@duckcodeailabs/dql-agent 1.14.0 → 1.14.2

package/dist/agentic/research-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"research-agent.js","sourceRoot":"","sources":["../../src/agentic/research-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8BH,MAAM,YAAY,GAAgD,IAAI,GAAG,CAAC;IACxE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa;CAC7F,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;gFAoBiE,CAAC;AAEjF,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC;YAAC,SAAS;QAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,SAAS;QACvB,IAAI,IAAI,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;aACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC;oBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,SAAS,CAAC;gBAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CAAC,MAAc,EAAE,MAAsB;IAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,0DAA0D;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,OAAO,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,MAAsB;IACzE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,IAAI,GAAI,MAAmC,CAAC,UAAU,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW;YAAE,SAAS;QACzC,wEAAwE;QACxE,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAe,CAAC;YAC1F,CAAC,CAAC,MAAM,CAAC,MAAwC;YACjD,CAAC,CAAC,eAAe,CAAC;QACpB,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC;YACjG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YAClD,CAAC,CAAC,GAAG,CAAC;QACR,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;AACjF,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAsB,EACtB,QAAgB,EAChB,MAAsB,EACtB,UAAwD,EAAE;IAE1D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACzC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG;YACd,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3E,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;SAC9E,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CACjC;YACE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,OAAO,EAAE,EAAE;YAChE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE;SACpC,EACD,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAC9B,CAAC;QACF,OAAO,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,UAAgC;IAChE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrC,2EAA2E;QAC3E,uDAAuD;QACvD,OAAO,EAAE,UAAU,CAAC,SAAS;QAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;QAC9D,WAAW,EAAE,UAAU,CAAC,WAAW;KACpC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/agentic/sql-authorization.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Exact generated-SQL execution authorization.
+ *
+ * This is deliberately a server-only, in-memory capability. It is created by
+ * the analyst loop, passed through one call chain, and consumed by the local
+ * execution host. It is never an artifact, response field, cache entry, or
+ * bearer token.
+ */
+export type IdentifierEvidence = 'compiler' | 'preview' | 'schema_tool' | 'catalog';
+export interface ExecutionAuthorizationBindingV1 {
+    runId: string;
+    executionId: string;
+    snapshotId: string;
+    /** The router plan that selected the target, when a plan exists. */
+    planId?: string;
+    /** The server-observed physical execution target. */
+    targetFingerprint?: string;
+    /** Canonical host bindings, never raw parameter values. */
+    bindingsFingerprint: string;
+}
+export interface FinalSqlAuthorizationV1 extends ExecutionAuthorizationBindingV1 {
+    version: 1;
+    /** Fully-qualified identities proven during this exact loop. */
+    provenIdentifiers: string[];
+    /** Catalog evidence informs retrieval only and never authorizes execution. */
+    evidence: Record<string, IdentifierEvidence>;
+    /** SHA-256 of the exact prepared bytes sent to the connector. */
+    sqlFingerprint: string;
+    mintedAt: string;
+}
+/**
+ * Opaque handoff from the analyst loop to its host execution closure. Do not
+ * persist or surface this type; its only valid lifetime is one request/child.
+ */
+export interface AgenticSqlExecutionCapabilityV1 extends Omit<ExecutionAuthorizationBindingV1, 'planId' | 'targetFingerprint'> {
+    version: 1;
+    /** Generated execution never proceeds without a frozen plan and target. */
+    planId: string;
+    targetFingerprint: string;
+    candidateSqlFingerprint: string;
+    provenIdentifiers: string[];
+    evidence: Record<string, IdentifierEvidence>;
+}
+export interface SqlAuthorizationVerdict {
+    ok: boolean;
+    unproven: string[];
+    drifted: boolean;
+    reason?: string;
+}
+export interface SqlAuthorizationCheck {
+    bindings?: unknown;
+    runId?: string;
+    executionId?: string;
+    snapshotId?: string;
+    planId?: string;
+    targetFingerprint?: string;
+}
+/**
+ * Per-invocation, server-only one-shot gate for analyst capabilities.
