptor))
|
|
122
|
+
invalid('JSON descriptor');
|
|
123
|
+
bound(key, depth + 1);
|
|
124
|
+
bound(descriptor.value, depth + 1);
|
|
125
|
+
maximumEncodedBytes += 2;
|
|
126
|
+
}
|
|
127
|
+
maximumEncodedBytes += 2;
|
|
128
|
+
}
|
|
129
|
+
seen.delete(value);
|
|
130
|
+
}
|
|
131
|
+
if (maximumEncodedBytes > MAX_JSON_BYTES)
|
|
132
|
+
invalid('JSON exceeds bound');
|
|
133
|
+
};
|
|
134
|
+
bound(payload, 0);
|
|
135
|
+
const encoded = canonicalGrowthJson(payload);
|
|
136
|
+
if (Buffer.byteLength(encoded, 'utf8') > MAX_JSON_BYTES)
|
|
137
|
+
invalid('JSON exceeds bound');
|
|
138
|
+
return sha256(`${DOMAIN}${encoded}`);
|
|
139
|
+
}
|
|
140
|
+
function indexText(entries) {
|
|
141
|
+
return entries.map(entry => `${entry.mode} ${entry.oid} 0\t${entry.path}\0`).join('');
|
|
142
|
+
}
|
|
143
|
+
function treeDigest(baseCommit, scope, text) {
|
|
144
|
+
return sha256(`dsh-source-tree-v2\0${baseCommit}\0${JSON.stringify(scope)}\0${text}`);
|
|
145
|
+
}
|
|
146
|
+
function patchDigest(baseCommit, scope, patch) {
|
|
147
|
+
return createHash('sha256').update(`dsh-source-patch-v2\0${baseCommit}\0${JSON.stringify(scope)}\0`).update(patch).digest('hex');
|
|
148
|
+
}
|
|
149
|
+
function inspectEntry(value, root, plugin) {
|
|
150
|
+
const entry = exactRecord(value, plugin ? ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'] : ['path', 'mode', 'oid'], 'entry');
|
|
151
|
+
if (typeof entry.path !== 'string' || typeof entry.mode !== 'string' || typeof entry.oid !== 'string'
|
|
152
|
+
|| !COMMIT.test(entry.oid) || !['100644', '100755'].includes(entry.mode)
|
|
153
|
+
|| !(safePluginPath(entry.path, root) || entry.path === 'plugins/README.md' || entry.path === 'pnpm-lock.yaml'))
|
|
154
|
+
invalid('entry metadata');
|
|
155
|
+
return entry;
|
|
156
|
+
}
|
|
157
|
+
/** Offline structural and byte verification; signature, owner and current authority belong to the journal. */
|
|
158
|
+
export function validateCreationCapabilitySource(snapshot, certificate) {
|
|
159
|
+
const plan = certificatePlan(certificate);
|
|
160
|
+
const value = exactRecord(snapshot, ['protocol', 'baseCommit', 'scope', 'treeDigest', 'patchDigest', 'entries', 'files', 'digest'], 'snapshot');
|
|
161
|
+
if (value.protocol !== PROTOCOL || typeof value.baseCommit !== 'string' || !COMMIT.test(value.baseCommit)
|
|
162
|
+
|| typeof value.treeDigest !== 'string' || !DIGEST.test(value.treeDigest)
|
|
163
|
+
|| typeof value.patchDigest !== 'string' || !DIGEST.test(value.patchDigest)
|
|
164
|
+
|| typeof value.digest !== 'string' || !DIGEST.test(value.digest))
|
|
165
|
+
invalid('header');
|
|
166
|
+
const name = plan.name;
|
|
167
|
+
const scope = checkedScope(name, value.scope);
|
|
168
|
+
const root = `plugins/${name}`;
|
|
169
|
+
const entries = exactArray(value.entries, MAX_FILES + 2, 'entries');
|
|
170
|
+
const files = exactArray(value.files, MAX_FILES, 'files');
|
|
171
|
+
if (entries.length < 3 || files.length < 1)
|
|
172
|
+
invalid('empty source');
|
|
173
|
+
const seen = new Set();
|
|
174
|
+
const expectedFiles = [];
|
|
175
|
+
let previous = Buffer.alloc(0);
|
|
176
|
+
for (const unknownEntry of entries) {
|
|
177
|
+
const entry = inspectEntry(unknownEntry, root, false);
|
|
178
|
+
const order = Buffer.from(entry.path, 'utf8');
|
|
179
|
+
if (seen.has(entry.path) || previous.length && Buffer.compare(previous, order) >= 0)
|
|
180
|
+
invalid('index order or duplicate');
|
|
181
|
+
previous = order;
|
|
182
|
+
seen.add(entry.path);
|
|
183
|
+
if (entry.path.startsWith(`${root}/`))
|
|
184
|
+
expectedFiles.push(entry);
|
|
185
|
+
}
|
|
186
|
+
if (!seen.has('plugins/README.md') || !seen.has('pnpm-lock.yaml') || expectedFiles.length !== files.length)
|
|
187
|
+
invalid('index scope');
|
|
188
|
+
const text = indexText(entries);
|
|
189
|
+
if (Buffer.byteLength(text, 'utf8') > MAX_INDEX_BYTES || treeDigest(value.baseCommit, scope, text) !== value.treeDigest)
|
|
190
|
+
invalid('tree digest');
|
|
191
|
+
let total = 0;
|
|
192
|
+
for (let index = 0; index < files.length; index++) {
|
|
193
|
+
