@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/local-dev/personal-secret-ledger.d.ts

@@ -0,0 +1,75 @@
+import { type PersonalSecretLedgerIdentity, type PersonalSecretLedgerRecord } from '../secrets/personal-ledger.js';
+import { type FleetProcessIdentity, type ProcessIdentityProbe } from './fleet-lock.js';
+import { type PrivateStateSecurity } from './private-state.js';
+export declare const PERSONAL_SECRET_LEDGERS_DIRECTORY: "personal-secret-ledgers";
+export declare const PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION: 1;
+export interface PersonalSecretLedgerLockRecord {
+    acquiredAt: string;
+    owner: FleetProcessIdentity;
+    schemaVersion: typeof PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION;
+    slice: string;
+    stage: string;
+    token: string;
+}
+export interface PersonalSecretLedgerLock {
+    path: string;
+    record: PersonalSecretLedgerLockRecord;
+}
+export declare function personalSecretLedgerPath(appData: string, slice: string, stage: string): string;
+export declare function personalSecretLedgerLockPath(appData: string, slice: string, stage: string): string;
+export declare function assertPersonalSecretLedgerLocation(input: {
+    appData: string;
+    path: string;
+    slice: string;
+    stage: string;
+}, security?: PrivateStateSecurity): string;
+export declare function readPersonalSecretLedger(input: {
+    appData: string;
+    expectedIdentity?: PersonalSecretLedgerIdentity;
+    security?: PrivateStateSecurity;
+    slice: string;
+    stage: string;
+}): PersonalSecretLedgerRecord | undefined;
+export declare function writePersonalSecretLedger(input: {
+    appData: string;
+    lock: PersonalSecretLedgerLock;
+    record: PersonalSecretLedgerRecord;
+    security?: PrivateStateSecurity;
+}): PersonalSecretLedgerRecord;
+export declare function recordPersonalSecretLogicalName(input: {
+    appData: string;
+    identity: PersonalSecretLedgerIdentity;
+    lock: PersonalSecretLedgerLock;
+    logicalName: string;
+    security?: PrivateStateSecurity;
+}): PersonalSecretLedgerRecord;
+export declare function forgetPersonalSecretLogicalName(input: {
+    appData: string;
+    identity: PersonalSecretLedgerIdentity;
+    lock: PersonalSecretLedgerLock;
+    logicalName: string;
+    security?: PrivateStateSecurity;
+}): PersonalSecretLedgerRecord;
+export declare function listPersonalSecretLedgersForStage(input: {
+    appData: string;
+    security?: PrivateStateSecurity;
+    stage: string;
+}): readonly PersonalSecretLedgerRecord[];
+/**
+ * Acquires one non-waiting, process-bound lock for the full remote mutation
+ * ceremony. A live owner produces a bounded conflict, an ambiguous owner
+ * fails closed, and a stale lock is reclaimed only after PID-reuse-safe
+ * absence proof.
+ */
+export declare function acquirePersonalSecretLedgerLock(input: {
+    appData: string;
+    slice: string;
+    stage: string;
+}, options?: {
+    now?: string;
+    owner?: FleetProcessIdentity;
+    processProbe?: (owner: FleetProcessIdentity) => ProcessIdentityProbe;
+    security?: PrivateStateSecurity;
+    token?: string;
+}): PersonalSecretLedgerLock;
+export declare function releasePersonalSecretLedgerLock(lock: PersonalSecretLedgerLock, security?: PrivateStateSecurity): void;

package/src/local-dev/personal-secret-ledger.js

@@ -0,0 +1,391 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION = exports.PERSONAL_SECRET_LEDGERS_DIRECTORY = void 0;
+exports.personalSecretLedgerPath = personalSecretLedgerPath;
+exports.personalSecretLedgerLockPath = personalSecretLedgerLockPath;
+exports.assertPersonalSecretLedgerLocation = assertPersonalSecretLedgerLocation;
+exports.readPersonalSecretLedger = readPersonalSecretLedger;
+exports.writePersonalSecretLedger = writePersonalSecretLedger;
+exports.recordPersonalSecretLogicalName = recordPersonalSecretLogicalName;
+exports.forgetPersonalSecretLogicalName = forgetPersonalSecretLogicalName;
+exports.listPersonalSecretLedgersForStage = listPersonalSecretLedgersForStage;
+exports.acquirePersonalSecretLedgerLock = acquirePersonalSecretLedgerLock;
+exports.releasePersonalSecretLedgerLock = releasePersonalSecretLedgerLock;
+const deterministic_order_js_1 = require("../deterministic-order.js");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const personal_ledger_js_1 = require("../secrets/personal-ledger.js");
+const contract_validation_js_1 = require("./contract-validation.js");
+const errors_js_1 = require("./errors.js");
+const fleet_lock_js_1 = require("./fleet-lock.js");
+const personal_stage_js_1 = require("./personal-stage.js");
+const process_identity_js_1 = require("./process-identity.js");
+const private_state_js_1 = require("./private-state.js");
+exports.PERSONAL_SECRET_LEDGERS_DIRECTORY = 'personal-secret-ledgers';
+exports.PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION = 1;
+function ledgerError(message) {
+    throw new errors_js_1.LocalDevContractError('invalid-state', message);
+}
+function normalizedAppData(appData) {
+    if (!(0, node_path_1.isAbsolute)(appData)) {
+        return ledgerError('Personal secret ledger appData must be absolute.');
+    }
+    return (0, node_path_1.resolve)(appData);
+}
+function personalStage(stage) {
+    if (stage !== stage.trim() || !(0, personal_stage_js_1.isFrameworkPersonalStage)(stage)) {