+ *
+ * The host creates one gate for one answer/compound child. It has no registry,
+ * static state, persistence, or bearer representation; it merely prevents the
+ * exact same capability from crossing the physical execution boundary twice.
+ */
+export declare class AgenticExecutionCapabilityGate {
+    private readonly consumed;
+    consume(capability: Pick<AgenticSqlExecutionCapabilityV1, 'runId' | 'executionId'>): boolean;
+}
+/** Parsed references supplied by the established SQL validator. */
+export interface SqlAuthorizationReferences {
+    relations?: readonly string[];
+    columns?: ReadonlyArray<{
+        relation?: string;
+        column: string;
+    }>;
+}
+/**
+ * Historical export retained for callers. No SQL rewriting is permitted at
+ * this boundary: lowercasing or stripping comments changes string literals and
+ * can turn two different queries into the same authorization fingerprint.
+ */
+export declare function normalizeSqlForFingerprint(sql: string): string;
+/** Hash exact SQL bytes. Formatting drift is execution drift here. */
+export declare function fingerprintSql(sql: string): string;
+/** Stable, redacted fingerprint for positional/named bindings. */
+export declare function fingerprintSqlBindings(bindings: unknown): string;
+export declare function createAgenticSqlExecutionCapability(input: {
+    sql: string;
+    proven: ReadonlyArray<{
+        identifier: string;
+        evidence: IdentifierEvidence;
+    }>;
+    runId?: string;
+    executionId?: string;
+    snapshotId?: string;
+    planId?: string;
+    targetFingerprint?: string;
+    bindings?: unknown;
+}): AgenticSqlExecutionCapabilityV1 | undefined;
+export declare function mintFinalSqlAuthorization(input: {
+    sql: string;
+    proven: ReadonlyArray<{
+        identifier: string;
+        evidence: IdentifierEvidence;
+    }>;
+    runId?: string;
+    executionId?: string;
+    snapshotId?: string;
+    planId?: string;
+    targetFingerprint?: string;
+    bindings?: unknown;
+    now?: () => Date;
+}): FinalSqlAuthorizationV1;
+/**
+ * Validate that the host is still executing the precise analyst proposal before
+ * preparation. The subsequent final authorization binds the prepared bytes.
+ */
+export declare function verifyAgenticSqlExecutionCapability(capability: AgenticSqlExecutionCapabilityV1, candidateSql: string, check?: SqlAuthorizationCheck): SqlAuthorizationVerdict;
+/**
+ * Does the exact prepared statement reference only observed, non-catalog
+ * identities and still match its run/target/binding authority?
+ */
+export declare function verifyFinalSql(authorization: FinalSqlAuthorizationV1, sql: string, referenced: ReadonlyArray<string>, check?: SqlAuthorizationCheck): SqlAuthorizationVerdict;
+/**
+ * Convert validator references into fully-qualified execution identities using
+ * only aliases declared inside the same SQL statement. This is not a leaf-name
+ * fallback: an unqualified column in a multi-relation query stays unqualified
+ * and is therefore refused by the capability check.
+ */
+export declare function qualifyAuthorizationReferences(sql: string, references: SqlAuthorizationReferences): string[];
+//# sourceMappingURL=sql-authorization.d.ts.map

package/dist/agentic/sql-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-authorization.d.ts","sourceRoot":"","sources":["../../src/agentic/sql-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAEpF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,+BAA+B;IAC9E,OAAO,EAAE,CAAC,CAAC;IACX,gEAAgE;IAChE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC7C,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,+BAAgC,SAAQ,IAAI,CAAC,+BAA+B,EAAE,QAAQ,GAAG,mBAAmB,CAAC;IAC5H,OAAO,EAAE,CAAC,CAAC;IACX,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,+BAA+B,EAAE,OAAO,GAAG,aAAa,CAAC,GAAG,OAAO;CAM7F;AAED,mEAAmE;AACnE,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,kEAAkE;AAClE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAEhE;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,+BAA+B,GAAG,SAAS,CAkB9C;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,uBAAuB,CAc1B;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,+BAA+B,EAC3C,YAAY,EAAE,MAAM,EACpB,KAAK,GAAE,qBAA0B,GAChC,uBAAuB,CAKzB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,uBAAuB,EACtC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,EACjC,KAAK,GAAE,qBAA0B,GAChC,uBAAuB,CAmBzB;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,0BAA0B,GACrC,MAAM,EAAE,CAgCV"}

package/dist/agentic/sql-authorization.js

@@ -0,0 +1,460 @@
+/**
+ * Exact generated-SQL execution authorization.