const file = exactRecord(files[index], ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'], 'file');
|
|
194
|
+
const expected = expectedFiles[index];
|
|
195
|
+
if (file.path !== expected.path || file.mode !== expected.mode || file.oid !== expected.oid
|
|
196
|
+
|| typeof file.content !== 'string' || file.content.length > MAX_FILE_BYTES
|
|
197
|
+
|| typeof file.sha256 !== 'string' || !DIGEST.test(file.sha256)
|
|
198
|
+
|| typeof file.bytes !== 'number' || !Number.isSafeInteger(file.bytes) || file.bytes < 0 || file.bytes > MAX_FILE_BYTES)
|
|
199
|
+
invalid('file metadata');
|
|
200
|
+
const bytes = Buffer.from(file.content, 'utf8');
|
|
201
|
+
if (bytes.length !== file.bytes || bytes.includes(0) || strictUtf8(bytes, String(file.path)) !== file.content
|
|
202
|
+
|| sha256(bytes) !== file.sha256
|
|
203
|
+
|| createHash('sha1').update(`blob ${bytes.length}\0`).update(bytes).digest('hex') !== file.oid)
|
|
204
|
+
invalid('file bytes');
|
|
205
|
+
total += bytes.length;
|
|
206
|
+
if (total > MAX_TOTAL_BYTES)
|
|
207
|
+
invalid('total bytes');
|
|
208
|
+
}
|
|
209
|
+
if (value.treeDigest !== plan.sourceTreeDigest || value.patchDigest !== plan.sourcePatchDigest)
|
|
210
|
+
invalid('certificate digest');
|
|
211
|
+
const payload = { protocol: PROTOCOL, baseCommit: value.baseCommit, scope: value.scope,
|
|
212
|
+
treeDigest: value.treeDigest, patchDigest: value.patchDigest, entries: value.entries, files: value.files };
|
|
213
|
+
if (creationCapabilitySourceDigest(payload) !== value.digest)
|
|
214
|
+
invalid('source digest');
|
|
215
|
+
}
|
|
216
|
+
async function listedPluginPaths(worktree, root, signal) {
|
|
217
|
+
const target = resolve(worktree, root);
|
|
218
|
+
const metadata = await lstat(target);
|
|
219
|
+
if (!metadata.isDirectory() || metadata.isSymbolicLink() || await realpath(target) !== target)
|
|
220
|
+
invalid('plugin root');
|
|
221
|
+
const paths = [];
|
|
222
|
+
let nodes = 0;
|
|
223
|
+
const visit = async (directory, prefix, depth) => {
|
|
224
|
+
signal?.throwIfAborted();
|
|
225
|
+
if (depth > MAX_DIRECTORY_DEPTH)
|
|
226
|
+
invalid('directory depth');
|
|
227
|
+
for (const entry of await readdir(directory, { withFileTypes: true })) {
|
|
228
|
+
signal?.throwIfAborted();
|
|
229
|
+
if (++nodes > MAX_DIRECTORY_NODES)
|
|
230
|
+
invalid('directory entries');
|
|
231
|
+
const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
|
|
232
|
+
const path = `${root}/${relative}`;
|
|
233
|
+
if (!safePluginPath(path, root))
|
|
234
|
+
invalid('plugin path');
|
|
235
|
+
if (entry.isDirectory()) {
|
|
236
|
+
const parent = join(directory, entry.name);
|
|
237
|
+
const stat = await lstat(parent);
|
|
238
|
+
if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(parent) !== parent)
|
|
239
|
+
invalid('plugin directory');
|
|
240
|
+
await visit(parent, relative, depth + 1);
|
|
241
|
+
}
|
|
242
|
+
else if (entry.isFile()) {
|
|
243
|
+
const stat = await lstat(join(directory, entry.name));
|
|
244
|
+
if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_FILE_BYTES)
|
|
245
|
+
invalid('non-regular or oversized file');
|
|
246
|
+
paths.push(path);
|
|
247
|
+
}
|
|
248
|
+
else
|
|
249
|
+
invalid('non-regular plugin entry');
|
|
250
|
+
if (paths.length > MAX_FILES)
|
|
251
|
+
invalid('file count');
|
|
252
|
+
}
|
|
253
|
+
};
|
|
254
|
+
await visit(target, '', 0);
|
|
255
|
+
return paths.sort();
|
|
256
|
+
}
|
|
257
|
+
/** Capture exactly the same temporary-index digest domain as checkedSourceSnapshot. */
|
|
258
|
+
export async function captureCreationCapabilitySource(input) {
|
|
259
|
+
const plan = certificatePlan(input.certificate);
|
|
260
|
+
const scope = checkedScope(plan.name, input.scope);
|
|
261
|
+
if (!COMMIT.test(input.baseCommit))
|
|
262
|
+
invalid('base commit');
|
|
263
|
+
const root = `plugins/${plan.name}`;
|
|
264
|
+
const temporary = await mkdtemp(join(tmpdir(), 'dsh-created-source-index-'));
|
|
265
|
+
try {
|
|
266
|
+
const environment = { ...input.environment, GIT_INDEX_FILE: join(temporary, 'index') };
|
|
267
|
+