+        return ledgerError('Personal secret ledger stage must be the exact framework personal stage.');
+    }
+    return stage;
+}
+function ledgerRoot(appData) {
+    return (0, node_path_1.join)(normalizedAppData(appData), exports.PERSONAL_SECRET_LEDGERS_DIRECTORY);
+}
+function sliceDirectory(appData, slice) {
+    return (0, node_path_1.join)(ledgerRoot(appData), (0, fleet_lock_js_1.validateFleetIdentitySlug)(slice, 'Personal secret ledger Slice'));
+}
+function personalSecretLedgerPath(appData, slice, stage) {
+    return (0, node_path_1.join)(sliceDirectory(appData, slice), `${personalStage(stage)}.json`);
+}
+function personalSecretLedgerLockPath(appData, slice, stage) {
+    return `${personalSecretLedgerPath(appData, slice, stage)}.lock`;
+}
+function assertPersonalSecretLedgerLocation(input, security = {}) {
+    const appData = normalizedAppData(input.appData);
+    let canonicalAppData;
+    try {
+        canonicalAppData = (0, node_fs_1.realpathSync)(appData);
+    }
+    catch {
+        return ledgerError('Personal secret ledger appData must exist before ledger access.');
+    }
+    if (canonicalAppData !== appData ||
+        !(0, node_path_1.isAbsolute)(input.path) ||
+        (0, node_path_1.resolve)(input.path) !== input.path) {
+        return ledgerError('Personal secret ledger location must use canonical absolute paths.');
+    }
+    (0, private_state_js_1.assertPrivatePath)(appData, 'directory', security);
+    const expected = personalSecretLedgerPath(appData, input.slice, input.stage);
+    if (input.path !== expected) {
+        return ledgerError('Personal secret ledger path does not match appData, Slice, and personal stage.');
+    }
+    const root = ledgerRoot(appData);
+    const directory = sliceDirectory(appData, input.slice);
+    for (const candidate of [root, directory]) {
+        if ((0, node_fs_1.existsSync)(candidate)) {
+            (0, private_state_js_1.assertPrivatePath)(candidate, 'directory', security);
+            if ((0, node_fs_1.realpathSync)(candidate) !== candidate) {
+                return ledgerError('Personal secret ledger parent must be canonical and non-aliased.');
+            }
+        }
+    }
+    if ((0, node_fs_1.existsSync)(expected)) {
+        (0, private_state_js_1.assertPrivatePath)(expected, 'file', security);
+        if ((0, node_fs_1.realpathSync)(expected) !== expected) {
+            return ledgerError('Personal secret ledger file must be canonical and non-aliased.');
+        }
+    }
+    return expected;
+}
+function validateLedger(value, expectedIdentity) {
+    try {
+        return (0, personal_ledger_js_1.validatePersonalSecretLedgerRecord)(value, expectedIdentity);
+    }
+    catch {
+        return ledgerError('Personal secret ledger state is malformed or belongs to a different backend; clean it under its recorded account and Region.');
+    }
+}
+function readPersonalSecretLedger(input) {
+    const security = input.security ?? {};
+    const path = personalSecretLedgerPath(input.appData, input.slice, input.stage);
+    if (!(0, node_fs_1.existsSync)(path))
+        return undefined;
+    try {
+        assertPersonalSecretLedgerLocation({
+            appData: input.appData,
+            path,
+            slice: input.slice,
+            stage: input.stage,
+        }, security);
+        const record = validateLedger(JSON.parse((0, private_state_js_1.readPrivateFile)(path, security).toString('utf8')));
+        if (!input.expectedIdentity)
+            return record;
+        const expectedIdentity = (0, personal_ledger_js_1.createPersonalSecretLedgerRecord)(input.expectedIdentity, []);
+        try {
+            return (0, personal_ledger_js_1.validatePersonalSecretLedgerRecord)(record, expectedIdentity);
+        }
+        catch {
+            if (record.logicalNames.length === 0)
+                return undefined;
+            return ledgerError('Personal secret ledger state belongs to a different backend; clean it under its recorded account and Region.');
+        }
+    }
+    catch (error) {
+        if (error instanceof errors_js_1.LocalDevContractError)
+            throw error;
+        return ledgerError('Personal secret ledger cannot be read safely; clean it under its recorded account and Region.');
+    }
+}
+function writePersonalSecretLedger(input) {
+    const security = input.security ?? {};
+    const record = validateLedger(input.record);
+    const appData = normalizedAppData(input.appData);
+    (0, private_state_js_1.ensurePrivateDirectory)(appData, security);
+    assertPersonalSecretLedgerLockHeld({
+        appData,
+        slice: record.slice,
+        stage: record.stage,
+    }, input.lock, security);
+    const root = ledgerRoot(appData);
+    const directory = sliceDirectory(appData, record.slice);
+    assertPersonalSecretLedgerLocation({
+        appData,
+        path: personalSecretLedgerPath(appData, record.slice, record.stage),
+        slice: record.slice,
+        stage: record.stage,
+    }, security);
+    (0, private_state_js_1.ensurePrivateDirectory)(root, security);
+    (0, private_state_js_1.ensurePrivateDirectory)(directory, security);
+    (0, private_state_js_1.atomicWritePrivateFile)(personalSecretLedgerPath(appData, record.slice, record.stage), (0, personal_ledger_js_1.serializePersonalSecretLedgerRecord)(record), security);
+    return record;
+}
+function recordPersonalSecretLogicalName(input) {