+ *
+ * This is deliberately a server-only, in-memory capability. It is created by
+ * the analyst loop, passed through one call chain, and consumed by the local
+ * execution host. It is never an artifact, response field, cache entry, or
+ * bearer token.
+ */
+import { createHash, randomUUID } from 'node:crypto';
+/**
+ * Per-invocation, server-only one-shot gate for analyst capabilities.
+ *
+ * The host creates one gate for one answer/compound child. It has no registry,
+ * static state, persistence, or bearer representation; it merely prevents the
+ * exact same capability from crossing the physical execution boundary twice.
+ */
+export class AgenticExecutionCapabilityGate {
+    consumed = new Set();
+    consume(capability) {
+        const identity = `${capability.runId}\u0000${capability.executionId}`;
+        if (this.consumed.has(identity))
+            return false;
+        this.consumed.add(identity);
+        return true;
+    }
+}
+/**
+ * Historical export retained for callers. No SQL rewriting is permitted at
+ * this boundary: lowercasing or stripping comments changes string literals and
+ * can turn two different queries into the same authorization fingerprint.
+ */
+export function normalizeSqlForFingerprint(sql) {
+    return sql;
+}
+/** Hash exact SQL bytes. Formatting drift is execution drift here. */
+export function fingerprintSql(sql) {
+    return createHash('sha256').update(sql, 'utf8').digest('hex').slice(0, 32);
+}
+/** Stable, redacted fingerprint for positional/named bindings. */
+export function fingerprintSqlBindings(bindings) {
+    return createHash('sha256').update(stableBindingsValue(bindings), 'utf8').digest('hex').slice(0, 32);
+}
+export function createAgenticSqlExecutionCapability(input) {
+    const runId = requiredCapabilityIdentity(input.runId);
+    const snapshotId = requiredCapabilityIdentity(input.snapshotId);
+    const planId = requiredCapabilityIdentity(input.planId);
+    const targetFingerprint = requiredCapabilityIdentity(input.targetFingerprint);
+    if (!runId || !snapshotId || !planId || !targetFingerprint)
+        return undefined;
+    const normalizedProof = normalizeProof(input.proven);
+    return {
+        version: 1,
+        runId,
+        executionId: input.executionId?.trim() || randomUUID(),
+        snapshotId,
+        planId,
+        targetFingerprint,
+        bindingsFingerprint: fingerprintSqlBindings(input.bindings ?? {}),
+        candidateSqlFingerprint: fingerprintSql(input.sql),
+        ...normalizedProof,
+    };
+}
+export function mintFinalSqlAuthorization(input) {
+    const normalizedProof = normalizeProof(input.proven);
+    return {
+        version: 1,
+        runId: requiredIdentity(input.runId, 'run'),
+        executionId: input.executionId?.trim() || randomUUID(),
+        snapshotId: requiredIdentity(input.snapshotId, 'snapshot'),
+        ...(input.planId?.trim() ? { planId: input.planId.trim() } : {}),
+        ...(input.targetFingerprint?.trim() ? { targetFingerprint: input.targetFingerprint.trim() } : {}),
+        bindingsFingerprint: fingerprintSqlBindings(input.bindings ?? {}),
+        sqlFingerprint: fingerprintSql(input.sql),
+        ...normalizedProof,
+        mintedAt: (input.now?.() ?? new Date()).toISOString(),
+    };
+}
+/**
+ * Validate that the host is still executing the precise analyst proposal before
+ * preparation. The subsequent final authorization binds the prepared bytes.