const run = (args, maximumOutput) => runLocalBuffer('git', args, input.worktree, environment, { maximumOutput, ...(input.signal ? { signal: input.signal } : {}) });
|
|
268
|
+
const head = (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim();
|
|
269
|
+
if (head !== input.baseCommit)
|
|
270
|
+
invalid('worktree HEAD drift');
|
|
271
|
+
const stage = async () => {
|
|
272
|
+
await runLocalCommand('git', ['read-tree', input.baseCommit], input.worktree, environment, input.signal ? { signal: input.signal } : {});
|
|
273
|
+
await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], input.worktree, environment, input.signal ? { signal: input.signal } : {});
|
|
274
|
+
const index = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'ls-files', '--stage', '-z', '--', ...scope], MAX_INDEX_BYTES);
|
|
275
|
+
const patch = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'diff', '--cached', '--binary',
|
|
276
|
+
'--full-index', '--no-color', input.baseCommit, '--', ...scope], MAX_PATCH_BYTES);
|
|
277
|
+
return { index, patch };
|
|
278
|
+
};
|
|
279
|
+
const first = await stage();
|
|
280
|
+
const raw = strictUtf8(first.index, 'index', true);
|
|
281
|
+
const rows = raw.split('\0');
|
|
282
|
+
if (rows.pop() !== '' || rows.length < 3 || rows.length > MAX_FILES + 2)
|
|
283
|
+
invalid('index size');
|
|
284
|
+
const entries = rows.map(row => {
|
|
285
|
+
const match = /^(100644|100755) ([a-f0-9]{40}) 0\t(.+)$/u.exec(row);
|
|
286
|
+
if (!match)
|
|
287
|
+
invalid('index record');
|
|
288
|
+
return { path: match[3], mode: match[1], oid: match[2] };
|
|
289
|
+
});
|
|
290
|
+
if (indexText(entries) !== raw)
|
|
291
|
+
invalid('index roundtrip');
|
|
292
|
+
const paths = await listedPluginPaths(input.worktree, root, input.signal);
|
|
293
|
+
const indexPluginPaths = entries.filter(entry => entry.path.startsWith(`${root}/`)).map(entry => entry.path).sort();
|
|
294
|
+
if (paths.length !== indexPluginPaths.length || paths.some((path, index) => path !== indexPluginPaths[index]))
|
|
295
|
+
invalid('plugin file set');
|
|
296
|
+
const files = [];
|
|
297
|
+
let total = 0;
|
|
298
|
+
for (const entry of entries) {
|
|
299
|
+
if (!entry.path.startsWith(`${root}/`))
|
|
300
|
+
continue;
|
|
301
|
+
const bytes = await run(['cat-file', 'blob', entry.oid], MAX_FILE_BYTES);
|
|
302
|
+
if (bytes.length > MAX_FILE_BYTES)
|
|
303
|
+
invalid('file bytes');
|
|
304
|
+
total += bytes.length;
|
|
305
|
+
if (total > MAX_TOTAL_BYTES)
|
|
306
|
+
invalid('total bytes');
|
|
307
|
+
const content = strictUtf8(bytes, entry.path);
|
|
308
|
+
files.push({ ...entry, bytes: bytes.length, sha256: sha256(bytes), content });
|
|
309
|
+
}
|
|
310
|
+
const second = await stage();
|
|
311
|
+
if (!second.index.equals(first.index) || !second.patch.equals(first.patch)
|
|
312
|
+
|| (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim() !== input.baseCommit)
|
|
313
|
+
invalid('worktree drift');
|
|
314
|
+
const payload = { protocol: PROTOCOL, baseCommit: input.baseCommit, scope, treeDigest: treeDigest(input.baseCommit, scope, raw),
|
|
315
|
+
patchDigest: patchDigest(input.baseCommit, scope, first.patch), entries, files };
|
|
316
|
+
const snapshot = { ...payload, digest: creationCapabilitySourceDigest(payload) };
|
|
317
|
+
validateCreationCapabilitySource(snapshot, input.certificate);
|
|
318
|
+
for (const entry of entries)
|
|
319
|
+
Object.freeze(entry);
|
|
320
|
+
for (const file of files)
|
|
321
|
+
Object.freeze(file);
|
|
322
|
+
return Object.freeze({ ...snapshot, scope: Object.freeze(scope), entries: Object.freeze(entries), files: Object.freeze(files) });
|
|
323
|
+
}
|
|
324
|
+
finally {
|
|
325
|
+
await rm(temporary, { recursive: true, force: true });
|
|
326
|
+
}
|
|
327
|
+
}
|
|
328
|
+