+    const existing = readPersonalSecretLedger({
+        appData: input.appData,
+        expectedIdentity: input.identity,
+        security: input.security,
+        slice: input.identity.slice,
+        stage: input.identity.stage,
+    });
+    const names = new Set(existing?.logicalNames ?? []);
+    names.add(input.logicalName);
+    return writePersonalSecretLedger({
+        appData: input.appData,
+        lock: input.lock,
+        record: (0, personal_ledger_js_1.createPersonalSecretLedgerRecord)(input.identity, [...names]),
+        security: input.security,
+    });
+}
+function forgetPersonalSecretLogicalName(input) {
+    const existing = readPersonalSecretLedger({
+        appData: input.appData,
+        expectedIdentity: input.identity,
+        security: input.security,
+        slice: input.identity.slice,
+        stage: input.identity.stage,
+    });
+    const names = (existing?.logicalNames ?? []).filter((logicalName) => logicalName !== input.logicalName);
+    return writePersonalSecretLedger({
+        appData: input.appData,
+        lock: input.lock,
+        record: (0, personal_ledger_js_1.createPersonalSecretLedgerRecord)(input.identity, names),
+        security: input.security,
+    });
+}
+function listPersonalSecretLedgersForStage(input) {
+    const root = ledgerRoot(input.appData);
+    if (!(0, node_fs_1.existsSync)(root))
+        return Object.freeze([]);
+    const security = input.security ?? {};
+    const stage = personalStage(input.stage);
+    const appData = normalizedAppData(input.appData);
+    if ((0, node_fs_1.realpathSync)(appData) !== appData) {
+        return ledgerError('Personal secret ledger appData must be canonical before ledger enumeration.');
+    }
+    (0, private_state_js_1.assertPrivatePath)(appData, 'directory', security);
+    (0, private_state_js_1.assertPrivatePath)(root, 'directory', security);
+    const records = [];
+    for (const entry of (0, node_fs_1.readdirSync)(root, { withFileTypes: true })) {
+        if (!entry.isDirectory() || entry.isSymbolicLink()) {
+            return ledgerError('Personal secret ledger directory contains ambiguous state.');
+        }
+        const slice = (0, fleet_lock_js_1.validateFleetIdentitySlug)(entry.name, 'Personal secret ledger Slice');
+        const record = readPersonalSecretLedger({
+            appData: input.appData,
+            security,
+            slice,
+            stage,
+        });
+        if (record)
+            records.push(record);
+    }
+    return Object.freeze(records.sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.slice, right.slice)));
+}
+function validateLockOwner(value) {
+    (0, contract_validation_js_1.assertRecord)(value, 'Personal secret ledger lock owner');
+    (0, contract_validation_js_1.assertExactProperties)(value, ['pid', 'processIdentity', 'startedAt'], [], 'Personal secret ledger lock owner');
+    return Object.freeze({
+        pid: (0, contract_validation_js_1.requireInteger)(value.pid, 'Personal secret ledger lock owner pid', 1, 2_147_483_647),
+        processIdentity: (0, contract_validation_js_1.requireBoundedString)(value.processIdentity, 'Personal secret ledger lock owner processIdentity', { maximumLength: 128, pattern: contract_validation_js_1.LOCAL_DEV_TOKEN_PATTERN }),
+        startedAt: (0, contract_validation_js_1.requireIsoTimestamp)(value.startedAt, 'Personal secret ledger lock owner startedAt'),
+    });
+}
+function validateLockRecord(value) {
+    try {
+        (0, contract_validation_js_1.assertRecord)(value, 'Personal secret ledger lock');
+        (0, contract_validation_js_1.assertExactProperties)(value, ['acquiredAt', 'owner', 'schemaVersion', 'slice', 'stage', 'token'], [], 'Personal secret ledger lock');
+        if (value.schemaVersion !== exports.PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION) {
+            throw new Error('unsupported lock schema');
+        }
+        return Object.freeze({
+            acquiredAt: (0, contract_validation_js_1.requireIsoTimestamp)(value.acquiredAt, 'Personal secret ledger lock acquiredAt'),
+            owner: validateLockOwner(value.owner),
+            schemaVersion: exports.PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION,
+            slice: (0, fleet_lock_js_1.validateFleetIdentitySlug)(value.slice, 'Personal secret ledger lock Slice'),
+            stage: personalStage((0, contract_validation_js_1.requireBoundedString)(value.stage, 'Personal secret ledger lock stage', {
+                maximumLength: 36,
+            })),
+            token: (0, contract_validation_js_1.requireBoundedString)(value.token, 'Personal secret ledger lock token', { maximumLength: 32, pattern: /^[a-f0-9]{32}$/ }),
+        });
+    }
+    catch {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock is malformed; refuse mutation until its ownership is resolved.');
+    }
+}
+function readLock(path, security) {
+    try {
+        return validateLockRecord(JSON.parse((0, private_state_js_1.readPrivateFile)(path, security).toString('utf8')));
+    }
+    catch (error) {
+        if (error instanceof errors_js_1.LocalDevContractError &&
+            error.classification === 'stale-state-ambiguous') {
+            throw error;
+        }
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock cannot be read safely.');
+    }
+}