+ */
+export function verifyAgenticSqlExecutionCapability(capability, candidateSql, check = {}) {
+    if (fingerprintSql(candidateSql) !== capability.candidateSqlFingerprint) {
+        return failure('The generated SQL differs from the analyst-approved proposal.', true);
+    }
+    return verifyBinding(capability, check);
+}
+/**
+ * Does the exact prepared statement reference only observed, non-catalog
+ * identities and still match its run/target/binding authority?
+ */
+export function verifyFinalSql(authorization, sql, referenced, check = {}) {
+    if (fingerprintSql(sql) !== authorization.sqlFingerprint) {
+        return failure('The statement about to execute is not the one that was authorized.', true);
+    }
+    const binding = verifyBinding(authorization, check);
+    if (!binding.ok)
+        return binding;
+    const executable = new Set(authorization.provenIdentifiers.filter((id) => authorization.evidence[id] !== 'catalog'));
+    const unproven = [...new Set(referenced
+            .map(normalizeQualifiedIdentifier)
+            .filter(Boolean)
+            // No leaf fallback. `warehouse_a.orders.id` and `warehouse_b.orders.id`
+            // are distinct capabilities even when their last component is the same.
+            .filter((name) => !executable.has(name)))];
+    if (unproven.length > 0) {
+        return { ok: false, unproven, drifted: false, reason: `Nothing in this run proved: ${unproven.join(', ')}.` };
+    }
+    return { ok: true, unproven: [], drifted: false };
+}
+/**
+ * Convert validator references into fully-qualified execution identities using
+ * only aliases declared inside the same SQL statement. This is not a leaf-name
+ * fallback: an unqualified column in a multi-relation query stays unqualified
+ * and is therefore refused by the capability check.
+ */
+export function qualifyAuthorizationReferences(sql, references) {
+    const relations = [...new Set((references.relations ?? []).filter(Boolean))];
+    const aliases = relationAliasesInSql(sql);
+    const byNormalizedRelation = new Map(relations.map((relation) => [normalizeQualifiedIdentifier(relation), relation]));
+    const resolveRelation = (relation) => {
+        if (relation) {
+            const normalized = normalizeQualifiedIdentifier(relation);
+            return aliases.get(normalized) ?? byNormalizedRelation.get(normalized);
+        }
+        return relations.length === 1 ? relations[0] : undefined;
+    };
+    // SQL parsers quite correctly report an unqualified `ORDER BY total` as a
+    // column reference.  `total` can instead be a SELECT output alias, which is
+    // not a physical warehouse column and therefore must not be minted as one
+    // into the execution capability.  Only replace an exact alias with the
+    // source references which the same parser already found in that alias's
+    // expression.  This keeps the physical proof load-bearing: a scalar alias,
+    // an arbitrary/unbound alias, or an alias over an unknown source remains a
+    // denied reference rather than becoming an authorization bypass.
+    const outputAliasSources = selectOutputAliasSourceReferences(sql, references, resolveRelation);
+    return Array.from(new Set([
+        ...relations,
+        ...(references.columns ?? []).map((column) => {
+            const outputSources = outputAliasSources.get(normalizeQualifiedIdentifier(column.column));
+            // Some parsers attach the only FROM relation to an otherwise bare
+            // `ORDER BY total` reference.  Syntax, not that parser convenience, is
+            // the authority here: a qualified `ORDER BY t.total` remains physical.
+            if (outputSources && isBareTopLevelOrderByAlias(sql, column.column))
+                return outputSources;
+            const relation = resolveRelation(column.relation);
+            return relation ? `${relation}.${column.column}` : column.column;
+        }),
+    ].flat()));
+}
+/**
+ * Return physical source identities for exact SELECT aliases.  This is a
+ * deliberately narrow companion to the established SQL parser: it does not
+ * parse SQL, infer joins, or resolve a leaf against another relation.  It only
+ * recognizes an alias when an existing parser-reported source column occurs in
+ * that same SELECT expression.  The caller subsequently proves each returned
+ * identity against the router-owned runtime closure.