//# sourceMappingURL=creation-capability-source.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"creation-capability-source.js","sourceRoot":"","sources":["../src/creation-capability-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAA8C,MAAM,yCAAyC,CAAA;AACzH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvE,MAAM,QAAQ,GAAG,kCAA2C,CAAA;AAC5D,MAAM,MAAM,GAAG,oCAAoC,CAAA;AACnD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,IAAI,GAAG,8CAA8C,CAAA;AAC3D,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,cAAc,GAAG,MAAM,CAAA;AAC7B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,SAAS,CAAA;AACjC,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAC/B,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAA;AA0B5B,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE3G,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1H,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;WAC5F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAE,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAE,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACzG,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,GAAW,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WAC9F,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;WAChD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;WAC7D,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;WACvF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ;eAClG,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/G,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,WAAgE;IACvF,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9I,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAClG,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,mBAAmB;QACnG,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,kBAAkB,CAA6D,CAAA;AAC1I,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAwB;IAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrG,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;WAC3D,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,KAAK,CAAA;IACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;WACzI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IAChE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IACpE,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IAC1F,MAAM,CAAC;QAAC,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;IAC3F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAyD;IACtG,uFAAuF;IACvF,IAAI,KAAK,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;YACvE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrF,mBAAmB,IAAI,EAAE,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,EAAE,YAAY,CAAC;oBAAE,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzF,mBAAmB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YACzC,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;gBACnH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;gBAC3D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;wBAAE,OAAO,CAAC,UAAU,CAAC,CAAA;oBACpE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAE,CAAA;oBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;wBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;oBAClF,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;oBACzD,mBAAmB,IAAI,CAAC,CAAA;gBAC1B,CAAC;gBACD,mBAAmB,IAAI,CAAC,CAAA;YAC1B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,IAAI,mBAAmB,GAAG,cAAc;YAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACzE,CAAC,CAAA;IACD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACtF,OAAO,MAAM,CAAC,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,OAAiD;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,KAAwB,EAAE,IAAY;IAC5E,OAAO,MAAM,CAAC,uBAAuB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,KAAwB,EAAE,KAAa;IAC9E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClI,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,MAAe;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;IACnI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;WAChG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;WACrE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5I,OAAO,KAAiD,CAAA;AAC1D,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,gCAAgC,CAAC,QAAiB,EAChE,WAAgE;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAA;IAC/I,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACpG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACtE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WACxE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