+function sameLock(left, right) {
+    return (left.acquiredAt === right.acquiredAt &&
+        left.owner.pid === right.owner.pid &&
+        left.owner.processIdentity === right.owner.processIdentity &&
+        left.owner.startedAt === right.owner.startedAt &&
+        left.schemaVersion === right.schemaVersion &&
+        left.slice === right.slice &&
+        left.stage === right.stage &&
+        left.token === right.token);
+}
+function assertPersonalSecretLedgerLockHeld(input, lock, security) {
+    if (typeof lock !== 'object' ||
+        lock === null ||
+        !(0, node_path_1.isAbsolute)(lock.path) ||
+        (0, node_path_1.resolve)(lock.path) !== lock.path) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger mutation requires an exact lock handle.');
+    }
+    const expected = validateLockRecord(lock.record);
+    const expectedPath = personalSecretLedgerLockPath(input.appData, input.slice, input.stage);
+    if (lock.path !== expectedPath ||
+        expected.slice !== input.slice ||
+        expected.stage !== input.stage) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger mutation lock differs from the ledger identity.');
+    }
+    assertNoLockTransitionRemnant(expectedPath);
+    const existing = readLock(expectedPath, security);
+    if (!sameLock(existing, expected)) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger mutation does not own the current lock.');
+    }
+}
+function assertNoLockTransitionRemnant(path) {
+    const directory = (0, node_path_1.dirname)(path);
+    if (!(0, node_fs_1.existsSync)(directory))
+        return;
+    const prefix = `.${(0, node_path_1.basename)(path)}.`;
+    if ((0, node_fs_1.readdirSync)(directory).some((entry) => entry.startsWith(prefix) &&
+        (entry.endsWith('.release') || entry.endsWith('.stale')))) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'A prior personal secret ledger lock transition is ambiguous.');
+    }
+}
+function moveAndRemoveExactLock(path, record, disposition, security) {
+    const movedPath = (0, node_path_1.join)((0, node_path_1.dirname)(path), `.${(0, node_path_1.basename)(path)}.${record.token}.${disposition}`);
+    if ((0, node_fs_1.existsSync)(movedPath)) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'A prior personal secret ledger lock transition is ambiguous.');
+    }
+    try {
+        (0, node_fs_1.renameSync)(path, movedPath);
+    }
+    catch {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock changed during ownership transition.');
+    }
+    const moved = readLock(movedPath, security);
+    if (!sameLock(moved, record)) {
+        if (!(0, node_fs_1.existsSync)(path))
+            (0, node_fs_1.renameSync)(movedPath, path);
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock identity changed during ownership transition.');
+    }
+    try {
+        (0, node_fs_1.unlinkSync)(movedPath);
+    }
+    catch {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock transition could not be completed.');
+    }
+}
+/**
+ * Acquires one non-waiting, process-bound lock for the full remote mutation
+ * ceremony. A live owner produces a bounded conflict, an ambiguous owner
+ * fails closed, and a stale lock is reclaimed only after PID-reuse-safe
+ * absence proof.
+ */
+function acquirePersonalSecretLedgerLock(input, options = {}) {
+    const security = options.security ?? {};
+    (0, private_state_js_1.ensurePrivateDirectory)(normalizedAppData(input.appData), security);
+    const ledgerPath = personalSecretLedgerPath(input.appData, input.slice, input.stage);
+    assertPersonalSecretLedgerLocation({
+        ...input,
+        path: ledgerPath,
+    }, security);
+    const path = personalSecretLedgerLockPath(input.appData, input.slice, input.stage);
+    const acquiredAt = (0, contract_validation_js_1.requireIsoTimestamp)(options.now ?? new Date().toISOString(), 'Personal secret ledger lock acquiredAt');
+    let owner;
+    try {
+        owner = options.owner ?? (0, process_identity_js_1.captureProcessIdentity)(process.pid);
+    }
+    catch {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock requires a PID-reuse-safe process identity.');
+    }
+    const record = validateLockRecord({
+        acquiredAt,
+        owner,
+        schemaVersion: exports.PERSONAL_SECRET_LEDGER_LOCK_SCHEMA_VERSION,
+        slice: input.slice,
+        stage: input.stage,
+        token: options.token ?? (0, node_crypto_1.randomBytes)(16).toString('hex'),
+    });
+    const serialized = `${JSON.stringify(record, null, 2)}\n`;
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+        assertNoLockTransitionRemnant(path);
+        if ((0, private_state_js_1.createPrivateFileExclusive)(path, serialized, security)) {
+            return Object.freeze({ path, record });
+        }
+        const existing = readLock(path, security);
+        const probe = (options.processProbe ?? process_identity_js_1.probeProcessIdentity)(existing.owner);
+        if (probe === 'matching') {
+            throw new errors_js_1.LocalDevContractError('operation-conflict', 'Another personal secret mutation is active for this Slice and personal stage.');
+        }
+        if (probe === 'ambiguous') {
+            throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock ownership is ambiguous; refuse mutation.');
+        }
+        moveAndRemoveExactLock(path, existing, 'stale', security);