+ */
+function selectOutputAliasSourceReferences(sql, references, resolveRelation) {
+    const result = new Map();
+    const columns = references.columns ?? [];
+    for (const item of splitTopLevelSelectItems(topLevelSelectList(sql))) {
+        const output = selectOutputAlias(item);
+        if (!output)
+            continue;
+        const alias = normalizeQualifiedIdentifier(output.alias);
+        if (!alias)
+            continue;
+        const sources = columns.flatMap((column) => {
+            // An output alias cannot prove itself.  It must be backed by an existing
+            // parser-reported source reference from its own expression.
+            if (!column.relation && normalizeQualifiedIdentifier(column.column) === alias)
+                return [];
+            if (!expressionReferencesColumn(output.expression, column.column))
+                return [];
+            const relation = resolveRelation(column.relation);
+            return relation ? [`${relation}.${column.column}`] : [];
+        });
+        if (sources.length > 0)
+            result.set(alias, Array.from(new Set(sources)));
+    }
+    return result;
+}
+function topLevelSelectList(sql) {
+    let depth = 0;
+    let quote;
+    let selectStart = -1;
+    for (let index = 0; index < sql.length; index += 1) {
+        const char = sql[index];
+        const next = sql[index + 1];
+        if (quote) {
+            if (char === quote) {
+                if (quote === "'" && next === "'") {
+                    index += 1;
+                    continue;
+                }
+                quote = undefined;
+            }
+            continue;
+        }
+        if (char === '"' || char === "'" || char === '`') {
+            quote = char;
+            continue;
+        }
+        if (char === '(') {
+            depth += 1;
+            continue;
+        }
+        if (char === ')') {
+            depth = Math.max(0, depth - 1);
+            continue;
+        }
+        if (depth !== 0 || !/[A-Za-z_]/.test(char))
+            continue;
+        const match = /^[A-Za-z_][A-Za-z0-9_$]*/.exec(sql.slice(index));
+        if (!match)
+            continue;
+        const token = match[0].toLowerCase();
+        if (token === 'select')
+            selectStart = index + match[0].length;
+        if (token === 'from' && selectStart >= 0)
+            return sql.slice(selectStart, index);
+        index += match[0].length - 1;
+    }
+    return '';
+}
+function isBareTopLevelOrderByAlias(sql, alias) {
+    const list = topLevelOrderByList(sql);
+    const normalizedAlias = normalizeQualifiedIdentifier(alias);
+    if (!list || !normalizedAlias)
+        return false;
+    return splitTopLevelSelectItems(list).some((item) => {
+        const withoutDirection = item
+            .trim()
+            .replace(/\s+(?:asc|desc)(?:\s+nulls\s+(?:first|last))?\s*$/i, '')
+            .trim();
+        return !withoutDirection.includes('.')
+            && normalizeQualifiedIdentifier(withoutDirection) === normalizedAlias;
+    });
+}
+function topLevelOrderByList(sql) {
+    let depth = 0;
+    let quote;
+    let orderByStart = -1;
+    for (let index = 0; index < sql.length; index += 1) {
+        const char = sql[index];
+        const next = sql[index + 1];
+        if (quote) {
+            if (char === quote) {
+                if (quote === "'" && next === "'") {
+                    index += 1;
+                    continue;
+                }
+                quote = undefined;
+            }
+            continue;
+        }
+        if (char === '"' || char === "'" || char === '`') {
+            quote = char;
+            continue;
+        }
+        if (char === '(') {
+            depth += 1;
+            continue;
+        }
+        if (char === ')') {
+            depth = Math.max(0, depth - 1);
+            continue;
+        }
+        if (depth !== 0 || !/[A-Za-z_]/.test(char))
+            continue;
+        const match = /^[A-Za-z_][A-Za-z0-9_$]*/.exec(sql.slice(index));
+        if (!match)
+            continue;
+        const token = match[0].toLowerCase();
+        if (orderByStart < 0 && token === 'order') {
+            const by = /^\s+by\b/i.exec(sql.slice(index + match[0].length));
+            if (by) {
+                orderByStart = index + match[0].length + by[0].length;
+                index = orderByStart - 1;
+                continue;
+            }
+        }