,KAA0B,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,aAAa,GAAoC,EAAE,CAAA;IACzD,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9B,KAAK,MAAM,YAAY,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;QACxH,QAAQ,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAClI,MAAM,IAAI,GAAG,SAAS,CAAC,OAA0C,CAAC,CAAA;IAClE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,eAAe,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/I,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAE,CAAA;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eACtF,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc;eACxE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;eAC5D,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;YAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QACnJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO;eACxG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;eAC7B,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACxH,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,eAAe;YAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,iBAAiB;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7H,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QACpF,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IAC5G,IAAI,8BAA8B,CAAC,OAA2D,CAAC,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,CAAA;AAC5I,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAoB;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrH,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;QACtF,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,KAAK,GAAG,mBAAmB;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,EAAE,KAAK,GAAG,mBAAmB;gBAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAChE,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAA;YAClC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;gBAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;oBAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;gBAClH,MAAM,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC1C,CAAC;iBACI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;oBAAE,OAAO,CAAC,+BAA+B,CAAC,CAAA;gBACnH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;;gBAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAGrD;IACC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAA;QACtF,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,aAAqB,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACrH,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QACjG,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACvF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAC/G,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YAC5I,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;gBAC1G,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YACnF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACzB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9F,MAAM,OAAO,GAAoC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC9D,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnE,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACnC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAA2C,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAA;QACtG,CAAC,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACnH,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACzI,MAAM,KAAK,GAAmC,EAAE,CAAA;QAChD,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,SAAQ;YAChD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAA;YACxE,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACxD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;YACrB,IAAI,KAAK,GAAG,eAAe;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAA;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;eACrE,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACzI,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC;YAC7H,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAClF,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAA;QAChF,gCAAgC,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClI,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;AACrE,CAAC"}
|