+    }
+    throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock changed repeatedly during acquisition.');
+}
+function releasePersonalSecretLedgerLock(lock, security = {}) {
+    if (typeof lock !== 'object' ||
+        lock === null ||
+        !(0, node_path_1.isAbsolute)(lock.path) ||
+        (0, node_path_1.resolve)(lock.path) !== lock.path) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock release requires an exact lock handle.');
+    }
+    const expected = validateLockRecord(lock.record);
+    const expectedBasename = `${expected.stage}.json.lock`;
+    if ((0, node_path_1.basename)(lock.path) !== expectedBasename ||
+        (0, node_path_1.basename)((0, node_path_1.dirname)(lock.path)) !== expected.slice ||
+        (0, node_path_1.basename)((0, node_path_1.dirname)((0, node_path_1.dirname)(lock.path))) !== exports.PERSONAL_SECRET_LEDGERS_DIRECTORY) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock release path differs from its identity.');
+    }
+    const existing = readLock(lock.path, security);
+    if (!sameLock(existing, expected)) {
+        throw new errors_js_1.LocalDevContractError('stale-state-ambiguous', 'Personal secret ledger lock release does not own the current lock.');
+    }
+    moveAndRemoveExactLock(lock.path, expected, 'release', security);
+}
+//# sourceMappingURL=personal-secret-ledger.js.map

package/src/local-dev/personal-secret-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-secret-ledger.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/personal-secret-ledger.ts"],"names":[],"mappings":";;;AA+FA,4DAMC;AAED,oEAMC;AAED,gFAuDC;AAeD,4DA8CC;AAED,8DAsCC;AAED,0EAsBC;AAED,0EAuBC;AAED,8EAuCC;AA6ND,0EAmFC;AAED,0EAmCC;AA1rBD,sEAAyD;AACzD,6CAA0C;AAC1C,qCAMiB;AACjB,yCAAyE;AAEzE,sEAMuC;AACvC,qEAOkC;AAClC,2CAAoD;AACpD,mDAIyB;AACzB,2DAA+D;AAC/D,+DAG+B;AAC/B,yDAO4B;AAEf,QAAA,iCAAiC,GAC5C,yBAAkC,CAAC;AACxB,QAAA,0CAA0C,GAAG,CAAU,CAAC;AAgBrE,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,IAAI,iCAAqB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC,IAAA,sBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC,kDAAkD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAA,mBAAO,EAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAA,4CAAwB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,WAAW,CAChB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,IAAA,gBAAI,EAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,yCAAiC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,OAAO,IAAA,gBAAI,EACT,UAAU,CAAC,OAAO,CAAC,EACnB,IAAA,yCAAyB,EAAC,KAAK,EAAE,8BAA8B,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAAe,EACf,KAAa,EACb,KAAa;IAEb,OAAO,IAAA,gBAAI,EAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,4BAA4B,CAC1C,OAAe,EACf,KAAa,EACb,KAAa;IAEb,OAAO,GAAG,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;AACnE,CAAC;AAED,SAAgB,kCAAkC,CAChD,KAKC,EACD,WAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,gBAAgB,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAChB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IACE,gBAAgB,KAAK,OAAO;QAC5B,CAAC,IAAA,sBAAU,EAAC,KAAK,CAAC,IAAI,CAAC;QACvB,IAAA,mBAAO,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,EAClC,CAAC;QACD,OAAO,WAAW,CAChB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAA,oCAAiB,EAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,WAAW,CAChB,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1C,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAA,oCAAiB,EAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,WAAW,CAChB,kEAAkE,CACnE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAA,oCAAiB,EAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,IAAA,sBAAY,EAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,WAAW,CAChB,gEAAgE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,gBAA+C;IAE/C,IAAI,CAAC;QACH,OAAO,IAAA,uDAAkC,EAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAChB,8HAA8H,CAC/H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,wBAAwB,CAAC,KAMxC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,wBAAwB,CACnC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,kCAAkC,CAChC;YACE,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,EACD,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAC3B,IAAI,CAAC,KAAK,CAAC,IAAA,kCAAe,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,gBAAgB;YAAE,OAAO,MAAM,CAAC;QAC3C,MAAM,gBAAgB,GAAG,IAAA,qDAAgC,EACvD,KAAK,CAAC,gBAAgB,EACtB,EAAE,CACH,CAAC;QACF,IAAI,CAAC;YACH,OAAO,IAAA,uDAAkC,EAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvD,OAAO,WAAW,CAChB,8GAA8G,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iCAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,OAAO,WAAW,CAChB,+FAA+F,CAChG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAKzC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,IAAA,yCAAsB,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,kCAAkC,CAChC;QACE,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,EACD,KAAK,CAAC,IAAI,EACV,QAAQ,CACT,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,kCAAkC,CAChC;QACE,OAAO;QACP,IAAI,EAAE,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,EACD,QAAQ,CACT,CAAC;IACF,IAAA,yCAAsB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAA,yCAAsB,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAA,yCAAsB,EACpB,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAC7D,IAAA,wDAAmC,EAAC,MAAM,CAAC,EAC3C,QAAQ,CACT,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAM/C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,QAAQ;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;KAC5B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7B,OAAO,yBAAyB,CAAC;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,IAAA,qDAAgC,EAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;QACpE,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAM/C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,QAAQ;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;KAC5B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CACnD,CAAC;IACF,OAAO,yBAAyB,CAAC;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,IAAA,qDAAgC,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC;QAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,iCAAiC,CAAC,KAIjD;IACC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,IAAA,sBAAY,EAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,WAAW,CAChB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAA,oCAAiB,EAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAA,oCAAiB,EAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACnD,OAAO,WAAW,CAChB,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,yCAAyB,EACrC,KAAK,CAAC,IAAI,EACV,8BAA8B,CAC/B,CAAC;QACF,MAAM,MAAM,GAAG,wBAAwB,CAAC;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ;YACR,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAClB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAA,qCAAY,EAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IACzD,IAAA,8CAAqB,EACnB,KAAK,EACL,CAAC,KAAK,EAAE,iBAAiB,EAAE,WAAW,CAAC,EACvC,EAAE,EACF,mCAAmC,CACpC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,IAAA,uCAAc,EACjB,KAAK,CAAC,GAAG,EACT,uCAAuC,EACvC,CAAC,EACD,aAAa,CACd;QACD,eAAe,EAAE,IAAA,6CAAoB,EACnC,KAAK,CAAC,eAAe,EACrB,mDAAmD,EACnD,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,gDAAuB,EAAE,CACzD;QACD,SAAS,EAAE,IAAA,4CAAmB,EAC5B,KAAK,CAAC,SAAS,EACf,6CAA6C,CAC9C;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC;QACH,IAAA,qCAAY,EAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;QACnD,IAAA,8CAAqB,EACnB,KAAK,EACL,CAAC,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EACnE,EAAE,EACF,6BAA6B,CAC9B,CAAC;QACF,IAAI,KAAK,CAAC,aAAa,KAAK,kDAA0C,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,IAAA,4CAAmB,EAC7B,KAAK,CAAC,UAAU,EAChB,wCAAwC,CACzC;YACD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;YACrC,aAAa,EAAE,kDAA0C;YACzD,KAAK,EAAE,IAAA,yCAAyB,EAC9B,KAAK,CAAC,KAAK,EACX,mCAAmC,CACpC;YACD,KAAK,EAAE,aAAa,CAClB,IAAA,6CAAoB,EAAC,KAAK,CAAC,KAAK,EAAE,mCAAmC,EAAE;gBACrE,aAAa,EAAE,EAAE;aAClB,CAAC,CACH;YACD,KAAK,EAAE,IAAA,6CAAoB,EACzB,KAAK,CAAC,KAAK,EACX,mCAAmC,EACnC,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CACjD;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,4FAA4F,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,IAAY,EACZ,QAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,kBAAkB,CACvB,IAAI,CAAC,KAAK,CAAC,IAAA,kCAAe,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,iCAAqB;YACtC,KAAK,CAAC,cAAc,KAAK,uBAAuB,EAChD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,oDAAoD,CACrD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,IAAoC,EACpC,KAAqC;IAErC,OAAO,CACL,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG;QAClC,IAAI,CAAC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,KAAK,CAAC,eAAe;QAC1D,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS;QAC9C,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;QAC1C,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CACzC,KAIC,EACD,IAA8B,EAC9B,QAA8B;IAE9B,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,CAAC;QACtB,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAChC,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,4BAA4B,CAC/C,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,IACE,IAAI,CAAC,IAAI,KAAK,YAAY;QAC1B,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC9B,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAC9B,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAY;IACjD,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC;QAAE,OAAO;IACnC,MAAM,MAAM,GAAG,IAAI,IAAA,oBAAQ,EAAC,IAAI,CAAC,GAAG,CAAC;IACrC,IACE,IAAA,qBAAW,EAAC,SAAS,CAAC,CAAC,IAAI,CACzB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAC3D,EACD,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAY,EACZ,MAAsC,EACtC,WAAgC,EAChC,QAA8B;IAE9B,MAAM,SAAS,GAAG,IAAA,gBAAI,EACpB,IAAA,mBAAO,EAAC,IAAI,CAAC,EACb,IAAI,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,WAAW,EAAE,CACpD,CAAC;IACF,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,IAAA,oBAAU,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;YAAE,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,IAAA,oBAAU,EAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,+BAA+B,CAC7C,KAIC,EACD,UAMI,EAAE;IAEN,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAA,yCAAsB,EAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,wBAAwB,CACzC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,kCAAkC,CAChC;QACE,GAAG,KAAK;QACR,IAAI,EAAE,UAAU;KACjB,EACD,QAAQ,CACT,CAAC;IACF,MAAM,IAAI,GAAG,4BAA4B,CACvC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,MAAM,UAAU,GAAG,IAAA,4CAAmB,EACpC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACvC,wCAAwC,CACzC,CAAC;IACF,IAAI,KAA2B,CAAC;IAChC,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAA,4CAAsB