+        else if (orderByStart >= 0 && ['limit', 'offset', 'fetch', 'union', 'intersect', 'except', 'qualify'].includes(token)) {
+            return sql.slice(orderByStart, index);
+        }
+        index += match[0].length - 1;
+    }
+    return orderByStart >= 0 ? sql.slice(orderByStart) : '';
+}
+function splitTopLevelSelectItems(section) {
+    const items = [];
+    let current = '';
+    let depth = 0;
+    let quote;
+    for (let index = 0; index < section.length; index += 1) {
+        const char = section[index];
+        const next = section[index + 1];
+        if (quote) {
+            current += char;
+            if (char === quote) {
+                if (quote === "'" && next === "'") {
+                    current += next;
+                    index += 1;
+                    continue;
+                }
+                quote = undefined;
+            }
+            continue;
+        }
+        if (char === '"' || char === "'" || char === '`') {
+            quote = char;
+            current += char;
+            continue;
+        }
+        if (char === '(') {
+            depth += 1;
+            current += char;
+            continue;
+        }
+        if (char === ')') {
+            depth = Math.max(0, depth - 1);
+            current += char;
+            continue;
+        }
+        if (char === ',' && depth === 0) {
+            if (current.trim())
+                items.push(current.trim());
+            current = '';
+            continue;
+        }
+        current += char;
+    }
+    if (current.trim())
+        items.push(current.trim());
+    return items;
+}
+function selectOutputAlias(item) {
+    const identifier = '(?:"[^"]+"|`[^`]+`|[A-Za-z_][A-Za-z0-9_$]*)';
+    const explicit = new RegExp(`\\bAS\\s+(${identifier})\\s*$`, 'i').exec(item);
+    if (explicit?.[1]) {
+        return { alias: cleanSqlIdentifier(explicit[1]), expression: item.slice(0, explicit.index).trim() };
+    }
+    const implicit = new RegExp(`(?:\\bEND|\\)|\\])\\s+(${identifier})\\s*$`, 'i').exec(item);
+    if (!implicit?.[1])
+        return undefined;
+    const alias = cleanSqlIdentifier(implicit[1]);
+    if (!alias || SQL_OUTPUT_ALIAS_STOPWORDS.has(alias.toLowerCase()))
+        return undefined;
+    return { alias, expression: item.slice(0, implicit.index).trim() };
+}
+const SQL_OUTPUT_ALIAS_STOPWORDS = new Set(['asc', 'desc', 'from', 'group', 'having', 'limit', 'order', 'where']);
+function cleanSqlIdentifier(value) {
+    return value.trim().replace(/^(["`])|(["`])$/g, '');
+}
+function expressionReferencesColumn(expression, column) {
+    const normalized = cleanSqlIdentifier(column);
+    if (!normalized || !/^[A-Za-z_][A-Za-z0-9_$]*$/.test(normalized))
+        return false;
+    const escaped = normalized.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    return new RegExp(`(?:^|[^A-Za-z0-9_$])(?:[A-Za-z_][A-Za-z0-9_$]*\\s*\\.\\s*)?${escaped}(?=$|[^A-Za-z0-9_$])`, 'i')
+        .test(expression);
+}
+function normalizeProof(proven) {
+    const evidence = {};
+    for (const entry of proven) {
+        const key = normalizeQualifiedIdentifier(entry.identifier);
+        if (!key)
+            continue;
+        const existing = evidence[key];
+        if (!existing || evidenceRank(entry.evidence) > evidenceRank(existing))
+            evidence[key] = entry.evidence;
+    }
+    return { evidence, provenIdentifiers: Object.keys(evidence).sort() };
+}
+function verifyBinding(authority, check) {
+    if (check.bindings !== undefined && fingerprintSqlBindings(check.bindings) !== authority.bindingsFingerprint) {
+        return failure('The SQL bindings differ from the authorized execution.', true);
+    }
+    for (const field of ['runId', 'executionId', 'snapshotId', 'planId', 'targetFingerprint']) {
+        const expected = check[field];
+        const actual = authority[field];
+        if (expected !== undefined && expected !== actual) {
+            return failure(`The execution ${field} does not match the authorized request.`, true);
+        }
+    }
+    return { ok: true, unproven: [], drifted: false };
+}
+function failure(reason, drifted) {
+    return { ok: false, unproven: [], drifted, reason };
+}
+function requiredIdentity(value, label) {
+    const normalized = value?.trim();
+    // A runless host cannot accidentally turn a global/default execution into a
+    // valid capability. The random fallback is isolated per invocation, never
+    // shared in a registry, and is useful only inside the supplied closure.
+    return normalized || `${label}:${randomUUID()}`;
+}
+/** Missing generated-execution scope is a fail-closed condition, not a value to mint. */
+function requiredCapabilityIdentity(value) {
+    const normalized = value?.trim();
+    return normalized || undefined;
+}
+function normalizeQualifiedIdentifier(value) {
+    return value
+        .trim()
+        .split('.')
+        .map((part) => part.trim().replace(/^["`\[]|["`\]]$/g, '').toLowerCase())
+        .filter(Boolean)
+        .join('.');
+}
+function relationAliasesInSql(sql) {
+    const aliases = new Map();
+    const stopwords = new Set(['where', 'group', 'order', 'limit', 'having', 'join', 'left', 'right', 'inner', 'outer', 'full', 'cross', 'on', 'union']);
+    // The validator remains the authority for SQL parsing. This small parser only
+    // maps a parser-reported alias back to its exact relation spelling, and does
+    // not try to infer a relation from the last segment of an identifier.
+    const relation = '(?:"[^"]+"|`[^`]+`|\\[[^\\]]+\\]|[A-Za-z_][A-Za-z0-9_$]*)(?:\\s*\\.\\s*(?:"[^"]+"|`[^`]+`|\\[[^\\]]+\\]|[A-Za-z_][A-Za-z0-9_$]*))*';
+    const matcher = new RegExp(`\\b(?:from|join)\\s+(${relation})(?:\\s+(?:as\\s+)?([A-Za-z_][A-Za-z0-9_$]*))?`, 'gi');
+    for (const match of sql.matchAll(matcher)) {
+        const source = match[1]?.trim();
+        const alias = match[2]?.trim();
+        if (!source)
+            continue;
+        aliases.set(normalizeQualifiedIdentifier(source), source);
+        if (alias && !stopwords.has(alias.toLowerCase()))
+            aliases.set(normalizeQualifiedIdentifier(alias), source);
+    }
+    return aliases;
+}
+function evidenceRank(source) {
+    switch (source) {
+        case 'compiler': return 3;
+        case 'preview': return 2;
+        case 'schema_tool': return 1;
+        case 'catalog': return 0;
+    }
+}
+function stableBindingsValue(value) {
+    if (value === null)
+        return 'null';
+    if (value === undefined)
+        return 'undefined';
+    if (typeof value === 'string')
+        return JSON.stringify(value);
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return JSON.stringify(value);
+    if (typeof value === 'bigint')
+        return JSON.stringify(value.toString());
+    if (value instanceof Date)
+        return JSON.stringify(value.toISOString());
+    if (Array.isArray(value))
+        return `[${value.map(stableBindingsValue).join(',')}]`;
+    if (typeof value === 'object') {
+        const record = value;
+        return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableBindingsValue(record[key])}`).join(',')}}`;
+    }
+    return JSON.stringify(String(value));
+}
+//# sourceMappingURL=sql-authorization.js.map

package/dist/agentic/sql-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-authorization.js","sourceRoot":"","sources":["../../src/agentic/sql-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAyDrD;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACxB,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,OAAO,CAAC,UAA0E;QAChF,MAAM,QAAQ,GAAG,GAAG,UAAU,CAAC,KAAK,SAAS,UAAU,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAQD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,KASnD;IACC,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IAC7E,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE;QACtD,UAAU;QACV,MAAM;QACN,iBAAiB;QACjB,mBAAmB,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjE,uBAAuB,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;QAClD,GAAG,eAAe;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAUzC;IACC,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;QAC3C,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE;QACtD,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;QAC1D,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,mBAAmB,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjE,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;QACzC,GAAG,eAAe;QAClB,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,UAA2C,EAC3C,YAAoB,EACpB,QAA+B,EAAE;IAEjC,IAAI,cAAc,CAAC,YAAY,CAAC,KAAK,UAAU,CAAC,uBAAuB,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,+DAA+D,EAAE,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAsC,EACtC,GAAW,EACX,UAAiC,EACjC,QAA+B,EAAE;IAEjC,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,cAAc,EAAE,CAAC;QACzD,OAAO,OAAO,CAAC,oEAAoE,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CACzF,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU;aACpC,GAAG,CAAC,4BAA4B,CAAC;aACjC,MAAM