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,UAAU;QACV,KAAK;QACL,aAAa,EAAE,kDAA0C;QACzD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;KACxD,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAE1D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAA,6CAA0B,EAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,0CAAoB,CAAC,CAC1D,QAAQ,CAAC,KAAK,CACf,CAAC;QACF,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,iCAAqB,CAC7B,oBAAoB,EACpB,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,oEAAoE,CACrE,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAC7C,IAA8B,EAC9B,WAAiC,EAAE;IAEnC,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,CAAC;QACtB,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAChC,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,GAAG,QAAQ,CAAC,KAAK,YAAY,CAAC;IACvD,IACE,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,gBAAgB;QACxC,IAAA,oBAAQ,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK;QAC/C,IAAA,oBAAQ,EAAC,IAAA,mBAAO,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,yCAAiC,EAC3E,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,iCAAqB,CAC7B,uBAAuB,EACvB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACnE,CAAC"}

package/src/local-dev/personal-stage.d.ts

@@ -0,0 +1,18 @@
+export declare const PERSONAL_STAGE_RESOLVER_VERSION: 1;
+export declare const PERSONAL_STAGE_MAX_LENGTH: 36;
+export declare const PERSONAL_STAGE_IDENTITY_SOURCE: "os-account";
+export interface PersonalStageResolution {
+    identitySource: typeof PERSONAL_STAGE_IDENTITY_SOURCE;
+    resolverVersion: typeof PERSONAL_STAGE_RESOLVER_VERSION;
+    stage: string;
+}
+export interface PersonalStageResolver {
+    resolve(): PersonalStageResolution;
+}
+export declare function isFrameworkPersonalStage(stage: string): boolean;
+export declare function derivePersonalStage(accountName: string): string;
+export declare function createPersonalStageResolver(readAccountName?: () => string): PersonalStageResolver;
+export declare function rejectExplicitStageArguments(arguments_: readonly string[]): void;
+export declare function createPersonalStageEnvironment(stage: string, ambient?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function stripAmbientStageAuthority(ambient: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function createPersonalDevelopmentEnvironment(stage: string, ambient?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/src/local-dev/personal-stage.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERSONAL_STAGE_IDENTITY_SOURCE = exports.PERSONAL_STAGE_MAX_LENGTH = exports.PERSONAL_STAGE_RESOLVER_VERSION = void 0;
+exports.isFrameworkPersonalStage = isFrameworkPersonalStage;
+exports.derivePersonalStage = derivePersonalStage;
+exports.createPersonalStageResolver = createPersonalStageResolver;
+exports.rejectExplicitStageArguments = rejectExplicitStageArguments;
+exports.createPersonalStageEnvironment = createPersonalStageEnvironment;
+exports.stripAmbientStageAuthority = stripAmbientStageAuthority;
+exports.createPersonalDevelopmentEnvironment = createPersonalDevelopmentEnvironment;
+const node_crypto_1 = require("node:crypto");
+const node_os_1 = require("node:os");
+const stages_js_1 = require("../foundation/stages.js");
+const errors_js_1 = require("./errors.js");
+exports.PERSONAL_STAGE_RESOLVER_VERSION = 1;
+exports.PERSONAL_STAGE_MAX_LENGTH = 36;
+exports.PERSONAL_STAGE_IDENTITY_SOURCE = 'os-account';
+const PREFIX = 'personal-';
+const LOSSY_DIGEST_LENGTH = 8;
+const COMPETING_STAGE_VARIABLES = [
+    'EBK_STAGE',
+    'EBK_CONSUMER_STAGE',
+    'EBK_FOUNDATION_STAGE',
+    'SST_STAGE',
+    'STAGE',
+];
+const AMBIENT_AWS_AUTHORITY_VARIABLES = [
+    'AWS_ACCESS_KEY_ID',
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_SESSION_TOKEN',
+    'AWS_SECURITY_TOKEN',
+    'AWS_ROLE_ARN',
+    'AWS_ROLE_SESSION_NAME',
+    'AWS_WEB_IDENTITY_TOKEN_FILE',
+    'AWS_CONTAINER_AUTHORIZATION_TOKEN',
+    'AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE',
+    'AWS_CONTAINER_CREDENTIALS_FULL_URI',
+    'AWS_CONTAINER_CREDENTIALS_RELATIVE_URI',
+];
+function isFrameworkPersonalStage(stage) {
+    return (0, stages_js_1.isPersonalStage)(stage);
+}
+function normalizeAccountName(value) {
+    return value
+        .normalize('NFKD')
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .replace(/-+/g, '-');
+}
+function shortIdentityDigest(value) {
+    return (0, node_crypto_1.createHash)('sha256')
+        .update(value, 'utf8')
+        .digest('hex')
+        .slice(0, LOSSY_DIGEST_LENGTH);
+}
+function derivePersonalStage(accountName) {
+    if (typeof accountName !== 'string' ||
+        accountName.length === 0 ||
+        accountName !== accountName.trim()) {
+        throw new errors_js_1.LocalDevContractError('personal-identity-unavailable', 'The operating-system account name is unavailable or unsafe.');
+    }
+    const normalized = normalizeAccountName(accountName);
+    if (!normalized) {
+        throw new errors_js_1.LocalDevContractError('personal-identity-unavailable', 'The operating-system account name cannot form a personal stage.');
+    }
+    const maximumBodyLength = exports.PERSONAL_STAGE_MAX_LENGTH - PREFIX.length;
+    const lossless = normalized === accountName && normalized.length <= maximumBodyLength;
+    const body = lossless
+        ? normalized
+        : `${normalized