,CAAC,OAAO,CAAC;YAChB,wEAAwE;YACxE,wEAAwE;aACvE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,GAAW,EACX,UAAsC;IAEtC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtH,MAAM,eAAe,GAAG,CAAC,QAA4B,EAAsB,EAAE;QAC3E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC,CAAC;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,kBAAkB,GAAG,iCAAiC,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACxB,GAAG,SAAS;QACZ,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3C,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1F,kEAAkE;YAClE,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,aAAa,IAAI,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,aAAa,CAAC;YAC1F,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,CAAC,CAAC;KACH,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iCAAiC,CACxC,GAAW,EACX,UAAsC,EACtC,eAAqE;IAErE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,4BAA4B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACzC,yEAAyE;YACzE,4DAA4D;YAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK;gBAAE,OAAO,EAAE,CAAC;YACzF,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC7E,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAkC,CAAC;IACvC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAClC,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACrD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,KAAK,KAAK,QAAQ;YAAE,WAAW,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9D,IAAI,KAAK,KAAK,MAAM,IAAI,WAAW,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC/E,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAClD,MAAM,gBAAgB,GAAG,IAAI;aAC1B,IAAI,EAAE;aACN,OAAO,CAAC,oDAAoD,EAAE,EAAE,CAAC;aACjE,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;eACjC,4BAA4B,CAAC,gBAAgB,CAAC,KAAK,eAAe,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAkC,CAAC;IACvC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAClC,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACrD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,YAAY,GAAG,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,EAAE,EAAE,CAAC;gBACP,YAAY,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACtD,KAAK,GAAG,YAAY,GAAG,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;QACH,CAAC;aAAM,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxH,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAkC,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,IAAI,CAAC;YAChB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAClC,OAAO,IAAI,IAAI,CAAC;oBAChB,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC/B,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/C,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,6CAA6C,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,aAAa,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACtG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,0BAA0B,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAElH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAkB,EAAE,MAAc;IACpE,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAClE,OAAO,IAAI,MAAM,CAAC,8DAA8D,OAAO,sBAAsB,EAAE,GAAG,CAAC;SAChH,IAAI,CAAC,UAAU,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,MAA2E;IACjG,MAAM,QAAQ,GAAuC,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CACpB,SAA0C,EAC1C,KAA4B;IAE5B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAC7G,OAAO,OAAO,CAAC,wDAAwD,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,CAAU,EAAE,CAAC;QACnG,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC,iBAAiB,KAAK,yCAAyC,EAAE,IAAI,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,OAAgB;IAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,KAAa;IAChE,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,UAAU,IAAI,GAAG,KAAK,IAAI,UAAU,EAAE,EAAE,CAAC;AAClD,CAAC;AAED,yFAAyF;AACzF,SAAS,0BAA0B,CAAC,KAAyB;IAC3D,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,UAAU,IAAI,SAAS,CAAC;AACjC,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa;IACjD,OAAO,KAAK;SACT,IAAI,EAAE;SACN,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;SACxE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACrJ,8EAA8E;IAC9E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,QAAQ,GAAG,oIAAoI,CAAC;IACtJ,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,wBAAwB,QAAQ,gDAAgD,EAAE,IAAI,CAAC,CAAC;IACnH,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1B,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;QACzB,KAAK,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChI,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC"}