+            .slice(0, maximumBodyLength - LOSSY_DIGEST_LENGTH - 1)
+            .replace(/-+$/g, '')}-${shortIdentityDigest(accountName)}`;
+    const stage = `${PREFIX}${body}`;
+    if (!isFrameworkPersonalStage(stage)) {
+        throw new errors_js_1.LocalDevContractError('personal-identity-unavailable', 'The operating-system account name cannot form a bounded personal stage.');
+    }
+    return stage;
+}
+function createPersonalStageResolver(readAccountName = () => (0, node_os_1.userInfo)().username) {
+    return {
+        resolve() {
+            let accountName;
+            try {
+                accountName = readAccountName();
+            }
+            catch {
+                throw new errors_js_1.LocalDevContractError('personal-identity-unavailable', 'The operating-system account identity could not be read.');
+            }
+            return {
+                identitySource: exports.PERSONAL_STAGE_IDENTITY_SOURCE,
+                resolverVersion: exports.PERSONAL_STAGE_RESOLVER_VERSION,
+                stage: derivePersonalStage(accountName),
+            };
+        },
+    };
+}
+function rejectExplicitStageArguments(arguments_) {
+    const stageArgument = arguments_.find((value) => value === '--stage' || value.startsWith('--stage='));
+    if (stageArgument) {
+        throw new errors_js_1.LocalDevContractError('invalid-input', `${stageArgument.split('=')[0]} is not supported; Fleet development always uses the framework-derived personal stage.`);
+    }
+}
+function createPersonalStageEnvironment(stage, ambient = process.env) {
+    if (stage.length > exports.PERSONAL_STAGE_MAX_LENGTH ||
+        !isFrameworkPersonalStage(stage)) {
+        throw new errors_js_1.LocalDevContractError('invalid-input', 'A valid framework-derived personal stage is required.');
+    }
+    const environment = stripAmbientStageAuthority(ambient);
+    environment.EBK_STAGE = stage;
+    environment.EBK_CONSUMER_STAGE = stage;
+    environment.EBK_FOUNDATION_STAGE = 'development';
+    return environment;
+}
+function stripAmbientStageAuthority(ambient) {
+    const environment = { ...ambient };
+    for (const name of COMPETING_STAGE_VARIABLES) {
+        delete environment[name];
+    }
+    return environment;
+}
+function createPersonalDevelopmentEnvironment(stage, ambient = process.env) {
+    const environment = createPersonalStageEnvironment(stage, ambient);
+    for (const name of AMBIENT_AWS_AUTHORITY_VARIABLES) {
+        delete environment[name];
+    }
+    return environment;
+}
+//# sourceMappingURL=personal-stage.js.map

package/src/local-dev/personal-stage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-stage.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/personal-stage.ts"],"names":[],"mappings":";;;AA4CA,4DAEC;AAkBD,kDAqCC;AAED,kEAqBC;AAED,oEAYC;AAED,wEAkBC;AAED,gEAQC;AAED,oFASC;AAnLD,6CAAyC;AACzC,qCAAmC;AAEnC,uDAA0D;AAC1D,2CAAoD;AAEvC,QAAA,+BAA+B,GAAG,CAAU,CAAC;AAC7C,QAAA,yBAAyB,GAAG,EAAW,CAAC;AACxC,QAAA,8BAA8B,GAAG,YAAqB,CAAC;AAEpE,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,yBAAyB,GAAG;IAChC,WAAW;IACX,oBAAoB;IACpB,sBAAsB;IACtB,WAAW;IACX,OAAO;CACC,CAAC;AAEX,MAAM,+BAA+B,GAAG;IACtC,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,oBAAoB;IACpB,cAAc;IACd,uBAAuB;IACvB,6BAA6B;IAC7B,mCAAmC;IACnC,wCAAwC;IACxC,oCAAoC;IACpC,wCAAwC;CAChC,CAAC;AAYX,SAAgB,wBAAwB,CAAC,KAAa;IACpD,OAAO,IAAA,2BAAe,EAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,WAAW,KAAK,WAAW,CAAC,IAAI,EAAE,EAClC,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,+BAA+B,EAC/B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,iCAAqB,CAC7B,+BAA+B,EAC/B,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,iCAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpE,MAAM,QAAQ,GACZ,UAAU,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,IAAI,iBAAiB,CAAC;IACvE,MAAM,IAAI,GAAG,QAAQ;QACnB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,GAAG,UAAU;aACV,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,CAAC,CAAC;aACrD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,iCAAqB,CAC7B,+BAA+B,EAC/B,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,2BAA2B,CACzC,kBAAgC,GAAG,EAAE,CAAC,IAAA,kBAAQ,GAAE,CAAC,QAAQ;IAEzD,OAAO;QACL,OAAO;YACL,IAAI,WAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,WAAW,GAAG,eAAe,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,iCAAqB,CAC7B,+BAA+B,EAC/B,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,cAAc,EAAE,sCAA8B;gBAC9C,eAAe,EAAE,uCAA+B;gBAChD,KAAK,EAAE,mBAAmB,CAAC,WAAW,CAAC;aACxC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,4BAA4B,CAC1C,UAA6B;IAE7B,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAC/D,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,wFAAwF,CACvH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,8BAA8B,CAC5C,KAAa,EACb,UAA6B,OAAO,CAAC,GAAG;IAExC,IACE,KAAK,CAAC,MAAM,GAAG,iCAAyB;QACxC,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACxD,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC;IAC9B,WAAW,CAAC,kBAAkB,GAAG,KAAK,CAAC;IACvC,WAAW,CAAC,oBAAoB,GAAG,aAAa,CAAC;IACjD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAgB,0BAA0B,CACxC,OAA0B;IAE1B,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAgB,oCAAoC,CAClD,KAAa,EACb,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,WAAW,GAAG,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,+BAA+B,EAAE,CAAC;QACnD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}